Working copy of the CICS Global exit XMNOUT
Posting here and posting on the CICS-Listserv: Does anyone have a working copy of the CICS exit XMNOUT that would share? I just want to suppress SMF records from the QMSG transaction. TIA, Tracy -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Brylane GDG zap for 2.2
The "Brylane GDG zap" was an old Share zap that many customers used prior to the fancy restart packages being developed. I think I have it straight, the creation of a GDG gets cataloged at the end of step so this zap "NOPS" a couple of instructions and delays the cataloging until the end of the job. I have disassembled IEFBA461 and it looks radically different between 2.2 and 2.1. I do believe quite a few people still use this zap so I was hoping someone has skinned this creature before me :-) -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Lizette Koehler Sent: Wednesday, September 20, 2017 10:45 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Brylane GDG zap for 2.2 Have you contacted the vendor for the zap that can be used with UA82857? I see that IBM removed the storage area that some vendors used for zapping. So this PTF puts it back. So do you still need this zap on your system? What does it do for you? APAR Identifier .. OA51532 Last Changed 17/03/01 IEFA107I MAY NOT BE ISSUED FOR ALLOCATION OF GDG(0) WHEN BATCH_RCLMIGDS=PARALLEL IS RUNNING AFTER O 16/11/17 PTF PECHANGE When a job attempts to reference a generation data set that does not exist, the job may incorrectly allocate a different generation of the GDG rather than failing with message IEFA107I. This can only occur when ALLOCxx option SYSTEM BATCH_RCLMIGDS= PARALLEL is in effect. PROBLEM CONCLUSION: Allocation generation data set processing is corrected to handle a generation data set that does not exist as a "data set not found" condition, and issue IEFA107I. Is that your issue? Or is there something more the zap does for you Lizette > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] > On Behalf Of Tracy Adams > Sent: Wednesday, September 20, 2017 6:44 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Brylane GDG zap for 2.2 > > Looking for the Brylane GDG zap for Z/OS 2.2 with ptf UA82857. Can > someone share? > > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Brylane GDG zap for 2.2
Looking for the Brylane GDG zap for Z/OS 2.2 with ptf UA82857. Can someone share? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: simple questions on migrating to a new mastercat
Thanks Tom, the way I first interrupted the manual was incorrect... you can use recatalog and catalog in the same define command and get the desired results (an entry in the second mastcat that include the SMS attributes). -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Tom Marchant Sent: Thursday, August 17, 2017 4:44 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: simple questions on migrating to a new mastercat On Thu, 17 Aug 2017 20:23:25 +, Tracy Adams wrote: >So I am built a new master catalog for the 2.2 migration. >I have some sys1. Datasets that live on various sms volumes >that I want add catalog entries to in my new mastcat. If I >just use IDCAMS define nonvsam I get a good entry but there is no SMS >information. >I can't use "recatalog" because the catalog names are different. Yes you can, for SYS1. data sets. See the IDCAMS manual. -- Tom Marchant -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
simple questions on migrating to a new mastercat
So I am built a new master catalog for the 2.2 migration. I have some sys1. Datasets that live on various sms volumes that I want add catalog entries to in my new mastcat. If I just use IDCAMS define nonvsam I get a good entry but there is no SMS information. I can't use "recatalog" because the catalog names are different. Mergecat would move the entry and REPRO will copy all the junk I want to leave behind. What is the correct procedure to recreate an SMS managed SYS1 dataset into a second MASTCAT? TIA Tracy -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Controlling TCPIP performance
For obvious reasons we want to run the TCPIP address at a very high dispatching priority. There are times though when we want to throttle back certain functions of the TCPIP stack. I will use FTP as the immediate example. I really don’t want a file transfer to dominate the system :-) TIA for your thoughts and ideas. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: RACF and public keys
