OS/390 2.10 under z/VM V6 on z196 or z10 as a guest
Hi, Someone has running this environment or similar to this: HW: z196 or z10 SW: z/VM V6 and under this running a OS/390 2.10 with CICS 2.2 + DB2 V7. If yes, os/390 is running in 31 or 64 bits? -- *Regards Jose Munoz Senior IT Consultant* *GBM - Kuwait** skype: jmunoz61*
Re: Question about SSL Service
Well, I've been through the instructions in the link that Jim provided, but I still haven't been able to get SSL to start up. I'm trying to set things up with a single-server, as opposed to the new SSL Pool option. I'm going provide my configuration in the hope that a mistake might stand out to the list. SYSTEM DTCPARMS: :nick.TCPIP:type.server :class.stack :attach.2D18-2D1A :nick.TCPIP:type.server :class.stack :attach.06EC-06EE :nick.FTP :type.class :name.FTP daemon :command.SRVRFTP :runtime.PASCAL :diskwarn.YES :anonymous.YES :nick.SSLSERV :type.server :class.ssl :stack.TCPIP :name.SSL daemon :command.VMSSL :runtime.C :diskwarn.YES :Admin_ID_list.TCPMAINT GSKADMIN :memory.256M :Mixedcasparms.YES :vmlink. .DIR VMSYS:TCPMAINT.SSLPOOL_SSL . A FORCERW :mount. /../VMBFS:VMSYS:ROOT/ / , /../VMBFS:VMSYS:SSLSERV/ /tmp , /../VMBFS:VMSYS:GSKSSLDB/ /etc/gskadm :parms.KEYfile /etc/gskadm/Database.kdb :nick.SSLDCSSM :type.server :class.ssl_dcss_agent :stack.TCPIP :for.SSLSERV :nick.TCPIP:type.server :class.stack :DCSS_Parms.DEFAULT PROFILE TCPIP: SMALLDATABUFFERPOOLSIZE 2048 ASSORTEDPARMS PROXYARP ENDASSORTEDPARMS OBEY OPERATOR TCPMAINT MAINT MPROUTE DHCPD REXECD SNMPD SNMPQE LDAPSRV ENDOBEY AUTOLOG FTPSERVE 0 ; FTP Server SSLSERV 0 ; SSL Server ENDAUTOLOG INFORM OPERATOR TCPMAINT ENDINFORM SSLSERVERID SSLSERV TIMEOUT 30 SSLLIMITS MAXSESSIONS 3000 MAXPERSSLSERVER 600 INTERNALCLIENTPARMS TLSLABEL ENTSYSVM PORT 23 PORT 992 SECURECONNECTION PREFERRED ENDINTERNALCLIENTPARMS USER DIRECT entries: USER SSLSERV SSLSERV 256M 2G G INCLUDE TCPCMSU POSIXINFO UID 7 GNAME security IUCV ALLOW OPTION ACCT MAXCONN 1024 QUICKDSP SVMSTAT APPLMON NAMESAVE TCPIP SHARE RELATIVE 3000 LINK 5VMTCP40 491 491 RR LINK 5VMTCP40 492 492 RR LINK TCPMAINT 591 591 RR LINK TCPMAINT 592 592 RR LINK TCPMAINT 198 198 RR MDISK 191 3390 9021 001 540RES MR RSSLSERV WSSLSERV MSSLSERV USER SSLDCSSM LBYONLY 32M 64M GE INCLUDE TCPCMSU OPTION QUICKDSP SVMSTAT LOGONBY TCPMAINT GSKADMIN NAMESAVE TCPIP LINK 5VMTCP40 0491 0491 RR LINK 5VMTCP40 0492 0492 RR LINK TCPMAINT 0591 0591 RR LINK TCPMAINT 0592 0592 RR LINK TCPMAINT 0198 0198 RR MDISK 0191 3390 09086 00010 540RES MR READ WRITE MULTI The issue continues to be the following error when TCPIP starts: DMSACR1184E Directory VMSYS:TCPMAINT.SSLPOOL_SSL not found or you are not authorized for it DTCRUN1001E VMLINK .DIR VMSYS:TCPMAINT.SSLPOOL_SSL . A FORCERW failed with return code 2100 Thanks, Dave On Tue, 2010-11-23 at 10:57 -0500, James Poirier wrote: Dave, The following link describes the steps you need to do in addition to what the SSLPOOL PLAN option describes. http://www.vm.ibm.com/related/tcpip/tcspeins.html Jim P. On 11/23/10 10:46 AM, Dave Keeton dave.kee...@state.or.us wrote: Thanks, Mike. I tried to restart using that option, but it complained that a $RESTART file was not found. I was able to run service again like last time, just using SERVICE ALL and it appeared to complete successfully. My problem now is deciphering exactly WHAT needs to be changed in SSL to get it working again. I ran SSLPOOL with the PLAN option and got a list of changes that needed to be made - made them, but I still get errors when TCPIP starts: DTCRUN1022I Console log will be sent to default owner ID: TCPMAINT DMSACR1184E Directory VMSYS:TCPMAINT.SSLPOOL_SSL not found or you are not authorized for it DTCRUN1001E VMLINK .DIR VMSYS:TCPMAINT.SSLPOOL_SSL . A FORCERW failed with return code 2100 DTCRUN1099E Server not started - correct problem and retry I even went so far as to roll through a refresh of the BFS filespaces found here: http://www.vm.ibm.com/related/tcpip/tcsslini.html Dave On Mon, 2010-11-22 at 16:57 -0600, Mike Walter wrote: Dave, Issue: HELP VMSES SERVICE then look for the RESTART doc and give it a try. Trying=Learning. :-) (Sometimes the Trying=Learning hard way, but this should not be one of those cases) Mike Walter Aon Corporation The opinions expressed herein are mine alone, not my
Re: The old VM/ESA CMS GUI - Does it still live?
-Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Mark Post Sent: Tuesday, November 23, 2010 2:30 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: The old VM/ESA CMS GUI - Does it still live? On 11/23/2010 at 10:19 AM, George Henke/NYLIC george_he...@newyorklife.com wrote: Please tell ur laughing friends that GUI, *point and click*, is for people who can't type. If you really believe that, then I would like to hear your reaction after giving up your 3270 emulator and doing all your work from a 2714. Mark Post You still type in your 3270 emulator, you still have to know what you're doing. GUI's hide that from you Doug This communication is for informational purposes only. It is not intended as an offer or solicitation for the purchase or sale of any financial instrument or as an official confirmation of any transaction. All market prices, data and other information are not warranted as to completeness or accuracy and are subject to change without notice. Any comments or statements made herein do not necessarily reflect those of JPMorgan Chase Co., its subsidiaries and affiliates. This transmission may contain information that is privileged, confidential, legally privileged, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. Although this transmission and any attachments are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that it is virus free and no responsibility is accepted by JPMorgan Chase Co., its subsidiaries and affiliates, as applicable, for any loss or damage arising in any way from its use. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. Please refer to http://www.jpmorgan.com/pages/disclosures for disclosures relating to European legal entities.
IBM z/196 and AS/400
This being a pseudo Friday in the USA due to Thanksgiving holidays Does anyone have any experience with the AS/400 support in the z/196 box? Yep, I know it is a separate processor/memory and connected somehow, in some sort of internal networkbut.. Can we share devices, like we do between LPARs. Or do we have to have dedicated ficon/fcp connections? Can we share tape drives? Can we share printers? We have a site, that has an AS/400. And, of course, we are mainframe (z/890, z/VM, soon to upgrade to z/VSE, and zLinux). And we have been looking at upgrading the mainframe, just as a cost savings. But, as we are under budget cuts, cost savings are out G. Cost money to save money. We need to spend less money this budget year, and multi-year agreements are out. Really makes it hard to save. I'm thinking about the idea of combining datacenters. The people will all remain as we still need the AS/400 Operations and Programming staff. Operations would move here. Programming can stay there, remotely. Couldn't close down their machine room as all their servers are there. So the question would really be... Cost savings in hardware (processors). Cost savings in reduction of duplicate devices (tape drives, printers). Cost savings in software (z/VSE of course. Is there any for the AS/400 software?) So is there a real, bang for the buck, for an existing AS/400 shop to be combined into a small, z shop? Of course, we still have no money to do anything...but it may be an interesting discussion. Tom Duerbusch THD Consulting
Re: Question about SSL Service
The most difficult problems to diagnose are often those that just look *SO* correct, but contain a wee typo. I don't run the SSL server (yet), so I can't say for sure if this is the cause or not, but *could* it be: :Mixedcasparms.YES should be :Mixedcaseparms.YES _ Potentially, that could prevent the next mixed statements from being processed properly: :mount. /../VMBFS:VMSYS:ROOT/ / , /../VMBFS:VMSYS:SSLSERV/ /tmp , /../VMBFS:VMSYS:GSKSSLDB/ /etc/gskadm :parms.KEYfile /etc/gskadm/Database.kdb At least it's worth a quick test. Mike Walter Aon Corporation The opinions expressed herein are mine alone, not my employer's. Dave Keeton dave.kee...