Re: SFS problem

2011-04-20 Thread John Hall
If I recall correctly, DIAG D4 is the one that manipulates the secondary ID,
aka Alternate ID.  (SECUSER is an old term).  Diag 88 provides the ability
to link minidisks and perform userid/password validations (if the issuer has
appropriate authority).

An interesting usage note for this is that DIAG D4 does not change the
userid associated with any existing (already active) SFS connections.  This
is because it is a CP function and manipulates the VMDBK.  Once set, future
connections (via APPC/VM Connect) will utilize the Alternate ID. ... This is
why severing all connections prior to setting the AltID will fix this type
of problem, because CMS will (re) connect and use the AltID.

If this is Nora's problem, an easy work around would be wrap the job with an
exec that uses DMSGETWU and DMSPUSWU to set a new default work unit that
contains the appropriate user, then run the job from the exec, then finally
reset with DMSPOPWU. (If I'm remembering all of this correctly)

John

--
John Hall
Safe Software, Inc.
727-608-8799
johnh...@safesoftware.com



On Tue, Apr 19, 2011 at 11:48 AM, Schuh, Richard rsc...@visa.com wrote:

  Isn't that DIAG 88, instead of SECUSER?


 Regards,
 Richard Schuh




  --
 *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On
 Behalf Of *John Hall
 *Sent:* Tuesday, April 19, 2011 6:41 AM

 *To:* IBMVM@LISTSERV.UARK.EDU
 *Subject:* Re: SFS problem

 Nora,
 Batch jobs normally run with the privileges of the owner of the job,
 using the SECUSER facility in z/VM.  With SFS, this can lead to unexpected
 results when a prior batch job leaves the worker with a connection to the
 filepool under a different user's id.  If the job ordering/selection of
 batch workers is somewhat random, you could see the outcome that you're
 experiencing (sometimes it works, sometimes it fails).




Re: SFS problem

2011-04-20 Thread Graves Nora E
I do not believe that this is the problem. I was giving you information
on the failing job that I am most familiar with.  Other jobs that fail
are submitted to VMBatch by the ID that also owns the SFS directories.
 
FYI, VMBatch is the IBM VM Batch Facility Version 2.2,  I was not
aware until recently that there are other products also known as
VMBatch.  If this has caused confusion, I apologize.
 
Nora Graves
nora.e.gra...@irs.gov
Main IRS, Room 6531
(202) 622-6735 
Fax (202) 622-3123
SE:W:CAR:MP:D:KS:BRSI
 



From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On
Behalf Of John Hall
Sent: Wednesday, April 20, 2011 10:04 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: SFS problem


If I recall correctly, DIAG D4 is the one that manipulates the secondary
ID, aka Alternate ID.  (SECUSER is an old term).  Diag 88 provides the
ability to link minidisks and perform userid/password validations (if
the issuer has appropriate authority).

An interesting usage note for this is that DIAG D4 does not change the
userid associated with any existing (already active) SFS connections.
This is because it is a CP function and manipulates the VMDBK.  Once
set, future connections (via APPC/VM Connect) will utilize the Alternate
ID. ... This is why severing all connections prior to setting the AltID
will fix this type of problem, because CMS will (re) connect and use
the AltID.

If this is Nora's problem, an easy work around would be wrap the job
with an exec that uses DMSGETWU and DMSPUSWU to set a new default work
unit that contains the appropriate user, then run the job from the exec,
then finally reset with DMSPOPWU. (If I'm remembering all of this
correctly)

John

--
John Hall
Safe Software, Inc.
727-608-8799
johnh...@safesoftware.com




On Tue, Apr 19, 2011 at 11:48 AM, Schuh, Richard rsc...@visa.com
wrote:


Isn't that DIAG 88, instead of SECUSER?
 

Regards, 
Richard Schuh 

 

 




From: The IBM z/VM Operating System
[mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf Of John Hall
Sent: Tuesday, April 19, 2011 6:41 AM 

To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: SFS problem


Nora,
Batch jobs normally run with the privileges of the
owner of the job, using the SECUSER facility in z/VM.  With SFS, this
can lead to unexpected results when a prior batch job leaves the worker
with a connection to the filepool under a different user's id.  If the
job ordering/selection of batch workers is somewhat random, you could
see the outcome that you're experiencing (sometimes it works, sometimes
it fails).






Detaching A disk from z/Linux guest dynamically

2011-04-20 Thread Martin, Terry R. (CMS/CTR) (CTR)
Hi

I have a copy of the DASD volume where the A (191) disk resides for a specific 
z/Linux guest. I want to point the guest to the new copied volume from the one 
it is currently using without bringing the guest down. Is there a way to do 
this?

Thank You,

Terry Martin
Lockheed Martin
CMS - CITIC
3300 Lord Baltimore Drive, Suite 200, 21244
Engineering Computing
Mainframe Support
Cell - 443 632-4191




Re: SFS problem

2011-04-20 Thread Hughes, Jim
Interesting problem Nora.

 

Nothing recorded in the SFS log either.

 

Please post your POOLDEF statements and your DMSPARMS for the filepool
having the problems.

 

Also, what is the virtual storage size defined for the sfs server?

 

Regards,


Jim Hughes
Consulting Systems Programmer
Mainframe Technical Support Group
Department of Information Technology
State of New Hampshire
27 Hazen Drive
Concord, NH 03301
603-271-5586Fax 603.271.1516

Statement of Confidentiality: The contents of this message are
confidential. Any unauthorized disclosure, reproduction, use or
dissemination (either whole or in part) is prohibited. If you are not
the intended recipient of this message, please notify the sender
immediately and delete the message from your system.