Awesome, thanks for sharing in advance. We did get the key to work finally... it was a permissions issue! Thanks all!!! -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Kirk Wolf Sent: Thursday, March 02, 2017 10:01 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: RACF and public keys FYI, we will be presenting a SHARE session next week on this subject: *Finding the Needle in a Haystack - Diagnosing Common OpenSSH Problems* - Room: Blossom Hill I,II - Session Number: 20125 Thursday, March 09, 2017: 10:00 AM - 11:00 AM http://events.share.org/Winter2017/Public/SessionDetails.aspx?FromPage=Sessions.aspx=1900=20 For this particular issue (file permissions), see slide 45 of the presentation Kirk Wolf Dovetailed Technologies http://dovetail.com On Wed, Mar 1, 2017 at 2:29 PM, Paul Gilmartin < 000433f07816-dmarc-requ...@listserv.ua.edu> wrote: > On Wed, 1 Mar 2017 13:00:08 -0700, Jack J. Woehr wrote: > > >Mark Post wrote: > >> If you don't mind them accessing your system in this way (I have > >> severe > doubts about that), just put the key as-is into the target userid's > .ssh/authorized_keys file and have them give it a try. > > > >And make sure the dir .ssh is chmod 700 and the authorized_keys file > >is > chmod 600 or it won't work. > > > I believe .ssh chmod 711 works and I find it convenient for co-workers > to add me to their public_keys file. But I keep my authorized_keys > file 600 rather than 644 -- no need to support browsing. > > and (grand*)parent directories must not be writeable by anyone except > owner. > > -- gil > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: RACF and public keys
Thanks Mark and Allan! -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Post Sent: Wednesday, March 01, 2017 2:41 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: RACF and public keys >>> On 3/1/2017 at 02:04 PM, Tracy Adams <tad...@fbbrands.com> wrote: > I have a vendor that sent me a "public" key so they can SFTP into our > mainframe from a Linux box without have to supply the RACF password. > Yes they can sign in with a password and all works fine. I am new to > RACF and loading keys and the whole SFTP / ssh thing so bear with me! > > When I look at the key provided it starts off with this "ssh-rsa > B3NzaC1yc2EBI" The doc I have found from Dovetail for > Co:z indicates to get the .pub file into a MVS dataset in "text" > format then do a RACDCERT ADD command and then point to the RACF > keyring in $HOME/.ssh/authorized_keys. The RACDCERT command fails > indicating "The input data set does not contain a valid certificate." > And the DEBUG option provides no additional information. > > I am thinking I must have done something wrong getting the file from > Windows email to the mainframe... I simply used SFTP to move it from > c:\temp and I have tried both ASCII (looks good) and BINARY (looks binary). > > Is the .pub file simple in the wrong format for RACF and needs to be > converted? I'm pretty sure the public key they provided you was not intended to be used in conjunction with RACF (or any other ESM). That looks like a "plain old ssh" public key. If you don't mind them accessing your system in this way (I have severe doubts about that), just put the key as-is into the target userid's .ssh/authorized_keys file and have them give it a try. Mark Post -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
RACF and public keys
I have a vendor that sent me a "public" key so they can SFTP into our mainframe from a Linux box without have to supply the RACF password. Yes they can sign in with a password and all works fine. I am new to RACF and loading keys and the whole SFTP / ssh thing so bear with me! When I look at the key provided it starts off with this "ssh-rsa B3NzaC1yc2EBI" The doc I have found from Dovetail for Co:z indicates to get the .pub file into a MVS dataset in "text" format then do a RACDCERT ADD command and then point to the RACF keyring in $HOME/.ssh/authorized_keys. The RACDCERT command fails indicating "The input data set does not contain a valid certificate." And the DEBUG option provides no additional information. I am thinking I must have done something wrong getting the file from Windows email to the mainframe... I simply used SFTP to move it from c:\temp and I have tried both ASCII (looks good) and BINARY (looks binary). Is the .pub file simple in the wrong format for RACF and needs to be converted? Any help would be greatly appreciated! Tracy -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: XCFAS high CPU after z13s upgrade
Yes all prereq maintenance was applied :-) Yeah my next step was to open a problem with IBM, my hope was a dope slap with something obvious :-) -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Lizette Koehler Sent: Thursday, October 27, 2016 12:19 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: XCFAS high CPU after z13s upgrade Or you may wish to contact CA Sysview support as well. Could be that they are reporting data different? Did you put on all the z13 maintenance on for CA and IBM products before the upgrade? Lizette > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] > On Behalf Of Lizette Koehler > Sent: Thursday, October 27, 2016 9:16 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: XCFAS high CPU after z13s upgrade > > I might be faster to open an SR/PMR with IBM XCF. That way IBM can > determine if there is a bug or configuration issue for you > > Lizette > > > > -Original Message- > > From: IBM Mainframe Discussion List > > [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Tracy Adams > > Sent: Thursday, October 27, 2016 8:27 AM > > To: IBM-MAIN@LISTSERV.UA.EDU > > Subject: XCFAS high CPU after z13s upgrade > > > > Hi there all, > > > > Pardon my lack of experience with XCF but I lived in a UNI shell for > > years now I am enlightened to the world of XCF. I am wondering what > > could be wrong here and looking for your suggestions on where to go... > > > > Back ground: we were running two 196's using escon CTC connections > > with a 14 year old policy using two primary structures (small and > > large). One dedicated coupling facility and one LPAR. The shop > > keeps all the smf data but rarely runs Monitor III so I am in the > > process of looking for old type 74 records to get some comparison data. > > > > Upgrade: installed two z13s last weekend with ISA links. The VAR > > rewrote the CFRM policy to use six structures (1 & 2 for small, 3 & > > 4 for medium, 5 & > > 6 large). The dedicated coupling facility (on the F03 box) is > > defined for "thin dispatch". The VAR that installed the z13's > > recommended this coupling definition based on the faster ISA links > > and the use of thin > dispatch. > > > > The net result is that lpar MVSA's address space XCFAS, running on > > the F03, is now consuming over the 15 minute interval 10%+ cpu > > utilization every interval all day long. Using SYSVIEW and looking > > at the PLEXGRPS the IORt is pretty consistent in the 1000 total. > > The CPU for MVSA's XCFAS though is very jumpy, sub 1% for a couple > > of whacks of the enter key, 30-50% for a couple of whacks of the > > enter key. The monitor III display shows 86% of the xcf calls going > > through small structure 1, 13% of the xcf calls going through > > structure 3, and 1% going through structure 5. There is a little > > that hits structure 2 but it > is insignificant. XCFAS on MVSC, the M03 box running the couple lpar, > is < 1% > > CPU. Prior to the upgrade XCFAS on both systems averaged < 1% for most 15 > > minute intervals and peaked at 3% maybe once or twice a day for an interval. > > > > The bottom line is the MVSA image does two things for us, IDMS and batch. > > MVSC is CICS and DB2. The IDMS/CICS relationship is the majority of > > the XCF usage. Batch is getting WLM CPU delays due to high cpu from > > SYSTEM (xcfas) even though we added 20% more MSUs in the upgrade. > > > > I guess the real bottom line question though is why did my combined > > XCFAS cpu consumption go from an average of < 1 % on each MVS lpar > > to 10%+ on one and stayed the same on the other? > > > > Thanks in advanced for giving this post some time and energy :) > > > > Tracy -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
XCFAS high CPU after z13s upgrade
Hi there all, Pardon my lack of experience with XCF but I lived in a UNI shell for years now I am enlightened to the world of XCF. I am wondering what could be wrong here and looking for your suggestions on where to go... Back ground: we were running two 196's using escon CTC connections with a 14 year old policy using two primary structures (small and large). One dedicated coupling facility and one LPAR. The shop keeps all the smf data but rarely runs Monitor III so I am in the process of looking for old type 74 records to get some comparison data. Upgrade: installed two z13s last weekend with ISA links. The VAR rewrote the CFRM policy to use six structures (1 & 2 for small, 3 & 4 for medium, 5 & 6 large). The dedicated coupling facility (on the F03 box) is defined for "thin dispatch". The VAR that installed the z13's recommended this coupling definition based on the faster ISA links and the use of thin dispatch. The net result is that lpar MVSA's address space XCFAS, running on the F03, is now consuming over the 15 minute interval 10%+ cpu utilization every interval all day long. Using SYSVIEW and looking at the PLEXGRPS the IORt is pretty consistent in the 1000 total. The CPU for MVSA's XCFAS though is very jumpy, sub 1% for a couple of whacks of the enter key, 30-50% for a couple of whacks of the enter key. The monitor III display shows 86% of the xcf calls going through small structure 1, 13% of the xcf calls going through structure 3, and 1% going through structure 5. There is a little that hits structure 2 but it is insignificant. XCFAS on MVSC, the M03 box running the couple lpar, is < 1% CPU. Prior to the upgrade XCFAS on both systems averaged < 1% for most 15 minute intervals and peaked at 3% maybe once or twice a day for an interval. The bottom line is the MVSA image does two things for us, IDMS and batch. MVSC is CICS and DB2. The IDMS/CICS relationship is the majority of the XCF usage. Batch is getting WLM CPU delays due to high cpu from SYSTEM (xcfas) even though we added 20% more MSUs in the upgrade. I guess the real bottom line question though is why did my combined XCFAS cpu consumption go from an average of < 1 % on each MVS lpar to 10%+ on one and stayed the same on the other? Thanks in advanced for giving this post some time and energy :) Tracy -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
SAS and SMF 110 subtype 1 question
I am reading the 110 records with SAS and I want to extract the pertinent cpu time fields from the connector records... I have figured out looping of the connectors and mapping to the dictionary and have determined the first field I want (cpu dispatch time) is at +480. The CICS documentation indicates it is a "stopwatch" type and is 12 bytes long. I have tried many different SAS formats and have not gotten it right! What is the correct SAS input statement and the corresponding format? TIA, Tracy -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: SMPE receive order broken this morning?
Yeah, appears to be a problem on the ibm side... the same job that ran Friday and got a space error today returns "SSL Required" :-( -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Jousma, David Sent: Monday, August 15, 2016 10:49 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMPE receive order broken this morning? I found that I had to change thisoption. Was specifying AT-TLS prior to this. I found this info here: https://www.ibm.com/support/knowledgecenter/SSLTBW_2.1.0/com.ibm.zos.v2r1.gim3000/gim3116.htm TLSMECHANISM FTP ; AT-TLS will implement TLS ; security. _ Dave Jousma Manager Mainframe Engineering, Assistant Vice President david.jou...@53.com 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f 616.653.2717 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Donald J. Sent: Monday, August 15, 2016 10:42 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMPE receive order broken this morning? It appears their ftp server is only accepting TLS1.0 at the moment. All other options fail. == Info: TLSv1.1, TLS handshake, Client hello (1): => Send SSL data, 512 bytes (0x200) == Info: error:14077102:SSL routines:SSL23_GET_SERVER_HELLO:unsupported protocol == Info: Closing connection 0 The http server port 443 accepts 1.0/1.1/1.2. -- Donald J. dona...@4email.net On Mon, Aug 15, 2016, at 07:01 AM, Richards, Robert B. wrote: > Dave, > > It is not just you. I sent a note at 6:48am entitled " PTF order fulfillment > issues and getting HOLDDATA". > > I have not opened a SR yet, so if you get a quick reply, please post what > they say. > > In my case, a FTP GET for full HOLDDATA also failed. > > Bob > > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] > On Behalf Of Jousma, David > Sent: Monday, August 15, 2016 9:40 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: SMPE receive order broken this morning? > > All, > > I apologize if this has been asked, but I've been on vacation for the last > week or two. Last time it worked for me was prior to this. Seems like > something changed? Seems to be refused at IBM end. I do have ticket open > with them, but thought maybe I might have missed something. > > > /bin/ftp -e -v -f "//'SYS1.TCPPARMS(FTPSECUR)'" > > deliverycb-bld.dhe.ibm.com > > EZY2640I Using 'SYS1.TCPPARMS(FTPSECUR)' for local site configuration > parameters . > EZYFT25I Using //'TCPIP.STANDARD.TCPXLBIN' for FTP translation tables for the > co ntrol connection. > EZYFT31I Using //'TCPIP.STANDARD.TCPXLBIN' for FTP translation tables for the > da ta connection. > EZA1450I IBM FTP CS V2R2 > EZA1772I FTP: EXIT has been set. > EZYFT18I Using catalog '/usr/lib/nls/msg/C/ftpdmsg.cat' for FTP messages. > EZA1554I Connecting to: dispby-117.boulder.ibm.com 170.225.15.117 port: 21. > 220-IBM's internal systems must only be used for conducting IBM's > 220-business or for purposes authorized by IBM management. > 220- > 220-Use is subject to audit at any time by IBM management. > 220- > 220 dhebpcb01 secure FTP server ready. > EZA1701I >>> AUTH TLS > 234 SSLv23/TLSv1 > EZA2897I Authentication negotiation failed EZA2898I Unable to > successfully negotiate required authentication EZA1735I Std Return > Code = 10234, Error Code = 00017 > > _ > Dave Jousma > Manager Mainframe Engineering, Assistant Vice President > david.jou...@53.com > 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f > 616.653.2717 > > This e-mail transmission contains information that is confidential and may be > privileged. > It is intended only for the addressee(s) named above. If you receive this > e-mail in error, please do not read, copy or disseminate it in any manner. > If you are not the intended recipient, any disclosure, copying, distribution > or use of the contents of this information is prohibited. Please reply to the > message immediately by informing the sender that the message was misdirected. > After replying, please erase it from your computer system. Your assistance in > correcting this error is appreciated. > > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- http://www.fastmail.com - Send your email first class
Re: Another WLM question
So at what point with the service class get restricted based on the resource group settings? -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Staller, Allan Sent: Friday, May 13, 2016 1:36 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Another WLM question If there is room, the cpu will be used. When things get tight, the RG cap will be enforced. HTH, If you remember I had a situation where the CPU was hitting its four hour avg and soft capping itself. When this happens CICS and DB2 aren't allowed to flex above and I get max socket errors within the busiest CICS. At the advice of the group I set up a resource group and associated to a service class to batch jobs that I blame for running the service units up during the day initiating the capping. The resource group definition is CPU% based and I selected 20% max and 1 % min. Single jobs that are using this group regularly exceed the 20% max, multiple jobs really exceed the max collectively. Am I misunderstanding how this works? The goal was limit the number of SUs consumed by batch and spread it out longer in the day in hopes to avoid the capping. This email ? including attachments ? may contain confidential information. If you are not the intended recipient, do not copy, distribute or act on it. Instead, notify the sender immediately and delete the message. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Another WLM question
If you remember I had a situation where the CPU was hitting its four hour avg and soft capping itself. When this happens CICS and DB2 aren't allowed to flex above and I get max socket errors within the busiest CICS. At the advice of the group I set up a resource group and associated to a service class to batch jobs that I blame for running the service units up during the day initiating the capping. The resource group definition is CPU% based and I selected 20% max and 1 % min. Single jobs that are using this group regularly exceed the 20% max, multiple jobs really exceed the max collectively. Am I misunderstanding how this works? The goal was limit the number of SUs consumed by batch and spread it out longer in the day in hopes to avoid the capping. TIA, Tracy -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: WLM issue with a proposed solution
Thank you all for chiming in! Yeah the bottom line... figure out why those sub second transactions get stalled! Hard to tune your way out of a locking condition :-) I will check out the SYSSTC actual velocity... that is a good bench mark to what my max achievable would be around. Happy Friday Martin, sounds like you have written the book on this! Gotta go read about resource groups. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Scott Chapman Sent: Friday, April 29, 2016 6:40 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: WLM issue with a proposed solution >If your batch jobs are running Dicretionary at a DP lower than CICS, it >is very unlikely that they are causing significant CICS delays. True from a CPU perspective. But the batch jobs could be locking resources in DB2 that are delaying the CICS transactions. And if the batch jobs holding those locks are progressing very slowly due to running in discretionary when there's little CPU available, the locks may persist for an extended period of time, elongating CICS transaction response time. Or I saw a similar situation once where some batch queries exhausted the RID pool, which caused sub-second CICS transactions to start taking over 60 seconds. That's fortunately harder to do on the later versions of DB2. In short, while adjusting the goals very well may be in order, I'd be inclined to first look into the apparently unusually long running CICS transactions to identify why those particular transactions are taking a long time. Scott -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: WLM issue with a proposed solution
The importance (priority) of DB2 is set 2, as well as the CICS service class. It serves both the CICS and batch jobs. I only speak of dispatching priorities because isn't ultimately that is driven by the collective results of WLM? To Mark's question, I am not sure what is stalling those transactions, I will try to collect some delay information. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Martin Packer Sent: Thursday, April 28, 2016 3:49 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: WLM issue with a proposed solution Hello Tracy. What importance have you set DB2 address spaces' service class(es) to? Likewise the things it serves, such as CICS regions and CICS transactions/ If DB2 is getting locked out it could be caused by it being Imp 2 or something, rather than Imp 1 with a goal 70+. I also note you're mainly talking dispatching priorities rather than WLM language. Cheers, Martin Martin Packer, zChampion, Principal Systems Investigator, Worldwide Cloud & Systems Performance, IBM +44-7802-245-584 email: martin_pac...@uk.ibm.com Twitter / Facebook IDs: MartinPacker Blog: https://www.ibm.com/developerworks/mydeveloperworks/blogs/MartinPacker Podcast Series (With Marna Walle): https://developer.ibm.com/tv/category/mpt/ From: Tracy Adams <tad...@fbbrands.com> To: IBM-MAIN@LISTSERV.UA.EDU Date: 28/04/2016 19:22 Subject:WLM issue with a proposed solution Sent by:IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> So here is my issue: We have a soft capped LPAR that runs our DB2 and CICS regions and during the day some "marketing batch". On Wednesdays, the marketing batch (online submit via CICS) increases and by afternoon we hit our 4 hour soft cap. Once or twice while we are capped, the busiest CICS slow down to the point where some old automation kicks in to kill transactions over 45 seconds old, some of these transactions dump through DumpMaster, we then go to max sockets and more transactions dump and in 10 - 30 seconds all is fine again. What I see: The CICS regions have a DP around EC and are meeting their service goal of 99% under .5 seconds. But there are tens of thousands transactions that have led to this. The batch jobs (3-5 of them), while running 10 - 15 % cpu have a DP of C0 and are in a discretionary level of the service class. I believe the problem lies with the DB2 service class. That has a definition of velocity at 66 and it tends to run below that when there is more contention in the system. The DP of the DB2 region is F6. My theory: when this brown out occurs the resources are maxed out and the CICS regions being the ones that have meet their goal and will have to suffer many transactions missing the service goal to make the DP go up. They get hung up just long enough to cause the delays that trigger the "panic" automation to clear the stalled transactions. Chaos breaks out! My proposal: A. limit the batch jobs to a max of three by controlling open initiators for their job class. B. change the DB2 velocity to 60 C. Starve the CICS service goal by reducing it to 99% in .4 forcing his DP to be a little more desperate. Thoughts? TIA, Tracy -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Unless stated otherwise above: IBM United Kingdom Limited - Registered in England and Wales with number 741598. Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
WLM issue with a proposed solution
So here is my issue: We have a soft capped LPAR that runs our DB2 and CICS regions and during the day some "marketing batch". On Wednesdays, the marketing batch (online submit via CICS) increases and by afternoon we hit our 4 hour soft cap. Once or twice while we are capped, the busiest CICS slow down to the point where some old automation kicks in to kill transactions over 45 seconds old, some of these transactions dump through DumpMaster, we then go to max sockets and more transactions dump and in 10 - 30 seconds all is fine again. What I see: The CICS regions have a DP around EC and are meeting their service goal of 99% under .5 seconds. But there are tens of thousands transactions that have led to this. The batch jobs (3-5 of them), while running 10 - 15 % cpu have a DP of C0 and are in a discretionary level of the service class. I believe the problem lies with the DB2 service class. That has a definition of velocity at 66 and it tends to run below that when there is more contention in the system. The DP of the DB2 region is F6. My theory: when this brown out occurs the resources are maxed out and the CICS regions being the ones that have meet their goal and will have to suffer many transactions missing the service goal to make the DP go up. They get hung up just long enough to cause the delays that trigger the "panic" automation to clear the stalled transactions. Chaos breaks out! My proposal: A. limit the batch jobs to a max of three by controlling open initiators for their job class. B. change the DB2 velocity to 60 C. Starve the CICS service goal by reducing it to 99% in .4 forcing his DP to be a little more desperate. Thoughts? TIA, Tracy -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: New to RACF
Awesome! Yes, who would think to check the Z/OS (jes) log for a failure in USS (I did check the /var/logs but since the REXX was being invoked via batch I should have looked! There was a glowing message that bpxroot was revoked. Unrevoked it and the seteuid now works :-) Thanks!! -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Zelden Sent: Thursday, April 21, 2016 1:11 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: New to RACF On Thu, 21 Apr 2016 16:50:20 +, Tracy Adams <tad...@fbbrands.com> wrote: > Yes, I am allowed to su with no complaints Ok. And I saw in another post you confirmed the Reason code (errnojrs) that is being displayed back to you (although it doesn't look correct). Did you check syslog at the time of the error to see if there are any hints there? If it were me, I'd probably copy "copytree" and turn on some rexx tracing also. I have used copytree, but I also use this exec (typically in batch) to copy from one file system (or dir) to another. It has the "from" and "to" directories hard coded. Mostly I used this when migrating everything from HFS to zFS years ago. I assume it would have the same error, but maybe adding a TRACE I or TRACE R would confirm you are getting the same reason code as displayed in copytree. /* rexx */ /*=*/ fromdir = '/etc/' todir = '/service/' /*=*/ call syscalls 'ON' address syscall 'geteuid' uidval = retval say 'Current UID = 'uidval if uidval <> 0 then do say 'Attempting to set to UID=0' address syscall 'setreuid 0 0' /* address syscall 'seteuid 0' */ uidval2 = retval if uidval2 <> 0 then do say 'Unable to set to UID=0' exit 12 end Else say 'New UID = 'uidval2 end address syscall 'chdir' fromdir say 'Copying files from' fromdir 'to' todir call bpxwunix 'pax -rwvCMX -p eW . ' todir Best regards, Mark -- Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS ITIL v3 Foundation Certified mailto:m...@mzelden.com Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html Systems Programming expert at http://search390.techtarget.com/ateExperts/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: New to RACF
Yes, I am allowed to su with no complaints -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Zelden Sent: Thursday, April 21, 2016 12:48 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: New to RACF On Thu, 21 Apr 2016 16:01:25 +, Tracy Adams <tad...@fbbrands.com> wrote: >I am new to RACF so I apologize for stupid questions... > >I am running a REXX script under USS to clone the HFS/ZFS files from one >system to another. IBM provides a nice sample called copytree in the >/samples/ dir of USS. This utility has run fine for us in the past. Now when >I execute it with the -s flag it generates and error: > >seteuid 0 >Error codes: 0 -1 A4 B7F1C00 >EMVSSAF2ERR: SAF/RACF error > >Dubious nothing has changed in the RACF world and this use to work. The only >thing I can find is that the userid needs acc(read) to bpx.superuser which it >does. Where do I begin to debug this RACF error? > Those codes all seem to point to not having access to bpx.superuser. Can you get into a shell (TSO OMVS) and issue the su command without a failure? From the code copytree code: 'Error codes:' rc retval errno errnojr errno A4 = SAF/RACF error Is that B7F1C00 missing a digit? Best regards , Mark -- Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS ITIL v3 Foundation Certified mailto:m...@mzelden.com Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html Systems Programming expert at http://search390.techtarget.com/ateExperts/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: New to RACF
Thanks, I will join that list as well :-) -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Lizette Koehler Sent: Thursday, April 21, 2016 12:40 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: New to RACF If you were not aware, there is a list for RACF To join, if you have not done so, use this URL RACFhttp://www.listserv.uga.edu/archives/racf-l.html Lizette > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] > On Behalf Of Tracy Adams > Sent: Thursday, April 21, 2016 9:01 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: New to RACF > > I am new to RACF so I apologize for stupid questions... > > I am running a REXX script under USS to clone the HFS/ZFS files from > one system to another. IBM provides a nice sample called copytree in > the /samples/ dir of USS. This utility has run fine for us in the > past. Now when I execute it with the -s flag it generates and error: > > seteuid 0 > Error codes: 0 -1 A4 B7F1C00 > EMVSSAF2ERR: SAF/RACF error > > Dubious nothing has changed in the RACF world and this use to work. > The only thing I can find is that the userid needs acc(read) to > bpx.superuser which it does. Where do I begin to debug this RACF error? > > TIA, > > Tracy > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: New to RACF
Thanks, I confirm that that line is copied correctly I guess that narrows it down to 16 different possibilities :-) I will pull up the c00x codes to see where it leads me, probably to a call to IBM. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Tony Harminc Sent: Thursday, April 21, 2016 12:39 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: New to RACF On 21 April 2016 at 12:01, Tracy Adams <tad...@fbbrands.com> wrote: > seteuid 0 > Error codes: 0 -1 A4 B7F1C00 > EMVSSAF2ERR: SAF/RACF error > > Dubious nothing has changed in the RACF world and this use to work. The only > thing I can find is that the userid needs acc(read) to bpx.superuser which it > does. Where do I begin to debug this RACF error? Are you sure the line with the error codes was copied accurately? I would expect the last piece to have 8 hex digits; it's the errno2 value. The A4 (EMVSSAF2ERR) is saying it's a RACF error encountered by the UNIX seteuid() service. The last two bytes (4 digits) of that 8 character hex string should be the RACF return and reason codes from the RACF IRRSEU00 callable service, described in the RACF Callable Services book. If it's really coming out as 7 digits, then I'd call IBM and complain. If it got mangled or typo'd, then look up the corrected version in the Callable Services book and see if that leads you further. All this seems to have to do with authorization to change the effective UID. Tony H. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
New to RACF
I am new to RACF so I apologize for stupid questions... I am running a REXX script under USS to clone the HFS/ZFS files from one system to another. IBM provides a nice sample called copytree in the /samples/ dir of USS. This utility has run fine for us in the past. Now when I execute it with the -s flag it generates and error: seteuid 0 Error codes: 0 -1 A4 B7F1C00 EMVSSAF2ERR: SAF/RACF error Dubious nothing has changed in the RACF world and this use to work. The only thing I can find is that the userid needs acc(read) to bpx.superuser which it does. Where do I begin to debug this RACF error? TIA, Tracy -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: OMVS (TCPIP) internals question
So an update to my quest of knowledge... https://en.wikipedia.org/wiki/Unix_domain_socket and http://www.thomasstover.com/uds.html The bottom line is this form of "socket" is integral for any process to process communication not just networking, amy I going down the right path? From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> on behalf of Tracy Adams <tad...@fbbrands.com> Sent: Thursday, April 14, 2016 9:38 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: OMVS (TCPIP) internals question I am trying to understand the function of TCPIP and its "max sockets". We are experiencing a problem that happens infrequently where our CICS application closing down the DataPower port with an error that indicates max sockets has been reached. IBM support has confirmed this in a dump. They say our max and current values are at 65,535 when the dump was initiated and to increase our maxsockets setting in BPXPRMxx. We are set at the default of 64000. Its maximum value is 16 million. This parameter is in the "network" definition of a "a single sockets file system". What I am grappling with is what is a "single sockets file system" and how the heck can we be hitting 65k units of anything? We are not that big! (so I think) So who and what consumes all these entries in this single socket file system? How can I monitor this? Netstat shows active connections between 700 - 900 so I don't believe this is the right spot to be looking. Quick explanations would be great, recommendations on readings that will clarify would be awesome as well. TIA, Tracy -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
OMVS (TCPIP) internals question
I am trying to understand the function of TCPIP and its "max sockets". We are experiencing a problem that happens infrequently where our CICS application closing down the DataPower port with an error that indicates max sockets has been reached. IBM support has confirmed this in a dump. They say our max and current values are at 65,535 when the dump was initiated and to increase our maxsockets setting in BPXPRMxx. We are set at the default of 64000. Its maximum value is 16 million. This parameter is in the "network" definition of a "a single sockets file system". What I am grappling with is what is a "single sockets file system" and how the heck can we be hitting 65k units of anything? We are not that big! (so I think) So who and what consumes all these entries in this single socket file system? How can I monitor this? Netstat shows active connections between 700 - 900 so I don't believe this is the right spot to be looking. Quick explanations would be great, recommendations on readings that will clarify would be awesome as well. TIA, Tracy -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: New to Z/OSMF - SOLVED
So what I found is that the UI90034 ptf was applied back in January during the monthly compliance maintenance round and the ptf actions must have been bypassed as the steps to complete the migration from V2r1 to V2r1 with the ptf were not completed. The bottom line is this ptf requires you to create a parmlib member if you want to use the plugins. Once I did that the plugins are visible on the webpage. Thanks for you help! From: IBM Mainframe Discussion Liston behalf of Kurt Quackenbush Sent: Monday, April 4, 2016 9:05 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: New to Z/OSMF >> Trying to get this up and running with all plugins. All steps go >> well including the -finish step and the step to add the plugins >> with the overridefile. I start IZUSVR1 up and wait to start the >> browser interface. After I see the stc quiet down I launch the >> browser only to see the core apps and no plugins. Don't forget you need to define the security profiles to be authorized to the individual plug-ins. All are described and defined in the z/OSMF Configuration Guide. Kurt Quackenbush -- IBM, SMP/E Development -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: New to Z/OSMF
Thanks Kurt, yes I did run the generated script to add the RACF definitions for each plugin. I verified within RACF that the definitions are there. What is puzzling me is the "active_configuration.cfg" shows the flags of the plugins as IZU_RMF_CONFIGURE=N. What I have picked up in my reading is that these come "configuration_planned.cfg", sure enough the plugins there are set to =N as well. This is the PARMLIB parser process, what is the input to populate "_planned"? My disconnect is the izusetup scripts always use /etc/zomsf, and the all the references to "user defined configuration" points to /var/zosmf. What is the process to get the info from the /etc/zomsmf/izuconfig1.cfg to the /var/zosmf/configuration/ ? I am ready to punt this installation and implement UI90034, would this be easier? Tracy From: IBM Mainframe Discussion Liston behalf of Kurt Quackenbush Sent: Monday, April 4, 2016 9:05 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: New to Z/OSMF >> Trying to get this up and running with all plugins. All steps go >> well including the -finish step and the step to add the plugins >> with the overridefile. I start IZUSVR1 up and wait to start the >> browser interface. After I see the stc quiet down I launch the >> browser only to see the core apps and no plugins. Don't forget you need to define the security profiles to be authorized to the individual plug-ins. All are described and defined in the z/OSMF Configuration Guide. Kurt Quackenbush -- IBM, SMP/E Development -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: New to Z/OSMF
Thanks for the reply, it is 2.1. Sent from my iPhone > On Apr 3, 2016, at 3:23 PM, Jesse 1 Robinson <jesse1.robin...@sce.com> wrote: > > You don't say what z/OS you're running. I made it a point to research z/OSMF > at SHARE in San Antonio. Learned that z/OS 2.1 really needs UI90034 to make > the tool more manageable as in 2.2. I have installed UI90034 but not yet had > a chance to dive into upgrade from R13. UI90034 is supposed to make life a > lot easier under 2.1. > > . > . > . > J.O.Skip Robinson > Southern California Edison Company > Electric Dragon Team Paddler > SHARE MVS Program Co-Manager > 323-715-0595 Mobile > 626-302-7535 Office > robin...@sce.com > > > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of Tracy Adams > Sent: Sunday, April 03, 2016 10:41 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: (External):New to Z/OSMF > > Trying to get this up and running with all plugins. All steps go well > including the -finish step and the step to add the plugins with the > overridefile. I start IZUSVR1 up and wait to start the browser interface. > After I see the stc quiet down I launch the browser only to see the core apps > and no plugins. I look at the messages in the stc and see it is using > /var/zosmf/configuration and it stores the current values in > "active_configuration". Sure enough, all settings for IZU_xx_CONFIGURE and > the the others are all set to N. The files I used in the setup scripts were > all in the /etc/zosmf directories and my izuconfig1.cfg file there has all > the plugins as Y. > > > What did I do wrong and how do I get the "active" config file to recognize > the plugins? > > > TIA, > > > Tracy > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
New to Z/OSMF
Trying to get this up and running with all plugins. All steps go well including the -finish step and the step to add the plugins with the overridefile. I start IZUSVR1 up and wait to start the browser interface. After I see the stc quiet down I launch the browser only to see the core apps and no plugins. I look at the messages in the stc and see it is using /var/zosmf/configuration and it stores the current values in "active_configuration". Sure enough, all settings for IZU_xx_CONFIGURE and the the others are all set to N. The files I used in the setup scripts were all in the /etc/zosmf directories and my izuconfig1.cfg file there has all the plugins as Y. What did I do wrong and how do I get the "active" config file to recognize the plugins? TIA, Tracy -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN