Re: XSTORE
"Schuh, Richard" wrote: >I don't think that z/OS uses XSTORE. Our MVS sysprogs expressed surprise >that we had some defined for VM. As others have noted, indeed it doesn't. I (and others) have repeatedly had to explain to skeptical MVSers why it's A Good Thing for z/VM. Just because z/OS doesn't know how to exploit it, they think it must be useless... ...phsiii
Re: Determining the mac address of the TCP/IP connection
NETSTAT ARP ALL - OR - If you have a vswitch installed and running - Q VSWITCH vswitch-name DETAILS HITACHI DATA SYSTEMS Raymond E. Noal Senior Technical Engineer Office: (408) 970 - 7978 From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Edward M Martin Sent: Wednesday, March 04, 2009 12:08 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Determining the mac address of the TCP/IP connection Hello Everyone, Is there a netstat command to see the mac address a QDIO card on a z890 running TCP/IP? Ed Martin Aultman Health Foundation 330-588-4723 ext 40441
Determining the mac address of the TCP/IP connection
Hello Everyone, Is there a netstat command to see the mac address a QDIO card on a z890 running TCP/IP? Ed Martin Aultman Health Foundation 330-588-4723 ext 40441
Re: XSTORE
Older versions did. As you say, current z/OS does not. On 3/4/09 5:40 PM, "Schuh, Richard" wrote: I don't think that z/OS uses XSTORE. Our MVS sysprogs expressed surprise that we had some defined for VM.
Re: XSTORE
>>> On 3/4/2009 at 2:42 PM, Kris Buelens wrote: > Attaching XSTORE to a user: you can, but it is up to the user to do > something with it, CMS doesn't use it at all, z/OS no longer supports it, > and I don't know about Linux. Yes, Linux can use it, with the xpram driver, but with VDISK around, there's no real need to use it. Mark Post
Re: XSTORE
I like the idea of a dynamically configurable parm for xstore. It would make it easier to test "tuning" options. Could be something like the SET MDC cache command. The only thing I've gleamed from the whole XSTORE for paging thing is that it helps with block paging out. We demand page in, no matter what. Tom Duerbusch THD Consulting >>> "Huegel, Thomas" 3/4/2009 5:04 PM >>> Understanding that CP uses an algorithm that handles XSTORE as a preferred paging area the question arises as to why? Since XSTORE is just a piece of main memory the reason for it's existence is no longer that it is some cheaper slower memory that can be used for paging. I think we all look at setting up the hardware and defining XSTORE as a permanent definition. Is it time to change CP, perhaps adding a parm to SYSTEM CONFIG that says OK CP use 500 meg of main storage for paging etc.? In other words instead of making a hard configuration change lets just tell CP how much memory to 'treat' as XSTORE. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]on Behalf Of Kris Buelens Sent: Wednesday, March 04, 2009 1:43 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: XSTORE Attaching XSTORE to a user: you can, but it is up to the user to do something with it, CMS doesn't use it at all, z/OS no longer supports it, and I don't know about Linux. To define some XSTORE fo CP is still a good thing if VM starts paging: XSTORE is managed differently than central storage. With some XSTORE CP has a better chance to select the best pages to page out. 2009/3/4, Michael Coffin < michaelcof...@mccci.com>: Hi Folks, What value is there in defining XSTORE these days? Aside from the ability to attach XSTORE to specific virtual machines, wouldn't it be best to just make it all DPA and let CP manage it? Also, assuming you aren't paging much - is attaching XSTORE to a userid going to provide a VERY noticable improvement in performance (at the expense of taking it away from all other virtual machines, of course)? -Mike -- Kris Buelens, IBM Belgium, VM customer support
Re: XSTORE
Understanding that CP uses an algorithm that handles XSTORE as a preferred paging area the question arises as to why? Since XSTORE is just a piece of main memory the reason for it's existence is no longer that it is some cheaper slower memory that can be used for paging. I think we all look at setting up the hardware and defining XSTORE as a permanent definition. Is it time to change CP, perhaps adding a parm to SYSTEM CONFIG that says OK CP use 500 meg of main storage for paging etc.? In other words instead of making a hard configuration change lets just tell CP how much memory to 'treat' as XSTORE. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]on Behalf Of Kris Buelens Sent: Wednesday, March 04, 2009 1:43 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: XSTORE Attaching XSTORE to a user: you can, but it is up to the user to do something with it, CMS doesn't use it at all, z/OS no longer supports it, and I don't know about Linux. To define some XSTORE fo CP is still a good thing if VM starts paging: XSTORE is managed differently than central storage. With some XSTORE CP has a better chance to select the best pages to page out. 2009/3/4, Michael Coffin < michaelcof...@mccci.com>: Hi Folks, What value is there in defining XSTORE these days? Aside from the ability to attach XSTORE to specific virtual machines, wouldn't it be best to just make it all DPA and let CP manage it? Also, assuming you aren't paging much - is attaching XSTORE to a userid going to provide a VERY noticable improvement in performance (at the expense of taking it away from all other virtual machines, of course)? -Mike -- Kris Buelens, IBM Belgium, VM customer support
Re: XSTORE
define xstore, otherwise you page steal to disk. Don't attach xstore to anything, it's a waste of resource. Michael Coffin wrote: Hi Folks, What value is there in defining XSTORE these days? Aside from the ability to attach XSTORE to specific virtual machines, wouldn't it be best to just make it all DPA and let CP manage it? Also, assuming you aren't paging much - is attaching XSTORE to a userid going to provide a VERY noticable improvement in performance (at the expense of taking it away from all other virtual machines, of course)? -Mike
Re: XSTORE
Attaching XSTORE to a user: you can, but it is up to the user to do something with it, CMS doesn't use it at all, z/OS no longer supports it, and I don't know about Linux. To define some XSTORE fo CP is still a good thing if VM starts paging: XSTORE is managed differently than central storage. With some XSTORE CP has a better chance to select the best pages to page out. 2009/3/4, Michael Coffin : > > Hi Folks, > > What value is there in defining XSTORE these days? Aside from the ability > to attach XSTORE to specific virtual machines, wouldn't it be best to just > make it all DPA and let CP manage it? > > Also, assuming you aren't paging much - is attaching XSTORE to a userid > going to provide a VERY noticable improvement in performance (at the expense > of taking it away from all other virtual machines, of course)? > > -Mike > -- Kris Buelens, IBM Belgium, VM customer support
Re: XSTORE
z/OS does not use Xstore anymore. Jerry Whitteridge Mainframe Engineering Safeway Inc 925 951 4184 jerry.whitteri...@safeway.com If everything seems under control, you're just not going fast enough. From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Schuh, Richard Sent: Wednesday, March 04, 2009 2:41 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: XSTORE I don't think that z/OS uses XSTORE. Our MVS sysprogs expressed surprise that we had some defined for VM. Regards, Richard Schuh From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of David Boyes Sent: Wednesday, March 04, 2009 11:02 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: XSTORE Paging hierarchy. Think of XSTORE as a really highspeed buffer between main storage and real disk. If you hit a spike in paging activity (like when all your Linux guests wake up near the same time to do something cron-related), you dramatically increase the probability that the pages you want/need are in XSTOR rather than having to wait for them to come in from physical I/O. I don't really bother to attach XSTORE to a userid unless it's z/OS or maybe VSE. In most cases I've seen, those are the only guest systems that really know what to do with it, and they're doing so much of their own thing that the impact on the floor system isn't usually their big issue. On 3/4/09 1:55 PM, "Michael Coffin" < michaelcof...@mccci.com> wrote: Hi Folks, What value is there in defining XSTORE these days? Aside from the ability to attach XSTORE to specific virtual machines, wouldn't it be best to just make it all DPA and let CP manage it? Also, assuming you aren't paging much - is attaching XSTORE to a userid going to provide a VERY noticable improvement in performance (at the expense of taking it away from all other virtual machines, of course)? -Mike "Email Firewall" made the following annotations. -- Warning: All e-mail sent to this address will be received by the corporate e-mail system, and is subject to archival and review by someone other than the recipient. This e-mail may contain proprietary information and is intended only for the use of the intended recipient(s). If the reader of this message is not the intended recipient(s), you are notified that you have received this message in error and that any review, dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately. ==
