Re: Totally Off Topic: Time to get out the black helicopters.
What shocked me in that article, was this: As any logical person who has seen Karen Black's Trilogy of Terror or any one of the Chucky movies will recognize, these events prove one thing: These teddy bears are evil. Somehow, they have obtained the ability to possess their owners' minds and encourage them to commit terrible acts. And that quote about not blaming them? Sinister, if you ask us. Quick, everyone! We must destroy these bears! Before they destroy us. Chucky is that sinister?? And he has been in MOVIES?? Original message Date: Tue, 9 Jun 2009 16:41:31 -0400 From: David Boyes dbo...@sinenomine.net Subject: Totally Off Topic: Time to get out the black helicopters. To: IBMVM@LISTSERV.UARK.EDU http://nymag.com/daily/intel/2009/06/teddy_bears_now_symbolize _frau.html?mid=daily-intel--20090609 Somebody needs to correct these... people. They're messing with the Bear. n Db n
Re: HMC questions
As far as I know the customer is not allowed to make any changes to the software of an HMC. There is an upgrade process from the IBM support which does it. I had one customer who has bought a used z800 with an OS/2 HMC. During the refresh of the patches the IBM technician also reinstalled the HMC with version 2.9.2 and linux. If you need the new HMC version ask your hardware support for upgrade. If you get a new machine, you will automatically get a new HMC hardware with current software. kind regards Franz Josef Pohlen clifford jackson schrieb: I am currently running a z/890 A04 130 running z/VM 5.3 HMC Version Code 1.8.2 with z890 / Driver level 55 and my SE level is 233. My question is I need to upgrade my HMC to Version Code 2.9.2 which would require perhaps a new HMC running Linux as opposed to the current OS/2 based HMC or could the current OS/2 system be formatted and a version of Linux be installed on that HMC with the proper feature codes both for the HMC and the SEs. Does anybody know where there’s an available HMC Version Code 2.9.2….. Hotmail® has ever-growing storage! Don’t worry about storage limits. Check it out. http://windowslive.com/Tutorial/Hotmail/Storage?ocid=TXT_TAGLM_WL_HM_Tutorial_Storage_062009
A couple of Wikipedia article
Folks, I whipped a couple of wikipedia article about VM subjects a few month ago. Nothing fancy really, but I realize it'd probably be nice if those get reviewed and possibly checked for accuracy, corrected if necessary, etc.. The 2 articles are : http://en.wikipedia.org/wiki/Group_Control_System%28VM%29#Group_Control_System and http://en.wikipedia.org/wiki/IUCV --Ivan
Re: Clean Linux Guest Shutdown
The CP SIGNAL SHUTDOWN command has helped to clarify our problem. It appear that the problem may be in the way linux shuts itself dowm. With t he command, it appear that everthing works as designed from a vm standpoint; however linux never seems to complete it's shutdown. Although a guest is given 30 minutes to complete it's shutdown, linux appear to send a shutdo wn complete message back to vm within 30 seconds. We have the shutdown -h in the inittab. in our systems, Oracle is in the process of shutting down wh en linux pulls the plug. How do any of you handle oracle/linux shutdown. Bel ow is a listing of the linux log for one of the guests shutting down. Is it similar to what you see : Jun 7 01:44:59 zoracle2 syslog-ng[1780]: STATS: dropped 0 Jun 7 02:02:28 zoracle2 shutdown[4266]: shutting down for system reboot Jun 7 02:02:28 zoracle2 init: Switching to runlevel: 6 Jun 7 02:02:30 zoracle2 multipathd: mpvol1: stop event checker thread Jun 7 02:02:30 zoracle2 multipathd: mpvol3: stop event checker thread Jun 7 02:02:30 zoracle2 multipathd: mpvol4: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol5: stop event checker thread Jun 7 02:02:31 zoracle2 su: (to oracle) root on /dev/pts/8 Jun 7 02:02:31 zoracle2 multipathd: mpvol2: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol6: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol6: stop event checker thread Jun 7 02:02:37 zoracle2 xinetd[2288]: Exiting... Jun 7 02:02:37 zoracle2 sshd[2302]: Received signal 15; terminating. Jun 7 02:02:38 zoracle2 su: (to oracle) root on /dev/pts/8 Jun 7 02:02:46 zoracle2 kernel: Kernel logging (proc) stopped. Jun 7 02:02:46 zoracle2 kernel: Kernel log daemon terminating. Jun 7 02:02:48 zoracle2 syslog-ng[1780]: syslog-ng version 1.6.8 going down Jun 7 05:56:37 zoracle2 syslog-ng[2311]: syslog-ng version 1.6.8 starting Thanks,Bob
Re: Teddy Bears
It's far worse than we think. Try a Google search of evil teddy bears. 1,230,000 hits. Yikes. Now try good teddy bears. 23,600,000 hits. That makes me feel so much better. At least when it comes to teddy bears, good triumphs over evil at a ratio of about 19:1. From Wikipedia: The teddy bear is a stuffed toy bear. It is an enduring, traditional form of a stuffed animal, often serving the purpose of comforting children. Stop reading this nonsense and get back to work children! Randy Date:Tue, 9 Jun 2009 16:41:31 -0400 From:David Boyes dbo...@sinenomine.net Subject: Totally Off Topic: Time to get out the black helicopters. http://nymag.com/daily/intel/2009/06/teddy_bears_now_symbolize_frau.ht ml?mi= d=3Ddaily-intel--20090609 Somebody needs to correct these... people. They're messing with the Bear.
LOGONBY and FTP (was: A Strange Use Of AUTOLOG)
I played around with LOGONBY and FTP and found something a little strange. Context: z/VM 5.4 with RACF installed, CP deferring to RACF for almost everything. RACF profile SURROGAT LOGONBY.TESTUSER exists, with the ACL not including TESTUSER itself. CP logon allows users in the ACL to log on to TESTUSER using LOGONBY as expected, and doesn't allow TESTUSER to logon directly, again as expected. FTP logon allows users in the ACL to use testuser.by.surrogate to log on to TESTUSER as expected, but DOES allow TESTUSER to logon directly. This is a surprise. Bug, or feature? Mark Bodenstein Cornell University At 03:08 PM 6/8/2009, Alan Altmark wrote: An LBYONLY user must authenticate with their own user ID. E.g. enter maint.by.michael when ftp prompts for your user ID. Alan Altmark z/VM Development IBM Endicott
Re: LOGONBY and FTP (was: A Strange Use Of AUTOLOG)
On Wednesday, 06/10/2009 at 10:54 EDT, Mark Bodenstein m...@cornell.edu wrote: RACF profile SURROGAT LOGONBY.TESTUSER exists, with the ACL not including TESTUSER itself. ... FTP logon allows users in the ACL to use testuser.by.surrogate to log on to TESTUSER as expected, but DOES allow TESTUSER to logon directly. This is a surprise. Bug, or feature? Bug. Feel free to open a PMR. If you want to stop authentication using TESTUSER, remove its password (ALTUSER TESTUSER NOPASSWORD). Then it can't be used as an authenticator in ANY interface (including RACROUTE REQUEST=VERIFY), it can never be revoked due to invalid password attempts, and isn't subject to password expiry rules. This effectively turns it into AUTOONLY without having to mess with the directory. Alan Altmark z/VM Development IBM Endicott
Re: Clean Linux Guest Shutdown
We start/stop oracle with an init.d script so oracle's start/stop is part of Linux's boot and shutdown sequence. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Robert J McCarthy Sent: Wednesday, June 10, 2009 8:46 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Clean Linux Guest Shutdown The CP SIGNAL SHUTDOWN command has helped to clarify our problem. It appear that the problem may be in the way linux shuts itself dowm. With the command, it appear that everthing works as designed from a vm standpoint; however linux never seems to complete it's shutdown. Although a guest is given 30 minutes to complete it's shutdown, linux appear to send a shutdown complete message back to vm within 30 seconds. We have the shutdown - h in the inittab. in our systems, Oracle is in the process of shutting down when linux pulls the plug. How do any of you handle oracle/linux shutdown. Below is a listing of the linux log for one of the guests shutting down. Is it similar to what you see : Jun 7 01:44:59 zoracle2 syslog-ng[1780]: STATS: dropped 0 Jun 7 02:02:28 zoracle2 shutdown[4266]: shutting down for system reboot Jun 7 02:02:28 zoracle2 init: Switching to runlevel: 6 Jun 7 02:02:30 zoracle2 multipathd: mpvol1: stop event checker thread Jun 7 02:02:30 zoracle2 multipathd: mpvol3: stop event checker thread Jun 7 02:02:30 zoracle2 multipathd: mpvol4: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol5: stop event checker thread Jun 7 02:02:31 zoracle2 su: (to oracle) root on /dev/pts/8 Jun 7 02:02:31 zoracle2 multipathd: mpvol2: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol6: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol6: stop event checker thread Jun 7 02:02:37 zoracle2 xinetd[2288]: Exiting... Jun 7 02:02:37 zoracle2 sshd[2302]: Received signal 15; terminating. Jun 7 02:02:38 zoracle2 su: (to oracle) root on /dev/pts/8 Jun 7 02:02:46 zoracle2 kernel: Kernel logging (proc) stopped. Jun 7 02:02:46 zoracle2 kernel: Kernel log daemon terminating. Jun 7 02:02:48 zoracle2 syslog-ng[1780]: syslog-ng version 1.6.8 going down Jun 7 05:56:37 zoracle2 syslog-ng[2311]: syslog-ng version 1.6.8 starting Thanks,Bob This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system.
Re: Clean Linux Guest Shutdown
John, When you shutdown your linux guest, do you use a CP SIGNAL SHUTDOWN command to tell linux to shutdown, or do you manually shutdown linux. Our manual shutdown appears to work, but when we try to automate it with the CP SIGNAL SHUTDOWN from vm; linux appears to send a response to vm saying it has completed shutdown; but appraently it really hasn't. Thanks,Bob -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Romanowski, John (OFT) Sent: Wednesday, June 10, 2009 9:19 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Clean Linux Guest Shutdown We start/stop oracle with an init.d script so oracle's start/stop is part of Linux's boot and shutdown sequence. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Robert J McCarthy Sent: Wednesday, June 10, 2009 8:46 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Clean Linux Guest Shutdown The CP SIGNAL SHUTDOWN command has helped to clarify our problem. It appear that the problem may be in the way linux shuts itself dowm. With the command, it appear that everthing works as designed from a vm standpoint; however linux never seems to complete it's shutdown. Although a guest is given 30 minutes to complete it's shutdown, linux appear to send a shutdown complete message back to vm within 30 seconds. We have the shutdown - h in the inittab. in our systems, Oracle is in the process of shutting down when linux pulls the plug. How do any of you handle oracle/linux shutdown. Below is a listing of the linux log for one of the guests shutting down. Is it similar to what you see : Jun 7 01:44:59 zoracle2 syslog-ng[1780]: STATS: dropped 0 Jun 7 02:02:28 zoracle2 shutdown[4266]: shutting down for system reboot Jun 7 02:02:28 zoracle2 init: Switching to runlevel: 6 Jun 7 02:02:30 zoracle2 multipathd: mpvol1: stop event checker thread Jun 7 02:02:30 zoracle2 multipathd: mpvol3: stop event checker thread Jun 7 02:02:30 zoracle2 multipathd: mpvol4: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol5: stop event checker thread Jun 7 02:02:31 zoracle2 su: (to oracle) root on /dev/pts/8 Jun 7 02:02:31 zoracle2 multipathd: mpvol2: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol6: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol6: stop event checker thread Jun 7 02:02:37 zoracle2 xinetd[2288]: Exiting... Jun 7 02:02:37 zoracle2 sshd[2302]: Received signal 15; terminating. Jun 7 02:02:38 zoracle2 su: (to oracle) root on /dev/pts/8 Jun 7 02:02:46 zoracle2 kernel: Kernel logging (proc) stopped. Jun 7 02:02:46 zoracle2 kernel: Kernel log daemon terminating. Jun 7 02:02:48 zoracle2 syslog-ng[1780]: syslog-ng version 1.6.8 going down Jun 7 05:56:37 zoracle2 syslog-ng[2311]: syslog-ng version 1.6.8 starting Thanks,Bob This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system.
the errors after turn on RACF
RPIMGR031E RESOURCE MAINT.CF1 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF2 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF3 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.190 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.2CC SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.191 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.122 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.123 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.124 SPECIFIED BY LINK COMMAND NOT FOUND Our DirMaint is on. I follow the RACF Program Directory steps. After I reipl from CF2 and log in IBMUSER, I also got this kind of message. Can some one tell me what steps I missed? Thanks! Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca This message is intended only for the addressee. It may contain privileged or confidential information. Any unauthorized disclosure is strictly prohibited. If you have received this message in error, please notify us immediately so that we may correct our internal records. Please then delete the original email. Thank you. (Sent by Webgate2)
Re: the errors after turn on RACF
Did you complete all the steps in the program directory? In particular, did you run RPIDIRCT to scan your current directory and did you run RPIBLDDS to load this output file into your initial database? You can find the program directory at http://www.vm.ibm.com/progdir/5vmrac40.pdf On Wed, Jun 10, 2009 at 12:30 PM, sunny...@wcb.ab.ca wrote: RPIMGR031E RESOURCE MAINT.CF1 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF2 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF3 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.190 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.2CC SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.191 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.122 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.123 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.124 SPECIFIED BY LINK COMMAND NOT FOUND Our DirMaint is on. I follow the RACF Program Directory steps. After I reipl from CF2 and log in IBMUSER, I also got this kind of message. Can some one tell me what steps I missed? Thanks! Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca This message is intended only for the addressee. It may contain privileged or confidential information. Any unauthorized disclosure is strictly prohibited. If you have received this message in error, please notify us immediately so that we may correct our internal records. Please then delete the original email. Thank you. (Sent by Webgate2) -- Bruce Hayden Linux on System z Advanced Technical Support IBM, Endicott, NY
z/VM 5.4 manuals ISO?
Is it possible to download the entire z/VM manuals from ISO's somewhere? Thanks, Frank M. Ramaekers Jr. Systems Programmer MCP, MCP+I, MCSE RHCE American Income Life Insurance Co. Phone: (254)761-6649 1200 Wooded Acres Dr.Fax: (254)741-5777 Waco, Texas 76710 _ This message contains information which is privileged and confidential and is solely for the use of the intended recipient. If you are not the intended recipient, be aware that any review, disclosure, copying, distribution, or use of the contents of this message is strictly prohibited. If you have received this in error, please destroy it immediately and notify us at privacy...@ailife.com.
Re: z/VM 5.4 manuals ISO?
How about http://www-03.ibm.com/systems/z/os/zos/bkserv/zvmpdf/ -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Frank M. Ramaekers Sent: Wednesday, June 10, 2009 10:00 AM To: IBMVM@LISTSERV.UARK.EDU Subject: z/VM 5.4 manuals ISO? Is it possible to download the entire z/VM manuals from ISO's somewhere? Thanks, Frank M. Ramaekers Jr. Systems Programmer MCP, MCP+I, MCSE RHCE American Income Life Insurance Co. Phone: (254)761-6649 1200 Wooded Acres Dr.Fax: (254)741-5777 Waco, Texas 76710 _ This message contains information which is privileged and confidential and is solely for the use of the intended recipient. If you are not the intended recipient, be aware that any review, disclosure, copying, distribution, or use of the contents of this message is strictly prohibited. If you have received this in error, please destroy it immediately and notify us at privacy...@ailife.com. Confidentiality Note: This e-mail, including any attachment to it, may contain material that is confidential, proprietary, privileged and/or Protected Health Information, within the meaning of the regulations under the Health Insurance Portability Accountability Act as amended. If it is not clear that you are the intended recipient, you are hereby notified that you have received this transmittal in error, and any review, dissemination, distribution or copying of this e-mail, including any attachment to it, is strictly prohibited. If you have received this e-mail in error, please immediately return it to the sender and delete it from your system. Thank you.
Re: the errors after turn on RACF
I can't remember the name of the utility offhand, but I'm pretty sure there is an EXEC that will generate an initial RACF list of commands to define all the users and minidisks. Beware that the definitions may not be what your security people want them to be - so you may want them to examine the commands that will be issued first. You should really know how you want your RACF security structured before you implement.. what groups you will use, what users get put into what groups, whether you are using discrete or generic profiles, etc etc. If not, you'll probably be finding yourself rebuilding the database to meet the requirements later. Scott On Wed, Jun 10, 2009 at 10:30 AM, sunny...@wcb.ab.ca wrote: RPIMGR031E RESOURCE MAINT.CF1 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF2 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF3 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.190 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.2CC SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.191 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.122 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.123 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.124 SPECIFIED BY LINK COMMAND NOT FOUND Our DirMaint is on. I follow the RACF Program Directory steps. After I reipl from CF2 and log in IBMUSER, I also got this kind of message. Can some one tell me what steps I missed? Thanks! Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca -- This message is intended only for the addressee. It may contain privileged or confidential information. Any unauthorized disclosure is strictly prohibited. If you have received this message in error, please notify us immediately so that we may correct our internal records. Please then delete the original email. Thank you. (Sent by Webgate2)
Re: LOGONBY and FTP
Thanks Alan. In the interest of good citizenship I'll open a Sev 3 PMR. Regarding NOPASSWORD, we do typically use that for SVMs, etc. Not this time because of what I was testing. Mark At 11:32 AM 6/10/2009, Alan Altmark wrote: FTP logon allows users in the ACL to use testuser.by.surrogate to log on to TESTUSER as expected, but DOES allow TESTUSER to logon directly. This is a surprise. Bug, or feature? Bug. Feel free to open a PMR. If you want to stop authentication using TESTUSER, remove its password (ALTUSER TESTUSER NOPASSWORD). Then it can't be used as an authenticator in ANY interface (including RACROUTE REQUEST=VERIFY), it can never be revoked due to invalid password attempts, and isn't subject to password expiry rules. This effectively turns it into AUTOONLY without having to mess with the directory. Alan Altmark z/VM Development IBM Endicott
Re: Clean Linux Guest Shutdown
Do you have Linux set up to honor the signal (usually some updates inittab and zipl.conf)? You have to direct the signal to call a script that will issue the shutdown command... Scott On Wed, Jun 10, 2009 at 10:33 AM, Robert J McCarthy bob.mccar...@custserv.com wrote: John, When you shutdown your linux guest, do you use a CP SIGNAL SHUTDOWN command to tell linux to shutdown, or do you manually shutdown linux. Our manual shutdown appears to work, but when we try to automate it with the CP SIGNAL SHUTDOWN from vm; linux appears to send a response to vm saying it has completed shutdown; but appraently it really hasn't. Thanks,Bob -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Romanowski, John (OFT) Sent: Wednesday, June 10, 2009 9:19 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Clean Linux Guest Shutdown We start/stop oracle with an init.d script so oracle's start/stop is part of Linux's boot and shutdown sequence. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Robert J McCarthy Sent: Wednesday, June 10, 2009 8:46 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Clean Linux Guest Shutdown The CP SIGNAL SHUTDOWN command has helped to clarify our problem. It appear that the problem may be in the way linux shuts itself dowm. With the command, it appear that everthing works as designed from a vm standpoint; however linux never seems to complete it's shutdown. Although a guest is given 30 minutes to complete it's shutdown, linux appear to send a shutdown complete message back to vm within 30 seconds. We have the shutdown - h in the inittab. in our systems, Oracle is in the process of shutting down when linux pulls the plug. How do any of you handle oracle/linux shutdown. Below is a listing of the linux log for one of the guests shutting down. Is it similar to what you see : Jun 7 01:44:59 zoracle2 syslog-ng[1780]: STATS: dropped 0 Jun 7 02:02:28 zoracle2 shutdown[4266]: shutting down for system reboot Jun 7 02:02:28 zoracle2 init: Switching to runlevel: 6 Jun 7 02:02:30 zoracle2 multipathd: mpvol1: stop event checker thread Jun 7 02:02:30 zoracle2 multipathd: mpvol3: stop event checker thread Jun 7 02:02:30 zoracle2 multipathd: mpvol4: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol5: stop event checker thread Jun 7 02:02:31 zoracle2 su: (to oracle) root on /dev/pts/8 Jun 7 02:02:31 zoracle2 multipathd: mpvol2: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol6: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol6: stop event checker thread Jun 7 02:02:37 zoracle2 xinetd[2288]: Exiting... Jun 7 02:02:37 zoracle2 sshd[2302]: Received signal 15; terminating. Jun 7 02:02:38 zoracle2 su: (to oracle) root on /dev/pts/8 Jun 7 02:02:46 zoracle2 kernel: Kernel logging (proc) stopped. Jun 7 02:02:46 zoracle2 kernel: Kernel log daemon terminating. Jun 7 02:02:48 zoracle2 syslog-ng[1780]: syslog-ng version 1.6.8 going down Jun 7 05:56:37 zoracle2 syslog-ng[2311]: syslog-ng version 1.6.8 starting Thanks,Bob This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system.
Re: Clean Linux Guest Shutdown
I CP FORCE guest WITHIN nn Like CP SIGNAL SHUTDOWN that triggers the linux's inittab CTRLALTDEL entry. What do you mean when you say linux appears to send a response to VM saying it has completed shutdown; but apparently it really hasn't ? Is that sent response just a message on the guest's console or a linux script doing VMCP MESSAGE userid blah blah blah? -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Robert J McCarthy Sent: Wednesday, June 10, 2009 12:34 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Clean Linux Guest Shutdown John, When you shutdown your linux guest, do you use a CP SIGNAL SHUTDOWN command to tell linux to shutdown, or do you manually shutdown linux. Our manual shutdown appears to work, but when we try to automate it with the CP SIGNAL SHUTDOWN from vm; linux appears to send a response to vm saying it has completed shutdown; but appraently it really hasn't. Thanks,Bob -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Romanowski, John (OFT) Sent: Wednesday, June 10, 2009 9:19 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Clean Linux Guest Shutdown We start/stop oracle with an init.d script so oracle's start/stop is part of Linux's boot and shutdown sequence. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Robert J McCarthy Sent: Wednesday, June 10, 2009 8:46 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Clean Linux Guest Shutdown The CP SIGNAL SHUTDOWN command has helped to clarify our problem. It appear that the problem may be in the way linux shuts itself dowm. With the command, it appear that everthing works as designed from a vm standpoint; however linux never seems to complete it's shutdown. Although a guest is given 30 minutes to complete it's shutdown, linux appear to send a shutdown complete message back to vm within 30 seconds. We have the shutdown - h in the inittab. in our systems, Oracle is in the process of shutting down when linux pulls the plug. How do any of you handle oracle/linux shutdown. Below is a listing of the linux log for one of the guests shutting down. Is it similar to what you see : Jun 7 01:44:59 zoracle2 syslog-ng[1780]: STATS: dropped 0 Jun 7 02:02:28 zoracle2 shutdown[4266]: shutting down for system reboot Jun 7 02:02:28 zoracle2 init: Switching to runlevel: 6 Jun 7 02:02:30 zoracle2 multipathd: mpvol1: stop event checker thread Jun 7 02:02:30 zoracle2 multipathd: mpvol3: stop event checker thread Jun 7 02:02:30 zoracle2 multipathd: mpvol4: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol5: stop event checker thread Jun 7 02:02:31 zoracle2 su: (to oracle) root on /dev/pts/8 Jun 7 02:02:31 zoracle2 multipathd: mpvol2: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol6: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol6: stop event checker thread Jun 7 02:02:37 zoracle2 xinetd[2288]: Exiting... Jun 7 02:02:37 zoracle2 sshd[2302]: Received signal 15; terminating. Jun 7 02:02:38 zoracle2 su: (to oracle) root on /dev/pts/8 Jun 7 02:02:46 zoracle2 kernel: Kernel logging (proc) stopped. Jun 7 02:02:46 zoracle2 kernel: Kernel log daemon terminating. Jun 7 02:02:48 zoracle2 syslog-ng[1780]: syslog-ng version 1.6.8 going down Jun 7 05:56:37 zoracle2 syslog-ng[2311]: syslog-ng version 1.6.8 starting Thanks,Bob This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system. This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system.
Re: z/VM 5.4 manuals ISO?
You could use IBM Softcopy Librarian to download both book manager and PDS formats. http://publib.boulder.ibm.com/epubs/df/ebrsclwj.exe Steve H. Mondy Mainframe Technical Support Manager Open Solutions Inc. 3900 Essex Lane, Suite 400 Houston, TX 77027-5100 Office 713-965-8457 Cell281-409-2870 Fax713-965-8405 Email steve.mo...@opensolutions.com www.bank.opensolutions.com www.opensolutions.com -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Frank M. Ramaekers Sent: Wednesday, June 10, 2009 9:00 AM To: IBMVM@LISTSERV.UARK.EDU Subject: z/VM 5.4 manuals ISO? Is it possible to download the entire z/VM manuals from ISO's somewhere? Thanks, Frank M. Ramaekers Jr. Systems Programmer MCP, MCP+I, MCSE RHCE American Income Life Insurance Co. Phone: (254)761-6649 1200 Wooded Acres Dr.Fax: (254)741-5777 Waco, Texas 76710 _ This message contains information which is privileged and confidential and is solely for the use of the intended recipient. If you are not the intended recipient, be aware that any review, disclosure, copying, distribution, or use of the contents of this message is strictly prohibited. If you have received this in error, please destroy it immediately and notify us at privacy...@ailife.com. NOTICE: This e-mail is intended solely for the use of the individual to whom it is addressed and may contain information that is privileged, confidential or otherwise exempt from disclosure. If the reader of this e-mail is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately notify us by replying to the original message at the listed email address. Thank You.
Re: z/VM 5.4 manuals ISO?
On Wednesday, 06/10/2009 at 12:36 EDT, Frank M. Ramaekers framaek...@ailife.com wrote: Is it possible to download the entire z/VM manuals from ISO's somewhere? IBM does not provide ISO images of the z/VM Softcopy Publications DVD. Alan Altmark z/VM Development IBM Endicott
Re: Clean Linux Guest Shutdown
John, I am sorry I wasn't clear. VM and linux are communicating : When I enter the CP SIGNAL SHUTDOWN command from MAINT linux begins shutting down. A short time later vm receives the termination from linux and writes the following message to the vm MAINT log : HCPSIG2113I User ZORACLE2 has reported successful termination From a vm standpoint everything appears to be working as designed. It appears that linux sends the termination response to vm before it has really completed it's (linux)shutdown. In linux's inittab we have shutdown -h coded. Thanks, Bob -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Romanowski, John (OFT) Sent: Wednesday, June 10, 2009 12:57 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Clean Linux Guest Shutdown I CP FORCE guest WITHIN nn Like CP SIGNAL SHUTDOWN that triggers the linux's inittab CTRLALTDEL entry. What do you mean when you say linux appears to send a response to VM saying it has completed shutdown; but apparently it really hasn't ? Is that sent response just a message on the guest's console or a linux script doing VMCP MESSAGE userid blah blah blah? -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Robert J McCarthy Sent: Wednesday, June 10, 2009 12:34 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Clean Linux Guest Shutdown John, When you shutdown your linux guest, do you use a CP SIGNAL SHUTDOWN command to tell linux to shutdown, or do you manually shutdown linux. Our manual shutdown appears to work, but when we try to automate it with the CP SIGNAL SHUTDOWN from vm; linux appears to send a response to vm saying it has completed shutdown; but appraently it really hasn't. Thanks,Bob -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Romanowski, John (OFT) Sent: Wednesday, June 10, 2009 9:19 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Clean Linux Guest Shutdown We start/stop oracle with an init.d script so oracle's start/stop is part of Linux's boot and shutdown sequence. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Robert J McCarthy Sent: Wednesday, June 10, 2009 8:46 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Clean Linux Guest Shutdown The CP SIGNAL SHUTDOWN command has helped to clarify our problem. It appear that the problem may be in the way linux shuts itself dowm. With the command, it appear that everthing works as designed from a vm standpoint; however linux never seems to complete it's shutdown. Although a guest is given 30 minutes to complete it's shutdown, linux appear to send a shutdown complete message back to vm within 30 seconds. We have the shutdown - h in the inittab. in our systems, Oracle is in the process of shutting down when linux pulls the plug. How do any of you handle oracle/linux shutdown. Below is a listing of the linux log for one of the guests shutting down. Is it similar to what you see : Jun 7 01:44:59 zoracle2 syslog-ng[1780]: STATS: dropped 0 Jun 7 02:02:28 zoracle2 shutdown[4266]: shutting down for system reboot Jun 7 02:02:28 zoracle2 init: Switching to runlevel: 6 Jun 7 02:02:30 zoracle2 multipathd: mpvol1: stop event checker thread Jun 7 02:02:30 zoracle2 multipathd: mpvol3: stop event checker thread Jun 7 02:02:30 zoracle2 multipathd: mpvol4: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol5: stop event checker thread Jun 7 02:02:31 zoracle2 su: (to oracle) root on /dev/pts/8 Jun 7 02:02:31 zoracle2 multipathd: mpvol2: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol6: stop event checker thread Jun 7 02:02:31 zoracle2 multipathd: mpvol6: stop event checker thread Jun 7 02:02:37 zoracle2 xinetd[2288]: Exiting... Jun 7 02:02:37 zoracle2 sshd[2302]: Received signal 15; terminating. Jun 7 02:02:38 zoracle2 su: (to oracle) root on /dev/pts/8 Jun 7 02:02:46 zoracle2 kernel: Kernel logging (proc) stopped. Jun 7 02:02:46 zoracle2 kernel: Kernel log daemon terminating. Jun 7 02:02:48 zoracle2 syslog-ng[1780]: syslog-ng version 1.6.8 going down Jun 7 05:56:37 zoracle2 syslog-ng[2311]: syslog-ng version 1.6.8 starting Thanks,Bob This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system. This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is
Re: [LINUX-390] DB2 Connect and Linux on Z
On Wednesday, 06/10/2009 at 01:33 EDT, Tom Duerbusch thdbu...@swbell.net wrote: I don't think UDB uses zIIP engines. They use IFL engines. Performance seems to be good, especially over hipersockets. Boy, this conversation has taken an intresting turn. :-) The question is whether DB2 Connect on Linux on System z talking via DRDA to DB2 on z/OS across HiperSockets will enjoy the same zIIP benefit as the same DRDA transaction would receive when acccessed by some other host via OSA-Express. The advice the OP received that DB2 on z/OS would treat DRDA connections via HiperSockets differently than those made via OSA is suspect. First, I don't know how DB2 could tell the difference. Second, it doesn't make sense because packets could flow via HiperSockets OR via OSA on the same TCP connection! A call to the Support Center would clarify the issue. Alan Altmark z/VM Development IBM Endicott
Re: the errors after turn on RACF
Yes. I generate RPDIRCT SYSUT1 from Dirmaint. And I rpibildds it. Then I am able to login Maint. Here is I saw the error. Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca Bruce Hayden bjhay...@gmail.com Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 06/10/2009 10:43 AM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: the errors after turn on RACF Did you complete all the steps in the program directory? In particular, did you run RPIDIRCT to scan your current directory and did you run RPIBLDDS to load this output file into your initial database? You can find the program directory at http://www.vm.ibm.com/progdir/5vmrac40.pdf On Wed, Jun 10, 2009 at 12:30 PM, sunny...@wcb.ab.ca wrote: RPIMGR031E RESOURCE MAINT.CF1 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF2 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF3 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.190 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.2CC SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.191 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.122 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.123 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.124 SPECIFIED BY LINK COMMAND NOT FOUND Our DirMaint is on. I follow the RACF Program Directory steps. After I reipl from CF2 and log in IBMUSER, I also got this kind of message. Can some one tell me what steps I missed? Thanks! Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca This message is intended only for the addressee. It may contain privileged or confidential information. Any unauthorized disclosure is strictly prohibited. If you have received this message in error, please notify us immediately so that we may correct our internal records. Please then delete the original email. Thank you. (Sent by Webgate2) -- Bruce Hayden Linux on System z Advanced Technical Support IBM, Endicott, NY Scanned by WCB Webgate1 AntiSpam/AntiVirus email gateway. This message is intended only for the addressee. It may contain privileged or confidential information. Any unauthorized disclosure is strictly prohibited. If you have received this message in error, please notify us immediately so that we may correct our internal records. Please then delete the original email. Thank you. (Sent by Webgate1)
Re: LOGONBY 8 user limitation
If you were using VM:Secure, you would do it via the Rules Facility. Is there anything equivalent in RACF? Regards, Richard Schuh From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Dave Keeton Sent: Wednesday, June 10, 2009 9:52 AM To: IBMVM@LISTSERV.UARK.EDU Subject: LOGONBY 8 user limitation I'm trying to determine if RACF will allow me to bypass the 8 user limitation imposed with the LOGONBY attribute of the USER DIRECT entry. I need to add operations staff to a virtual machine so they can respond to messages and other tasks. I need to allow 16 users, so I'm trying to figure out how to accomplish this. Thanks, Dave
Re: Clean Linux Guest Shutdown
On Wednesday, 06/10/2009 at 02:01 EDT, Robert J McCarthy bob.mccar...@custserv.com wrote: John, I am sorry I wasn't clear. VM and linux are communicating : When I enter the CP SIGNAL SHUTDOWN command from MAINT linux begins shutting down. A short time later vm receives the termination from linux and writes the following message to the vm MAINT log : HCPSIG2113I User ZORACLE2 has reported successful termination From a vm standpoint everything appears to be working as designed. It appears that linux sends the termination response to vm before it has really completed it's (linux)shutdown. In linux's inittab we have shutdown -h coded. The HCPSIG2113I indicates that the guest is no longer running. Linux *has* completed shutdown and loaded a special WAIT PSW. If you want applications to terminate cleanly, then Linux shutdown scripts need to wait for the application to end. Alan Altmark z/VM Development IBM Endicott
Re: Clean Linux Guest Shutdown
It appears that linux sends the termination response to vm before it has really completed it's (linux)shutdown. In linux's inittab we have shutdown -h coded. But your example shows a automatic reboot and the system trying to come back up. Something else is wrong... do you specify vmpoff=LOGOFF in your parm lines? You want the virtual machine to log off when it's done.
Re: Clean Linux Guest Shutdown
We have the shutdown - h in the inittab. Hmm. But you are still getting the shutting down for reboot message, which seems odd to me. I think there's something funny in your init scripts for starting/stopping Oracle -- there should be something there that makes the shutdown process synchronous with actual exit of the program. Could you paste those into a message and let us have a look? in our systems, Oracle is in the process of shutting down wh en linux pulls the plug. How do any of you handle oracle/linux shutdown. That's one of the reasons why we wrote SYSVINIT. It goes through the sequence of virtual machines and waits for each one to exit and log off, then issues the CP SHUTDOWN. That way we know the fragile stuff is already packed away before CP goes away. It's free, give it a try. http://www.sinenomine.net/products/vm/s5i
Re: z/VM 5.4 manuals ISO?
You could use IBM Softcopy Librarian to download both book manager and PDS formats. http://publib.boulder.ibm.com/epubs/df/ebrsclwj.exe That will get you the individual files. I think he's asking if .iso images of the entire collection can be downloaded in one swell foop (analogous to the VM Collection CD).
Re: [LINUX-390] DB2 Connect and Linux on Z
On 6/10/2009 at 2:19 PM, Alan Altmark alan_altm...@us.ibm.com wrote: -snip- Boy, this conversation has taken an intresting turn. :-) I would tend toward calling it surreal. Mark Post
Re: the errors after turn on RACF
What does your RPDIRCT SYSUT1 look like (Please don't append it here!)? Does it look like it was generated properly? Are the RDEFINE for the MAINT disks in there? Any errors during any of these processes? Scott On Wed, Jun 10, 2009 at 11:42 AM, sunny...@wcb.ab.ca wrote: Yes. I generate RPDIRCT SYSUT1 from Dirmaint. And I rpibildds it. Then I am able to login Maint. Here is I saw the error. Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca *Bruce Hayden bjhay...@gmail.com* Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 06/10/2009 10:43 AM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: the errors after turn on RACF Did you complete all the steps in the program directory? In particular, did you run RPIDIRCT to scan your current directory and did you run RPIBLDDS to load this output file into your initial database? You can find the program directory at http://www.vm.ibm.com/progdir/5vmrac40.pdf On Wed, Jun 10, 2009 at 12:30 PM, sunny...@wcb.ab.ca wrote: RPIMGR031E RESOURCE MAINT.CF1 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF2 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF3 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.190 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.2CC SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.191 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.122 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.123 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.124 SPECIFIED BY LINK COMMAND NOT FOUND Our DirMaint is on. I follow the RACF Program Directory steps. After I reipl from CF2 and log in IBMUSER, I also got this kind of message. Can some one tell me what steps I missed? Thanks! Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca This message is intended only for the addressee. It may contain privileged or confidential information. Any unauthorized disclosure is strictly prohibited. If you have received this message in error, please notify us immediately so that we may correct our internal records. Please then delete the original email. Thank you. (Sent by Webgate2) -- Bruce Hayden Linux on System z Advanced Technical Support IBM, Endicott, NY Scanned by WCB Webgate1 AntiSpam/AntiVirus email gateway. -- This message is intended only for the addressee. It may contain privileged or confidential information. Any unauthorized disclosure is strictly prohibited. If you have received this message in error, please notify us immediately so that we may correct our internal records. Please then delete the original email. Thank you. (Sent by Webgate1)
Re: Clean Linux Guest Shutdown
David, The reboot was 3 hours later when the guest was manually brought up after the corrupted filesystem was fixed. The last message received at shutdown was : Jun 7 02:02:48 zoracle2 syslog-ng[1780]: syslog-ng version 1.6.8 going down We did not have vmpoff=LOGOFF in the parm lines. The linux guests were in a vm DSC status. We were not logged into any of them. I did notice however that the guests were all logged off of vm once the vm termination message was received. Thanks,Bob -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of David Boyes Sent: Wednesday, June 10, 2009 2:17 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Clean Linux Guest Shutdown It appears that linux sends the termination response to vm before it has really completed it's (linux)shutdown. In linux's inittab we have shutdown -h coded. But your example shows a automatic reboot and the system trying to come back up. Something else is wrong... do you specify vmpoff=LOGOFF in your parm lines? You want the virtual machine to log off when it's done.
Re: LOGONBY 8 user limitation
RACF doesn't have a limit on the number of surrogate users that can use the 'by' option of logon. On Wed, Jun 10, 2009 at 12:52 PM, Dave Keetondave.kee...@state.or.us wrote: I'm trying to determine if RACF will allow me to bypass the 8 user limitation imposed with the LOGONBY attribute of the USER DIRECT entry. I need to add operations staff to a virtual machine so they can respond to messages and other tasks. I need to allow 16 users, so I'm trying to figure out how to accomplish this. Thanks, Dave -- Bruce Hayden Linux on System z Advanced Technical Support IBM, Endicott, NY
Re: LOGONBY 8 user limitation
RACF lets you define as many LOGONBY users for a target userid as you like. RDEFINE SURROGAT LOGONBY.PERFSVM UACC(NONE) and here we permit the staff to doLOGON PERFSVM BY staffx at z/VM logon screen: PERMIT LOGONBY.PERFSVM CLASS(SURROGAT) ID(STAFF1) ACCESS(READ) PERMIT LOGONBY.PERFSVM CLASS(SURROGAT) ID(STAFF2) ACCESS(READ) PERMIT LOGONBY.PERFSVM CLASS(SURROGAT) ID(STAFF3) ACCESS(READ) From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Dave Keeton Sent: Wednesday, June 10, 2009 12:52 PM To: IBMVM@LISTSERV.UARK.EDU Subject: LOGONBY 8 user limitation I'm trying to determine if RACF will allow me to bypass the 8 user limitation imposed with the LOGONBY attribute of the USER DIRECT entry. I need to add operations staff to a virtual machine so they can respond to messages and other tasks. I need to allow 16 users, so I'm trying to figure out how to accomplish this. Thanks, Dave This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system.
Re: LOGONBY 8 user limitation
Yes, this will work in RACF: If using RACF, when you define the user as LOGONBY, it can by default no longer be logged on to with its own password (what is normally what you'd want). But, with an extra command you can restore that possibility: 1. Define TERRY as LOGONBY RAC RDEFINE SURROGAT LOGONBY.TERRY UACC(NONE) 2. Reset the PERMIT RACF created for the command issuer RAC PERMIT LOGONBY.TERRY CLASS(SURROGAT) RESET 3. Allow users/groups to use this LOGONBY to TERRY RAC PERMIT LOGONBY.TERRY CLASS(SURROGAT) ID(user/group) ACCESS(READ) 4. (optional) Make it possible to logon to TERRY with its own password RAC PERMIT LOGONBY.TERRY CLASS(SURROGAT) ID(TERRY) ACCESS(ALTER) Thank You, Terry Martin Lockheed Martin - Information Technology z/OS z/VM Systems - Performance and Tuning Cell - 443 632-4191 Work - 410 786-0386 terry.mar...@cms.hhs.gov mailto:terry.mar...@cms.hhs.gov From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Schuh, Richard Sent: Wednesday, June 10, 2009 2:21 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: LOGONBY 8 user limitation If you were using VM:Secure, you would do it via the Rules Facility. Is there anything equivalent in RACF? Regards, Richard Schuh From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Dave Keeton Sent: Wednesday, June 10, 2009 9:52 AM To: IBMVM@LISTSERV.UARK.EDU Subject: LOGONBY 8 user limitation I'm trying to determine if RACF will allow me to bypass the 8 user limitation imposed with the LOGONBY attribute of the USER DIRECT entry. I need to add operations staff to a virtual machine so they can respond to messages and other tasks. I need to allow 16 users, so I'm trying to figure out how to accomplish this. Thanks, Dave
Re: LOGONBY 8 user limitation
On Wednesday, 06/10/2009 at 02:16 EDT, Dave Keeton dave.kee...@state.or.us wrote: I'm trying to determine if RACF will allow me to bypass the 8 user limitation imposed with the LOGONBY attribute of the USER DIRECT entry. I need to add operations staff to a virtual machine so they can respond to messages and other tasks. I need to allow 16 users, so I'm trying to figure out how to accomplish this. Yes, RACF will allow you to exceed the CP-imposed limitation in the directory. Alan Altmark z/VM Development IBM Endicott
Re: Clean Linux Guest Shutdown
Bob,
I think it's as the others said, Linux is shutting down the way you told it to
do but not the way you intend it to do:
Here's how we shutdown a disconnected sles 10 oracle server gracefully here,
hope the example helps you:
/etc/inittab has a record to run 'shutdown -h now' in response to the SIGNAL
SHUTDOWN or FORCE WITHIN
ca::ctrlaltdel:/sbin/shutdown -h -t 4 now
our zipl.conf doesn't have any vmpoff/halt-whatevers in it.
CP Q SIGNALS shows the oracle guest enabled for the SHUTDOWN signal
Signalled Timeout
UseridSignalSignal Status By Remaining
DZ2DF138 SHUTDOWN Enabled - -
init script dbora (see listing below) with proper comment headers is in
/etc/init.d/dbora
I ran command 'chkconfig dbora on' so the start/kill symlinks to dbora are
built in /etc/init.d/rc.3/
'chkconfig -l dbora' reports dbora is on in run level 3
dz2df138 is running disconnected; From VM did CP SIGNAL SHUTDOWN dz2df138
On dz2df138 oracle shutdown cleanly and then linux finished shutting down, and
VM then logged off dz2df138.
This is our /etc/init.d/dbora script:
-
#!/bin/sh
# OFT John R 3/20/2007 An init script to start/stop oracle 10gR2 database(s)
# and the Oracle listener by running Oracle's scripts based on this script's
# input parameter of start or stop.
# The Oracle scripts are run as userid oracle.
#
#This incorporates some code from Oracle's dbora script shown in their doc. We
use
# 'su' not 'rsh' that Oracle used.
### BEGIN INIT INFO
# Provides: dbora
# Required-Start: $local_fs $network $syslog
# Should-Start: $local_fs $network $syslog nscd sshd
# Default-Start: 3
# Short-Description: Starts/stops oracle db and listener.
# Description: dbora is OFT's script to start/stop oracle database and its
listener;
#also starts/stops oracle dbconsole.
### END INIT INFO
case $1 in
'start')
echo ... ORACLE listener, database(s) and dbconsole starting ...
su - oracle -c sh -c \dbstart \$ORACLE_HOME \
echo emctl start dbconsole...
su - oracle -c sh -c \emctl start dbconsole \#can be in parallel
;;
'stop')
echo ... ORACLE dbconsole, database(s) and listener stopping ...
su - oracle -c sh -c \emctl stop dbconsole \
echo dbshut...
su - oracle -c sh -c \dbshut \$ORACLE_HOME \
;;
*)
echo usage: $0 {start | stop}
exit
;;
esac
#
-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On
Behalf Of Robert J McCarthy
Sent: Wednesday, June 10, 2009 1:59 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Clean Linux Guest Shutdown
John,
I am sorry I wasn't clear. VM and linux are communicating :
When I enter the CP SIGNAL SHUTDOWN command from MAINT linux begins
shutting down. A short time later vm receives the termination from
linux
and writes the following message to the vm MAINT log :
HCPSIG2113I User ZORACLE2 has reported successful termination
From a vm standpoint everything appears to be working as designed. It
appears that linux sends the termination response to vm before it has
really completed it's (linux)shutdown. In linux's inittab we have
shutdown -h coded.
Thanks, Bob
-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On
Behalf Of Romanowski, John (OFT)
Sent: Wednesday, June 10, 2009 12:57 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Clean Linux Guest Shutdown
I CP FORCE guest WITHIN nn
Like CP SIGNAL SHUTDOWN that triggers the linux's inittab CTRLALTDEL
entry.
What do you mean when you say linux appears to send a response to VM
saying it has completed shutdown; but apparently it really hasn't ?
Is that sent response just a message on the guest's console or a linux
script doing VMCP MESSAGE userid blah blah blah?
-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]
On Behalf Of Robert J McCarthy
Sent: Wednesday, June 10, 2009 12:34 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Clean Linux Guest Shutdown
John,
When you shutdown your linux guest, do you use a CP SIGNAL
SHUTDOWN
command to tell linux to shutdown, or do you manually shutdown linux.
Our manual shutdown appears to work, but when we try to automate it
with the CP SIGNAL SHUTDOWN from vm; linux appears to send a
response to vm saying it has completed shutdown; but appraently it
really hasn't.
Thanks,Bob
-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]
On Behalf Of Romanowski, John (OFT)
Sent: Wednesday, June 10, 2009 9:19 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Clean Linux Guest Shutdown
We start/stop oracle with an init.d script so oracle's start/stop is
Re: Clean Linux Guest Shutdown
On 6/10/2009 at 3:15 PM, Robert J McCarthy bob.mccar...@custserv.com wrote: -snip- We did not have vmpoff=LOGOFF in the parm lines. The linux guests were in a vm DSC status. We were not logged into any of them. I did notice however that the guests were all logged off of vm once the vm termination message was received. Let's dig a little deeper here. 0. vmpoff is totally unrelated to the problem you're experiencing. As others have noted, Linux loads a specific PSW when it's done processing the shutdown signal. z/VM doesn't care if the guest is then logged off or not. (See previous list discussions on why you might want to do it anyway.) 1. How are your Oracle instances started and stopped? A script? Written by whom? 2. Have you spooled your guest's console so that you can see what happens when the shutdown signal is received? 3. Have you tried spooling your guest's console _and_ turning on script tracing for whatever does shut down Oracle? (set -x for /bin/sh and /bin/bash) Mark Post
Re: the errors after turn on RACF
On Wed, Jun 10, 2009 at 7:42 PM, sunny...@wcb.ab.ca wrote: Then I am able to login Maint. Here is I saw the error. If you get the errors during the logon of MAINT, it looks like the MDISK class is active. I have seen that before so it might very well be the default. The RPIDIRCT most likely does not generate the definitions for those. I don't see much value in having the class active; you can verify with SETROPTS LIST and disable it with SETROPTS NOCLASSACT(MDISK) -Rob
Re: LOGONBY 8 user limitation
On Wed, Jun 10, 2009 at 9:08 PM, Romanowski, John (OFT)john.romanow...@cio.ny.gov wrote: PERMIT LOGONBY.PERFSVM CLASS(SURROGAT) ID(STAFF1) ACCESS(READ) Do yourself a favor and connect the various individuals to RACF groups and then permit these groups to the logonby profiles. Even when you have several people with different roles, the number of groups is probably pretty small. Doing so will make your life easier when people change roles in your shop. And it avoids the trouble when you want to delete a user and can't find the profile where he's still on the access list. -Rob
Re: Clean Linux Guest Shutdown
( resent to correct my /etc/init.d/rc.3/ to /etc/init.d/rc3.d/)
Bob,
I think it's as the others said, Linux is shutting down the way you told it to
do but not the way you intend it to do:
Here's how we shutdown a disconnected sles 10 oracle server gracefully here,
hope the example helps you:
/etc/inittab has a record to run 'shutdown -h now' in response to the SIGNAL
SHUTDOWN or FORCE WITHIN
ca::ctrlaltdel:/sbin/shutdown -h -t 4 now
our zipl.conf doesn't have any vmpoff/halt-whatevers in it.
CP Q SIGNALS shows the oracle guest enabled for the SHUTDOWN signal
Signalled Timeout
UseridSignalSignal Status By Remaining
DZ2DF138 SHUTDOWN Enabled - -
init script dbora (see listing below) with proper comment headers is in
/etc/init.d/dbora
I ran command 'chkconfig dbora on' so the start/kill symlinks to dbora are
built in /etc/init.d/rc3.d/
'chkconfig -l dbora' reports dbora is on in run level 3
dz2df138 is running disconnected; From VM did CP SIGNAL SHUTDOWN dz2df138
On dz2df138 oracle shutdown cleanly and then linux finished shutting down, and
VM then logged off dz2df138.
This is our /etc/init.d/dbora script:
-
#!/bin/sh
# OFT John R 3/20/2007 An init script to start/stop oracle 10gR2 database(s)
# and the Oracle listener by running Oracle's scripts based on this script's
# input parameter of start or stop.
# The Oracle scripts are run as userid oracle.
#
#This incorporates some code from Oracle's dbora script shown in their doc. We
use
# 'su' not 'rsh' that Oracle used.
### BEGIN INIT INFO
# Provides: dbora
# Required-Start: $local_fs $network $syslog
# Should-Start: $local_fs $network $syslog nscd sshd
# Default-Start: 3
# Short-Description: Starts/stops oracle db and listener.
# Description: dbora is OFT's script to start/stop oracle database and its
listener;
#also starts/stops oracle dbconsole.
### END INIT INFO
case $1 in
'start')
echo ... ORACLE listener, database(s) and dbconsole starting ...
su - oracle -c sh -c \dbstart \$ORACLE_HOME \
echo emctl start dbconsole...
su - oracle -c sh -c \emctl start dbconsole \#can be in parallel
;;
'stop')
echo ... ORACLE dbconsole, database(s) and listener stopping ...
su - oracle -c sh -c \emctl stop dbconsole \
echo dbshut...
su - oracle -c sh -c \dbshut \$ORACLE_HOME \
;;
*)
echo usage: $0 {start | stop}
exit
;;
esac
#
-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On
Behalf Of Robert J McCarthy
Sent: Wednesday, June 10, 2009 1:59 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Clean Linux Guest Shutdown
John,
I am sorry I wasn't clear. VM and linux are communicating :
When I enter the CP SIGNAL SHUTDOWN command from MAINT linux begins
shutting down. A short time later vm receives the termination from
linux
and writes the following message to the vm MAINT log :
HCPSIG2113I User ZORACLE2 has reported successful termination
From a vm standpoint everything appears to be working as designed. It
appears that linux sends the termination response to vm before it has
really completed it's (linux)shutdown. In linux's inittab we have
shutdown -h coded.
Thanks, Bob
-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On
Behalf Of Romanowski, John (OFT)
Sent: Wednesday, June 10, 2009 12:57 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Clean Linux Guest Shutdown
I CP FORCE guest WITHIN nn
Like CP SIGNAL SHUTDOWN that triggers the linux's inittab CTRLALTDEL
entry.
What do you mean when you say linux appears to send a response to VM
saying it has completed shutdown; but apparently it really hasn't ?
Is that sent response just a message on the guest's console or a linux
script doing VMCP MESSAGE userid blah blah blah?
-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]
On Behalf Of Robert J McCarthy
Sent: Wednesday, June 10, 2009 12:34 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Clean Linux Guest Shutdown
John,
When you shutdown your linux guest, do you use a CP SIGNAL
SHUTDOWN
command to tell linux to shutdown, or do you manually shutdown linux.
Our manual shutdown appears to work, but when we try to automate it
with the CP SIGNAL SHUTDOWN from vm; linux appears to send a
response to vm saying it has completed shutdown; but appraently it
really hasn't.
Thanks,Bob
-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]
On Behalf Of Romanowski, John (OFT)
Sent: Wednesday, June 10, 2009 9:19 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Clean Linux Guest Shutdown
We
Re: the errors after turn on RACF
I used dirm user withpass Rpidirct user withpass z a The file is the same like what RACF Program Directory describe: ADDUSER RDEFINE Permit. NO error when issue Vmfview service I only want to establish the simple and basic RACF without share database. Do I have the Disallow Access problem? I never change that on 5.4. This is the most challange work I have in my life. Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca Scott Rohling scott.rohl...@gmail.com Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 06/10/2009 01:04 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: the errors after turn on RACF What does your RPDIRCT SYSUT1 look like (Please don't append it here!)? Does it look like it was generated properly? Are the RDEFINE for the MAINT disks in there? Any errors during any of these processes? Scott On Wed, Jun 10, 2009 at 11:42 AM, sunny...@wcb.ab.ca wrote: Yes. I generate RPDIRCT SYSUT1 from Dirmaint. And I rpibildds it. Then I am able to login Maint. Here is I saw the error. Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca Bruce Hayden bjhay...@gmail.com Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 06/10/2009 10:43 AM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: the errors after turn on RACF Did you complete all the steps in the program directory? In particular, did you run RPIDIRCT to scan your current directory and did you run RPIBLDDS to load this output file into your initial database? You can find the program directory at http://www.vm.ibm.com/progdir/5vmrac40.pdf On Wed, Jun 10, 2009 at 12:30 PM, sunny...@wcb.ab.ca wrote: RPIMGR031E RESOURCE MAINT.CF1 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF2 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF3 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.190 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.2CC SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.191 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.122 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.123 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.124 SPECIFIED BY LINK COMMAND NOT FOUND Our DirMaint is on. I follow the RACF Program Directory steps. After I reipl from CF2 and log in IBMUSER, I also got this kind of message. Can some one tell me what steps I missed? Thanks! Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca This message is intended only for the addressee. It may contain privileged or confidential information. Any unauthorized disclosure is strictly prohibited. If you have received this message in error, please notify us immediately so that we may correct our internal records. Please then delete the original email. Thank you. (Sent by Webgate2) -- Bruce Hayden Linux on System z Advanced Technical Support IBM, Endicott, NY Scanned by WCB Webgate1 AntiSpam/AntiVirus email gateway. This message is intended only for the addressee. It may contain privileged or confidential information. Any unauthorized disclosure is strictly prohibited. If you have received this message in error, please notify us immediately so that we may correct our internal records. Please then delete the original email. Thank you. (Sent by Webgate1) Scanned by WCB Webgate1 AntiSpam/AntiVirus email gateway. This message is intended only for the addressee. It may contain privileged or confidential information. Any unauthorized disclosure is strictly prohibited. If you have received this message in error, please notify us immediately so that we may correct our internal records. Please then delete the original email. Thank you. (Sent by Webgate1)
Re: LOGONBY 8 user limitation
Dave, Using RACF you can have hundreds of logonby users, or you can group users and authorize those groups to do logonby to a server. We normally have a racf group for the system programmers, and grant that racf group access to the logonby profiles for the server userids. A similar setup is used for instance for the operators, they are authorized for OPERATOR and a few other operator userids. By doing this, it is very easy to maintain the list of operators, VM system programmers, Linux system programmers and so on. When somebody joins or leaves such a group, all you need is to connect/remove the personal userid to/from the maintenance user groups. Ronald van der Laan
Re: Clean Linux Guest Shutdown
Please post the console messages from post syslog going down. Marcy - Original Message - From: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To: IBMVM@LISTSERV.UARK.EDU IBMVM@LISTSERV.UARK.EDU Sent: Wed Jun 10 14:15:06 2009 Subject: Re: [IBMVM] Clean Linux Guest Shutdown David, The reboot was 3 hours later when the guest was manually brought up after the corrupted filesystem was fixed. The last message received at shutdown was : Jun 7 02:02:48 zoracle2 syslog-ng[1780]: syslog-ng version 1.6.8 going down We did not have vmpoff=LOGOFF in the parm lines. The linux guests were in a vm DSC status. We were not logged into any of them. I did notice however that the guests were all logged off of vm once the vm termination message was received. Thanks,Bob -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of David Boyes Sent: Wednesday, June 10, 2009 2:17 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Clean Linux Guest Shutdown It appears that linux sends the termination response to vm before it has really completed it's (linux)shutdown. In linux's inittab we have shutdown -h coded. But your example shows a automatic reboot and the system trying to come back up. Something else is wrong... do you specify vmpoff=LOGOFF in your parm lines? You want the virtual machine to log off when it's done.
Re: the errors after turn on RACF
Did the RPIDIRCT SYSUT1 file contain RDEFINE statements for all the minidisks? Did you have DIRMAINT send you the complete directory file (DIRM USER WITHPASS) or did you try to read it directly from one of the disks? Something obviously went wrong - maybe you should IPL your old system from parm disk 1 and run the RPIDIRCT utility again and make sure the output file has all the resources in it that you would expect. On Wed, Jun 10, 2009 at 1:42 PM, sunny...@wcb.ab.ca wrote: Yes. I generate RPDIRCT SYSUT1 from Dirmaint. And I rpibildds it. Then I am able to login Maint. Here is I saw the error. Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca Bruce Hayden bjhay...@gmail.com Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 06/10/2009 10:43 AM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: the errors after turn on RACF Did you complete all the steps in the program directory? In particular, did you run RPIDIRCT to scan your current directory and did you run RPIBLDDS to load this output file into your initial database? You can find the program directory at http://www.vm.ibm.com/progdir/5vmrac40.pdf On Wed, Jun 10, 2009 at 12:30 PM, sunny...@wcb.ab.ca wrote: RPIMGR031E RESOURCE MAINT.CF1 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF2 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF3 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.190 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.2CC SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.191 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.122 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.123 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.124 SPECIFIED BY LINK COMMAND NOT FOUND Our DirMaint is on. I follow the RACF Program Directory steps. After I reipl from CF2 and log in IBMUSER, I also got this kind of message. Can some one tell me what steps I missed? Thanks! Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca This message is intended only for the addressee. It may contain privileged or confidential information. Any unauthorized disclosure is strictly prohibited. If you have received this message in error, please notify us immediately so that we may correct our internal records. Please then delete the original email. Thank you. (Sent by Webgate2) -- Bruce Hayden Linux on System z Advanced Technical Support IBM, Endicott, NY Scanned by WCB Webgate1 AntiSpam/AntiVirus email gateway. This message is intended only for the addressee. It may contain privileged or confidential information. Any unauthorized disclosure is strictly prohibited. If you have received this message in error, please notify us immediately so that we may correct our internal records. Please then delete the original email. Thank you. (Sent by Webgate1) -- Bruce Hayden Linux on System z Advanced Technical Support IBM, Endicott, NY
Re: LOGONBY 8 user limitation
Thanks to Rob everyone else who responded. I'm pretty new to RACF as well, so your examples helped out a lot. Regards, Dave -Original Message- From: Rob van der Heij rvdh...@gmail.com Reply-to: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To: IBMVM@LISTSERV.UARK.EDU Subject: Re: LOGONBY 8 user limitation Date: Wed, 10 Jun 2009 21:30:38 +0200 On Wed, Jun 10, 2009 at 9:08 PM, Romanowski, John (OFT)john.romanow...@cio.ny.gov wrote: PERMIT LOGONBY.PERFSVM CLASS(SURROGAT) ID(STAFF1) ACCESS(READ) Do yourself a favor and connect the various individuals to RACF groups and then permit these groups to the logonby profiles. Even when you have several people with different roles, the number of groups is probably pretty small. Doing so will make your life easier when people change roles in your shop. And it avoids the trouble when you want to delete a user and can't find the profile where he's still on the access list. -Rob
Re: the errors after turn on RACF
Sunny, Looks like you ran the DIRM USER command to get the copy of the directory that was passed to RPIDIRCT to create the RACF commands. However, it does not look like you ran the RPIBLDDS to actually update the RACF database since you indicated running VMFVIEW SERVICE. Can you confirm you actually ran the RACF commands? z/VM includes a set of CP directory control statements that are used to define OpenExtensions information to z/VM. You can use the OVM option of the RPIDIRCT EXEC to process only the OpenExtensions information in the CP directory, as follows: RPIDIRCT filename filetype filemode outmode (OVM When you are satisfied with the output from RPIDIRCT, invoke RPIBLDDS as follows: RPIBLDDS filename where filename is the name of the SYSUT1 file created by RPIDIRCT. From the RPIDIRCT SYSUT1 file, can you cut/paste the commands related to MAINT.CF1. They should be similar to RDEF/RDEFINE VMMDISK MAINT.CF1. Issuing the RACF command RLIST VMMDISK * should show all entries in the class. Can you provide all or some of the output? Jon Nolting - System z IT Architect (zITA) IBM US West IMT based near Seattle (206) 587-2244 (Work) - T/L 277-244 (425) 281-5750 (Cell) (206) 587-2244 (Fax) (425) 222-7969 (Home) From: sunny...@wcb.ab.ca To: IBMVM@LISTSERV.UARK.EDU Date: 06/10/2009 01:08 PM Subject:Re: the errors after turn on RACF Sent by:The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU I used dirm user withpass Rpidirct user withpass z a The file is the same like what RACF Program Directory describe: ADDUSER RDEFINE Permit. NO error when issue Vmfview service I only want to establish the simple and basic RACF without share database. Do I have the Disallow Access problem? I never change that on 5.4. This is the most challange work I have in my life. Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca Scott Rohling scott.rohl...@gmail.com Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To ib...@listserv.u ARK.EDU 06/10/2009 01:04 PMcc Subject Please respond to Re: the errors The IBM z/VM Operating System after turn on IBMVM@LISTSERV.UARK.EDU RACF What does your RPDIRCT SYSUT1 look like (Please don't append it here!)? Does it look like it was generated properly? Are the RDEFINE for the MAINT disks in there? Any errors during any of these processes? Scott On Wed, Jun 10, 2009 at 11:42 AM, sunny.hu:@wcb.ab.ca wrote: Yes. I generate RPDIRCT SYSUT1 from Dirmaint. And I rpibildds it. Then I am able to login Maint. Here is I saw the error. Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny.hu:@wcb.ab.ca Bruce Hayden ?,bjhay...@gmail.com Sent by: The IBM z/VM Operating System ? IBMVM@LISTSERV.UARK.EDU To ib...@listserv.u
Re: Clean Linux Guest Shutdown
John,
We checked the linux scripts on several guests with what you sent us
and our scripts are very similar. We went through the process with one
test linux /oracle guest and reviewed the log. This guest came down
cleanly without any issues. Oracle shutdown down normally, all within
about 30 seconds. The problem that occurred on Sunday was that we
shutdown approximately 35 linux guests of which about 20 have Oracle
databases. We did stagger the shutdowns to some degree to alleviate
system contention for resources. The test database was also a small
database. Some of the production databases are about 2-3tb each, and
would probably take longer than 30 seconds to shutdown depending on what
they were doing at the time. It seems as though all of the guests
shutdown within 30 seconds and the scripts on some have not completed
processing yet. We are going to continue to research this and see where
we might have made a mistake. I am also going to look at the SYSVINIT
product, since it appears that it could be very helpful in an orderly
shutdown/startup of the guests from a vm standpoint. The input from the
list respondants has been very informative. We are kind of new to this
environment; but it is growing very fast at our site.
Thanks, Bob
-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On
Behalf Of Romanowski, John (OFT)
Sent: Wednesday, June 10, 2009 3:38 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Clean Linux Guest Shutdown
( resent to correct my /etc/init.d/rc.3/ to /etc/init.d/rc3.d/) Bob, I
think it's as the others said, Linux is shutting down the way you told
it to do but not the way you intend it to do:
Here's how we shutdown a disconnected sles 10 oracle server gracefully
here, hope the example helps you:
/etc/inittab has a record to run 'shutdown -h now' in response to the
SIGNAL SHUTDOWN or FORCE WITHIN ca::ctrlaltdel:/sbin/shutdown -h -t 4
now
our zipl.conf doesn't have any vmpoff/halt-whatevers in it.
CP Q SIGNALS shows the oracle guest enabled for the SHUTDOWN signal
Signalled Timeout
UseridSignalSignal Status By Remaining
DZ2DF138 SHUTDOWN Enabled - -
init script dbora (see listing below) with proper comment headers is in
/etc/init.d/dbora
I ran command 'chkconfig dbora on' so the start/kill symlinks to dbora
are built in /etc/init.d/rc3.d/ 'chkconfig -l dbora' reports dbora is
on in run level 3
dz2df138 is running disconnected; From VM did CP SIGNAL SHUTDOWN
dz2df138
On dz2df138 oracle shutdown cleanly and then linux finished shutting
down, and VM then logged off dz2df138.
This is our /etc/init.d/dbora script:
-
#!/bin/sh
# OFT John R 3/20/2007 An init script to start/stop oracle 10gR2
database(s) # and the Oracle listener by running Oracle's scripts
based on this script's # input parameter of start or stop.
# The Oracle scripts are run as userid oracle.
#
#This incorporates some code from Oracle's dbora script shown in their
doc. We use # 'su' not 'rsh' that Oracle used.
### BEGIN INIT INFO
# Provides: dbora
# Required-Start: $local_fs $network $syslog # Should-Start: $local_fs
$network $syslog nscd sshd # Default-Start: 3 # Short-Description:
Starts/stops oracle db and listener.
# Description: dbora is OFT's script to start/stop oracle database and
its listener;
#also starts/stops oracle dbconsole.
### END INIT INFO
case $1 in
'start')
echo ... ORACLE listener, database(s) and dbconsole starting
...
su - oracle -c sh -c \dbstart \$ORACLE_HOME \
echo emctl start dbconsole...
su - oracle -c sh -c \emctl start dbconsole \#can be in
parallel
;;
'stop')
echo ... ORACLE dbconsole, database(s) and listener stopping
...
su - oracle -c sh -c \emctl stop dbconsole \
echo dbshut...
su - oracle -c sh -c \dbshut \$ORACLE_HOME \
;;
*)
echo usage: $0 {start | stop}
exit
;;
esac
#
-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]
On Behalf Of Robert J McCarthy
Sent: Wednesday, June 10, 2009 1:59 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Clean Linux Guest Shutdown
John,
I am sorry I wasn't clear. VM and linux are communicating :
When I enter the CP SIGNAL SHUTDOWN command from MAINT linux begins
shutting down. A short time later vm receives the termination from
linux and writes the following message to the vm MAINT log :
HCPSIG2113I User ZORACLE2 has reported successful termination From a
vm standpoint everything appears to be working as designed. It appears
that linux sends the termination response to vm before it has really
completed it's (linux)shutdown. In linux's inittab we have shutdown
-h coded.
Thanks, Bob
Re: the errors after turn on RACF
On Wednesday, 06/10/2009 at 04:07 EDT, sunny...@wcb.ab.ca wrote: I used dirm user withpass Rpidirct user withpass z a The file is the same like what RACF Program Directory describe: ADDUSER RDEFINE Permit. Do you see RDEFINEs for MAINT.CF1, etc., in the output file from RPIDIRCT? Do you see a PERMIT MAINT.CF1 CL(VMMDISK) ID(MAINT) ACCESS(something)? Did you also run RPIBLDDS? Did you get any errors? NO error when issue Vmfview service VMFVIEW isn't going to show you anything related to RPIDIRCT or RPIBLDDS. Issue RAC RLIST VMMDISK MAINT.CF1 ALL to see if the resource is defined and who has access to it. I only want to establish the simple and basic RACF without share database. Do I have the Disallow Access problem? I never change that on 5.4. There is a table in HCPRWA that defines how CP behaves if the associated VMMDISK resource is NOT FOUND. The default is DEFER. That means that RACF gives CP the responsiblity. If there's a LINK in the directory or the user has OPTION LNKNOPAS, then the LINK will be allowed. This is the most challange work I have in my life. To paraphrase from A League of their Own: It's supposed to be challenging. If it were easy, anyone could do it. :-) Alan Altmark z/VM Development IBM Endicott
Re: the errors after turn on RACF
Maybe you just need to do a refresh? I'm not a RACF expert, but RACF often needs a SETROPTS REFRESH of some things (but you'd think such things would be handled by this process) Your not having a permission problem -- RACF is saying the resources haven't been defined yet.. which sounds like the RDEF wasn't issued or failed. Scott On Wed, Jun 10, 2009 at 2:04 PM, sunny...@wcb.ab.ca wrote: I used dirm user withpass Rpidirct user withpass z a The file is the same like what RACF Program Directory describe: ADDUSER RDEFINE Permit. NO error when issue Vmfview service I only want to establish the simple and basic RACF without share database. Do I have the Disallow Access problem? I never change that on 5.4. This is the most challange work I have in my life. Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca *Scott Rohling scott.rohl...@gmail.com* Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 06/10/2009 01:04 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: the errors after turn on RACF What does your RPDIRCT SYSUT1 look like (Please don't append it here!)? Does it look like it was generated properly? Are the RDEFINE for the MAINT disks in there? Any errors during any of these processes? Scott On Wed, Jun 10, 2009 at 11:42 AM, *sunny.hu* http://sunny.hu/@* wcb.ab.ca* http://wcb.ab.ca/ wrote: Yes. I generate RPDIRCT SYSUT1 from Dirmaint. And I rpibildds it. Then I am able to login Maint. Here is I saw the error. Sunny Hu Information Management W.C.B. Alberta (780) 498-4739* **sunny.hu* http://sunny.hu/@*wcb.ab.ca* http://wcb.ab.ca/ *Bruce Hayden **bjhay...@gmail.com* bjhay...@gmail.com** Sent by: The IBM z/VM Operating System *ib...@listserv.uark.edu*IBMVM@LISTSERV.UARK.EDU 06/10/2009 10:43 AM Please respond to The IBM z/VM Operating System *ib...@listserv.uark.edu*IBMVM@LISTSERV.UARK.EDU To *ib...@listserv.uark.edu* IBMVM@LISTSERV.UARK.EDU cc Subject Re: the errors after turn on RACF Did you complete all the steps in the program directory? In particular, did you run RPIDIRCT to scan your current directory and did you run RPIBLDDS to load this output file into your initial database? You can find the program directory at * http://www.vm.ibm.com/progdir/5vmrac40.pdf*http://www.vm.ibm.com/progdir/5vmrac40.pdf On Wed, Jun 10, 2009 at 12:30 PM, *sunny.hu* http://sunny.hu/@* wcb.ab.ca* http://wcb.ab.ca/ wrote: RPIMGR031E RESOURCE MAINT.CF1 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF2 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF3 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.190 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.2CC SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.191 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.122 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.123 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.124 SPECIFIED BY LINK COMMAND NOT FOUND Our DirMaint is on. I follow the RACF Program Directory steps. After I reipl from CF2 and log in IBMUSER, I also got this kind of message. Can some one tell me what steps I missed? Thanks! Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 *sunny.hu* http://sunny.hu/@*wcb.ab.ca* http://wcb.ab.ca/ This message is intended only for the addressee. It may contain privileged or confidential information. Any unauthorized disclosure is strictly prohibited. If you have received this message in error, please notify us immediately so that we may correct our internal records. Please then delete the original email. Thank you. (Sent by Webgate2) -- Bruce Hayden Linux on System z Advanced Technical Support IBM, Endicott, NY Scanned by WCB Webgate1 AntiSpam/AntiVirus email gateway. -- This message is intended only for the addressee. It may contain privileged or confidential information. Any unauthorized disclosure is strictly prohibited. If you have received this message in error, please notify us immediately so that we may correct our internal records. Please then delete the original email. Thank you. (Sent by Webgate1) -- Scanned by WCB Webgate1 AntiSpam/AntiVirus email gateway. -- This message is intended only for the addressee. It may contain privileged or confidential information. Any unauthorized disclosure is strictly prohibited. If you have received this message in error, please notify us immediately so that we may correct our internal
Re: LOGONBY 8 user limitation
Thanks, makes a lot of sense, I'll pass that on to our RACF admin. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Rob van der Heij Sent: Wednesday, June 10, 2009 3:31 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: LOGONBY 8 user limitation On Wed, Jun 10, 2009 at 9:08 PM, Romanowski, John (OFT)john.romanow...@cio.ny.gov wrote: PERMIT LOGONBY.PERFSVM CLASS(SURROGAT) ID(STAFF1) ACCESS(READ) Do yourself a favor and connect the various individuals to RACF groups and then permit these groups to the logonby profiles. Even when you have several people with different roles, the number of groups is probably pretty small. Doing so will make your life easier when people change roles in your shop. And it avoids the trouble when you want to delete a user and can't find the profile where he's still on the access list. -Rob This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system.
Re: the errors after turn on RACF
In RPIDIRCT SYSUT1 I do have RDEFINE VMMDISK MAINT.CF1 OWNER(MAINT) UACC(NONE) PERMIT MAINT.CF1 CLASS(VMMDISK) RESET ID(MAINT) AC(ALTER) Thanks Rod, Scott and Jon, My errors is gone now. :) I guess the way I did : log in IBMUSER Rac SETROPTS CLASSACT (VMDISK) : (VMROR) : (VMBATCH) :(VMSEGMT) Then I log off and log in maint. All the errors are gone! Does that mean in RACF Program Directory the task 14: Set RACF Options is must iteml for the new install? Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca Jonathan R Nolting jrnol...@us.ibm.com Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 06/10/2009 02:34 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: the errors after turn on RACF Sunny, Looks like you ran the DIRM USER command to get the copy of the directory that was passed to RPIDIRCT to create the RACF commands. However, it does not look like you ran the RPIBLDDS to actually update the RACF database since you indicated running VMFVIEW SERVICE. Can you confirm you actually ran the RACF commands? z/VM includes a set of CP directory control statements that are used to define OpenExtensions information to z/VM. You can use the OVM option of the RPIDIRCT EXEC to process only the OpenExtensions information in the CP directory, as follows: RPIDIRCT filename filetype filemode outmode (OVM When you are satisfied with the output from RPIDIRCT, invoke RPIBLDDS as follows: RPIBLDDS filename where filename is the name of the SYSUT1 file created by RPIDIRCT. From the RPIDIRCT SYSUT1 file, can you cut/paste the commands related to MAINT.CF1. They should be similar to RDEF/RDEFINE VMMDISK MAINT.CF1. Issuing the RACF command RLIST VMMDISK * should show all entries in the class. Can you provide all or some of the output? Jon Nolting - System z IT Architect (zITA) IBM US West IMT based near Seattle (206) 587-2244 (Work) - T/L 277-244 (425) 281-5750 (Cell) (206) 587-2244 (Fax) (425) 222-7969 (Home) sunny.hu---06/10/2009 01:08:15 PM---I used dirm user withpass From: sunny...@wcb.ab.ca To: IBMVM@LISTSERV.UARK.EDU Date: 06/10/2009 01:08 PM Subject: Re: the errors after turn on RACF Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU I used dirm user withpass Rpidirct user withpass z a The file is the same like what RACF Program Directory describe: ADDUSER RDEFINE Permit. NO error when issue Vmfview service I only want to establish the simple and basic RACF without share database. Do I have the Disallow Access problem? I never change that on 5.4. This is the most challange work I have in my life. Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca Scott Rohling scott.rohl...@gmail.com Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 06/10/2009 01:04 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: the errors after turn on RACF What does your RPDIRCT SYSUT1 look like (Please don't append it here!)? Does it look like it was generated properly? Are the RDEFINE for the MAINT disks in there? Any errors during any of these processes? Scott On Wed, Jun 10, 2009 at 11:42 AM, sunny...@wcb.ab.ca wrote: Yes. I generate RPDIRCT SYSUT1 from Dirmaint. And I rpibildds it. Then I am able to login Maint. Here is I saw the error. Sunny Hu Information Management W.C.B. Alberta (780) 498-4739 sunny...@wcb.ab.ca Bruce Hayden bjhay...@gmail.com Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 06/10/2009 10:43 AM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: the errors after turn on RACF Did you complete all the steps in the program directory? In particular, did you run RPIDIRCT to scan your current directory and did you run RPIBLDDS to load this output file into your initial database? You can find the program directory at http://www.vm.ibm.com/progdir/5vmrac40.pdf On Wed, Jun 10, 2009 at 12:30 PM, sunny...@wcb.ab.ca wrote: RPIMGR031E RESOURCE MAINT.CF1 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF2 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.CF3 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.190 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.2CC SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.191 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.122 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.123 SPECIFIED BY LINK COMMAND NOT FOUND RPIMGR031E RESOURCE MAINT.124 SPECIFIED BY LINK COMMAND NOT FOUND Our DirMaint is on. I follow the RACF Program Directory steps. After I reipl from CF2 and log in IBMUSER, I also got
Re: LOGONBY 8 user limitation
Hi Dave, We have 15 users shared to be used for support purpose and a great number of users sharing them. You can define a GROUP and CONNECT those users to them. Abraços / Best regards Edi Lopes Alves IBM Global Accounts (IGA) z/VM Systems Base, Vicom Program Products Support ITIL Foundation Certified IBM Certified 424 zSeries Specialist IBM Certified 442 Content Manager IBM Certified 437 Websphere Portal ITN 5750-2054 - External phone: +5511 9618-2946 Location: IBM Hortolândia - São Paulo - Brazil From: Dave Keeton dave.kee...@state.or.us To: IBMVM@LISTSERV.UARK.EDU Date: 10/06/2009 14:44 Subject: LOGONBY 8 user limitation I'm trying to determine if RACF will allow me to bypass the 8 user limitation imposed with the LOGONBY attribute of the USER DIRECT entry. I need to add operations staff to a virtual machine so they can respond to messages and other tasks. I need to allow 16 users, so I'm trying to figure out how to accomplish this. Thanks, Dave
