Re: hipersockets on a VM layer 2 vswitch
Yes but the layer 2 vswitch is running on z/VM ver. 5.4. Does this mean we will need to set up a layer 2 hipersocket on the z/OS side as well? Thank you Mark, yes we are running z/OS ver. 1.10 on the LPAR running the TSMTCS app. Russell -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Mark Jacobs Sent: Wednesday, February 03, 2010 4:32 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: hipersockets on a VM layer 2 vswitch That lpar is running zOS 1.10. Mark Jacobs -Original Message- From: The IBM z/VM Operating System on behalf of David Boyes Sent: Wed 2/3/2010 4:23 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: hipersockets on a VM layer 2 vswitch You need a very modern z/OS for layer 2 connections to work. You don't say what level of z.OS, but I think it has to be minimum 1.10 if not 1.11. On 2/3/10 2:54 PM, russell.gendr...@custserv.com russell.gendr...@custserv.com wrote: Greetings, We currently have multiple Linux guest running on z/VM on both a layer 3 tcp/ip vswitch as well as a layer 2 vswitch. On one particular z/VM we have a hipersocket link to a z/OS system for using the TSMTCS backup application. Currently only the layer 3 guests use the hipersockets. We tried to define the hipersocket link on the z/OS system To a layer 2 Linux guest but there is no connection for some reason. Has anyone else tried this and if so were you successful? Thanks Russell Gendreau Time Customer Service, Inc. 813-554-2064
Re: Movin On...
Ditto! The Velocity guys have helped me a bunch! Actually I owe Tony a Bar-B-Q tater the next time he is in town. Thanks, Nick CONFIDENTIALITY STATEMENT: The foregoing message (including attachments) is covered by the Electronic Communication Privacy Act, 18 U.S.C. sections 2510-2521, and is CONFIDENTIAL. If you believe that it has been sent to you in error, do not read it. If you are not the intended recipient, you are hereby notified that any retention, dissemination, distribution, or copying of this communication is strictly prohibited. Please reply to the sender that you have received the message in error, then delete it. Thank you. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Martin, Terry R. (CMS/CTR) (CTR) Sent: Wednesday, February 03, 2010 11:33 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Movin On... Congratulations Rich all of the gang at Velocity are great folks and have helped me immensely during my initial struggles and continue to help me with both z/VM basics as well as trying to thoroughly understand the performance nuances of the z/VM and z/Linux environments. I do a fair amount of talking with the Velocity folks so I am sure we will be talking also at some point. Thank You, Terry Martin Lockheed Martin - Citic z/OS and z/VM Performance Tuning and Operating Systems Support Office - 443 348-2102 Cell - 443 632-4191 WFH - Wed and Fri. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Edward M Martin Sent: Wednesday, February 03, 2010 11:15 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Movin On... Congratulations. You always do well! Ed Martin Aultman Health Foundation 330-363-5050 ext 35050 -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Rich Smrcina Sent: Wednesday, February 03, 2010 8:16 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Movin On... Cross posted to vse-l, ibmvm and linux-390; sorry for dups. As of February 1, 2010 I've taken a position with Velocity Software, Inc. It is with a heavy heart that I leave VM Assist after 5+ years. Working with Bob Kusche has been a absolutely wonderful experience. Lately, I've also had the great pleasure to work with David Kreuter of VM Resources, LTD. David has great knowledge of VM and networking and is a fantastic resource. I plan to still attend SHARE and WAVV and will see you all there! Thanks. -- Rich Smrcina Velocity Software, Inc. Phone: 414-491-6001 http://www.velocitysoftware.com Catch the WAVV! http://www.wavv.org WAVV 2010 - Apr 9-13, 2010 Covington, KY
Strange result from Q MDISK
A user asked me to transfer his 191 disk to his 193 disk and give him a new (larger) 191 disk. Before doing this I checked he was logged off. When he logged on again, everything was where he expected it to be but he got a strange result from Q MDISK :- q mdisk 191 TargetID Tdev OwnerID Odev PPFDEV 0191 PPFDEV 0191 Ready; T=0.01/0.01 14:36:40 q mdisk 193 TargetID Tdev OwnerID Odev PPFDEV 0193 PPFDEV 0191 Ready; T=0.01/0.01 14:36:47 When he did a Q MDISK nnn LOC he could, indeed see that the disks were defined in different places so all is well - but I am at a loss to explain why he is seeing this result. Can anyone explain this? Colin Allinson VM Systems Support Amadeus Data Processing GmbH
Re: Strange result from Q MDISK
Does someone still have a link to the old disk? From the help notes on q mdisk... The OwnerID and Odev listed in the output can be different, depending on how the disk was defined. If the disk definition in the system directory has been changed, the new OwnerID and Odev may not be immediately reflected in the QUERY MDISK output. The old designation will be shown until there are no users accessing the disk. Use the form of the command consistent with the output needed for your application. On Thu, 4 Feb 2010 16:30:37 +0100, Colin Allinson cgallin...@amadeus.com wrote: A user asked me to transfer his 191 disk to his 193 disk and give him a new (larger) 191 disk. Before doing this I checked he was logged off. When he logged on again, everything was where he expected it to be but h e got a strange result from Q MDISK :- q mdisk 191 TargetID Tdev OwnerID Odev PPFDEV 0191 PPFDEV 0191 Ready; T=0.01/0.01 14:36:40 q mdisk 193 TargetID Tdev OwnerID Odev PPFDEV 0193 PPFDEV 0191 Ready; T=0.01/0.01 14:36:47 When he did a Q MDISK nnn LOC he could, indeed see that the disks were defined in different places so all is well - but I am at a loss to expla in why he is seeing this result. Can anyone explain this? Colin Allinson VM Systems Support Amadeus Data Processing GmbH
Re: Strange result from Q MDISK
check if Q MDISK nnn LOC gives same output as Q MDISK nnn LOC DIR. maybe his PROFILE (for whatever reason) detaches 193 and links his 191 as 193? Det 193 and do CP LINK * 193 193 and repeat the Q MDISK nnn LOC From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Colin Allinson Sent: Thursday, February 04, 2010 10:31 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Strange result from Q MDISK A user asked me to transfer his 191 disk to his 193 disk and give him a new (larger) 191 disk. Before doing this I checked he was logged off. When he logged on again, everything was where he expected it to be but he got a strange result from Q MDISK :- q mdisk 191 TargetID Tdev OwnerID Odev PPFDEV 0191 PPFDEV 0191 Ready; T=0.01/0.01 14:36:40 q mdisk 193 TargetID Tdev OwnerID Odev PPFDEV 0193 PPFDEV 0191 Ready; T=0.01/0.01 14:36:47 When he did a Q MDISK nnn LOC he could, indeed see that the disks were defined in different places so all is well - but I am at a loss to explain why he is seeing this result. Can anyone explain this? Colin Allinson VM Systems Support Amadeus Data Processing GmbH This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system.
Re: Strange result from Q MDISK
You could issue a Q LINKS nnn to see who has it linked. Jim Hughes 603-271-5586 It is fun to do the impossible. From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Romanowski, John (OFT) Sent: Thursday, February 04, 2010 10:48 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Strange result from Q MDISK check if Q MDISK nnn LOC gives same output as Q MDISK nnn LOC DIR. maybe his PROFILE (for whatever reason) detaches 193 and links his 191 as 193? Det 193 and do CP LINK * 193 193 and repeat the Q MDISK nnn LOC From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Colin Allinson Sent: Thursday, February 04, 2010 10:31 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Strange result from Q MDISK A user asked me to transfer his 191 disk to his 193 disk and give him a new (larger) 191 disk. Before doing this I checked he was logged off. When he logged on again, everything was where he expected it to be but he got a strange result from Q MDISK :- q mdisk 191 TargetID Tdev OwnerID Odev PPFDEV 0191 PPFDEV 0191 Ready; T=0.01/0.01 14:36:40 q mdisk 193 TargetID Tdev OwnerID Odev PPFDEV 0193 PPFDEV 0191 Ready; T=0.01/0.01 14:36:47 When he did a Q MDISK nnn LOC he could, indeed see that the disks were defined in different places so all is well - but I am at a loss to explain why he is seeing this result. Can anyone explain this? Colin Allinson VM Systems Support Amadeus Data Processing GmbH This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system.
Hi everybody
Hi, I'm new in this forum, and new in VM/ESA,, I have a question: 1. I see the user-id rdr with command: q prt ftpgest0 all ORIGINID FILE CLASS RECORDS CPY HOLD DATE TIME NAME TYPE DIST FTPGEST0 3115 Q CON 00196180 001 NONE OPEN- 0009 FTPCONSO Ready; T=0.01/0.01 17:27:05 How Is be OPEN State, I can't transfer this RDR to my ReaderList (RL)... And I would have to do, to close the spool and to transfer it to my RL? Best Regards, Mario Izaguirre Mainframe System Programmer 08021 Barcelona, Spain
Re: Hi everybody
It's the current console log... and what you see is normal. If logged onto it: CLOSE CONS and then TRANSFER PRT ALL TO * If this is another userid: CP SEND CP FTPGEST0 CLOSE CONS CP TRANSFER FTPGETS0 PRT ALL TO * Scott On Thu, Feb 4, 2010 at 9:42 AM, Mario Izaguirre mizagui...@circulo.eswrote: Hi, I’m new in this forum, and new in VM/ESA,, I have a question: 1. I see the user-id rdr with command: q prt ftpgest0 all ORIGINID FILE CLASS RECORDS CPY HOLD DATE TIME NAME TYPE DIST FTPGEST0 3115 Q CON 00196180 001 NONE OPEN- 0009 FTPCONSO Ready; T=0.01/0.01 17:27:05 How Is be OPEN State, I can’t transfer this RDR to my ReaderList (RL)… And I would have to do, to close the spool and to transfer it to my RL? Best Regards, * * * * *Mario Izaguirre* Mainframe System Programmer 08021 Barcelona, Spain
Re: Hi everybody
I'm login with my user-id (maiz) q prt ftpgest0 all ORIGINID FILE CLASS RECORDS CPY HOLD DATE TIME NAME TYPE DIST FTPGEST0 3115 Q CON 00196554 001 NONE OPEN- 0009 FTPCONSO Ready; T=0.01/0.01 17:58:17 send ftpgest0 close cons HCPSEC068E SEND command failed; receiver has not authorized sender Ready(00068); T=0.01/0.01 17:58:43 Try with CP option before SEND .. cp send ftpgest0 close cons HCPSEC068E SEND command failed; receiver has not authorized sender Ready(00068); T=0.01/0.01 17:58:51 Best Regards, Mario Izaguirre Mainframe System Programmer Barcelona, Spain De: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] En nombre de Scott Rohling Enviado el: jueves, 04 de febrero de 2010 17:53 Para: IBMVM@LISTSERV.UARK.EDU Asunto: Re: Hi everybody It's the current console log... and what you see is normal. If logged onto it: CLOSE CONS and then TRANSFER PRT ALL TO * If this is another userid: CP SEND CP FTPGEST0 CLOSE CONS CP TRANSFER FTPGETS0 PRT ALL TO * Scott On Thu, Feb 4, 2010 at 9:42 AM, Mario Izaguirre mizagui...@circulo.es wrote: Hi, I'm new in this forum, and new in VM/ESA,, I have a question: 1. I see the user-id rdr with command: q prt ftpgest0 all ORIGINID FILE CLASS RECORDS CPY HOLD DATE TIME NAME TYPE DIST FTPGEST0 3115 Q CON 00196180 001 NONE OPEN- 0009 FTPCONSO Ready; T=0.01/0.01 17:27:05 How Is be OPEN State, I can't transfer this RDR to my ReaderList (RL)... And I would have to do, to close the spool and to transfer it to my RL? Best Regards, Mario Izaguirre Mainframe System Programmer 08021 Barcelona, Spain
Re: Hi everybody
Hi, Mario. First, welcome the the group. This list is an excellent source of information for people new to the z/VM world. What version/level of VM are you running there now? You can very easily see that by issuing the CP command: Q CPLEVEL DJ On 02/04/2010 11:00 AM, Mario Izaguirre wrote: I'm login with my user-id (maiz) q prt ftpgest0 all ORIGINID FILE CLASS RECORDS CPY HOLD DATE TIME NAME TYPE DIST FTPGEST0 3115 Q CON 00196554 001 NONE OPEN- 0009 FTPCONSO Ready; T=0.01/0.01 17:58:17 send ftpgest0 close cons HCPSEC068E SEND command failed; receiver has not authorized sender Ready(00068); T=0.01/0.01 17:58:43 Try with CP option before SEND .. cp send ftpgest0 close cons HCPSEC068E SEND command failed; receiver has not authorized sender Ready(00068); T=0.01/0.01 17:58:51 Best Regards, Mario Izaguirre Mainframe System Programmer Barcelona, Spain De: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] En nombre de Scott Rohling Enviado el: jueves, 04 de febrero de 2010 17:53 Para: IBMVM@LISTSERV.UARK.EDU Asunto: Re: Hi everybody It's the current console log... and what you see is normal. If logged onto it: CLOSE CONS and then TRANSFER PRT ALL TO * If this is another userid: CP SEND CP FTPGEST0 CLOSE CONS CP TRANSFER FTPGETS0 PRT ALL TO * Scott On Thu, Feb 4, 2010 at 9:42 AM, Mario Izaguirremizagui...@circulo.es wrote: Hi, I'm new in this forum, and new in VM/ESA,, I have a question: 1. I see the user-id rdr with command: q prt ftpgest0 all ORIGINID FILE CLASS RECORDS CPY HOLD DATE TIME NAME TYPE DIST FTPGEST0 3115 Q CON 00196180 001 NONE OPEN- 0009 FTPCONSO Ready; T=0.01/0.01 17:27:05 How Is be OPEN State, I can't transfer this RDR to my ReaderList (RL)... And I would have to do, to close the spool and to transfer it to my RL? Best Regards, Mario Izaguirre Mainframe System Programmer 08021 Barcelona, Spain -- Dave Jones V/Soft www.vsoft-software.com Houston, TX 281.578.7544
Re: Hi everybody
Hi, thanks for the welcome.. q cplevel VM/ESA Version 2 Release 3.0, service level 9901 Generated at 05/31/99 10:32:22 EST IPL at 12/21/09 11:40:44 EST Ready; T=0.01/0.01 18:07:22 Coming soon, zVM ver. 5.4 in a z/10 BC.. Best Regards, Mario Izaguirre Mainframe System Programmer Barcelona, Spain -Mensaje original- De: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] En nombre de Dave Jones Enviado el: jueves, 04 de febrero de 2010 18:05 Para: IBMVM@LISTSERV.UARK.EDU Asunto: Re: Hi everybody Hi, Mario. First, welcome the the group. This list is an excellent source of information for people new to the z/VM world. What version/level of VM are you running there now? You can very easily see that by issuing the CP command: Q CPLEVEL DJ On 02/04/2010 11:00 AM, Mario Izaguirre wrote: I'm login with my user-id (maiz) q prt ftpgest0 all ORIGINID FILE CLASS RECORDS CPY HOLD DATE TIME NAME TYPE DIST FTPGEST0 3115 Q CON 00196554 001 NONE OPEN- 0009 FTPCONSO Ready; T=0.01/0.01 17:58:17 send ftpgest0 close cons HCPSEC068E SEND command failed; receiver has not authorized sender Ready(00068); T=0.01/0.01 17:58:43 Try with CP option before SEND .. cp send ftpgest0 close cons HCPSEC068E SEND command failed; receiver has not authorized sender Ready(00068); T=0.01/0.01 17:58:51 Best Regards, Mario Izaguirre Mainframe System Programmer Barcelona, Spain De: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] En nombre de Scott Rohling Enviado el: jueves, 04 de febrero de 2010 17:53 Para: IBMVM@LISTSERV.UARK.EDU Asunto: Re: Hi everybody It's the current console log... and what you see is normal. If logged onto it: CLOSE CONS and then TRANSFER PRT ALL TO * If this is another userid: CP SEND CP FTPGEST0 CLOSE CONS CP TRANSFER FTPGETS0 PRT ALL TO * Scott On Thu, Feb 4, 2010 at 9:42 AM, Mario Izaguirremizagui...@circulo.es wrote: Hi, I'm new in this forum, and new in VM/ESA,, I have a question: 1. I see the user-id rdr with command: q prt ftpgest0 all ORIGINID FILE CLASS RECORDS CPY HOLD DATE TIME NAME TYPE DIST FTPGEST0 3115 Q CON 00196180 001 NONE OPEN- 0009 FTPCONSO Ready; T=0.01/0.01 17:27:05 How Is be OPEN State, I can't transfer this RDR to my ReaderList (RL)... And I would have to do, to close the spool and to transfer it to my RL? Best Regards, Mario Izaguirre Mainframe System Programmer 08021 Barcelona, Spain -- Dave Jones V/Soft www.vsoft-software.com Houston, TX 281.578.7544
Re: Hi everybody
Look carefully:CP SEND CP FTPGEST0 CLOSE CONS It's the CP right after SEND that's important... You are sending a command to the guest's CP - rather than whatever OS/app is running underneath. Scott On Thu, Feb 4, 2010 at 10:00 AM, Mario Izaguirre mizagui...@circulo.eswrote: I’m login with my user-id (maiz) q prt ftpgest0 all ORIGINID FILE CLASS RECORDS CPY HOLD DATE TIME NAME TYPE DIST FTPGEST0 3115 Q CON 00196554 001 NONE OPEN- 0009 FTPCONSO Ready; T=0.01/0.01 17:58:17 send ftpgest0 close cons HCPSEC068E SEND command failed; receiver has not authorized sender Ready(00068); T=0.01/0.01 17:58:43 Try with CP option before SEND .. cp send ftpgest0 close cons HCPSEC068E SEND command failed; receiver has not authorized sender Ready(00068); T=0.01/0.01 17:58:51 Best Regards, *Mario Izaguirre* Mainframe System Programmer Barcelona, Spain *De:* The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] *En nombre de *Scott Rohling *Enviado el:* jueves, 04 de febrero de 2010 17:53 *Para:* IBMVM@LISTSERV.UARK.EDU *Asunto:* Re: Hi everybody It's the current console log... and what you see is normal. If logged onto it: CLOSE CONS and then TRANSFER PRT ALL TO * If this is another userid: CP SEND CP FTPGEST0 CLOSE CONS CP TRANSFER FTPGETS0 PRT ALL TO * Scott On Thu, Feb 4, 2010 at 9:42 AM, Mario Izaguirre mizagui...@circulo.es wrote: Hi, I’m new in this forum, and new in VM/ESA,, I have a question: 1. I see the user-id rdr with command: q prt ftpgest0 all ORIGINID FILE CLASS RECORDS CPY HOLD DATE TIME NAME TYPE DIST FTPGEST0 3115 Q CON 00196180 001 NONE OPEN- 0009 FTPCONSO Ready; T=0.01/0.01 17:27:05 How Is be OPEN State, I can’t transfer this RDR to my ReaderList (RL)… And I would have to do, to close the spool and to transfer it to my RL? Best Regards, * * * * *Mario Izaguirre* Mainframe System Programmer 08021 Barcelona, Spain
Re: Hi everybody
On: Thu, Feb 04, 2010 at 06:00:37PM +0100,Mario Izaguirre Wrote: } I'm login with my user-id (maiz) } send ftpgest0 close cons } } HCPSEC068E SEND command failed; receiver has not authorized sender } } Ready(00068); T=0.01/0.01 17:58:43 You need to add the proper VM privledge class to your ID. Easiest way is just duplicate the classes MAINT has. BE CARFULL I don't like class A on either MAINT or your ID as it TOO powerful. Many of us have unintentionally shut VM down at one time. Rarely twice. You can always add it with SET PRIV if you REALLY need it. -- Rich Greenberg N Ft Myers, FL, USA richgr atsign panix.com + 1 239 543 1353 Eastern time. N6LRT I speak for myself my dogs only.VM'er since CP-67 Canines:Val, Red, Shasta Casey (RIP), Red Zero, Siberians Owner:Chinook-L Retired at the beach Asst Owner:Sibernet-L
Re: Hi everybody
Mario, that's an old version of VM you have running there now (as I am sure you already know...). I don't think it supports the CP SEND CP FTPGEST0 CLOSE CONS command that Scott has suggested. I think the easiest think for you to do is simply log onto the FTPGEST0 virtual machine and issue the CP SPOOL CONS CLOSE command directly on it's console. You can then transfer it to another user id for processing. Hope this helps. On 02/04/2010 11:07 AM, Mario Izaguirre wrote: Hi, thanks for the welcome.. q cplevel VM/ESA Version 2 Release 3.0, service level 9901 Generated at 05/31/99 10:32:22 EST IPL at 12/21/09 11:40:44 EST Ready; T=0.01/0.01 18:07:22 Coming soon, zVM ver. 5.4 in a z/10 BC.. Best Regards, Mario Izaguirre Mainframe System Programmer Barcelona, Spain -Mensaje original- De: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] En nombre de Dave Jones Enviado el: jueves, 04 de febrero de 2010 18:05 Para: IBMVM@LISTSERV.UARK.EDU Asunto: Re: Hi everybody Hi, Mario. First, welcome the the group. This list is an excellent source of information for people new to the z/VM world. What version/level of VM are you running there now? You can very easily see that by issuing the CP command: Q CPLEVEL DJ On 02/04/2010 11:00 AM, Mario Izaguirre wrote: I'm login with my user-id (maiz) q prt ftpgest0 all ORIGINID FILE CLASS RECORDS CPY HOLD DATE TIME NAME TYPE DIST FTPGEST0 3115 Q CON 00196554 001 NONE OPEN- 0009 FTPCONSO Ready; T=0.01/0.01 17:58:17 send ftpgest0 close cons HCPSEC068E SEND command failed; receiver has not authorized sender Ready(00068); T=0.01/0.01 17:58:43 Try with CP option before SEND .. cp send ftpgest0 close cons HCPSEC068E SEND command failed; receiver has not authorized sender Ready(00068); T=0.01/0.01 17:58:51 Best Regards, Mario Izaguirre Mainframe System Programmer Barcelona, Spain De: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] En nombre de Scott Rohling Enviado el: jueves, 04 de febrero de 2010 17:53 Para: IBMVM@LISTSERV.UARK.EDU Asunto: Re: Hi everybody It's the current console log... and what you see is normal. If logged onto it: CLOSE CONS and then TRANSFER PRT ALL TO * If this is another userid: CP SEND CP FTPGEST0 CLOSE CONS CP TRANSFER FTPGETS0 PRT ALL TO * Scott On Thu, Feb 4, 2010 at 9:42 AM, Mario Izaguirremizagui...@circulo.es wrote: Hi, I'm new in this forum, and new in VM/ESA,, I have a question: 1. I see the user-id rdr with command: q prt ftpgest0 all ORIGINID FILE CLASS RECORDS CPY HOLD DATE TIME NAME TYPE DIST FTPGEST0 3115 Q CON 00196180 001 NONE OPEN- 0009 FTPCONSO Ready; T=0.01/0.01 17:27:05 How Is be OPEN State, I can't transfer this RDR to my ReaderList (RL)... And I would have to do, to close the spool and to transfer it to my RL? Best Regards, Mario Izaguirre Mainframe System Programmer 08021 Barcelona, Spain -- Dave Jones V/Soft www.vsoft-software.com Houston, TX 281.578.7544
Re: Hi everybody
If FTPGEST0 is a z/VM FTP server and your user ID is in the TCP/IP server's OBEY list, you could issue: SMSG FTPGEST0 CLOSECON to close the console. Regards, Miguel Delapaz z/VM Development The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU wrote on 02/04/2010 09:21:25 AM: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU Mario, that's an old version of VM you have running there now (as I am sure you already know...). I don't think it supports the CP SEND CP FTPGEST0 CLOSE CONS command that Scott has suggested. I think the easiest think for you to do is simply log onto the FTPGEST0 virtual machine and issue the CP SPOOL CONS CLOSE command directly on it's console. You can then transfer it to another user id for processing. Hope this helps. On 02/04/2010 11:07 AM, Mario Izaguirre wrote: Hi, thanks for the welcome.. q cplevel VM/ESA Version 2 Release 3.0, service level 9901 Generated at 05/31/99 10:32:22 EST IPL at 12/21/09 11:40:44 EST Ready; T=0.01/0.01 18:07:22 q prt ftpgest0 all ORIGINID FILE CLASS RECORDS CPY HOLD DATE TIME NAME TYPE DIST FTPGEST0 3115 Q CON 00196554 001 NONE OPEN- 0009 FTPCONSO
Re: Hi everybody
On Thu, Feb 4, 2010 at 12:21 PM, Dave Jones d...@vsoft-software.com wrote: Mario, that's an old version of VM you have running there now (as I am sure you already know...). I don't think it supports the CP SEND CP FTPGEST0 CLOSE CONS command that Scott has suggested. It does, but it may not support you-can-always-SEND-if-you-have-the-right-privilege-class. I don't remember when that came in. Making yourself the SECUSER for that ID (CP SET SECUSER FTPGEST0 *), then doing the CP SEND CP, then CP SET SECUSER FTPGEST0 OFF will work if not (with the right privilege class). We used to have a CPSEND EXEC that did that sequence, before the you-can-always-SEND-if-you-have-the-right-privilege-class enhancement.
Re: Hi everybody
Rich, Just curious about you comment in this post about not liking to even have user maint have an ‘A’ class privilege. Who then would you suggest having a class A privilege? None of the other user id’s have class A … Operator? I never had any issues with user id Maint having all the available privileges as only the z/VM sysprogs use Maint and if you can’t trust them then who? --- On Thu, 2/4/10, Rich Greenberg ric...@panix.com wrote: From: Rich Greenberg ric...@panix.com Subject: Re: Hi everybody To: IBMVM@LISTSERV.UARK.EDU Date: Thursday, February 4, 2010, 12:20 PM On: Thu, Feb 04, 2010 at 06:00:37PM +0100,Mario Izaguirre Wrote: } I'm login with my user-id (maiz) } send ftpgest0 close cons } } HCPSEC068E SEND command failed; receiver has not authorized sender } } Ready(00068); T=0.01/0.01 17:58:43 You need to add the proper VM privledge class to your ID. Easiest way is just duplicate the classes MAINT has. BE CARFULL I don't like class A on either MAINT or your ID as it TOO powerful. Many of us have unintentionally shut VM down at one time. Rarely twice. You can always add it with SET PRIV if you REALLY need it. -- Rich Greenberg N Ft Myers, FL, USA richgr atsign panix.com + 1 239 543 1353 Eastern time. N6LRT I speak for myself my dogs only. VM'er since CP-67 Canines:Val, Red, Shasta Casey (RIP), Red Zero, Siberians Owner:Chinook-L Retired at the beach Asst Owner:Sibernet-L
Re: Hi everybody
It isn't a matter of trust, it is a matter of minimizing the risk of an accidental SHUTDOWN. Here MAINT does not have class A; however it does have class C. That allows it to use the SET PRIV * +A in order to issue class A commands such as Q CPDISKS, CPRELEASE and CPACCESS. By requiring that extra step of the SET PRIV, it heightens the awareness of the person to the fact that they now have extraordinary capabilities and responsibilities. Regards, Richard Schuh From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Howard Rifkind Sent: Thursday, February 04, 2010 10:34 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Hi everybody Rich, Just curious about you comment in this post about not liking to even have user maint have an 'A' class privilege. Who then would you suggest having a class A privilege? None of the other user id's have class A ... Operator? I never had any issues with user id Maint having all the available privileges as only the z/VM sysprogs use Maint and if you can't trust them then who? --- On Thu, 2/4/10, Rich Greenberg ric...@panix.com wrote: From: Rich Greenberg ric...@panix.com Subject: Re: Hi everybody To: IBMVM@LISTSERV.UARK.EDU Date: Thursday, February 4, 2010, 12:20 PM On: Thu, Feb 04, 2010 at 06:00:37PM +0100,Mario Izaguirre Wrote: } I'm login with my user-id (maiz) } send ftpgest0 close cons } } HCPSEC068E SEND command failed; receiver has not authorized sender } } Ready(00068); T=0.01/0.01 17:58:43 You need to add the proper VM privledge class to your ID. Easiest way is just duplicate the classes MAINT has.. BE CARFULL I don't like class A on either MAINT or your ID as it TOO powerful. Many of us have unintentionally shut VM down at one time. Rarely twice. You can always add it with SET PRIV if you REALLY need it. -- Rich Greenberg N Ft Myers, FL, USA richgr atsign panix.com + 1 239 543 1353 Eastern time. N6LRT I speak for myself my dogs only.VM'er since CP-67 Canines:Val, Red, Shasta Casey (RIP), Red Zero, Siberians Owner:Chinook-L Retired at the beach Asst Owner:Sibernet-L
Re: Hi everybody
The other route you could take, if protection from a shutdown is the goal, change the class of the shutdown to Z or S, and don¹t give this priv to anyone. Use the Set Priv * +Z as part of the shutdown process. -- Robert P. Nix Mayo Foundation.~. RO-OE-5-55 200 First Street SW/V\ 507-284-0844 Rochester, MN 55905 /( )\ -^^-^^ In theory, theory and practice are the same, but in practice, theory and practice are different. On 2/4/10 12:44 PM, Schuh, Richard rsc...@visa.com wrote: It isn't a matter of trust, it is a matter of minimizing the risk of an accidental SHUTDOWN. Here MAINT does not have class A; however it does have class C. That allows it to use the SET PRIV * +A in order to issue class A commands such as Q CPDISKS, CPRELEASE and CPACCESS. By requiring that extra step of the SET PRIV, it heightens the awareness of the person to the fact that they now have extraordinary capabilities and responsibilities. Regards, Richard Schuh
Re: Hi everybody
Ah - but the lovely SHUTDOWN SYSTEM x feature in z/VM 5.4 should very much help reduce risk of accidental shutdown. You have to be pretty deliberate if you turn that feature on ... But yes .. there are plenty of other commands and reasons to limit class A use.. Scott On Thu, Feb 4, 2010 at 11:44 AM, Schuh, Richard rsc...@visa.com wrote: It isn't a matter of trust, it is a matter of minimizing the risk of an accidental SHUTDOWN. Here MAINT does not have class A; however it does have class C. That allows it to use the SET PRIV * +A in order to issue class A commands such as Q CPDISKS, CPRELEASE and CPACCESS. By requiring that extra step of the SET PRIV, it heightens the awareness of the person to the fact that they now have extraordinary capabilities and responsibilities. Regards, Richard Schuh -- *From:* The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] *On Behalf Of *Howard Rifkind *Sent:* Thursday, February 04, 2010 10:34 AM *To:* IBMVM@LISTSERV.UARK.EDU *Subject:* Re: Hi everybody Rich, Just curious about you comment in this post about not liking to even have user maint have an ‘A’ class privilege. Who then would you suggest having a class A privilege? None of the other user id’s have class A … Operator? I never had any issues with user id Maint having all the available privileges as only the z/VM sysprogs use Maint and if you can’t trust them then who? --- On *Thu, 2/4/10, Rich Greenberg ric...@panix.com* wrote: From: Rich Greenberg ric...@panix.com Subject: Re: Hi everybody To: IBMVM@LISTSERV.UARK.EDU Date: Thursday, February 4, 2010, 12:20 PM On: Thu, Feb 04, 2010 at 06:00:37PM +0100,Mario Izaguirre Wrote: } I'm login with my user-id (maiz) } send ftpgest0 close cons } } HCPSEC068E SEND command failed; receiver has not authorized sender } } Ready(00068); T=0.01/0.01 17:58:43 You need to add the proper VM privledge class to your ID. Easiest way is just duplicate the classes MAINT has.. BE CARFULL I don't like class A on either MAINT or your ID as it TOO powerful. Many of us have unintentionally shut VM down at one time. Rarely twice. You can always add it with SET PRIV if you REALLY need it. -- Rich Greenberg N Ft Myers, FL, USA richgr atsign panix.com + 1 239 543 1353 Eastern time. N6LRT I speak for myself my dogs only.VM'er since CP-67 Canines:Val, Red, Shasta Casey (RIP), Red Zero, Siberians Owner:Chinook-L Retired at the beach Asst Owner:Sibernet-L
Re: Hi everybody
Yes, that is a very good thing (the SYSTEM operand) We just take Shutdown out of class A and put it in X. The use the set privclass when we actually have to use it (and that's rare since GDPS does our shutting down). Marcy
Re: Hi everybody
On Thu, Feb 4, 2010 at 1:44 PM, Schuh, Richard rsc...@visa.com wrote: It isn't a matter of trust, it is a matter of minimizing the risk of an accidental SHUTDOWN. Here MAINT does not have class A; however it does have class C. That allows it to use the SET PRIV * +A in order to issue class A commands such as Q CPDISKS, CPRELEASE and CPACCESS. By requiring that extra step of the SET PRIV, it heightens the awareness of the person to the fact that they now have extraordinary capabilities and responsibilities. Exactly. I'd argue that best practices (a term I hate) has even MAINT doing a CP SET PRIVCLAS * =BEG (unless that's disabled, of course) in its PROFILE EXEC, and then using a CLASS EXEC for privileged commands: CLASS A SHUTDOWN
Re: Hi everybody
Yes - as you parenthetically alluded to - allowing SET PRIVCLAS is a feature you have to enable.. some customers see a command like SET PRIVCLAS as a security breaker.. It depends on how strict and how much 'separation of duty' is built into their security policies. Anyone with class C and SET PRIVCLAS feature enabled is essentially an all-powerful user, period. Scott On Thu, Feb 4, 2010 at 12:12 PM, zMan zedgarhoo...@gmail.com wrote: On Thu, Feb 4, 2010 at 1:44 PM, Schuh, Richard rsc...@visa.com wrote: It isn't a matter of trust, it is a matter of minimizing the risk of an accidental SHUTDOWN. Here MAINT does not have class A; however it does have class C. That allows it to use the SET PRIV * +A in order to issue class A commands such as Q CPDISKS, CPRELEASE and CPACCESS. By requiring that extra step of the SET PRIV, it heightens the awareness of the person to the fact that they now have extraordinary capabilities and responsibilities. Exactly. I'd argue that best practices (a term I hate) has even MAINT doing a CP SET PRIVCLAS * =BEG (unless that's disabled, of course) in its PROFILE EXEC, and then using a CLASS EXEC for privileged commands: CLASS A SHUTDOWN
Re: Hi everybody
Scott Rohling wrote: Yes - as you parenthetically alluded to - allowing SET PRIVCLAS is a feature you have to enable.. some customers see a command like SET PRIVCLAS as a security breaker.. It depends on how strict and how much 'separation of duty' is built into their security policies. Anyone with class C and SET PRIVCLAS feature enabled is essentially an all-powerful user, period. Scott Correction... Anyone with class C and STORE HOST is an all-powerfull user.. (SET PRIVCLASS is just a shortcut to what one can do with STORE HOST).. --Ivan
Re: Hi everybody
For any user who doesn't have class C, Set priv is not a security concern at all. They cannot go outside their directory classes. All they can do is remove an existing class or restore it. the real security concern is the Directory Class C, not the user's ability to use SET PRIV. One must be very cautious about granting that privilege class. Regards, Richard Schuh From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Scott Rohling Sent: Thursday, February 04, 2010 12:07 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Hi everybody Yes - as you parenthetically alluded to - allowing SET PRIVCLAS is a feature you have to enable.. some customers see a command like SET PRIVCLAS as a security breaker.. It depends on how strict and how much 'separation of duty' is built into their security policies. Anyone with class C and SET PRIVCLAS feature enabled is essentially an all-powerful user, period. Scott On Thu, Feb 4, 2010 at 12:12 PM, zMan zedgarhoo...@gmail.commailto:zedgarhoo...@gmail.com wrote: On Thu, Feb 4, 2010 at 1:44 PM, Schuh, Richard rsc...@visa.commailto:rsc...@visa.com wrote: It isn't a matter of trust, it is a matter of minimizing the risk of an accidental SHUTDOWN. Here MAINT does not have class A; however it does have class C. That allows it to use the SET PRIV * +A in order to issue class A commands such as Q CPDISKS, CPRELEASE and CPACCESS. By requiring that extra step of the SET PRIV, it heightens the awareness of the person to the fact that they now have extraordinary capabilities and responsibilities. Exactly. I'd argue that best practices (a term I hate) has even MAINT doing a CP SET PRIVCLAS * =BEG (unless that's disabled, of course) in its PROFILE EXEC, and then using a CLASS EXEC for privileged commands: CLASS A SHUTDOWN
Re: Hi everybody
On: Thu, Feb 04, 2010 at 10:34:08AM -0800,Howard Rifkind Wrote: } Just curious about you comment in this post about not liking } to even have user maint have an ?A? class privilege. Just 40 years of sysprogging with the occasional O SHIT happening. About the only thing you lose without class A is SHUTDOWN, and at systems I controlled, only ORERATOR and its cohorts had class A. (Yes, there are other commands that are class A only, but can you even name them much less ever used them?) -- Rich Greenberg N Ft Myers, FL, USA richgr atsign panix.com + 1 239 543 1353 Eastern time. N6LRT I speak for myself my dogs only.VM'er since CP-67 Canines:Val, Red, Shasta Casey (RIP), Red Zero, Siberians Owner:Chinook-L Retired at the beach Asst Owner:Sibernet-L
Re: Hi everybody
Rich Greenberg wrote: (Yes, there are other commands that are class A only, but can you even name them much less ever used them?) FORCE ? --Ivan
Re: Hi everybody
On: Thu, Feb 04, 2010 at 10:44:34AM -0800,Schuh, Richard Wrote: } It isn't a matter of trust, it is a matter of minimizing the risk of an accidental SHUTDOWN. Here MAINT does not have class A; however it does have class C. That allows it to use the SET PRIV * +A in order to issue class A commands such as Q CPDISKS, CPRELEASE and CPACCESS. By requiring that extra step of the SET PRIV, it heightens the awareness of the person to the fact that they now have extraordinary capabilities and responsibilities. Rich has hit the nail directly on the head here. Accidents and mistreaks happen, this just puts another door in front of them. -- Rich Greenberg N Ft Myers, FL, USA richgr atsign panix.com + 1 239 543 1353 Eastern time. N6LRT I speak for myself my dogs only.VM'er since CP-67 Canines:Val, Red, Shasta Casey (RIP), Red Zero, Siberians Owner:Chinook-L Retired at the beach Asst Owner:Sibernet-L
Re: Hi everybody
I agree with Rich on PRIVCLASS A and oops. In this economy, management is less inclined to let a little slip like shutting down your production system hosting myriad web servers because you though you were shutting down a 2nd level system or an application or program product that unfortunately ends with SHUTDOWN. To answer his question Yes, there are other commands that are class A only, but can you even name them much less ever used them?), in two parts: Name them? With help of the CMDTABLE EXEC what was published here years ago, yes (results truncated on the right to prevent showing any other classes they work with): ACNT IBMCLASS=A ASSOCIATE IBMCLASS=A AUTOLOG IBMCLASS=A CPACCESS IBMCLASS=A CPCACHE IBMCLASS=A CPHX IBMCLASS=A CPLISTFILEIBMCLASS=A CPRELEASE IBMCLASS=A CPTYPEIBMCLASS=A CPXLOAD IBMCLASS=A CPXUNLOAD IBMCLASS=A DEDICATE IBMCLASS=A DEFINEIBMCLASS=A DISABLE IBMCLASS=A DISASSOCIATE IBMCLASS=A ENABLEIBMCLASS=A FORCE IBMCLASS=A HALT IBMCLASS=A HYPERSWAP IBMCLASS=A LOCK IBMCLASS=A MESSAGE IBMCLASS=A MIGRATE IBMCLASS=A MODIFYIBMCLASS=A MONITOR IBMCLASS=A NETWORK IBMCLASS=A PURGE IBMCLASS=A QUERY SUBCMD CAPABILITY IBMCLASS=A QUERY SUBCMD CFLINKS IBMCLASS=A QUERY SUBCMD CHANNEL IBMCLASS=A QUERY SUBCMD CMDLIMIT IBMCLASS=A QUERY SUBCMD CPASSIST IBMCLASS=A QUERY SUBCMD CPCHECKING IBMCLASS=A QUERY SUBCMD CPCMDS IBMCLASS=A QUERY SUBCMD CPDISKS IBMCLASS=A QUERY SUBCMD CPLOAD IBMCLASS=A QUERY SUBCMD CPTRACE IBMCLASS=A QUERY SUBCMD CPXLOAD IBMCLASS=A QUERY SUBCMD CRYPTO IBMCLASS=A QUERY SUBCMD DIAGNOSE IBMCLASS=A QUERY SUBCMD D8ONECMD IBMCLASS=A QUERY SUBCMD EXITSIBMCLASS=A QUERY SUBCMD FRAMES IBMCLASS=A QUERY SUBCMD ICLNAME IBMCLASS=A QUERY SUBCMD IMG IBMCLASS=A QUERY SUBCMD IOPRIORITY IBMCLASS=A QUERY SUBCMD IPLPARMS IBMCLASS=A QUERY SUBCMD JOURNAL IBMCLASS=A QUERY SUBCMD LOGMSG IBMCLASS=A QUERY SUBCMD MAXUSERS IBMCLASS=A QUERY SUBCMD MITIME IBMCLASS=A QUERY SUBCMD MONITOR IBMCLASS=A QUERY SUBCMD NAMESIBMCLASS=A QUERY SUBCMD OBSERVER IBMCLASS=A QUERY SUBCMD PAGING IBMCLASS=A QUERY SUBCMD PRIORITY IBMCLASS=A QUERY SUBCMD PROCESSORS IBMCLASS=A QUERY SUBCMD QDROPIBMCLASS=A QUERY SUBCMD QUICKDSP IBMCLASS=A QUERY SUBCMD RECORDINGIBMCLASS=A QUERY SUBCMD RESERVED IBMCLASS=A QUERY SUBCMD SASSIST IBMCLASS=A QUERY SUBCMD SDF IBMCLASS=A QUERY SUBCMD SECUSER IBMCLASS=A QUERY SUBCMD SHAREIBMCLASS=A QUERY SUBCMD SHUTDOWNTIME IBMCLASS=A QUERY SUBCMD SPMODE IBMCLASS=A QUERY SUBCMD SRM IBMCLASS=A QUERY SUBCMD STGEXEMPTIBMCLASS=A QUERY SUBCMD STGLIMIT IBMCLASS=A QUERY SUBCMD S370EIBMCLASS=A QUERY SUBCMD TRACEFRAMES IBMCLASS=A QUERY SUBCMD TRFILES IBMCLASS=A QUERY SUBCMD TRSAVE IBMCLASS=A QUERY SUBCMD TRSOURCE IBMCLASS=A QUERY SUBCMD UCR IBMCLASS=A QUERY SUBCMD UNRESOLVED IBMCLASS=A QUERY SUBCMD VECTOR IBMCLASS=A QUERY SUBCMD VMSAVE IBMCLASS=A QUERY SUBCMD VTOD IBMCLASS=A QVM IBMCLASS=A RECORDING IBMCLASS=A REFRESH IBMCLASS=A RESTART IBMCLASS=A SET SUBCMD ADJUNCTS IBMCLASS=A SET SUBCMD CFLINK IBMCLASS=A SET SUBCMD CPASSIST IBMCLASS=A SET SUBCMD CPCHECKING IBMCLASS=A SET SUBCMD CPTRACE IBMCLASS=A SET SUBCMD D8ONECMD IBMCLASS=A SET SUBCMD FAVORED IBMCLASS=A SET SUBCMD IOPRIORITY IBMCLASS=A SET SUBCMD IPLPARMS IBMCLASS=A SET SUBCMD JOURNAL IBMCLASS=A SET SUBCMD MAXUSERS IBMCLASS=A SET SUBCMD MITIME IBMCLASS=A SET SUBCMD MODE IBMCLASS=A SET SUBCMD OBSERVER
Re: Hi everybody
I named the ones needed for updating the SYSTEM CONFIG file in my earlier post. Regards, Richard Schuh -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Rich Greenberg Sent: Thursday, February 04, 2010 1:56 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Hi everybody On: Thu, Feb 04, 2010 at 10:34:08AM -0800,Howard Rifkind Wrote: } Just curious about you comment in this post about not liking } to even have user maint have an ?A? class privilege. Just 40 years of sysprogging with the occasional O SHIT happening. About the only thing you lose without class A is SHUTDOWN, and at systems I controlled, only ORERATOR and its cohorts had class A. (Yes, there are other commands that are class A only, but can you even name them much less ever used them?) -- Rich Greenberg N Ft Myers, FL, USA richgr atsign panix.com + 1 239 543 1353 Eastern time. N6LRT I speak for myself my dogs only. VM'er since CP-67 Canines:Val, Red, Shasta Casey (RIP), Red Zero, Siberians Owner:Chinook-L Retired at the beach Asst Owner:Sibernet-L
Re: Strange result from Q MDISK
Hughes, Jim jim.hug...@doit.nh.gov wrote :- You could issue a Q LINKS nnn to see who has it linked. Yes, I did that. At the time I did the query ( as a sysprog I do love the power of the FOR userid CMD feature) there was no-one else. That is not to say that there was no-one else linked when he logged on. I guess I should have got him to log off on again. Romanowski, John (OFT) john.romanow...@cio.ny.gov wrote :- check if Q MDISK nnn LOC gives same output as Q MDISK nnn LOC DIR. Yes, as I said in my original post, I did that. The locations were different so he was not really looking at the same disk. At this stage I can only guess and I would put my money on overlapping links (somebody linked when he logged on that released it later). Thanks anyway to everyone for their thoughts on this. The only problem is that I like to be able to explain things that seem mysterious ;-) Colin Allinson VM Systems Support Amadeus Data Processing GmbH
