Re: Test Return Code using FTP under VM/CMS

[Les Koehler]

Sergio,
Someone always has to remind folks who write CMS execs in Rexx:
1-Always code: Address Command
right after the comment at the top.
2-Upper case and quote *all* commands to the underlying system and do not 
abbreviate them.

3-When executing another exec, code: "EXEC execname
4-Similarly, a command to CP should start with: "CP cpcommand

Doing the above will save you much heartache and improve performance.
Speaking of performance, remember that Parse is your friend when breaking up 
data strings, as it's optimized for the hardware on the mainframe.


Les

McKown, John wrote:

In your FTP1 EXEC, try replacing the line:

ftp "172.16.11.6"

with

"ftp 172.16.11.6 (EXIT"




John McKown
Systems Engineer IV
IT

Administrative Services Group

HealthMarkets(r)

9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone * (817)-961-6183 cell
john.mck...@healthmarkets.com * www.HealthMarkets.com

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM



From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf 
Of Sergio Lima
Sent: Wednesday, June 16, 2010 12:34 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Test Return Code using FTP under VM/CMS

Hi List,

We made a EXEC here, that do a automation.
This exec work with WAKEUP RDR, then Receive files, and next do a FTP to a 
Windows Server Machine.

Here is the REXX code :

volta:
DO FOREVER
  'WAKEUP  (RDR '
   IF RC = 4 THEN DO
   'EXECIO * CP (STEM LINES.  STRING QUERY RDR * ALL'
end

Do i=1 to Lines.0

 if word(lines.i,1) = 'ORIGINID' then nop
 else do

 fn =  word(lines.i,1)
 numero =  word(lines.i,2)
 data   =  word(lines.i,8)
 hora   =  word(lines.i,9)
 ft =  substr(data,1,2) || substr(data,4,2) || ,
   substr(hora,1,2) || substr(hora,4,2)
 fm = a
 "cp spool c nohold"
 read fn ft "a" "(replace"
 if rc <> 0 then exit
 call FTP1 fn ft
 signal volta
 end

end

Here, the FTP1 EXEC :

/*   */
arg fn ft
queue "anonymous a...@a"
queue "put "fn"."ft".a "fn"."ft".printlog.txt"
queue "quit"
ftp "172.16.11.6"

if rc <> 0 then do
   "cp msg operator  danger message ...   "
   exit
   end

if rc = 0 then do
   call gravalog
   end

return

gravalog:

data = date(u)
hora = time()
campo = data || ' ' || hora || ' ' || fn || ' ' || ft
queue campo
'EXECIO 1 DISKW' printlog log a

return

If the FTP don't run well, We need get the Return Code, but when FTP fails the 
Return Code also was 0, this the test :

USER (identify yourself to the host):

USER anonymous

331 Anonymous access allowed, send identity (e-mail name) as password.

PASS 

230 Anonymous user logged in.
Command:
Local file not found or cannot be accessed.
Command:

QUIT

221
12 *-* if rc <> 0
   >>>   "0"
18 *-* if rc = 0
   >>>   "1"
   *-*  then
   *-*  do
19 *-*   call gravalog
24 *-*gravalog:
26 *-*data = date(u)
   >>>  "06/16/10"
27 *-*hora = time()

Anybody already used this ?

Thanks very much.

Sergio Lima Costa
Sao Paulo - Brazil



TRANSFORME SUAS FOTOS EM EMOTICONS PARA O MESSENGER. CLIQUE AQUI E VEJA 
COMO.

Re: PGT004 MESSAGE

[Louis . Gaines]

Thanks for your help walter

Re: I hate to ask -- VM passwords authenticated against AD?

[Schuh, Richard]

They didn't. An improved version is in CP today. We were on VM ESA1.x or 2.x 
when the transaction took place. I do not remember when the throttling facility 
was first made available in CP. The developer in Endicott and I did have 
conversations about what I would do differently if I were doing it over and 
enhancements that could be made.


Regards, 
Richard Schuh 

 

> -Original Message-
> From: The IBM z/VM Operating System 
> [mailto:ib...@listserv.uark.edu] On Behalf Of Ward, Mike S
> Sent: Wednesday, June 16, 2010 1:24 PM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: I hate to ask -- VM passwords authenticated against AD?
> 
> Hopefully they won't take it and shelf it.
> 

Re: I hate to ask -- VM passwords authenticated against AD?

[Ward, Mike S]

Hopefully they won't take it and shelf it.

-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On
Behalf Of Schuh, Richard
Sent: Wednesday, June 16, 2010 12:05 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: I hate to ask -- VM passwords authenticated against AD?

Amen, brother. In the late '90s, we (USAir before it became USAirways)
decided to donate the device throttling code I had written. Donating it
took longer than writing and testing it. However, they do have a
mechanism for accepting code. I suspect that most of the time taken was
by the respective legal departments. It certainly did not take me long
to sign the Certificate of Authenticity,

Regards, 
Richard Schuh 

 

> -Original Message-
> From: The IBM z/VM Operating System 
> [mailto:ib...@listserv.uark.edu] On Behalf Of David Boyes
> Sent: Wednesday, June 16, 2010 8:26 AM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: I hate to ask -- VM passwords authenticated against AD?
> 
> I have most of the piece parts done (IUCV driver, PAM driver, 
> Kerberos and LDAP interfaces, Linux guest to do the heavy 
> lifting) to enable VM to use any authentication sources 
> supported by PAM, including AD. The remaining part is the 
> necessary CP modules to normalize all the entry points to CP 
> into a documented interface that doesn't require rebuilding 
> CP, then convincing IBM to either ship VM with the RACF 
> interface modules prebuilt, plus a dummy "RACF lite" that 
> implements the defaut "defer" behavior, or agree on what the 
> external interface should be in terms of service access 
> points and ship that. I'd actually donate the service code if 
> IBM would accept it. 
> 
> As you might imagine, the last part is the hardest. If 
> someone wants this badly enough to pay for it, then I can 
> probably have a beta-ready version available in a month or so. 
> 
> -- db
> 
==
This email and any files transmitted with it are confidential and intended 
solely for the use of the individual or entity
to which they are addressed. If you have received this email in error please 
notify the system manager. This message
contains confidential information and is intended only for the individual 
named. If you are not the named addressee you
should not disseminate, distribute or copy this e-mail. Please notify the 
sender immediately by e-mail if you
have received this e-mail by mistake and delete this e-mail from your system. 
If you are not the intended recipient
you are notified that disclosing, copying, distributing or taking any action in 
reliance on the contents of this
information is strictly prohibited.

Re: I hate to ask -- VM passwords authenticated against AD?

[David Boyes]

> When building an ESM, you have some fairly complex challenges. At the
> top
> of the list, the ESM
> 1. Cannot be simply or easily circumvented (even by a sysadmin [as
> opposed
> to sysprog] ),
> 2. Must enforce a limited set of operations when the ESM server is down
> sufficient only to get the ESM server back up and running or to declare
> "The ESM's dead, Jim."
> 3. Must recognize and differentiate system initialization activities
> from
> 'steady state' stuff
> 4. Must generally support the idea the CP is the enforcement point.
> Policy
> may be derived from a server, but CP is where the Real Decisions are
> made
> and where it is understood that, sometimes, the policy does not apply
> or
> is a Really Bad Idea in some cases.
> 
> That's impossible to do if all the logic is in the server.

Something tells me we're actually agreeing with each other but using different 
words. I'm not arguing against any of those points. I am arguing that the 
current implementation makes implementing code (both for the programmer and the 
user) that exploits the existing interfaces unnecessarily complex (and release 
dependent), thus increasing everybody's cost of operation and ownership. 

I'm arguing that we don't have to reinvent that consolidation piece to present 
a way to connect a ESM to CP. But, never mind. Just an idea. If somebody wants 
it, they'll holler. 

-- db

Re: I hate to ask -- VM passwords authenticated against AD?

[Alan Altmark]

On Wednesday, 06/16/2010 at 02:02 EDT, David Boyes  
wrote:
> I'd make a counterargument that if IBM intends to position z/VM only as 
a Linux 
> hosting environment, then the current setup that requires the user to 
have the 
> skills to rebuild CP to enable an ESM (which Chuckie usually recommends) 
is 
> highly user-hostile, and needs to be resolved at the CP layer, not in 
> third-party products. Every ESM shouldn't have to invent the CP 
interface 
> wheel. A cleaner, less intimately entwined, set of security interfaces 
would be 
> good for everyone, including the IBM products, and with the enormous 
amount of 
> work going into z/VM 6.next, this would be a good time to architect it 
in.

When building an ESM, you have some fairly complex challenges. At the top 
of the list, the ESM
1. Cannot be simply or easily circumvented (even by a sysadmin [as opposed 
to sysprog] ), 
2. Must enforce a limited set of operations when the ESM server is down 
sufficient only to get the ESM server back up and running or to declare 
"The ESM's dead, Jim."
3. Must recognize and differentiate system initialization activities from 
'steady state' stuff
4. Must generally support the idea the CP is the enforcement point. Policy 
may be derived from a server, but CP is where the Real Decisions are made 
and where it is understood that, sometimes, the policy does not apply or 
is a Really Bad Idea in some cases.

That's impossible to do if all the logic is in the server.

If the complaint is that ESMs are too hard to install and/or configure, 
then people who feel that way should open requirements.  Neither IBM nor 
CA need changes in the published CP-ESM interfaces to address such 
requirements.

Alan Altmark
z/VM Development
IBM Endicott

Re: PGT004 MESSAGE

[Mike Walter]

Certainly you can find all the gory details in the z/VM System 
Programmer's "bible", the manual: CP Planning and Administration.

But the bullet points are pretty much:

- Find an available DASD volume accessible to your z/VM system.
- Run CPFMTXA against that DASD, formatting the whole thing, and 
allocating 
  - Cylinder zero as PERM, and 
  - 1-END as PAGE.
- DETACH that device from the ID that formatted/allocated, and: CP ATT 
rdev SYSTEM
- Update your "SYSTEM CONFIG" file on MAINT's CF1 disk using whatever 
procedures you already use.  E.g.
  - Find a free CP_OWNed 'SLOT', and change that to match the new page 
DASD volser, and mark that as OWNED, e.g. 
CP_Owned   Slot 11   VMPG01 OWN 
- File "SYSTEM CONFIG", run CPSYNTAX against the updated "SYSTEM CONFIG" 
file to check for errors.
- As long as there are no errors, bring the volume online to CP by 
entering:
  CP START DASD rdev PAGE

(You may have to detach the rdev from the system before CP START, I don't 
remember offhand and have to go to a meeting now).

Mike Walter
Hewitt Associates
The opinions expressed herein are mine alone, not my employer's.



louis.gai...@its.ms.gov 

Sent by: "The IBM z/VM Operating System" 
06/16/2010 12:48 PM
Please respond to
"The IBM z/VM Operating System" 



To
IBMVM@LISTSERV.UARK.EDU
cc

Subject
PGT004 MESSAGE






Hello I am new to z/vm

I had a system failure last night which gave me the message code PGT004

which refers to spool or paging space. Can someone point me to some
documentation

on how to add page space or tell how to do it


thanks






The information contained in this e-mail and any accompanying documents may 
contain information that is confidential or otherwise protected from 
disclosure. If you are not the intended recipient of this message, or if this 
message has been addressed to you in error, please immediately alert the sender 
by reply e-mail and then delete this message, including any attachments. Any 
dissemination, distribution or other use of the contents of this message by 
anyone other than the intended recipient is strictly prohibited. All messages 
sent to and from this e-mail address may be monitored as permitted by 
applicable law and regulations to ensure compliance with our internal policies 
and to protect our business. E-mails are not secure and cannot be guaranteed to 
be error free as they can be intercepted, amended, lost or destroyed, or 
contain viruses. You are deemed to have accepted these risks if you communicate 
with us by e-mail. 

Re: I hate to ask -- VM passwords authenticated against AD?

[David Boyes]

> In this case, however, both IBM and CA offer products for sale in this
> space.  I would rather see the requirement levied against the various
> ESMs
> to provide this function since that's where it logically belongs.
> Alan Altmark
> z/VM Development
> IBM Endicott

I'd make a counterargument that if IBM intends to position z/VM only as a Linux 
hosting environment, then the current setup that requires the user to have the 
skills to rebuild CP to enable an ESM (which Chuckie usually recommends) is 
highly user-hostile, and needs to be resolved at the CP layer, not in 
third-party products. Every ESM shouldn't have to invent the CP interface 
wheel. A cleaner, less intimately entwined, set of security interfaces would be 
good for everyone, including the IBM products, and with the enormous amount of 
work going into z/VM 6.next, this would be a good time to architect it in. 

The rest of the functionality (resolving userid validity, credential mapping, 
etc) are all user-space pieces, and I'd totally agree that that's where they 
belong -- in the ESM logic.

But, that's the issue I mentioned. If there's consensus that this would be 
useful, and if IBM would consider adding it to z/VM, I'm willing to do the 
work. I just don't want to create Yet Another Way to do it, which perpetuates 
the current situation. 

Re: I hate to ask -- VM passwords authenticated against AD?

[Alan Altmark]

On Wednesday, 06/16/2010 at 01:05 EDT, "Schuh, Richard"  
wrote:
> Amen, brother. In the late '90s, we (USAir before it became USAirways) 
decided 
> to donate the device throttling code I had written. Donating it took 
longer 
> than writing and testing it. However, they do have a mechanism for 
accepting 
> code. I suspect that most of the time taken was by the respective legal 
> departments. It certainly did not take me long to sign the Certificate 
of 
> Authenticity,

In this case, however, both IBM and CA offer products for sale in this 
space.  I would rather see the requirement levied against the various ESMs 
to provide this function since that's where it logically belongs.

Alan Altmark
z/VM Development
IBM Endicott

PGT004 MESSAGE

[Louis . Gaines]

Hello I am new to z/vm

I had a system failure last night which gave me the message code PGT004

which refers to spool or paging space. Can someone point me to some
documentation

on how to add page space or tell how to do it


thanks

Re: Test Return Code using FTP under VM/CMS

[Mike Walter]

Sergio,

If it does not violate your management policies (some companies do not 
allow downloads of "shareware" code, even when the source codes is 
available), you may want to download the VMFTP package from Slippery Rock 
University at:
 http://zvm.sru.edu/~DOWNLOAD/ 

It allows complete control of FTP commands and responses from CMS execs. 
Every reply from FTP can be examined (for example, using: rexx "parse"), 
to obtain the return codes from each FTP command.

Mike Walter
Hewitt Associates
The opinions expressed herein are mine alone, not my employer's.



"Sergio Lima"  

Sent by: "The IBM z/VM Operating System" 
06/16/2010 12:34 PM
Please respond to
"The IBM z/VM Operating System" 



To
IBMVM@LISTSERV.UARK.EDU
cc

Subject
Test Return Code using FTP under VM/CMS






Hi List,
 
We made a EXEC here, that do a automation.
This exec work with WAKEUP RDR, then Receive files, and next do a FTP to a 
Windows Server Machine.
 
Here is the REXX code :
 
volta: 
DO FOREVER 
  'WAKEUP  (RDR ' 
   IF RC = 4 THEN DO 
   'EXECIO * CP (STEM LINES.  STRING QUERY RDR * ALL' 
end 
 
Do i=1 to Lines.0 
 
 if word(lines.i,1) = 'ORIGINID' then nop 
 else do 
 
 fn =  word(lines.i,1) 
 numero =  word(lines.i,2) 
 data   =  word(lines.i,8) 
 hora   =  word(lines.i,9) 
 ft =  substr(data,1,2) || substr(data,4,2) || ,
   substr(hora,1,2) || substr(hora,4,2) 
 fm = a 
 "cp spool c nohold" 
 read fn ft "a" "(replace" 
 if rc <> 0 then exit 
 call FTP1 fn ft 
 signal volta 
 end 
 
end 
 
Here, the FTP1 EXEC :
 
/*   */ 
arg fn ft 
queue "anonymous a...@a" 
queue "put "fn"."ft".a "fn"."ft".printlog.txt" 
queue "quit" 
ftp "172.16.11.6" 
 
if rc <> 0 then do 
   "cp msg operator  danger message ...   " 
   exit 
   end 
 
if rc = 0 then do 
   call gravalog 
   end 
 
return 
 
gravalog: 
 
data = date(u) 
hora = time() 
campo = data || ' ' || hora || ' ' || fn || ' ' || ft 
queue campo 
'EXECIO 1 DISKW' printlog log a 
 
return 
 
If the FTP don't run well, We need get the Return Code, but when FTP fails 
the Return Code also was 0, this the test :
 
USER (identify yourself to the host): 
>>>USER anonymous 
331 Anonymous access allowed, send identity (e-mail name) as password. 
>>>PASS  
230 Anonymous user logged in. 
Command: 
Local file not found or cannot be accessed. 
Command: 
>>>QUIT 
221 
12 *-* if rc <> 0 
   >>>   "0" 
18 *-* if rc = 0 
   >>>   "1" 
   *-*  then 
   *-*  do 
19 *-*   call gravalog 
24 *-*gravalog: 
26 *-*data = date(u) 
   >>>  "06/16/10" 
27 *-*hora = time() 
 
Anybody already used this ?
 
Thanks very much.
 
Sergio Lima Costa
Sao Paulo - Brazil


TRANSFORME SUAS FOTOS EM EMOTICONS PARA O MESSENGER. CLIQUE AQUI E VEJA 
COMO.



The information contained in this e-mail and any accompanying documents may 
contain information that is confidential or otherwise protected from 
disclosure. If you are not the intended recipient of this message, or if this 
message has been addressed to you in error, please immediately alert the sender 
by reply e-mail and then delete this message, including any attachments. Any 
dissemination, distribution or other use of the contents of this message by 
anyone other than the intended recipient is strictly prohibited. All messages 
sent to and from this e-mail address may be monitored as permitted by 
applicable law and regulations to ensure compliance with our internal policies 
and to protect our business. E-mails are not secure and cannot be guaranteed to 
be error free as they can be intercepted, amended, lost or destroyed, or 
contain viruses. You are deemed to have accepted these risks if you communicate 
with us by e-mail. 

Re: Test Return Code using FTP under VM/CMS

[Alan Altmark]

On Wednesday, 06/16/2010 at 01:34 EDT, Sergio Lima 
 wrote:

> If the FTP don't run well, We need get the Return Code, but when FTP 
fails the 
> Return Code also was 0

Use the EXIT option on the FTP command.  Any time there is an error, the 
FTP command will immediately end and give a non-zero return code.  You 
will probably want to use MAKEBUF / DROPBUF to ensure that you throw away 
anything in the stack that FTP did not consume.

Alan Altmark
z/VM Development
IBM Endicott

Re: Test Return Code using FTP under VM/CMS

[McKown, John]

In your FTP1 EXEC, try replacing the line:

ftp "172.16.11.6"

with

"ftp 172.16.11.6 (EXIT"




John McKown
Systems Engineer IV
IT

Administrative Services Group

HealthMarkets(r)

9151 Boulevard 26 * N. Richland Hills * TX 76010
(817) 255-3225 phone * (817)-961-6183 cell
john.mck...@healthmarkets.com * www.HealthMarkets.com

Confidentiality Notice: This e-mail message may contain confidential or 
proprietary information. If you are not the intended recipient, please contact 
the sender by reply e-mail and destroy all copies of the original message. 
HealthMarkets(r) is the brand name for products underwritten and issued by the 
insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance 
Company(r), Mid-West National Life Insurance Company of TennesseeSM and The 
MEGA Life and Health Insurance Company.SM



From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf 
Of Sergio Lima
Sent: Wednesday, June 16, 2010 12:34 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Test Return Code using FTP under VM/CMS

Hi List,

We made a EXEC here, that do a automation.
This exec work with WAKEUP RDR, then Receive files, and next do a FTP to a 
Windows Server Machine.

Here is the REXX code :

volta:
DO FOREVER
  'WAKEUP  (RDR '
   IF RC = 4 THEN DO
   'EXECIO * CP (STEM LINES.  STRING QUERY RDR * ALL'
end

Do i=1 to Lines.0

 if word(lines.i,1) = 'ORIGINID' then nop
 else do

 fn =  word(lines.i,1)
 numero =  word(lines.i,2)
 data   =  word(lines.i,8)
 hora   =  word(lines.i,9)
 ft =  substr(data,1,2) || substr(data,4,2) || ,
   substr(hora,1,2) || substr(hora,4,2)
 fm = a
 "cp spool c nohold"
 read fn ft "a" "(replace"
 if rc <> 0 then exit
 call FTP1 fn ft
 signal volta
 end

end

Here, the FTP1 EXEC :

/*   */
arg fn ft
queue "anonymous a...@a"
queue "put "fn"."ft".a "fn"."ft".printlog.txt"
queue "quit"
ftp "172.16.11.6"

if rc <> 0 then do
   "cp msg operator  danger message ...   "
   exit
   end

if rc = 0 then do
   call gravalog
   end

return

gravalog:

data = date(u)
hora = time()
campo = data || ' ' || hora || ' ' || fn || ' ' || ft
queue campo
'EXECIO 1 DISKW' printlog log a

return

If the FTP don't run well, We need get the Return Code, but when FTP fails the 
Return Code also was 0, this the test :

USER (identify yourself to the host):
>>>USER anonymous
331 Anonymous access allowed, send identity (e-mail name) as password.
>>>PASS 
230 Anonymous user logged in.
Command:
Local file not found or cannot be accessed.
Command:
>>>QUIT
221
12 *-* if rc <> 0
   >>>   "0"
18 *-* if rc = 0
   >>>   "1"
   *-*  then
   *-*  do
19 *-*   call gravalog
24 *-*gravalog:
26 *-*data = date(u)
   >>>  "06/16/10"
27 *-*hora = time()

Anybody already used this ?

Thanks very much.

Sergio Lima Costa
Sao Paulo - Brazil



TRANSFORME SUAS FOTOS EM EMOTICONS PARA O MESSENGER. CLIQUE AQUI E VEJA 
COMO.

Re: I hate to ask -- VM passwords authenticated against AD?

[Schuh, Richard]

Amen, brother. In the late '90s, we (USAir before it became USAirways) decided 
to donate the device throttling code I had written. Donating it took longer 
than writing and testing it. However, they do have a mechanism for accepting 
code. I suspect that most of the time taken was by the respective legal 
departments. It certainly did not take me long to sign the Certificate of 
Authenticity,

Regards, 
Richard Schuh 

 

> -Original Message-
> From: The IBM z/VM Operating System 
> [mailto:ib...@listserv.uark.edu] On Behalf Of David Boyes
> Sent: Wednesday, June 16, 2010 8:26 AM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: I hate to ask -- VM passwords authenticated against AD?
> 
> I have most of the piece parts done (IUCV driver, PAM driver, 
> Kerberos and LDAP interfaces, Linux guest to do the heavy 
> lifting) to enable VM to use any authentication sources 
> supported by PAM, including AD. The remaining part is the 
> necessary CP modules to normalize all the entry points to CP 
> into a documented interface that doesn't require rebuilding 
> CP, then convincing IBM to either ship VM with the RACF 
> interface modules prebuilt, plus a dummy "RACF lite" that 
> implements the defaut "defer" behavior, or agree on what the 
> external interface should be in terms of service access 
> points and ship that. I'd actually donate the service code if 
> IBM would accept it. 
> 
> As you might imagine, the last part is the hardest. If 
> someone wants this badly enough to pay for it, then I can 
> probably have a beta-ready version available in a month or so. 
> 
> -- db
> 

Re: I hate to ask -- VM passwords authenticated against AD?

[David Boyes]

I have most of the piece parts done (IUCV driver, PAM driver, Kerberos and LDAP 
interfaces, Linux guest to do the heavy lifting) to enable VM to use any 
authentication sources supported by PAM, including AD. The remaining part is 
the necessary CP modules to normalize all the entry points to CP into a 
documented interface that doesn't require rebuilding CP, then convincing IBM to 
either ship VM with the RACF interface modules prebuilt, plus a dummy "RACF 
lite" that implements the defaut "defer" behavior, or agree on what the 
external interface should be in terms of service access points and ship that. 
I'd actually donate the service code if IBM would accept it. 

As you might imagine, the last part is the hardest. If someone wants this badly 
enough to pay for it, then I can probably have a beta-ready version available 
in a month or so. 

-- db

Re: Dynamic I/O question

[Gregg]

On Wed, Jun 16, 2010 at 9:06 AM, Frank M. Ramaekers
 wrote:
> q 5abf
> HCPQDV040E Device 5ABF does not exist
> Ready(00040); T=0.01/0.01 08:01:35

CP Query rDEV fails because CP never saw light; it never created an
RDEV, SUBCHANNEL, or PATH.
Cheers
-- 
Gregg Reed
"No Plan, survives execution"

Re: Dynamic I/O question

[Frank M. Ramaekers]

The devices never got defined.   It seems that since the PCHId didn't
exist, none of the devices ever got defined.

Well, putting these commands in a REXX EXEC:

 3 *-* "CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 0111"

   >L>   "CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 0111"

HCPCCO6806E Dynamic I/O change request for device failed with return
code 010A
   +++ RC(6806) +++

 4 *-* "CP DELete DEVice 5ABF UNITADD FE CUNUMBR 0111"

   >L>   "CP DELete DEVice 5ABF UNITADD FE CUNUMBR 0111"

Device configuration change completed successfully

 5 *-* "CP DELete CU 0111"

   >L>   "CP DELete CU 0111"

Control unit configuration change completed successfully

 6 *-* "CP DELete CHPID 11"

   >L>   "CP DELete CHPID 11"

Channel path configuration change completed successfully

 7 *-* Exit

Ready; T=0.01/0.06 08:04:36


Looks like the key was the 2nd (DELETE of device 5ABF), although, prior
to running this EXEC:

q 5abf   
HCPQDV040E Device 5ABF does not exist
Ready(00040); T=0.01/0.01 08:01:35   

Thanks!

Frank M. Ramaekers Jr.
 
 

-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On
Behalf Of Gregg
Sent: Wednesday, June 16, 2010 7:44 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Dynamic I/O question

Frank, I think our notes crossed, did the devices delete OK?
"CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 0111"
"CP DELete DEVice 5ABF UNITADD FE CUNUMBR 0111"
"CP DELete CU 0111"
"CP DELete CHPID 11"

On Wed, Jun 16, 2010 at 8:19 AM, Frank M. Ramaekers
 wrote:
> CP DELete CU 0111
>
> HCPCCO6806E Dynamic I/O change request for control unit failed with
> return code 010B
> Ready(06806); T=0.01/0.01 07:18:33
>
>
> Hmmmdon't think I'm getting any further...but thanks for your
> helpguess I'll have to ask IBM.
>
> Thanks,
>
> Frank M. Ramaekers Jr.
>
>
>
> -Original Message-
> From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu]
On
> Behalf Of Gregg
> Sent: Wednesday, June 16, 2010 5:32 AM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: Dynamic I/O question
>
> ok, now I've had almost enough coffee
>
>> "CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 0111"
> "CP DELete DEVice 5ABF UNITADD FE CUNUMBR 0111"
>> "CP DELete CU 0111"
>> "CP DELete CHPID 11"
>
> --
> Gregg Reed
> "No Plan, survives execution"
>
> _
> This message contains information which is privileged and confidential
and is solely for the use of the
> intended recipient. If you are not the intended recipient, be aware
that any review, disclosure,
> copying, distribution, or use of the contents of this message is
strictly prohibited. If you have
> received this in error, please destroy it immediately and notify us at
privacy...@ailife.com.
>



-- 
Gregg Reed
"No Plan, survives execution"

_
This message contains information which is privileged and confidential and is 
solely for the use of the
intended recipient. If you are not the intended recipient, be aware that any 
review, disclosure,
copying, distribution, or use of the contents of this message is strictly 
prohibited. If you have
received this in error, please destroy it immediately and notify us at 
privacy...@ailife.com.

Re: Dynamic I/O question

[Frank M. Ramaekers]

Yeah, missed that as well(Haven't hit my green tea yet this
morning):

CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 0111
Device configuration change completed successfully
Ready; T=0.01/0.03 07:15:24   

 
Frank M. Ramaekers Jr.
 
 

-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On
Behalf Of Gregg
Sent: Wednesday, June 16, 2010 2:24 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Dynamic I/O question

"CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 0111"
need mo coffee..

On Wed, Jun 16, 2010 at 3:22 AM, Gregg  wrote:
>
>
>>On Tue, Jun 15, 2010 at 2:08 PM, Frank M. Ramaekers

>> wrote:
>>What am I missing?
>
> Return code 10B on the CP DELete CU indicates there are "one or more
I/O
> devices defined to it"
>
> "CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 011"
> "CP DELete CU 0111"
> "CP DELete CHPID 11"
> All the above may need to be appended with "CSS n" if multiple LCSS
but from
> the examples so far, there are not, or there is only CSS 0.
>
> --
> Gregg Reed
> "No Plan, survives execution"
>



-- 
Gregg Reed
"No Plan, survives execution"

_
This message contains information which is privileged and confidential and is 
solely for the use of the
intended recipient. If you are not the intended recipient, be aware that any 
review, disclosure,
copying, distribution, or use of the contents of this message is strictly 
prohibited. If you have
received this in error, please destroy it immediately and notify us at 
privacy...@ailife.com.

Re: Dynamic I/O question

[Gregg]

Frank, I think our notes crossed, did the devices delete OK?
"CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 0111"
"CP DELete DEVice 5ABF UNITADD FE CUNUMBR 0111"
"CP DELete CU 0111"
"CP DELete CHPID 11"

On Wed, Jun 16, 2010 at 8:19 AM, Frank M. Ramaekers
 wrote:
> CP DELete CU 0111
>
> HCPCCO6806E Dynamic I/O change request for control unit failed with
> return code 010B
> Ready(06806); T=0.01/0.01 07:18:33
>
>
> Hmmmdon't think I'm getting any further...but thanks for your
> helpguess I'll have to ask IBM.
>
> Thanks,
>
> Frank M. Ramaekers Jr.
>
>
>
> -Original Message-
> From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On
> Behalf Of Gregg
> Sent: Wednesday, June 16, 2010 5:32 AM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: Dynamic I/O question
>
> ok, now I've had almost enough coffee
>
>> "CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 0111"
> "CP DELete DEVice 5ABF UNITADD FE CUNUMBR 0111"
>> "CP DELete CU 0111"
>> "CP DELete CHPID 11"
>
> --
> Gregg Reed
> "No Plan, survives execution"
>
> _
> This message contains information which is privileged and confidential and is 
> solely for the use of the
> intended recipient. If you are not the intended recipient, be aware that any 
> review, disclosure,
> copying, distribution, or use of the contents of this message is strictly 
> prohibited. If you have
> received this in error, please destroy it immediately and notify us at 
> privacy...@ailife.com.
>



-- 
Gregg Reed
"No Plan, survives execution"

Re: Dynamic I/O question

[Gregg]

Mine does, p334 v5.4
CUNUMBR should be 0!!!

On Wed, Jun 16, 2010 at 8:14 AM, Frank M. Ramaekers
wrote:

>   CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR
> 011
>
> HCPCCO6806E Dynamic I/O change request for device failed with return code
> 010E
>
> Ready(06806); T=0.01/0.03
> 07:13:13
>
>
>
> …and my doc’s don’t have a 010E (010D and 010F, but no 010E).
>
>
>
>
>
> Frank M. Ramaekers Jr.
>
>
>
>
>  --
>
> *From:* The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] *On
> Behalf Of *Gregg
> *Sent:* Wednesday, June 16, 2010 2:22 AM
>
> *To:* IBMVM@LISTSERV.UARK.EDU
> *Subject:* Re: Dynamic I/O question
>
>
>
>
>
> >On Tue, Jun 15, 2010 at 2:08 PM, Frank M. Ramaekers <
> framaek...@ailife.com> wrote:
>
> >What am I missing?
>
>
>
> Return code 10B on the CP DELete CU indicates there are "one or more I/O
> devices defined to it"
>
>
>
> "CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 011"
> "CP DELete CU 0111"
> "CP DELete CHPID 11"
>
> All the above may need to be appended with "CSS n" if multiple LCSS but
> from the examples so far, there are not, or there is only CSS 0.
>
>
>
> --
> Gregg Reed
> "No Plan, survives execution"
> _ This message contains
> information which is privileged and confidential and is solely for the use
> of the intended recipient. If you are not the intended recipient, be aware
> that any review, disclosure, copying, distribution, or use of the contents
> of this message is strictly prohibited. If you have received this in error,
> please destroy it immediately and notify us at privacy...@ailife.com.
>



-- 
Gregg Reed
"No Plan, survives execution"

Re: Dynamic I/O question

[Frank M. Ramaekers]

CP DELete CU 0111

HCPCCO6806E Dynamic I/O change request for control unit failed with
return code 010B
Ready(06806); T=0.01/0.01 07:18:33

 
Hmmmdon't think I'm getting any further...but thanks for your
helpguess I'll have to ask IBM.

Thanks,
 
Frank M. Ramaekers Jr.
 
 

-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On
Behalf Of Gregg
Sent: Wednesday, June 16, 2010 5:32 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Dynamic I/O question

ok, now I've had almost enough coffee

> "CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 0111"
"CP DELete DEVice 5ABF UNITADD FE CUNUMBR 0111"
> "CP DELete CU 0111"
> "CP DELete CHPID 11"

-- 
Gregg Reed
"No Plan, survives execution"

_
This message contains information which is privileged and confidential and is 
solely for the use of the
intended recipient. If you are not the intended recipient, be aware that any 
review, disclosure,
copying, distribution, or use of the contents of this message is strictly 
prohibited. If you have
received this in error, please destroy it immediately and notify us at 
privacy...@ailife.com.

Re: Dynamic I/O question

[Frank M. Ramaekers]

CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 011


HCPCCO6806E Dynamic I/O change request for device failed with return
code 010E

Ready(06806); T=0.01/0.03 07:13:13


 

...and my doc's don't have a 010E (010D and 010F, but no 010E).

 

 

Frank M. Ramaekers Jr.

 

 



From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On
Behalf Of Gregg
Sent: Wednesday, June 16, 2010 2:22 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Dynamic I/O question

 

 

>On Tue, Jun 15, 2010 at 2:08 PM, Frank M. Ramaekers
 wrote:

>What am I missing?

 

Return code 10B on the CP DELete CU indicates there are "one or more I/O
devices defined to it"

 

"CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 011" 
"CP DELete CU 0111" 
"CP DELete CHPID 11"

All the above may need to be appended with "CSS n" if multiple LCSS but
from the examples so far, there are not, or there is only CSS 0.

 

-- 
Gregg Reed 
"No Plan, survives execution"


_
This message contains information which is privileged and confidential and is 
solely for the use of the
intended recipient. If you are not the intended recipient, be aware that any 
review, disclosure,
copying, distribution, or use of the contents of this message is strictly 
prohibited. If you have
received this in error, please destroy it immediately and notify us at 
privacy...@ailife.com.

Re: Dynamic I/O question

[Gregg]

ok, now I've had almost enough coffee

> "CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 0111"
"CP DELete DEVice 5ABF UNITADD FE CUNUMBR 0111"
> "CP DELete CU 0111"
> "CP DELete CHPID 11"

-- 
Gregg Reed
"No Plan, survives execution"

Re: Dynamic I/O question

[Gregg]

"CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 0111"
need mo coffee..

On Wed, Jun 16, 2010 at 3:22 AM, Gregg  wrote:
>
>
>>On Tue, Jun 15, 2010 at 2:08 PM, Frank M. Ramaekers 
>> wrote:
>>What am I missing?
>
> Return code 10B on the CP DELete CU indicates there are "one or more I/O
> devices defined to it"
>
> "CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 011"
> "CP DELete CU 0111"
> "CP DELete CHPID 11"
> All the above may need to be appended with "CSS n" if multiple LCSS but from
> the examples so far, there are not, or there is only CSS 0.
>
> --
> Gregg Reed
> "No Plan, survives execution"
>



-- 
Gregg Reed
"No Plan, survives execution"

Re: Dynamic I/O question

[Gregg]

>On Tue, Jun 15, 2010 at 2:08 PM, Frank M. Ramaekers 
>wrote:
>What am I missing?

Return code 10B on the CP DELete CU indicates there are "one or more I/O
devices defined to it"

"CP DELete DEVice 5AB0-5ABB UNITADD 00 CUNUMBR 011"
"CP DELete CU 0111"
"CP DELete CHPID 11"
All the above may need to be appended with "CSS n" if multiple LCSS but from
the examples so far, there are not, or there is only CSS 0.

-- 
Gregg Reed
"No Plan, survives execution"