Re: SMS & GDG SCRATCH option

2024-04-18 Thread Steve Pryor
Yes, that's correct. The ACS routines get control for new individual GDG 
generations at allocation time, not for catalog entries. The GDG base is a 
catalog entry and is created at IDCAMS DEFINE GDG time. So while the systemwide 
defaults can be set in IGGCATxx, they can be overridden by anyone defining a 
GDG by simply specifying the desired values in the DEFINE GDG control 
statement. 

Using ACC, which gets control at SVC 26 (DEFINE) time, one can set policy rules 
which will take precedence over both the IGGCATxx defaults and the IDCAMS 
DEFINE GDG specification. So if you wanted to force GDGs to be defined as 
extended-format, NOSCRATCH, FIFO, etc., you'd specify this in the ACC policy 
rules. You could also do things like have ACC check some arbitrary RACF 
resource to see if a user is authorized to specify SCRATCH or NOSCRATCH, etc.

Similarly, ACC policy rules can control the use of pretty much any IDCAMS 
parameter on DEFINE or DELETE as well as overriding any JCL or dynamic 
allocation values (space, VOLSER, UNIT, etc) for ordinary non-VSAM or VSAM 
datasets.

Steve Pryor
DTS Software, LLC
st...@dtssoftware.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


A question or two on zOS issues

2023-03-24 Thread Steve Pryor
There are a couple of pressing issues in z/OS that I'm sure many folks are 
aware of but about which there doesn't seem to be much being done. I'm curious 
as to what other IBM-MAINer's thoughts might be. Specifically, I'm talking 
about:

1.) migration to IBM's latest COBOL release, and

2.) the not-really-that-far-off issue of Year 2042

I've been asked several times recently whether we (a z/OS ISV) should consider 
developing products to address these issues. Frankly, though, I live in an 
ivory tower and while I sometime *think* I know what installations problems and 
needs are, I'm usually surprised to find that reality is quite different. So 
I'd like to throw a couple of questions out to the list for comment:

1.) Would a reporting utility that determined which COBOL programs were 
executed (and which ones weren't), and what release and options they were 
compiled with be significantly helpful in a COBOL migration? What other 
features would be nice to have? Or is this a low priority for most 
installations, who are perhaps trying to justify keeping the mainframe alive 
and/or conducting business as usual, let alone doing a COBOL migration project?

2.) It's rather shocking that 2042 is so close and not much seems to be 
happening. We are one of the vendors that have a date-simulation utility, but 
we don’t know if data centers have any near-term plans for 2042. Would it be 
worthwhile to have a 2042 date-simulation product now, or is everyone going to 
cross their fingers and try to use a test LPAR once the operating system fully 
supports 2042 dates?

Thanks for any comments and insight the IBM-MAIN hive mind might have.

Steve Pryor
CTO
DTS Software, LLC

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Courses for Storage Admin Newbies

2022-01-05 Thread Steve Pryor
There does indeed seem to be a lack of educational resources, not just for 
storage administration, but also particularly for 'newbies' to the platform. 
IBM seems to be trying to make progress with DFSMS Academy and such but there's 
a much bigger need since very few colleges teach much about the mainframe. We 
(DTS Software) don't have a formal 'course' (at least not yet), but I've done a 
lot of one-hour public webinars over the past few years that we've made 
available on the DTS website. Lately I've been concentrating on 'introductory' 
topics, and we've seen a real increase in attendance for those. You might find 
some of these useful.

Steve


Steve Pryor
DTS Software, LLC
st...@dtssoftware.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: "Wrong" Size Allocation with AVGREC?

2021-03-23 Thread Steve Pryor
I think we need to 'see the work'. You mention 'copying' the dataset. But 
allocation doesn't depend on the program being executed - only the SPACE 
specification. So if you allocate something like:

//DG2 EXEC PGM=IEBDG
//SYSPRINT DD SYSOUT=*  
//SEQOUT DD DSN=SJP.AVGR.DATA,DISP=(,CATLG),
// LRECL=80,BLKSIZE=27920,RECFM=FB,DSORG=PS,
// SPACE=(80,698),AVGREC=U   
//SYSIN DD *
 DSD OUTPUT=(SEQOUT)
 FD NAME=FIELD1,STARTLOC=1,LENGTH=4,PICTURE=4,B'0001',INDEX=1   
 CREATE QUANTITY=698,NAME=FIELD1   

And then run an IEHLIST against the resulting dataset, it should occupy one 
track: 

   CONTENTS OF VTOC ON VOL SMS007
   
---DATA SET NAME  SER NO  SEQNO  DATE.CRE  DATE.EXP 
 DATE.REF  EXT DSORG RECFM OPTCD BLKSIZE
SJP.AVGR.DATA SMS007  1  2021.08200.000 
 2021.0821  PS   FB 0027920 
SMS.IND   LRECL  KEYLEN  INITIAL ALLOC  2ND ALLOCEXTEND   LAST 
BLK(T-R-L)  DIR.REM  F2 OR F3(C-H-R)  DSCB(C-H-R)
S80TRKS   00BY  0   2   
1700   1   7
EATTR   

NS  

EXTENTS  NO  LOW(C-H)   HIGH(C-H)   

   0 4 134 13   

ON THE ABOVE DATA SET,THERE ARE  0 
EMPTY TRACK(S).   

One possibility is that the Default Device Geometry in the your SMS 
configuration is 47476 rather than 56664 (i.e., 3380 rather than 3390). If 
you're copying the dataset with an application such as Sort or something 
similar, the application may alter the output allocation or may automatically 
taken another extent. Another possibility is a vendor product such ours (ACC) 
or others (from BMC, CA, etc), that might automatically alter certain 
allocations.

Steve

Steve Pryor
DTS Software LLC
st...@dtssoftware.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: FTP-SSL from z/OS client to Linux

2021-03-02 Thread Steve Pryor
I have to remember to look at the IBM-MAIN list rather than the archives. 
Thanks, everybody, for your help. I'm glad to have another means of tracing for 
the (shudder) next time around.


Steve


Steve Pryor
DTS Software, LLC
st...@dtssoftware.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: FTP-SSL from z/OS client to Linux

2021-03-02 Thread Steve Pryor
Well, after considerable struggle involving setting up a completely new FTP 
server and experimenting with virtually every possible setting on both sides, 
it seems that this can occur if the TLS level used by the z/OS client isn't 
supported by the Linux ProFTPD server. Some settings rejiggering fixes it. But 
talk about a misleading message...

Steve


Steve Pryor
DTS Software, LLC
st...@dtssoftware.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: FTP-SSL from z/OS client to Linux

2021-02-28 Thread Steve Pryor
I thought perhaps that was it, since I didn't (previously) have the entire CA 
certificate chain on the keyring and I don't think the certificate was being 
presented. But I've corrected that and it seems to be using the correct 
certificate according to the trace below. But I'm still getting the same ' 
Content type 53 is not supported' error. Perhaps I'm not understanding 
something in the trace?

Steve Pryor
DTS Software, LLC
st...@dtssoftware.com

S0W1  MESSAGE   0001  03:04:16.329604  SSL_ENTRY 
  Job SJP1  Process 050102AA  Thread 0001  gsk_get_default_label 
  Handle 1FCA4AF0
 
S0W1  MESSAGE   0002  03:04:16.330203  SSL_EXIT  
  Job SJP1  Process 050102AA  Thread 0001  gsk_get_default_label 
  Exit status  (0)   
  Default label 'ExaVault FTP Server'
 
S0W1  MESSAGE   0008  03:04:16.330770  SSL_INFO  
  Job SJP1  Process 050102AA  Thread 0001  gsk_secure_socket_init
  Using client certificate 'ExaVault FTP Server' 
 
S0W1  MESSAGE   0008  03:04:16.331372  SSL_INFO  
  Job SJP1  Process 050102AA  Thread 0001  gsk_query_security_level  
  Security level 0x0007  
 
S0W1  MESSAGE   0008  03:04:16.331945  SSL_INFO  
  Job SJP1  Process 050102AA  Thread 0001  edit_ciphers  
  Initial SSL V2 cipher specs: 34
 
S0W1  MESSAGE   0008  03:04:16.332537  SSL_INFO  
  Job SJP1  Process 050102AA  Thread 0001  edit_ciphers  
  SSL V2 cipher specs: 34
S0W1  MESSAGE   0008  03:04:16.38  SSL_INFO 
 
  Job SJP1  Process 050102AA  Thread 0001  edit_ciphers 
 
  Initial SSL V3 2-character cipher specs:  
 

