Re: Changing service machines to recognize the new time zone change.
I you have VMUTIL issue the SET TIMEZONE command, it might be OK, because, when the SET TIMEZONE has ended, VMUTIL will see the new time when it returns to WAKRUP. Other servers using WAKEUP will not notice the change, until they get waken up by some other event. As our servers didn't have real time critical things on Sundays, I didn't mind. With PIPE's DELAY stage I had a problem in our DSIKACNT server: 1 Apr 2004: Bypass PIPE Delay problem with TZ changes *** BEWARE * At least up to z/VM 4.2, the DELAY stage cannot cope with dynamic * * timezone changes, e.g. a DELAY to wakeup at 23:58:00 would cause a * * wakeup at 22:58:00 when the timezone changed from Summer to Winter. * * Result is a loop -every day- during the hour of TZ change. * * The only solution is to re-IPL CMS (NUCXDROP PIPE doesn't help) * * We try to solve that problem too. * *** I don't know about PERFKIT, nor if DELAY has been fixed: my former customer decided to reIPL all z/VM systems because that is what's done for z/OS. 2009/3/10 Scott Rohling scott.rohl...@gmail.com I don't think there is currently a better way - no. I can't remember the details, but the apps have to be able to take advantage of the TIMEZONE value, and I don't believe PERFKIT is one of them.. (someone correct please!). Funny you mention VMUTIL - when asked how to do the SET TIMEZONE automatically - I mentioned using VMUTIL (or some other simple scheduler) to do this - or coding up something that could read the SYSTEM CONFIG and see if SET TIMEZONE should be issued and running this nightly (rather than duplicating date/time settings in both places). So thinking about it - after VMUTIL issues SET TIMEZONE - it should probably reipl itself.. Not sure if the IBM HMF product handles this any better? Scott On Tue, Mar 10, 2009 at 1:36 PM, Hans Rempel h...@hmrconsultants.comwrote: Is there now a cleaner way to have PERFSVM recognize the time zone change other than recycling the server? I’m on z/VM 5.2 and z/VM 5.4. I guess this also applies to userids like VMUTIL also. Thanks in advance Hans -- Kris Buelens, IBM Belgium, VM customer support
Re: Decompiling REXXC
A compiled REXX is not like a tokenized REXX as found on OS/2. No, it is plain machine code.. It's unclear if you have tried this: SET EXECTRAC ON(or TS) run the complied EXEC if you get a VM READ, issue parse source kris; say kris if that doesn't show anything, maybe address '' 'CP MSG *' kris if you'd have the VM REA in the expected EXEC: do i=1 to sourceline(); 'EXECIO1 DISKW T T A(STRING' sourceline(i); end;'FINIS T T A' 2009/3/11 Ian S. Worthington ianworthing...@usa.net Looks like that's a no to sline. Do any options exist for decompiling it? iirc it is/used to be tokenised rather than translated to machine code so it shouldn't be that difficult? i -- Original Message -- Received: Tue, 10 Mar 2009 01:32:22 PM COT From: Schuh, Richard rsc...@visa.com To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Decompiling REXXC Try tracing it. If either notrace or nosline was specified, you will not be able to do it. If SLINE was allowed, trace should work. Regards, Richard Schuh -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Ian S. Worthington Sent: Tuesday, March 10, 2009 11:11 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Decompiling REXXC I have a compiled rexx exec, the source for which appears to be awol. How can I tell if it was compiled with sline, and if so extract the source from it? Or, failing that, is there any tool around to decompile it? Thanks, ian ... Ian S. Worthington, MBCS. me: http://isw.me.uk/ photos: http://gallery.isw.me.uk/ Free 2GB online backups: https://mozy.com/?code=HJW4C8 (code gets you 256MB extra) Web hosting and support from $2.99/month: www.cirtexhosting.com/affiliates/idevaffiliate.php?id=463 Dulce et decorum est pro patria mori, sed dulcius pro patria vivere, et dulcissimus pro patria biber. Ergo, bibiamo pro salute patriae. -- Kris Buelens, IBM Belgium, VM customer support
Re: Decompiling REXXC
Thanks Kris. I should have been more explicit -- I had tried trace. i -- Original Message -- Received: Wed, 11 Mar 2009 05:24:26 AM COT From: Kris Buelens kris.buel...@gmail.com To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Decompiling REXXC A compiled REXX is not like a tokenized REXX as found on OS/2. No, it is plain machine code.. It's unclear if you have tried this: SET EXECTRAC ON(or TS) run the complied EXEC if you get a VM READ, issue parse source kris; say kris if that doesn't show anything, maybe address '' 'CP MSG *' kris if you'd have the VM REA in the expected EXEC: do i=1 to sourceline(); 'EXECIO1 DISKW T T A(STRING' sourceline(i); end;'FINIS T T A' 2009/3/11 Ian S. Worthington ianworthing...@usa.net Looks like that's a no to sline. Do any options exist for decompiling it? iirc it is/used to be tokenised rather than translated to machine code so it shouldn't be that difficult? i -- Original Message -- Received: Tue, 10 Mar 2009 01:32:22 PM COT From: Schuh, Richard rsc...@visa.com To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Decompiling REXXC Try tracing it. If either notrace or nosline was specified, you will not be able to do it. If SLINE was allowed, trace should work. Regards, Richard Schuh -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Ian S. Worthington Sent: Tuesday, March 10, 2009 11:11 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Decompiling REXXC I have a compiled rexx exec, the source for which appears to be awol. How can I tell if it was compiled with sline, and if so extract the source from it? Or, failing that, is there any tool around to decompile it? Thanks, ian ... Ian S. Worthington, MBCS. me: http://isw.me.uk/ photos: http://gallery.isw.me.uk/ Free 2GB online backups: https://mozy.com/?code=HJW4C8 (code gets you 256MB extra) Web hosting and support from $2.99/month: www.cirtexhosting.com/affiliates/idevaffiliate.php?id=463 Dulce et decorum est pro patria mori, sed dulcius pro patria vivere, et dulcissimus pro patria biber. Ergo, bibiamo pro salute patriae. -- Kris Buelens, IBM Belgium, VM customer support
Re: Service - Where did it come from
HELP VMSES SERVICE or HELP VMSES MENU -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Jim Bohnsack Sent: Tuesday, March 10, 2009 10:40 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Service - Where did it come from I've commented on SERVICE before. I think that there should be some doc that covers SERVICE. For the most part, it's just a big black box. At the very least, give us a SERVICE HELP???. I understand the need for SERVICE, but for the slightly more technically inclined or VM experienced person, while SERVICE fills the bill 99% of the time, sometimes SERVICE (with a parameter of some kind) would be useful. Where is SERVICE STATUS documented? Jim Carol Everitt wrote: You could also use the SERVICE command with the STATUS operand to get=20= status on a list of PTFs or APARs installed. If you wanted to know if al= l=20 the PTFs that you have on SYSTEM1 are installed on SYSTEM2, you could=20 create a list of PTFs from the Apply list on SYSTEM1 and then use that as= =20 input on to the SERVICE command on SYSTEM2. See the description of the=20= SERVICE command in the VMSES/E Introduction and Reference, chapter 20,=20= for complete syntax. -- Jim Bohnsack Cornell University (972) 596-6377 home/office (972) 342-5823 cell jab...@cornell.edu This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system.
Re: Service - Where did it come from
Thanks. I had never come across that. Jim Romanowski, John (OFT) wrote: HELP VMSES SERVICE or HELP VMSES MENU -- Jim Bohnsack Cornell University (972) 596-6377 home/office (972) 342-5823 cell jab...@cornell.edu
Re: Service - Where did it come from
It's also in chapter 20 of the VM 5.3 manual VMSES/E Introduction and Reference a bit easier to read than the HELP files -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Jim Bohnsack Sent: Wednesday, March 11, 2009 9:10 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Service - Where did it come from Thanks. I had never come across that. Jim Romanowski, John (OFT) wrote: HELP VMSES SERVICE or HELP VMSES MENU -- Jim Bohnsack Cornell University (972) 596-6377 home/office (972) 342-5823 cell jab...@cornell.edu This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system.
Re: SSL Server on z/VM 5.4 RSU 802
It defiantly does get confusing. I was hoping RSU 0901 would be out and include the CMS SSL code before I undertook the SSL task. No such luck. Still I think it is an improvement over the LINUX approach, especially for non-LINUX shops. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]on Behalf Of Tyler Koyl Sent: Tuesday, March 10, 2009 6:31 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: SSL Server on z/VM 5.4 RSU 802 Thanks. Thats was it. I found the enablement PTFs and installed them. This is a real PITA. From having to figure out that ssl needed to be enabled to finally getting SSLSERV to initialize properly only after storing the database password in a friggin stash file with the right permissions; made for a long day. I feel cooked. Tyler Koyl Viterra Inc. Huegel, Thomas thue...@kable.com Sent by: The IBMTo z/VM Operating IBMVM@LISTSERV.UARK.EDU System cc ib...@listserv.uar K.EDU Subject Re: SSL Server on z/VM 5.4 RSU 802 03/10/2009 03:34 PM Please respond to The IBM z/VM Operating System ib...@listserv.uar K.EDU I don't know.. do you have the SSL enabling PTF's on? -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]on Behalf Of Tyler Koyl Sent: Tuesday, March 10, 2009 4:31 PM To: IBMVM@LISTSERV.UARK.EDU Subject: SSL Server on z/VM 5.4 RSU 802 Testing out z/VM 5.4 and would like to implement secure telnet, ftp etc using the SSL server. I have gone through the TCPIP configuration and certificate database creation of the SSL server but I get the following from SSLSERV when the server is autologged by TCPIP: DTCRUN1022I Console log will be sent to default owner ID: TCPMAINT DTCRUN1011I Server started at 14:14:16 on 10 Mar 2009 (Tuesday) DTCRUN1011I Running server command: VMSSL DTCRUN1011I Parameters in use: DTCRUN1011I keyfile /etc/gskadm/Database.kdb VMSSL program functions are not available 14:14:16 * MSG FROM SSLSERV : VMSSL PROGRAM FUNCTIONS ARE NOT AVAILABLE HCPMFS057I SSLSERV not receiving; disconnected DTCRUN1015I Server ended with RC=8 at 14:14:16 on 10 Mar 2009 (Tuesday) I seem to not be able to find out WHY 'VMSSL program functions are not available'. I can only guess that it might be because we don't have any crypto processors enabled but I am pretty dazed and confused at this point. Any help is appreciated. Tyler Koyl Viterra Inc. This e-mail and any attachment(s) are confidential and may be privileged. If you are not the intended recipient please notify me immediately by return e-mail, delete this e-mail and do not copy, use or disclose it. This e-mail and any attachment(s) are confidential and may be privileged. If you are not the intended recipient please notify me immediately by return e-mail, delete this e-mail and do not copy, use or disclose it.
Re: IP change requested
Phillip, I think you may have accidentally sent this to me. I work for the State of Ohio,Departrment of Commerce. Please review. Thanks Larry From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Phillip Parmelee Sent: Wednesday, March 11, 2009 9:37 AM To: IBMVM@LISTSERV.UARK.EDU Subject: IP change requested Larry Wayne, I have received this request: from DOC. Looking at the SCEXIT, 172.17.169.64 is not there. So, I am not sure just how to remove it. Either Jack C. or I can send you copies of our procedures for this type of change. Please let us know how we can help and call for access when needed. Phil Parmelee IBM Global Services VM/VSE Team Harrisburg, PA 717-526-1250 T/L 239-1250 parme...@us.ibm.com - The information transmitted is intended solely for the individual or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you have received this email in error please contact the sender and delete the material from any computer.
Re: IP change requested
Actually you all are sending this to the IBMVM mailing list where a few hundred of us can now see your documents and communication...oops. Scott On Wed, Mar 11, 2009 at 8:26 AM, Macioce, Larry larry.maci...@com.state.oh.us wrote: Phillip, I think you may have accidentally sent this to me. I work for the State of Ohio,Departrment of Commerce. Please review. Thanks Larry -- *From:* The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] *On Behalf Of *Phillip Parmelee *Sent:* Wednesday, March 11, 2009 9:37 AM *To:* IBMVM@LISTSERV.UARK.EDU *Subject:* IP change requested Larry Wayne, I have received this request: from DOC. Looking at the SCEXIT, 172.17.169.64 is not there. So, I am not sure just how to remove it. Either Jack C. or I can send you copies of our procedures for this type of change. Please let us know how we can help and call for access when needed. Phil Parmelee IBM Global Services VM/VSE Team Harrisburg, PA 717-526-1250 T/L 239-1250 parme...@us.ibm.com -- * The information transmitted is intended solely for the individual or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you have received this email in error please contact the sender and delete the material from any computer. *
Re: IP change requested
Well, it was sent to the list so aren't we the intended audience? -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Ian S. Worthington Sent: Wednesday, March 11, 2009 10:09 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: IP change requested You don't understand, Scott: The disclaimer on the original note prevents us from reading it. Surely that's sufficient? i -- Original Message -- Received: Wed, 11 Mar 2009 09:29:42 AM COT From: Scott Rohling scott.rohl...@gmail.com To: IBMVM@LISTSERV.UARK.EDU Subject: Re: IP change requested Actually you all are sending this to the IBMVM mailing list where a few hundred of us can now see your documents and communication...oops. Scott On Wed, Mar 11, 2009 at 8:26 AM, Macioce, Larry larry.maci...@com.state.oh.us wrote: Phillip, I think you may have accidentally sent this to me. I work for the State of Ohio,Departrment of Commerce. Please review. Thanks Larry -- *From:* The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] *On Behalf Of *Phillip Parmelee *Sent:* Wednesday, March 11, 2009 9:37 AM *To:* IBMVM@LISTSERV.UARK.EDU *Subject:* IP change requested Larry Wayne, I have received this request: from DOC. Looking at the SCEXIT, 172.17.169.64 is not there. So, I am not sure just how to remove it. Either Jack C. or I can send you copies of our procedures for this type of change. Please let us know how we can help and call for access when needed. Phil Parmelee IBM Global Services VM/VSE Team Harrisburg, PA 717-526-1250 T/L 239-1250 parme...@us.ibm.com -- * The information transmitted is intended solely for the individual or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you have received this email in error please contact the sender and delete the material from any computer. * Disclaimer Confidentiality Notice: This e-mail, and any attachments and/or documents linked to this email, are intended for the addressee and may contain information that is privileged, confidential, proprietary, or otherwise protected by law. Any dissemination, distribution, or copying is prohibited. This notice serves as a confidentiality marking for the purpose of any confidentiality or nondisclosure agreement. If you have received this communication in error, please contact the original sender.
Re: IP change requested
Um - I just think it was a personal email to 'Larry Wayne' and somehow was
sent here (too quick with the prefilled address?). \
Scott
On Wed, Mar 11, 2009 at 9:09 AM, Ian S. Worthington
ianworthing...@usa.netwrote:
You don't understand, Scott: The disclaimer on the original note prevents
us
from reading it. Surely that's sufficient?
i
-- Original Message --
Received: Wed, 11 Mar 2009 09:29:42 AM COT
From: Scott Rohling scott.rohl...@gmail.com
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: IP change requested
Actually you all are sending this to the IBMVM mailing list where a few
hundred of us can now see your documents and communication...oops.
Scott
On Wed, Mar 11, 2009 at 8:26 AM, Macioce, Larry
larry.maci...@com.state.oh.us wrote:
Phillip,
I think you may have accidentally sent this to me. I work for the
State
of
Ohio,Departrment of Commerce.
Please review.
Thanks
Larry
--
*From:* The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]
*On
Behalf Of *Phillip Parmelee
*Sent:* Wednesday, March 11, 2009 9:37 AM
*To:* IBMVM@LISTSERV.UARK.EDU
*Subject:* IP change requested
Larry Wayne,
I have received this request: from DOC.
Looking at the SCEXIT, 172.17.169.64 is not there. So, I am not sure
just
how to remove it.
Either Jack C. or I can send you copies of our procedures for this type
of
change. Please let us know how we can help and call for access when
needed.
Phil Parmelee
IBM Global Services
VM/VSE Team
Harrisburg, PA
717-526-1250 T/L 239-1250
parme...@us.ibm.com
--
*
The
information transmitted is intended solely for the individual or entity
to
which it is addressed and may contain confidential and/or privileged
material. Any review, retransmission, dissemination or other use of or
taking action in reliance upon this information by persons or entities
other
than the intended recipient is prohibited. If you have received this
email
in error please contact the sender and delete the material from any
computer.
*
Re: IP change requested
I didn't even notice the address it until Scott said something. Can the mods delete this post?? Thanks Mace From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Scott Rohling Sent: Wednesday, March 11, 2009 11:39 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: IP change requested Um - I just think it was a personal email to 'Larry Wayne' and somehow was sent here (too quick with the prefilled address?). \ Scott On Wed, Mar 11, 2009 at 9:09 AM, Ian S. Worthington ianworthing...@usa.net wrote: You don't understand, Scott: The disclaimer on the original note prevents us from reading it. Surely that's sufficient? i -- Original Message -- Received: Wed, 11 Mar 2009 09:29:42 AM COT From: Scott Rohling scott.rohl...@gmail.com To: IBMVM@LISTSERV.UARK.EDU Subject: Re: IP change requested Actually you all are sending this to the IBMVM mailing list where a few hundred of us can now see your documents and communication...oops. Scott On Wed, Mar 11, 2009 at 8:26 AM, Macioce, Larry larry.maci...@com.state.oh.us wrote: Phillip, I think you may have accidentally sent this to me. I work for the State of Ohio,Departrment of Commerce. Please review. Thanks Larry -- *From:* The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] *On Behalf Of *Phillip Parmelee *Sent:* Wednesday, March 11, 2009 9:37 AM *To:* IBMVM@LISTSERV.UARK.EDU *Subject:* IP change requested Larry Wayne, I have received this request: from DOC. Looking at the SCEXIT, 172.17.169.64 is not there. So, I am not sure just how to remove it. Either Jack C. or I can send you copies of our procedures for this type of change. Please let us know how we can help and call for access when needed. Phil Parmelee IBM Global Services VM/VSE Team Harrisburg, PA 717-526-1250 T/L 239-1250 parme...@us.ibm.com -- * The information transmitted is intended solely for the individual or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you have received this email in error please contact the sender and delete the material from any computer. * - The information transmitted is intended solely for the individual or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you have received this email in error please contact the sender and delete the material from any computer.
Re: Changing service machines to recognize the new time zone change.
On Wednesday, 03/11/2009 at 06:14 EDT, Kris Buelens kris.buel...@gmail.com wrote: I you have VMUTIL issue the SET TIMEZONE command, it might be OK, because, when the SET TIMEZONE has ended, VMUTIL will see the new time when it returns to WAKRUP. Other servers using WAKEUP will not notice the change, until they get waken up by some other event. As our servers didn't have real time critical things on Sundays, I didn't mind. To clarify, a guest only receives notification of a SET TIMEZONE if it uses diagnose 0x274 to register to receive it. CMS doesn't do that and it doesn't have an interface by which can notify all Interested Parties. You need guest whose sole purpose in life is to await said signal. Upon receiving it, would signal your automation software (e.g. VMUTIL) to Do Something (E.g. generates MSG VMUTIL TIMEZONE-CHANGED. The VMUTIL server's most likely response is to restart CMS and GCS servers. The PIPE delay stage is documented to use the clock comparator to wake up. That is, it sets the comparator with a TOD clock value in the future. When the current TOD matches the comparator, an interrupt is generated. Changing the timezone does not change the TOD, so there is no automatic wakeup. Just interrupting a Pipe delay won't help since I think Pipe retrieves the tz (via diag 0) when the PIPE command is issued, not when the delay stage i started. Alan Altmark z/VM Development IBM Endicott
Re: SLES 9.0 SP3 SPACE PROBLEM
OK, so what application/processes are classified as root user that may use some of that 5% space? I've had the same problem with some systems. I don't know that they are not working anymore, or perhaps they are working, and when I need to boot them, due to planned outages, not only I couldn't bring them down clean, but then didn't come back up. I do laugh as even people at IBM, the hardware side, can't figure out things such as logrotate. We have an IBM DS6800. It uses some form of Unix/Linux for its controller code. About every 2.5 years, the controller area fills up and locks us out. It still processes I/Os just fine, but the DS6800 console can't access it. And no one is notified. No heartbeat goes out to IBM. It doesn't notify support about hardware errors. We just run until, I guess, it eventually stops running. I stumbled on it this pass Monday as we have a power outage scheduled for this weekend and we have to shut down. We are current on our DS6800 hardware code. If the powers at IBM can't figure this one out with thousands of identical systems, there is little hope for the rest of us with tens of thousands of unique systems G. OK rant off Tom Duerbusch THD Consulting Mark Post mp...@novell.com 3/10/2009 6:19 PM On 3/10/2009 at 5:51 PM, Tom Duerbusch duerbus...@stlouiscity.com wrote: As you are removing/deleting things, and the space still shows 0% available, that shows me that you have some process that is using up space quickly. Probably not. That 0% only applies to non-root users, because of the (by default 5%) space reservation for the root user, just in case a file system gets filled up. In Clifford's case, he has about 23MB of free space on that volume. Not a whole lot, and awfully close to having his system die on him from the root file system filling up. Whether or not he frees up enough space, he really needs to restructure his file systems so that not everything is lumped into /. Mark Post
Re: SLES 9.0 SP3 SPACE PROBLEM
On Wednesday, 03/11/2009 at 12:02 EDT, Tom Duerbusch duerbus...@stlouiscity.com wrote: We have an IBM DS6800. It uses some form of Unix/Linux for its controller code. About every 2.5 years, the controller area fills up and locks us out. It still processes I/Os just fine, but the DS6800 console can't access it. And no one is notified. No heartbeat goes out to IBM. It doesn't notify support about hardware errors. We just run until, I guess, it eventually stops running. I stumbled on it this pass Monday as we have a power outage scheduled for this weekend and we have to shut down. We are current on our DS6800 hardware code. If the powers at IBM can't figure this one out with thousands of identical systems, there is little hope for the rest of us with tens of thousands of unique systems G. OK rant off You have piqued my interest, but I can't find a PMR (PMH). Please send me the # (offline). Thanks. Alan Altmark z/VM Development IBM Endicott
Re: SSL Server on z/VM 5.4 RSU 802 - Static SSL vs Dynamic SSL\TLS
My next question is whether I should be going with Static SSL or Dynamic SSL/TLS connections? I have setup the Static SSL for Telnet by adding the following to my TCPIP Profile: AUTOLOG SSLSERV 0 FTPSERVE 0 ENDAUTOLOG PORT 20 TCP FTPSERVE NOAUTOLOG ; FTP SERVER 21 TCP FTPSERVE; FTP SERVER 23 TCP INTCLIEN SECURE ZVMCER01 ; TELNET SERVER SSLSERVERID SSLSERV TIMEOUT 60 INTERNALCLIENTPARMS SECURECONNECTION REQUIRED ENDINTERNALCLIENTPARMS I am using a sefl-signed cert and SSL seems to be working just fine. I have tested this with x3270, c3270 and TN3270 (SDI) and I see the following in the SSLSERV Log: Client 10.254.3.81:36396 Port 23 Label ZVMCER01 Cipher RC4_128_SHA Connection established. So at this point I am assuming that my telnet sessions are secure (or more secure). However, I do get the following disturbing message in the TCPIP log at initialization: DTCSTM305I Telnet server: Secure Connections are REQUIRED DTCSTM309I Telnet server: TLS Label is none DTCSTM335E Telnet server: Unable to handle secure connections, no TLS label specified . I believe this means that the telnet server itself will not handle the secure connections (Dynamic SSL\TLS) but rather TCPIP will forward the request for the secure port to the SSLSERV (Static SSL). Wondering if I am going box myself in here when I go to secure FTP connections and PERFSVM web access. Tyler Koyl Viterra Inc. This e-mail and any attachment(s) are confidential and may be privileged. If you are not the intended recipient please notify me immediately by return e-mail, delete this e-mail and do not copy, use or disclose it.
Re: IP change requested
Of course this disclaimer is sufficient. It's at the bottom of the note. I read it right after I finished reading the contents. Dennis O'Brien 39,521 -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Ian S. Worthington Sent: Wednesday, March 11, 2009 08:09 To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] IP change requested You don't understand, Scott: The disclaimer on the original note prevents us from reading it. Surely that's sufficient? i -- Original Message -- Received: Wed, 11 Mar 2009 09:29:42 AM COT From: Scott Rohling scott.rohl...@gmail.com To: IBMVM@LISTSERV.UARK.EDU Subject: Re: IP change requested Actually you all are sending this to the IBMVM mailing list where a few hundred of us can now see your documents and communication...oops. Scott On Wed, Mar 11, 2009 at 8:26 AM, Macioce, Larry larry.maci...@com.state.oh.us wrote: Phillip, I think you may have accidentally sent this to me. I work for the State of Ohio,Departrment of Commerce. Please review. Thanks Larry -- *From:* The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] *On Behalf Of *Phillip Parmelee *Sent:* Wednesday, March 11, 2009 9:37 AM *To:* IBMVM@LISTSERV.UARK.EDU *Subject:* IP change requested Larry Wayne, I have received this request: from DOC. Looking at the SCEXIT, 172.17.169.64 is not there. So, I am not sure just how to remove it. Either Jack C. or I can send you copies of our procedures for this type of change. Please let us know how we can help and call for access when needed. Phil Parmelee IBM Global Services VM/VSE Team Harrisburg, PA 717-526-1250 T/L 239-1250 parme...@us.ibm.com -- * The information transmitted is intended solely for the individual or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you have received this email in error please contact the sender and delete the material from any computer. *
Re: SSL Server on z/VM 5.4 RSU 802 - Static SSL vs Dynamic SSL\TLS
I have something like this .. INTERNALCLIENTPARMS PORT 992 SECURECONNECTION REQUIRED TLSLABEL ZVMCER0 ENDINTERNALCLIENTPARMS Also: In the SYSTEM DTCPARMS ... EXEMPT LOW makes it more secure.. :parms.KEYFile /etc/gskadm/Database.kdb EXEMPT LOW MAXUSERS 200 -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]on Behalf Of Tyler Koyl Sent: Wednesday, March 11, 2009 1:17 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: SSL Server on z/VM 5.4 RSU 802 - Static SSL vs Dynamic SSL\TLS My next question is whether I should be going with Static SSL or Dynamic SSL/TLS connections? I have setup the Static SSL for Telnet by adding the following to my TCPIP Profile: AUTOLOG SSLSERV 0 FTPSERVE 0 ENDAUTOLOG PORT 20 TCP FTPSERVE NOAUTOLOG ; FTP SERVER 21 TCP FTPSERVE; FTP SERVER 23 TCP INTCLIEN SECURE ZVMCER01 ; TELNET SERVER SSLSERVERID SSLSERV TIMEOUT 60 INTERNALCLIENTPARMS SECURECONNECTION REQUIRED ENDINTERNALCLIENTPARMS I am using a sefl-signed cert and SSL seems to be working just fine. I have tested this with x3270, c3270 and TN3270 (SDI) and I see the following in the SSLSERV Log: Client 10.254.3.81:36396 Port 23 Label ZVMCER01 Cipher RC4_128_SHA Connection established. So at this point I am assuming that my telnet sessions are secure (or more secure). However, I do get the following disturbing message in the TCPIP log at initialization: DTCSTM305I Telnet server: Secure Connections are REQUIRED DTCSTM309I Telnet server: TLS Label is none DTCSTM335E Telnet server: Unable to handle secure connections, no TLS label specified . I believe this means that the telnet server itself will not handle the secure connections (Dynamic SSL\TLS) but rather TCPIP will forward the request for the secure port to the SSLSERV (Static SSL). Wondering if I am going box myself in here when I go to secure FTP connections and PERFSVM web access. Tyler Koyl Viterra Inc. This e-mail and any attachment(s) are confidential and may be privileged. If you are not the intended recipient please notify me immediately by return e-mail, delete this e-mail and do not copy, use or disclose it.
Re: SSL Server on z/VM 5.4 RSU 802 - Static SSL vs Dynamic SSL\TLS
Sweet. The you would have to comment out or remove: ; 23 TCP INTCLIEN SECURE ZVMCER01 ; TELNET SERVER Tyler Huegel, Thomas thue...@kable.com Sent by: The IBMTo z/VM Operating IBMVM@LISTSERV.UARK.EDU System cc ib...@listserv.uar K.EDU Subject Re: SSL Server on z/VM 5.4 RSU 802 - Static SSL vs Dynamic SSL\TLS 03/11/2009 12:49 PM Please respond to The IBM z/VM Operating System ib...@listserv.uar K.EDU I have something like this .. INTERNALCLIENTPARMS PORT 992 SECURECONNECTION REQUIRED TLSLABEL ZVMCER0 ENDINTERNALCLIENTPARMS Also: In the SYSTEM DTCPARMS ... EXEMPT LOW makes it more secure.. :parms.KEYFile /etc/gskadm/Database.kdb EXEMPT LOW MAXUSERS 200 -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]on Behalf Of Tyler Koyl Sent: Wednesday, March 11, 2009 1:17 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: SSL Server on z/VM 5.4 RSU 802 - Static SSL vs Dynamic SSL\TLS My next question is whether I should be going with Static SSL or Dynamic SSL/TLS connections? I have setup the Static SSL for Telnet by adding the following to my TCPIP Profile: AUTOLOG SSLSERV 0 FTPSERVE 0 ENDAUTOLOG PORT 20 TCP FTPSERVE NOAUTOLOG ; FTP SERVER 21 TCP FTPSERVE; FTP SERVER 23 TCP INTCLIEN SECURE ZVMCER01 ; TELNET SERVER SSLSERVERID SSLSERV TIMEOUT 60 INTERNALCLIENTPARMS SECURECONNECTION REQUIRED ENDINTERNALCLIENTPARMS I am using a sefl-signed cert and SSL seems to be working just fine. I have tested this with x3270, c3270 and TN3270 (SDI) and I see the following in the SSLSERV Log: Client 10.254.3.81:36396 Port 23 Label ZVMCER01 Cipher RC4_128_SHA Connection established. So at this point I am assuming that my telnet sessions are secure (or more secure). However, I do get the following disturbing message in the TCPIP log at initialization: DTCSTM305I Telnet server: Secure Connections are REQUIRED DTCSTM309I Telnet server: TLS Label is none DTCSTM335E Telnet server: Unable to handle secure connections, no TLS label specified . I believe this means that the telnet server itself will not handle the secure connections (Dynamic SSL\TLS) but rather TCPIP will forward the request for the secure port to the SSLSERV (Static SSL). Wondering if I am going box myself in here when I go to secure FTP connections and PERFSVM web access. Tyler Koyl Viterra Inc. This e-mail and any attachment(s) are confidential and may be privileged. If you are not the intended recipient please notify me immediately by return e-mail, delete this e-mail and do not copy, use or disclose it. This e-mail and any attachment(s) are confidential and may be privileged. If you are not the intended recipient please notify me immediately by return e-mail, delete this e-mail and do not copy, use or disclose it.
Re: SSL Server on z/VM 5.4 RSU 802 - Static SSL vs Dynamic SSL\TLS
Yes and add the line for 992 .. or just change your 23 to 992 .. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]on Behalf Of Tyler Koyl Sent: Wednesday, March 11, 2009 1:52 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: SSL Server on z/VM 5.4 RSU 802 - Static SSL vs Dynamic SSL\TLS Sweet. The you would have to comment out or remove: ; 23 TCP INTCLIEN SECURE ZVMCER01 ; TELNET SERVER Tyler Huegel, Thomas thue...@kable.com Sent by: The IBMTo z/VM Operating IBMVM@LISTSERV.UARK.EDU System cc ib...@listserv.uar K.EDU Subject Re: SSL Server on z/VM 5.4 RSU 802 - Static SSL vs Dynamic SSL\TLS 03/11/2009 12:49 PM Please respond to The IBM z/VM Operating System ib...@listserv.uar K.EDU I have something like this .. INTERNALCLIENTPARMS PORT 992 SECURECONNECTION REQUIRED TLSLABEL ZVMCER0 ENDINTERNALCLIENTPARMS Also: In the SYSTEM DTCPARMS ... EXEMPT LOW makes it more secure.. :parms.KEYFile /etc/gskadm/Database.kdb EXEMPT LOW MAXUSERS 200 -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]on Behalf Of Tyler Koyl Sent: Wednesday, March 11, 2009 1:17 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: SSL Server on z/VM 5.4 RSU 802 - Static SSL vs Dynamic SSL\TLS My next question is whether I should be going with Static SSL or Dynamic SSL/TLS connections? I have setup the Static SSL for Telnet by adding the following to my TCPIP Profile: AUTOLOG SSLSERV 0 FTPSERVE 0 ENDAUTOLOG PORT 20 TCP FTPSERVE NOAUTOLOG ; FTP SERVER 21 TCP FTPSERVE; FTP SERVER 23 TCP INTCLIEN SECURE ZVMCER01 ; TELNET SERVER SSLSERVERID SSLSERV TIMEOUT 60 INTERNALCLIENTPARMS SECURECONNECTION REQUIRED ENDINTERNALCLIENTPARMS I am using a sefl-signed cert and SSL seems to be working just fine. I have tested this with x3270, c3270 and TN3270 (SDI) and I see the following in the SSLSERV Log: Client 10.254.3.81:36396 Port 23 Label ZVMCER01 Cipher RC4_128_SHA Connection established. So at this point I am assuming that my telnet sessions are secure (or more secure). However, I do get the following disturbing message in the TCPIP log at initialization: DTCSTM305I Telnet server: Secure Connections are REQUIRED DTCSTM309I Telnet server: TLS Label is none DTCSTM335E Telnet server: Unable to handle secure connections, no TLS label specified . I believe this means that the telnet server itself will not handle the secure connections (Dynamic SSL\TLS) but rather TCPIP will forward the request for the secure port to the SSLSERV (Static SSL). Wondering if I am going box myself in here when I go to secure FTP connections and PERFSVM web access. Tyler Koyl Viterra Inc. This e-mail and any attachment(s) are confidential and may be privileged. If you are not the intended recipient please notify me immediately by return e-mail, delete this e-mail and do not copy, use or disclose it. This e-mail and any attachment(s) are confidential and may be privileged. If you are not the intended recipient please notify me immediately by return e-mail, delete this e-mail and do not copy, use or disclose it.
Moderator intervention, Re: [IBMVM] IP change requested
Like nobody saw this coming... People, please... Let it go. Much more bandwidth has been consumed by well-reasoned and insightful commentary on this moment of oops than the original message itself. This is an excellent opportunity for us all to reflect on the probability that we will all one day look back on this (or some similar) event, laugh nervously, and change the subject. Your humble-but-grumpy moderator, -dan.
Re: SSL Server on z/VM 5.4 RSU 802 - Static SSL vs Dynamic SSL\TLS
On Wednesday, 03/11/2009 at 02:17 EDT, Tyler Koyl tyler.k...@viterra.ca wrote: My next question is whether I should be going with Static SSL or Dynamic SSL/TLS connections? That depends on your client capability. Some older telnet clients can't negotiate a secure connection. PORT 23 TCP INTCLIEN SECURE ZVMCER01 ; TELNET SERVER INTERNALCLIENTPARMS SECURECONNECTION REQUIRED ENDINTERNALCLIENTPARMS So at this point I am assuming that my telnet sessions are secure (or more secure). However, I do get the following disturbing message in the TCPIP log at initialization: DTCSTM305I Telnet server: Secure Connections are REQUIRED DTCSTM309I Telnet server: TLS Label is none DTCSTM335E Telnet server: Unable to handle secure connections, no TLS label specified . I believe this means that the telnet server itself will not handle the secure connections (Dynamic SSL\TLS) but rather TCPIP will forward the request for the secure port to the SSLSERV (Static SSL). Please call it in. The following are wrong: - The text should say Unable to negotiate secure connections with clients, no TLS label specified. - The explanation in Msgs Codes should be updated to say that static connections are not affected. The REQUIRED parameter means that a session must be negotiated to be secure OR it be statically protected. If a connection has been statically protected, the telnet server knows and will not negotate a secure connection. So as it is now, DTC335E is overstating the case IF there is a label present on the PORT statement. Of course, you won't really know if a static connection has a hope of working until you try it. (BTW, for those who care, static SSL is the same function that z/OS calls AT-TLS - Application Transparent TLS.) The general rule is that negotiating and non-negotating clients cannot go to the same port as, typically, the client will only connect in a single way rather than try both. I don't know of any client that will try to establish a TLS session first and then, if that fails, try to negotiate a TLS session on the same port. So to handle both static and negotiating telnet clients: - Add the same TLS label to the InternalClientParms as you have on the PORT statement - Add a second PORT entry for another INTCLIEN, e.g. 10023 - Add port 23 port 10023 to the InternalClientParms - Decide whether most of telnet client negotiate or if they require a static connection. This decides whether port 23 will require static connections. - If majority are static, leave port 23 as you have it. - If majority negotiate, move the SECURE option from port 23 to port 10023. - Assuming the telnet client software isn't smart enough to try both ways, the set of clients that lost the race for port 23 must change their configuration to go to port 10023. Wondering if I am going box myself in here when I go to secure FTP connections and PERFSVM web access. FTP will most likely be negotiated, though I have seen static clients. A word about static FTP clients: - Only inbound connections are secured, so 'passive' ftp is required - A special form of the PORT statement is required. See the book. - You cannot use CCC to revert the command connection to clear-text. Firewalls cannot see the PASV or PORT commands and will not open a hole. So... - You must use the PassivePortRange FTP server configuration statement and pre-define the port numbers that the FTP server will use to accept data connections, and... - You must force those same port numbers open in the firewall. This can be a death blow to the use of non-negotiating FTP clients or those that negotiate but do not support CCC. Which brings me to a point about the support for CCC (Clear Command Channel) that was added in z/VM 5.4. If you have SECURECONTROL REQUIRED in the ftp server configuration, the ftp cannot use CCC. Likewise, if you have SECUREDATA REQUIRED, the client cannot use the (new) CLEAR subcommand to in order to transfer data without encryption. [NB. The TCP/IP admin book has some unfortunate misspellings under SECURECONTROL. Where it says 'NOW allowed' it means 'NOT allowed'.] For PERFSVM, see the Performance Toolkit Guide, pp. 49-50. Static SSL is the only method available, but you must do more than just alter the PORT statement. Alan Altmark z/VM Development IBM Endicott
Re: SLES 9.0 SP3 SPACE PROBLEM
On 3/11/2009 at 12:00 PM, Tom Duerbusch duerbus...@stlouiscity.com wrote: OK, so what application/processes are classified as root user that may use some of that 5% space? What you might expect: any process running with an effective UID of 0. Mark Post
EXECIO QUESTION
Can anyone one on the list help me out with this execio statement which isn't working. 'EXECIO * (STEM RESPONSE. STRING 'LISTFILE' CMS EXEC A (D' Seems I've got some quote mark or paren in the wrong place. Thanks. _ LEGAL NOTICE Unless expressly stated otherwise, this message is confidential and may be privileged. It is intended for the addressee(s) only. Access to this E-mail by anyone else is unauthorized. If you are not an addressee, any disclosure or copying of the contents of this E-mail or any action taken (or not taken) in reliance on it is unauthorized and may be unlawful. If you are not an addressee, please inform the sender immediately, then delete this message and empty from your trash.
Re: EXECIO QUESTION
Try 'PIPE CMS LISTFILE CMS EXEC A (D | STEM RESPONSE.' Your problem below is that you have 'embedded' single quotes.. change the outer ones to double quotes and your syntax will be correct at least (but not sure it will do what you want - maybe). Scott On Wed, Mar 11, 2009 at 2:40 PM, Howard Rifkind rifki...@emigrant.comwrote: Can anyone one on the list help me out with this execio statement which isn't working. 'EXECIO * (STEM RESPONSE. STRING 'LISTFILE' CMS EXEC A (D' Seems I've got some quote mark or paren in the wrong place. Thanks. _ LEGAL NOTICE Unless expressly stated otherwise, this message is confidential and may be privileged. It is intended for the addressee(s) only. Access to this E-mail by anyone else is unauthorized. If you are not an addressee, any disclosure or copying of the contents of this E-mail or any action taken (or not taken) in reliance on it is unauthorized and may be unlawful. If you are not an addressee, please inform the sender immediately, then delete this message and empty from your trash.
Re: EXECIO QUESTION
Can anyone one on the list help me out with this execio statement which isn't working. 'EXECIO * (STEM RESPONSE. STRING 'LISTFILE' CMS EXEC A (D' Seems I've got some quote mark or paren in the wrong place. Seems you would need to specify EXECIO * CP to use the string option. Of course LISTFILE is a CMS command so that doesn't help . - ** This E-mail is confidential. It may also be legally privileged. If you are not the addressee you may not copy, forward, disclose or use any part of it. If you have received this message in error, please delete it and all copies from your system and notify the sender immediately by return E-mail. Internet communications cannot be guaranteed to be timely, secure, error or virus-free. The sender does not accept liability for any errors or omissions. ** SAVE PAPER - THINK BEFORE YOU PRINT!
Re: EXECIO QUESTION
I don't think you can use LISTFILE on EXECIO like that. I think that is why most of the CMS commands had a STACK option. 'LISTFILE CMS EXEC * ( D' do queued() parse pull line say line end But I like the PIPE CMS LISTFILE... option better. Bob Bates Enterprise Hosting Services w. (469)892-6660 c. (214) 907-5071 This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Howard Rifkind Sent: Wednesday, March 11, 2009 3:40 PM To: IBMVM@LISTSERV.UARK.EDU Subject: EXECIO QUESTION Can anyone one on the list help me out with this execio statement which isn't working. 'EXECIO * (STEM RESPONSE. STRING 'LISTFILE' CMS EXEC A (D' Seems I've got some quote mark or paren in the wrong place. Thanks. _ LEGAL NOTICE Unless expressly stated otherwise, this message is confidential and may be privileged. It is intended for the addressee(s) only. Access to this E-mail by anyone else is unauthorized. If you are not an addressee, any disclosure or copying of the contents of this E-mail or any action taken (or not taken) in reliance on it is unauthorized and may be unlawful. If you are not an addressee, please inform the sender immediately, then delete this message and empty from your trash.
Re: EXECIO QUESTION
With the quotes you have, LiSTFILE is a variable name. That would probably be an uninitialized variable, which would be an error if your EXEC has a signal on novalue. However, that may not be your problem. What is the error message and what are you trying to accomplish? Regards, Richard Schuh From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Howard Rifkind Sent: Wednesday, March 11, 2009 1:40 PM To: IBMVM@LISTSERV.UARK.EDU Subject: EXECIO QUESTION Can anyone one on the list help me out with this execio statement which isn't working. 'EXECIO * (STEM RESPONSE. STRING 'LISTFILE' CMS EXEC A (D' Seems I've got some quote mark or paren in the wrong place. Thanks. _ LEGAL NOTICE Unless expressly stated otherwise, this message is confidential and may be privileged. It is intended for the addressee(s) only. Access to this E-mail by anyone else is unauthorized. If you are not an addressee, any disclosure or copying of the contents of this E-mail or any action taken (or not taken) in reliance on it is unauthorized and may be unlawful. If you are not an addressee, please inform the sender immediately, then delete this message and empty from your trash.
Re: EXECIO QUESTION
Agreed. Regards, Richard Schuh From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Bob Bates Sent: Wednesday, March 11, 2009 2:09 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: EXECIO QUESTION I don't think you can use LISTFILE on EXECIO like that. I think that is why most of the CMS commands had a STACK option. 'LISTFILE CMS EXEC * ( D' do queued() parse pull line say line end But I like the PIPE CMS LISTFILE... option better. Bob Bates Enterprise Hosting Services w. (469)892-6660 c. (214) 907-5071 This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Howard Rifkind Sent: Wednesday, March 11, 2009 3:40 PM To: IBMVM@LISTSERV.UARK.EDU Subject: EXECIO QUESTION Can anyone one on the list help me out with this execio statement which isn't working. 'EXECIO * (STEM RESPONSE. STRING 'LISTFILE' CMS EXEC A (D' Seems I've got some quote mark or paren in the wrong place. Thanks. _ LEGAL NOTICE Unless expressly stated otherwise, this message is confidential and may be privileged. It is intended for the addressee(s) only. Access to this E-mail by anyone else is unauthorized. If you are not an addressee, any disclosure or copying of the contents of this E-mail or any action taken (or not taken) in reliance on it is unauthorized and may be unlawful. If you are not an addressee, please inform the sender immediately, then delete this message and empty from your trash.
Re: EXECIO QUESTION
On Wed, Mar 11, 2009 at 10:09 PM, Bob Bates robert.ba...@wellsfargo.com wrote: But I like the PIPE CMS LISTFILE... option better. Oh dear... I see in my crystal bottle an address command coming... it's from Belgium... Kris? Rob
Re: EXECIO QUESTION
Rob, No! Kris would say, PIPE COMMAND LISTFILE... Jim -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Rob van der Heij Sent: Wednesday, March 11, 2009 2:17 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: EXECIO QUESTION On Wed, Mar 11, 2009 at 10:09 PM, Bob Bates robert.ba...@wellsfargo.com wrote: But I like the PIPE CMS LISTFILE... option better. Oh dear... I see in my crystal bottle an address command coming... it's from Belgium... Kris? Rob
Re: EXECIO QUESTION
Then of course, I actually forgot to add the STACK parameter on the LISTFILE command. ahem 'LISTFILE CMS EXEC * ( D NOH STACK' then the rest of it. I added the NOHEADER as a bonus since I messed up the first one. No need to process that header line unless you want to write it out. Bob Bates Enterprise Hosting Services w. (469)892-6660 c. (214) 907-5071 This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Schuh, Richard Sent: Wednesday, March 11, 2009 4:15 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: EXECIO QUESTION Agreed. Regards, Richard Schuh From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Bob Bates Sent: Wednesday, March 11, 2009 2:09 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: EXECIO QUESTION I don't think you can use LISTFILE on EXECIO like that. I think that is why most of the CMS commands had a STACK option. 'LISTFILE CMS EXEC * ( D' do queued() parse pull line say line end But I like the PIPE CMS LISTFILE... option better. Bob Bates Enterprise Hosting Services w. (469)892-6660 c. (214) 907-5071 This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Howard Rifkind Sent: Wednesday, March 11, 2009 3:40 PM To: IBMVM@LISTSERV.UARK.EDU Subject: EXECIO QUESTION Can anyone one on the list help me out with this execio statement which isn't working. 'EXECIO * (STEM RESPONSE. STRING 'LISTFILE' CMS EXEC A (D' Seems I've got some quote mark or paren in the wrong place. Thanks. _ LEGAL NOTICE Unless expressly stated otherwise, this message is confidential and may be privileged. It is intended for the addressee(s) only. Access to this E-mail by anyone else is unauthorized. If you are not an addressee, any disclosure or copying of the contents of this E-mail or any action taken (or not taken) in reliance on it is unauthorized and may be unlawful. If you are not an addressee, please inform the sender immediately, then delete this message and empty from your trash.
Re: EXECIO QUESTION
On Wednesday, 03/11/2009 at 05:23 EDT, James Stracka (DHL US) james.stra...@dhl.com wrote: Rob, No! Kris would say, PIPE COMMAND LISTFILE... I would expect him (and all others!) to say address command PIPE COMMAND LISTFILE... If 'address command' has not be previously issued. Alan Altmark z/VM Development IBM Endicott
Re: EXECIO QUESTION
It has all been said Amen. 2009/3/11, Alan Altmark alan_altm...@us.ibm.com: On Wednesday, 03/11/2009 at 05:23 EDT, James Stracka (DHL US) james.stra...@dhl.com wrote: Rob, No! Kris would say, PIPE COMMAND LISTFILE... I would expect him (and all others!) to say address command PIPE COMMAND LISTFILE... If 'address command' has not be previously issued. Alan Altmark z/VM Development IBM Endicott -- Kris Buelens, IBM Belgium, VM customer support
Re: EXECIO QUESTION
You need a verb between the * and the (. I don't think EXECIO supports what you are trying to do with CMS commands. Jim Hughes 603-271-5586 It is fun to do the impossible. From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Howard Rifkind Sent: Wednesday, March 11, 2009 4:40 PM To: IBMVM@LISTSERV.UARK.EDU Subject: EXECIO QUESTION Can anyone one on the list help me out with this execio statement which isn't working. 'EXECIO * (STEM RESPONSE. STRING 'LISTFILE' CMS EXEC A (D' Seems I've got some quote mark or paren in the wrong place. Thanks. _ LEGAL NOTICE Unless expressly stated otherwise, this message is confidential and may be privileged. It is intended for the addressee(s) only. Access to this E-mail by anyone else is unauthorized. If you are not an addressee, any disclosure or copying of the contents of this E-mail or any action taken (or not taken) in reliance on it is unauthorized and may be unlawful. If you are not an addressee, please inform the sender immediately, then delete this message and empty from your trash.
Re: SHARE attendees - Any Update on the Live Guest Migration?
On Tuesday, 03/10/2009 at 11:50 EDT, Marcy Cortes marcy.d.cor...@wellsfargo.com wrote: We've had a lot of success with the ESPs. I'm know a few others here have too. ADVERTISEMENT Are you bored? Are you out of sorts? Do you feel you're in a rut, just running the same old system the same old way every day? Do you find yourself wanting more, wondering Is this all there is? If so, the z/VM Early Support Program (ESP) may be for you! z/VM Development is always on the lookout for clients who (a) Are expanding their use of z/VM (b) Enjoy playing with shiny new objects (c) Don't get upset if the object is shiny only on one side (d) Don't mind (too much) if they come back tomorrow and find that the shiny side has moved or developed an unexpected aroma (e) Have the desire (mgmt and sysprog) and capacity (machine and people) to commit to such a relationship with IBM (f) Are willing to put (some part of) their production workload on pre-GA software to exploit new functions in z/VM. Note that production cuts a rather wide swath. Some clients' test systems are almost as busy handling business app development and test as the production servers are! (g) (Hopefully) Like to speak publicly about how the new software helped their business (h) Aren't shy about saying what they think (i) Don't talk in their sleep (j) Are good at keeping lists (k) Are careful when replying to private e-mail not to send it to the mailing list We are particularly interested, as you might imagine, in those who have a deep business interest in the ability to move a a Linux virtual machine from one instance of z/VM to another without stopping it. Those who would like to replace a homegrown multisystem automated shutdown-here-restart-there infrastructure may be particularly interested. If you believe they have value to add to a z/VM Early Support Program, please contact our ESP coordinator, Keri Borrego, kborrego at us.ibm.com. Just to forewarn you, Keri will not reveal details about z/VM development plans without legal agreements in place and that means your management must be aware. (Please, no comments about using management and aware in the same sentence.) So if you're not really able to participate, just take the blue pill and forget you ever saw this. ;-) Alan Altmark z/VM Development IBM Endicott
MDISK DEFINITION in MAINT DIRECTORY ENTRY
Hi I did a DISKMAP USER DIRECTORY and while viewing the output I noticed that I had a few 'OVERLAYS'. In my MAINT directory entry I have the following: MDISK 122 3390 000 END 530SPL MR MDISK 123 3390 000 END 530RES MR MDISK 124 3390 000 END 530W01 MR MDISK 125 3390 000 END 530W02 MR MDISK 126 3390 000 END 530W03 MR Now, I reference these disks I other entries in the directory starting at location 001 for however many cylinders I need. As you can see the MDISK entries above start at 000 to END. The output from the DISKMAP shows the following: VOLUME USERID CUU DEVTYPE START ENDSIZE 530SPL $SPOOL$ B01 3390 0 END ? MAINT 122 3390 0 END ? *OVE 530W01 LNXADMIN191 3390 1 00100 00100 E49L021P 191 3390 00101 00102 2 E49L054P 191 3390 00103 00104 2 E49L124P 191 3390 00105 00106 2 E49L046P 191 3390 00107 00108 2 MAINT 124 3390 0 END ? *OVE 530W02 E49L021P 910 3390 1 00200 00200 E49L054P 910 3390 00201 00400 00200 E49L124P 910 3390 00401 00600 00200 E49L046P 910 3390 00801 01000 00200 MAINT125 3390 0 END ? *OVE I see what the problem is my question is do I need to have the entries for these disks in the MAINT directory entry? And what are the consequences if they are removed from the MAINT entry. This is the way the DIRECTORY was shipped on the install tape. Thanks for the help! Thank You, Terry Martin Lockheed Martin - Information Technology z/OS z/VM Systems - Performance and Tuning Cell - 443 632-4191 Work - 410 786-0386 terry.ma...@cms.hhs.gov Telecommuting on Fridays - Use my cell phone
Re: SSL Server on z/VM 5.4 RSU 802 - Static SSL vs Dynamic SSL\TLS
Thanks for the info Alan. I will open an ETR with IBM about the incorrect message tomorrow. I have Telnet setup to negotiate sessions (TLS) now so I have done the setup both ways. going to stick with negotiated for Telnet and ftp. It took me 2 days, but I got it. :). Again, Thanks for your time. D. Tyler Koyl Management Analyst (Embedded image moved to file: pic04313.gif) Viterra Tel (306) 569-6122 Fax (306) 569-4382 mailto:tyler.k...@viterra.ca http://www.viterra.ca Alan Altmark alan_altm...@us.ib m.com To Sent by: The IBMIBMVM@LISTSERV.UARK.EDU z/VM Operating cc System ib...@listserv.uarSubject K.EDU Re: SSL Server on z/VM 5.4 RSU 802 - Static SSL vs Dynamic SSL\TLS 03/11/2009 01:58 PM Please respond to The IBM z/VM Operating System ib...@listserv.uar K.EDU On Wednesday, 03/11/2009 at 02:17 EDT, Tyler Koyl tyler.k...@viterra.ca wrote: My next question is whether I should be going with Static SSL or Dynamic SSL/TLS connections? That depends on your client capability. Some older telnet clients can't negotiate a secure connection. PORT 23 TCP INTCLIEN SECURE ZVMCER01 ; TELNET SERVER INTERNALCLIENTPARMS SECURECONNECTION REQUIRED ENDINTERNALCLIENTPARMS So at this point I am assuming that my telnet sessions are secure (or more secure). However, I do get the following disturbing message in the TCPIP log at initialization: DTCSTM305I Telnet server: Secure Connections are REQUIRED DTCSTM309I Telnet server: TLS Label is none DTCSTM335E Telnet server: Unable to handle secure connections, no TLS label specified . I believe this means that the telnet server itself will not handle the secure connections (Dynamic SSL\TLS) but rather TCPIP will forward the request for the secure port to the SSLSERV (Static SSL). Please call it in. The following are wrong: - The text should say Unable to negotiate secure connections with clients, no TLS label specified. - The explanation in Msgs Codes should be updated to say that static connections are not affected. The REQUIRED parameter means that a session must be negotiated to be secure OR it be statically protected. If a connection has been statically protected, the telnet server knows and will not negotate a secure connection. So as it is now, DTC335E is overstating the case IF there is a label present on the PORT statement. Of course, you won't really know if a static connection has a hope of working until you try it. (BTW, for those who care, static SSL is the same function that z/OS calls AT-TLS - Application Transparent TLS.) The general rule is that negotiating and non-negotating clients cannot go to the same port as, typically, the client will only connect in a single way rather than try both. I don't know of any client that will try to establish a TLS session first and then, if that fails, try to negotiate a TLS session on the same port. So to handle both static and negotiating telnet clients: - Add the same TLS label to the InternalClientParms as you have on the PORT statement - Add a second PORT entry for another INTCLIEN, e.g. 10023 - Add port 23 port 10023 to the InternalClientParms - Decide whether most of telnet client negotiate or if they require a static connection. This decides whether port 23 will require static connections. - If majority are static, leave port 23 as you have it. - If majority negotiate, move the SECURE option from port 23 to port 10023. - Assuming the telnet client software isn't smart enough to try both ways, the set of clients that lost the race for port 23 must change their configuration to go to port 10023.