Re: XSTORE
I don't think that z/OS uses XSTORE. Our MVS sysprogs expressed surprise that we had some defined for VM. Regards, Richard Schuh From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of David Boyes Sent: Wednesday, March 04, 2009 11:02 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: XSTORE Paging hierarchy. Think of XSTORE as a really highspeed buffer between main storage and real disk. If you hit a spike in paging activity (like when all your Linux guests wake up near the same time to do something cron-related), you dramatically increase the probability that the pages you want/need are in XSTOR rather than having to wait for them to come in from physical I/O. I don't really bother to attach XSTORE to a userid unless it's z/OS or maybe VSE. In most cases I've seen, those are the only guest systems that really know what to do with it, and they're doing so much of their own thing that the impact on the floor system isn't usually their big issue. On 3/4/09 1:55 PM, "Michael Coffin" wrote: Hi Folks, What value is there in defining XSTORE these days? Aside from the ability to attach XSTORE to specific virtual machines, wouldn't it be best to just make it all DPA and let CP manage it? Also, assuming you aren't paging much - is attaching XSTORE to a userid going to provide a VERY noticable improvement in performance (at the expense of taking it away from all other virtual machines, of course)? -Mike
Re: XSTORE
Paging hierarchy. Think of XSTORE as a really highspeed buffer between main storage and real disk. If you hit a spike in paging activity (like when all your Linux guests wake up near the same time to do something cron-related), you dramatically increase the probability that the pages you want/need are in XSTOR rather than having to wait for them to come in from physical I/O. I don't really bother to attach XSTORE to a userid unless it's z/OS or maybe VSE. In most cases I've seen, those are the only guest systems that really know what to do with it, and they're doing so much of their own thing that the impact on the floor system isn't usually their big issue. On 3/4/09 1:55 PM, "Michael Coffin" wrote: Hi Folks, What value is there in defining XSTORE these days? Aside from the ability to attach XSTORE to specific virtual machines, wouldn't it be best to just make it all DPA and let CP manage it? Also, assuming you aren't paging much - is attaching XSTORE to a userid going to provide a VERY noticable improvement in performance (at the expense of taking it away from all other virtual machines, of course)? -Mike
Re: Dynamically removing paging volumes
I have successfully "drained" a page volume in the past, but as stated earlier it can take a long time to complete. Scott R Wandschneider Senior Systems Programmer|| Infocrossing, a Wipro Company || 11707 Miracle Hills Drive, Omaha, NE, 68154-4457|| ': 402.963.8905 || Ë:847.849.7223 || :: scott.wandschnei...@infocrossing.com **Think Green - Please print responsibly** -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Bill Holder Sent: Wednesday, March 04, 2009 10:26 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Dynamically removing paging volumes On Tue, 3 Mar 2009 19:39:12 +0100, Kris Buelens = wrote: >Since z/VM V5, the CP nucleus itself no longer has pageable parts. > While it's true that CP no longer pages out any parts of the nucleus itself, there are CP owned pageable structures that may be paged out on the target volume. The bulk of these are pageable PGMBKs (normal user private space PGMBKs, containing the page tables that represent user storage), but there are some other pageable structures that are not tied to users, so even if all users were logged off, there's no guarantee that paging use on the drained volume would drop to zero. = - Bill Holder, z/VM Development, IBM Endicott Confidentiality Note: This e-mail, including any attachment to it, may contain material that is confidential, proprietary, privileged and/or "Protected Health Information," within the meaning of the regulations under the Health Insurance Portability & Accountability Act as amended. If it is not clear that you are the intended recipient, you are hereby notified that you have received this transmittal in error, and any review, dissemination, distribution or copying of this e-mail, including any attachment to it, is strictly prohibited. If you have received this e-mail in error, please immediately return it to the sender and delete it from your system. Thank you.