@state.or.us Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 11/24/2010 10:49 AM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: Question about SSL Service Well, I've been through the instructions in the link that Jim provided, but I still haven't been able to get SSL to start up. I'm trying to set things up with a single-server, as opposed to the new SSL Pool option. I'm going provide my configuration in the hope that a mistake might stand out to the list. SYSTEM DTCPARMS: :nick.TCPIP:type.server :class.stack :attach.2D18-2D1A :nick.TCPIP:type.server :class.stack :attach.06EC-06EE :nick.FTP :type.class :name.FTP daemon :command.SRVRFTP :runtime.PASCAL :diskwarn.YES :anonymous.YES :nick.SSLSERV :type.server :class.ssl :stack.TCPIP :name.SSL daemon :command.VMSSL :runtime.C :diskwarn.YES :Admin_ID_list.TCPMAINT GSKADMIN :memory.256M :Mixedcasparms.YES :vmlink. .DIR VMSYS:TCPMAINT.SSLPOOL_SSL . A FORCERW :mount. /../VMBFS:VMSYS:ROOT/ / , /../VMBFS:VMSYS:SSLSERV/ /tmp , /../VMBFS:VMSYS:GSKSSLDB/ /etc/gskadm :parms.KEYfile /etc/gskadm/Database.kdb :nick.SSLDCSSM :type.server :class.ssl_dcss_agent :stack.TCPIP :for.SSLSERV :nick.TCPIP:type.server :class.stack :DCSS_Parms.DEFAULT PROFILE TCPIP: SMALLDATABUFFERPOOLSIZE 2048 ASSORTEDPARMS PROXYARP ENDASSORTEDPARMS OBEY OPERATOR TCPMAINT MAINT MPROUTE DHCPD REXECD SNMPD SNMPQE LDAPSRV ENDOBEY AUTOLOG FTPSERVE 0 ; FTP Server SSLSERV 0 ; SSL Server ENDAUTOLOG INFORM OPERATOR TCPMAINT ENDINFORM SSLSERVERID SSLSERV TIMEOUT 30 SSLLIMITS MAXSESSIONS 3000 MAXPERSSLSERVER 600 INTERNALCLIENTPARMS TLSLABEL ENTSYSVM PORT 23 PORT 992 SECURECONNECTION PREFERRED ENDINTERNALCLIENTPARMS USER DIRECT entries: USER SSLSERV SSLSERV 256M 2G G INCLUDE TCPCMSU POSIXINFO UID 7 GNAME security IUCV ALLOW OPTION ACCT MAXCONN 1024 QUICKDSP SVMSTAT APPLMON NAMESAVE TCPIP SHARE RELATIVE 3000 LINK 5VMTCP40 491 491 RR LINK 5VMTCP40 492 492 RR LINK TCPMAINT 591 591 RR LINK TCPMAINT 592 592 RR LINK TCPMAINT 198 198 RR MDISK 191 3390 9021 001 540RES MR RSSLSERV WSSLSERV MSSLSERV USER SSLDCSSM LBYONLY 32M 64M GE INCLUDE TCPCMSU OPTION QUICKDSP SVMSTAT LOGONBY TCPMAINT GSKADMIN NAMESAVE TCPIP LINK 5VMTCP40 0491 0491 RR LINK 5VMTCP40 0492 0492 RR LINK TCPMAINT 0591 0591 RR LINK TCPMAINT 0592 0592 RR LINK TCPMAINT 0198 0198 RR MDISK 0191 3390 09086 00010 540RES MR READ WRITE MULTI The issue continues to be the following error when TCPIP starts: DMSACR1184E Directory VMSYS:TCPMAINT.SSLPOOL_SSL not found or you are not authorized for it DTCRUN1001E VMLINK .DIR VMSYS:TCPMAINT.SSLPOOL_SSL . A FORCERW failed with return code 2100 Thanks, Dave On Tue, 2010-11-23 at 10:57 -0500, James Poirier wrote: Dave, The following link describes the steps you need to do in addition to what the SSLPOOL PLAN option describes. http://www.vm.ibm.com/related/tcpip/tcspeins.html Jim P. On 11/23/10 10:46 AM, Dave Keeton dave.kee...@state.or.us wrote: Thanks, Mike. I tried to restart using that option, but it complained that a $RESTART file was not found. I was able to run service again like last time, just using SERVICE ALL and it appeared to complete successfully. My problem now is deciphering exactly WHAT needs to be changed in SSL to get it working again. I ran SSLPOOL with the PLAN option and got a list of changes that needed to be made - made them, but I still get errors when TCPIP starts: DTCRUN1022I Console log will be sent to default owner ID: TCPMAINT DMSACR1184E Directory VMSYS:TCPMAINT.SSLPOOL_SSL not found or you are not authorized for it DTCRUN1001E VMLINK .DIR VMSYS:TCPMAINT.SSLPOOL_SSL . A FORCERW failed with return code 2100 DTCRUN1099E Server not started -
Re: Question about SSL Service
That's a good catch, Mike! I did fat-finger that entry... g. Alas, after fixing it, the problem remains... On Wed, 2010-11-24 at 11:01 -0600, Mike Walter wrote: The most difficult problems to diagnose are often those that just look *SO* correct, but contain a wee typo. I don't run the SSL server (yet), so I can't say for sure if this is the cause or not, but *could* it be: :Mixedcasparms.YES should be :Mixedcaseparms.YES _ Potentially, that could prevent the next mixed statements from being processed properly: :mount. /../VMBFS:VMSYS:ROOT/ / , /../VMBFS:VMSYS:SSLSERV/ /tmp , /../VMBFS:VMSYS:GSKSSLDB/ /etc/gskadm :parms.KEYfile /etc/gskadm/Database.kdb At least it's worth a quick test. Mike Walter Aon Corporation The opinions expressed herein are mine alone, not my employer's. Dave Keeton dave.kee...@state.or.us Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 11/24/2010 10:49 AM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: Question about SSL Service Well, I've been through the instructions in the link that Jim provided, but I still haven't been able to get SSL to start up. I'm trying to set things up with a single-server, as opposed to the new SSL Pool option. I'm going provide my configuration in the hope that a mistake might stand out to the list. SYSTEM DTCPARMS: :nick.TCPIP:type.server :class.stack :attach.2D18-2D1A :nick.TCPIP:type.server :class.stack :attach.06EC-06EE :nick.FTP :type.class :name.FTP daemon :command.SRVRFTP :runtime.PASCAL :diskwarn.YES :anonymous.YES :nick.SSLSERV :type.server :class.ssl :stack.TCPIP :name.SSL daemon :command.VMSSL :runtime.C :diskwarn.YES :Admin_ID_list.TCPMAINT GSKADMIN :memory.256M :Mixedcasparms.YES :vmlink. .DIR VMSYS:TCPMAINT.SSLPOOL_SSL . A FORCERW :mount. /../VMBFS:VMSYS:ROOT/ / , /../VMBFS:VMSYS:SSLSERV/ /tmp , /../VMBFS:VMSYS:GSKSSLDB/ /etc/gskadm :parms.KEYfile /etc/gskadm/Database.kdb :nick.SSLDCSSM :type.server :class.ssl_dcss_agent :stack.TCPIP :for.SSLSERV :nick.TCPIP:type.server :class.stack :DCSS_Parms.DEFAULT PROFILE TCPIP: SMALLDATABUFFERPOOLSIZE 2048 ASSORTEDPARMS PROXYARP ENDASSORTEDPARMS OBEY OPERATOR TCPMAINT MAINT MPROUTE DHCPD REXECD SNMPD SNMPQE LDAPSRV ENDOBEY AUTOLOG FTPSERVE 0 ; FTP Server SSLSERV 0 ; SSL Server ENDAUTOLOG INFORM OPERATOR TCPMAINT ENDINFORM SSLSERVERID SSLSERV TIMEOUT 30 SSLLIMITS MAXSESSIONS 3000 MAXPERSSLSERVER 600 INTERNALCLIENTPARMS TLSLABEL ENTSYSVM PORT 23 PORT 992 SECURECONNECTION PREFERRED ENDINTERNALCLIENTPARMS USER DIRECT entries: USER SSLSERV SSLSERV 256M 2G G INCLUDE TCPCMSU POSIXINFO UID 7 GNAME security IUCV ALLOW OPTION ACCT MAXCONN 1024 QUICKDSP SVMSTAT APPLMON NAMESAVE TCPIP SHARE RELATIVE 3000 LINK 5VMTCP40 491 491 RR LINK 5VMTCP40 492 492 RR LINK TCPMAINT 591 591 RR LINK TCPMAINT 592 592 RR LINK TCPMAINT 198 198 RR MDISK 191 3390 9021 001 540RES MR RSSLSERV WSSLSERV MSSLSERV USER SSLDCSSM LBYONLY 32M 64M GE INCLUDE TCPCMSU OPTION QUICKDSP SVMSTAT LOGONBY TCPMAINT GSKADMIN NAMESAVE TCPIP LINK 5VMTCP40 0491 0491 RR LINK 5VMTCP40 0492 0492 RR LINK TCPMAINT 0591 0591 RR LINK TCPMAINT 0592 0592 RR LINK TCPMAINT 0198 0198 RR MDISK 0191 3390 09086 00010 540RES MR READ WRITE MULTI The issue continues to be the following error when TCPIP starts: DMSACR1184E Directory VMSYS:TCPMAINT.SSLPOOL_SSL not found or you are not authorized for it DTCRUN1001E VMLINK .DIR VMSYS:TCPMAINT.SSLPOOL_SSL . A FORCERW failed with return code 2100 Thanks, Dave On Tue, 2010-11-23 at 10:57 -0500, James Poirier wrote: Dave, The following link describes the steps you need to do in addition to what the SSLPOOL PLAN option describes. http://www.vm.ibm.com/related/tcpip/tcspeins.html Jim P. On 11/23/10 10:46 AM, Dave Keeton dave.kee...@state.or.us wrote: Thanks, Mike. I tried to restart using that option, but it complained that a $RESTART file was not found. I was able to run service again like last time, just using SERVICE ALL and it appeared to complete successfully. My problem now is deciphering exactly WHAT needs to be changed in SSL to get it working again. I ran SSLPOOL with the PLAN option and got a list of changes that needed to be made - made
z/VM 5.1 on z196
The question came up today as to whether z/VM 5.1 will run on a z196. I know there are no 5.1 PTF's available for z196 support. How about z/VM 5.4, will it run WITHOUT the z196 PTF's?... Any guesses? or experiences? Thanks
Re: Question about SSL Service
Dave, Take out the following form :nick.SSLSERV because you are not using the pool concept you don¹t need it and it is creating the problem. :vmlink. .DIR VMSYS:TCPMAINT.SSLPOOL_SSL . A FORCERW Jim P. On 11/24/10 12:08 PM, Dave Keeton dave.kee...@state.or.us wrote: That's a good catch, Mike! I did fat-finger that entry... g. Alas, after fixing it, the problem remains... On Wed, 2010-11-24 at 11:01 -0600, Mike Walter wrote: The most difficult problems to diagnose are often those that just look *SO* correct, but contain a wee typo. I don't run the SSL server (yet), so I can't say for sure if this is the cause or not, but *could* it be: :Mixedcasparms.YES should be :Mixedcaseparms.YES _ Potentially, that could prevent the next mixed statements from being processed properly: :mount. /../VMBFS:VMSYS:ROOT/ / , /../VMBFS:VMSYS:SSLSERV/ /tmp , /../VMBFS:VMSYS:GSKSSLDB/ /etc/gskadm :parms.KEYfile /etc/gskadm/Database.kdb At least it's worth a quick test. Mike Walter Aon Corporation The opinions expressed herein are mine alone, not my employer's. Dave Keeton dave.kee...@state.or.us Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 11/24/2010 10:49 AM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: Question about SSL Service Well, I've been through the instructions in the link that Jim provided, but I still haven't been able to get SSL to start up. I'm trying to set things up with a single-server, as opposed to the new SSL Pool option. I'm going provide my configuration in the hope that a mistake might stand out to the list. SYSTEM DTCPARMS: :nick.TCPIP:type.server :class.stack :attach.2D18-2D1A :nick.TCPIP:type.server :class.stack :attach.06EC-06EE :nick.FTP :type.class :name.FTP daemon :command.SRVRFTP :runtime.PASCAL :diskwarn.YES :anonymous.YES :nick.SSLSERV :type.server :class.ssl :stack.TCPIP :name.SSL daemon :command.VMSSL :runtime.C :diskwarn.YES :Admin_ID_list.TCPMAINT GSKADMIN :memory.256M :Mixedcasparms.YES :vmlink. .DIR VMSYS:TCPMAINT.SSLPOOL_SSL . A FORCERW :mount. /../VMBFS:VMSYS:ROOT/ / , /../VMBFS:VMSYS:SSLSERV/ /tmp , /../VMBFS:VMSYS:GSKSSLDB/ /etc/gskadm :parms.KEYfile /etc/gskadm/Database.kdb :nick.SSLDCSSM :type.server :class.ssl_dcss_agent :stack.TCPIP :for.SSLSERV :nick.TCPIP:type.server :class.stack :DCSS_Parms.DEFAULT PROFILE TCPIP: SMALLDATABUFFERPOOLSIZE 2048 ASSORTEDPARMS PROXYARP ENDASSORTEDPARMS OBEY OPERATOR TCPMAINT MAINT MPROUTE DHCPD REXECD SNMPD SNMPQE LDAPSRV ENDOBEY AUTOLOG FTPSERVE 0 ; FTP Server SSLSERV 0 ; SSL Server ENDAUTOLOG INFORM OPERATOR TCPMAINT ENDINFORM SSLSERVERID SSLSERV TIMEOUT 30 SSLLIMITS MAXSESSIONS 3000 MAXPERSSLSERVER 600 INTERNALCLIENTPARMS TLSLABEL ENTSYSVM PORT 23 PORT 992 SECURECONNECTION PREFERRED ENDINTERNALCLIENTPARMS USER DIRECT entries: USER SSLSERV SSLSERV 256M 2G G INCLUDE TCPCMSU POSIXINFO UID 7 GNAME security IUCV ALLOW OPTION ACCT MAXCONN 1024 QUICKDSP SVMSTAT APPLMON NAMESAVE TCPIP SHARE RELATIVE 3000 LINK 5VMTCP40 491 491 RR LINK 5VMTCP40 492 492 RR LINK TCPMAINT 591 591 RR LINK TCPMAINT 592 592 RR LINK TCPMAINT 198 198 RR MDISK 191 3390 9021 001 540RES MR RSSLSERV WSSLSERV MSSLSERV USER SSLDCSSM LBYONLY 32M 64M GE INCLUDE TCPCMSU OPTION QUICKDSP SVMSTAT LOGONBY TCPMAINT GSKADMIN NAMESAVE TCPIP LINK 5VMTCP40 0491 0491 RR LINK 5VMTCP40 0492 0492 RR LINK TCPMAINT 0591 0591 RR LINK TCPMAINT 0592 0592 RR LINK TCPMAINT 0198 0198 RR MDISK 0191 3390 09086 00010 540RES MR READ WRITE MULTI The issue continues to be the following error when TCPIP starts: DMSACR1184E Directory VMSYS:TCPMAINT.SSLPOOL_SSL not found or you are not authorized for it DTCRUN1001E VMLINK .DIR VMSYS:TCPMAINT.SSLPOOL_SSL . A FORCERW failed with return code 2100 Thanks, Dave On Tue, 2010-11-23 at 10:57 -0500, James Poirier wrote: Dave, The following link describes the steps you need to do in addition to what the SSLPOOL PLAN option describes. http://www.vm.ibm.com/related/tcpip/tcspeins.html Jim P. On 11/23/10 10:46 AM, Dave Keeton dave.kee...@state.or.us wrote: Thanks, Mike. I tried to restart using that option, but it complained that a $RESTART file was not found. I was able to run service again
Re: Question about SSL Service
Dave, You stated you are receiving the following: -- The issue continues to be the following error when TCPIP starts: DMSACR1184E Directory VMSYS:TCPMAINT.SSLPOOL_SSL not found or you are not authorized for it DTCRUN1001E VMLINK .DIR VMSYS:TCPMAINT.SSLPOOL_SSL . A FORCERW failed with return code 2100 -- Does that directory exist? Is your SSLSERV userid authorized for it? You can find out by doing the following: 1. LOGON TCPMAINT 2. IPL CMS 3. DIRLIST VMSYS:. (note both the colon and the period after VMSYS) 4. Look for SSLPOOL_SSL 5. If it exists, issue the command QUERY AUTH against the directory If it does not exist, then CREATE DIR .SSLPOOL_SSL 6. Ensure SSLSERV has Read/Write/NewRead/NewWrite authority to the directory If SSLSERV is not authorized then issue the command GRANT AUTH VMSYS:TCPMAINT.SSLPOOL_SSL TO SSLSERV ( READ WRITE NEWREAD NEWWRITE If you still have problems after all this, please open a problem record with z/VM TCP/IP. Mike Donovan
Re: The old VM/ESA CMS GUI - Does it still live?
That is an assumption or opinion, not necessarily a fact. For example, my wife may not know the operating system line mode commands, but she certainly knows the accounting systems that she uses via a GUI interface. In fact, the GUI represents an increase in productivity. I would suggest that if you do not know what you are doing, then you should not use either interface; if you do know, you should use whatever interface you choose. Rule Number 1 (Know what you are doing) applies. Regards, Richard Schuh You still type in your 3270 emulator, you still have to know what you're doing. GUI's hide that from you Doug
Re: Question about SSL Service
Dave, I also noticed that in your PROFILE TCPIP you need to comment out the autolog entry for SSLSERV as this function will be done by SSLDCSSM. Jim P. On 11/24/10 12:35 PM, James Poirier james.poir...@doit.nh.gov wrote: Dave, Take out the following form :nick.SSLSERV because you are not using the pool concept you don¹t need it and it is creating the problem. :vmlink. .DIR VMSYS:TCPMAINT.SSLPOOL_SSL . A FORCERW Jim P. On 11/24/10 12:08 PM, Dave Keeton dave.kee...@state.or.us wrote: That's a good catch, Mike! I did fat-finger that entry... g. Alas, after fixing it, the problem remains... On Wed, 2010-11-24 at 11:01 -0600, Mike Walter wrote: The most difficult problems to diagnose are often those that just look *SO* correct, but contain a wee typo. I don't run the SSL server (yet), so I can't say for sure if this is the cause or not, but *could* it be: :Mixedcasparms.YES should be :Mixedcaseparms.YES _ Potentially, that could prevent the next mixed statements from being processed properly: :mount. /../VMBFS:VMSYS:ROOT/ / , /../VMBFS:VMSYS:SSLSERV/ /tmp , /../VMBFS:VMSYS:GSKSSLDB/ /etc/gskadm :parms.KEYfile /etc/gskadm/Database.kdb At least it's worth a quick test. Mike Walter Aon Corporation The opinions expressed herein are mine alone, not my employer's. Dave Keeton dave.kee...@state.or.us Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 11/24/2010 10:49 AM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: Question about SSL Service Well, I've been through the instructions in the link that Jim provided, but I still haven't been able to get SSL to start up. I'm trying to set things up with a single-server, as opposed to the new SSL Pool option. I'm going provide my configuration in the hope that a mistake might stand out to the list. SYSTEM DTCPARMS: :nick.TCPIP:type.server :class.stack :attach.2D18-2D1A :nick.TCPIP:type.server :class.stack :attach.06EC-06EE :nick.FTP :type.class :name.FTP daemon :command.SRVRFTP :runtime.PASCAL :diskwarn.YES :anonymous.YES :nick.SSLSERV :type.server :class.ssl :stack.TCPIP :name.SSL daemon :command.VMSSL :runtime.C :diskwarn.YES :Admin_ID_list.TCPMAINT GSKADMIN :memory.256M :Mixedcasparms.YES :vmlink. .DIR VMSYS:TCPMAINT.SSLPOOL_SSL . A FORCERW :mount. /../VMBFS:VMSYS:ROOT/ / , /../VMBFS:VMSYS:SSLSERV/ /tmp , /../VMBFS:VMSYS:GSKSSLDB/ /etc/gskadm :parms.KEYfile /etc/gskadm/Database.kdb :nick.SSLDCSSM :type.server :class.ssl_dcss_agent :stack.TCPIP :for.SSLSERV :nick.TCPIP:type.server :class.stack :DCSS_Parms.DEFAULT PROFILE TCPIP: SMALLDATABUFFERPOOLSIZE 2048 ASSORTEDPARMS PROXYARP ENDASSORTEDPARMS OBEY OPERATOR TCPMAINT MAINT MPROUTE DHCPD REXECD SNMPD SNMPQE LDAPSRV ENDOBEY AUTOLOG FTPSERVE 0 ; FTP Server SSLSERV 0 ; SSL Server ENDAUTOLOG INFORM OPERATOR TCPMAINT ENDINFORM SSLSERVERID SSLSERV TIMEOUT 30 SSLLIMITS MAXSESSIONS 3000 MAXPERSSLSERVER 600 INTERNALCLIENTPARMS TLSLABEL ENTSYSVM PORT 23 PORT 992 SECURECONNECTION PREFERRED ENDINTERNALCLIENTPARMS USER DIRECT entries: USER SSLSERV SSLSERV 256M 2G G INCLUDE TCPCMSU POSIXINFO UID 7 GNAME security IUCV ALLOW OPTION ACCT MAXCONN 1024 QUICKDSP SVMSTAT APPLMON NAMESAVE TCPIP SHARE RELATIVE 3000 LINK 5VMTCP40 491 491 RR LINK 5VMTCP40 492 492 RR LINK TCPMAINT 591 591 RR LINK TCPMAINT 592 592 RR LINK TCPMAINT 198 198 RR MDISK 191 3390 9021 001 540RES MR RSSLSERV WSSLSERV MSSLSERV USER SSLDCSSM LBYONLY 32M 64M GE INCLUDE TCPCMSU OPTION QUICKDSP SVMSTAT LOGONBY TCPMAINT GSKADMIN NAMESAVE TCPIP LINK 5VMTCP40 0491 0491 RR LINK 5VMTCP40 0492 0492 RR LINK TCPMAINT 0591 0591 RR LINK TCPMAINT 0592 0592 RR LINK TCPMAINT 0198 0198 RR MDISK 0191 3390 09086 00010 540RES MR READ WRITE MULTI The issue continues to be the following error when TCPIP starts: DMSACR1184E Directory VMSYS:TCPMAINT.SSLPOOL_SSL not found or you are not authorized for it DTCRUN1001E VMLINK .DIR VMSYS:TCPMAINT.SSLPOOL_SSL . A FORCERW failed with return code 2100 Thanks, Dave On Tue, 2010-11-23 at 10:57 -0500, James Poirier wrote: Dave, The following link describes the steps you need to do in addition to what the SSLPOOL PLAN option describes.
Classes for zLinux administration under zVM
Are there any classes for zLinux administration under zVM ? If so, who/where are they ?
Re: Classes for zLinux administration under zVM
Daniel, you can find LINUX education here: http://www.vm.ibm.com/education/ both IBM and non IBM Bill Munson Sr. z/VM Systems Programmer Brown Brothers Harriman CO. 525 Washington Blvd. Jersey City, NJ 07310 201-418-7588 From: Daniel Allen dal...@serena.com To: IBMVM@LISTSERV.UARK.EDU Date: 11/24/2010 01:21 PM Subject:Classes for zLinux administration under zVM Sent by:The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU Are there any classes for zLinux administration under zVM ? If so, who/where are they ? *** IMPORTANT NOTE*-- The opinions expressed in this message and/or any attachments are those of the author and not necessarily those of Brown Brothers Harriman Co., its subsidiaries and affiliates (BBH). There is no guarantee that this message is either private or confidential, and it may have been altered by unauthorized sources without your or our knowledge. Nothing in the message is capable or intended to create any legally binding obligations on either party and it is not intended to provide legal advice. BBH accepts no responsibility for loss or damage from its use, including damage from virus.
Re: The old VM/ESA CMS GUI - Does it still live?
I think we can safely assume that since this discussion was about VM CMS that we're talking operating systems and interfaces to those OS's not applications as is your wife's case GUI's have their place, I personally do not believe that place is in an OS to manage it or it's subsystems where understanding what happens is very important. I know DNS admins who can't manage their servers without GUI's. That to me is ridiculous and are admins who need to understand more about what they manage. Are they more productive maybe, are they dangerous, I leave that to you Think of this, what happens to those admins if their gui breaks and all they have is command line. William 'Doug' Carroll -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Schuh, Richard Sent: Wednesday, November 24, 2010 12:54 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: The old VM/ESA CMS GUI - Does it still live? That is an assumption or opinion, not necessarily a fact. For example, my wife may not know the operating system line mode commands, but she certainly knows the accounting systems that she uses via a GUI interface. In fact, the GUI represents an increase in productivity. I would suggest that if you do not know what you are doing, then you should not use either interface; if you do know, you should use whatever interface you choose. Rule Number 1 (Know what you are doing) applies. Regards, Richard Schuh You still type in your 3270 emulator, you still have to know what you're doing. GUI's hide that from you Doug This communication is for informational purposes only. It is not intended as an offer or solicitation for the purchase or sale of any financial instrument or as an official confirmation of any transaction. All market prices, data and other information are not warranted as to completeness or accuracy and are subject to change without notice. Any comments or statements made herein do not necessarily reflect those of JPMorgan Chase Co., its subsidiaries and affiliates. This transmission may contain information that is privileged, confidential, legally privileged, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. Although this transmission and any attachments are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that it is virus free and no responsibility is accepted by JPMorgan Chase Co., its subsidiaries and affiliates, as applicable, for any loss or damage arising in any way from its use. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. Please refer to http://www.jpmorgan.com/pages/disclosures for disclosures relating to European legal entities.
Re: The old VM/ESA CMS GUI - Does it still live?
I have multiple installations running Linux under z/VM where the z/VM sysprogs are very overcommitted. Allowing them to offload work that CAN be done by someone else makes them much more productive - as long as the work assigned is controlled by an authorization mechanism. Most of the work, even DNS admin functions are janitor work, or maybe even clerical (or management), why utilize a skilled person for those functions? But yes, every installation needs access to someone with skills, and I'd much rather have 10 new installations, sharing one sysprog than zero with great skills... William D Carroll wrote: I think we can safely assume that since this discussion was about VM CMS that we're talking operating systems and interfaces to those OS's not applications as is your wife's case GUI's have their place, I personally do not believe that place is in an OS to manage it or it's subsystems where understanding what happens is very important. I know DNS admins who can't manage their servers without GUI's. That to me is ridiculous and are admins who need to understand more about what they manage. Are they more productive maybe, are they dangerous, I leave that to you Think of this, what happens to those admins if their gui breaks and all they have is command line. William 'Doug' Carroll -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Schuh, Richard Sent: Wednesday, November 24, 2010 12:54 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: The old VM/ESA CMS GUI - Does it still live? That is an assumption or opinion, not necessarily a fact. For example, my wife may not know the operating system line mode commands, but she certainly knows the accounting systems that she uses via a GUI interface. In fact, the GUI represents an increase in productivity. I would suggest that if you do not know what you are doing, then you should not use either interface; if you do know, you should use whatever interface you choose. Rule Number 1 (Know what you are doing) applies. Regards, Richard Schuh You still type in your 3270 emulator, you still have to know what you're doing. GUI's hide that from you Doug This communication is for informational purposes only. It is not intended as an offer or solicitation for the purchase or sale of any financial instrument or as an official confirmation of any transaction. All market prices, data and other information are not warranted as to completeness or accuracy and are subject to change without notice. Any comments or statements made herein do not necessarily reflect those of JPMorgan Chase Co., its subsidiaries and affiliates. This transmission may contain information that is privileged, confidential, legally privileged, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. Although this transmission and any attachments are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that it is virus free and no responsibility is accepted by JPMorgan Chase Co., its subsidiaries and affiliates, as applicable, for any loss or damage arising in any way from its use. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. Please refer to http://www.jpmorgan.com/pages/disclosures for disclosures relating to European legal entities.
Re: Question about SSL Service
Mike, thanks for the assistance. In going through your instructions, I see that in my initial attempts at this I *DID* attempt to set things up using an SSL Pool. Here's what the output from the command you had me run says: Directory = VMSYS:TCPMAINT.SSLPOOL_SSL Grantee R W NR NW TCPMAINT X X X X GSKADMIN X X X X MAINTX X X X SSLSERV X X X X SSL1 X X X X SSL2 X X X X SSL3 X X X X SSL4 X X X X SSL5 X X X X I know the SSL* entries are from a previous attempt. In my own troubleshooting, I found that I can't get SSLDCSSM to start properly if I try logging on. It tries to process TCPRUN, but fails with the following: DTCRUN1005E Required tag :DCSS_Parms. was not found in file(s): SYSTEM DTCPARMS D1, IBM DTCPARMS E1 DTCRUN1099E Server not started - correct problem and retry DTCRUN1019I Server will not be logged off because you are connected I know for a fact that there's a :DCSS_Parms. entry in the DTCPARMS file. :nick.SSLDCSSM :type.server :class.ssl_dcss_agent :stack.TCPIP :for.SSLSERV :DCSS_Parms.DEFAULT I'm assuming that SSLDCSSM is getting started by TCPIP at some point and perhaps this is the missing piece. Dave On Wed, 2010-11-24 at 12:38 -0500, Michael Donovan wrote: Dave, You stated you are receiving the following: -- The issue continues to be the following error when TCPIP starts: DMSACR1184E Directory VMSYS:TCPMAINT.SSLPOOL_SSL not found or you are not authorized for it DTCRUN1001E VMLINK .DIR VMSYS:TCPMAINT.SSLPOOL_SSL . A FORCERW failed with return code 2100 -- Does that directory exist? Is your SSLSERV userid authorized for it? You can find out by doing the following: 1. LOGON TCPMAINT 2. IPL CMS 3. DIRLIST VMSYS:. (note both the colon and the period after VMSYS) 4. Look for SSLPOOL_SSL 5. If it exists, issue the command QUERY AUTH against the directory If it does not exist, then CREATE DIR .SSLPOOL_SSL 6. Ensure SSLSERV has Read/Write/NewRead/NewWrite authority to the directory If SSLSERV is not authorized then issue the command GRANT AUTH VMSYS:TCPMAINT.SSLPOOL_SSL TO SSLSERV ( READ WRITE NEWREAD NEWWRITE If you still have problems after all this, please open a problem record with z/VM TCP/IP. Mike Donovan
Re: Question about SSL Service
Dave, This parm :DCSS_Parms.DEFAULTgoes on :nick.tcpip not on :nick.ssldcssm Jim P. On 11/24/10 2:07 PM, Dave Keeton dave.kee...@state.or.us wrote: :DCSS_Parms.DEFAULT
Re: Classes for zLinux administration under zVM
Hi, Daniel. VM Resources (http://www.vm-resources.com/) offers a set of zLinux courses that I think are very good. They are usually 3 to 5 days in length and include hands-on lab exercises. You can even arrange to have the courses taught on site at your location. Happy Thanksgiving. On 11/24/2010 12:21 PM, Daniel Allen wrote: Are there any classes for zLinux administration under zVM ? If so, who/where are they ? -- Dave Jones V/Soft Software www.vsoft-software.com Houston, TX 281.578.7544
Re: Question about SSL Service
Jim, That is present also. Is it possible that having multiple :DCSS_Parms. entries is a bad thing? On Wed, 2010-11-24 at 14:10 -0500, James Poirier wrote: Dave, This parm :DCSS_Parms.DEFAULTgoes on :nick.tcpip not on :nick.ssldcssm Jim P. On 11/24/10 2:07 PM, Dave Keeton dave.kee...@state.or.us wrote: :DCSS_Parms.DEFAULT -- Dave Keeton Systems Programmer Mainframe Computing Svcs Oregon State Data Center Office: (503) 373-0832
Re: DASD Inventory
If you look at zpro (live system running many linux servers), at vm2.velocitysoftware.com/zpro, sign in with the userid and password provided, go to System status then dasd, gets you our live dasd report. This user is of course restricted, otherwise y'all would be seeing how bad you could hurt us. but click on an address of a device with a few minidisks, gives you an idea of what you can do. Sorry, we don't do z/OS, (but we DO know how...) Ticona, Luis wrote: Good day! Can somebody tell me if there is a good way or tool outhere to help us manage zVM and zOS dasd usage and allocation. Also creating reports and charts. Our shop is constantly growing with Linux under zVM 5.4. Your suggestions will be greatly appreciated. Thank you! *Luis Ticona* Management Information Systems Division 1 Police Plaza New York, NY 10038 ltic...@nypd.org or 646-610-5304 cid:image001.gif@01C911AB.7C344550
Re: Question about SSL Service
Dave, In this case I believe it is. The setup doc for using non pool show it on the nick.tcpip ONLY. Jim P. On 11/24/10 2:20 PM, Dave Keeton dave.kee...@state.or.us wrote: Jim, That is present also. Is it possible that having multiple :DCSS_Parms. entries is a bad thing? On Wed, 2010-11-24 at 14:10 -0500, James Poirier wrote: Dave, This parm :DCSS_Parms.DEFAULTgoes on :nick.tcpip not on :nick.ssldcssm Jim P. On 11/24/10 2:07 PM, Dave Keeton dave.kee...@state.or.us wrote: :DCSS_Parms.DEFAULT
Re: Question about SSL Service
Now it seems to have heartburn with the :For. tag... which is present under the :nick.SSLDCSSM section. DTCRUN1005E Required tag :For. was not found in file(s): SYSTEM DTCPARMS D1, IBM DTCPARMS E1 This log is sent to TCPMAINT immediately after TCPIP's PROFILE EXEC is run. Dave On Wed, 2010-11-24 at 14:18 -0500, James Poirier wrote: Dave, In this case I believe it is. The setup doc for using non pool show it on the nick.tcpip ONLY. Jim P. On 11/24/10 2:20 PM, Dave Keeton dave.kee...@state.or.us wrote: Jim, That is present also. Is it possible that having multiple :DCSS_Parms. entries is a bad thing? On Wed, 2010-11-24 at 14:10 -0500, James Poirier wrote: Dave, This parm :DCSS_Parms.DEFAULTgoes on :nick.tcpip not on :nick.ssldcssm Jim P. On 11/24/10 2:07 PM, Dave Keeton dave.kee...@state.or.us wrote: :DCSS_Parms.DEFAULT -- Dave Keeton Systems Programmer Mainframe Computing Svcs Oregon State Data Center Office: (503) 373-0832
Re: Question about SSL Service
Dave, :nick.sslserventry needs to be in either SYSTEM DTCPARMS or a SSLSERV DTCPARMS Jim P. On 11/24/10 2:34 PM, Dave Keeton dave.kee...@state.or.us wrote: Now it seems to have heartburn with the :For. tag... which is present under the :nick.SSLDCSSM section. DTCRUN1005E Required tag :For. was not found in file(s): SYSTEM DTCPARMS D1, IBM DTCPARMS E1 This log is sent to TCPMAINT immediately after TCPIP's PROFILE EXEC is run. Dave On Wed, 2010-11-24 at 14:18 -0500, James Poirier wrote: Dave, In this case I believe it is. The setup doc for using non pool show it on the nick.tcpip ONLY. Jim P. On 11/24/10 2:20 PM, Dave Keeton dave.kee...@state.or.us wrote: Jim, That is present also. Is it possible that having multiple :DCSS_Parms. entries is a bad thing? On Wed, 2010-11-24 at 14:10 -0500, James Poirier wrote: Dave, This parm :DCSS_Parms.DEFAULTgoes on :nick.tcpip not on :nick.ssldcssm Jim P. On 11/24/10 2:07 PM, Dave Keeton dave.kee...@state.or.us wrote: :DCSS_Parms.DEFAULT
Re: Question about SSL Service
Jim, Here's what I have: :nick.TCPIP:type.server :class.stack :attach.2D18-2D1A :DCSS_Parms.DEFAULT :nick.TCPIP:type.server :class.stack :attach.06EC-06EE :DCSS_Parms.DEFAULT :nick.FTP :type.class :name.FTP daemon :command.SRVRFTP :runtime.PASCAL :diskwarn.YES :anonymous.YES :nick.SSLSERV :type.server :class.ssl :stack.TCPIP :name.SSLSERV daemon :command.VMSSL :runtime.C :diskwarn.YES :Admin_ID_list.TCPMAINT GSKADMIN :memory.256M :Mixedcasparms.YES :mount. /../VMBFS:VMSYS:ROOT/ / , /../VMBFS:VMSYS:SSLSERV/ /tmp , /../VMBFS:VMSYS:GSKSSLDB/ /etc/gskadm :parms.KEYfile /etc/gskadm/Database.kdb :class.SSL_DCSS_AGENT :nick.SSLDCSSM :type.server :class.ssl_dcss_agent :stack.TCPIP :For.SSLSERV On Wed, 2010-11-24 at 14:42 -0500, James Poirier wrote: Dave, :nick.sslserventry needs to be in either SYSTEM DTCPARMS or a SSLSERV DTCPARMS Jim P. On 11/24/10 2:34 PM, Dave Keeton dave.kee...@state.or.us wrote: Now it seems to have heartburn with the :For. tag... which is present under the :nick.SSLDCSSM section. DTCRUN1005E Required tag :For. was not found in file(s): SYSTEM DTCPARMS D1, IBM DTCPARMS E1 This log is sent to TCPMAINT immediately after TCPIP's PROFILE EXEC is run. Dave On Wed, 2010-11-24 at 14:18 -0500, James Poirier wrote: Dave, In this case I believe it is. The setup doc for using non pool show it on the nick.tcpip ONLY. Jim P. On 11/24/10 2:20 PM, Dave Keeton dave.kee...@state.or.us wrote: Jim, That is present also. Is it possible that having multiple :DCSS_Parms. entries is a bad thing? On Wed, 2010-11-24 at 14:10 -0500, James Poirier wrote: Dave, This parm :DCSS_Parms.DEFAULT goes on :nick.tcpip not on :nick.ssldcssm Jim P. On 11/24/10 2:07 PM, Dave Keeton dave.kee...@state.or.us wrote: :DCSS_Parms.DEFAULT -- Dave Keeton Systems Programmer Mainframe Computing Svcs Oregon State Data Center Office: (503) 373-0832
Re: Question about SSL Service
Dave, Are you 100% certain that the DTCPARMS files that the server is accessing as its D-disk and E-disk is the one that you are actually updating? See The DCTPARMS File section in z/VM TCP/IP Planning and Customization for details. I'm using SC24-6125-04, it's on page 39. I prefer to use the nodeid DTCPARMS filename format, so that I have no doubt that it is using *our* file exactly, and not something leftover by an installation, or some mystically, or by some quietly applied service. The nodeid is that which matches the one returned by the CMS command IDENTIFY, which itself reads the 'SYSTEM NETID S' file and matches against the (virtual) CPU serial number in the virtual machine. Mike Walter Aon Corporation The opinions expressed herein are mine alone, not my employer's. Dave Keeton dave.kee...@state.or.us Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 11/24/2010 01:34 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: Question about SSL Service Now it seems to have heartburn with the :For. tag... which is present under the :nick.SSLDCSSM section. DTCRUN1005E Required tag :For. was not found in file(s): SYSTEM DTCPARMS D1, IBM DTCPARMS E1 This log is sent to TCPMAINT immediately after TCPIP's PROFILE EXEC is run. Dave On Wed, 2010-11-24 at 14:18 -0500, James Poirier wrote: Dave, In this case I believe it is. The setup doc for using non pool show it on the nick.tcpip ONLY. Jim P. On 11/24/10 2:20 PM, Dave Keeton dave.kee...@state.or.us wrote: Jim, That is present also. Is it possible that having multiple :DCSS_Parms. entries is a bad thing? On Wed, 2010-11-24 at 14:10 -0500, James Poirier wrote: Dave, This parm :DCSS_Parms.DEFAULTgoes on :nick.tcpip not on :nick.ssldcssm Jim P. On 11/24/10 2:07 PM, Dave Keeton dave.kee...@state.or.us wrote: :DCSS_Parms.DEFAULT -- Dave Keeton Systems Programmer Mainframe Computing Svcs Oregon State Data Center Office: (503) 373-0832 The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited. All messages sent to and from this e-mail address may be monitored as permitted by applicable law and regulations to ensure compliance with our internal policies and to protect our business. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, lost or destroyed, or contain viruses. You are deemed to have accepted these risks if you communicate with us by e-mail.
Re: Question about SSL Service
Mike, Yes, I'm positive 198 is the same for SSLSERV. Here's the output from Q LINKS on SSLSERV: q links 198 TCPMAINT 0198 R/W, DTCVSW1 0198 R/O, DTCVSW2 0198 R/O, SSLDCSSM 0198 R/O TCPIP0198 R/O, SSLSERV 0198 R/O One interesting note; there's actual progress being made here. I can now log on to SSLDCSSM, though I'm not certain if all's well: DTCRUN1022I Console log will be sent to default owner ID: TCPMAINT DTCRUN1040I SSL server cache segment query / definition results: HCPNSD440I Saved segment TCPIP was successfully defined in fileid 0041. HCPNSS440I Saved segment TCPIP was successfully saved in fileid 0041. OWNERID FILE TYPE CL RECS DATE TIME FILENAME FILETYPE ORIGINID *NSS 0041 NSS R 0001 11/24 12:39:22 TCPIPDCSS SSLDCSSM FILE FILENAME FILETYPE MINSIZE BEGPAG ENDPAG TYPE CL #USERS PARMREGS VMGROUP 0041 TCPIPDCSS N/A1 100FF SN R 0 N/A N/A TCPIPNOT IN USE OR AN INVALID NSS/DCSS NAME DTCRUN1021R To cancel SSL DCSS Management Agent startup, type any non-blank character and press ENTER. To continue startup, just press ENTER. DTCRUN1011I Server started at 12:39:30 on 24 Nov 2010 (Wednesday) DTCRUN1011I Running server command: SSLIDCSS DTCRUN1011I No parameters in use DTCSLD2420I Creating shared session cache queue: TCPIP I've tried both methods of naming the files; using the nodeid and the default. The behavior here is the same. Dave On Wed, 2010-11-24 at 14:32 -0600, Mike Walter wrote: Dave, Are you 100% certain that the DTCPARMS files that the server is accessing as its D-disk and E-disk is the one that you are actually updating? See The DCTPARMS File section in z/VM TCP/IP Planning and Customization for details. I'm using SC24-6125-04, it's on page 39. I prefer to use the nodeid DTCPARMS filename format, so that I have no doubt that it is using *our* file exactly, and not something leftover by an installation, or some mystically, or by some quietly applied service. The nodeid is that which matches the one returned by the CMS command IDENTIFY, which itself reads the 'SYSTEM NETID S' file and matches against the (virtual) CPU serial number in the virtual machine. Mike Walter Aon Corporation The opinions expressed herein are mine alone, not my employer's. Dave Keeton dave.kee...@state.or.us Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 11/24/2010 01:34 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: Question about SSL Service Now it seems to have heartburn with the :For. tag... which is present under the :nick.SSLDCSSM section. DTCRUN1005E Required tag :For. was not found in file(s): SYSTEM DTCPARMS D1, IBM DTCPARMS E1 This log is sent to TCPMAINT immediately after TCPIP's PROFILE EXEC is run. Dave On Wed, 2010-11-24 at 14:18 -0500, James Poirier wrote: Dave, In this case I believe it is. The setup doc for using non pool show it on the nick.tcpip ONLY. Jim P. On 11/24/10 2:20 PM, Dave Keeton dave.kee...@state.or.us wrote: Jim, That is present also. Is it possible that having multiple :DCSS_Parms. entries is a bad thing? On Wed, 2010-11-24 at 14:10 -0500, James Poirier wrote: Dave, This parm :DCSS_Parms.DEFAULTgoes on :nick.tcpip not on :nick.ssldcssm Jim P. On 11/24/10 2:07 PM, Dave Keeton dave.kee...@state.or.us wrote: :DCSS_Parms.DEFAULT -- Dave Keeton Systems Programmer Mainframe Computing Svcs Oregon State Data Center Office: (503) 373-0832
Re: IBM z/196 and AS/400
On Wed, Nov 24, 2010 at 11:53 AM, Tom Duerbusch duerbus...@stlouiscity.com wrote: This being a pseudo Friday in the USA due to Thanksgiving holidays Does anyone have any experience with the AS/400 support in the z/196 box? Yep, I know it is a separate processor/memory and connected somehow, in some sort of internal networkbut.. Did I miss something? ISTR that the Power blades supported AIX but not iOS. -- zMan -- I've got a mainframe and I'm not afraid to use it
z/VM 5.1 on z196
The question came up today as to whether z/VM 5.1 will run on a z196. I know there are no 5.1 PTF's available for z196 support. How about z/VM 5.4, will it run WITHOUT the z196 PTF's?... Any guesses? or experiences? As z/VM 5.1 was never tested on a z196 we cannot provide an outlook of how it will behave. However, given the nature of changes made to z/VM 5.4 and 6.1 to support z196, you may encounter unexpected, undesirable side effects. Given upgrading to z/VM 5.4, or better yet 6.1, is straight forward, why not pursue this avenue rather than rely on knowns? Best Regards, Les Geer IBM z/VM and Linux Development
Re: The old VM/ESA CMS GUI - Does it still live?
And then you have someone like me who finds typing to be burdensome due to a physical condition. If I had a GUI to manage the operating system, I would welcome it. One point I was making is that saying or implying that because someone prefers a GUI, they do not know what they are doing is a generality that has exceptions and is offensive. One can know how to do something using primitives and simply choose an easier method. It happens all of the time. It is why we have tools like Rexx and CMS Pipelines, for instance. I am familiar with machine instructions, but I do not write programs using them. The closest I have ever come to it (post IBM 601 days) is using Assembler. Does that make me stupid or a bad person? Does that imply that I don't know what I am doing? I think not. As for your example of the DNS admins, they should know their limits as well as their abilities. Rule number 1 applies - if you do not know what a command does, do not enter it; if you do not know what clicking on an icon does, do not click it. If you do not know how to do something, read the manual or help files or ask someone who does know. If you go beyond your limits, be prepared to pay the price. The same can be said of every user from end user to admin (including DNS admin); from system operator to systems programmer. I would rather have someone ask very basic questions than do something they shouldn't, something that causes harm to themselves or others, for lack of asking. Regards, Richard Schuh -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of William D Carroll Sent: Wednesday, November 24, 2010 10:32 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: The old VM/ESA CMS GUI - Does it still live? I think we can safely assume that since this discussion was about VM CMS that we're talking operating systems and interfaces to those OS's not applications as is your wife's case GUI's have their place, I personally do not believe that place is in an OS to manage it or it's subsystems where understanding what happens is very important. I know DNS admins who can't manage their servers without GUI's. That to me is ridiculous and are admins who need to understand more about what they manage. Are they more productive maybe, are they dangerous, I leave that to you Think of this, what happens to those admins if their gui breaks and all they have is command line. William 'Doug' Carroll -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Schuh, Richard Sent: Wednesday, November 24, 2010 12:54 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: The old VM/ESA CMS GUI - Does it still live? That is an assumption or opinion, not necessarily a fact. For example, my wife may not know the operating system line mode commands, but she certainly knows the accounting systems that she uses via a GUI interface. In fact, the GUI represents an increase in productivity. I would suggest that if you do not know what you are doing, then you should not use either interface; if you do know, you should use whatever interface you choose. Rule Number 1 (Know what you are doing) applies. Regards, Richard Schuh You still type in your 3270 emulator, you still have to know what you're doing. GUI's hide that from you Doug This communication is for informational purposes only. It is not intended as an offer or solicitation for the purchase or sale of any financial instrument or as an official confirmation of any transaction. All market prices, data and other information are not warranted as to completeness or accuracy and are subject to change without notice. Any comments or statements made herein do not necessarily reflect those of JPMorgan Chase Co., its subsidiaries and affiliates. This transmission may contain information that is privileged, confidential, legally privileged, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. Although this transmission and any attachments are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that it is virus free and no responsibility is accepted by JPMorgan Chase Co., its subsidiaries and affiliates, as applicable, for any loss or damage arising in any way from its use. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. Please refer to http://www.jpmorgan.com/pages/disclosures for disclosures
Re: IBM z/196 and AS/400
On Wed, Nov 24, 2010 at 4:05 PM, McBride, Catherine cmcbr...@kable.com wrote: Power Blades support IOS But do they on a zBX? I don't see that in the docs I'm looking at (of course, it may have changed, too). -- zMan -- I've got a mainframe and I'm not afraid to use it
Re: Question about SSL Service
The message TCPIPNOT IN USE OR AN INVALID NSS/DCSS NAME seems to be related to a console message SSLSERV that TCPIP send out when TCPRUN is started: DTCRUN1022I Console log will be sent to default owner ID: TCPMAINT DTCRUN1040I SSL server cache segment query / definition results: HCPCFC003E Invalid option - NSS HCPCFC003E Invalid option - NSS HCPCFC003E Invalid option - NSS DTCRUN1011I Server started at 13:13:21 on 24 Nov 2010 (Wednesday) DTCRUN1011I Running server command: VMSSL DTCRUN1011I Parameters in use: DTCRUN1011I KEYFILE /ETC/GSKADM/DATABASE.KDB DTCSSL2423I Using server module: SSLSERV MODULE E2 - 11/22/10 10:56:08 DTCSSL015I Server initialization in progress (z/VM level 540 - PK97438) DTCSSL100I This software incorporates the RSA algorithm DTCSSL002I SSLSERV main() - PROGMAP: NameEntry Origin BytesAttributes SSLSERV 0F8D0C180F8D0C180003C3E1Amode 31 Reloc DTCSSL002I Runtime parameters: DTCSSL002I VMSSL_CACHE_CLEANUP=100 DTCSSL002I VMSSL_CACHE_LIFE=86400 DTCSSL002I VMSSL_CACHE_QUEUE=TCPIP DTCSSL002I VMSSL_TRACE_SPEC=NOTRACE DTCSSL002I GSK_KEYRING_FILE=/ETC/GSKADM/DATABASE.KDB DTCSSL002I GSK_KEYRING_STASH_FILE=/ETC/GSKADM/DATABASE.KDB.sth DTCSSL002I GSK_TRACE=0 DTCSSL002I GSK_TRACE_FILE=NULL DTCSSL002I VMSSL_SELDELAY_TIME=0 DTCSSL002I VMSSL_SELDELAY_FREQ=0 DTCSSL002I VMSSL_SELDELAY_DISP=30 DTCSSL002I VMSSL_EXEMPT_LISTCT=0 DTCSSL002I Ciphers array: nameCd Cd V3 TLS Str key usr use use usecnt V2 V3ngt len ex V2 V3 TLS RC4_128_SHA N 05 Y Y M 128 N 0 1 1 0 RC4_128_MD5 1 04 Y Y M 128 N 1 1 1 0 RSA_AES_256 N 35 Y B H 256 N 0 1 1 0 DH_DSS_AES_256 N 36 Y B H 256 N 0 1 1 0 DH_RSA_AES_256 N 37 Y B H 256 N 0 1 1 0 DHE_DSS_AES_256 N 38 Y B H 256 N 0 1 1 0 DHE_RSA_AES_256 N 39 Y B H 256 N 0 1 1 0 RSA_AES_128 N 2F Y B M 128 N 0 1 1 0 DH_DSS_AES_128 N 30 Y B M 128 N 0 1 1 0 DH_RSA_AES_128 N 31 Y B M 128 N 0 1 1 0 DHE_DSS_AES_128 N 32 Y B M 128 N 0 1 1 0 DHE_RSA_AES_128 N 33 Y B M 128 N 0 1 1 0 3DES_168_SHA 7 0A Y B H 168 N 1 1 1 0 RC2_128_MD5 3 N N M 128 N 1 0 0 0 DHE_RSA_3DES N 16 Y B H 168 N 0 1 1 0 DHE_DSS_3DES N 13 Y B H 168 N 0 1 1 0 DH_RSA_3DES N 10 Y B H 168 N 0 1 1 0 DH_DSS_3DES N 0D Y B H 168 N 0 1 1 0 DES_56_SHA 6 09 Y Y L 56 N 1 1 1 0 DHE_RSA_DES N 15 Y Y L 56 N 0 1 1 0 DHE_DSS_DES N 12 Y Y L 56 N 0 1 1 0 DH_RSA_DES N 0F Y Y L 56 N 0 1 1 0 DH_DSS_DES N 0C Y Y L 56 N 0 1 1 0 RC4_40_MD5 2 03 Y Y L 40 N 1 1 1 0 RC2_40_MD5 4 06 Y Y L 40 N 1 1 1 0 NULL_SHA N 02 Y Y N0 N 0 1 1 0 NULL_MD5 N 01 Y Y N0 N 0 1 1 0 NULL N 00 Y Y N0 N 0 1 1 0 DTCSSL111E Failed to open the session cache queue 'TCPIP': rc=8, rs=184 DTCSSL209E Failed to initialize SSL server: DTCSSL127E Server shutdown has commenced DTCSSL128E Server shutdown is complete DTCRUN1015I Server ended with RC=1 at 13:13:21 on 24 Nov 2010 (Wednesday) It looks to me that SSLSERV is not finding the NSS it's supposed to be using. Forwarded Message From: Dave Keeton dave.kee...@das.state.or.us To: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU Subject: Re: Question about SSL Service Date: Wed, 24 Nov 2010 12:46:33 -0800 Mike, Yes, I'm positive 198 is the same for SSLSERV. Here's the output from Q LINKS on SSLSERV: q links 198 TCPMAINT 0198 R/W, DTCVSW1 0198 R/O, DTCVSW2 0198 R/O, SSLDCSSM 0198 R/O TCPIP0198 R/O, SSLSERV 0198 R/O One interesting note; there's actual progress being made here. I can now log on to SSLDCSSM, though I'm not certain if all's well: DTCRUN1022I Console log will be sent to default owner ID: TCPMAINT DTCRUN1040I SSL server cache segment query / definition results: HCPNSD440I Saved segment TCPIP was successfully defined in fileid 0041. HCPNSS440I Saved segment TCPIP was successfully saved in fileid 0041. OWNERID FILE TYPE CL RECS DATE TIME FILENAME FILETYPE ORIGINID *NSS 0041 NSS R 0001 11/24 12:39:22 TCPIPDCSS SSLDCSSM FILE FILENAME FILETYPE MINSIZE BEGPAG ENDPAG TYPE CL #USERS PARMREGS VMGROUP 0041 TCPIPDCSS N/A1 100FF SN R 0 N/A N/A TCPIPNOT IN USE OR AN INVALID NSS/DCSS NAME DTCRUN1021R To cancel SSL DCSS Management Agent startup, type any non-blank character and press ENTER. To continue startup, just press ENTER. DTCRUN1011I
Re: IBM z/196 and AS/400
IOS runs fine on the PS701 Express Blade server which is the Blade shipped with zBX. However, the integrated management modules (Zmanager) may not yet support IOS. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of zMan Sent: Wednesday, November 24, 2010 3:16 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: IBM z/196 and AS/400 On Wed, Nov 24, 2010 at 4:05 PM, McBride, Catherine cmcbr...@kable.com wrote: Power Blades support IOS But do they on a zBX? I don't see that in the docs I'm looking at (of course, it may have changed, too). -- zMan -- I've got a mainframe and I'm not afraid to use it
Re: z/VM 5.1 on z196
Thanks Les, that is pretty much what I suspected. The problem is the upgrade path. We currently have a z9 so 6.1 is not an option on this machine. So when the time comes to swap CPU.s what OS can I IPL on the z196 that I have tested on the z9? On Wed, Nov 24, 2010 at 12:23 PM, Les Geer (607-429-3580) g...@gdlvm7.vnet.ibm.com wrote: The question came up today as to whether z/VM 5.1 will run on a z196. I know there are no 5.1 PTF's available for z196 support. How about z/VM 5.4, will it run WITHOUT the z196 PTF's?... Any guesses? or experiences? As z/VM 5.1 was never tested on a z196 we cannot provide an outlook of how it will behave. However, given the nature of changes made to z/VM 5.4 and 6.1 to support z196, you may encounter unexpected, undesirable side effects. Given upgrading to z/VM 5.4, or better yet 6.1, is straight forward, why not pursue this avenue rather than rely on knowns? Best Regards, Les Geer IBM z/VM and Linux Development
Re: IBM z/196 and AS/400
On Wed, Nov 24, 2010 at 4:32 PM, McBride, Catherine cmcbr...@kable.com wrote: IOS runs fine on the PS701 Express Blade server which is the Blade shipped with zBX. However, the integrated management modules (Zmanager) may not yet support IOS. Right, that was my point. Without real support, it's just a blade, not something usable. -- zMan -- I've got a mainframe and I'm not afraid to use it
Re: Question about SSL Service
Dave, The SSLSERV userid needs to have CP Class E privileges so it can define and save the DCSS and own the shared queue SSL will be using. Mike From: Dave Keeton dave.kee...@state.or.us To: IBMVM@listserv.uark.edu Date: 11/24/2010 04:22 PM Subject:Re: Question about SSL Service Sent by:The IBM z/VM Operating System IBMVM@listserv.uark.edu The message TCPIPNOT IN USE OR AN INVALID NSS/DCSS NAME seems to be related to a console message SSLSERV that TCPIP send out when TCPRUN is started: DTCRUN1022I Console log will be sent to default owner ID: TCPMAINT DTCRUN1040I SSL server cache segment query / definition results: HCPCFC003E Invalid option - NSS HCPCFC003E Invalid option - NSS HCPCFC003E Invalid option - NSS DTCRUN1011I Server started at 13:13:21 on 24 Nov 2010 (Wednesday) DTCRUN1011I Running server command: VMSSL DTCRUN1011I Parameters in use: DTCRUN1011I KEYFILE /ETC/GSKADM/DATABASE.KDB DTCSSL2423I Using server module: SSLSERV MODULE E2 - 11/22/10 10:56:08 DTCSSL015I Server initialization in progress (z/VM level 540 - PK97438) DTCSSL100I This software incorporates the RSA algorithm DTCSSL002I SSLSERV main() - PROGMAP: NameEntry Origin BytesAttributes SSLSERV 0F8D0C180F8D0C180003C3E1Amode 31 Reloc DTCSSL002I Runtime parameters: DTCSSL002I VMSSL_CACHE_CLEANUP=100 DTCSSL002I VMSSL_CACHE_LIFE=86400 DTCSSL002I VMSSL_CACHE_QUEUE=TCPIP DTCSSL002I VMSSL_TRACE_SPEC=NOTRACE DTCSSL002I GSK_KEYRING_FILE=/ETC/GSKADM/DATABASE.KDB DTCSSL002I GSK_KEYRING_STASH_FILE=/ETC/GSKADM/DATABASE.KDB.sth DTCSSL002I GSK_TRACE=0 DTCSSL002I GSK_TRACE_FILE=NULL DTCSSL002I VMSSL_SELDELAY_TIME=0 DTCSSL002I VMSSL_SELDELAY_FREQ=0 DTCSSL002I VMSSL_SELDELAY_DISP=30 DTCSSL002I VMSSL_EXEMPT_LISTCT=0 DTCSSL002I Ciphers array: nameCd Cd V3 TLS Str key usr use use usecnt V2 V3ngt len ex V2 V3 TLS RC4_128_SHA N 05 Y Y M 128 N 0 1 1 0 RC4_128_MD5 1 04 Y Y M 128 N 1 1 1 0 RSA_AES_256 N 35 Y B H 256 N 0 1 1 0 DH_DSS_AES_256 N 36 Y B H 256 N 0 1 1 0 DH_RSA_AES_256 N 37 Y B H 256 N 0 1 1 0 DHE_DSS_AES_256 N 38 Y B H 256 N 0 1 1 0 DHE_RSA_AES_256 N 39 Y B H 256 N 0 1 1 0 RSA_AES_128 N 2F Y B M 128 N 0 1 1 0 DH_DSS_AES_128 N 30 Y B M 128 N 0 1 1 0 DH_RSA_AES_128 N 31 Y B M 128 N 0 1 1 0 DHE_DSS_AES_128 N 32 Y B M 128 N 0 1 1 0 DHE_RSA_AES_128 N 33 Y B M 128 N 0 1 1 0 3DES_168_SHA 7 0A Y B H 168 N 1 1 1 0 RC2_128_MD5 3 N N M 128 N 1 0 0 0 DHE_RSA_3DES N 16 Y B H 168 N 0 1 1 0 DHE_DSS_3DES N 13 Y B H 168 N 0 1 1 0 DH_RSA_3DES N 10 Y B H 168 N 0 1 1 0 DH_DSS_3DES N 0D Y B H 168 N 0 1 1 0 DES_56_SHA 6 09 Y Y L 56 N 1 1 1 0 DHE_RSA_DES N 15 Y Y L 56 N 0 1 1 0 DHE_DSS_DES N 12 Y Y L 56 N 0 1 1 0 DH_RSA_DES N 0F Y Y L 56 N 0 1 1 0 DH_DSS_DES N 0C Y Y L 56 N 0 1 1 0 RC4_40_MD5 2 03 Y Y L 40 N 1 1 1 0 RC2_40_MD5 4 06 Y Y L 40 N 1 1 1 0 NULL_SHA N 02 Y Y N0 N 0 1 1 0 NULL_MD5 N 01 Y Y N0 N 0 1 1 0 NULL N 00 Y Y N0 N 0 1 1 0 DTCSSL111E Failed to open the session cache queue 'TCPIP': rc=8, rs=184 DTCSSL209E Failed to initialize SSL server: DTCSSL127E Server shutdown has commenced DTCSSL128E Server shutdown is complete DTCRUN1015I Server ended with RC=1 at 13:13:21 on 24 Nov 2010 (Wednesday) It looks to me that SSLSERV is not finding the NSS it's supposed to be using. Forwarded Message From: Dave Keeton dave.kee...@das.state.or.us To: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU Subject: Re: Question about SSL Service Date: Wed, 24 Nov 2010 12:46:33 -0800 Mike, Yes, I'm positive 198 is the same for SSLSERV. Here's the output from Q LINKS on SSLSERV: q links 198 TCPMAINT 0198 R/W, DTCVSW1 0198 R/O, DTCVSW2 0198 R/O,
Re: The old VM/ESA CMS GUI - Does it still live?
I think your reading more into my comments that I put there. I pointed one specific case of DNS, it was not a generality or implied that you or anyone doesn't not know what they are doing. I that case they clearly did not. We had to hire a contractor to help because the GUI was not available for them to work, these where MSCE trained people, who should know. And please no Microsoft bashes about that from anyone. My point is for an OS a GUI DOES Hide what is happening behind the buttons, that is a GUI's Point. To make like easier. But as an OS person we should know what that button Does as you stated. My Original Comment on this whole thing was the a 3270 Emulator really is not a GUI. It is a text based implementation on a GUI desktop, that does not make it a GUI, your still typing commands. So If I said In general all those who use gui's and do not have the correct background and who do not read about their product and take time to explore, to look at logs to see the effect and so on is that specific enough? We live in a world where we generalize, it's up to the people to decide if that applies to them personally or not. If your or anyone was offended I'm sorry you mistook my words that way. William 'Doug' Carroll -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Schuh, Richard Sent: Wednesday, November 24, 2010 4:15 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: The old VM/ESA CMS GUI - Does it still live? And then you have someone like me who finds typing to be burdensome due to a physical condition. If I had a GUI to manage the operating system, I would welcome it. One point I was making is that saying or implying that because someone prefers a GUI, they do not know what they are doing is a generality that has exceptions and is offensive. One can know how to do something using primitives and simply choose an easier method. It happens all of the time. It is why we have tools like Rexx and CMS Pipelines, for instance. I am familiar with machine instructions, but I do not write programs using them. The closest I have ever come to it (post IBM 601 days) is using Assembler. Does that make me stupid or a bad person? Does that imply that I don't know what I am doing? I think not. As for your example of the DNS admins, they should know their limits as well as their abilities. Rule number 1 applies - if you do not know what a command does, do not enter it; if you do not know what clicking on an icon does, do not click it. If you do not know how to do something, read the manual or help files or ask someone who does know. If you go beyond your limits, be prepared to pay the price. The same can be said of every user from end user to admin (including DNS admin); from system operator to systems programmer. I would rather have someone ask very basic questions than do something they shouldn't, something that causes harm to themselves or others, for lack of asking. Regards, Richard Schuh -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of William D Carroll Sent: Wednesday, November 24, 2010 10:32 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: The old VM/ESA CMS GUI - Does it still live? I think we can safely assume that since this discussion was about VM CMS that we're talking operating systems and interfaces to those OS's not applications as is your wife's case GUI's have their place, I personally do not believe that place is in an OS to manage it or it's subsystems where understanding what happens is very important. I know DNS admins who can't manage their servers without GUI's. That to me is ridiculous and are admins who need to understand more about what they manage. Are they more productive maybe, are they dangerous, I leave that to you Think of this, what happens to those admins if their gui breaks and all they have is command line. William 'Doug' Carroll -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Schuh, Richard Sent: Wednesday, November 24, 2010 12:54 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: The old VM/ESA CMS GUI - Does it still live? That is an assumption or opinion, not necessarily a fact. For example, my wife may not know the operating system line mode commands, but she certainly knows the accounting systems that she uses via a GUI interface. In fact, the GUI represents an increase in productivity. I would suggest that if you do not know what you are doing, then you should not use either interface; if you do know, you should use whatever interface you choose. Rule Number 1 (Know what you are doing) applies. Regards, Richard Schuh You still type in your 3270 emulator, you still have to know what you're doing. GUI's hide that from you Doug This communication is for
Re: z/VM 5.1 on z196
Been there, done that, bought the T-shirt, wore it, and put it in a draw never to wear it again.. The path of choice given the hardware, software, expiration dates, and upward and downward compatibility issue is: z/VM 5.4 on z9 to z196 with the 14 APARs for 5.4 that support it and then move to z/VM 6.whatever but not 6.1 which: has a shorter expiration than 5.4 not much more function to offer than 5.4 does not run on a z9 anyway. Tom Huegel tehue...@gmail.com Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 11/24/2010 04:32 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: z/VM 5.1 on z196 Thanks Les, that is pretty much what I suspected. The problem is the upgrade path. We currently have a z9 so 6.1 is not an option on this machine. So when the time comes to swap CPU.s what OS can I IPL on the z196 that I have tested on the z9? On Wed, Nov 24, 2010 at 12:23 PM, Les Geer (607-429-3580) g...@gdlvm7.vnet.ibm.com wrote: The question came up today as to whether z/VM 5.1 will run on a z196. I know there are no 5.1 PTF's available for z196 support. How about z/VM 5.4, will it run WITHOUT the z196 PTF's?... Any guesses? or experiences? As z/VM 5.1 was never tested on a z196 we cannot provide an outlook of how it will behave. However, given the nature of changes made to z/VM 5.4 and 6.1 to support z196, you may encounter unexpected, undesirable side effects. Given upgrading to z/VM 5.4, or better yet 6.1, is straight forward, why not pursue this avenue rather than rely on knowns? Best Regards, Les Geer IBM z/VM and Linux Development
Re: z/VM 5.1 on z196
George, are you saying that even AFTER the 14 PTF's for z196 support z/VM 5.4 still runs on a z9? If so that clears up a misconception I had, and also makes life much easier. Thakns On Wed, Nov 24, 2010 at 2:00 PM, George Henke/NYLIC george_he...@newyorklife.com wrote: Been there, done that, bought the T-shirt, wore it, and put it in a draw never to wear it again.. The path of choice given the hardware, software, expiration dates, and upward and downward compatibility issue is: - z/VM 5.4 on z9 - to z196 with the 14 APARs for 5.4 that support it - and then move to z/VM 6.whatever - but not 6.1 which: - has a shorter expiration than 5.4 - not much more function to offer than 5.4 - does not run on a z9 anyway. *Tom Huegel tehue...@gmail.com* Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 11/24/2010 04:32 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: z/VM 5.1 on z196 Thanks Les, that is pretty much what I suspected. The problem is the upgrade path. We currently have a z9 so 6.1 is not an option on this machine. So when the time comes to swap CPU.s what OS can I IPL on the z196 that I have tested on the z9? On Wed, Nov 24, 2010 at 12:23 PM, Les Geer (607-429-3580) * g...@gdlvm7.vnet.ibm.com* g...@gdlvm7.vnet.ibm.com wrote: The question came up today as to whether z/VM 5.1 will run on a z196. I know there are no 5.1 PTF's available for z196 support. How about z/VM 5.4, will it run WITHOUT the z196 PTF's?... Any guesses? or experiences? As z/VM 5.1 was never tested on a z196 we cannot provide an outlook of how it will behave. However, given the nature of changes made to z/VM 5.4 and 6.1 to support z196, you may encounter unexpected, undesirable side effects. Given upgrading to z/VM 5.4, or better yet 6.1, is straight forward, why not pursue this avenue rather than rely on knowns? Best Regards, Les Geer IBM z/VM and Linux Development
Re: IBM z/196 and AS/400
Ok, I've reread the announcement letter. I see my confusion... The z/196 supports Power Blades. And Power Blades support i5 (the operating system formerly known as i5.OS or OS/400). It doesn't mean that z/196 has the support for the i5 OS. Which is kind of strange. Is this a licensing issue where IBM couldn't get a license for i5 to run on the z/196? Different divisions have their own chiefs Or is it that there is some emulation involved with running i5 on POWER that isn't available on the z/196? Or is it that there are some device drivers, performance metrics that can't be obtained, or something, that means i5 isn't available for production, at this time? Oh well I guess that is why there hasn't been any chatter on the forums about this. Tom Duerbusch THD Consulting zMan zedgarhoo...@gmail.com 11/24/2010 2:59 PM On Wed, Nov 24, 2010 at 11:53 AM, Tom Duerbusch duerbus...@stlouiscity.com wrote: This being a pseudo Friday in the USA due to Thanksgiving holidays Does anyone have any experience with the AS/400 support in the z/196 box? Yep, I know it is a separate processor/memory and connected somehow, in some sort of internal networkbut.. Did I miss something? ISTR that the Power blades supported AIX but not iOS. -- zMan -- I've got a mainframe and I'm not afraid to use it
Re: z/VM 5.1 on z196
Not George here, but that is correct. 5.4 will get you from there to here and the ptfs will run on the z9 as well. Marcy This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Tom Huegel Sent: Wednesday, November 24, 2010 2:23 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] z/VM 5.1 on z196 George, are you saying that even AFTER the 14 PTF's for z196 support z/VM 5.4 still runs on a z9? If so that clears up a misconception I had, and also makes life much easier.
Re: z/VM 5.1 on z196
Running z/VM 5.4 with the 14 APARs now on z9. Thanks to Marcy PK97799 VM64656 VM64672 VM64747 VM64774 VM64793 VM64798 VM64799 VM64807 VM64818 VM64820 VM64879 VM64881 VM64891 They can be found at: http://www-01.ibm.com/support/docview.wss?rs=1209dc=DB540q1=z196uid=isg1_2817DEVICE_2817-ZVM Marcy Cortes marcy.d.cor...@wellsfargo.com Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 11/24/2010 05:33 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: z/VM 5.1 on z196 Not George here, but that is correct. 5.4 will get you from there to here and the ptfs will run on the z9 as well. Marcy This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Tom Huegel Sent: Wednesday, November 24, 2010 2:23 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] z/VM 5.1 on z196 George, are you saying that even AFTER the 14 PTF's for z196 support z/VM 5.4 still runs on a z9? If so that clears up a misconception I had, and also makes life much easier.
Re: The old VM/ESA CMS GUI - Does it still live?
On 11/24/2010 at 04:50 PM, William D Carroll william.d.carr...@jpmchase.com wrote: My Original Comment on this whole thing was the a 3270 Emulator really is not a GUI. It is a text based implementation on a GUI desktop, that does not make it a GUI, your still typing commands. Of course it is, when you use it to execute commands such as rdrlist, filelist, xedit, cut and paste, and any number of other tasks. Having a GUI doesn't mean you don't type or don't think, it just means you type less, and perhaps different things. My point is, people are conflating using GUIs with incompetence, and the two are orthogonal. They bash other people that use their favorite GUI, but would never be willing to give up their own. My company provides a tool called YaST. It can run as a GUI, or an ncurses application. Or, the sysadmin can do everything from the command line. YaST _can_ make Linux sysadmins' lives easier, but if used exclusively, will actually make them less productive. (Think of adding a couple hundred user accounts to multiple systems. Point and click? No way.) Alternatively, exclusively _not_ using a GUI can also make you less productive. GUIs are good for reducing the amount of time and skill needed for repetitive tasks. (They're also good for automating well-defined tasks that involve a lot of moving parts that a human can overlook.) They're not a replacement for a sysadmin's need to understand their OS, and how to accomplish things outside of it. Blasting people who use GUIs for being incompetent instead of blasting incompetent (or sorely undertrained) people who just happen to be using a GUI misses the root cause. Mark Post
Re: Question about SSL Service
Mark, It is documented as such. See the SSL DCSS Management Agent Notes section at http://www.vm.ibm.com/related/tcpip/tcspeins.html Thanks! Mike From: Mark Post mp...@novell.com To: IBMVM@LISTSERV.UARK.EDU Date: 11/24/2010 06:45 PM Subject:Re: Question about SSL Service Sent by:The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU On 11/24/2010 at 04:25 PM, Michael Donovan dono...@us.ibm.com wrote: The SSLSERV userid needs to have CP Class E privileges so it can define and save the DCSS and own the shared queue SSL will be using. Mike, If that's true, then shouldn't the user directory entry for it as shipped by IBM have that already specified? Or, since I haven't looked, is that documented in the manual as being a needed change? Mark Post
Re: The old VM/ESA CMS GUI - Does it still live?
You are totally missing my point Maybe your definition of a GUI is different than what I know to be a GUI. William 'Doug' Carroll -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Mark Post Sent: Wednesday, November 24, 2010 6:33 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: The old VM/ESA CMS GUI - Does it still live? On 11/24/2010 at 04:50 PM, William D Carroll william.d.carr...@jpmchase.com wrote: My Original Comment on this whole thing was the a 3270 Emulator really is not a GUI. It is a text based implementation on a GUI desktop, that does not make it a GUI, your still typing commands. Of course it is, when you use it to execute commands such as rdrlist, filelist, xedit, cut and paste, and any number of other tasks. Having a GUI doesn't mean you don't type or don't think, it just means you type less, and perhaps different things. My point is, people are conflating using GUIs with incompetence, and the two are orthogonal. They bash other people that use their favorite GUI, but would never be willing to give up their own. My company provides a tool called YaST. It can run as a GUI, or an ncurses application. Or, the sysadmin can do everything from the command line. YaST _can_ make Linux sysadmins' lives easier, but if used exclusively, will actually make them less productive. (Think of adding a couple hundred user accounts to multiple systems. Point and click? No way.) Alternatively, exclusively _not_ using a GUI can also make you less productive. GUIs are good for reducing the amount of time and skill needed for repetitive tasks. (They're also good for automating well-defined tasks that involve a lot of moving parts that a human can overlook.) They're not a replacement for a sysadmin's need to understand their OS, and how to accomplish things outside of it. Blasting people who use GUIs for being incompetent instead of blasting incompetent (or sorely undertrained) people who just happen to be using a GUI misses the root cause. Mark Post This communication is for informational purposes only. It is not intended as an offer or solicitation for the purchase or sale of any financial instrument or as an official confirmation of any transaction. All market prices, data and other information are not warranted as to completeness or accuracy and are subject to change without notice. Any comments or statements made herein do not necessarily reflect those of JPMorgan Chase Co., its subsidiaries and affiliates. This transmission may contain information that is privileged, confidential, legally privileged, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. Although this transmission and any attachments are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that it is virus free and no responsibility is accepted by JPMorgan Chase Co., its subsidiaries and affiliates, as applicable, for any loss or damage arising in any way from its use. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. Please refer to http://www.jpmorgan.com/pages/disclosures for disclosures relating to European legal entities.
Re: z/VM 5.1 on z196
Excellent!! Thanks, and have a happy Thanksgiving. On Wed, Nov 24, 2010 at 4:26 PM, Marcy Cortes marcy.d.cor...@wellsfargo.com wrote: Not George here, but that is correct. 5.4 will get you from there to here and the ptfs will run on the z9 as well. Marcy This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Tom Huegel Sent: Wednesday, November 24, 2010 2:23 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] z/VM 5.1 on z196 George, are you saying that even AFTER the 14 PTF's for z196 support z/VM 5.4 still runs on a z9? If so that clears up a misconception I had, and also makes life much easier.
Re: IBM z/196 and AS/400
A goal of the zBX is that the virtual servers on it are all managed by the HCM. That is: virtual machine can be defined, started, etc. This requires hooks in the hypervisor. And, that's the reason why not everything that might run on these blades natively isn't supported on the zBX. If the demand is high, the list of supported things will most probably grow. 2010/11/24 Tom Duerbusch duerbus...@stlouiscity.com Ok, I've reread the announcement letter. I see my confusion... The z/196 supports Power Blades. And Power Blades support i5 (the operating system formerly known as i5.OS or OS/400). It doesn't mean that z/196 has the support for the i5 OS. Which is kind of strange. Is this a licensing issue where IBM couldn't get a license for i5 to run on the z/196? Different divisions have their own chiefs Or is it that there is some emulation involved with running i5 on POWER that isn't available on the z/196? Or is it that there are some device drivers, performance metrics that can't be obtained, or something, that means i5 isn't available for production, at this time? Oh well I guess that is why there hasn't been any chatter on the forums about this. Tom Duerbusch THD Consulting zMan zedgarhoo...@gmail.com 11/24/2010 2:59 PM On Wed, Nov 24, 2010 at 11:53 AM, Tom Duerbusch duerbus...@stlouiscity.com wrote: This being a pseudo Friday in the USA due to Thanksgiving holidays Does anyone have any experience with the AS/400 support in the z/196 box? Yep, I know it is a separate processor/memory and connected somehow, in some sort of internal networkbut.. Did I miss something? ISTR that the Power blades supported AIX but not iOS. -- zMan -- I've got a mainframe and I'm not afraid to use it -- Kris Buelens, IBM Belgium, VM customer support