Requesting SHARE presentations for linuxvm.org
OK, at least one person was preemptive and sent me their SHARE presentation before the conference was even over. The rest of you have all disappointed me, by making me repeat myself over and over again. ;) Please, if you are willing to give me permission to put your presentation on linuxvm.org (or want me to have a link to it on your own web site), please send them to me. A number of people have told me the presentations page is one of the more valuable parts of the site, so I'd like to keep that current. Thanks in advance, Mark Post
Re: SHARE attendees - Any Update on the Live Guest Migration?
You forgot (l) would like to practice SERVICE and PUT2PROD weekly! Marcy This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Alan Altmark Sent: Wednesday, March 11, 2009 2:49 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] SHARE attendees - Any Update on the Live Guest Migration? On Tuesday, 03/10/2009 at 11:50 EDT, Marcy Cortes marcy.d.cor...@wellsfargo.com wrote: We've had a lot of success with the ESPs. I'm know a few others here have too. ADVERTISEMENT Are you bored? Are you out of sorts? Do you feel you're in a rut, just running the same old system the same old way every day? Do you find yourself wanting more, wondering Is this all there is? If so, the z/VM Early Support Program (ESP) may be for you! z/VM Development is always on the lookout for clients who (a) Are expanding their use of z/VM (b) Enjoy playing with shiny new objects (c) Don't get upset if the object is shiny only on one side (d) Don't mind (too much) if they come back tomorrow and find that the shiny side has moved or developed an unexpected aroma (e) Have the desire (mgmt and sysprog) and capacity (machine and people) to commit to such a relationship with IBM (f) Are willing to put (some part of) their production workload on pre-GA software to exploit new functions in z/VM. Note that production cuts a rather wide swath. Some clients' test systems are almost as busy handling business app development and test as the production servers are! (g) (Hopefully) Like to speak publicly about how the new software helped their business (h) Aren't shy about saying what they think (i) Don't talk in their sleep (j) Are good at keeping lists (k) Are careful when replying to private e-mail not to send it to the mailing list We are particularly interested, as you might imagine, in those who have a deep business interest in the ability to move a a Linux virtual machine from one instance of z/VM to another without stopping it. Those who would like to replace a homegrown multisystem automated shutdown-here-restart-there infrastructure may be particularly interested. If you believe they have value to add to a z/VM Early Support Program, please contact our ESP coordinator, Keri Borrego, kborrego at us.ibm.com. Just to forewarn you, Keri will not reveal details about z/VM development plans without legal agreements in place and that means your management must be aware. (Please, no comments about using management and aware in the same sentence.) So if you're not really able to participate, just take the blue pill and forget you ever saw this. ;-) Alan Altmark z/VM Development IBM Endicott
Re: MDISK DEFINITION in MAINT DIRECTORY ENTRY
They are full pack over lays so that MAINT can see the whole disk. Used to be used to by the DIRECT(XA) command, to save (and backup) the CP NUCLEUS, to allow MAINT to format and areas used by CP for SPOOL and PAGING, and can also be used to DDRXA the whole system as a check point. To be honest I can't say which (if any) of these are still needed. Dave Wade G4UGM Illegitimi Non Carborundum -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Martin, Terry R. (LOCKHEED MARTIN Performance Engineering/CTR) (CTR) Sent: 11 March 2009 22:07 To: IBMVM@LISTSERV.UARK.EDU Subject: MDISK DEFINITION in MAINT DIRECTORY ENTRY Hi I did a DISKMAP USER DIRECTORY and while viewing the output I noticed that I had a few 'OVERLAYS'. In my MAINT directory entry I have the following: MDISK 122 3390 000 END 530SPL MR MDISK 123 3390 000 END 530RES MR MDISK 124 3390 000 END 530W01 MR MDISK 125 3390 000 END 530W02 MR MDISK 126 3390 000 END 530W03 MR Now, I reference these disks I other entries in the directory starting at location 001 for however many cylinders I need. As you can see the MDISK entries above start at 000 to END. The output from the DISKMAP shows the following: VOLUME USERID CUU DEVTYPE START ENDSIZE 530SPL $SPOOL$ B01 3390 0 END ? MAINT 122 3390 0 END ? *OVE 530W01 LNXADMIN191 3390 1 00100 00100 E49L021P 191 3390 00101 00102 2 E49L054P 191 3390 00103 00104 2 E49L124P 191 3390 00105 00106 2 E49L046P 191 3390 00107 00108 2 MAINT 124 3390 0 END ? *OVE 530W02 E49L021P 910 3390 1 00200 00200 E49L054P 910 3390 00201 00400 00200 E49L124P 910 3390 00401 00600 00200 E49L046P 910 3390 00801 01000 00200 MAINT125 3390 0 END ? *OVE I see what the problem is my question is do I need to have the entries for these disks in the MAINT directory entry? And what are the consequences if they are removed from the MAINT entry. This is the way the DIRECTORY was shipped on the install tape. Thanks for the help! Thank You, Terry Martin Lockheed Martin - Information Technology z/OS z/VM Systems - Performance and Tuning Cell - 443 632-4191 Work - 410 786-0386 terry.ma...@cms.hhs.gov Telecommuting on Fridays - Use my cell phone
Re: MDISK DEFINITION in MAINT DIRECTORY ENTRY
If you use DIRMAINT you'll want to keep MAINT 123 so it can write the directory. I suspect you're not - These fullpack overlay entries can be handy for doing DDR backups or cloning systems -- though DEFINE MDISK can be used instead of static entries in MAINT..(you can LINK MAINT 123 123 RR and DDR 123 to tape -- or you can DEF MDISK 123 0 END 530RES and DDR 123 to tape) Scott On Wed, Mar 11, 2009 at 4:06 PM, Martin, Terry R. (LOCKHEED MARTIN Performance Engineering/CTR) (CTR) terry.mar...@cms.hhs.gov wrote: Hi I did a DISKMAP USER DIRECTORY and while viewing the output I noticed that I had a few ‘OVERLAYS’. In my MAINT directory entry I have the following: MDISK 122 3390 000 END 530SPL MR MDISK 123 3390 000 END 530RES MR MDISK 124 3390 000 END 530W01 MR MDISK 125 3390 000 END 530W02 MR MDISK 126 3390 000 END 530W03 MR Now, I reference these disks I other entries in the directory starting at location 001 for however many cylinders I need. As you can see the MDISK entries above start at 000 to END. The output from the DISKMAP shows the following: VOLUME USERID CUU DEVTYPE START ENDSIZE 530SPL $SPOOL$ B01 3390 0 END ? MAINT 122 3390 0 END ? *OVE 530W01 LNXADMIN191 3390 1 00100 00100 E49L021P 191 3390 00101 00102 2 E49L054P 191 3390 00103 00104 2 E49L124P 191 3390 00105 00106 2 E49L046P 191 3390 00107 00108 2 MAINT 124 3390 0 END ? *OVE 530W02 E49L021P 910 3390 1 00200 00200 E49L054P 910 3390 00201 00400 00200 E49L124P 910 3390 00401 00600 00200 E49L046P 910 3390 00801 01000 00200 MAINT125 3390 0 END ? *OVE I see what the problem is my question is do I need to have the entries for these disks in the MAINT directory entry? And what are the consequences if they are removed from the MAINT entry. This is the way the DIRECTORY was shipped on the install tape. Thanks for the help! *Thank You,* *Terry Martin* *Lockheed Martin - Information Technology* *z/OS z/VM Systems - Performance and Tuning* *Cell - 443 632-4191* *Work - 410 786-0386* *terry.ma...@cms.hhs.gov* *Telecommuting on Fridays - Use my cell phone*
