Re: Best method

2008-07-01 Thread Kris Buelens
What if someone sends a vicious PROFILE EXEC to your server?  you
should check who sent something before blindly receiving it.  Or check
what was sent and only receive

The do-loop checking rdr files can be made much simpler too:

Check_Receive:
'EXECIO * CP (STEM AA. Q RDR * ALL NOHOLD'
do i=2 to aa.0
 parse var aa.i sender filenum 
 if wordpos(sender,validsenders)=0 then 'CP CH R' filenum 'HOLD'
 else do
  'EXEC RECEIVE 
  'EXEC FT22POW ...
  'ERASE ...
 end
end

And, as Rob points out: this do-loop handles all RDR files, no need
for the +2 in WAKEUP.

2008/7/2 Wakser, David <[EMAIL PROTECTED]>:
> Thanks, Cal. Others have already suggested that. But it is really overkill. 
> My entire EXEC consists of the following. And we have tested it thoroughly 
> today, and it seems to do exactly what we want. The "+2" is only because 
> files will not be coming in very often, but when they do we want to process 
> them quickly. The CHECK_OUT_FILE paragraph is only to retrieve the incoming 
> rdr file number, file name, and file type for subsequent commands. The 
> FTP2POW program does some manipulation and FTPs some files from VM to VSE.
>
> David Wakser
>
>
> /*   */
> do forever
>   "WAKEUP +2 (RDR IUCVMSG QUIET"  /* Check for files every 2 minutes */
>saverc = rc
>select
> when saverc = 4 then  /*  we received a RDR file  */
>   do
>  call CHECK_OUT_FILE
>  if flag = "Z" then  /* If it is a valid file ... */
>  do
>  "RECEIVE" filenum "(REP KEEPCC"
>  "EXEC FTP2POW" fn ft "A"
>  "ERASE" fn ft "A"
>  end
>   end   /*  end of DO for saverc = 4  */
> otherwise nop
>  end   /* end of SELECT  */
> end
>
> exit
>
> CHECK_OUT_FILE:
>
> "EXECIO * CP (STEM" aa. "STRING CP Q RDR * ALL"
> flag = "X"   /* set flag for exiting loop */
> i = 1/* point to first record */
>
>  do while flag = "X" /* see if there is a file to process */
>   parse var aa.i w1 filenum w3 w4 w5 w6 disp w8 w9 fn ft w12 .
>   if (w1 = "NO" & filenum = "RDR" & w3 = "FILES" ) | w1 = "" then return
>   else if w1 = "ORIGINID" & filenum = "FILE" then  /* if HEADER line */
> i = i + 1  /* get next rec   */
>   else if disp ¬= "NONE" then  /* if held file   */
> i = i + 1  /* get next rec   */
>   else flag = "Z"
>  end /* end of DO when flag = "X" */
>
> return
>
> -Original Message-
> From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of 
> Cal Fisher
> Sent: Tuesday, July 01, 2008 5:55 PM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: Best method
>
> Hi David
> Go to the VM download site http://www.vm.ibm.com/download/ and get the 
> vmserve package. It uses wakeup and will do just about anything you will ever 
> want your service machine to do. I have used this for years and I am very 
> happy with it.
>
> Cal Fisher
> My tour in the Navy
> The MVMUA website
>



-- 
Kris Buelens,
IBM Belgium, VM customer support


Re: FLASHCOPY Challenges/Questions Getting HCPCMM296E

2008-07-01 Thread David Kreuter
Hi: The AE and AF codes indicate to me that likely there is an already in play 
flash going on.
Try waiting a while and trying again.
You can have up to 12 targets on a single flashcopy commands.
 
X'AE'   Command cannot complete because the target of the new FLASHCOPY is 
already a target for an existing FLASHCOPY. Any single track may have  
only one source at a time. If a previous FLASHCOPY is still completing 
in the background, and its target extents overlap with the target  
extents of the current FLASHCOPY, this error condition will result.
   
X'AF'   Command cannot complete because the target of the new FLASHCOPY is 
already a source for an existing FLASHCOPY. Any single track may not   
be both a source and a target track, and a target track may have only  
one source at a time. If a previous FLASHCOPY is still completing in   
the background, and its source extents overlap with the target extents 
of the current FLASHCOPY, this error condition will result.
 
David Kreuter



From: The IBM z/VM Operating System on behalf of Don W.
Sent: Tue 7/1/2008 8:15 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: [IBMVM] FLASHCOPY Challenges/Questions Getting HCPCMM296E



I am trying to flashcopy a single source volume to multiple target volume=
s
in an EXEC. The first two FLASHCOPY commands appear to work. However the
volumes following that get the following error message:
   >>>   "CP FLASHCOPY 7000 0 3338 TO 704B 0 3338"   =
  
HCPCMM296E Status is not as required - 7000; an unexpected condition
HCPCMM296E occurred while executing a FLASHCOPY command, code = AF.
   +++ RC(296) +++ =
 =
   
>>>   "CP FLASHCOPY 7000 0 3338 TO 704C 0 3338"  =

 HCPCMM296E Status is not as required - 7000; an unexpected condition
 HCPCMM296E occurred while executing a FLASHCOPY command, code = AE. =

+++ RC(296) +++

Is there a limit on how many copies with a single source I can do at once=
?
Also, is there a way to tell the status of the background   activities an=
d
when they are complete? These  volumes were  the secondary  part of a PPR=
C
pair. I have run the ICKDSF SEVER process to sever the connection. They n=
o
longer should be used as the targets for PPRC. Is that having an effect? =


The result of a ICKDSF PPRC QUERY  is:
0 PPRC QUERY UNIT(704B) =
 =
 
-ICK00700I DEVICE INFORMATION FOR 704B IS CURRENTLY AS FOLLOWS:=
   
-  PHYSICAL DEVICE = 3390 =
 =
   
-  STORAGE CONTROLLER = 3990=
 =
 
-  STORAGE CONTROL DESCRIPTOR = E9  =
  
-  DEVICE DESCRIPTOR = 0A =
 =
   
-  ADDITIONAL DEVICE INFORMATION = 48001B35   =

-  TRKS/CYL = 15, # PRIMARY CYLS = 3339=
   
0ICK04000I DEVICE IS IN SIMPLEX STATE=
 =

 ICK00091I 704B NED=002105.000.IBM.13.00025612   =
 
0   QUERY REMOTE COPY - VOLUME =
   
 (PRIMARY)(SECONDARY)=
 
 SSIDCCA  SSIDCCA=
 
 DEVICE  LEVEL  STATE   PATH STATUS  SER #   LSS  SER #   LSS=
 
0--  -  --  ---  ---  ---=
 
 704BN/ASIMPLEX N/A  70004B   .. =
 
 25612   00   ... .. =
 
0=
 =
 =

-ICK02206I PPRCOPY QUERY FUNCTION COMPLETED SUCCESSFULLY  =


The first two volumes that worked are the same so I don't know what is
causing the problem on the third and succeeding volumes. Thanks for any
help.





Re: RACF and MAINT

2008-07-01 Thread Jim Bohnsack
Leland--No, you don't assign MAINT to the $SYSTEMS group, altho you 
could.  You DEFINE MAINT and other id's that you might need to have 
logonby access to the SURROGAT class as LOGONBY.MAINT and then PERMIT 
the id to be logoned by $CLASS.  Sorry, my RACF terminology isn't 
right.  I can never remember the command to do that, so here is a little 
exec that you just need to fill in the blank.


/* Define a surrogat profile */
/* rac rlist surrogat logonby.wsa1 all  */ 
parse upper arg shared_id  
if shared_id = '' then do  
 say 'You must enter the id of the machine you are setting up as a'   
 say 'shared userid.' 
 exit 
end
'EXEC RAC RDEFINE SURROGAT LOGONBY.'shared_id 'UACC(NONE)' 
say 'The exec to permit surrogate access is RACLGPRM shared_id surrogate'

exit

Then you PERMIT the userid or class, i.e.$SYSTEMS with this:

/* Permit an id to share an id 
*/ 
/* rac rlist surrogat logonby.wsa1 all   
*/   
parse upper arg shared_id 
logon_by_id 
if logond_by_id = '' then 
do  
 say 'You must enter both the shared_id and the 
logon_by_id' 
 
exit 

end

'EXEC RAC PERMIT LOGONBY.'shared_id 'CLASS(SURROGAT) ID('logon_by_id') 
ACCESS(READ)'   

'EXEC RAC SETROPTS RACLIST(SURROGAT) 
REFRESH' 
exit 

I set up all the systems type of id's this way.  This morning, I needed 
to restart SMTP and rather than using the SMSG command interface, I 
wanted to watch the console when it came up, I used:


l smtp logonby /my_personel_id /

I was logged onto SMTP using my own personal id's password.  It's logged 
as SMTP having been logged on by me.


Jim   
  





Leland wrote:

Quoting Jim Bohnsack <[EMAIL PROTECTED]>:

  

Leland--In addition to the following suggestions to use logonby is that
some time ago, auditors dinged us (them--it was before I arrived on the
scene) because the MAINT and other privileged userids had shared
passwords.  Auditors don't like that.  Connect your system programmer
type people to a $SYSTEMS group or something like that and PERMIT the
$SYSTEMS group to logonby to MAINT and other id's that you would want
them to share.



It will only be two of us, but if I'm understanding correctly, assigning any
other users besides MAINT to the $SYSTEMS group would automagically give us two
LOGONBY auth for those users as well.  That sounds keen to me.

Thanks,

Leland

  


--
Jim Bohnsack
Cornell University
(607) 255-1760
[EMAIL PROTECTED]


FLASHCOPY Challenges/Questions Getting HCPCMM296E

2008-07-01 Thread Don W.
I am trying to flashcopy a single source volume to multiple target volume
s
in an EXEC. The first two FLASHCOPY commands appear to work. However the
volumes following that get the following error message:
   >>>   "CP FLASHCOPY 7000 0 3338 TO 704B 0 3338"   
   
HCPCMM296E Status is not as required - 7000; an unexpected condition
HCPCMM296E occurred while executing a FLASHCOPY command, code = AF. 
   +++ RC(296) +++ 
 

>>>   "CP FLASHCOPY 7000 0 3338 TO 704C 0 3338"  
 
 HCPCMM296E Status is not as required - 7000; an unexpected condition 
 HCPCMM296E occurred while executing a FLASHCOPY command, code = AE. 
 
+++ RC(296) +++ 

Is there a limit on how many copies with a single source I can do at once
?
Also, is there a way to tell the status of the background   activities an
d
when they are complete? These  volumes were  the secondary  part of a PPR
C
pair. I have run the ICKDSF SEVER process to sever the connection. They n
o
longer should be used as the targets for PPRC. Is that having an effect? 


The result of a ICKDSF PPRC QUERY  is:
0 PPRC QUERY UNIT(704B) 
 
  
-ICK00700I DEVICE INFORMATION FOR 704B IS CURRENTLY AS FOLLOWS:

-  PHYSICAL DEVICE = 3390 
 

-  STORAGE CONTROLLER = 3990
 
  
-  STORAGE CONTROL DESCRIPTOR = E9  
   
-  DEVICE DESCRIPTOR = 0A 
 

-  ADDITIONAL DEVICE INFORMATION = 48001B35   
 
-  TRKS/CYL = 15, # PRIMARY CYLS = 3339

0ICK04000I DEVICE IS IN SIMPLEX STATE
 
 
 ICK00091I 704B NED=002105.000.IBM.13.00025612   
  
0   QUERY REMOTE COPY - VOLUME 

 (PRIMARY)(SECONDARY)
  
 SSIDCCA  SSIDCCA
  
 DEVICE  LEVEL  STATE   PATH STATUS  SER #   LSS  SER #   LSS
  
0--  -  --  ---  ---  ---
  
 704BN/ASIMPLEX N/A  70004B   .. 
  
 25612   00   ... .. 
  
0
 
 

-ICK02206I PPRCOPY QUERY FUNCTION COMPLETED SUCCESSFULLY  
 

The first two volumes that worked are the same so I don't know what is
causing the problem on the third and succeeding volumes. Thanks for any
help.


Re: RACF and MAINT

2008-07-01 Thread Schuh, Richard
Got it. Thanks.

Regards, 
Richard Schuh 

 

> -Original Message-
> From: The IBM z/VM Operating System 
> [mailto:[EMAIL PROTECTED] On Behalf Of Alan Altmark
> Sent: Tuesday, July 01, 2008 4:13 PM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: RACF and MAINT
> 
> On Tuesday, 07/01/2008 at 06:22 EDT, "Schuh, Richard" 
> <[EMAIL PROTECTED]>
> wrote:
> > I see. The way we use VM:Secure, nopass is granted through 
> the rules 
> > facility, so the ESM does handle the requests to XAUTOLOG a user. 
> > Since the requesting user's logon was authenticated by the ESM and 
> > there is a permitting rule that is also enforced by the 
> ESM, is that 
> > authorization, authentication, or perhaps half-authentication? In 
> > other words, does having to get past the ESM alter the status?
> 
> The ESM is being called to authorize you for an XAUTOLOG 
> command that does not require authentication.  When a rule 
> (policy) is applied to a subject
> (user) or object (resource) or their interaction, that is 
> authorization. 
> Authentication requires one or more of:
> - a secret that only you know (password)
> - a widget that only you posess (RSA key id or private key)
> - a biological feature that is unique to you (fingerprint, 
> retina pattern, voiceprint, DNA scan, brain wave patterns, ...)
> 
> Alan Altmark
> z/VM Development
> IBM Endicott
> 


Re: RACF and MAINT

2008-07-01 Thread Alan Altmark
On Tuesday, 07/01/2008 at 06:22 EDT, "Schuh, Richard" <[EMAIL PROTECTED]> 
wrote:
> I see. The way we use VM:Secure, nopass is granted through the rules
> facility, so the ESM does handle the requests to XAUTOLOG a user. Since
> the requesting user's logon was authenticated by the ESM and there is a
> permitting rule that is also enforced by the ESM, is that authorization,
> authentication, or perhaps half-authentication? In other words, does
> having to get past the ESM alter the status?

The ESM is being called to authorize you for an XAUTOLOG command that does 
not require authentication.  When a rule (policy) is applied to a subject 
(user) or object (resource) or their interaction, that is authorization. 
Authentication requires one or more of:
- a secret that only you know (password)
- a widget that only you posess (RSA key id or private key)
- a biological feature that is unique to you (fingerprint, retina pattern, 
voiceprint, DNA scan, brain wave patterns, ...)

Alan Altmark
z/VM Development
IBM Endicott


Re: RACF and MAINT

2008-07-01 Thread Schuh, Richard
I see. The way we use VM:Secure, nopass is granted through the rules
facility, so the ESM does handle the requests to XAUTOLOG a user. Since
the requesting user's logon was authenticated by the ESM and there is a
permitting rule that is also enforced by the ESM, is that authorization,
authentication, or perhaps half-authentication? In other words, does
having to get past the ESM alter the status?

Regards, 
Richard Schuh 

 

> -Original Message-
> From: The IBM z/VM Operating System 
> [mailto:[EMAIL PROTECTED] On Behalf Of Alan Altmark
> Sent: Tuesday, July 01, 2008 2:58 PM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: RACF and MAINT
> 
> On Tuesday, 07/01/2008 at 04:56 EDT, "Schuh, Richard" 
> <[EMAIL PROTECTED]>
> wrote:
> > "IMO, autologging a user should not reset the password count."
> > 
> > Has your humble opinion changed? Or exactly what did you 
> mean? Perhaps 
> > that if authentication requires no password, it should not 
> reset the 
> > count?
> 
> No, my opinion has not changed.  If there is no password then 
> there is no authentication, there is only authorization.  QED.
> 
> Alan Altmark
> z/VM Development
> IBM Endicott
> 


Re: RACF and MAINT

2008-07-01 Thread Leland
Quoting Rob van der Heij <[EMAIL PROTECTED]>:

> On Tue, Jul 1, 2008 at 11:24 PM, Leland <[EMAIL PROTECTED]> wrote:
>
> > Ah, I got it now.  I'll pass on your explanation to our RACF goddess.
> She'll
> > probably be wondering why I was asking y'all and not her anyway.  :-)
>
> Did you not get a "we don't have that on MVS so you don't need it on VM" ;-)
> Or did they finally get logonby on MVS as well?
>
Nope, she did it right away and was very pleased with the results.  She did ask
when RACF was being enabled on the other LPARs though.  :-)

Leland


Re: Best method

2008-07-01 Thread Rob van der Heij
On Wed, Jul 2, 2008 at 12:03 AM, Wakser, David
<[EMAIL PROTECTED]> wrote:

>   "WAKEUP +2 (RDR IUCVMSG QUIET"  /* Check for files every 2 minutes */

For what I understand of WAKEUP, this is still overkill. If you just
want to wait for RDR files, you don't need to wakeup each time to
check. When a RDR file arrives you will wake up immediately.
As long as you initialize WAKEUP properly and don't reset it, you
should not even lose RDR file triggers (so WAKEUP will return
immediately when there's another interrupt waiting).

The mix of time and event is for when you *also* need to do things
based on time schedule (eg close spool files every hour or so).

-Rob (and I apologize for distracting the thread earlier)


Re: Best method

2008-07-01 Thread Wakser, David
Thanks, Cal. Others have already suggested that. But it is really overkill. My 
entire EXEC consists of the following. And we have tested it thoroughly today, 
and it seems to do exactly what we want. The "+2" is only because files will 
not be coming in very often, but when they do we want to process them quickly. 
The CHECK_OUT_FILE paragraph is only to retrieve the incoming rdr file number, 
file name, and file type for subsequent commands. The FTP2POW program does some 
manipulation and FTPs some files from VM to VSE. 

David Wakser


/*   */
do forever  
   "WAKEUP +2 (RDR IUCVMSG QUIET"  /* Check for files every 2 minutes */
saverc = rc 
select  
 when saverc = 4 then  /*  we received a RDR file  */   
   do   
  call CHECK_OUT_FILE   
  if flag = "Z" then  /* If it is a valid file ... */   
  do
  "RECEIVE" filenum "(REP KEEPCC"   
  "EXEC FTP2POW" fn ft "A"  
  "ERASE" fn ft "A" 
  end   
   end   /*  end of DO for saverc = 4  */   
 otherwise nop  
  end   /* end of SELECT  */
end 

exit 
 
CHECK_OUT_FILE:  
   
"EXECIO * CP (STEM" aa. "STRING CP Q RDR * ALL"  
flag = "X"   /* set flag for exiting loop */ 
i = 1/* point to first record */ 
 
 do while flag = "X" /* see if there is a file to process */ 
   parse var aa.i w1 filenum w3 w4 w5 w6 disp w8 w9 fn ft w12 .  
   if (w1 = "NO" & filenum = "RDR" & w3 = "FILES" ) | w1 = "" then return
   else if w1 = "ORIGINID" & filenum = "FILE" then  /* if HEADER line */ 
 i = i + 1  /* get next rec   */ 
   else if disp ¬= "NONE" then  /* if held file   */ 
 i = i + 1  /* get next rec   */ 
   else flag = "Z"   
 end /* end of DO when flag = "X" */ 
 
return

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Cal 
Fisher
Sent: Tuesday, July 01, 2008 5:55 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method

Hi David
Go to the VM download site http://www.vm.ibm.com/download/ and get the vmserve 
package. It uses wakeup and will do just about anything you will ever want your 
service machine to do. I have used this for years and I am very happy with it.

Cal Fisher
My tour in the Navy
The MVMUA website  


Re: RACF and MAINT

2008-07-01 Thread Rob van der Heij
On Tue, Jul 1, 2008 at 11:24 PM, Leland <[EMAIL PROTECTED]> wrote:

> Ah, I got it now.  I'll pass on your explanation to our RACF goddess.  She'll
> probably be wondering why I was asking y'all and not her anyway.  :-)

Did you not get a "we don't have that on MVS so you don't need it on VM" ;-)
Or did they finally get logonby on MVS as well?

It's certainly a pity that you RACF does not let you stretch things
the other way around.
In a former life I did hack some 3rd party checks that would grant
permission to support teams for a password reset of a user, based on
their access to a RESETPW. profile (where  was one of
the groups of the target user). I could imagine a LOGONBY.SERVERS
profile to grant logonby to all service machines in the SERVERS group.
The bad part of it was that we needed to check multiple profiles
before we could decide. That's kind of unlike RACF. Not sure anymore
why we could not use the default group of the user.
-Rob


Re: RACF and MAINT

2008-07-01 Thread Alan Altmark
On Tuesday, 07/01/2008 at 04:56 EDT, "Schuh, Richard" <[EMAIL PROTECTED]> 
wrote:
> "IMO, autologging a user should not reset the password count."
> 
> Has your humble opinion changed? Or exactly what did you mean? Perhaps
> that if authentication requires no password, it should not reset the
> count?

No, my opinion has not changed.  If there is no password then there is no 
authentication, there is only authorization.  QED.

Alan Altmark
z/VM Development
IBM Endicott


Re: Best method

2008-07-01 Thread Cal Fisher
Hi David
Go to the VM download site http://www.vm.ibm.com/download/ and get the
vmserve package. It uses wakeup and will do just about anything you will
ever want your service machine to do. I have used this for years and I am
very happy with it.

Cal Fisher
My tour in the Navy
The MVMUA website  


Re: Best method

2008-07-01 Thread Wakser, David
Got ya! That's correct. 

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of McBride, Catherine
Sent: Tuesday, July 01, 2008 5:33 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method

Yes, you did (bless you!)  I should have said, 'intervened in any
official capacity'.

Kind regards,
McB

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
Behalf Of Wakser, David
Sent: Tuesday, July 01, 2008 4:30 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method


Cathy:

I absolutely did say something at the time! 


Re: Best method

2008-07-01 Thread McBride, Catherine
Yes, you did (bless you!)  I should have said, 'intervened in any official 
capacity'.

Kind regards,
McB

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
Behalf Of Wakser, David
Sent: Tuesday, July 01, 2008 4:30 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method


Cathy:

I absolutely did say something at the time! 


Re: Best method

2008-07-01 Thread Wakser, David
Cathy:

I absolutely did say something at the time! I commented that it
was rude to criticize the code of someone who was helpful enough to
present a working example. Perhaps you missed that one! 

David Wakser

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of McBride, Catherine
Sent: Tuesday, July 01, 2008 5:25 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method

Lambasting another person's code when they were simply trying to help by
sharing it didn't seem too relevant to the stated topic either, yet no
one intervened THEN.  This tells me we tolerate blatant rudeness, but
not humor interjected to defuse tension caused by the rudeness.  Guess
it's all a matter of what our values are.  The humor did get a bit over
the top.  But not nearly to the degree that good manners were
disregarded.   

Cathy McBride
Manager, Z-Series, I-Series, P-Series Support Kable News Company, Inc


 



-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
Behalf Of Daniel P. Martin
Sent: Tuesday, July 01, 2008 3:27 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method


See, folks, this is the part where I come across like I'm all
humor-deficient...  I'm pretty sure that piercings and belly-button lint
aren't terribly relevant to the stated topic of the list.

It's all about the signal-to-noise ratio, kids.  Please resist the urge
to push this one back up the hill again.

Your humble moderator,

-dan.


Re: Best method

2008-07-01 Thread McBride, Catherine
Lambasting another person's code when they were simply trying to help by 
sharing it didn't seem too relevant to the stated topic either, yet no one 
intervened THEN.  This tells me we tolerate blatant rudeness, but not humor 
interjected to defuse tension caused by the rudeness.  Guess it's all a matter 
of what our values are.  The humor did get a bit over the top.  But not nearly 
to the degree that good manners were disregarded.   

Cathy McBride
Manager, Z-Series, I-Series, P-Series Support
Kable News Company, Inc


 



-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
Behalf Of Daniel P. Martin
Sent: Tuesday, July 01, 2008 3:27 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method


See, folks, this is the part where I come across like I'm all 
humor-deficient...  I'm pretty sure that piercings and belly-button lint 
aren't terribly relevant to the stated topic of the list.

It's all about the signal-to-noise ratio, kids.  Please resist the urge 
to push this one back up the hill again.

Your humble moderator,

-dan.


Re: RACF and MAINT

2008-07-01 Thread Leland
Quoting Mike Harding <[EMAIL PROTECTED]>:

> No, that's backwards.  You permit the $SYSTEMS group to the logonby.maint
> resource, then users who have a connect to that group automatically have
> the ability to use logonby to the maint id.  You would need to define the
> resource and do the permit for any other shared id for which you wanted to
> do logonby.  I think you could use a RACFVARS profile if you wanted to act
> on a group of userids.  See the Security Admin's manual.
> In the simple case, though:
> 1. ADDGROUP $SYSTEMS OWNER(SYS1)
> 2. CONNECT USER1 GROUP($SYSTEMS)
> 3. CONNECT USER2 GROUP($SYSTEMS)
> ...
> 4. RDEF SURROGAT LOGONBY.MAINT UACC(NONE)...
> 5. PERMIT LOGONBY.MAINT CLASS(SURROGAT) ACCESS(READ) ID($SYSTEMS)
>
> Now as your systems group membership fluctuates, you connect new members
> to the $systems group and remove departing ones.  But per this example
> you'd have to repeat the RDEF/PERMIT for other service/maintenance
> userids.
> --Mike
>
Ah, I got it now.  I'll pass on your explanation to our RACF goddess.  She'll
probably be wondering why I was asking y'all and not her anyway.  :-)

Thanks again,

Leland


Re: RACF and MAINT

2008-07-01 Thread Alan Altmark
On Tuesday, 07/01/2008 at 03:57 EDT, Leland <[EMAIL PROTECTED]> wrote:
> It will only be two of us, but if I'm understanding correctly, assigning 
any
> other users besides MAINT to the $SYSTEMS group would automagically give 
us two
> LOGONBY auth for those users as well.  That sounds keen to me.

In general, any authorization that applies to a user also applies to a 
group of users.  As users join or leave the group, their privileges are 
adjusted automatically.  (This is RACF's role-based authorization 
mechansism.)

Alan Altmark
z/VM Development
IBM Endicott


Re: RACF and MAINT

2008-07-01 Thread Mike Harding
No, that's backwards.  You permit the $SYSTEMS group to the logonby.maint 
resource, then users who have a connect to that group automatically have 
the ability to use logonby to the maint id.  You would need to define the 
resource and do the permit for any other shared id for which you wanted to 
do logonby.  I think you could use a RACFVARS profile if you wanted to act 
on a group of userids.  See the Security Admin's manual.
In the simple case, though:
1. ADDGROUP $SYSTEMS OWNER(SYS1)
2. CONNECT USER1 GROUP($SYSTEMS)
3. CONNECT USER2 GROUP($SYSTEMS)
...
4. RDEF SURROGAT LOGONBY.MAINT UACC(NONE)...
5. PERMIT LOGONBY.MAINT CLASS(SURROGAT) ACCESS(READ) ID($SYSTEMS)

Now as your systems group membership fluctuates, you connect new members 
to the $systems group and remove departing ones.  But per this example 
you'd have to repeat the RDEF/PERMIT for other service/maintenance 
userids.
--Mike





It will only be two of us, but if I'm understanding correctly, assigning 
any
other users besides MAINT to the $SYSTEMS group would automagically give 
us two
LOGONBY auth for those users as well.  That sounds keen to me.

Thanks,

Leland


Re: Best method

2008-07-01 Thread David Boyes
> Rob, all my belly button does is collect lintwhat does your's do
for
> you? :-)

That is way, *way* too much information. 


Re: RACF and MAINT

2008-07-01 Thread Schuh, Richard
"IMO, autologging a user should not reset the password count."

Has your humble opinion changed? Or exactly what did you mean? Perhaps
that if authentication requires no password, it should not reset the
count?

Regards, 
Richard Schuh 

 

> -Original Message-
> From: The IBM z/VM Operating System 
> [mailto:[EMAIL PROTECTED] On Behalf Of Alan Altmark
> Sent: Tuesday, July 01, 2008 1:48 PM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: RACF and MAINT
> 
> On Tuesday, 07/01/2008 at 04:41 EDT, "Schuh, Richard" 
> <[EMAIL PROTECTED]>
> wrote:
> > What about Class G AUTOLOG that requires a password?
> 
> What about it?  The autolog is preceded by an authentication. 
>  If correct, 
> the counts would be reset.  So it's the authentication that would be 
> resetting it, not the autologging.
> 
> Alan Altmark
> z/VM Development
> IBM Endicott
> 


Re: creating an alternate z/VM res and spool pack

2008-07-01 Thread Juarez, David T.
Franz your procedures worked! We are now IPLed off a different Res pack, spool 
and page pack. Thank you very much for your help. 

David Juárez
CDC eServer Systems Support  (310B)
IT Specialist - Systems Programmer
512-326-6116  Work
 

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of 
[EMAIL PROTECTED]
Sent: Tuesday, July 01, 2008 11:04 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: creating an alternate z/VM res and spool pack

David,

it's easier than you might think.

I have done it several times with this procedure in user maint

1. attach new volumes to maint
2. copy all 530res, (if mod 3 530w01,530w02), 530pag and 530spl to new 
volumes with DDR. You can of course also restore them from a backup.
3. CPFMTXA device-of-530res 530rs1 LABEL (530rs1 is the new label of the 
new 530res disk), analog for all other volumes
4. Q MDISK 191 LOC
This shows the location of the maint 191 on 530res.
5. DEF MDISK 111 startcyl-of-step4 size-of-step-4 530rs1 (The MAINT user 
must have OPTION DEVMAINT in user direct when using this command.)
AC 111 T
X USER DIRECT T
C /530RES/530RS1/**   (or whatever new label you have set in step3), 
analog for all other volumes
   save the changes
DIRECTXA USER DIRECT T (The DIRECTORY statement in the new USER 
DIRECT must point also to the new res. Because it is not the active res 
it is only updated on disk, not made online)
6. Q MDISK CF1 LOC
7. DEF MDISK 111 startcyl-of-step6 size-of-step-6 530rs1
AC 111 T
X SYSTEM CONFIG T
C /530RES/530RS1/**   (or whatever new label you have set in step3), 
analog for all other volumes
eventually changes of the consoles, but this can also be overwritten 
with the standalone loader
eventually changes of user_volume_include list etc. This depends if 
you want to start the new vm in 2nd level or lpar. In 2nd level the 
system sees only the volumes which you define to the user, in lpar it 
sees all the volumes it is allowed to by iocds.
save the changes
8. ready to take IPL. You must do a FORCE start at first IPL

Hope this helps.


kind regards
Franz Josef Pohlen


Juarez, David T. schrieb:
>
> We just unloaded z/VM 5.3 and would like to create an alternate RES 
> and spool pack. Current names are 530RES and 530SPL. Does someone have 
> simple procedures to create alternate res and alternate spool volumes 
> so we can IPL off the alternates and leave the original res and spool 
> untouched. The Guide for Automated Installation and Service shows how 
> to backup the Res and saved system and segments but the SPXTAPE 
> utility implies you want to restore to the current spool volume not an 
> alternate.  Also is anyone using symbolics in system config and/or the 
> user directory like we do in z/OS parmlib?  Thanks.
>
>  
>
> David T. Juárez
>
> Department of Veterans Affairs
>
> IT Specialist
>
>  
>


Re: RACF and MAINT

2008-07-01 Thread Alan Altmark
On Tuesday, 07/01/2008 at 04:41 EDT, "Schuh, Richard" <[EMAIL PROTECTED]> 
wrote:
> What about Class G AUTOLOG that requires a password?

What about it?  The autolog is preceded by an authentication.  If correct, 
the counts would be reset.  So it's the authentication that would be 
resetting it, not the autologging.

Alan Altmark
z/VM Development
IBM Endicott


Re: RACF and MAINT

2008-07-01 Thread Schuh, Richard
What about Class G AUTOLOG that requires a password?

Regards, 
Richard Schuh 

 

> -Original Message-
> From: The IBM z/VM Operating System 
> [mailto:[EMAIL PROTECTED] On Behalf Of Alan Altmark
> Sent: Tuesday, July 01, 2008 1:38 PM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: RACF and MAINT
> 
> 
> IMO, autologging a user should not reset the password count.  
>


Re: RACF and MAINT

2008-07-01 Thread Alan Altmark
On Tuesday, 07/01/2008 at 01:59 EDT, Kris Buelens <[EMAIL PROTECTED]> 
wrote:
> We never had MAINT being revoked due too invalid logon attempts, maybe
> the nightly XAUTOLOG resets the invalid pswd count too.

IMO, autologging a user should not reset the password count.  Inactivity 
timer, yes.  Bad password count, no.  Only a successful authentication, a 
RESUME or ALTUSER NOPASSWORD should reset the invalid password count.

OTOH, it's been that way for decades and it hasn't been a cause for alarm.

... Or maybe it has, but you just didn't know it... bwahahahaha!!

Alan Altmark
z/VM Development
IBM Endicott


Re: Best method

2008-07-01 Thread Huegel, Thomas
It all depends on what you want to do.
In some cases you may not want to wait forever for a file that may never arrive.
So you put the timer in.
If on the other hand the vm is totally driven by the arrival of a RDR file, 
then there would be no reason to have a timer value.


-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
Behalf Of Schuh, Richard
Sent: Tuesday, July 01, 2008 3:25 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method


And if you leave that RDR file in the queue without holding it, it will
give you another interrupt immediately.

Regards, 
Richard Schuh 

 

> -Original Message-
> From: The IBM z/VM Operating System 
> [mailto:[EMAIL PROTECTED] On Behalf Of Kris Buelens
> Sent: Tuesday, July 01, 2008 12:40 PM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: Best method
> 
> 2008/7/1 Huegel, Thomas <[EMAIL PROTECTED]>:
> > That's one reason why we put a timer in WAKEUP so we can go 
> recheck the RDR every so often.
> >
> 
> With WAKEUP (RDR, there is no need to add a timer interrupt too.
> WAKEUP will present RC=4 when a RDR file is available.
> 
> --
> Kris Buelens,
> IBM Belgium, VM customer support
> P.S. today at 16h15 I shut down my customer's last 2 VM 
> systems and waived goodbye to the people I worked with the 
> last years.  For those who understand some French: for most 
> of them it propably was an "a Dieu", no an "au revoir".
> 


Re: Best method

2008-07-01 Thread Daniel P. Martin
See, folks, this is the part where I come across like I'm all 
humor-deficient...  I'm pretty sure that piercings and belly-button lint 
aren't terribly relevant to the stated topic of the list.


It's all about the signal-to-noise ratio, kids.  Please resist the urge 
to push this one back up the hill again.


Your humble moderator,

-dan.


Re: Best method

2008-07-01 Thread Schuh, Richard
And if you leave that RDR file in the queue without holding it, it will
give you another interrupt immediately.

Regards, 
Richard Schuh 

 

> -Original Message-
> From: The IBM z/VM Operating System 
> [mailto:[EMAIL PROTECTED] On Behalf Of Kris Buelens
> Sent: Tuesday, July 01, 2008 12:40 PM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: Best method
> 
> 2008/7/1 Huegel, Thomas <[EMAIL PROTECTED]>:
> > That's one reason why we put a timer in WAKEUP so we can go 
> recheck the RDR every so often.
> >
> 
> With WAKEUP (RDR, there is no need to add a timer interrupt too.
> WAKEUP will present RC=4 when a RDR file is available.
> 
> --
> Kris Buelens,
> IBM Belgium, VM customer support
> P.S. today at 16h15 I shut down my customer's last 2 VM 
> systems and waived goodbye to the people I worked with the 
> last years.  For those who understand some French: for most 
> of them it propably was an "a Dieu", no an "au revoir".
> 


Re: Best method

2008-07-01 Thread Huegel, Thomas
I know a girl that has a diamond in hers she always shows it at the beach.

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
Behalf Of Dave Jones
Sent: Tuesday, July 01, 2008 3:18 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method


Absolutely not! My wife simply forbids it, even at the beach:-)

Schuh, Richard wrote:
> Dave,
> 
> Sounds like yours is doing what it is supposed to do. You probably still
> do not go around showing it off, do you?
> 
> Regards, 
> Richard Schuh 
> 
>  
> 
>>
>> Rob, all my belly button does is collect lintwhat does 
>> your's do for you? :-)
>>
>> Happy Forth of July, too, and Canada Day as well.
>>
>>
>>
>> Rich Smrcina wrote:
>>> And definitely not at SHARE!  :)
>>>
>>> Rob van der Heij wrote:
 My belly button does what I need it to do, but I don't show it to 
 others ;-)

>>>
>> --
>> DJ
>>
>> V/Soft
>>z/VM and mainframe Linux expertise, training,
>>consulting, and software development
>> www.vsoft-software.com
>>

-- 
DJ

V/Soft
   z/VM and mainframe Linux expertise, training,
   consulting, and software development
www.vsoft-software.com


Re: Best method

2008-07-01 Thread Dave Jones

Absolutely not! My wife simply forbids it, even at the beach:-)

Schuh, Richard wrote:

Dave,

Sounds like yours is doing what it is supposed to do. You probably still
do not go around showing it off, do you?

Regards, 
Richard Schuh 

 



Rob, all my belly button does is collect lintwhat does 
your's do for you? :-)


Happy Forth of July, too, and Canada Day as well.



Rich Smrcina wrote:

And definitely not at SHARE!  :)

Rob van der Heij wrote:
My belly button does what I need it to do, but I don't show it to 
others ;-)





--
DJ

V/Soft
   z/VM and mainframe Linux expertise, training,
   consulting, and software development
www.vsoft-software.com



--
DJ

V/Soft
  z/VM and mainframe Linux expertise, training,
  consulting, and software development
www.vsoft-software.com


Re: RACF and MAINT

2008-07-01 Thread Leland
Quoting Jim Bohnsack <[EMAIL PROTECTED]>:

> Leland--In addition to the following suggestions to use logonby is that
> some time ago, auditors dinged us (them--it was before I arrived on the
> scene) because the MAINT and other privileged userids had shared
> passwords.  Auditors don't like that.  Connect your system programmer
> type people to a $SYSTEMS group or something like that and PERMIT the
> $SYSTEMS group to logonby to MAINT and other id's that you would want
> them to share.

It will only be two of us, but if I'm understanding correctly, assigning any
other users besides MAINT to the $SYSTEMS group would automagically give us two
LOGONBY auth for those users as well.  That sounds keen to me.

Thanks,

Leland


Re: RACF and MAINT

2008-07-01 Thread Jim Bohnsack
Leland--In addition to the following suggestions to use logonby is that 
some time ago, auditors dinged us (them--it was before I arrived on the 
scene) because the MAINT and other privileged userids had shared 
passwords.  Auditors don't like that.  Connect your system programmer 
type people to a $SYSTEMS group or something like that and PERMIT the 
$SYSTEMS group to logonby to MAINT and other id's that you would want 
them to share.


Jim

Leland Lucius wrote:
Being new to this RACF on VM thing, I'm a little paranoid about how the 
MAINT user should be handled in relation to things like password policies.


Mind you, we don't use MAINT all that often, but I'd hate to get myself 
in a position where I needed it and was unable to use it because the 
password was revoked or something similar.


How do y'all handle MAINT with RACF.  Is it really a major concern or am 
I just being a fraidy cat?


Leland

  


--
Jim Bohnsack
Cornell University
(607) 255-1760
[EMAIL PROTECTED]


Re: Best method

2008-07-01 Thread Kris Buelens
2008/7/1 Huegel, Thomas <[EMAIL PROTECTED]>:
> That's one reason why we put a timer in WAKEUP so we can go recheck the RDR 
> every so often.
>

With WAKEUP (RDR, there is no need to add a timer interrupt too.
WAKEUP will present RC=4 when a RDR file is available.

-- 
Kris Buelens,
IBM Belgium, VM customer support
P.S. today at 16h15 I shut down my customer's last 2 VM systems and
waived goodbye to the people I worked with the last years.  For those
who understand some French: for most of them it propably was an "a
Dieu", no an "au revoir".


Re: RACF and MAINT

2008-07-01 Thread Leland Lucius
This was all good stuff and to summarize...

We remove the password from MAINT using NOPASSWORD and we give us special

people LOGONBY.  Don't know if we'll worry about the inactivity issue jus
t
yet, but we'll see.

Thanks a heap all,

Leland


Re: Best method

2008-07-01 Thread Schuh, Richard
Dave,

Sounds like yours is doing what it is supposed to do. You probably still
do not go around showing it off, do you?

Regards, 
Richard Schuh 

 

> 
> 
> Rob, all my belly button does is collect lintwhat does 
> your's do for you? :-)
> 
> Happy Forth of July, too, and Canada Day as well.
> 
> 
> 
> Rich Smrcina wrote:
> > And definitely not at SHARE!  :)
> > 
> > Rob van der Heij wrote:
> >> My belly button does what I need it to do, but I don't show it to 
> >> others ;-)
> >>
> > 
> > 
> 
> --
> DJ
> 
> V/Soft
>z/VM and mainframe Linux expertise, training,
>consulting, and software development
> www.vsoft-software.com
> 


Re: Best method

2008-07-01 Thread Dave Jones

And to further muddy the waters here a bit, there is the RXWAIT package, 
available here:
http://uvvm.uvic.ca/~freeware/
can do what WAKEUP does and much more as well. Both excellent documentation and the source 
code is provided. I can, however, understand David's desire to use only plain vanilla 
tools, that are guaranteed to be available on any  z/VM system. Makes installing and 
running his tool on multiple systems easier.


Rob, all my belly button does is collect lintwhat does your's do for you? 
:-)

Happy Forth of July, too, and Canada Day as well.



Rich Smrcina wrote:

And definitely not at SHARE!  :)

Rob van der Heij wrote:
My belly button does what I need it to do, but I don't show it to 
others ;-)







--
DJ

V/Soft
  z/VM and mainframe Linux expertise, training,
  consulting, and software development
www.vsoft-software.com


Re: Best method

2008-07-01 Thread Huegel, Thomas
That's one reason why we put a timer in WAKEUP so we can go recheck the RDR 
every so often.

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
Behalf Of Rob van der Heij
Sent: Tuesday, July 01, 2008 12:31 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method


On Tue, Jul 1, 2008 at 7:07 PM, Huegel, Thomas <[EMAIL PROTECTED]> wrote:

> Not pretty, but it has worked for a very long time. Sort of like an old
> horse she may not look like much, but she still plows the field.

My belly button does what I need it to do, but I don't show it to others ;-)

I would obviously go for the Pipes version and avoid the mentioned
risk of missing files while you were not looking.
-Rob


Re: RACF and MAINT

2008-07-01 Thread Kris Buelens
We never had MAINT being revoked due too invalid logon attempts, maybe
the nightly XAUTOLOG resets the invalid pswd count too.

2008/7/1 Alan Altmark <[EMAIL PROTECTED]>:
>
> On Tuesday, 07/01/2008 at 12:29 EDT, Kris Buelens <[EMAIL PROTECTED]>
> wrote:
> > Use'd define MAINT as a logonby user
> >   RAC RDEFINE SURROGAT LOGONBY.MAINT
> >   RAC PERMIT MAINT.LOGONBY CLASS(SURROGAT) ID(
> > to define which users/groups can issue
> >LOGON MAINT BY  xxx  and give the pwsd of xxx
> >
> > As to avoid RACF revoking users due to inactivity: XAUTOLOG them every
> now and
> > then.
>
> As of z/VM 5.3, you can now remove a user's password entirely (ALTUSER
> NOPASSWORD).  This prevents revocation due to invalid password attempts.
> Preventing revocation due to inactivity is known in RACF terms as a
> "protected" user, support that is in z/OS, but not yet in z/VM.
>
> Alan Altmark
> z/VM Development
> IBM Endicott



--
Kris Buelens,
IBM Belgium, VM customer support


Re: Best method

2008-07-01 Thread Rich Smrcina

And definitely not at SHARE!  :)

Rob van der Heij wrote:

My belly button does what I need it to do, but I don't show it to others ;-)




--
Rich Smrcina
VM Assist, Inc.
Phone: 414-491-6001
Ans Service:  360-715-2467
rich.smrcina at vmassist.com
http://www.linkedin.com/in/richsmrcina

Catch the WAVV!  http://www.wavv.org
WAVV 2009 - Orlando, FL - May 15-19, 2009


Re: Best method

2008-07-01 Thread Rob van der Heij
On Tue, Jul 1, 2008 at 7:07 PM, Huegel, Thomas <[EMAIL PROTECTED]> wrote:

> Not pretty, but it has worked for a very long time. Sort of like an old
> horse she may not look like much, but she still plows the field.

My belly button does what I need it to do, but I don't show it to others ;-)

I would obviously go for the Pipes version and avoid the mentioned
risk of missing files while you were not looking.
-Rob


Re: Best method

2008-07-01 Thread Mark Pace
Looks okay to me.  I have a lot of stuff like that.  It's a tool, not a
piece of art!

On Tue, Jul 1, 2008 at 1:07 PM, Huegel, Thomas <[EMAIL PROTECTED]> wrote:

>  Not pretty, but it has worked for a very long time. Sort of like an old
> horse she may not look like much, but she still plows the field.
>
> -Original Message-
> *From:* The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
> Behalf Of *Kris Buelens
> *Sent:* Tuesday, July 01, 2008 11:59 AM
> *To:* IBMVM@LISTSERV.UARK.EDU
> *Subject:* Re: Best method
>
> Ugh, such ugly code.  Have a look at the TCVM1 package to learn some REXX
> coding techniques.  It is an HTML selfstudy.
>
> 2008/7/1 Huegel, Thomas <[EMAIL PROTECTED]>:
>
>> Not many comments to explain the code but here is an example.
>>
>> WAKEUP RESET
>> CP SET IMSG IUCV
>> CP SET  MSG IUCV
>> .
>> .
>> .
>> .
>> .
>>
>> DATEOK:
>> FLDATE = RIGHT(DATE(S,TDATE,U),6)
>> SET CMSTYPE HT
>> TELL OPERATOR AT NODEID GET LOG FLDATE
>> WAKEUP '+00:00:15 (IUCVMSG'
>> IF RC = 2 THEN SIGNAL ERREXT3
>> PULL RESPONSE
>> PARSE VAR RESPONSE MTYPE . MNO . SPNO .
>> IF FIND(RESPONSE,'DMSDSK002E') ¬=0 THEN SIGNAL ERREXT1
>> WAKEUP '+00:00:15 (RDR '
>> IF RC = 2 THEN SIGNAL ERREXT3
>>   DO FOREVER
>>  SPNO =  FIND(RESPONSE,'RDR FILE')
>>  IF SPNO ¬= 0 THEN DO
>>   SPNO = SPNO + 2
>>   SIGNAL PEEKIT
>>  END
>>  WAKEUP '+00:00:10 (IUCVMSG'
>>  IF RC = 2 THEN SIGNAL ERREXT3
>>  PULL RESPONSE
>>  PARSE VAR RESPONSE MTYPE . MNO . SPNO .
>>END
>> PEEKIT:
>> DESBUF
>> SPNO = WORD(RESPONSE,SPNO)
>> QUEUE COMMAND SET RESERVED 1 HI SEELOG NODEID TDATE
>> QUEUE COMMAND SET PF15 FFILE NODEID FLDATE
>> PEEK SPNO '(FOR * PROFILE PROFDISZ'
>> PURGE RDR SPNO
>> EXIT:
>> WAKEUP RESET
>> SET MSG ON
>> SET IMSG ON
>> EXIT
>>
>> -Original Message-
>> From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
>> Behalf Of Wakser, David
>> Sent: Tuesday, July 01, 2008 9:10 AM
>> To: IBMVM@LISTSERV.UARK.EDU
>>  Subject: Best method
>>
>>
>> All:
>>
>>What is the best method to code, for a SVM, a wait for a file to
>> arrive in its reader?
>>
>>I have a (very old) EXEC that has a "do forever" loop with a
>> "EXECIO * CP (STEM" aa. "STRING CP Q RDR * ALL" command followed by a
>> SLEEP when no files are found. Is there a better method of "waking up"
>> an EXEC when a RDR file arrives?
>>
>>Thanks, in advance.
>>
>> David Wakser
>>
>
>
>
> --
> Kris Buelens,
> IBM Belgium, VM customer support
>
>


-- 
Mark Pace
Mainline Information Systems


Re: RACF and MAINT

2008-07-01 Thread Alan Altmark
On Tuesday, 07/01/2008 at 12:29 EDT, Kris Buelens <[EMAIL PROTECTED]> 
wrote:
> Use'd define MAINT as a logonby user
>   RAC RDEFINE SURROGAT LOGONBY.MAINT
>   RAC PERMIT MAINT.LOGONBY CLASS(SURROGAT) ID(
> to define which users/groups can issue
>LOGON MAINT BY  xxx  and give the pwsd of xxx
> 
> As to avoid RACF revoking users due to inactivity: XAUTOLOG them every 
now and 
> then.

As of z/VM 5.3, you can now remove a user's password entirely (ALTUSER 
NOPASSWORD).  This prevents revocation due to invalid password attempts. 
Preventing revocation due to inactivity is known in RACF terms as a 
"protected" user, support that is in z/OS, but not yet in z/VM.

Alan Altmark
z/VM Development
IBM Endicott


Re: Best method

2008-07-01 Thread Huegel, Thomas
Not pretty, but it has worked for a very long time. Sort of like an old horse 
she may not look like much, but she still plows the field.

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] Behalf Of Kris 
Buelens
Sent: Tuesday, July 01, 2008 11:59 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method


Ugh, such ugly code.  Have a look at the TCVM1 package to learn some REXX 
coding techniques.  It is an HTML selfstudy.


2008/7/1 Huegel, Thomas < [EMAIL PROTECTED]>:


Not many comments to explain the code but here is an example.

WAKEUP RESET
CP SET IMSG IUCV
CP SET  MSG IUCV
.
.
.
.
.

DATEOK:
FLDATE = RIGHT(DATE(S,TDATE,U),6)
SET CMSTYPE HT
TELL OPERATOR AT NODEID GET LOG FLDATE
WAKEUP '+00:00:15 (IUCVMSG'
IF RC = 2 THEN SIGNAL ERREXT3
PULL RESPONSE
PARSE VAR RESPONSE MTYPE . MNO . SPNO .
IF FIND(RESPONSE,'DMSDSK002E') ¬=0 THEN SIGNAL ERREXT1
WAKEUP '+00:00:15 (RDR '
IF RC = 2 THEN SIGNAL ERREXT3
  DO FOREVER
 SPNO =  FIND(RESPONSE,'RDR FILE')
 IF SPNO ¬= 0 THEN DO
  SPNO = SPNO + 2
  SIGNAL PEEKIT
 END
 WAKEUP '+00:00:10 (IUCVMSG'
 IF RC = 2 THEN SIGNAL ERREXT3
 PULL RESPONSE
 PARSE VAR RESPONSE MTYPE . MNO . SPNO .
   END
PEEKIT:
DESBUF
SPNO = WORD(RESPONSE,SPNO)
QUEUE COMMAND SET RESERVED 1 HI SEELOG NODEID TDATE
QUEUE COMMAND SET PF15 FFILE NODEID FLDATE
PEEK SPNO '(FOR * PROFILE PROFDISZ'
PURGE RDR SPNO
EXIT:
WAKEUP RESET
SET MSG ON
SET IMSG ON
EXIT


-Original Message-
From: The IBM z/VM Operating System [mailto: [EMAIL PROTECTED]
Behalf Of Wakser, David

Sent: Tuesday, July 01, 2008 9:10 AM
To: IBMVM@LISTSERV.UARK.EDU

Subject: Best method


All:

   What is the best method to code, for a SVM, a wait for a file to
arrive in its reader?

   I have a (very old) EXEC that has a "do forever" loop with a
"EXECIO * CP (STEM" aa. "STRING CP Q RDR * ALL" command followed by a
SLEEP when no files are found. Is there a better method of "waking up"
an EXEC when a RDR file arrives?

   Thanks, in advance.

David Wakser





--
Kris Buelens,
IBM Belgium, VM customer support



Re: Best method

2008-07-01 Thread Wakser, David
Kris:
 
Be nice, please - he was kind enough to send me the code to see a
"living" example! :)
 
David Wakser



From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Kris Buelens
Sent: Tuesday, July 01, 2008 12:57 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method


To all readers thinking they'd nee to intercept the message of an
arriving spool file: it leaves a hole: reader files sitting there before
WAKEUP/PIPE/xxx were active remain in the reader until another RDR file
arrives.  WAKEUP hasn't that problem.

And, you can save yourself a lot a work by looking at my RxServer
package: it handles reader fies etc, built around WAKEUP, with built-in
security etc.


2008/7/1 Hughes, Jim <[EMAIL PROTECTED]>:


How would the STARMSG pipeline detect someone typing a message
at the console and hitting the ENTER key?  Would it require another
concurrent pipe running?

 

I like WAKEUP because I can set timer interrupts, reader
interrupts, message interrupts, and console interrupts.  

___
Jim Hughes
603-271-5586
"Its kind of fun to do the impossible." (Walt Disney)





From: The IBM z/VM Operating System
[mailto:[EMAIL PROTECTED] On Behalf Of Richard Troth
Sent: Tuesday, July 01, 2008 12:12 PM 

To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method



 

>Is there a method of also trapping the "message" 

> that shows when a file is sent to the VM reader?
> I need it to issue the RECEIVE properly. In the HELP WAKEUP
>  it seems that setting the various message
> types to IUCV should work, but it doesn't seem to do that,


Well ... everyone was saying "use WAKEUP" and that's good
advice, but I prefer to start with Pipelines.  Pipes would catch all
those messages you're interested in. 

Your EXEC would look something like ... 



/* REXX */ 
'CP SET IMSG IUCV' 
'PIPE STARMSG | REXX MYTHING' 


And then MYTHING REXX might begin as ...

/* REXX */ 
Do Forever 
  'PEEKTO RECORD'   /* examine the record, but do not consume it
*/ 
  If rc ^= 0 Then Leave 
  /* parse the variable "record" and figger things out */ 
  'READTO'   /* now consume that record and loop to get another
*/ 
End 



You can do all of this with WAKEUP.  The calling semantics are
different. 


-- R; <><






-- 
Kris Buelens,
IBM Belgium, VM customer support 


Re: Best method

2008-07-01 Thread Kris Buelens
Ugh, such ugly code.  Have a look at the TCVM1 package to learn some REXX
coding techniques.  It is an HTML selfstudy.

2008/7/1 Huegel, Thomas <[EMAIL PROTECTED]>:

> Not many comments to explain the code but here is an example.
>
> WAKEUP RESET
> CP SET IMSG IUCV
> CP SET  MSG IUCV
> .
> .
> .
> .
> .
>
> DATEOK:
> FLDATE = RIGHT(DATE(S,TDATE,U),6)
> SET CMSTYPE HT
> TELL OPERATOR AT NODEID GET LOG FLDATE
> WAKEUP '+00:00:15 (IUCVMSG'
> IF RC = 2 THEN SIGNAL ERREXT3
> PULL RESPONSE
> PARSE VAR RESPONSE MTYPE . MNO . SPNO .
> IF FIND(RESPONSE,'DMSDSK002E') ¬=0 THEN SIGNAL ERREXT1
> WAKEUP '+00:00:15 (RDR '
> IF RC = 2 THEN SIGNAL ERREXT3
>   DO FOREVER
>  SPNO =  FIND(RESPONSE,'RDR FILE')
>  IF SPNO ¬= 0 THEN DO
>   SPNO = SPNO + 2
>   SIGNAL PEEKIT
>  END
>  WAKEUP '+00:00:10 (IUCVMSG'
>  IF RC = 2 THEN SIGNAL ERREXT3
>  PULL RESPONSE
>  PARSE VAR RESPONSE MTYPE . MNO . SPNO .
>END
> PEEKIT:
> DESBUF
> SPNO = WORD(RESPONSE,SPNO)
> QUEUE COMMAND SET RESERVED 1 HI SEELOG NODEID TDATE
> QUEUE COMMAND SET PF15 FFILE NODEID FLDATE
> PEEK SPNO '(FOR * PROFILE PROFDISZ'
> PURGE RDR SPNO
> EXIT:
> WAKEUP RESET
> SET MSG ON
> SET IMSG ON
> EXIT
>
> -Original Message-
> From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
> Behalf Of Wakser, David
> Sent: Tuesday, July 01, 2008 9:10 AM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Best method
>
>
> All:
>
>What is the best method to code, for a SVM, a wait for a file to
> arrive in its reader?
>
>I have a (very old) EXEC that has a "do forever" loop with a
> "EXECIO * CP (STEM" aa. "STRING CP Q RDR * ALL" command followed by a
> SLEEP when no files are found. Is there a better method of "waking up"
> an EXEC when a RDR file arrives?
>
>Thanks, in advance.
>
> David Wakser
>



-- 
Kris Buelens,
IBM Belgium, VM customer support


Re: Best method

2008-07-01 Thread Kris Buelens
To all readers thinking they'd nee to intercept the message of an arriving
spool file: it leaves a hole: reader files sitting there before
WAKEUP/PIPE/xxx were active remain in the reader until another RDR file
arrives.  WAKEUP hasn't that problem.

And, you can save yourself a lot a work by looking at my RxServer package:
it handles reader fies etc, built around WAKEUP, with built-in security etc.

2008/7/1 Hughes, Jim <[EMAIL PROTECTED]>:

>  How would the STARMSG pipeline detect someone typing a message at the
> console and hitting the ENTER key?  Would it require another concurrent pipe
> running?
>
>
>
> I like WAKEUP because I can set timer interrupts, reader interrupts,
> message interrupts, and console interrupts.
>
> ___
> Jim Hughes
> 603-271-5586
> "Its kind of fun to do the impossible." (Walt Disney)
>   --
>
> *From:* The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] *On
> Behalf Of *Richard Troth
> *Sent:* Tuesday, July 01, 2008 12:12 PM
> *To:* IBMVM@LISTSERV.UARK.EDU
> *Subject:* Re: Best method
>
>
>
> >Is there a method of also trapping the "message"
>
> > that shows when a file is sent to the VM reader?
> > I need it to issue the RECEIVE properly. In the HELP WAKEUP
> >  it seems that setting the various message
> > types to IUCV should work, but it doesn't seem to do that,
>
>
> Well ... everyone was saying "use WAKEUP" and that's good advice, but I
> prefer to start with Pipelines.  Pipes would catch all those messages you're
> interested in.
>
> Your EXEC would look something like ...
>
> /* REXX */
> 'CP SET IMSG IUCV'
> 'PIPE STARMSG | REXX MYTHING'
>
>
> And then MYTHING REXX might begin as ...
>
> /* REXX */
> Do Forever
>   'PEEKTO RECORD'   /* examine the record, but do not consume it */
>   If rc ^= 0 Then Leave
>   /* parse the variable "record" and figger things out */
>   'READTO'   /* now consume that record and loop to get another */
> End
>
>
>
> You can do all of this with WAKEUP.  The calling semantics are different.
>
>
> -- R; <><
>
>


-- 
Kris Buelens,
IBM Belgium, VM customer support


Re: Best method

2008-07-01 Thread Richard Troth
Jim Hughes asked:
> How would the STARMSG pipeline detect someone
> typing a message at the console and hitting the ENTER key?
>  Would it require another concurrent pipe running?


Concurrent, yes.
For console input, I would simply fan-in a CONSOLE stage.
You can even fan-in TCP connections, if you like.  (trickier)


What I typically do is attach the stages from within the gem
(eg: MYTHING REXX).  Something like ...


/* REXX */
 ... other stuff ...
'ADDPIPE (END !) STARMSG | FI: FANINANY | *.INPUT:' ,
  'CONSOLE ASYNC | SPEC /CONSOLE / | FI:'
 ... main body and the peekto/readto loop ...


In this example, STARMSG prefixes each record
with a message type, so I also prefix "CONSOLE "
to each record of terminal input.


-- R; <><


Re: RACF and MAINT

2008-07-01 Thread Romanowski, John (OFT)
We do LOGONBY but some people forget and try to logon directly to MAINT,
enter their own logon password (an incorrect pw for MAINT), RACF
dutifully counts these consecutive wrong logon pw's and after 1 attempt
in Jan, 1 attempt in July and the 3rd consecutive one in say May of the
following year RACF thinks MAINT has tried 3 consecutive times to logon
with the wrong password and revokes MAINT.

RACF needs a better sense of time.



This e-mail, including any attachments, may be confidential, privileged or 
otherwise legally protected. It is intended only for the addressee. If you 
received this e-mail in error or from someone who was not authorized to send it 
to you, do not disseminate, copy or otherwise use this e-mail or its 
attachments.  Please notify the sender immediately by reply e-mail and delete 
the e-mail from your system.


-Original Message-

From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Rich Smrcina
Sent: Tuesday, July 01, 2008 12:27 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: RACF and MAINT

I think you have a valid concern.  The 'Security on z/VM' redbook 
suggests to use 'logon by' for MAINT to avoid a) giving out it's 
password and 2) the possibility of it's password being revoked due to 
people possibly forgetting it.  A sensible solution.

Leland Lucius wrote:
> Being new to this RACF on VM thing, I'm a little paranoid about how
the 
> MAINT user should be handled in relation to things like password
policies.
> 
> Mind you, we don't use MAINT all that often, but I'd hate to get
myself 
> in a position where I needed it and was unable to use it because the 
> password was revoked or something similar.
> 
> How do y'all handle MAINT with RACF.  Is it really a major concern or
am 
> I just being a fraidy cat?
> 
> Leland
> 

-- 
Rich Smrcina
VM Assist, Inc.
Phone: 414-491-6001
Ans Service:  360-715-2467
rich.smrcina at vmassist.com
http://www.linkedin.com/in/richsmrcina

Catch the WAVV!  http://www.wavv.org
WAVV 2009 - Orlando, FL - May 15-19, 2009


Re: Best method

2008-07-01 Thread Hughes, Jim
How would the STARMSG pipeline detect someone typing a message at the
console and hitting the ENTER key?  Would it require another concurrent
pipe running?

 

I like WAKEUP because I can set timer interrupts, reader interrupts,
message interrupts, and console interrupts.  

___
Jim Hughes
603-271-5586
"Its kind of fun to do the impossible." (Walt Disney)



From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Richard Troth
Sent: Tuesday, July 01, 2008 12:12 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method

 

>Is there a method of also trapping the "message"
> that shows when a file is sent to the VM reader?
> I need it to issue the RECEIVE properly. In the HELP WAKEUP
>  it seems that setting the various message
> types to IUCV should work, but it doesn't seem to do that,


Well ... everyone was saying "use WAKEUP" and that's good advice, but I
prefer to start with Pipelines.  Pipes would catch all those messages
you're interested in. 

Your EXEC would look something like ... 

/* REXX */ 
'CP SET IMSG IUCV' 
'PIPE STARMSG | REXX MYTHING' 


And then MYTHING REXX might begin as ...

/* REXX */ 
Do Forever 
  'PEEKTO RECORD'   /* examine the record, but do not consume it */ 
  If rc ^= 0 Then Leave 
  /* parse the variable "record" and figger things out */ 
  'READTO'   /* now consume that record and loop to get another */ 
End 



You can do all of this with WAKEUP.  The calling semantics are
different. 


-- R; <><





Re: Best method

2008-07-01 Thread Wakser, David
Jim:

Thanks. Yes, I am somewhat comfortable with PIPES. Perhaps I'll
just revert back to how I did it 20 years ago - except I'll spruce it up
with PIPES!

David Wakser 

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Hughes, Jim
Sent: Tuesday, July 01, 2008 12:23 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method

Querying the rdr and processing the responses is a better approach than
asking WAKEUP to stack the reader arrived messages.

As long as reader files exist in your reader, WAKEUP gets a single
interrupt, not an interrupt for each file. 

I pipe the query rdr responses into a pipeline and hit the ground
running.

Are you familiar with using PIPES? I can supply a little example of
using WAKEUP followed by a PIPE command.

Good Luck.


Jim Hughes
603-271-5586
"Its kind of fun to do the impossible." (Walt Disney)


=>-Original Message-
=>From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
On
=>Behalf Of Wakser, David
=>Sent: Tuesday, July 01, 2008 12:19 PM
=>To: IBMVM@LISTSERV.UARK.EDU
=>Subject: Re: Best method
=>
=>Yes, I can try that - it just seemed that WAKEUP would handle the
=>message also. The SET IMSG didn't help.
=>
=>David Wakser
=>
=>-Original Message-
=>From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
On
=>Behalf Of Bob Bates
=>Sent: Tuesday, July 01, 2008 12:14 PM
=>To: IBMVM@LISTSERV.UARK.EDU
=>Subject: Re: Best method
=>
=>I believe you could do a 'CP SET IMSG IUCV' and trap that message as
=>well off the WAKEUP. Could Piping a CP Q R or CP Q RDR ALL into a
=>variable get you the information you need so you don't have to handle
=>both interupts?
=>
=>
=>Bob Bates
=>Enterprise Hosting Services - Enterprise Virtualization - z/VM and
=>z/Linux
=>
=>w. (469)892-6660
=>c. (214) 907-5071
=>
=>"This message may contain confidential and/or privileged information.
=>If you are not the addressee or authorized to receive this for the
=>addressee, you must not use, copy, disclose, or take any action based
on
=>this message or any information herein.  If you have received this
=>message in error, please advise the sender immediately by reply e-mail
=>and delete this message.  Thank you for your cooperation."
=>
=>
=>
=>-Original Message-
=>From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
On
=>Behalf Of Wakser, David
=>Sent: Tuesday, July 01, 2008 11:04 AM
=>To: IBMVM@LISTSERV.UARK.EDU
=>Subject: Re: Best method
=>
=>Bob:
=>
=>  Is there a method of also trapping the "message" that shows when
=>a file is sent to the VM reader? I need it to issue the RECEIVE
=>properly. In the HELP WAKEUP it seems that setting the various message
=>types to IUCV should work, but it doesn't seem to do that,
=>
=>  Thanks, in advance.
=>
=>David Wakser
=>
=>-Original Message-
=>From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
On
=>Behalf Of Bob Bates
=>Sent: Tuesday, July 01, 2008 10:21 AM
=>To: IBMVM@LISTSERV.UARK.EDU
=>Subject: Re: Best method
=>
=>Absolutely,
=>  Use the WAKEUP module.
=>
=>  I have a program that waits for reader files and messages. The
=>waiting part looks like:
=>
=>
=>  do forever
=>  'WAKEUP +30 (RDR IUCVMSG'
=>  saverc = rc
=>  select
=>  when saverc = 4 then
=>  "process reader file"
=>  when saverc = 5 then
=>  "process a message"
=>
=>You might want to change the +30 if all it does is wait for reader
=>files. See HELP WAKEUP for details


Re: RACF and MAINT

2008-07-01 Thread Kris Buelens
Use'd define MAINT as a logonby user
  RAC RDEFINE SURROGAT LOGONBY.MAINT
  RAC PERMIT MAINT.LOGONBY CLASS(SURROGAT) ID(
to define which users/groups can issue
   LOGON MAINT BY  xxx  and give the pwsd of xxx

As to avoid RACF revoking users due to inactivity: XAUTOLOG them every now
and then.

2008/7/1 Leland Lucius <[EMAIL PROTECTED]>:

> Being new to this RACF on VM thing, I'm a little paranoid about how the
> MAINT user should be handled in relation to things like password policies.
>
> Mind you, we don't use MAINT all that often, but I'd hate to get myself in
> a position where I needed it and was unable to use it because the password
> was revoked or something similar.
>
> How do y'all handle MAINT with RACF.  Is it really a major concern or am I
> just being a fraidy cat?
>
> Leland
>



-- 
Kris Buelens,
IBM Belgium, VM customer support


Re: RACF and MAINT

2008-07-01 Thread Rich Smrcina
I think you have a valid concern.  The 'Security on z/VM' redbook 
suggests to use 'logon by' for MAINT to avoid a) giving out it's 
password and 2) the possibility of it's password being revoked due to 
people possibly forgetting it.  A sensible solution.


Leland Lucius wrote:
Being new to this RACF on VM thing, I'm a little paranoid about how the 
MAINT user should be handled in relation to things like password policies.


Mind you, we don't use MAINT all that often, but I'd hate to get myself 
in a position where I needed it and was unable to use it because the 
password was revoked or something similar.


How do y'all handle MAINT with RACF.  Is it really a major concern or am 
I just being a fraidy cat?


Leland



--
Rich Smrcina
VM Assist, Inc.
Phone: 414-491-6001
Ans Service:  360-715-2467
rich.smrcina at vmassist.com
http://www.linkedin.com/in/richsmrcina

Catch the WAVV!  http://www.wavv.org
WAVV 2009 - Orlando, FL - May 15-19, 2009


Re: Best method

2008-07-01 Thread Hughes, Jim
Querying the rdr and processing the responses is a better approach than
asking WAKEUP to stack the reader arrived messages.

As long as reader files exist in your reader, WAKEUP gets a single
interrupt, not an interrupt for each file. 

I pipe the query rdr responses into a pipeline and hit the ground
running.

Are you familiar with using PIPES? I can supply a little example of
using WAKEUP followed by a PIPE command.

Good Luck.

 
Jim Hughes
603-271-5586
"Its kind of fun to do the impossible." (Walt Disney)


=>-Original Message-
=>From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
On
=>Behalf Of Wakser, David
=>Sent: Tuesday, July 01, 2008 12:19 PM
=>To: IBMVM@LISTSERV.UARK.EDU
=>Subject: Re: Best method
=>
=>Yes, I can try that - it just seemed that WAKEUP would handle the
=>message also. The SET IMSG didn't help.
=>
=>David Wakser
=>
=>-Original Message-
=>From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
On
=>Behalf Of Bob Bates
=>Sent: Tuesday, July 01, 2008 12:14 PM
=>To: IBMVM@LISTSERV.UARK.EDU
=>Subject: Re: Best method
=>
=>I believe you could do a 'CP SET IMSG IUCV' and trap that message as
=>well off the WAKEUP. Could Piping a CP Q R or CP Q RDR ALL into a
=>variable get you the information you need so you don't have to handle
=>both interupts?
=>
=>
=>Bob Bates
=>Enterprise Hosting Services - Enterprise Virtualization - z/VM and
=>z/Linux
=>
=>w. (469)892-6660
=>c. (214) 907-5071
=>
=>"This message may contain confidential and/or privileged information.
=>If you are not the addressee or authorized to receive this for the
=>addressee, you must not use, copy, disclose, or take any action based
on
=>this message or any information herein.  If you have received this
=>message in error, please advise the sender immediately by reply e-mail
=>and delete this message.  Thank you for your cooperation."
=>
=>
=>
=>-Original Message-
=>From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
On
=>Behalf Of Wakser, David
=>Sent: Tuesday, July 01, 2008 11:04 AM
=>To: IBMVM@LISTSERV.UARK.EDU
=>Subject: Re: Best method
=>
=>Bob:
=>
=>  Is there a method of also trapping the "message" that shows when
=>a file is sent to the VM reader? I need it to issue the RECEIVE
=>properly. In the HELP WAKEUP it seems that setting the various message
=>types to IUCV should work, but it doesn't seem to do that,
=>
=>  Thanks, in advance.
=>
=>David Wakser
=>
=>-Original Message-
=>From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
On
=>Behalf Of Bob Bates
=>Sent: Tuesday, July 01, 2008 10:21 AM
=>To: IBMVM@LISTSERV.UARK.EDU
=>Subject: Re: Best method
=>
=>Absolutely,
=>  Use the WAKEUP module.
=>
=>  I have a program that waits for reader files and messages. The
=>waiting part looks like:
=>
=>
=>  do forever
=>  'WAKEUP +30 (RDR IUCVMSG'
=>  saverc = rc
=>  select
=>  when saverc = 4 then
=>  "process reader file"
=>  when saverc = 5 then
=>  "process a message"
=>
=>You might want to change the +30 if all it does is wait for reader
=>files. See HELP WAKEUP for details


Re: Best method

2008-07-01 Thread Richard Troth
>Is there a method of also trapping the "message"
> that shows when a file is sent to the VM reader?
> I need it to issue the RECEIVE properly. In the HELP WAKEUP
>  it seems that setting the various message
> types to IUCV should work, but it doesn't seem to do that,


Well ... everyone was saying "use WAKEUP" and that's good advice, but I
prefer to start with Pipelines.  Pipes would catch all those messages you're
interested in.

Your EXEC would look something like ...

/* REXX */
'CP SET IMSG IUCV'
'PIPE STARMSG | REXX MYTHING'

And then MYTHING REXX might begin as ...

/* REXX */
Do Forever
  'PEEKTO RECORD'   /* examine the record, but do not consume it */
  If rc ^= 0 Then Leave
  /* parse the variable "record" and figger things out */
  'READTO'   /* now consume that record and loop to get another */
End


You can do all of this with WAKEUP.  The calling semantics are different.


-- R; <><


Re: Best method

2008-07-01 Thread Schuh, Richard
You did tell WAKEUP to trigger on IUCV messages, I presume. That has to
be explicitly specified.

Regards, 
Richard Schuh 

 

> -Original Message-
> From: The IBM z/VM Operating System 
> [mailto:[EMAIL PROTECTED] On Behalf Of Wakser, David
> Sent: Tuesday, July 01, 2008 9:11 AM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: Best method
> 
> Did that - it didn't help.  
> 
> -Original Message-
> From: The IBM z/VM Operating System 
> [mailto:[EMAIL PROTECTED] On Behalf Of Schuh, Richard
> Sent: Tuesday, July 01, 2008 12:09 PM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: Best method
> 
> You would probably need to SET CPCONIO IUCV. 
> 
> Regards,
> Richard Schuh 
> 
>  
> 


Re: Best method

2008-07-01 Thread Wakser, David
Yes, I can try that - it just seemed that WAKEUP would handle the
message also. The SET IMSG didn't help.

David Wakser 

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Bob Bates
Sent: Tuesday, July 01, 2008 12:14 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method

I believe you could do a 'CP SET IMSG IUCV' and trap that message as
well off the WAKEUP. Could Piping a CP Q R or CP Q RDR ALL into a
variable get you the information you need so you don't have to handle
both interupts?  


Bob Bates
Enterprise Hosting Services - Enterprise Virtualization - z/VM and
z/Linux 

w. (469)892-6660
c. (214) 907-5071

"This message may contain confidential and/or privileged information.
If you are not the addressee or authorized to receive this for the
addressee, you must not use, copy, disclose, or take any action based on
this message or any information herein.  If you have received this
message in error, please advise the sender immediately by reply e-mail
and delete this message.  Thank you for your cooperation."



-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Wakser, David
Sent: Tuesday, July 01, 2008 11:04 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method

Bob:

Is there a method of also trapping the "message" that shows when
a file is sent to the VM reader? I need it to issue the RECEIVE
properly. In the HELP WAKEUP it seems that setting the various message
types to IUCV should work, but it doesn't seem to do that,

Thanks, in advance. 

David Wakser

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Bob Bates
Sent: Tuesday, July 01, 2008 10:21 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method

Absolutely,
Use the WAKEUP module.

I have a program that waits for reader files and messages. The
waiting part looks like: 


do forever
'WAKEUP +30 (RDR IUCVMSG'
saverc = rc
select
when saverc = 4 then 
"process reader file"
when saverc = 5 then
"process a message"

You might want to change the +30 if all it does is wait for reader
files. See HELP WAKEUP for details


RACF and MAINT

2008-07-01 Thread Leland Lucius
Being new to this RACF on VM thing, I'm a little paranoid about how the 
MAINT user should be handled in relation to things like password policies.


Mind you, we don't use MAINT all that often, but I'd hate to get myself 
in a position where I needed it and was unable to use it because the 
password was revoked or something similar.


How do y'all handle MAINT with RACF.  Is it really a major concern or am 
I just being a fraidy cat?


Leland


Re: Best method

2008-07-01 Thread Huegel, Thomas
Not many comments to explain the code but here is an example.

 WAKEUP RESET  
 CP SET IMSG IUCV  
 CP SET  MSG IUCV  
.
.
.
.
.

DATEOK:
 FLDATE = RIGHT(DATE(S,TDATE,U),6) 
 SET CMSTYPE HT
 TELL OPERATOR AT NODEID GET LOG FLDATE
 WAKEUP '+00:00:15 (IUCVMSG'   
 IF RC = 2 THEN SIGNAL ERREXT3 
 PULL RESPONSE 
 PARSE VAR RESPONSE MTYPE . MNO . SPNO .   
 IF FIND(RESPONSE,'DMSDSK002E') ¬=0 THEN SIGNAL ERREXT1
 WAKEUP '+00:00:15 (RDR '  
 IF RC = 2 THEN SIGNAL ERREXT3 
   DO FOREVER  
  SPNO =  FIND(RESPONSE,'RDR FILE')
  IF SPNO ¬= 0 THEN DO 
   SPNO = SPNO + 2 
   SIGNAL PEEKIT   
  END  
  WAKEUP '+00:00:10 (IUCVMSG'  
  IF RC = 2 THEN SIGNAL ERREXT3
  PULL RESPONSE  
  PARSE VAR RESPONSE MTYPE . MNO . SPNO .
END  
PEEKIT:  
 DESBUF  
 SPNO = WORD(RESPONSE,SPNO)  
 QUEUE COMMAND SET RESERVED 1 HI SEELOG NODEID TDATE 
 QUEUE COMMAND SET PF15 FFILE NODEID FLDATE  
 PEEK SPNO '(FOR * PROFILE PROFDISZ' 
 PURGE RDR SPNO  
EXIT:
 WAKEUP RESET
 SET MSG ON  
 SET IMSG ON 
 EXIT

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
Behalf Of Wakser, David
Sent: Tuesday, July 01, 2008 9:10 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Best method


All:

What is the best method to code, for a SVM, a wait for a file to
arrive in its reader?

I have a (very old) EXEC that has a "do forever" loop with a
"EXECIO * CP (STEM" aa. "STRING CP Q RDR * ALL" command followed by a
SLEEP when no files are found. Is there a better method of "waking up"
an EXEC when a RDR file arrives?

Thanks, in advance.

David Wakser


Re: Best method

2008-07-01 Thread Bob Bates
I believe you could do a 'CP SET IMSG IUCV' and trap that message as
well off the WAKEUP. Could Piping a CP Q R or CP Q RDR ALL into a
variable get you the information you need so you don't have to handle
both interupts?  


Bob Bates
Enterprise Hosting Services - Enterprise Virtualization - z/VM and
z/Linux 

w. (469)892-6660
c. (214) 907-5071

"This message may contain confidential and/or privileged information.
If you are not the addressee or authorized to receive this for the
addressee, you must not use, copy, disclose, or take any action based on
this message or any information herein.  If you have received this
message in error, please advise the sender immediately by reply e-mail
and delete this message.  Thank you for your cooperation."



-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Wakser, David
Sent: Tuesday, July 01, 2008 11:04 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method

Bob:

Is there a method of also trapping the "message" that shows when
a file is sent to the VM reader? I need it to issue the RECEIVE
properly. In the HELP WAKEUP it seems that setting the various message
types to IUCV should work, but it doesn't seem to do that,

Thanks, in advance. 

David Wakser

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Bob Bates
Sent: Tuesday, July 01, 2008 10:21 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method

Absolutely,
Use the WAKEUP module.

I have a program that waits for reader files and messages. The
waiting part looks like: 


do forever
'WAKEUP +30 (RDR IUCVMSG'
saverc = rc
select
when saverc = 4 then 
"process reader file"
when saverc = 5 then
"process a message"

You might want to change the +30 if all it does is wait for reader
files. See HELP WAKEUP for details


Re: Best method

2008-07-01 Thread Wakser, David
Did that - it didn't help.  

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Schuh, Richard
Sent: Tuesday, July 01, 2008 12:09 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method

You would probably need to SET CPCONIO IUCV. 

Regards,
Richard Schuh 

 


Re: Best method

2008-07-01 Thread Wakser, David
I don't have access to that product, and I prefer to remain "plain
vanilla" with this. But it's good to know, and thanks for the
information.

David Wakser

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Schuh, Richard
Sent: Tuesday, July 01, 2008 12:07 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method

If you have CA products available, check out KWAKEUP. It handles
everything that WAKEUP does and does it better. For example, it gives
you an option to put the information about the event causing the
interrupt into REXX variables. There is no need to clear the stack of
wakeup entries that did not cause the interrupt. It also does not have
any necessity of having an artificial pre-midnight wakeup. An interval
can be started on one day and not trigger the interrupt until some
future date. It is WAKEUP compatible should you choose to go that route.
 


Re: Best method

2008-07-01 Thread Hughes, Jim
Just issue a PIPE CP Q RDR * ALL to get all the reader files sitting in
your reader queue. This way you can also check for "HELD" files, prt/pun
files, form, etc...

I've never used the "file in reader" message for anything.

There is a "XRDR" command to help as well.  Issue HELP XRDR

Good Luck.

 
Jim Hughes
603-271-5586
"Its kind of fun to do the impossible." (Walt Disney)


=>-Original Message-
=>From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
On
=>Behalf Of Wakser, David
=>Sent: Tuesday, July 01, 2008 12:04 PM
=>To: IBMVM@LISTSERV.UARK.EDU
=>Subject: Re: Best method
=>
=>Bob:
=>
=>  Is there a method of also trapping the "message" that shows when
=>a file is sent to the VM reader? I need it to issue the RECEIVE
=>properly. In the HELP WAKEUP it seems that setting the various message
=>types to IUCV should work, but it doesn't seem to do that,
=>
=>  Thanks, in advance.
=>
=>David Wakser
=>
=>-Original Message-
=>From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
On
=>Behalf Of Bob Bates
=>Sent: Tuesday, July 01, 2008 10:21 AM
=>To: IBMVM@LISTSERV.UARK.EDU
=>Subject: Re: Best method
=>
=>Absolutely,
=>  Use the WAKEUP module.
=>
=>  I have a program that waits for reader files and messages. The
=>waiting part looks like:
=>
=>
=>  do forever
=>  'WAKEUP +30 (RDR IUCVMSG'
=>  saverc = rc
=>  select
=>  when saverc = 4 then
=>  "process reader file"
=>  when saverc = 5 then
=>  "process a message"
=>
=>You might want to change the +30 if all it does is wait for reader
=>files. See HELP WAKEUP for details


Re: Best method

2008-07-01 Thread Schuh, Richard
You would probably need to SET CPCONIO IUCV. 

Regards, 
Richard Schuh 

 

> -Original Message-
> From: The IBM z/VM Operating System 
> [mailto:[EMAIL PROTECTED] On Behalf Of Wakser, David
> Sent: Tuesday, July 01, 2008 9:04 AM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: Best method
> 
> Bob:
> 
>   Is there a method of also trapping the "message" that 
> shows when a file is sent to the VM reader? I need it to 
> issue the RECEIVE properly. In the HELP WAKEUP it seems that 
> setting the various message types to IUCV should work, but it 
> doesn't seem to do that,
> 
>   Thanks, in advance. 
> 
> David Wakser
> 
> -Original Message-
> From: The IBM z/VM Operating System 
> [mailto:[EMAIL PROTECTED] On Behalf Of Bob Bates
> Sent: Tuesday, July 01, 2008 10:21 AM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: Best method
> 
> Absolutely,
>   Use the WAKEUP module.
> 
>   I have a program that waits for reader files and 
> messages. The waiting part looks like: 
> 
> 
>   do forever
>   'WAKEUP +30 (RDR IUCVMSG'
>   saverc = rc
>   select
>   when saverc = 4 then 
>   "process reader file"
>   when saverc = 5 then
>   "process a message"
>   
> You might want to change the +30 if all it does is wait for 
> reader files. See HELP WAKEUP for details
> 


Re: Best method

2008-07-01 Thread Schuh, Richard
If you have CA products available, check out KWAKEUP. It handles
everything that WAKEUP does and does it better. For example, it gives
you an option to put the information about the event causing the
interrupt into REXX variables. There is no need to clear the stack of
wakeup entries that did not cause the interrupt. It also does not have
any necessity of having an artificial pre-midnight wakeup. An interval
can be started on one day and not trigger the interrupt until some
future date. It is WAKEUP compatible should you choose to go that route.

Regards, 
Richard Schuh 

 

> -Original Message-
> From: The IBM z/VM Operating System 
> [mailto:[EMAIL PROTECTED] On Behalf Of Wakser, David
> Sent: Tuesday, July 01, 2008 7:24 AM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: Best method
> 
> Thanks, Bob. I haven't used WAKEUP for many years, so I'll try it.
> 
> David Wakser 
> 
> -Original Message-
> From: The IBM z/VM Operating System 
> [mailto:[EMAIL PROTECTED] On Behalf Of Bob Bates
> Sent: Tuesday, July 01, 2008 10:21 AM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: Best method
> 
> Absolutely,
>   Use the WAKEUP module.
> 
>   I have a program that waits for reader files and 
> messages. The waiting part looks like: 
> 
> 
>   do forever
>   'WAKEUP +30 (RDR IUCVMSG'
>   saverc = rc
>   select
>   when saverc = 4 then 
>   "process reader file"
>   when saverc = 5 then
>   "process a message"
>   
> You might want to change the +30 if all it does is wait for 
> reader files. See HELP WAKEUP for details
> 


Re: Best method

2008-07-01 Thread Wakser, David
Bob:

Is there a method of also trapping the "message" that shows when
a file is sent to the VM reader? I need it to issue the RECEIVE
properly. In the HELP WAKEUP it seems that setting the various message
types to IUCV should work, but it doesn't seem to do that,

Thanks, in advance. 

David Wakser

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Bob Bates
Sent: Tuesday, July 01, 2008 10:21 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method

Absolutely,
Use the WAKEUP module.

I have a program that waits for reader files and messages. The
waiting part looks like: 


do forever
'WAKEUP +30 (RDR IUCVMSG'
saverc = rc
select
when saverc = 4 then 
"process reader file"
when saverc = 5 then
"process a message"

You might want to change the +30 if all it does is wait for reader
files. See HELP WAKEUP for details


Re: creating an alternate z/VM res and spool pack

2008-07-01 Thread [EMAIL PROTECTED]

David,

it's easier than you might think.

I have done it several times with this procedure in user maint

1. attach new volumes to maint
2. copy all 530res, (if mod 3 530w01,530w02), 530pag and 530spl to new 
volumes with DDR. You can of course also restore them from a backup.
3. CPFMTXA device-of-530res 530rs1 LABEL (530rs1 is the new label of the 
new 530res disk), analog for all other volumes

4. Q MDISK 191 LOC
   This shows the location of the maint 191 on 530res.
5. DEF MDISK 111 startcyl-of-step4 size-of-step-4 530rs1 (The MAINT user 
must have OPTION DEVMAINT in user direct when using this command.)

   AC 111 T
   X USER DIRECT T
   C /530RES/530RS1/**   (or whatever new label you have set in step3), 
analog for all other volumes

  save the changes
   DIRECTXA USER DIRECT T (The DIRECTORY statement in the new USER 
DIRECT must point also to the new res. Because it is not the active res 
it is only updated on disk, not made online)

6. Q MDISK CF1 LOC
7. DEF MDISK 111 startcyl-of-step6 size-of-step-6 530rs1
   AC 111 T
   X SYSTEM CONFIG T
   C /530RES/530RS1/**   (or whatever new label you have set in step3), 
analog for all other volumes
   eventually changes of the consoles, but this can also be overwritten 
with the standalone loader
   eventually changes of user_volume_include list etc. This depends if 
you want to start the new vm in 2nd level or lpar. In 2nd level the 
system sees only the volumes which you define to the user, in lpar it 
sees all the volumes it is allowed to by iocds.

   save the changes
8. ready to take IPL. You must do a FORCE start at first IPL

Hope this helps.


kind regards
Franz Josef Pohlen


Juarez, David T. schrieb:


We just unloaded z/VM 5.3 and would like to create an alternate RES 
and spool pack. Current names are 530RES and 530SPL. Does someone have 
simple procedures to create alternate res and alternate spool volumes 
so we can IPL off the alternates and leave the original res and spool 
untouched. The Guide for Automated Installation and Service shows how 
to backup the Res and saved system and segments but the SPXTAPE 
utility implies you want to restore to the current spool volume not an 
alternate.  Also is anyone using symbolics in system config and/or the 
user directory like we do in z/OS parmlib?  Thanks.


 


David T. Juárez

Department of Veterans Affairs

IT Specialist

 



Re: Making Devices Available

2008-07-01 Thread Schuh, Richard
It was not changing the h/w configuration, the devices have been in the
IOCP and actually installed for months. They were in a
Devices_NotAccpted list because our storage management group is MVS
based and does not want us to have any devices not specified as VM
devices available to the system. They are Not_Accepted because there are
6000 of them, so they would take up a lot of storage and get in the way
of some monitoring functions.The devices in question are ones being
given to VM for a project. I needed to change them to ACCEPTED and make
them available without an IPL. The commands I needed were:
 
SET DEVICES ACCEPTED rdev1-rdevn
SET RDEVICE  rdev1-rdevn TYPE DASD
VARY ON rdev1-rdevn 
 
It turns out that I cannot use the commands that alter the IOCDS because
the token is not a VM token. I tried and failed :-) The h/w group that
does IOCPs is also MVS based.   
 

Regards, 
Richard Schuh 

 

 




From: The IBM z/VM Operating System
[mailto:[EMAIL PROTECTED] On Behalf Of Kris Buelens
Sent: Tuesday, July 01, 2008 2:45 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Making Devices Available


DEFINE DEVICE/CNTLUNIT/CHPID are the commands to dynamically
change HW the IO-config (i.e. the IOCP so to speak).  SET RDEVICE is
normally required only when the device doesn't answer to a SENSID (kind
of dynamic HCPRIO)


2008/7/1 Schuh, Richard <[EMAIL PROTECTED]>:


We have some DASD devices that were, until a few minutes
ago, in the Devices_NotAccepted list. I have made some of them accepted,
both in the SYSTEM CONFIG and by command. Now, I am confronted with a
DEFINE DEVICE command that, from the HELP files is as clear as murky
water to me (the problem may well be between my ears). Is it as simple
as "DEFINE DEVICE F6EF-F6F7 UNITADD EF CUNUMBER  DASD" ( to be
filled in when someone supplies the value from the IOCP - I do not have
ready access)? Assuming that I get them defined, is all that is left
varying them online? They will initially be attached to the user who is
going to prepare them for use, so there will be no ATTACH to SYSTEM.

Regards,
Richard Schuh 





-- 
Kris Buelens,
IBM Belgium, VM customer support 



Re: creating an alternate z/VM res and spool pack

2008-07-01 Thread Rob van der Heij
On Tue, Jul 1, 2008 at 3:06 PM, Juarez, David T. <[EMAIL PROTECTED]> wrote:

> We just unloaded z/VM 5.3 and would like to create an alternate RES and
> spool pack. Current names are 530RES and 530SPL. Does someone have simple
> procedures to create alternate res and alternate spool volumes so we can IPL
> off the alternates and leave the original res and spool untouched. The Guide

I'm not sure this is a common approach for dealing with system
changes. Maybe you z/OS background is leading you to roads where you
should not be. As far as I have seen, the 530RES has a lot of service
machines data disks (like the 191) and you probably should not
alternate between two sets. A lot of the configuration changes that
you might find in the parmlib on z/OS is less central in z/VM.
There's already two parm disks on the sysres volume. If you want, you
can alternate between those to provide an easy backout for the new
nucleus or maybe changes to the system configuration file.
If you really don't care at all about spool files, you could probably
use it just to get the new NSS files over with a checkpoint IPL. But
overall, I think this approach will require a lot of tinkering.

Rob


Re: creating an alternate z/VM res and spool pack

2008-07-01 Thread Phil Tully

No need to vary them off.

The 530res pack in Maint's 123 mdisk and the 530spl is Maint's 122 mdisk.

DDR the 123 and 122 to another volume.

Here are the steps I suggested to one of my customers recently:

*1. Duplicate the current z/VM system volumes* :

1. DDR 530RES(maint's 123), 530W01 (Maint's 12x), 530SPL(Maint's 122) to 
new volumes. (Are there more than 1 spool volumes?)


*2. Bring up the copied volumes in a 2nd level z/VM system*.

1. Use the userid IBMUSER

2. Add to the option line in the user direct LNKNOPAS to IBMUSER

3. once logged to IBMUSER attach the new system volumes (and 1 
unmodified volume) from the MAINT userid.


1. Configure virtual machine for 2^nd level with following commands:

1. term conmode 3270

2. def 009 xxx where xxx is the addr of you ipl console

2. IPL  CLEAR where  = the address of the new 530res pack. 
(clear the screen if needed and respond to prompts)


3. log off operator

4. logon maint

*3. Make changes to 2^nd level system*

*1. Modify the SYSTEM CONFIG file on maint's CF1 mdisk*

1. cprel a

2. link maint cf1 cf1 mr

3. acc cf1 f

4. x system config f

5. change all volser from current 530RES, 530SPL, 530W01 etc to new volsers.

6. Update the system id with system id of lpar being configured.

7. Add “*vmlan macprefix 020001” *to the file if it doesn't exist and 
should be different from current system.


8. Update the VSWITCH definition with OSA card addresses.

9. Save the file.

10. Run syntax checker

1. access 193 g

2. CPSYNTAX SYSTEM CONFIG F

11. Return CF1 disk back to system

1. release f(det

2. CPACCESS MAINT CF1 A

*2. Modify the USER DIRECT file*.

1. Make backup copy:

1. Copy USER DIRECT C USER DIROLD C (oldd

2. X USER DIRECT

3. Remove the userids that are ONLY on this system such as the linux 
guests. If these need to be on the 2^nd system they should be created 
there later with new dasd volumes.


4. Change all references using 530 volumes to new volser name convention.

5. Save user direct

*3. Relabel the packs using CPFMTXA. Use only the label command*.

*4. Reload the updated directory with the DIRECTXA command*.

1. Do this now that the VOLSER in the USER DIRECT file matches the new 
volser


*4. Restart the system using SHUTDOWN REIPL command*. ( warm start will 
fail because of the volser changes)




The 2^nd level system should now be able to be IPLED in the new LPAR.


The changes done to this system under step 3(except 3.2.3) can now be 
done to the current system. You may need to hold off your changes to the 
VSWITCH definition until the current system can be ipled on the z10. 
This would then have both systems using your volser standards.




Howard Rifkind wrote:


This might work for you.
 
Being that everything is new and nothing has changed, create a second 
system (first level) and some how vary off line the volumes from the 
first system so the new system doesn't see them.
 
After you have two z/VM system loaded then zap the volume id's stand 
alone  to anything you like and adjust accordingly.
 
After, either system which is IPL'ed will not see duplicate volumes in 
the system.
 
Just getting back into z/VM after two years away for the 4.4 release 
so others on the list might have a better way of doing what you want.


>>> "Juarez, David T." <[EMAIL PROTECTED]> 7/1/2008 9:06 AM >>>

We just unloaded z/VM 5.3 and would like to create an alternate RES 
and spool pack. Current names are 530RES and 530SPL. Does someone have 
simple procedures to create alternate res and alternate spool volumes 
so we can IPL off the alternates and leave the original res and spool 
untouched. The Guide for Automated Installation and Service shows how 
to backup the Res and saved system and segments but the SPXTAPE 
utility implies you want to restore to the current spool volume not an 
alternate.  Also is anyone using symbolics in system config and/or the 
user directory like we do in z/OS parmlib?  Thanks.


 


David T. Juárez

Department of Veterans Affairs

IT Specialist

 





_
LEGAL NOTICE
Unless expressly stated otherwise, this message is confidential
and may be privileged. It is intended for the addressee(s) only.
Access to this E-mail by anyone else is unauthorized.
If you are not an addressee, any disclosure or copying of the
contents of this E-mail or any action taken (or not taken) in
reliance on it is unauthorized and may be unlawful. If you are not an
addressee, please inform the sender immediately, then delete this
message and empty from your trash.



--
'in media stat virtus'
Virtue's in the middle


Re: Best method

2008-07-01 Thread Wakser, David
Thanks, Bob. I haven't used WAKEUP for many years, so I'll try it.

David Wakser 

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Bob Bates
Sent: Tuesday, July 01, 2008 10:21 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method

Absolutely,
Use the WAKEUP module.

I have a program that waits for reader files and messages. The
waiting part looks like: 


do forever
'WAKEUP +30 (RDR IUCVMSG'
saverc = rc
select
when saverc = 4 then 
"process reader file"
when saverc = 5 then
"process a message"

You might want to change the +30 if all it does is wait for reader
files. See HELP WAKEUP for details


Re: more ftpserve stuff

2008-07-01 Thread Alan Altmark
On Monday, 06/30/2008 at 03:26 EDT, "Gentry, Stephen" 
<[EMAIL PROTECTED]> wrote:
> I have set up a bfs and am trying to ftp to it from a linux guest in an 
IFL.  
> 
> I get the following message from Linux 
> 450 Directory if temporarily unavailable, Access failure, RC=24
>
> And from the FTPSERVE console I get: 
> 14:38:29 DMSACR2133E VMSYSY:LNXUDB. is a byte file system. It cannot be 
accessed
> 14:38:29 DMSPCL389E Invalid filemode: ,  
> 
> Can I ftp to a BFS area?

Yes.  Most likely you issued the wrong CD command.  E.g. you treated it as 
a traditional SFS directory:
  CD vmsysy:lnxudb.subdir

instead of a BFS directory:
  CD /../VMBFS:VMSYSY:LNXUDB/subdir

(See the TCP/IP User's Guide for more information.)  But it's hard to say 
for sure since you didn't post a transcript of the FTP session.

Alan Altmark
z/VM Development
IBM Endicott


Re: Best method

2008-07-01 Thread Bob Bates
Absolutely,
Use the WAKEUP module.

I have a program that waits for reader files and messages. The
waiting part looks like: 


do forever
'WAKEUP +30 (RDR IUCVMSG'
saverc = rc
select
when saverc = 4 then 
"process reader file"
when saverc = 5 then
"process a message"

You might want to change the +30 if all it does is wait for reader
files. See HELP WAKEUP for details


Bob Bates
Enterprise Hosting Services - Enterprise Virtualization - z/VM and
z/Linux 

w. (469)892-6660
c. (214) 907-5071

"This message may contain confidential and/or privileged information.
If you are not the addressee or authorized to receive this for the
addressee, you must not use, copy, disclose, or take any action based on
this message or any information herein.  If you have received this
message in error, please advise the sender immediately by reply e-mail
and delete this message.  Thank you for your cooperation."



-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Wakser, David
Sent: Tuesday, July 01, 2008 9:10 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Best method

All:

What is the best method to code, for a SVM, a wait for a file to
arrive in its reader?

I have a (very old) EXEC that has a "do forever" loop with a
"EXECIO * CP (STEM" aa. "STRING CP Q RDR * ALL" command followed by a
SLEEP when no files are found. Is there a better method of "waking up"
an EXEC when a RDR file arrives?

Thanks, in advance.

David Wakser


Re: Best method

2008-07-01 Thread Hughes, Jim
Checkout WAKEUP.  It does that and more.

 
Jim Hughes
603-271-5586
"Its kind of fun to do the impossible." (Walt Disney)


=>-Original Message-
=>From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
On
=>Behalf Of Wakser, David
=>Sent: Tuesday, July 01, 2008 10:10 AM
=>To: IBMVM@LISTSERV.UARK.EDU
=>Subject: Best method
=>
=>All:
=>
=>  What is the best method to code, for a SVM, a wait for a file to
=>arrive in its reader?
=>
=>  I have a (very old) EXEC that has a "do forever" loop with a
=>"EXECIO * CP (STEM" aa. "STRING CP Q RDR * ALL" command followed by a
=>SLEEP when no files are found. Is there a better method of "waking up"
=>an EXEC when a RDR file arrives?
=>
=>  Thanks, in advance.
=>
=>David Wakser


Re: creating an alternate z/VM res and spool pack

2008-07-01 Thread Howard Rifkind
This might work for you.
 
Being that everything is new and nothing has changed, create a second
system (first level) and some how vary off line the volumes from the
first system so the new system doesn't see them.
 
After you have two z/VM system loaded then zap the volume id's stand
alone  to anything you like and adjust accordingly.
 
After, either system which is IPL'ed will not see duplicate volumes in
the system.
 
Just getting back into z/VM after two years away for the 4.4 release so
others on the list might have a better way of doing what you want.

>>> "Juarez, David T." <[EMAIL PROTECTED]> 7/1/2008 9:06 AM >>>

We just unloaded z/VM 5.3 and would like to create an alternate RES and
spool pack. Current names are 530RES and 530SPL. Does someone have
simple procedures to create alternate res and alternate spool volumes so
we can IPL off the alternates and leave the original res and spool
untouched. The Guide for Automated Installation and Service shows how to
backup the Res and saved system and segments but the SPXTAPE utility
implies you want to restore to the current spool volume not an
alternate.  Also is anyone using symbolics in system config and/or the
user directory like we do in z/OS parmlib?  Thanks.
 
David T. Juárez 
Department of Veterans Affairs
IT Specialist 


 
_
LEGAL NOTICE
Unless expressly stated otherwise, this message is confidential
and may be privileged. It is intended for the addressee(s) only.
Access to this E-mail by anyone else is unauthorized.
If you are not an addressee, any disclosure or copying of the
contents of this E-mail or any action taken (or not taken) in
reliance on it is unauthorized and may be unlawful. If you are not an
addressee, please inform the sender immediately, then delete this
message and empty from your trash.


Best method

2008-07-01 Thread Wakser, David
All:

What is the best method to code, for a SVM, a wait for a file to
arrive in its reader?

I have a (very old) EXEC that has a "do forever" loop with a
"EXECIO * CP (STEM" aa. "STRING CP Q RDR * ALL" command followed by a
SLEEP when no files are found. Is there a better method of "waking up"
an EXEC when a RDR file arrives?

Thanks, in advance.

David Wakser


Re: more ftpserve stuff

2008-07-01 Thread Gentry, Stephen
Alan, thanks for the reply. 
My FTPSERVE was already setup with the correct posix params.  I am
trying to FTP to FTPSERVE (on VM) from a Linux guest on an IFL.  I would
be issuing a PUT filename.filetype from the Linux guest.
Sorry if I didn't make that clear in the first posting.
All that being said, I am still unable to do a PUT.
Steve

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Alan Ackerman
Sent: Monday, June 30, 2008 10:49 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: more ftpserve stuff

On Mon, 30 Jun 2008 14:54:05 -0400, Gentry, Stephen
<[EMAIL PROTECTED]
ETTELIFE.COM> 
wrote:

>I have set up a bfs and am trying to ftp to it from a linux guest in an
>IFL.  
>
>I get the following message from Linux 
>
>450 Directory if temporarily unavailable, Access failure, RC=24
>
> 
>
>And from the FTPSERVE console I get:
>
>14:38:29 DMSACR2133E VMSYSY:LNXUDB. is a byte file system. It cannot be
>accessed
>
>14:38:29 DMSPCL389E Invalid filemode: ,   
   
>
> 
>
>Can I ftp to a BFS area?

Yes, but not with SFS syntax.

First you have to follow the setup instructions in "z/VM V5R3.0 TCP/IP
Pl
anning and 
Customization":

In order for FTP clients to access files and directories in the Byte
File
 System (BFS), the FTP server 
must be defined as a POSIX "superuser." To allow this capability, the
fol
lowing statement must be 
included in the CP directory:

POSIXINFO UID 0 GID 0

See z/VM: OpenExtensions User's Guide and z/VM: CP Planning and
Administr
ation for more 
information about configuring the FTP server in this manner.

Second you have to use the correct syntax in "z/VM V5R3.0 TCP/IP User's
G
uide":

CD /../VMBFS:VMSYSY:LNXUDB/path/

GET file.name
etc.

The /../VMBFS: is a constant!

Alan Ackerman
Alan (dot) Ackerman (at) Bank of America (dot) com 


creating an alternate z/VM res and spool pack

2008-07-01 Thread Juarez, David T.
We just unloaded z/VM 5.3 and would like to create an alternate RES and spool 
pack. Current names are 530RES and 530SPL. Does someone have simple procedures 
to create alternate res and alternate spool volumes so we can IPL off the 
alternates and leave the original res and spool untouched. The Guide for 
Automated Installation and Service shows how to backup the Res and saved system 
and segments but the SPXTAPE utility implies you want to restore to the current 
spool volume not an alternate.  Also is anyone using symbolics in system config 
and/or the user directory like we do in z/OS parmlib?  Thanks.

 

David T. Juárez 

Department of Veterans Affairs

IT Specialist 



 



MVMUA meeting on July 16th

2008-07-01 Thread Bill Munson
Friends,

The next meeting of the Metropolitan VM and linux Users Association 
will be held on Wednesday July 16, 2008 at MARIST College in Poughkeepsie 
New York 
the directions to Marist are posted on our WEB site 
http://www2.marist.edu/~mvmua/ 
Please let me know if you are planning on attending 

Thank you very much

Bill Munson
VM System Programmer
201-418-7588

President MVMUA
http://www2.marist.edu/~mvmua/


*** IMPORTANT
NOTE* The opinions expressed in this
message and/or any attachments are those of the author and not
necessarily those of Brown Brothers Harriman & Co., its
subsidiaries and affiliates ("BBH"). There is no guarantee that
this message is either private or confidential, and it may have
been altered by unauthorized sources without your or our knowledge.
Nothing in the message is capable or intended to create any legally
binding obligations on either party and it is not intended to
provide legal advice. BBH accepts no responsibility for loss or
damage from its use, including damage from virus.



Re: Making Devices Available

2008-07-01 Thread Kris Buelens
DEFINE DEVICE/CNTLUNIT/CHPID are the commands to dynamically change HW the
IO-config (i.e. the IOCP so to speak).  SET RDEVICE is normally required
only when the device doesn't answer to a SENSID (kind of dynamic HCPRIO)

2008/7/1 Schuh, Richard <[EMAIL PROTECTED]>:

>  We have some DASD devices that were, until a few minutes ago, in the
> Devices_NotAccepted list. I have made some of them accepted, both in the
> SYSTEM CONFIG and by command. Now, I am confronted with a DEFINE DEVICE
> command that, from the HELP files is as clear as murky water to me (the
> problem may well be between my ears). Is it as simple as "DEFINE DEVICE
> F6EF-F6F7 UNITADD EF CUNUMBER  DASD" ( to be filled in when someone
> supplies the value from the IOCP - I do not have ready access)? Assuming
> that I get them defined, is all that is left varying them online? They will
> initially be attached to the user who is going to prepare them for use, so
> there will be no ATTACH to SYSTEM.
>
> Regards,
> Richard Schuh
>
>


-- 
Kris Buelens,
IBM Belgium, VM customer support