 
S0W1  MESSAGE   0008  03:04:16.333903  SSL_INFO 
 
  Job SJP1  Process 050102AA  Thread 0001  edit_ciphers 
 
  3538392F3233  
 

 
S0W1  MESSAGE   0008  03:04:16.335928  SSL_INFO 
 
  Job SJP1  Process 050102AA  Thread 0001  edit_ciphers 
 
  SSL V3 cipher specs: 3538392F3233 
 

 
S0W1  MESSAGE   0008  03:04:16.336795  SSL_INFO 
 
  Job SJP1  Process 050102AA  Thread 0001  default_setsocketoptions 
 
  FIONBIO turned off for socket 1   
 

 
S0W1  MESSAGE   0008  03:04:16.337704  SSL_INFO 
 
  Job SJP1  Process 050102AA  Thread 0001  default_setsocketoptions 
 
  TCP_NODELAY set for socket 1  
 

 
S0W1  MESSAGE   0008  03:04:16.338294  SSL_INFO 
 
  Job SJP1  Process 050102AA  Thread 0001  
gsk_perform_v3_client_handshake   
  Performing SSL V3 client handshake with 67.208.93.232.21. 
 

S0W1  MESSAGE   0001  03:04:16.338944  SSL_ENTRY
  Job SJP1  Process 050102AA  Thread 0001  crypto_generate_random_bytes 
  Length 32 

S0W1  MESSAGE   0002  03:04:16.339510  SSL_EXIT 
  Job SJP1  Process 050102AA  Thread 0001  crypto_generate_random_bytes 
  Exit status  (0)  

S0W1  MESSAGE

FTP-SSL from z/OS client to Linux

2021-02-28 Thread Steve Pryor
 Job SJP1  Process 0501028D  Thread 0001  gsk_secure_socket_init   
  SSL V3 client handshake failed with 67.208.93.232.21. 

The server seems to be objecting to the x'35' (decimal 53) in the 'ContentType' 
field of the CLIENT-HELLO message. In RFC8446 it says
" Implementations MUST NOT send record types not defined in this
   document unless negotiated by some extension.  If a TLS
   implementation receives an unexpected record type, it MUST terminate
   the connection with an "unexpected_message" alert. "

Does anyone have any idea why the z/OS client is doing this? Surely some people 
are doing FTPS from z/OS to Linux somewhere. I've tried it on a couple of 
different z/OS levels with the same result. Any help is much appreciated.

Steve Pryor
DTS Software, LLC
st...@dtssoftware.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: RMM/OAM/SMS

2021-01-28 Thread Steve Pryor
The storage group name is assigned by the storage group ACS routine. RMM 
appends the storage group name to the mount message and updates the Load 
Display to use the storage group name. This allows you to have different ranges 
of tape volumes for each storage group, i.e., the storage groups correspond to 
the RMM 'scratch pools'. If the tape volser doesn't matter, you can assign all 
the tapes to a single RMM scratch pool in the VLPOOL statement, or don't have 
the ACS routine assign a storage group.

Steve

Steve Pryor
DTS Software, LLC
st...@dtssoftware.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: TS7720 to EMC DLM migration

2020-12-24 Thread Steve Pryor
In answer to your question, there are plenty of "things to be done", depending 
upon factors such as:

- what tape management system do you have? Will the new technology share the 
scratch volser range or will a new one be used?
- will the migration be performed volume-by-volume ('cloning') or 
dataset-by-dataset (copy)?
- do applications maintain their own tape metadata repositories outside of the 
tape management system (CA-View, HSM, others)?
- how many drives/how much time will be available for the migration as opposed 
to production work?
- are the source/target volumes going to be SMS managed or will UNIT esoterics 
be used? 
- how many datasets and how much data needs to be migrated vs how much can 
'naturally' expire or roll off? What's the target date?
- who's going to perform the migration tasks? Contractors? Vendors? In-house 
staff?

There are lots of issues to consider. You might want to have a look at some of 
the Share proceedings on this topic. I've done a few of these in the past both 
as general education and in conjunction with our tape migration software (see 
Share Sessions such as 11020 and 14361, among many others).

Steve Pryor
DTS Software, Inc.
1.919.833.8426 x162
st...@dtssoftware.com
www.dtssoftware.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: System Exit

2020-06-04 Thread Steve Pryor
There are a couple of vendor products that could do this, including ours (SRS, 
which is our successor product to our original STOP-X37). You could, if you 
wanted to write your own IGGPRE00 exit, do this, but products such as SRS 
provide a lot more feature and function.

Steve Pryor
DTS Software, LLC
1.919.833.8426 x162
st...@dtssoftware.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN