Re: IBM sues PSI
P. Raulerson [EMAIL PROTECTED] wrote: I don't think they will ever target Hercules, even if someone puts out a commercial product with it. Does anyone know what PSI is using under the covers? A horrid thought just occurred to me that it might BE Hercules. It is not -- they went on at length at SHARE about the technology a couple of years ago, and it's definitely not Herc. ...phsiii
OT: Rebooting airplanes
For those of you who don't read RISKS (and you all should! www.risks.org), I thought the following would be amusing/interesting. When he started writing about being told not to touch any buttons during the restart, I was thinking of DDR, with its first interrupt gets the console approach...but no, it's Linux! ...phsiii -Original Message- Date: Tue, 28 Nov 2006 13:29:42 -0600 From: Douglas W. Jones [EMAIL PROTECTED] Subject: Rebooting airplanes In the last few weeks, I've done quite a bit of flying, and twice, now, I've been on planes where they had to reboot. The first trip where this happened, as we were scheduled to leave the gate, there was a delay, and then the pilot said over the intercom: We're having trouble with some of the cockpit instruments, so I'm going to force a hard reboot by switching off all the power for a bit. The lights and all other power on the plane then went off, and after a fifteen second pause, on again. A minute later, the pilot said: That seems to have fixed the problem, and we were off. I wasn't impressed. As far as I am concerned, this is clear evidence of a genuine design error somewhere in the system. The second problem happened on Sunday, on a flight back from Amsterdam. On that flight, they had serious problems with the in-flight video on demand system. They tried a soft reboot of some kind, and it didn't work, so they then tried two hard reboots, their term, and after the second try, it worked fine. Their instructions were until the system comes all the way up, please don't touch any buttons. That alone suggests poor design. The system ought to come up with interrupts disabled on any devices that it's not ready to listen to, after all. The reboot process took close to half an hour, and watching the displays in the seat backs that were visible from my seat, I could see that they were being rebooted in sequence, about one per second. Furthermore, as each in-seat display was rebooted, it showed the Linux penguin and then a Linux boot script, revealing that each seat-back display was a little Linux system, suggesting that they were all networked to a video server for the plane. Again, the need for these global reboots is strong evidence that the systems were not well designed, I wonder if both of these stories illustrate problems with the kinds of graduates we are turning out these days. CS programs across the country are emphasizing high-level courses in web programming, but fewer and fewer students know anything about the fundamentals of parallel programming that underly things. So, in constructing the kinds of distributed applications that show up in contexts like streaming video and cockpit instrumentation, they are working without the theoretical underpinnings needed to understand the problems they encounter.
Re: IBM sues PSI
PSI is a true micro-code implementation. The chip they are using allows the definitions of new instruction codes on the chip. Tony Thigpen -Original Message - From: Phil Smith III Sent: 12/06/2006 05:52 AM P. Raulerson [EMAIL PROTECTED] wrote: I don't think they will ever target Hercules, even if someone puts out a commercial product with it. Does anyone know what PSI is using under the covers? A horrid thought just occurred to me that it might BE Hercules. It is not -- they went on at length at SHARE about the technology a couple of years ago, and it's definitely not Herc. ...phsiii
Re: OT: Rebooting airplanes
What else would you expect from Airbus? Tony Thigpen -Original Message - From: Phil Smith III Sent: 12/06/2006 05:58 AM For those of you who don't read RISKS (and you all should! www.risks.org), I thought the following would be amusing/interesting. When he started writing about being told not to touch any buttons during the restart, I was thinking of DDR, with its first interrupt gets the console approach...but no, it's Linux! ...phsiii -Original Message- Date: Tue, 28 Nov 2006 13:29:42 -0600 From: Douglas W. Jones [EMAIL PROTECTED] Subject: Rebooting airplanes In the last few weeks, I've done quite a bit of flying, and twice, now, I've been on planes where they had to reboot. The first trip where this happened, as we were scheduled to leave the gate, there was a delay, and then the pilot said over the intercom: We're having trouble with some of the cockpit instruments, so I'm going to force a hard reboot by switching off all the power for a bit. The lights and all other power on the plane then went off, and after a fifteen second pause, on again. A minute later, the pilot said: That seems to have fixed the problem, and we were off. I wasn't impressed. As far as I am concerned, this is clear evidence of a genuine design error somewhere in the system. The second problem happened on Sunday, on a flight back from Amsterdam. On that flight, they had serious problems with the in-flight video on demand system. They tried a soft reboot of some kind, and it didn't work, so they then tried two hard reboots, their term, and after the second try, it worked fine. Their instructions were until the system comes all the way up, please don't touch any buttons. That alone suggests poor design. The system ought to come up with interrupts disabled on any devices that it's not ready to listen to, after all. The reboot process took close to half an hour, and watching the displays in the seat backs that were visible from my seat, I could see that they were being rebooted in sequence, about one per second. Furthermore, as each in-seat display was rebooted, it showed the Linux penguin and then a Linux boot script, revealing that each seat-back display was a little Linux system, suggesting that they were all networked to a video server for the plane. Again, the need for these global reboots is strong evidence that the systems were not well designed, I wonder if both of these stories illustrate problems with the kinds of graduates we are turning out these days. CS programs across the country are emphasizing high-level courses in web programming, but fewer and fewer students know anything about the fundamentals of parallel programming that underly things. So, in constructing the kinds of distributed applications that show up in contexts like streaming video and cockpit instrumentation, they are working without the theoretical underpinnings needed to understand the problems they encounter.
Re: IBM sues PSI
Before I get jumped on, the term micro-code implementation is a very simple term that means different things to different people. I was trying to just say, it's a completely different approach than Herc or other emulators. I don't want to get into a tit-for-tat discussion of the technology. Tony Thigpen -Original Message - From: Tony Thigpen Sent: 12/06/2006 07:24 AM PSI is a true micro-code implementation. The chip they are using allows the definitions of new instruction codes on the chip. Tony Thigpen -Original Message - From: Phil Smith III Sent: 12/06/2006 05:52 AM P. Raulerson [EMAIL PROTECTED] wrote: I don't think they will ever target Hercules, even if someone puts out a commercial product with it. Does anyone know what PSI is using under the covers? A horrid thought just occurred to me that it might BE Hercules. It is not -- they went on at length at SHARE about the technology a couple of years ago, and it's definitely not Herc. ...phsiii
z/vm 4.4
Hello everyone, I need a really quick answer.will z/vm 4.4 run on a Z9? We're currently running z/vm 4.4 on an MP3000. Thanks everyone, Mary Zervos VM Systems Programmer Binghamton University
Re: z/vm 4.4
Yes it will. We currently are running it on a z9. John Hanley Mary Zervos [EMAIL PROTECTED] n.edu To Sent by: The IBM IBMVM@LISTSERV.UARK.EDU z/VM Operating cc System [EMAIL PROTECTED] Subject ARK.EDU z/vm 4.4 12/06/2006 08:38 AM Please respond to The IBM z/VM Operating System [EMAIL PROTECTED] ARK.EDU Hello everyone, I need a really quick answer.will z/vm 4.4 run on a Z9? We're currently running z/vm 4.4 on an MP3000. Thanks everyone, Mary Zervos VM Systems Programmer Binghamton University
Re: z/vm 4.4
Yes it will. q cplevel z/VM Version 4 Release 4.0, service level 0601 (64-bit) Generated at 06/14/2006 13:54:04 EST IPL at 10/29/2006 02:12:11 EST otsmuns; T=0.01/0.01 08:42:12 q cpuid CPUID = FF04858C20948000 otsmuns; T=0.01/0.01 08:42:17 Bill Munson IT Specialist Office of Information Technology State of New Jersey (609) 984-4065 President MVMUA http://www.marist.edu/~mvmua Mary Zervos wrote: Hello everyone, I need a really quick answer.will z/vm 4.4 run on a Z9? We're currently running z/vm 4.4 on an MP3000. Thanks everyone, Mary Zervos VM Systems Programmer Binghamton University
Re: z/vm 4.4
what can be tell me the cpuid? is it usefull for something except of dedicating processors? On 12/6/06, William Munson [EMAIL PROTECTED] wrote: Yes it will. q cplevel z/VM Version 4 Release 4.0, service level 0601 (64-bit) Generated at 06/14/2006 13:54:04 EST IPL at 10/29/2006 02:12:11 EST otsmuns; T=0.01/0.01 08:42:12 q cpuid CPUID = FF04858C20948000 otsmuns; T=0.01/0.01 08:42:17 Bill Munson IT Specialist Office of Information Technology State of New Jersey (609) 984-4065 President MVMUA http://www.marist.edu/~mvmua Mary Zervos wrote: Hello everyone, I need a really quick answer.will z/vm 4.4 run on a Z9? We're currently running z/vm 4.4 on an MP3000. Thanks everyone, Mary Zervos VM Systems Programmer Binghamton University
Re: z/vm 4.4
2094 is a z9 Bill Munson IT Specialist Office of Information Technology State of New Jersey (609) 984-4065 President MVMUA http://www.marist.edu/~mvmua Zoltan Balogh wrote: what can be tell me the cpuid? is it usefull for something except of dedicating processors? On 12/6/06, *William Munson* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Yes it will. q cplevel z/VM Version 4 Release 4.0, service level 0601 (64-bit) Generated at 06/14/2006 13:54:04 EST IPL at 10/29/2006 02:12:11 EST otsmuns; T=0.01/0.01 08:42:12 q cpuid CPUID = FF04858C20948000 otsmuns; T=0.01/0.01 08:42:17 Bill Munson IT Specialist Office of Information Technology State of New Jersey (609) 984-4065 President MVMUA http://www.marist.edu/~mvmua Mary Zervos wrote: Hello everyone, I need a really quick answer.will z/vm 4.4 run on a Z9? We're currently running z/vm 4.4 on an MP3000. Thanks everyone, Mary Zervos VM Systems Programmer Binghamton University
Re: z/vm 4.4
Funny...my z9 shows as a 2096 ? ESAMGMT screen started: 06/12/06 08:59:00 z/VMVersion 04.4.0 SLU 0601 TOD clock at last IPL : 06/09/09 15:35:00 Processor model: 2096CPU serial number: 2B88DNumber of CPUs: 1 John Hanley William Munson [EMAIL PROTECTED] it.state.nj.usTo Sent by: The IBM IBMVM@LISTSERV.UARK.EDU z/VM Operating cc System [EMAIL PROTECTED] Subject ARK.EDU Re: z/vm 4.4 12/06/2006 08:58 AM Please respond to The IBM z/VM Operating System [EMAIL PROTECTED] ARK.EDU 2094 is a z9 Bill Munson IT Specialist Office of Information Technology State of New Jersey (609) 984-4065 President MVMUA http://www.marist.edu/~mvmua Zoltan Balogh wrote: what can be tell me the cpuid? is it usefull for something except of dedicating processors? On 12/6/06, *William Munson* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Yes it will. q cplevel z/VM Version 4 Release 4.0, service level 0601 (64-bit) Generated at 06/14/2006 13:54:04 EST IPL at 10/29/2006 02:12:11 EST otsmuns; T=0.01/0.01 08:42:12 q cpuid CPUID = FF04858C20948000 otsmuns; T=0.01/0.01 08:42:17 Bill Munson IT Specialist Office of Information Technology State of New Jersey (609) 984-4065 President MVMUA http://www.marist.edu/~mvmua Mary Zervos wrote: Hello everyone, I need a really quick answer.will z/vm 4.4 run on a Z9? We're currently running z/vm 4.4 on an MP3000. Thanks everyone, Mary Zervos VM Systems Programmer Binghamton University
Re: z/vm 4.4
2096 - 2094 The difference being a BC or EC class z9. -- Mark Pace Mainline Information Systems
Re: z/vm 4.4
:) thank you. i never thought it is so useful :) On 12/6/06, Dave Jones [EMAIL PROTECTED] wrote: Hi, Zoltan. The CPUID can be parsed this way: FF version code 'FF' means you're running under z/VM 04858C processor serial number 2094 processor model number (2094 == z9) 8000 machine check extended logout length So there is some relatively interesting information in the CPUID. DJ Zoltan Balogh wrote: what can be tell me the cpuid? is it usefull for something except of dedicating processors? On 12/6/06, William Munson [EMAIL PROTECTED] wrote: Yes it will. q cplevel z/VM Version 4 Release 4.0, service level 0601 (64-bit) Generated at 06/14/2006 13:54:04 EST IPL at 10/29/2006 02:12:11 EST otsmuns; T=0.01/0.01 08:42:12 q cpuid CPUID = FF04858C20948000 otsmuns; T=0.01/0.01 08:42:17 Bill Munson IT Specialist Office of Information Technology State of New Jersey (609) 984-4065 President MVMUA http://www.marist.edu/~mvmua Mary Zervos wrote: Hello everyone, I need a really quick answer.will z/vm 4.4 run on a Z9? We're currently running z/vm 4.4 on an MP3000. Thanks everyone, Mary Zervos VM Systems Programmer Binghamton University
Re: z/vm 4.4
On 6 Dec 2006 at 8:07, Dave Jones wrote: 8000 machine check extended logout length Take a look at: http://listserv.uark.edu/scripts/wa.exe?A2=ind0404L=vmesa-lT=0P=9555 Here is an excerpt: I think it is time to update our documentation. :-) QUERY CPUID gives you the result of STIDP with the high-order byte set to 0xFF. The -02 level of the z/Architecture Principles of Operation defines the result, including the FORMAT bit you are seeing. It changes how you interpret the CPUID portion. The low-order nibble hasn't been the length of the machine check extended logout area in ... a long time. Alan Altmark Sr. Software Engineer IBM z/VM Development -- Shimon Lebowitzmailto:[EMAIL PROTECTED] VM System Programmer . Israel Police National HQ. http://www.poboxes.com/shimonpgp Jerusalem, Israel phone: +972 2 530-9877 fax: 530-9308
Re: z/vm 4.4
On Wednesday, 12/06/2006 at 09:09 EST, Mark Pace [EMAIL PROTECTED] wrote: 2096 - 2094 The difference being a BC or EC class z9. 2064 - z900 2066 - z800 2084 - z990 2086 - z890 2094 - z9 EC 2096 - z9 BC A pattern emerges. ;-) Alan Altmark z/VM Development IBM Endicott
Re: OT: Rebooting airplanes
On 12/6/06, Dave Jones [EMAIL PROTECTED] wrote: I don't know what the computer problem was (other than it was serious enough to prevent us from taking off had the pilot not been able to rectify it), nor what hardware processor or what software was involved. The plane itself was fairly new, being less than 5 years old. Was it the second Tuesday of the month maybe? ;-) But seriously, it should worry us. Don't think this has anything to do with industry standard procedure, except that people have gotten used to when in doubt, try again procedure in all kind of computerized situations. If you don't have access to the material to sort out the cause, then your only concern is to get it back up. We have not seen nothing yet. There's a market of alternative microcode for cars (though I am not sure it already goes beyond enabling options that were legally disabled in your country). I tried to talk Sir Santa into getting one of these extra battery packs and new firmware for his Prius, but he wants to postpone till after warranty coverage period... Rob
Re: IBM sues PSI
THAT is the root of the argument. PSI says they are a PCM (Plug Compatible Mainframe). That is the same term used for Amdahl, etc. and was the subject of, and resolved by, historical lawsuits. IBM does not agree that 1) they are a PCM, or 2) this has been resolved in the past. Tony Thigpen -Original Message - From: Stracka, James (GTI) Sent: 12/06/2006 09:12 AM How does PSI differ from amdahl, NAS, Hitachi and other IBM compatible hardware vendors from the past? -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of David Boyes Sent: Tuesday, December 05, 2006 4:30 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: IBM sues PSI First, I don't think IBM is branching out into the healthcare area. Obligatory historical footnote: IBM *did* build lab blood chemistry and other biomedical equipment starting in 1972 (cf. the 2991 Blood Cell Processor). Equipment manufacturing and repair ended in 1984 with the sale of the biomedical business to COBE Laboratories, Inc. (One assumes you meant patent infringement.) Indeed. If you are not an intended recipient of this e-mail, please notify the sender, delete it and do not read, act upon, print, disclose, copy, retain or redistribute it. Click here for important additional terms relating to this e-mail. http://www.ml.com/email_terms/
Re: z/vm 4.4
Alan Altmark wrote: 2064 - z900 2066 - z800 2084 - z990 2086 - z890 2094 - z9 EC 2096 - z9 BC A pattern emerges. ;-) Aha! So this little, rack-mounted 2074 we have in the lab must have some additional capabilities I had never suspected before! I'll go and check it out right now... Ray
Re: IBM sues PSI
How does PSI differ from amdahl, NAS, Hitachi and other IBM compatible hardware vendors from the past? Speculation: (IANAL) 1) The historical vendors legitimately licensed some of the technology from IBM or independently developed compatible widgets to the IBM stuff published in the PoP without any reference to the real stuff. The independent development route is probably impossible for any organization that doesn't have a research arm on the scale of IBM's, and if they did, they'd have to worry about #2 below given the screwed-up state of patent law these days. 2) There's a lot more patentable and actually patented stuff in the current machines. Unless PSI's IP lawyers did their homework VERY carefully, it's pretty likely they missed something. 3) At least part of the contention appears to be related to OS/390 and z/OS code. Part of having patents and/or trademarks is that you have to actively pursue them or you are deemed to have released them into the public domain. Losing control of the OS/390 and/or z/OS IP that way would be catastrophic, so they're enabling and deploying the nuclear device that is IBM Legal to protect the bigger cash cow that is z/OS by rendering a small annoyance into a pile of smoking rubble. Personally, I'd expect an out-of-court settlement with undisclosed terms. PSI doesn't have the resources to resist that level of legal assault, and there's clearly some technically legal but pretty gray areas in what they're doing.
z/vm 4.4
Okay..a step further...will OS/390 2.10 run under z/vm 4.4 on a Z9? Thanks again, Mary Zervos VM Systems Programmer Binghamton University
Re: z/vm 4.4
I believe that if OS/390 2.10 will run natively on a z9 (I don't know the answer to that one...), it will run as a guest under z/VM 4.4 on a z9. Is OS/390 2.10 64-bit capable? DJ Mary Zervos wrote: Okay..a step further...will OS/390 2.10 run under z/vm 4.4 on a Z9? Thanks again, Mary Zervos VM Systems Programmer Binghamton University
Re: z/vm 4.4
We were told that OS/390 2.10 does not run on a z9 but we think the person might not have realized we were talking about it running under z/VM 4.4. Dave Jones wrote: I believe that if OS/390 2.10 will run natively on a z9 (I don't know the answer to that one...), it will run as a guest under z/VM 4.4 on a z9. Is OS/390 2.10 64-bit capable? DJ Mary Zervos wrote: Okay..a step further...will OS/390 2.10 run under z/vm 4.4 on a Z9? Thanks again, Mary Zervos VM Systems Programmer Binghamton University
Re: z/vm 4.4
We recently upgraded to a Z9 while still running OS/390 2.10. Required some maint. but its running great! Steve Mitchell Sr Systems Software Specialist Blue Cross Blue Shield of Kansas (785) 291-8885 'There are no degrees of Honesty-you're either Honest or you're not!
Re: z/vm 4.4
Disregard previous 'comment'. I was incorrect, we are z/OS 1.4. (I dont get on that part of the machine much) Steve Mitchell Sr Systems Software Specialist Blue Cross Blue Shield of Kansas (785) 291-8885 'There are no degrees of Honesty-you're either Honest or you're not! Mary Zervos [EMAIL PROTECTED] n.edu To Sent by: The IBM IBMVM@LISTSERV.UARK.EDU z/VM Operating cc System [EMAIL PROTECTED] Topic ARK.EDU Subject Re: z/vm 4.4 12/06/2006 10:10 AM Please respond to The IBM z/VM Operating System [EMAIL PROTECTED] ARK.EDU We were told that OS/390 2.10 does not run on a z9 but we think the person might not have realized we were talking about it running under z/VM 4.4. Dave Jones wrote: I believe that if OS/390 2.10 will run natively on a z9 (I don't know the answer to that one...), it will run as a guest under z/VM 4.4 on a z9. Is OS/390 2.10 64-bit capable? DJ Mary Zervos wrote: Okay..a step further...will OS/390 2.10 run under z/vm 4.4 on a Z9? Thanks again, Mary Zervos VM Systems Programmer Binghamton University
Re: z/vm 4.4
IIRC, this subject came up earlier this year. I think the conclusion was that the OS talks to VM and not to the hardware directly. VM is taking care of the I/O and other things (tech talk) VM 4.4 was 32/64 bit and when an OS was a guest, VM determined whether it should run 32 or 64. So, based on that thread, I'm reasonably sure OS/390 2.10 will run under VM 4.4 on a z9. Steve G. Mary Zervos [EMAIL PROTECTED] Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 12/06/2006 11:10 AM Please respond to The IBM z/VM Operating System To: IBMVM@LISTSERV.UARK.EDU cc: Subject:Re: z/vm 4.4 We were told that OS/390 2.10 does not run on a z9 but we think the person might not have realized we were talking about it running under z/VM 4.4. Dave Jones wrote: I believe that if OS/390 2.10 will run natively on a z9 (I don't know the answer to that one...), it will run as a guest under z/VM 4.4 on a z9. Is OS/390 2.10 64-bit capable? DJ Mary Zervos wrote: Okay..a step further...will OS/390 2.10 run under z/vm 4.4 on a Z9? Thanks again, Mary Zervos VM Systems Programmer Binghamton University
Re: IBM sues PSI
I do not believe that the terms of the settlement between Amdahl and IBM were ever made public. IIRC, part of it was to cross-license certain patents. Without disclosure of the settlements, it is impossible for an outsider to know if the issue was really settled in a more general sense. I imagine that the IBM legal team made certain that the wording indicated that the settlement was very narrow and specific in its application. One difference between then and now is that Amdahl machines were built to execute the 370 instruction set, not just emulate it. There was no microcode in the 470, the machine of the day when the suits were filed. The differences were in the error reporting area. The only O/S updates (MVS or VM) for Amdahl were in the EREP and the error recording area (different data captured for a machine check, for example). There were no modifications to handle instructions that were almost, but not quite, the same (ala GE with 5 or 7, I forget which, instructions that were documented to behave differently than the 360s with which the machines were compatible). -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Tony Thigpen Sent: Wednesday, December 06, 2006 6:32 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: IBM sues PSI THAT is the root of the argument. PSI says they are a PCM (Plug Compatible Mainframe). That is the same term used for Amdahl, etc. and was the subject of, and resolved by, historical lawsuits. IBM does not agree that 1) they are a PCM, or 2) this has been resolved in the past. Tony Thigpen -Original Message - From: Stracka, James (GTI) Sent: 12/06/2006 09:12 AM How does PSI differ from amdahl, NAS, Hitachi and other IBM compatible hardware vendors from the past? -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of David Boyes Sent: Tuesday, December 05, 2006 4:30 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: IBM sues PSI First, I don't think IBM is branching out into the healthcare area. Obligatory historical footnote: IBM *did* build lab blood chemistry and other biomedical equipment starting in 1972 (cf. the 2991 Blood Cell Processor). Equipment manufacturing and repair ended in 1984 with the sale of the biomedical business to COBE Laboratories, Inc. (One assumes you meant patent infringement.) Indeed. If you are not an intended recipient of this e-mail, please notify the sender, delete it and do not read, act upon, print, disclose, copy, retain or redistribute it. Click here for important additional terms relating to this e-mail. http://www.ml.com/email_terms/
Re: z/vm 4.4
On Wednesday, 12/06/2006 at 10:29 CST, [EMAIL PROTECTED] wrote: Disregard previous 'comment'. I was incorrect, we are z/OS 1.4. (I dont get on that part of the machine much) Further, z/VM doesn't protect a guest from the ... nuances ... of the processor. It is capable of hiding some of the channel subsystem differences, but that's about it. Alan Altmark z/VM Development IBM Endicott
Re: z/vm 4.4
On Wed, 6 Dec 2006 11:39:32 -0500 Steve Gentry said: IIRC, this subject came up earlier this year. I think the conclusion was that the OS talks to VM and not to the hardware directly. VM is taking care of the I/O and other things (tech talk) VM 4.4 was 32/64 bit and when an OS was a guest, VM determined whether it should run 32 or 64. I would take this with a grain of salt. There was one level of MVS, (IIRC OS/390 2.10) that detected that the hardware was 64 bit capable, and expected the virtual machine to be in that mode. I believe there was a later PTF to make that an optional characteristic in PARMLIB, but I would not rely on my rusty memory. So, based on that thread, I'm reasonably sure OS/390 2.10 will run under VM 4.4 on a z9. Steve G. I don't know if it will or not, but I would not trust VM to hide the machine characteristics from MVS. /ahw Mary Zervos [EMAIL PROTECTED] Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 12/06/2006 11:10 AM Please respond to The IBM z/VM Operating System To: IBMVM@LISTSERV.UARK.EDU cc: Subject:Re: z/vm 4.4 We were told that OS/390 2.10 does not run on a z9 but we think the person might not have realized we were talking about it running under z/VM 4.4. Dave Jones wrote: I believe that if OS/390 2.10 will run natively on a z9 (I don't know the answer to that one...), it will run as a guest under z/VM 4.4 on a z9. Is OS/390 2.10 64-bit capable? DJ Mary Zervos wrote: Okay..a step further...will OS/390 2.10 run under z/vm 4.4 on a Z9? Thanks again, Mary Zervos VM Systems Programmer Binghamton University
z/VM 5.2 and supernets
We have a supernet defined on z/VM 5.1. I have been installing z/VM 5.2 on second level and had a lot of problems getting the TCP/IP portion to work. Eventually, we downgraded the second level system to a single class C network. Great, that gets me going again. Then, last night, it dawned on me that this isn't a first level/second level problem. z/VM 5.2 seems to have some problems in the supernet arena. So, is there anyone out there, that is running z/VM 5.2 with supernetting? This is really only for planning/scheduling. I have the next two weekends that are possible conversion weekends. Then comes Christmas weekend and New Years weekend, which may, or may not be good conversion weekends. I expect to get some maintenance related to this problem before we go into production. But I started wondering if it was just how I was specifying a supernet, or if supernets in general, just wasn't tested sufficiently. Obviously, once we get this fixed, I'll have to do a lot more testing in order to get my confidence up. I also have several projects that I delayed for the 5.2 conversion, that I may need to reschedule for prior to 5.2 conversion. Oh well, fun times. Tom Duerbusch THD Consulting
Re: IBM sues PSI
OS/360 and VM/370 were public domain. It wasn't until VM/SP that IBM charged for its VM system and, thereby took it out of the public domain. Amdahl was never sued for building a VM based on VM/370. Jerry DePass liked to tell the story about receiving a package from Dewayne Hendricks, marked with the Amdahl logo. He took it unopened to the legal department where the lawyer's opened it. Inside was a VM/470 manual. -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of David Boyes Sent: Wednesday, December 06, 2006 7:25 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: IBM sues PSI How does PSI differ from amdahl, NAS, Hitachi and other IBM compatible hardware vendors from the past? Speculation: (IANAL) 1) The historical vendors legitimately licensed some of the technology from IBM or independently developed compatible widgets to the IBM stuff published in the PoP without any reference to the real stuff. The independent development route is probably impossible for any organization that doesn't have a research arm on the scale of IBM's, and if they did, they'd have to worry about #2 below given the screwed-up state of patent law these days. 2) There's a lot more patentable and actually patented stuff in the current machines. Unless PSI's IP lawyers did their homework VERY carefully, it's pretty likely they missed something. 3) At least part of the contention appears to be related to OS/390 and z/OS code. Part of having patents and/or trademarks is that you have to actively pursue them or you are deemed to have released them into the public domain. Losing control of the OS/390 and/or z/OS IP that way would be catastrophic, so they're enabling and deploying the nuclear device that is IBM Legal to protect the bigger cash cow that is z/OS by rendering a small annoyance into a pile of smoking rubble. Personally, I'd expect an out-of-court settlement with undisclosed terms. PSI doesn't have the resources to resist that level of legal assault, and there's clearly some technically legal but pretty gray areas in what they're doing.
Re: REXX Primer
I hate to be the bearer of bad news, especially after all you have done. WinZip has difficulty reading the header. I get the message, Error reading the header after 0 entries, trying to either open or unpack the file. I downloaded the file by clicking the URL and choosing the save option. Company policy forbids me from installing the other programs you mentioned, so I am going to try from my home pc tonight. I will let you know the results. From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Zoltan Balogh Sent: Tuesday, December 05, 2006 11:24 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: REXX Primer you find the book here: http://hok.duf.hu/~zolo/down/publibfp.boulder.ibm.com.tar.gz You can unpack it with winrar, winzip or simply with TotalCommander. Just unpack it, and start for example: publibfp.boulder.ibm.com\cgi-bin\bookmgr\BOOKS\dmsg8a01\CCONTENTS.html All link is working without internet except search or 1-2 special button on the top. plz send a short reply to me or to the list if i can delete it. PS1: Finally the best way was: wget -E -k -rmnp --user-agent=Mozilla (if you want to try things later by yourself) PS2: wget for windows is a simple program without install, but it usually knows more then complete programs in this topics
Re: REXX Primer
The Library Reader is disk one of most of IBM's CD's. And the last time I read the disclaimer, you can distribute the READER to anyone you want. Just make sure that you don't sell any part of it. Ed Martin Aultman Health Foundation 330-588-4723 [EMAIL PROTECTED] ext. 40441 From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Schuh, Richard Sent: Tuesday, December 05, 2006 5:51 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: REXX Primer Thanks for all of the effort. It really is appreciated. And yes, windows is the official platform for desktops and laptops at the office.. From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Zoltan Balogh Sent: Tuesday, December 05, 2006 2:30 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: REXX Primer you need a reader for filetype boo, or you have to get html pages manually. I prefer to use wget (if you are under windows then wget for windows): wget -k -rmnp --user-agent=Mozilla http://publibfp.boulder.ibm.com/cgi-bin/bookmgr/BOOKS/dmsg8a01/ but i started it for you now, so maybe it will be done until tomorrow morning. Then ill post you the url where you can find it for a time you download it. On 12/5/06, Schuh, Richard [EMAIL PROTECTED] wrote: The second of the links looks promising as one of the choices is to download HTML second choice); however, when that is selected, the resulting file is of filetype BOO - boo hoo, sob From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Zoltan Balogh Sent: Monday, December 04, 2006 9:12 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: REXX Primer On 12/5/06, Zoltan Balogh [EMAIL PROTECTED] wrote: i know this is not in pdf format, but maybe this is what you need: http://publibz.boulder.ibm.com/cgi-bin/bookmgr/BOOKS/DMSG8A01/CCONTENTS? DT=19921218093737 or maybe this page has a bit more possibility: http://www.elink.ibmlink.ibm.com/publications/servlet/pbi.wss?CTY=USFNC =SRXPBL=SC24-5598-01 On 12/4/06, Schuh, Richard [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Does anyone have the subject book in PDF format? Thanks, Richard Schuh
Re: IBM sues PSI
Hello Paul, I can say that IBM has targeted anyone using non-public domain IBM software and Hercules. Fact. Ed Martin Aultman Health Foundation 330-588-4723 [EMAIL PROTECTED] ext. 40441 -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of P. Raulerson Sent: Tuesday, December 05, 2006 9:26 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: IBM sues PSI I don't think they will ever target Hercules, even if someone puts out a commercial product with it. Does anyone know what PSI is using under the covers? A horrid thought just occurred to me that it might BE Hercules. -Paul
Re: OSA configurations
How do I set up a port as a trunk port? Reference materials are greatly appreciated. Thanks. Cecelia Dusha -Original Message- From: Brian Nielsen [mailto:[EMAIL PROTECTED] Sent: Friday, October 13, 2006 10:02 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: OSA configurations In short, yes. The port would be set up as a trunk port so that all the traffic can reach it. After that, traffic for the IP addresses registered to the OSA card by TCP stacks on the mainframe will be delivered to their appropriate TCP stack, thus achieving whatever security access you've set up. You may want to use VLAN's in the network to further increase confidence in the isolation and security. You would need to work with your network folks to set up the VLAN numbers IP ranges that would correspond to the various access levels you defined. Brian Nielsen On Fri, 13 Oct 2006 10:20:00 -, Dusha, Cecelia Ms. WHS/ITMD [EMAIL PROTECTED] wrote: This is probably a dumb question, but I don't know the answer... Is it possible for a single OSA port to be a part of 3 different network types (trusted, private and public)? In other words, can it be set up to use IPL addresses in the range of the trusted, private and public? If so, what would be required on the network side to handle this? And what are the security repercussions? Presently we are considering: OSA1 port 1 primary for general trusted access OSA1 port 2 primary for IFL trusted access OSA2 port 1 backup for general engine trusted access OSA2 port 2 backup for IFL trusted access OSA3 port 1 primary for public access OSA3 port 2 primary for private access OSA4 port 1 backup for public access OSA4 port 2 backup for private access This achieves the isolation for each network type and can be easily managed. But an OSA card is capable of utilizing over 2000 IP addresses... Please advice. Thank you. Cecelia Dusha
Re: z/vm 4.4
Hello I had os/390 2.10 running under VM/ESA 2.4.0 on a PC500 P390. It is still running today. Ed Martin Aultman Health Foundation 330-588-4723 [EMAIL PROTECTED] ext. 40441 -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Mary Zervos Sent: Wednesday, December 06, 2006 10:51 AM To: IBMVM@LISTSERV.UARK.EDU Subject: z/vm 4.4 Okay..a step further...will OS/390 2.10 run under z/vm 4.4 on a Z9? Thanks again, Mary Zervos VM Systems Programmer Binghamton University
Re: z/VM 5.2 and supernets
On Wednesday, 12/06/2006 at 11:05 CST, Tom Duerbusch [EMAIL PROTECTED] wrote: z/VM 5.2 seems to have some problems in the supernet arena. I think Miguel mentioned something about supernetting problems recently. Call it in. (Just make sure your GATEWAY syntax is correct.) Alan Altmark z/VM Development IBM Endicott
IBM Director
Sometimes things are really funny.. In the z/VM SDO Installation instructions, it talks a little about the IBM Director. Apparently, part of and IBM Virtualization Engine. It gave the following website: http://www-3.ibm.com/servers/eserver/xseries/systems_management/ibm_director So I clicked on it to get an idea of just what this thingie is. And I get: You are not authorized to view this page. HTTP error 403 - forbidden h, I wouldn't want to go thereG. 1. You create a website. 2. You public the link in the IBM manuals 3. You forbid people from going to that site. That cracks me up. (I'm in one of those moods) Tom Duerbusch THD Consulting
Re: z/vm 4.4
ill seek with google whats about Diag, and thanks all the explain for you and for others :) On 12/6/06, David Boyes [EMAIL PROTECTED] wrote: The CPUID can be parsed this way: [snip] So there is some relatively interesting information in the CPUID. And if you're really interested, read the documentation on the response to DIAG 0. That tells you all kinds of neat stuff. -- db
Re: z/VM 5.2 and supernets
When I was installing and testing on z/VM 5.2 in a guest I used supernetting of class C addresses in the z/VM 5.2 guest's TCPIP stack. There was a problem getting TCPIP to accept the supernetting syntax and I openned a PMR. APAR PK18025 (PTF UK11188) was created to resolve the problem. Without this APAR I got an error message on the TCPIP console: DTCPRS158E Line 75: Subnet Mask specified on GATEWAY statement is not valid or DTCPAR123I Line 75: Unknown link name in GATEWAY cmd depending on which supernetting syntax I was using. I don't use supernetting anymore, but once the syntax was accepted it did work for me. Brian Nielsen On Wed, 6 Dec 2006 11:05:39 -0600, Tom Duerbusch [EMAIL PROTECTED] wrote: We have a supernet defined on z/VM 5.1. I have been installing z/VM 5.2 on second level and had a lot of problems getting the TCP/IP portion to work. Eventually, we downgraded the second level system to a single class C network. Great, that gets me going again. Then, last night, it dawned on me that this isn't a first level/second level problem. z/VM 5.2 seems to have some problems in the supernet arena. So, is there anyone out there, that is running z/VM 5.2 with supernetting? This is really only for planning/scheduling. I have the next two weekends that are possible conversion weekends. Then comes Christmas weekend and New Years weekend, which may, or may not be good conversion weekends. I expect to get some maintenance related to this problem before we go into production. But I started wondering if it was just how I was specifying a supernet, or if supernets in general, just wasn't tested sufficiently. Obviously, once we get this fixed, I'll have to do a lot more testing in order to get my confidence up. I also have several projects that I delayed for the 5.2 conversion, that I may need to reschedule for prior to 5.2 conversion. Oh well, fun times. Tom Duerbusch THD Consulting =
Re: OSA configurations
Setting it up as a trunk port is done in the network switch your OSA port is connected to, so it needs to be done by your Network Support staff. Brian Nielsen On Wed, 6 Dec 2006 17:41:42 -, Dusha, Cecelia Ms. WHS/ITMD [EMAIL PROTECTED] wrote: How do I set up a port as a trunk port? Reference materials are greatly appreciated. Thanks. Cecelia Dusha -Original Message- From: Brian Nielsen [mailto:[EMAIL PROTECTED] Sent: Friday, October 13, 2006 10:02 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: OSA configurations In short, yes. The port would be set up as a trunk port so that all the traffic can reach it. After that, traffic for the IP addresses register ed to the OSA card by TCP stacks on the mainframe will be delivered to thei r appropriate TCP stack, thus achieving whatever security access you've se t up. You may want to use VLAN's in the network to further increase confidence in the isolation and security. You would need to work with your network folks to set up the VLAN numbers IP ranges that would correspond to the various access levels you defined. Brian Nielsen On Fri, 13 Oct 2006 10:20:00 -, Dusha, Cecelia Ms. WHS/ITMD [EMAIL PROTECTED] wrote: This is probably a dumb question, but I don't know the answer... Is it possible for a single OSA port to be a part of 3 different network types (trusted, private and public)? In other words, can it be set up to use IPL addresses in the range of the trusted, private and public? If so, what would be required on the network side to handle this? And what are the security repercussions? Presently we are considering: OSA1 port 1 primary for general trusted access OSA1 port 2 primary for IFL trusted access OSA2 port 1 backup for general engine trusted access OSA2 port 2 backup for IFL trusted access OSA3 port 1 primary for public access OSA3 port 2 primary for private access OSA4 port 1 backup for public access OSA4 port 2 backup for private access This achieves the isolation for each network type and can be easily managed. But an OSA card is capable of utilizing over 2000 IP addresses... Please advice. Thank you. Cecelia Dusha =
Re: Undocumented DTCAPI messages
On Wednesday, 12/06/2006 at 06:35 CST, Kris Buelens [EMAIL PROTECTED] wrote: Where can we find what this means? DTCAPI001I IucvCheckRc: IUCV retcc 2 iprcode 0 on path 1 function 6 DTCAPI002IUserid MTCSGATE TheSockNumber 42 No DTCAPI messages where found in the TCP/P Messages manual of z/VM 4.4 nor 5.2 It apparently all started when MTCSGATE issued a BSD-style socket call for socket 42. That was turned into IUCV SEND,TYPE=2WAY,TRGCLS=(socket call verb, 42). You can't tell from that message what the verb was (connect, send, receive, close, ...). When the stack tried to respond to the request (data arrived, connection complete, etc.), the IUCV REPLY (function 6) failed with CC=2, 'message not found'. That would tend to indicate a bizzare problem in the stack as the reply contains the same TRGCLS as the original request. CC=2 means that CP couldn't find an outstanding SEND with that TRGCLS that was waiting for a reply. If it is reproducible, a socket trace (remember to include Traceonly MTCSGATE Endtraceonly) would be edifying. If the stack really is replying to a non-existent message, contact the Support Center. If you like, feel free to submit an RCF about the missing message. Alan Altmark z/VM Development IBM Endicott
Re: IBM Director
On Wednesday, 12/06/2006 at 12:32 CST, Tom Duerbusch [EMAIL PROTECTED] wrote: http://www-3.ibm.com/servers/eserver/xseries/systems_management/ibm_director So I clicked on it to get an idea of just what this thingie is. And I get: You are not authorized to view this page. HTTP error 403 - forbidden Please submit an RCF. IBMers routinely forget to take the -3 or other suffix off of the www. Remove the -3 and it will work. Alan Altmark z/VM Development IBM Endicott
Re: z/VM 5.2 and supernets
That is the same problem here. I hope that there will be a fix(s) before I get to the point of dissolving my supernet. Thanks Tom Duerbusch THD Consulting [EMAIL PROTECTED] 12/6/2006 12:38 PM When I was installing and testing on z/VM 5.2 in a guest I used supernetting of class C addresses in the z/VM 5.2 guest's TCPIP stack. There was a problem getting TCPIP to accept the supernetting syntax and I openned a PMR. APAR PK18025 (PTF UK11188) was created to resolve the problem. Without this APAR I got an error message on the TCPIP console: DTCPRS158E Line 75: Subnet Mask specified on GATEWAY statement is not valid or DTCPAR123I Line 75: Unknown link name in GATEWAY cmd depending on which supernetting syntax I was using. I don't use supernetting anymore, but once the syntax was accepted it did work for me. Brian Nielsen On Wed, 6 Dec 2006 11:05:39 -0600, Tom Duerbusch [EMAIL PROTECTED] wrote: We have a supernet defined on z/VM 5.1. I have been installing z/VM 5.2 on second level and had a lot of problems getting the TCP/IP portion to work. Eventually, we downgraded the second level system to a single class C network. Great, that gets me going again. Then, last night, it dawned on me that this isn't a first level/second level problem. z/VM 5.2 seems to have some problems in the supernet arena. So, is there anyone out there, that is running z/VM 5.2 with supernetting? This is really only for planning/scheduling. I have the next two weekends that are possible conversion weekends. Then comes Christmas weekend and New Years weekend, which may, or may not be good conversion weekends. I expect to get some maintenance related to this problem before we go into production. But I started wondering if it was just how I was specifying a supernet, or if supernets in general, just wasn't tested sufficiently. Obviously, once we get this fixed, I'll have to do a lot more testing in order to get my confidence up. I also have several projects that I delayed for the 5.2 conversion, that I may need to reschedule for prior to 5.2 conversion. Oh well, fun times. Tom Duerbusch THD Consulting =
Re: REXX Primer
sorry then :( (and as i told wget is a standalone program, without install, without special things, so you can run it and delete it without traces) (If you have problems with home-downloading tell me, and if you dont success ill solve it for you..) On 12/6/06, Schuh, Richard [EMAIL PROTECTED] wrote: I hate to be the bearer of bad news, especially after all you have done. WinZip has difficulty reading the header. I get the message, Error reading the header after 0 entries, trying to either open or unpack the file. I downloaded the file by clicking the URL and choosing the save option. Company policy forbids me from installing the other programs you mentioned, so I am going to try from my home pc tonight. I will let you know the results. -- *From:* The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] *On Behalf Of *Zoltan Balogh *Sent:* Tuesday, December 05, 2006 11:24 PM *To:* IBMVM@LISTSERV.UARK.EDU *Subject:* Re: REXX Primer you find the book here: http://hok.duf.hu/~zolo/down/publibfp.boulder.ibm.com.tar.gzhttp://hok.duf.hu/%7Ezolo/down/publibfp.boulder.ibm.com.tar.gz You can unpack it with winrar, winzip or simply with TotalCommander. Just unpack it, and start for example: publibfp.boulder.ibm.com\cgi-bin\bookmgr\BOOKS\dmsg8a01\CCONTENTS.html All link is working without internet except search or 1-2 special button on the top. plz send a short reply to me or to the list if i can delete it. PS1: Finally the best way was: wget -E -k -rmnp --user-agent=Mozilla (if you want to try things later by yourself) PS2: wget for windows is a simple program without install, but it usually knows more then complete programs in this topics
Re: IBM Director
Thanks Alan That was it. RCF...paper? Post Office? no email address? Is this a legal document that requires my origional signature? I would think the people in the publishing side, could get up to the 1990s G. Oh well, there goes 39 cents... Tom Duerbusch THD Consulting [EMAIL PROTECTED] 12/6/2006 12:42 PM On Wednesday, 12/06/2006 at 12:32 CST, Tom Duerbusch [EMAIL PROTECTED] wrote: http://www-3.ibm.com/servers/eserver/xseries/systems_management/ibm_director So I clicked on it to get an idea of just what this thingie is. And I get: You are not authorized to view this page. HTTP error 403 - forbidden Please submit an RCF. IBMers routinely forget to take the -3 or other suffix off of the www. Remove the -3 and it will work. Alan Altmark z/VM Development IBM Endicott
Are priv CP commands logged somewhere?
I am just starting to dig, but thought I would toss this out to the list. If someone enters a command like CP SET SHARE or CP VARY PROCESSOR, are those logged anywhere? Are they in the monitor data or accounting data? Assume a semi-vanilla z/VM 5.2 system with no ESM and no third-party tools like VM:Manager... ___ James Vincent Systems Engineering Consultant Nationwide Services Co., Technology Solutions Mainframe, z/VM and z/Linux Support One Nationwide Plaza 3-20-13 Columbus OH 43215-2220 U.S.A Voice: (614) 249-5547Fax: (614) 677-7681 mailto:[EMAIL PROTECTED]
Re: Are priv CP commands logged somewhere?
as i know in case of racf installed on the system,there is possibility to log them On 12/6/06, Jim Vincent [EMAIL PROTECTED] wrote: I am just starting to dig, but thought I would toss this out to the list. If someone enters a command like CP SET SHARE or CP VARY PROCESSOR, are those logged anywhere? Are they in the monitor data or accounting data? Assume a semi-vanilla z/VM 5.2 system with no ESM and no third-party tools like VM:Manager... ___ James Vincent Systems Engineering Consultant Nationwide Services Co., Technology Solutions Mainframe, z/VM and z/Linux Support One Nationwide Plaza 3-20-13 Columbus OH 43215-2220 U.S.A Voice: (614) 249-5547Fax: (614) 677-7681 mailto:[EMAIL PROTECTED]
Re: IBM Director
On Wednesday, 12/06/2006 at 12:53 CST, Tom Duerbusch [EMAIL PROTECTED] wrote: RCF...paper? Post Office? no email address? Is this a legal document that requires my origional signature? I would think the people in the publishing side, could get up to the 1990s G. Oh well, there goes 39 cents... Your wish is my command. Keep your 39 cents and send e-mail to [EMAIL PROTECTED] Wow. Am I great or what? (People, this is a rhetorical question - I already know the answer. And no comments from the peanut gallery, either.) Alan Altmark z/VM Development Wish Fulfillment Division IBM Endicott
Re: IBM Director
Kind'a curious that the URL given: http://www-3.ibm.com/servers/eserver/xseries/systems_management/ibm_director contains the string: /xseries/ Tom, are you certain that was the URL given in the SDO doc? Personally, I think the whole Virtualization Engine and IBM Director product description is a huge mess of unreadable legal folderol and cross-function confusion. I suppose the marketing and descriptions could be worse, but it would take even more astonishing (not too much more) creativity. But that's just my opinion, and does not necessarily represent the opinions or policies of Hewitt Associates.. Mike Walter Hewitt Associates Any opinions expressed herein are mine alone and do not necessarily represent the opinions or policies of Hewitt Associates. Tom Duerbusch [EMAIL PROTECTED] Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 12/06/2006 12:53 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: IBM Director Thanks Alan That was it. RCF...paper? Post Office? no email address? Is this a legal document that requires my origional signature? I would think the people in the publishing side, could get up to the 1990s G. Oh well, there goes 39 cents... Tom Duerbusch THD Consulting [EMAIL PROTECTED] 12/6/2006 12:42 PM On Wednesday, 12/06/2006 at 12:32 CST, Tom Duerbusch [EMAIL PROTECTED] wrote: http://www-3.ibm.com/servers/eserver/xseries/systems_management/ibm_director So I clicked on it to get an idea of just what this thingie is. And I get: You are not authorized to view this page. HTTP error 403 - forbidden Please submit an RCF. IBMers routinely forget to take the -3 or other suffix off of the www. Remove the -3 and it will work. Alan Altmark z/VM Development IBM Endicott The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited.
Re: Are priv CP commands logged somewhere?
On Wednesday, 12/06/2006 at 01:58 EST, Jim Vincent [EMAIL PROTECTED] wrote: I am just starting to dig, but thought I would toss this out to the list. If someone enters a command like CP SET SHARE or CP VARY PROCESSOR, are those logged anywhere? Are they in the monitor data or accounting data? No. The creation of a comprehensive audit trail is one of the primary reasons to have RACF or some other ESM. Alan Altmark z/VM Development IBM Endicott
Re: OSA configurations
On Wednesday, 12/06/2006 at 05:41 GMT, Dusha, Cecelia Ms. WHS/ITMD [EMAIL PROTECTED] wrote: How do I set up a port as a trunk port? Reference materials are greatly appreciated. Physical port setup is handled by your network people. Do not try this at home. A few things to remember: - Every VLAN represents a unique subnet - Routing between the subnets is controlled by your external switch/router. - Do not casually connect a single guest to multiple VLANs. This is where you can easily introduce security problems. - If you use the VSWITCH, you don't have to configure each guest to be VLAN-aware. CP will hide it. When you authorize a guest to a VSWITCH, you can set his VLAN ID. This is just like access (regular) ports on the physical switch. They are typically assigned to a VLAN - you just don't know it and don't care, a.k.a. the miracle in step 2. Alan Altmark z/VM Development IBM Endicott
Re: Are priv CP commands logged somewhere?
Are configuration monitor records cut for these events? Neale On Wednesday, 12/06/2006 at 01:58 EST, Jim Vincent [EMAIL PROTECTED] wrote: I am just starting to dig, but thought I would toss this out to the list. If someone enters a command like CP SET SHARE or CP VARY PROCESSOR, are those logged anywhere? Are they in the monitor data or accounting data?
Re: Are priv CP commands logged somewhere?
sorry i ask back, but i thought well? If there is racf then logged, otherwise not? (sorry but my english was not enough understand the meaning of your sentence) And if yes, can user check what is under monitoring? (i think no, but perhaps..) On 12/6/06, Alan Altmark [EMAIL PROTECTED] wrote: On Wednesday, 12/06/2006 at 01:58 EST, Jim Vincent [EMAIL PROTECTED] wrote: I am just starting to dig, but thought I would toss this out to the list. If someone enters a command like CP SET SHARE or CP VARY PROCESSOR, are those logged anywhere? Are they in the monitor data or accounting data? No. The creation of a comprehensive audit trail is one of the primary reasons to have RACF or some other ESM. Alan Altmark z/VM Development IBM Endicott
Re: Are priv CP commands logged somewhere?
According to my monitoring configurator (aka, Rick B) the CP VARY PROC would be system config change and gets monitored. CP SET SHARE is another puppy. We need to know (without an ESM) when someone enters a command like that to be able to audit when, who and to what it was done. ___ James Vincent Systems Engineering Consultant Nationwide Services Co., Technology Solutions Mainframe, z/VM and z/Linux Support One Nationwide Plaza 3-20-13 Columbus OH 43215-2220 U.S.A Voice: (614) 249-5547Fax: (614) 677-7681 mailto:[EMAIL PROTECTED] The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU wrote on 12/06/2006 02:16:36 PM: IBMVM@LISTSERV.UARK.EDU Are configuration monitor records cut for these events? Neale On Wednesday, 12/06/2006 at 01:58 EST, Jim Vincent [EMAIL PROTECTED] wrote: I am just starting to dig, but thought I would toss this out to the list. If someone enters a command like CP SET SHARE or CP VARY PROCESSOR, are those logged anywhere? Are they in the monitor data or accounting data?
Re: z/VM 5.2 and supernets
Thanks I've been talking with him about these problems. Where yesterday, I was looking for a bypass to get some networking capabilities, today, I started thinking about conversion time. Tom Duerbusch THD Consulting [EMAIL PROTECTED] 12/6/2006 12:27 PM On Wednesday, 12/06/2006 at 11:05 CST, Tom Duerbusch [EMAIL PROTECTED] wrote: z/VM 5.2 seems to have some problems in the supernet arena. I think Miguel mentioned something about supernetting problems recently. Call it in. (Just make sure your GATEWAY syntax is correct.) Alan Altmark z/VM Development IBM Endicott
Re: IBM Director
Yep, it's correct. My guess is this is one of those cross platform products. The first videos I looked at was on IBM Blade managment. I finally scrolled down to Capacity on Demand. Ok, mainframe stuff. IBM Director looks like a large shop would like it. One that the server and mainframe people talk to each other. We don't have COD, and the rest of the options, just didn't tickle my fancy (from the mainframe perspective). I was thinking that it might be some sort of VM/Linux tools. But didn't see anything like that. Tom Duerbusch THD Consulting [EMAIL PROTECTED] 12/6/2006 1:08 PM Kind'a curious that the URL given: http://www-3.ibm.com/servers/eserver/xseries/systems_management/ibm_director contains the string: /xseries/ Tom, are you certain that was the URL given in the SDO doc? Personally, I think the whole Virtualization Engine and IBM Director product description is a huge mess of unreadable legal folderol and cross-function confusion. I suppose the marketing and descriptions could be worse, but it would take even more astonishing (not too much more) creativity. But that's just my opinion, and does not necessarily represent the opinions or policies of Hewitt Associates.. Mike Walter Hewitt Associates Any opinions expressed herein are mine alone and do not necessarily represent the opinions or policies of Hewitt Associates. Tom Duerbusch [EMAIL PROTECTED] Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 12/06/2006 12:53 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: IBM Director Thanks Alan That was it. RCF...paper? Post Office? no email address? Is this a legal document that requires my origional signature? I would think the people in the publishing side, could get up to the 1990s G. Oh well, there goes 39 cents... Tom Duerbusch THD Consulting [EMAIL PROTECTED] 12/6/2006 12:42 PM On Wednesday, 12/06/2006 at 12:32 CST, Tom Duerbusch [EMAIL PROTECTED] wrote: http://www-3.ibm.com/servers/eserver/xseries/systems_management/ibm_director So I clicked on it to get an idea of just what this thingie is. And I get: You are not authorized to view this page. HTTP error 403 - forbidden Please submit an RCF. IBMers routinely forget to take the -3 or other suffix off of the www. Remove the -3 and it will work. Alan Altmark z/VM Development IBM Endicott The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited.
Re: Are priv CP commands logged somewhere?
i know world of VM's is very new for me but if i were under linux or windows i would rename the application, and i place (in this case) an EXEC what calls the original program with all of the given parameters, but then you can put some logging/any function for traces.. I dont know here is it a good way too or not On 12/6/06, Jim Vincent [EMAIL PROTECTED] wrote: According to my monitoring configurator (aka, Rick B) the CP VARY PROC would be system config change and gets monitored. CP SET SHARE is another puppy. We need to know (without an ESM) when someone enters a command like that to be able to audit when, who and to what it was done. ___ James Vincent Systems Engineering Consultant Nationwide Services Co., Technology Solutions Mainframe, z/VM and z/Linux Support One Nationwide Plaza 3-20-13 Columbus OH 43215-2220 U.S.A Voice: (614) 249-5547Fax: (614) 677-7681 mailto:[EMAIL PROTECTED] The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU wrote on 12/06/2006 02:16:36 PM: IBMVM@LISTSERV.UARK.EDU Are configuration monitor records cut for these events? Neale On Wednesday, 12/06/2006 at 01:58 EST, Jim Vincent [EMAIL PROTECTED] wrote: I am just starting to dig, but thought I would toss this out to the list. If someone enters a command like CP SET SHARE or CP VARY PROCESSOR, are those logged anywhere? Are they in the monitor data or accounting data?
Re: Are priv CP commands logged somewhere?
You are on the right track. Instead of relying on an EXEC, CP Exit code or altered commands might be a better path to take. One can almost always find a way of circumventing or subverting an EXEC if bypassing the logging is desired. From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Zoltan Balogh Sent: Wednesday, December 06, 2006 11:27 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Are priv CP commands logged somewhere? i know world of VM's is very new for me but if i were under linux or windows i would rename the application, and i place (in this case) an EXEC what calls the original program with all of the given parameters, but then you can put some logging/any function for traces.. I dont know here is it a good way too or not On 12/6/06, Jim Vincent [EMAIL PROTECTED] wrote: According to my monitoring configurator (aka, Rick B) the CP VARY PROC would be system config change and gets monitored. CP SET SHARE is another puppy. We need to know (without an ESM) when someone enters a command like that to be able to audit when, who and to what it was done. ___ James Vincent Systems Engineering Consultant Nationwide Services Co., Technology Solutions Mainframe, z/VM and z/Linux Support One Nationwide Plaza 3-20-13 Columbus OH 43215-2220 U.S.A Voice: (614) 249-5547Fax: (614) 677-7681 mailto: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU wrote on 12/06/2006 02:16:36 PM: IBMVM@LISTSERV.UARK.EDU Are configuration monitor records cut for these events? Neale On Wednesday, 12/06/2006 at 01:58 EST, Jim Vincent [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: I am just starting to dig, but thought I would toss this out to the list. If someone enters a command like CP SET SHARE or CP VARY PROCESSOR, are those logged anywhere? Are they in the monitor data or accounting data?
Re: Are priv CP commands logged somewhere?
I started thinking about that too. How about modifying the class for SET SHARE and allowing only OPERATOR to do it. If PROP or VM:Operator is running process an audit record whenever executing the command. Bob -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] Behalf Of Schuh, Richard Sent: Wednesday, December 06, 2006 1:34 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Are priv CP commands logged somewhere? You are on the right track. Instead of relying on an EXEC, CP Exit code or altered commands might be a better path to take. One can almost always find a way of circumventing or subverting an EXEC if bypassing the logging is desired. _ From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Zoltan Balogh Sent: Wednesday, December 06, 2006 11:27 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Are priv CP commands logged somewhere? i know world of VM's is very new for me but if i were under linux or windows i would rename the application, and i place (in this case) an EXEC what calls the original program with all of the given parameters, but then you can put some logging/any function for traces.. I dont know here is it a good way too or not On 12/6/06, Jim Vincent [EMAIL PROTECTED] wrote: According to my monitoring configurator (aka, Rick B) the CP VARY PROC would be system config change and gets monitored. CP SET SHARE is another puppy. We need to know (without an ESM) when someone enters a command like that to be able to audit when, who and to what it was done. ___ James Vincent Systems Engineering Consultant Nationwide Services Co., Technology Solutions Mainframe, z/VM and z/Linux Support One Nationwide Plaza 3-20-13 Columbus OH 43215-2220 U.S.A Voice: (614) 249-5547Fax: (614) 677-7681 mailto: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU wrote on 12/06/2006 02:16:36 PM: IBMVM@LISTSERV.UARK.EDU Are configuration monitor records cut for these events? Neale On Wednesday, 12/06/2006 at 01:58 EST, Jim Vincent mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I am just starting to dig, but thought I would toss this out to the list. If someone enters a command like CP SET SHARE or CP VARY PROCESSOR, are those logged anywhere? Are they in the monitor data or accounting data?
Re: IBM Director
And don't forget: This page intentionally left blank. Tom Duerbusch [EMAIL PROTECTED] Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 12/06/2006 01:32 PM Please respond to The IBM z/VM Operating System To: IBMVM@LISTSERV.UARK.EDU cc: Subject:IBM Director Sometimes things are really funny.. In the z/VM SDO Installation instructions, it talks a little about the IBM Director. Apparently, part of and IBM Virtualization Engine. It gave the following website: http://www-3.ibm.com/servers/eserver/xseries/systems_management/ibm_director So I clicked on it to get an idea of just what this thingie is. And I get: You are not authorized to view this page. HTTP error 403 - forbidden h, I wouldn't want to go thereG. 1. You create a website. 2. You public the link in the IBM manuals 3. You forbid people from going to that site. That cracks me up. (I'm in one of those moods) Tom Duerbusch THD Consulting
RSCS printer not there but there
Greetings, Early this morning we did a VM IPL and I noticed this morning a bunch of files in the RSCS printer queue which should have been printed on some LPR printers. It appears that a VSE machine was sending files to RSCS but that RSCS did not recognize the destination printer. It was if the printer was not defined. I did the following for one of these printers : smsg rscs q v222 DMTCMQ310E Location V222 is not defined mike Ready; However , if I did 'smsg rscs q sys' I would see as part of the list : v222 released LPR ... ... priority I then had to dynamically redefine the printer. For RSCS I have its console spooled and I see for this printer : 06:30:02 DMTCMX005I Location DEVVM(OPERUTIL) executing: START v222 FORM * 06:30:02 DMTCMY700I Activating link v222 LPR line= class=* queueing=priority 06:30:04 DMTLPR012I Link v222 exit routine LPRXONE loaded at 00FBC140 06:30:04 DMTLPR181I Link v222 ready for session initiation 07:08:08 DMTNHD144I Receiving file () on link RVHPCS from RVHPCS(SYSCICSG), records 29 HCPCSP053E V222 not in CP directory PRT FILE 2642 SENT FROM RSCS PRT WAS 2642 RECS 0029 CPY 001 N NOHOLD NOKEEP 07:08:08 DMTAXM104I File () spooled to SYSTEM -- origin RVHPCS(SYSCICSG) 12/06/06 07:08:06 EST I have had to dynamically define a bunch of printers and even after occasionally a printer would become undefined and I would need to redefine. How is this possible? Mike
Re: Are priv CP commands logged somewhere?
On Wednesday, 12/06/2006 at 08:16 CET, Zoltan Balogh [EMAIL PROTECTED] wrote: sorry i ask back, but i thought well? If there is racf then logged, otherwise not? (sorry but my english was not enough understand the meaning of your sentence) If you have an External Security Manager (ESM) such as IBM's RACF, CA's Top Secret, VM:Secure, or ACF2, then the ESM can *audit* any user, diagnose, CP command, or system function. A subset of those things can be *controlled* by the ESM. For example, an ESM can audit (log) who issued CP SHUTDOWN, but it can't stop it. It can, however, control the use of CP STORE HOST. CP decides what the ESM *may* control; the ESM decides which of those it *will* control. As you might imagine, auditing *everything* on the system would bring it to its knees. And if yes, can user check what is under monitoring? (i think no, but perhaps..) That's up to the ESM to decide. In RACF, the SETEVENT LIST command requires special privileges. (See the RACF System Administrator's Guide.) When you are watching for Bad Guys, it is best not to tell them in advance where you will be looking! :-) Alan Altmark z/VM Development IBM Endicott
Re: Are priv CP commands logged somewhere?
The exit code could cut an accounting record, write a monitor record, or record the event in some other way. The difference between this and an EXEC is that the EXEC runs in the user's virtual machine while the exit routine is part of CP. From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Zoltan Balogh Sent: Wednesday, December 06, 2006 11:39 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Are priv CP commands logged somewhere? ok, you will know the user was authorised for using the cp command by getting the exit code. But how will you get it? What other alternates are? If you find a good way for solve this, plz share with us.. On 12/6/06, Schuh, Richard [EMAIL PROTECTED] wrote: You are on the right track. Instead of relying on an EXEC, CP Exit code or altered commands might be a better path to take. One can almost always find a way of circumventing or subverting an EXEC if bypassing the logging is desired. From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Zoltan Balogh Sent: Wednesday, December 06, 2006 11:27 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Are priv CP commands logged somewhere? i know world of VM's is very new for me but if i were under linux or windows i would rename the application, and i place (in this case) an EXEC what calls the original program with all of the given parameters, but then you can put some logging/any function for traces.. I dont know here is it a good way too or not On 12/6/06, Jim Vincent [EMAIL PROTECTED] wrote: According to my monitoring configurator (aka, Rick B) the CP VARY PROC would be system config change and gets monitored. CP SET SHARE is another puppy. We need to know (without an ESM) when someone enters a command like that to be able to audit when, who and to what it was done. ___ James Vincent Systems Engineering Consultant Nationwide Services Co., Technology Solutions Mainframe, z/VM and z/Linux Support One Nationwide Plaza 3-20-13 Columbus OH 43215-2220 U.S.A Voice: (614) 249-5547Fax: (614) 677-7681 mailto: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU wrote on 12/06/2006 02:16:36 PM: IBMVM@LISTSERV.UARK.EDU Are configuration monitor records cut for these events? Neale On Wednesday, 12/06/2006 at 01:58 EST, Jim Vincent [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: I am just starting to dig, but thought I would toss this out to the list. If someone enters a command like CP SET SHARE or CP VARY PROCESSOR, are those logged anywhere? Are they in the monitor data or accounting data?
Re: Are priv CP commands logged somewhere?
thanks for your explain :) On 12/6/06, Alan Altmark [EMAIL PROTECTED] wrote: On Wednesday, 12/06/2006 at 08:16 CET, Zoltan Balogh [EMAIL PROTECTED] wrote: sorry i ask back, but i thought well? If there is racf then logged, otherwise not? (sorry but my english was not enough understand the meaning of your sentence) If you have an External Security Manager (ESM) such as IBM's RACF, CA's Top Secret, VM:Secure, or ACF2, then the ESM can *audit* any user, diagnose, CP command, or system function. A subset of those things can be *controlled* by the ESM. For example, an ESM can audit (log) who issued CP SHUTDOWN, but it can't stop it. It can, however, control the use of CP STORE HOST. CP decides what the ESM *may* control; the ESM decides which of those it *will* control. As you might imagine, auditing *everything* on the system would bring it to its knees. And if yes, can user check what is under monitoring? (i think no, but perhaps..) That's up to the ESM to decide. In RACF, the SETEVENT LIST command requires special privileges. (See the RACF System Administrator's Guide.) When you are watching for Bad Guys, it is best not to tell them in advance where you will be looking! :-) Alan Altmark z/VM Development IBM Endicott
Re: IBM Director
Kind'a curious that the URL given: http://www-3.ibm.com/servers/eserver/xseries/systems_management/ibm_director contains the string: /xseries/ Not at all. Remember, Director started life as a xSeries-only thing -- the replacement for Netfinity Manager. The cross-platform expansion -- and particularly, the VM support -- was the result of direct and somewhat vehement customer feedback. Personally, I think the whole Virtualization Engine and IBM Director product description is a huge mess of unreadable legal folderol and cross-function confusion. It does a lot of things, few of which are necessary on a properly managed VM system. Key phrase: properly managed. It's a bear to set up, and even harder to diagnose, but if you bought into Director on xSeries, it just plugs in and it's pretty slick. If. If is good. 8-) I suppose the marketing and descriptions could be worse, but it would take even more astonishing (not too much more) creativity. But that's just my opinion, (If you think it's confusing now, wait until some wise acre decides that it belongs in the Tivoli baliwick at least the Server Group folks had an interest in not making it too awful to use sigh)
Re: Are priv CP commands logged somewhere?
According to my monitoring configurator (aka, Rick B) the CP VARY PROC would be system config change and gets monitored. CP SET SHARE is another puppy. We need to know (without an ESM) when someone enters a command like that to be able to audit when, who and to what it was done. I suppose you could write an exit around the CP command parser routines and catch the commands you care about there (or by class, if you want a quick discriminant). You could then log it somewhere via CP MSG. Someone (might have been Shimon) posted something like that a while back to catch people spooling prt/pun to a particular virtual machine.
Re: Are priv CP commands logged somewhere?
i will be curious for technical details if it is possible (i mean what configurations should you do) On 12/6/06, Schuh, Richard [EMAIL PROTECTED] wrote: The exit code could cut an accounting record, write a monitor record, or record the event in some other way. The difference between this and an EXEC is that the EXEC runs in the user's virtual machine while the exit routine is part of CP. -- *From:* The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] *On Behalf Of *Zoltan Balogh *Sent:* Wednesday, December 06, 2006 11:39 AM *To:* IBMVM@LISTSERV.UARK.EDU *Subject:* Re: Are priv CP commands logged somewhere? ok, you will know the user was authorised for using the cp command by getting the exit code. But how will you get it? What other alternates are? If you find a good way for solve this, plz share with us.. On 12/6/06, Schuh, Richard [EMAIL PROTECTED] wrote: You are on the right track. Instead of relying on an EXEC, CP Exit code or altered commands might be a better path to take. One can almost always find a way of circumventing or subverting an EXEC if bypassing the logging is desired. -- *From:* The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] *On Behalf Of *Zoltan Balogh *Sent:* Wednesday, December 06, 2006 11:27 AM *To:* IBMVM@LISTSERV.UARK.EDU *Subject:* Re: Are priv CP commands logged somewhere? i know world of VM's is very new for me but if i were under linux or windows i would rename the application, and i place (in this case) an EXEC what calls the original program with all of the given parameters, but then you can put some logging/any function for traces.. I dont know here is it a good way too or not On 12/6/06, Jim Vincent [EMAIL PROTECTED] wrote: According to my monitoring configurator (aka, Rick B) the CP VARY PROC would be system config change and gets monitored. CP SET SHARE is another puppy. We need to know (without an ESM) when someone enters a command like that to be able to audit when, who and to what it was done. ___ James Vincent Systems Engineering Consultant Nationwide Services Co., Technology Solutions Mainframe, z/VM and z/Linux Support One Nationwide Plaza 3-20-13 Columbus OH 43215-2220 U.S.A Voice: (614) 249-5547Fax: (614) 677-7681 mailto: [EMAIL PROTECTED] The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU wrote on 12/06/2006 02:16:36 PM: IBMVM@LISTSERV.UARK.EDU Are configuration monitor records cut for these events? Neale On Wednesday, 12/06/2006 at 01:58 EST, Jim Vincent [EMAIL PROTECTED] wrote: I am just starting to dig, but thought I would toss this out to the list. If someone enters a command like CP SET SHARE or CP VARY PROCESSOR, are those logged anywhere? Are they in the monitor data or accounting data?
Re: Are priv CP commands logged somewhere?
On 12/6/06, Alan Altmark [EMAIL PROTECTED] wrote: If you have an External Security Manager (ESM) such as IBM's RACF, CA's Top Secret, VM:Secure, or ACF2, then the ESM can *audit* any user, diagnose, CP command, or system function. A subset of those things can be *controlled* by the ESM. And if you do not have an ESM you can write a pipeline to audit the stuff and still defer to CP to grant access like it did without one... ^H^H^H^H If you don't have an ESM, you probably should get one if you're serious about your VM system. Rob
Re: IBM sues PSI
Well, if you limit that to IBM software, sure, and that is their right. I have not heard of any lawsuits about it in direct relation to Hercules, but then, I don't follow it all that closely anymore. I think even IBM Legal would have a tough time making a case about Hercules and Linux/390/zLinux though. Nor would they particuarly care I think. My guess is that IBM is coming out with a PowerPC based platform that will support all three major major non-Intel platforms; pSeries, iSeries, and zSeries. You can already load with AIX or i5OS on the latest pSeries boxes, and zSereis is only a few steps away. When that happens, IBM will explode into the area currently held by FlexES and/or Hercules. Or they might choose to emulate that on an Intel platform - Intel is projecting *80* core chips. That would certainly be enough to make something like Hercules capable of being a major problem for IBM. Heck, they might just go and buy Hercules then turn it into their own product. Or the rights to do something like that. Never can tell, IBM has, upon occasion, shown marketing savvy and a heck of a lot of good sense. Of course, they are also known for the exact opposite, and the current OO push with WebSphere may backfire bigtime with 'em in the mainframe area. It is WILDY sucessful in the iSeries world though. Partnerworld for Developers has turned into a sad joke compared to what it was in the mid 1990s. Only speculation, and in the meantime, I doubt seriously IBM has even a slight bit of heartburn about people running MVS or VM or Linux or whatever else is available out there under Herc. ---BeginMessage--- Hello Paul, I can say that IBM has targeted anyone using non-public domain IBM software and Hercules. Fact. Ed Martin Aultman Health Foundation 330-588-4723 [EMAIL PROTECTED] ext. 40441 -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of P. Raulerson Sent: Tuesday, December 05, 2006 9:26 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: IBM sues PSI I don't think they will ever target Hercules, even if someone puts out a commercial product with it. Does anyone know what PSI is using under the covers? A horrid thought just occurred to me that it might BE Hercules. -Paul ---End Message---
Re: Are priv CP commands logged somewhere?
I have not coded this particular function, but it would be possible. We have an ESM, VM:Secure, from Alan's list, so I do not need to code anything to do this logging. It is being done for me. From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Zoltan Balogh Sent: Wednesday, December 06, 2006 12:10 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Are priv CP commands logged somewhere? i will be curious for technical details if it is possible (i mean what configurations should you do) On 12/6/06, Schuh, Richard [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: The exit code could cut an accounting record, write a monitor record, or record the event in some other way. The difference between this and an EXEC is that the EXEC runs in the user's virtual machine while the exit routine is part of CP. From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Zoltan Balogh Sent: Wednesday, December 06, 2006 11:39 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Are priv CP commands logged somewhere? ok, you will know the user was authorised for using the cp command by getting the exit code. But how will you get it? What other alternates are? If you find a good way for solve this, plz share with us.. On 12/6/06, Schuh, Richard [EMAIL PROTECTED] wrote: You are on the right track. Instead of relying on an EXEC, CP Exit code or altered commands might be a better path to take. One can almost always find a way of circumventing or subverting an EXEC if bypassing the logging is desired. From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU ] On Behalf Of Zoltan Balogh Sent: Wednesday, December 06, 2006 11:27 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Are priv CP commands logged somewhere? i know world of VM's is very new for me but if i were under linux or windows i would rename the application, and i place (in this case) an EXEC what calls the original program with all of the given parameters, but then you can put some logging/any function for traces.. I dont know here is it a good way too or not On 12/6/06, Jim Vincent [EMAIL PROTECTED] wrote: According to my monitoring configurator (aka, Rick B) the CP VARY PROC would be system config change and gets monitored. CP SET SHARE is another puppy. We need to know (without an ESM) when someone enters a command like that to be able to audit when, who and to what it was done. ___ James Vincent Systems Engineering Consultant Nationwide Services Co., Technology Solutions Mainframe, z/VM and z/Linux Support One Nationwide Plaza 3-20-13 Columbus OH 43215-2220 U.S.A Voice: (614) 249-5547Fax: (614) 677-7681 mailto: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU wrote on 12/06/2006 02:16:36 PM: IBMVM@LISTSERV.UARK.EDU Are configuration monitor records cut for these events? Neale On Wednesday, 12/06/2006 at 01:58 EST, Jim Vincent [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: I am just starting to dig, but thought I would toss this out to the list. If someone enters a command like CP SET SHARE or CP VARY PROCESSOR, are those logged anywhere? Are they in the monitor data or accounting data?
Re: IBM sues PSI
Hercules cannot be bought in that sense of the word. It is distributed under the QPL. IBM could, of course, hire the developers and create a commercial fork in addition to stopping all other development by the current developers (if they become IBM employees). But that cannot stop other developers from continuing the public Hercules development (short of lawsuits, of course). -- John McKown Senior Systems Programmer HealthMarkets Keeping the Promise of Affordable Coverage Administrative Services Group Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Paul Raulerson Sent: Wednesday, December 06, 2006 2:17 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: IBM sues PSI Heck, they might just go and buy Hercules then turn it into their own product. Or the rights to do something like that.
Re: z/vm 4.4
*Some* is the key word there :) Watch for a FUN001 (NOT) abend when it decides not to... Marcy This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Alan Altmark Sent: Wednesday, December 06, 2006 8:45 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] z/vm 4.4 On Wednesday, 12/06/2006 at 10:29 CST, [EMAIL PROTECTED] wrote: Disregard previous 'comment'. I was incorrect, we are z/OS 1.4. (I dont get on that part of the machine much) Further, z/VM doesn't protect a guest from the ... nuances ... of the processor. It is capable of hiding some of the channel subsystem differences, but that's about it. Alan Altmark z/VM Development IBM Endicott
Re: IBM sues PSI
Yeah, but if they decided to go that way, you can bet that z/OS and z/VM would stop running on Hercules immediately - something would be built into the OCO IBM version to authenticate and license it. Which would leave Herc exactly where it is a today - a super cool place to run historical OS's and Linux. :) -Paul ---BeginMessage--- Hercules cannot be bought in that sense of the word. It is distributed under the QPL. IBM could, of course, hire the developers and create a commercial fork in addition to stopping all other development by the current developers (if they become IBM employees). But that cannot stop other developers from continuing the public Hercules development (short of lawsuits, of course). -- John McKown Senior Systems Programmer HealthMarkets Keeping the Promise of Affordable Coverage Administrative Services Group Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Paul Raulerson Sent: Wednesday, December 06, 2006 2:17 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: IBM sues PSI Heck, they might just go and buy Hercules then turn it into their own product. Or the rights to do something like that. ---End Message---
Re: IBM sues PSI
Very true. Possibly something akin to what stops z/OS from running on an IFL. -- John McKown Senior Systems Programmer HealthMarkets Keeping the Promise of Affordable Coverage Administrative Services Group Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Paul Raulerson Sent: Wednesday, December 06, 2006 3:29 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: IBM sues PSI Yeah, but if they decided to go that way, you can bet that z/OS and z/VM would stop running on Hercules immediately - something would be built into the OCO IBM version to authenticate and license it. Which would leave Herc exactly where it is a today - a super cool place to run historical OS's and Linux. :) -Paul
RSCS printer not there but there
I recommend if you are still experiencing this problem to open up a problem with the IBM support center Something doesn't sound right Best Regards, Les Geer IBM z/VM and Linux Development Early this morning we did a VM IPL and I noticed this morning a bunch of files in the RSCS printer queue which should have been printed on some LPR printers. It appears that a VSE machine was sending files to RSCS but that RSCS did not recognize the destination printer. It was if the printer was not defined. I did the following for one of these printers : smsg rscs q v222 DMTCMQ310E Location V222 is not defined mike Ready; However , if I did 'smsg rscs q sys' I would see as part of the list : v222 released LPR ... ... priority I then had to dynamically redefine the printer. For RSCS I have its console spooled and I see for this printer : 06:30:02 DMTCMX005I Location DEVVM(OPERUTIL) executing: START v222 FORM * 06:30:02 DMTCMY700I Activating link v222 LPR line class* queueingpriority 06:30:04 DMTLPR012I Link v222 exit routine LPRXONE loaded at 00FBC140 06:30:04 DMTLPR181I Link v222 ready for session initiation 07:08:08 DMTNHD144I Receiving file () on link RVHPCS from RVHPCS(SYSCICSG), records 29 HCPCSP053E V222 not in CP directory PRT FILE 2642 SENT FROM RSCS PRT WAS 2642 RECS 0029 CPY 001 N NOHOLD NOKEEP 07:08:08 DMTAXM104I File () spooled to SYSTEM -- origin RVHPCS(SYSCICSG) 12/06/06 07:08:06 EST I have had to dynamically define a bunch of printers and even after occasionally a printer would become undefined and I would need to redefine. How is this possible?
Re: IBM Director
On Wednesday, 12/06/2006 at 01:27 CST, Tom Duerbusch [EMAIL PROTECTED] wrote: IBM Director looks like a large shop would like it. One that the server and mainframe people talk to each other. We don't have COD, and the rest of the options, just didn't tickle my fancy (from the mainframe perspective). I was thinking that it might be some sort of VM/Linux tools. But didn't see anything like that. Keep looking. On the main page is a reference to z/VM Center. If you look at the demo, hover over See it in action and select managing mainframe virtual servers. Alan Altmark z/VM Development IBM Endicott
Re: IBM Director
Took me a while to figure out where the hovering would go... Turns out you must use IE instead of Firefox... Marcy This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Alan Altmark Sent: Wednesday, December 06, 2006 2:16 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] IBM Director On Wednesday, 12/06/2006 at 01:27 CST, Tom Duerbusch [EMAIL PROTECTED] wrote: IBM Director looks like a large shop would like it. One that the server and mainframe people talk to each other. We don't have COD, and the rest of the options, just didn't tickle my fancy (from the mainframe perspective). I was thinking that it might be some sort of VM/Linux tools. But didn't see anything like that. Keep looking. On the main page is a reference to z/VM Center. If you look at the demo, hover over See it in action and select managing mainframe virtual servers. Alan Altmark z/VM Development IBM Endicott
Re: IBM Director
I'm trying to get myself to SHARE in Feb... (always takes begging, pleading, crying, and fits - luckily my children have taught me well)... But was wondering in the meantime... is anyone using this yet... particularly the z/VM Center piece with the Software Distribution Premium stuff for z/Linux?? Marcy This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Alan Altmark Sent: Wednesday, December 06, 2006 11:40 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] IBM Director On Wednesday, 12/06/2006 at 01:08 CST, Mike Walter [EMAIL PROTECTED] wrote: Kind'a curious that the URL given: http://www-3.ibm.com/servers/eserver/xseries/systems_management/ibm_dire ctor contains the string: /xseries/ Tom, are you certain that was the URL given in the SDO doc? IBM Director is not a new product, having existed on xSeries long before it appeared anywhere else. The Director demo that explicitly discusses z/VM can be found there. Personally, I think the whole Virtualization Engine and IBM Director product description is a huge mess of unreadable legal folderol and cross-function confusion. I suppose the marketing and descriptions could be worse, but it would take even more astonishing (not too much more) creativity. But that's just my opinion, and does not necessarily represent the opinions or policies of Hewitt Associates.. Then I know which presentations you will be attending at SHARE, learning about VE and Director. :-) But let me give you the Sysprog Reader's Digest(R) Version: 1. VE is a collection of system management functions, including eWLM and IBM Director. 2. IBM Director is an application server that holds the Director-based applications such as IBM Virtualization Manager and the z/VM Center 3. Some functions are free, some are priced. 4. It provides a single point of control (portal) from which you can being to manage both servers AND storage (disks, you guys, disks...not memory), and eventually everything in between. 5. Watch for cooperation and integration with Tivoli and ISV products, whether launch-in-context or full snap-in. 6. Its design is based on open standards (CIM, SMI-S). It is not 100% there today since those models are just now coming to the fore in their respective organizations (DMTF, SNIA). 7. It does not pretend to be Ultimate Systems Management Tool, the answer to your dreams. The adventure continues Alan Altmark z/VM Development IBM Endicott
Re: REXX Primer
From what Ray Mansell has determined, everything in the Primer that is still current is now in the User's Guide, along with updates and additions. Given that, I think that I will abandon the Primer. Sorry to have put you to a lot of work that did not bear the desired results. From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Zoltan Balogh Sent: Wednesday, December 06, 2006 10:45 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: REXX Primer sorry then :( (and as i told wget is a standalone program, without install, without special things, so you can run it and delete it without traces) (If you have problems with home-downloading tell me, and if you dont success ill solve it for you..) On 12/6/06, Schuh, Richard [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: I hate to be the bearer of bad news, especially after all you have done. WinZip has difficulty reading the header. I get the message, Error reading the header after 0 entries, trying to either open or unpack the file. I downloaded the file by clicking the URL and choosing the save option. Company policy forbids me from installing the other programs you mentioned, so I am going to try from my home pc tonight. I will let you know the results. From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Zoltan Balogh Sent: Tuesday, December 05, 2006 11:24 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: REXX Primer you find the book here: http://hok.duf.hu/~zolo/down/publibfp.boulder.ibm.com.tar.gz http://hok.duf.hu/%7Ezolo/down/publibfp.boulder.ibm.com.tar.gz You can unpack it with winrar, winzip or simply with TotalCommander. Just unpack it, and start for example: publibfp.boulder.ibm.com\cgi-bin\bookmgr\BOOKS\dmsg8a01\CCONTENTS.html All link is working without internet except search or 1-2 special button on the top. plz send a short reply to me or to the list if i can delete it. PS1: Finally the best way was: wget -E -k -rmnp --user-agent=Mozilla (if you want to try things later by yourself) PS2: wget for windows is a simple program without install, but it usually knows more then complete programs in this topics