Please Disregard Earlier Post
Please disregard my earlier post about OSADMIN3 and GUI - It was that I did not have privilege class "B" Scott R Wandschneider Senior Systems Programmer|| Infocrossing, a Wipro Company || 11707 Miracle Hills Drive, Omaha, NE, 68154-4457|| ': 402.963.8905 || Ë:847.849.7223 || :: scott.wandschnei...@infocrossing.com **Think Green - Please print responsibly** Confidentiality Note: This e-mail, including any attachment to it, may contain material that is confidential, proprietary, privileged and/or "Protected Health Information," within the meaning of the regulations under the Health Insurance Portability & Accountability Act as amended. If it is not clear that you are the intended recipient, you are hereby notified that you have received this transmittal in error, and any review, dissemination, distribution or copying of this e-mail, including any attachment to it, is strictly prohibited. If you have received this e-mail in error, please immediately return it to the sender and delete it from your system. Thank you.
IBM Survey
This was posted in a Domino forum but is applicable to everyone using IBM Support: Hello, We would appreciate your help in building a more robust, efficient, and client-focused IBM Electronic Support system by filling out this questionnaire: https://www.ibm.com/survey/oid/wsb.dll/s/ag21f?wsb34=blogs It should take only approximately five to ten minutes to complete, but the results will help us make your IBM Support experience the best it can be. Thank you for your valuable input! Regards, The Enterprise IBM Electronic Support team === Go getem Lionel B. Dyck, Consultant/Specialist Enterprise Platform Services, Mainframe Engineering KP-IT Enterprise Engineering 925-926-5332 (8-473-5332) | E-Mail: lionel.b.d...@kp.org AIM: lbdyck | Yahoo IM: lbdyck Kaiser Service Credo: "Our cause is health. Our passion is service. We?re here to make lives better.? ?Never attribute to malice what can be caused by miscommunication.? NOTICE TO RECIPIENT: If you are not the intended recipient of this e-mail, you are prohibited from sharing, copying, or otherwise using or disclosing its contents. If you have received this e-mail in error, please notify the sender immediately by reply e-mail and permanently delete this e-mail and any attachments without reading, forwarding or saving them. Thank you. <>
XSTORE
Hi Folks, What value is there in defining XSTORE these days? Aside from the ability to attach XSTORE to specific virtual machines, wouldn't it be best to just make it all DPA and let CP manage it? Also, assuming you aren't paging much - is attaching XSTORE to a userid going to provide a VERY noticable improvement in performance (at the expense of taking it away from all other virtual machines, of course)? -Mike
Re: Using LBYONLY
Shimon, What release of VM:Secure are you running? In r2.8 G0808, it definitely doesn't work. I tested before I posted. You're assuming that LOGON and LOGONBY rules are evaluated together to determine the most specific rule. That's not how it works. LOGON rules are evaluated first. If the userid cannot be logged onto, LOGONBY rules are irrelevant. Dennis O'Brien 39,556 From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Shimon Lebowitz Sent: Wednesday, March 04, 2009 02:14 To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] Using LBYONLY I am sorry, but that set of rules WILL work in VM:Secure. To quote the Rules Manual: When two or more rules in a file govern a particular access request, VM:Secure establishes an order of preference based on how precisely the requester is specified. In order of preference, a rule is chosen that indicates: 1.A specific user ID as requester 2.A specific group as requester 3.An asterisk (*) as requester; this indicates all user IDs So, when someone NOT mentioned in the specific ACCEPT rule tries to logonby, the REJECT * LOGON catches them. But if the user specified in the accept attempts it, the ACCEPT rule is more specific and will allow the logonby. In fact, the manual gives an example just like Richard's rules, except that it is dealing with LINK requests: REJECT * LINK 191 RR ACCEPT FRAISERC LINK 191 RR Shimon > Richard Schuh wrote: > >And