Gotcha's involved in relabeling CP-Owned volumes?

2008-10-20 Thread RPN01
I need to relabel some volumes, including page and spool volumes... Are
things such as the checkpoint and warmstart data strictly done based on the
position in the CP-Owned list? Or will the actual volume labels matter, if
the SYSTEM CONFIG has been adjusted prior to the shutdown and re-IPL?

I want to rename a test system to keep it around, while making way for a new
installation. (IBM: It¹d be really nice if you¹d all the sysres volume to be
renamed during an install... Hint, hint)

-- 
Robert P. Nix  Mayo Foundation.~.
RO-OE-5-55 200 First Street SW/V\
507-284-0844   Rochester, MN 55905   /( )\
-^^-^^
In theory, theory and practice are the same, but
 in practice, theory and practice are different.




Re: VM Virtual CPUs and Threaded CMS Applications

2008-10-20 Thread Gary M. Dennis
I appreciate your insight. When you state:  ³ If you¹re not invoking CMS
services from non-base threads²

What precisely do you mean by CMS services?  Are you referring specifically
to the services defined in ³CP Programming Services²  OR any call to CMS?

This has the potential to derail what we are trying to achieve with CMS so I
want to be absolutely sure I understand what you mean.


--.  .-  .-.  -.--

Gary Dennis






On 10/19/08 2:35 PM, Gillis, Mark [EMAIL PROTECTED] wrote:

 I haven¹t experienced this specific problem because IBM strongly advised us to
 not allocate more than 1 virtual CPU to a mutitasking CMS application. The
 reason they gave was that any CMS services called from a thread running on a
 non-base CPU would need to be scheduled to run on the base CPU, so that the
 overheads of this would outweigh the benefits of the extra processors. If
 you¹re not invoking CMS services from non-base threads then I guess that this
 won¹t be an issue for you.
 
 Mark Gillis 
 Principal Software Engineer
 Tel: +61 2 8898 2678
 Fax: +61 2 8898 2600
 [EMAIL PROTECTED]
 
 
 From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf
 Of Gary M. Dennis
 Sent: Sunday, 19 October 2008 10:24 AM
 To: IBMVM@LISTSERV.UARK.EDU
 Subject: VM Virtual CPUs and Threaded CMS Applications
  
 If  you do not have experience with threaded CMS application development, I
 suggest you read anything but the balance of of this email.
 
 I have an application that runs under CMS and consists of three distinct
 layers.
 1. The top layer is some virtualized x86 OS.
 2. The middle layer performs x86 to z translation
 3. The base layer is everything else. That includes code fragment storage,
 aging, retrieval, statistics collection/ push using IUCV, etc.
 
 Layer two has been developed in such a way that, without layer three, it
 simply translates a code fragments to z architecture code, executes that code,
 then discards the translated fragment.  It detects the interface stub for
 layer three and, if that is present, it takes advantage of the capabilities
 including prior translation reuse.
 
 Layer 3 is multithreaded and is the cause/source of the problem. Whether layer
 3 is run with layers 1 and 2 or in standalone test mode the results are the
 same.
 
 First the environment:
 
 VM 4.3
 Number of processors: 2
 Virtual CPUs (from 2 to 6 .. See note below)
 
 Now the application from 10,000 feet:
 
 Layer three consists of a parent thread that creates 4 additional threads.
 Each thread is created in a dispatch class that is unique.
 
 Routines are not shared between threads. Upon entry into each routine, the
 preamble is destroyed and restored on exit to trap any potential inadvertent
 share.   Critical fields shared between threads are protected by a compare and
 swap spin lock.
 
 Part of the testing consists of pushing 1WAY IUCV messages from each connected
 client every 20 milliseconds.
 
 The VM directory for each of 4 machines (one server and three clients) defines
 the machine as  an XC mode machine with:
 
 CPU 00 BASE
 CPU 01
 
 
 As each thread is created it requests either BASE or ANY CPU affinity. BASE
 affinity is reserved for the parent and IUCV message handler threads . ANY is
 used for all other threads . Each affinity request receives a normal return
 code.
 
 All this works beautifully for days and millions of messages UNTIL the number
 of virtual CPUs defined exceed the number of real CPUs assigned to the VM
 image.  When this takes place, everything comes unstuck. By everything I mean
 everything in CMS.  Stack overflow (03FF abend), free storage management
 failure, all of it.
 
 The multitasking application dev guide states that to the extent possible,
 dispatch classes are assigned to vCPUs and further states that the max number
 of vCPUs that may be utilized is equal to the number of dispatch classes.
 Whether the vCPUs are defined in the user directory entry OR they are created
 dynamically using the CPU Create CMS  function, the results are the same.
 
 
 My questions)
 1. Has anyone had a similar experience?
 2. Is this a known issue with 4.3? Or in more current releases?
 3. Although this seems to be telling me no to go there, I¹ve tried but cannot
 find anything that says ³You¹ll shoot your eye out , kid.²  if you define more
 virtual CPUs than real processors. Anyone know of such a restriction?
 4. Is it possible that CMS kernel services don¹t tolerate a situation where
 the number of virtual CPUs exceeds ³real² processors?
 
 Thanks in advance for any insight you might have on this behavior.
 
 --.  .-  .-.  -.--
 
 Gary Dennis
 Mantissa Corporation
 






Re: The correct way to shutdown z/Linux Guest Softly

2008-10-20 Thread Dave Jones

Hi, Terry.

Yes, you should definitely be shutting down the Oracle database instances in a clean 
manner before shutting down Linux itself. Oracle does not like having the rug pulled out 
from under it


Have a good one.

Martin, Terry R. (CMS/CTR) (CTR) wrote:

Hi,

 


Lately we have had some problems with Oracle corruption that we are
being told it is because the way we are shutting down our z/Linux guest.
What is the cleanest and safest way to shutdown a z/Linux guest? Should
we be issuing a separate Oracle shutdown of some sort before shutting
down the whole guest?

 


We are running REDHAT REL4 under z/VM 5.3

 


Thanks in advance!

 


Terry

 





--
DJ

V/Soft
  z/VM and mainframe Linux expertise, training,
  consulting, and software development
www.vsoft-software.com


Re: VM Virtual CPUs and Threaded CMS Applications

2008-10-20 Thread Bob Bolch
All execution of CMS linkage interfaces (CMSCALL, SVC 204, SVC202, etc.) and
most common direct branch interfaces to CMS services executed on a non-base
CPU result in running intercept code that switches that thread back to the
base CPU for execution of the service. Another way to say it is that all the
code in the CMS Nucleus only runs on the base processor.

 

Each CP service defines how it executes on a non-base processor. Things like
IUCV and most Diagnose codes work just fine. In CMS Multitasking, non-base
processors are intended for pure code not requiring CMS services.

 

Bob Bolch

 

From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Gary M. Dennis
Sent: Monday, October 20, 2008 8:31 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: VM Virtual CPUs and Threaded CMS Applications

 

I appreciate your insight. When you state:   If you're not invoking CMS
services from non-base threads

What precisely do you mean by CMS services?  Are you referring specifically
to the services defined in CP Programming Services  OR any call to CMS?








Re: Gotcha's involved in relabeling CP-Owned volumes?

2008-10-20 Thread Kris Buelens
Warm  Ckpt are independent of CP Owned, fully defined in SYSTEM CONFIG.
Spool  page are indeed dependent on order in CP Owned list.
Do not forget to change the labels in the CP directory too.  This
should be the last step before shutdown-reipl, otherwise no *new* LINK
commands will work due to disk newlabel not mounted.

2008/10/20 RPN01 [EMAIL PROTECTED]:
 I need to relabel some volumes, including page and spool volumes... Are
 things such as the checkpoint and warmstart data strictly done based on the
 position in the CP-Owned list? Or will the actual volume labels matter, if
 the SYSTEM CONFIG has been adjusted prior to the shutdown and re-IPL?

 I want to rename a test system to keep it around, while making way for a new
 installation. (IBM: It'd be really nice if you'd all the sysres volume to be
 renamed during an install... Hint, hint)

 --
 Robert P. Nix  Mayo Foundation.~.
 RO-OE-5-55 200 First Street SW/V\
 507-284-0844   Rochester, MN 55905  /( )\
 -^^-^^
 In theory, theory and practice are the same, but
  in practice, theory and practice are different.





-- 
Kris Buelens,
IBM Belgium, VM customer support


Re: Question about a user volume

2008-10-20 Thread Richard Corak

Not exactly.  Changing the contents of the CP_OWNED statement, including
deletion, affects only that statement.  But that's not as simple as it
might appear.

Spool files can span CP_OWNED volumes, so if CP needs to fetch the next
record for the spool file by going to the volume at slot 'n', and there
isn't a slot 'n', or it's a different volume so the needed record isn't
there, you lose the spool file.

Deleting the statement for slot 'n' doesn't automatically affect any
other CP_OWNED volume, but can affect all your spool files, and could
mean that you have no object directory.

Richard Corak


A word of caution, however.  Don't just delete that line in the CP-Owned
list in SYSTEM CONFIG, especially if there is a volume later in the list
that contains SPOOL space.  You would lose all the spool files in the
later volume.  Just change the volid in that slot in the CP-Owned list
to Reserved, rather than removing the slot.


Re: The correct way to shutdown z/Linux Guest Softly

2008-10-20 Thread Tom Duerbusch
Here is part of my shutdown/startup instructions for Operations:

1.  When the Oracle server is to be taken down, using PUTTY, logon
in as oracle
2.  emctl stop dbconsole
3.  sqlplus ‘/ as sysdba’
4.  sql  shutdown
5.  exit
6.  lsnrctl stop



6.  After the Oracle Server is brought up, using PUTTY, logon in as
oracle
7.  lsnrctl start
8.  sqlplus ‘/ as sysdba’
9.  sql  startup
10. sql  select name from v$database;
11. exit
12. emctl start dbconsole

I have had the above command in an autostart/shutdown process, which is
fairly easy to do.  The problem was, if Oracle didn't start due to some
problem, which so far has been the recovery area being full, the bad
startup wasn't caught.  Having Operations do the above command,
sometimes (only sometimes), results in a phone call if the messages
don't look right.  Not a 100% solution either.

Tom Duerbusch
THD Consultinig


Law of Dinner Table Attendance

  Cats must attend all meals when anything good is served.


 Martin, Terry R. (CMS/CTR) (CTR) [EMAIL PROTECTED]
10/19/2008 7:08 PM 
Hi,

 

Lately we have had some problems with Oracle corruption that we are
being told it is because the way we are shutting down our z/Linux
guest.
What is the cleanest and safest way to shutdown a z/Linux guest?
Should
we be issuing a separate Oracle shutdown of some sort before shutting
down the whole guest?

 

We are running REDHAT REL4 under z/VM 5.3

 

Thanks in advance!

 

Terry

 


ZVM Linux losing WINS

2008-10-20 Thread Dean, David (I/S)
 We have Novell 10.2 zLinux on 5.2 ZVM running a SAMBA domain controller
handling authorization.  This centralized authorization hands out SAMBA
shares on multiple zLinux servers as well as several AIX servers.
Communication from the zLinux box is through a vswitch setup on the ZVM.
This has worked well for several years now.  In the past couple of weeks
our Windows network infrastructure has begun to lose our SAMBA servers
and we are having to hard code names into the WINS database on the
Windows WINS server (I am not on that side of the house, so I do not
really know how that piece is accomplished).

 

Although the opinion is that the problem resides in the Windows
Networking, I want to cover all bases, and wondered if anyone has
experienced anything like this.

 

The windows boxes are patched on a weekly basis.

 

David Dean

Information Systems

*bcbstauthorized*

 

 

 

 

Please see the following link for the BlueCross BlueShield of Tennessee E-mail 
disclaimer:  http://www.bcbst.com/email_disclaimer.shtm


Re: Question about a user volume

2008-10-20 Thread Jim Bohnsack
OK, but if in deleting the Slot 5 statement and then tidying up by 
renumbering the subsequent slot statements so that there are no gaps in 
the slot numbers and if one of the later slots, Slot 6 for example,  was 
a spool volume, then it would be in a different relative number, 
wouldn't it?  After tidying up, the old Slot 6 would be the new Slot 5. 

That used to be bad before the cpowned volumes were numbered in SYSTEM 
CONFIG.  Of course, sometimes my memory gets mixed up with really old 
things vs. just old things. 


Jim

Richard Corak wrote:

Not exactly.  Changing the contents of the CP_OWNED statement, including
deletion, affects only that statement.  But that's not as simple as it
might appear.

Spool files can span CP_OWNED volumes, so if CP needs to fetch the next
record for the spool file by going to the volume at slot 'n', and there
isn't a slot 'n', or it's a different volume so the needed record isn't
there, you lose the spool file.

Deleting the statement for slot 'n' doesn't automatically affect any
other CP_OWNED volume, but can affect all your spool files, and could
mean that you have no object directory.

Richard Corak

  

A word of caution, however.  Don't just delete that line in the CP-Owned
list in SYSTEM CONFIG, especially if there is a volume later in the list
that contains SPOOL space.  You would lose all the spool files in the
later volume.  Just change the volid in that slot in the CP-Owned list
to Reserved, rather than removing the slot.



  


--
Jim Bohnsack
Cornell University
(972) 596-6377 home/office
(972) 342-5823 cell
[EMAIL PROTECTED]


Re: ZVM Linux losing WINS

2008-10-20 Thread Tom Duerbusch
In the same area, but not your problem...

I had a weird problem, that I was thinking that someone was automagically 
updating the DNS servers with my Samba machines.  Sometimes it happened, 
sometimes it didn't.

The Network guys got on this, and found that if I specified in the Samba 
Configuration, under the Identity tag, that it was a Remote WINS Server, XP had 
no problem in finding the Samba server (using the Search for Computers) task.

I had no idea prior to this what WINS was, just sounded good, since I wanted 
Windows users to have access to the SAMBA server.

I haven't specified a name for the Remote WINS Server.  
I don't know, but I can connect to Samba using the guest machine name of the 
Linux image.  In this case, LINUX61.

Tom Duerbusch
THD Consulting 

 Dean, David (I/S) [EMAIL PROTECTED] 10/20/2008 9:57 AM 
We have Novell 10.2 zLinux on 5.2 ZVM running a SAMBA domain controller
handling authorization.  This centralized authorization hands out SAMBA
shares on multiple zLinux servers as well as several AIX servers.
Communication from the zLinux box is through a vswitch setup on the ZVM.
This has worked well for several years now.  In the past couple of weeks
our Windows network infrastructure has begun to lose our SAMBA servers
and we are having to hard code names into the WINS database on the
Windows WINS server (I am not on that side of the house, so I do not
really know how that piece is accomplished).

 

Although the opinion is that the problem resides in the Windows
Networking, I want to cover all bases, and wondered if anyone has
experienced anything like this.

 

The windows boxes are patched on a weekly basis.

 

David Dean

Information Systems

*bcbstauthorized*

 

 

 

 

Please see the following link for the BlueCross BlueShield of Tennessee E-mail 
disclaimer:  http://www.bcbst.com/email_disclaimer.shtm


Re: Question about a user volume

2008-10-20 Thread Marty Zimelis
I think there may be different interpretations of what deleting an entry
in the CP_OWNED list means.  I *think* Richard Corak means replacing a
VOLSER entry with the Reserved keyword, _not_ compressing the list after
deleting an entry.

The pointers to SPOOL files from the Warm Start area and pointers from one
page of a spool file to the next page are of the form CCPV, where the V
(for Volume) is an index into the CP_OWNED list.  If the index value gets
changed by changing the position of a SPOOL volume in the list, all of the
existing pointers are invalidated and the affected SPOOL files are lost
permanently.

Marty

Martin Zimelis
Principal
maz/Consultancy

 -Original Message-
 From: The IBM z/VM Operating System 
 [mailto:[EMAIL PROTECTED] On Behalf Of Jim Bohnsack
 Sent: Monday, October 20, 2008 11:07 AM
 To: IBMVM@LISTSERV.UARK.EDU
 Subject: Re: Question about a user volume
 
 OK, but if in deleting the Slot 5 statement and then tidying up by 
 renumbering the subsequent slot statements so that there are 
 no gaps in 
 the slot numbers and if one of the later slots, Slot 6 for 
 example,  was 
 a spool volume, then it would be in a different relative number, 
 wouldn't it?  After tidying up, the old Slot 6 would be the 
 new Slot 5. 
 
 That used to be bad before the cpowned volumes were numbered 
 in SYSTEM 
 CONFIG.  Of course, sometimes my memory gets mixed up with really old 
 things vs. just old things. 
 
 Jim
 
 Richard Corak wrote:
  Not exactly.  Changing the contents of the CP_OWNED 
 statement, including
  deletion, affects only that statement.  But that's not as 
 simple as it
  might appear.
 
  Spool files can span CP_OWNED volumes, so if CP needs to 
 fetch the next
  record for the spool file by going to the volume at slot 
 'n', and there
  isn't a slot 'n', or it's a different volume so the needed 
 record isn't
  there, you lose the spool file.
 
  Deleting the statement for slot 'n' doesn't automatically affect any
  other CP_OWNED volume, but can affect all your spool files, 
 and could
  mean that you have no object directory.
 
  Richard Corak
 

  A word of caution, however.  Don't just delete that line 
 in the CP-Owned
  list in SYSTEM CONFIG, especially if there is a volume 
 later in the list
  that contains SPOOL space.  You would lose all the spool 
 files in the
  later volume.  Just change the volid in that slot in the 
 CP-Owned list
  to Reserved, rather than removing the slot.
  
 

 
 -- 
 Jim Bohnsack
 Cornell University
 (972) 596-6377 home/office
 (972) 342-5823 cell
 [EMAIL PROTECTED]
 


Re: ZVM Linux losing WINS

2008-10-20 Thread David Boyes
One case similar to this that I saw involved a MS patch inadvertently
changing Windows name resolution away from  NetBEUI in a client
configuration as part of a network driver update. Did anything like that
just get pushed out? 

 

Also, are you configuring regular DNS? Modern (post Win2K) Windows
doesn't need WINS any longer, and they should be switching their clients
away from it.

 



From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Dean, David (I/S)
Sent: Monday, October 20, 2008 10:57 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: ZVM Linux losing WINS

 

 We have Novell 10.2 zLinux on 5.2 ZVM running a SAMBA domain controller
handling authorization.  This centralized authorization hands out SAMBA
shares on multiple zLinux servers as well as several AIX servers.
Communication from the zLinux box is through a vswitch setup on the ZVM.
This has worked well for several years now.  In the past couple of weeks
our Windows network infrastructure has begun to lose our SAMBA servers
and we are having to hard code names into the WINS database on the
Windows WINS server (I am not on that side of the house, so I do not
really know how that piece is accomplished).

 

Although the opinion is that the problem resides in the Windows
Networking, I want to cover all bases, and wondered if anyone has
experienced anything like this.

 

The windows boxes are patched on a weekly basis.

 

David Dean

Information Systems

*bcbstauthorized*

 

 

 

 

Please see the following link for the BlueCross BlueShield of Tennessee
E-mail disclaimer:  http://www.bcbst.com/email_disclaimer.shtm


Re: detect VMREAD or CPREAD

2008-10-20 Thread Hal Schmitigal
You can use the READCHEK function in Performance Toolkit to get the 
following status conditions of a virtual machine.  Note that your PERFSVM
 
must be in monitor mode, collecting data.  See HELP FCX CBASVMCF.  So 

you could, for example, create a small EXEC to watch a list of critical 

service machines that wakes up every 15 minutes and does READCHEKs for 

them and sends a warning message, or whatever, for any that do not get a 

RC = 57 from READCHEK.

RC   5: Missing argument: User-ID not specified
RC  22: Not authorized for 'LOCATE userid' cmd.
RC  45: User is not logged on
RC   0: User is not disconnected
RC   1: User is in VM or CP read state
RC   4: User is in disabled wait state
RC   6: User set to log off (read state or disabled wait state)
RC   2: User is in CP read state
RC   3: CP function active
RC 145: User has been forced
RC  57: User is disconnected and running

Note also that AUDITOR can watch service virtual machines and is capable 

of detecting a userid in a disabled wait.  However Perfkit gives you more
 
options.

Hal Schmitigal
Perot Systems Corporation


Re: RXSSL / Charlotte Problem

2008-10-20 Thread James Johnson

Thomas Kern wrote:

I just tried Charlotte/RXSSL from my IFL system to the web server on the
VM system on the other side of the system. I do not get an abend but I
do get this message:

SSL Alert: HANDSHAKE_FAILURE

My copy of RXSSL is:
RXSSLMODULE   T1 V   39080 4 11  4/21/00 16:15:46

Our web server is Velocity Software's ESAWEB but the SSL is supplied by
SSLSERV that is not running in FIPS mode. This FIPS mode has caused some
problems for older levels of Attachmate and now requires that web
browsers have TLS 1.0 support turned on.

I suspect that my problem with RXSSL is that it does not understand TLS
1.0.

/Tom Kern
/301-903-2211

  

Somewhere in the Rexx code for SSL support there is a comment that says:
  To enable TLS support uncomment the following line
That may not be the actual wording, but that is the jest of what it says.

Have you tried uncommenting that line?

James Johnson


Re: z/VM SSL Usage

2008-10-20 Thread Mark Pace
1) Strictly Telnet.
2) 6
3) no idea.

On Tue, Oct 14, 2008 at 10:50 AM, Bill Bitner [EMAIL PROTECTED] wrote:

 The z/VM Development Lab is looking for some information regarding
 z/VM SSL server usage (this is the SSL for use with the VM TCP/IP
 stack). If you currently use the z/VM SSL server or plan to use it
 in the next few years, we'd like to hear from you to help guide some
 design decisions.

 Answers here, to myself, or to [EMAIL PROTECTED] for the following
 questions would be greatly appreciated:
 1. What applications are you using with the z/VM SSL server?
 2. What is the maximum number of concurrent sessions you currently use?
 3. What is the maximum number you expect to be using in 2 years?

 Regards,
 Bill Bitner




-- 
Mark Pace
Mainline Information Systems
1700 Summit Lake Drive
Tallahassee, FL. 32317


Re: Question about a user volume

2008-10-20 Thread Schuh, Richard
I have those m-disks on the IPL volume, so there is never a problem. If
it isn't available, then neither is the nucleus. ;-) 

Regards, 
Richard Schuh 

 

 -Original Message-
 From: The IBM z/VM Operating System 
 [mailto:[EMAIL PROTECTED] On Behalf Of Rich Greenberg
 Sent: Friday, October 17, 2008 6:36 PM
 To: IBMVM@LISTSERV.UARK.EDU
 Subject: Re: Question about a user volume
 
 On: Fri, Oct 17, 2008 at 04:44:31PM -0700,Schuh, Richard Wrote:
 
 } You do not need it to be CP_Owned for that. If it is listed 
 in the } User_Volume_List, CP will complain if it is not 
 available at IPL. That } is the purpose of the list.
 
 After reflection, I have concluded that Rich is almost 
 correct.  The exception which I would still put the volume in 
 the CP-Owned list would be if it contained critical 
 minidisks such as the CMS S, Y or H disks.
 Otherwise the User_Volume_List is fine.
 
 --
 Rich Greenberg  N Ft Myers, FL, USA richgr atsign panix.com  
 + 1 239 543 1353
 Eastern time.  N6LRT  I speak for myself  my dogs only.
 VM'er since CP-67
 Canines:Val, Red, Shasta  Casey (RIP), Red  Zero, Siberians 
  Owner:Chinook-L
 Retired at the beach Asst 
 Owner:Sibernet-L
 


Re: VM Virtual CPUs and Threaded CMS Applications

2008-10-20 Thread Schuh, Richard
Be careful of IUCV. There is an entire chapter of CP Programming
Services devoted to IUCV in an MP configuration.
 

Regards, 
Richard Schuh 

 

 




 

Each CP service defines how it executes on a non-base processor.
Things like IUCV and most Diagnose codes work just fine. In CMS
Multitasking, non-base processors are intended for pure code not
requiring CMS services.

 

Bob Bolch



Re: RXSSL / Charlotte Problem

2008-10-20 Thread Thomas Kern
I found that line in SSSREXX REXX and fixed it. I tried again and got 
an SSL Alert: HANDSHAKE_FAILURE message. I then looked further and saw 

the CERTDB stuff and checked for our CA (Entrust), it wasn't there. I use
d 
SSLADMIN to export the cert from SSLSERV, since I had to add it there whe
n 
we first brought up SSLSERV. I added the Entrust cert to the SSLCERT PEM 

file and ran CERTDB EXEC to rebuild the SSLCERT CERTDB and CERTDBX files.
 I 
still get this SSL Alert: HANDSHAKE_FAILURE message. 

My target url is https://vm1.hqadmin.doe.gov/htbin/callup.cgi?name=kern

My entry is #5 in the response.

Is there any additional documentation for RXSSL?

/Tom Kern
/301-903-2211


On Mon, 20 Oct 2008 11:56:22 -0500, James Johnson [EMAIL PROTECTED] wrote:

Somewhere in the Rexx code for SSL support there is a comment that says:

   To enable TLS support uncomment the following line
That may not be the actual wording, but that is the jest of what it says
.

Have you tried uncommenting that line?

James Johnson

=



Re: RXSSL / Charlotte Problem

2008-10-20 Thread James Johnson

Thomas Kern wrote:
I found that line in SSSREXX REXX and fixed it. I tried again and got 
an SSL Alert: HANDSHAKE_FAILURE message. I then looked further and saw 


...
The SSL Alert: HANDSHAKE_FAILURE message lead me to believe that the 
error is
occurring early in the negotiation process. Before the certificates are 
involved.  One possibility
is that the server wants to use the AES cipher. Charlotte does not 
understand AES.


If I remember correctly there is a trace or debug option that will 
display the negotiation process.

That may shed some light on what is happening.

James Johnson


Re: RXSSL / Charlotte Problem

2008-10-20 Thread Thomas Kern
Our SSLSERV is set up for FIPS mode. Here is a display of the SSLSERV 
STATUS that shows the allowed algorithms. We seem to always be using 
3DES_168_SHA as the cipher suite.

I will look for the trace/debug setting.

ssladmin query status
Maximum number of sessions: 100  
  
Number of active sessions: 2   

Administration port: 
   
NoHalt: False
 
  
Maximum Log Size: 0  
 
  
Operating in FIPS mode. 
 
Cipher_suites included :   FIPS_3DES_168_SHA  FIPS_DES_56_SHA
3DES_168_SHA   DES_56_SHA
Cipher_suites exempted : 

Trace Settings:
 
   
  Normal: OFF
 
   
  Connections: OFF   
 
  
  Flow: OFF 
 
  
  Address: 255.255.255.255:0   

  Connection: 0
 
  
Ready;   
 
  

ssladmin query sessions
Peer_Socket   Protected_Socket   Label Cipher
  
---      - --
  
10.23.32.151:3649 205.254.145.35:992  VM1D 3DES_168_SHA  (My terminal) 
 
xx.xxx.xx.xx:1042 205.254.145.35:992  VM1D 3DES_168_SHA  (https session)

Ready;   
 
  

/Tom Kern
/301-903-2211


On Mon, 20 Oct 2008 13:45:28 -0500, James Johnson [EMAIL PROTECTED] wrote:

The SSL Alert: HANDSHAKE_FAILURE message lead me to believe that the
error is
occurring early in the negotiation process. Before the certificates are
involved.  One possibility
is that the server wants to use the AES cipher. Charlotte does not
understand AES.

If I remember correctly there is a trace or debug option that will
display the negotiation process.
That may shed some light on what is happening.

James Johnson


Re: z/VM 5.2.0 on z10

2008-10-20 Thread O'Brien, Dennis L
Thank you for your suggestions of reasons to run 5.3.0 and 5.4.0.  I had
already presented them to management, but I have been instructed to use
5.2.0.  My only hope of changing management's mind is to give him
reasons NOT to use 5.2.0.  Reasons to use the newer releases have not
been persuasive.  We're just starting a POC, so we have no good
information on workload requirements.  There's nothing in 5.3.0 or 5.4.0
that we MUST have.  That means no requirement for link aggregation, for
example.

To put this in political terms, we're past Vote for me, I'm a better
candidate.  I need Vote against my opponent, because he's an
extremist.  The end-of-service date for 5.2.0 is not sufficient for
vote against.

By the way, I'm sad to say that an SF Bay Area congresswoman ran on, My
opponent is an extremist a few years ago.  She won.

   Dennis 

A government that is big enough to give you all you want is big enough
to take it all away.  -- Barry Goldwater

 -Original Message-
 Is anyone running z/VM 5.2.0 on a z10?  I know it's supported (with
 PTF's).  I want to know if customers are actually running it.  My
 management wants us to build some new systems to host Linux guests on
 z/VM 5.2.0, even though most of our other systems are on 5.3.0.  They
 want stability, and one of the ways they attempt to get stability is
by
 staying behind and hoping other sites will find problems first.  I'm
 concerned that if we're the only ones running the combination of z/VM
 5.2.0 and z10, that we will find those problems first.

Dennis O'Brien

 We are Borg of America.  You will be assimilated.  Resistance is
futile.


Re: z/VM 5.2.0 on z10

2008-10-20 Thread Marcy Cortes
Does better performance fly?
Silly mgmt :)  This isn't windoze  - no reason to hang back like that.



Marcy 

This message may contain confidential and/or privileged information. If
you are not the addressee or authorized to receive this for the
addressee, you must not use, copy, disclose, or take any action based on
this message or any information herein. If you have received this
message in error, please advise the sender immediately by reply e-mail
and delete this message. Thank you for your cooperation.


-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of O'Brien, Dennis L
Sent: Monday, October 20, 2008 12:43 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: [IBMVM] z/VM 5.2.0 on z10

Thank you for your suggestions of reasons to run 5.3.0 and 5.4.0.  I had
already presented them to management, but I have been instructed to use
5.2.0.  My only hope of changing management's mind is to give him
reasons NOT to use 5.2.0.  Reasons to use the newer releases have not
been persuasive.  We're just starting a POC, so we have no good
information on workload requirements.  There's nothing in 5.3.0 or 5.4.0
that we MUST have.  That means no requirement for link aggregation, for
example.

To put this in political terms, we're past Vote for me, I'm a better
candidate.  I need Vote against my opponent, because he's an
extremist.  The end-of-service date for 5.2.0 is not sufficient for
vote against.

By the way, I'm sad to say that an SF Bay Area congresswoman ran on, My
opponent is an extremist a few years ago.  She won.

   Dennis 

A government that is big enough to give you all you want is big enough
to take it all away.  -- Barry Goldwater

 -Original Message-
 Is anyone running z/VM 5.2.0 on a z10?  I know it's supported (with 
 PTF's).  I want to know if customers are actually running it.  My 
 management wants us to build some new systems to host Linux guests on 
 z/VM 5.2.0, even though most of our other systems are on 5.3.0.  They 
 want stability, and one of the ways they attempt to get stability is
by
 staying behind and hoping other sites will find problems first.  I'm 
 concerned that if we're the only ones running the combination of z/VM 
 5.2.0 and z10, that we will find those problems first.

Dennis O'Brien

 We are Borg of America.  You will be assimilated.  Resistance is
futile.


Re: z/VM 5.2.0 on z10

2008-10-20 Thread Dean, David (I/S)
Bank of America...and management drives a 10 year old Ford for
stability, right?

David Dean
Information Systems
*bcbstauthorized*
 
 
 

-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of O'Brien, Dennis L
Sent: Monday, October 20, 2008 3:43 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: z/VM 5.2.0 on z10

Thank you for your suggestions of reasons to run 5.3.0 and 5.4.0.  I had
already presented them to management, but I have been instructed to use
5.2.0.  My only hope of changing management's mind is to give him
reasons NOT to use 5.2.0.  Reasons to use the newer releases have not
been persuasive.  We're just starting a POC, so we have no good
information on workload requirements.  There's nothing in 5.3.0 or 5.4.0
that we MUST have.  That means no requirement for link aggregation, for
example.

To put this in political terms, we're past Vote for me, I'm a better
candidate.  I need Vote against my opponent, because he's an
extremist.  The end-of-service date for 5.2.0 is not sufficient for
vote against.

By the way, I'm sad to say that an SF Bay Area congresswoman ran on, My
opponent is an extremist a few years ago.  She won.

   Dennis 

A government that is big enough to give you all you want is big enough
to take it all away.  -- Barry Goldwater

 -Original Message-
 Is anyone running z/VM 5.2.0 on a z10?  I know it's supported (with
 PTF's).  I want to know if customers are actually running it.  My
 management wants us to build some new systems to host Linux guests on
 z/VM 5.2.0, even though most of our other systems are on 5.3.0.  They
 want stability, and one of the ways they attempt to get stability is
by
 staying behind and hoping other sites will find problems first.  I'm
 concerned that if we're the only ones running the combination of z/VM
 5.2.0 and z10, that we will find those problems first.

Dennis O'Brien

 We are Borg of America.  You will be assimilated.  Resistance is
futile.
Please see the following link for the BlueCross BlueShield of Tennessee E-mail 
disclaimer:  http://www.bcbst.com/email_disclaimer.shtm


Cost accounting for Linux guest running under z/VM

2008-10-20 Thread Juarez, David T.
We are in the process of getting ready to add production Linux guest and we 
need to know how you are charging back the customer for running Linux under 
z/VM. We currently charge a fixed fee per month for small, medium and large 
based on the size of the individual server's memory, cpu, and network 
connections. Any ideas would be greatly appreciated. Thanks.
 

David Juárez

Department of Veterans Affairs

IT Specialist - z/OS and z/VM Systems Programmer

512-326-6116
 


Re: z/VM 5.2.0 on z10

2008-10-20 Thread Schuh, Richard
Tell your management that you will sick Alan Ackerman on them if they
will not let you install 5.3 or 5.4. :-)


Regards, 
Richard Schuh 

 

 -Original Message-
 From: The IBM z/VM Operating System 
 [mailto:[EMAIL PROTECTED] On Behalf Of O'Brien, Dennis L
 Sent: Monday, October 20, 2008 12:43 PM
 To: IBMVM@LISTSERV.UARK.EDU
 Subject: Re: z/VM 5.2.0 on z10
 
 Thank you for your suggestions of reasons to run 5.3.0 and 
 5.4.0.  I had already presented them to management, but I 
 have been instructed to use 5.2.0.  My only hope of changing 
 management's mind is to give him reasons NOT to use 5.2.0.  
 Reasons to use the newer releases have not been persuasive.  
 We're just starting a POC, so we have no good information on 
 workload requirements.  There's nothing in 5.3.0 or 5.4.0 
 that we MUST have.  That means no requirement for link 
 aggregation, for example.
 
 To put this in political terms, we're past Vote for me, I'm 
 a better candidate.  I need Vote against my opponent, 
 because he's an extremist.  The end-of-service date for 
 5.2.0 is not sufficient for vote against.
 
 By the way, I'm sad to say that an SF Bay Area congresswoman 
 ran on, My opponent is an extremist a few years ago.  She won.
 
Dennis 
 
 A government that is big enough to give you all you want is 
 big enough to take it all away.  -- Barry Goldwater
 
  -Original Message-
  Is anyone running z/VM 5.2.0 on a z10?  I know it's supported (with 
  PTF's).  I want to know if customers are actually running it.  My 
  management wants us to build some new systems to host Linux 
 guests on 
  z/VM 5.2.0, even though most of our other systems are on 
 5.3.0.  They 
  want stability, and one of the ways they attempt to get stability is
 by
  staying behind and hoping other sites will find problems 
 first.  I'm 
  concerned that if we're the only ones running the 
 combination of z/VM 
  5.2.0 and z10, that we will find those problems first.
 
 
 Dennis O'Brien
 
  We are Borg of America.  You will be assimilated.  Resistance is
 futile.
 


Re: Cost accounting for Linux guest running under z/VM

2008-10-20 Thread Barton Robinson
The best model is one I heard last week at the ibm conference. One large well known 
installation charges only for prime shift, with 3 different rates based on types of 
service.  All charges are based on resource consumption.  With the usage charges and prime 
shift only charges, users are convinced to move some batch operations off shift where 
resources are plentiful and free. This encourages high CPU activites that can be off 
shift to be moved off shift.  The three different service rates relate to 7x24 support, 
prime shift support, and a best effort.


Installations not charging for resource consumption in a mainframe environment tell their 
customers that tuning is not important, and neither is workload planning.  This is good 
for IBM's profit as it increases the IFL requirement, but will end up with applications 
consuming more resource and can make other platforms much more attractive.  One 
performance person is worth their power consumption in IFLs so to speak


Most important is to understand your objective: chargeback and recover costs, or manage 
costs with chargeback and minimize resource requirements.  Several installations have 
charged by server, and quickly found users will abuse the system unless encouraged 
otherwise.




Juarez, David T. wrote:

We are in the process of getting ready to add production Linux guest and we need to know 

how you are charging back the customer for running Linux under z/VM. We 
currently charge a
fixed fee per month for small, medium and large based on the size of the 
individual server's
memory, cpu, and network connections. Any ideas would be greatly appreciated. 
Thanks.
 


David Juárez

Department of Veterans Affairs

IT Specialist - z/OS and z/VM Systems Programmer

512-326-6116
 



Re: Cost accounting for Linux guest running under z/VM

2008-10-20 Thread McBride, Catherine
Interesting thread.  Thanks.

Cathy McBride
Manager, Mainframe/Midrange Support
Kable News Company, Inc 
(815) 734-5905
[EMAIL PROTECTED]
We're still in this together!


-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
Behalf Of Barton Robinson
Sent: Monday, October 20, 2008 4:45 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Cost accounting for Linux guest running under z/VM


The best model is one I heard last week at the ibm conference. One large well 
known 
installation charges only for prime shift, with 3 different rates based on 
types of 
service.  All charges are based on resource consumption.  With the usage 
charges and prime 
shift only charges, users are convinced to move some batch operations off 
shift where 
resources are plentiful and free. This encourages high CPU activites that can 
be off 
shift to be moved off shift.  The three different service rates relate to 7x24 
support, 
prime shift support, and a best effort.

Installations not charging for resource consumption in a mainframe environment 
tell their 
customers that tuning is not important, and neither is workload planning.  This 
is good 
for IBM's profit as it increases the IFL requirement, but will end up with 
applications 
consuming more resource and can make other platforms much more attractive.  One 
performance person is worth their power consumption in IFLs so to speak

Most important is to understand your objective: chargeback and recover costs, 
or manage 
costs with chargeback and minimize resource requirements.  Several 
installations have 
charged by server, and quickly found users will abuse the system unless 
encouraged 
otherwise.



Juarez, David T. wrote:

 We are in the process of getting ready to add production Linux guest and we 
 need to know 
how you are charging back the customer for running Linux under z/VM. We 
currently charge a
fixed fee per month for small, medium and large based on the size of the 
individual server's
memory, cpu, and network connections. Any ideas would be greatly appreciated. 
Thanks.
  
 
 David Juárez
 
 Department of Veterans Affairs
 
 IT Specialist - z/OS and z/VM Systems Programmer
 
 512-326-6116
  
 


Re: z/VM 5.2.0 on z10

2008-10-20 Thread Jack Woehr

O'Brien, Dennis L wrote:

  There's nothing in 5.3.0 or 5.4.0
that we MUST have.
SMAPI was carried over gnarly RPC through 5.2 .. After 5.3 it's vanilla 
TCP sockets.


So if you ever want to use PigIron http://pigiron.sourceforge.net to 
automate guest provisioning (or anything else) from

scripting or GUI on your desktop, you'll need z/VM 5.3 or better.

Now there's a reason to upgrade! :)

--
Jack J. Woehr# Self-delusion is
http://www.well.com/~jax #  half the battle!
http://www.softwoehr.com #  - Zippy the Pinhead



Some REXX help

2008-10-20 Thread Huegel, Thomas
I copied this line from the REXX VM/REFERENCE

It is from a sample SOCKETS SERVER exec (page 16.2).
When I try to execute it I get errors.
I have not seen code like this before, I wonder if anyone can explain the 
technique to me?

if restnotsym;='' then call error 'E', 24, 'Invalid parameters specified'

Its the restnotsym;=''that I don't understand.


Thanks




Re: Some REXX help

2008-10-20 Thread Rob van der Heij
On Tue, Oct 21, 2008 at 12:43 AM, Huegel, Thomas [EMAIL PROTECTED] wrote:

 if restnotsym;='' then call error 'E', 24, 'Invalid parameters specified'

 Its the restnotsym;=''that I don't understand.

\= or /=   Someone expected that to be substituted by the not sign

Rob


Re: Some REXX help

2008-10-20 Thread Doug Breneman

The notsym; is supposed be a not symbol when it gets printed in the
book.  This means that  this line is supposed to be

If rest is not equal to null then call error...

On my keyboard, this is

If rest ^= '' then call error...

You can also use  for not equal.

I will contact the z/VM Information developers and have this corrected.
Thank you.

Doug Breneman  z/VM Development  Endicott, NY


   
  From:   Huegel, Thomas [EMAIL PROTECTED] 
   
  To: IBMVM@LISTSERV.UARK.EDU  
   
  Date:   10/20/2008 06:43 PM  
   
  Subject:Some REXX help   
   





I copied this line from the REXX VM/REFERENCE

It is from a sample SOCKETS SERVER exec (page 16.2).
When I try to execute it I get errors.
I have not seen code like this before, I wonder if anyone can explain the
technique to me?

if restnotsym;='' then call error 'E', 24, 'Invalid parameters specified'

Its the restnotsym;=''that I don't understand.


Thanks




Re: Some REXX help

2008-10-20 Thread Schuh, Richard
Ah, but the semicolon makes it two Rexx statements. The same as

If restnotsym;
='' then call ...

Your syntax will be better if you remove the ;

Regards, 
Richard Schuh 

 

 -Original Message-
 From: The IBM z/VM Operating System 
 [mailto:[EMAIL PROTECTED] On Behalf Of Rob van der Heij
 Sent: Monday, October 20, 2008 3:55 PM
 To: IBMVM@LISTSERV.UARK.EDU
 Subject: Re: Some REXX help
 
 On Tue, Oct 21, 2008 at 12:43 AM, Huegel, Thomas 
 [EMAIL PROTECTED] wrote:
 
  if restnotsym;='' then call error 'E', 24, 'Invalid 
 parameters specified'
 
  Its the restnotsym;=''that I don't understand.
 
 \= or /=   Someone expected that to be substituted by the not sign
 
 Rob
 


Re: Cost accounting for Linux guest running under z/VM

2008-10-20 Thread Thomas Kern
I have done it 3 1/2 times. The first time was in FORTRAN under VM/370
R5. Two times at this job using paid-for products (VMAccount and
CA-JARS). Both were too much information for management and not enough
of the right information for me. The 1/2 time was much more recent
thanks to a special survey last May that eventually ignored all IFL usage.
I started that process in REXX and PIPELINES with the structured fields
support. I think that could have potential but I don't have to do any
real accounting anymore. They want to charge as if everything was a
dedicated wintel box. I am out of the hard part.

/Tom Kern

Jim Bohnsack wrote:
 My IBM management, 25 years ago, went by the same idea that all users
 should pay a fixed fee.  I finally convinced them that your way, i.e. a
 smaller fixed fee and then incremental charges made sense.  I used the
 analogy of a hotel.  When you walk into a Holiday Inn, you know that
 there is some kind of base rate, but when you ask for an extra bed or a
 corner bedroom or room service, you are charged an extra fee.  25 years
 ago, the situation was kind of similar to running a Linux guest.  Most
 of the users were PROFS users, but we also supported IBM instructors who
 needed to bring up an MVS guest to prepare for a class.  There was no
 good reason to charge user A opening a PROFS note and user B running a
 guest MVS and calling them the same.  Writing the accounting code to
 handle the accounting records is no small task.  I did it in the '80's
 and would share it except that that was 2 jobs ago and I almost
 certainly didn't keep any of it to share.
 
 Jim
 


Re: Some REXX help

2008-10-20 Thread Alan Ackerman
On Mon, 20 Oct 2008 16:06:48 -0700, Schuh, Richard [EMAIL PROTECTED] wrot
e:

Ah, but the semicolon makes it two Rexx statements. The same as

If restnotsym;
='' then call ...

Your syntax will be better if you remove the ;

Regards, 
Richard Schuh 

Standard HTML entities like gt; and lt; start with an  (am
persand) and end with a ; (semicolon). 
The whole string notsym; was supposed to be a NOT SIGN. True, if you
 typed that into REXX, it 
would think the ; was a statement separator. But you don't want to remove
 the semicolon, you 
want to map notsym; to / (slash) or \ (backslash) or not-sign. REXX 
does not require a not-sign 
-- I recommend using backslash.

Alan Ackerman
Alan (dot) Ackerman (at) Bank of America (dot) com 


Re: VM Virtual CPUs and Threaded CMS Applications

2008-10-20 Thread Alan Ackerman
On Mon, 20 Oct 2008 08:43:00 -0400, Bob Bolch [EMAIL PROTECTED] wrote:

All execution of CMS linkage interfaces (CMSCALL, SVC 204, SVC202, etc.)
 and
most common direct branch interfaces to CMS services executed on a non-b
ase
CPU result in running intercept code that switches that thread back to t
he
base CPU for execution of the service. Another way to say it is that all
 the
code in the CMS Nucleus only runs on the base processor.

Each CP service defines how it executes on a non-base processor. Things 
like
IUCV and most Diagnose codes work just fine. In CMS Multitasking, non-ba
se
processors are intended for pure code not requiring CMS services.

Bob Bolch

Does this apply to CMSIUCV support also? Are you using CMSIUCV, or only C
P IUCV? 

You didn't mention semaphores, but if you are using them, have a look at:


  APAR Identifier .. VM64489  Last Changed  08/09/10
  SEMAPHORE FAILS IF MULTIPLE SUBTASKS WAITING_

Alan Ackerman
Alan (dot) Ackerman (at) Bank of America (dot) com