with VM:Secure, you can accomplish the same effect by using the > Rules Facility. With >the following rules, the actual password is > immaterial: > > > > REJECT * LOGON > > ACCEPT userx LOGONBY > > That doesn't work. The REJECT * LOGON rule takes precedence, and you > don't even get a chance to enter your password for LOGONBY. Set the > password to LBYONLY and create ACCEPT xxx LOGONBY rules for the userids > you want to log on. That's all you need. If you don't have VM:Secure > or another external security manager, then set the password to LBYONLY > and add LOGONBY statements to the directory. > >Dennis O'Brien > > 39,556 -- Shimon Lebowitzmailto:shim...@iname.com VM System Programmer . Israel Police National HQ. Jerusalem, Israel phone: +972 2 542-9877 fax: 542-9308
OSADMIN3 Failure when attempting GUI
We are receiving the following when attempting to connect to OSADMIN3 VIA GUI. The is a 5.3 701 system. Any help or insight will be appreciated. Thanks in advance. IOAXTSRV Version 3.05 - TCP/IP Remote command execution IOAXTSRV. Port for this server is: 2000 CEE3202S The system detected a privileged-operation exception (System Completion Code=0C2). >From entry point CSAVE0001 at compile unit offset +00EE at entry offset >+00EE at address 00DE6446. Scott R Wandschneider Senior Systems Programmer|| Infocrossing, a Wipro Company || 11707 Miracle Hills Drive, Omaha, NE, 68154-4457|| ': 402.963.8905 || Ë:847.849.7223 || :: scott.wandschnei...@infocrossing.com **Think Green - Please print responsibly** Confidentiality Note: This e-mail, including any attachment to it, may contain material that is confidential, proprietary, privileged and/or "Protected Health Information," within the meaning of the regulations under the Health Insurance Portability & Accountability Act as amended. If it is not clear that you are the intended recipient, you are hereby notified that you have received this transmittal in error, and any review, dissemination, distribution or copying of this e-mail, including any attachment to it, is strictly prohibited. If you have received this e-mail in error, please immediately return it to the sender and delete it from your system. Thank you.
Re: SFS question (was: Q LIMITS question)
Apparently you are not running SAFESFS? If not, this becomes labor intensive. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Gentry, Stephen Sent: Wednesday, March 04, 2009 10:32 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: SFS question (was: Q LIMITS question) Bruce, thanks for the reply. But not exactly what I wanted. I probably didn't ask the question correctly. I have a specific userid, for example MAINT, what SFS directories does MAINT have read and/or write access to? When I run Query AUTHority VMSYSU:xx. (or VMSYSU:x.y) I get a list of users who can read and/or write to the specified subdirectory. I want to specify a userid and get a list of SFS subdirectories that user has access to. We heavily use SFS in our production batch processing using different batch worker machines (VM:Batch) Some worker machines have access to common SFS subdirectories. I can write something using the brute force method but I was hoping for something a little more elegant. Steve -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Bruce Hayden Sent: Wednesday, March 04, 2009 10:00 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: SFS question (was: Q LIMITS question) I've had ALLDIRS XEDIT around for quite awhile. You start DIRLIST against your own space in the filepool and then enter ALLDIRS on the command line. /* ALLDIRS XEDIT */ 'command top' 'command next' 'extract /curline' parse var curline.3 10 filepool ':' 'command bot' address command 'PIPE command QUERY LIMITS ALL' filepool':', '| drop 1', '| pick 52.2 /== " 0"', /* Ignore unused directories */ '| spec "LISTDIR' filepool':" 1 w1 next ". (XEDIT" next', '| command' 'SDIR' Exit On Wed, Mar 4, 2009 at 8:17 AM, Gentry, Stephen wrote: > Is there a command of some kind or has anyone written an EXEC (or PIPE, > etc.) that will provide a list of SFS directories that a user has access to? > > > > Steve -- Bruce Hayden Linux on System z Advanced Technical Support IBM, Endicott, NY
Re: SFS question (was: Q LIMITS question)
Bruce, thanks for the reply. But not exactly what I wanted. I probably didn't ask the question correctly. I have a specific userid, for example MAINT, what SFS directories does MAINT have read and/or write access to? When I run Query AUTHority VMSYSU:xx. (or VMSYSU:x.y) I get a list of users who can read and/or write to the specified subdirectory. I want to specify a userid and get a list of SFS subdirectories that user has access to. We heavily use SFS in our production batch processing using different batch worker machines (VM:Batch) Some worker machines have access to common SFS subdirectories. I can write something using the brute force method but I was hoping for something a little more elegant. Steve -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Bruce Hayden Sent: Wednesday, March 04, 2009 10:00 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: SFS question (was: Q LIMITS question) I've had ALLDIRS XEDIT around for quite awhile. You start DIRLIST against your own space in the filepool and then enter ALLDIRS on the command line. /* ALLDIRS XEDIT */ 'command top' 'command next' 'extract /curline' parse var curline.3 10 filepool ':' 'command bot' address command 'PIPE command QUERY LIMITS ALL' filepool':', '| drop 1', '| pick 52.2 /== " 0"', /* Ignore unused directories */ '| spec "LISTDIR' filepool':" 1 w1 next ". (XEDIT" next', '| command' 'SDIR' Exit On Wed, Mar 4, 2009 at 8:17 AM, Gentry, Stephen wrote: > Is there a command of some kind or has anyone written an EXEC (or PIPE, > etc.) that will provide a list of SFS directories that a user has access to? > > > > Steve -- Bruce Hayden Linux on System z Advanced Technical Support IBM, Endicott, NY
Re: Dynamically removing paging volumes
On Tue, 3 Mar 2009 19:39:12 +0100, Kris Buelens wrote: >Since z/VM V5, the CP nucleus itself no longer has pageable parts. > While it's true that CP no longer pages out any parts of the nucleus itself, there are CP owned pageable structures that may be paged out on the target volume. The bulk of these are pageable PGMBKs (normal user private space PGMBKs, containing the page tables that represent user storage), but there are some other pageable structures that are not tied to users, so even if all users were logged off, there's no guarantee that paging use on the drained volume would drop to zero. - Bill Holder, z/VM Development, IBM Endicott
Re: SFS question (was: Q LIMITS question)
I've had ALLDIRS XEDIT around for quite awhile. You start DIRLIST against your own space in the filepool and then enter ALLDIRS on the command line. /* ALLDIRS XEDIT */ 'command top' 'command next' 'extract /curline' parse var curline.3 10 filepool ':' 'command bot' address command 'PIPE command QUERY LIMITS ALL' filepool':', '| drop 1', '| pick 52.2 /== " 0"', /* Ignore unused directories */ '| spec "LISTDIR' filepool':" 1 w1 next ". (XEDIT" next', '| command' 'SDIR' Exit On Wed, Mar 4, 2009 at 8:17 AM, Gentry, Stephen wrote: > Is there a command of some kind or has anyone written an EXEC (or PIPE, > etc.) that will provide a list of SFS directories that a user has access to? > > > > Steve -- Bruce Hayden Linux on System z Advanced Technical Support IBM, Endicott, NY
SFS question (was: Q LIMITS question)
Is there a command of some kind or has anyone written an EXEC (or PIPE, etc.) that will provide a list of SFS directories that a user has access to? Steve From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Kris Buelens Sent: Tuesday, March 03, 2009 1:37 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Q LIMITS question Have a look at my SFSULIST package. Basically it displays a combination of Q LIMITS, Q ENROLL AMDIN, Q FILEPOOL CONNECT and Q FILEPOOL STORGRP 2009/3/3 Gentry, Stephen Don't' put the period '.' after MAINT. I just tried it and it worked for me. Steve -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Shimon Lebowitz Sent: Tuesday, March 03, 2009 11:39 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Q LIMITS question Hi, I am a bit confused by a Q LIMITS situation. 1) I (XMSL) am an admin: q enroll admin vmsys NUMBER OF ADMINISTRATORS =18 MAINT XMSL RMSMASTR DGTSRV01 DGTSRV02 DGTSRV03 READY; T=0.01/0.01 19:37:54 2) I can query limits of ALL the users: q limits all vmsys USERIDSTORAGE GROUP 4K BLOCK LIMIT 4K BLOCKS COMMITTED THRESHOLD DFSMS 2450090-02% 90% MAINT 27000 3030-43% 90% READY; T=0.01/0.01 19:39:10 3) BUT... I canot query an individual user: q limits for maint. vmsys USERIDSTORAGE GROUP 4K BLOCK LIMIT 4K BLOCKS COMMITTED THRESHOLD MAINT.- - - - READY; T=0.01/0.01 19:40:13 Why not?? Thanks for any suggestions, Shimon -- Shimon Lebowitzmailto:shim...@iname.com VM System Programmer . Israel Police National HQ. Jerusalem, Israel phone: +972 2 542-9877 fax: 542-9308 -- Kris Buelens, IBM Belgium, VM customer support
Re: remembering PGP
On 03/04/2009 01:02 AM, IBMVM automatic digest system wrote: Long ago, in a galaxy close to where I am this week, there was a PGP MODULE. It was built by a kind person at MIT (which is NOT close to where I am this week) and worked exactly as one would expect it to work. Maybe some day we will have a PGP for CMS again. Dunno. Recently, PGP got interesting again (to me). Actually, GPG is what I use instead (for better or worse). So it occured to me that when there is a face-to-face opportunity, such as that enjoyed by those fortunate souls who made the trek to Central Texas, the subject of key signing should be kept in mind. Therefore, if you happen to be in Austin this week and have a GPG key and want a signature, let me know. At least, let SOMEONE know. (My signature may not be what you need, and I am okay with that. But ... get yer keys signed!) some old email discussing pgp-like implementation for the internal network http://www.garlic.com/~lynn/2006w.html#email810505 in this post http://www.garlic.com/~lynn/2006w.html#12 more secure communication over the network and http://www.garlic.com/~lynn/2007d.html#email810506 in this post http://www.garlic.com/~lynn/2007d.html#49 certificate distribution misc. old public key &/or crypto email http://www.garlic.com/~lynn/lhwemail.html#crypto misc. past posts mentioning the internal network ... which was larger than the arpanet/internet from just about the beginning, until sometime late '85 or possibly early '86 http://www.garlic.com/~lynn/subnetwork.html#internalnet -- 40+yrs virtualization experience (since Jan68), online at home since Mar70
Re: Using LBYONLY
I am sorry, but that set of rules WILL work in VM:Secure. To quote the Rules Manual: When two or more rules in a file govern a particular access request, VM:Secure establishes an order of preference based on how precisely the requester is specified. In order of preference, a rule is chosen that indicates: 1.A specific user ID as requester 2.A specific group as requester 3.An asterisk (*) as requester; this indicates all user IDs So, when someone NOT mentioned in the specific ACCEPT rule tries to logonby, the REJECT * LOGON catches them. But if the user specified in the accept attempts it, the ACCEPT rule is more specific and will allow the logonby. In fact, the manual gives an example just like Richard's rules, except that it is dealing with LINK requests: REJECT * LINK 191 RR ACCEPT FRAISERC LINK 191 RR Shimon > Richard Schuh wrote: > >And with VM:Secure, you can accomplish the same effect by using the > Rules Facility. With >the following rules, the actual password is > immaterial: > > > > REJECT * LOGON > > ACCEPT userx LOGONBY > > That doesn't work. The REJECT * LOGON rule takes precedence, and you > don't even get a chance to enter your password for LOGONBY. Set the > password to LBYONLY and create ACCEPT xxx LOGONBY rules for the userids > you want to log on. That's all you need. If you don't have VM:Secure > or another external security manager, then set the password to LBYONLY > and add LOGONBY statements to the directory. > > Dennis O'Brien > > 39,556 -- Shimon Lebowitz mailto:shim...@iname.com VM System Programmer . Israel Police National HQ. Jerusalem, Israel phone: +972 2 542-9877 fax: 542-9308
Re: remembering PGP
We still use it with CMS20 (haven't access to anything later), the versio n that was ported by Konstantin Berdichevsky from Phil Zimmerman's excellen t product. No updates since 2001. Yes, MIT is still running VM, but it's been outsourced to another datacenter near New York City. Peter