From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On
Behalf Of Graves Nora E
Sent: Wednesday, April 20, 2011 10:17 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: SFS problem

 

I do not believe that this is the problem. I was giving you information
on the failing job that I am most familiar with.  Other jobs that fail
are submitted to VMBatch by the ID that also owns the SFS directories.

 

FYI, VMBatch is the IBM VM Batch Facility Version 2.2,  I was not
aware until recently that there are other products also known as
VMBatch.  If this has caused confusion, I apologize.

 

Nora Graves

nora.e.gra...@irs.gov

Main IRS, Room 6531

(202) 622-6735 

Fax (202) 622-3123

SE:W:CAR:MP:D:KS:BRSI

 

 



From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On
Behalf Of John Hall
Sent: Wednesday, April 20, 2011 10:04 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: SFS problem

If I recall correctly, DIAG D4 is the one that manipulates the secondary
ID, aka Alternate ID.  (SECUSER is an old term).  Diag 88 provides the
ability to link minidisks and perform userid/password validations (if
the issuer has appropriate authority).

An interesting usage note for this is that DIAG D4 does not change the
userid associated with any existing (already active) SFS connections.
This is because it is a CP function and manipulates the VMDBK.  Once
set, future connections (via APPC/VM Connect) will utilize the Alternate
ID. ... This is why severing all connections prior to setting the AltID
will fix this type of problem, because CMS will (re) connect and use
the AltID.

If this is Nora's problem, an easy work around would be wrap the job
with an exec that uses DMSGETWU and DMSPUSWU to set a new default work
unit that contains the appropriate user, then run the job from the exec,
then finally reset with DMSPOPWU. (If I'm remembering all of this
correctly)

John

--
John Hall
Safe Software, Inc.
727-608-8799
johnh...@safesoftware.com




On Tue, Apr 19, 2011 at 11:48 AM, Schuh, Richard rsc...@visa.com
wrote:

Isn't that DIAG 88, instead of SECUSER?

 

Regards, 
Richard Schuh 

 

 

 





From: The IBM z/VM Operating System
[mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf Of John Hall
Sent: Tuesday, April 19, 2011 6:41 AM 


To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: SFS problem

 

Nora,
Batch jobs normally run with the privileges of the owner of
the job, using the SECUSER facility in z/VM.  With SFS, this can lead to
unexpected results when a prior batch job leaves the worker with a
connection to the filepool under a different user's id.  If the job
ordering/selection of batch workers is somewhat random, you could see
the outcome that you're experiencing (sometimes it works, sometimes it
fails).

 



Re: SFS problem

2011-04-20 Thread Mike Walter
Nora,

Is there ever a case where the command (EXEC, or whatever) fails when it 
is NOT run in a VMBATCH worker?

If they never fail outside of VMBATCH workers, John probably has a good 
handle on the diagnosis.  You may have to read a little bit more in the 
VMBATCH documentation about how VMBATCH workers get initialized, end, and 
especially: how the post-job cleanup process works.  It might be as 
simple as changing the program to release the SFS directory before ending 
(and perhaps examining the connection and looping until it has been 
cleared).

BTW, the other common VMBATCH product is from CA, called VM:Batch.  Many 
moons ago there were other publically available freeware VMBATCH 
solutions, too -- IIRC, from colleges.

Mike Walter
Aon Corporation
The opinions expressed herein are mine alone, not my employer's.




Graves Nora E nora.e.gra...@irs.gov 

Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU
04/20/2011 09:17 AM
Please respond to
The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU



To
IBMVM@LISTSERV.UARK.EDU
cc

Subject
Re: SFS problem






I do not believe that this is the problem. I was giving you information on 
the failing job that I am most familiar with.  Other jobs that fail are 
submitted to VMBatch by the ID that also owns the SFS directories.
 
FYI, VMBatch is the IBM VM Batch Facility Version 2.2,  I was not aware 
until recently that there are other products also known as VMBatch.  If 
this has caused confusion, I apologize.
 
Nora Graves
nora.e.gra...@irs.gov
Main IRS, Room 6531
(202) 622-6735 
Fax (202) 622-3123
SE:W:CAR:MP:D:KS:BRSI
 

From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On 
Behalf Of John Hall
Sent: Wednesday, April 20, 2011 10:04 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: SFS problem

If I recall correctly, DIAG D4 is the one that manipulates the secondary 
ID, aka Alternate ID.  (SECUSER is an old term).  Diag 88 provides the 
ability to link minidisks and perform userid/password validations (if the 
issuer has appropriate authority).

An interesting usage note for this is that DIAG D4 does not change the 
userid associated with any existing (already active) SFS connections. This 
is because it is a CP function and manipulates the VMDBK.  Once set, 
future connections (via APPC/VM Connect) will utilize the Alternate ID. 
... This is why severing all connections prior to setting the AltID will 
fix this type of problem, because CMS will (re) connect and use the 
AltID.

If this is Nora's problem, an easy work around would be wrap the job with 
an exec that uses DMSGETWU and DMSPUSWU to set a new default work unit 
that contains the appropriate user, then run the job from the exec, then 
finally reset with DMSPOPWU. (If I'm remembering all of this correctly)

John

--
John Hall
Safe Software, Inc.
727-608-8799
johnh...@safesoftware.com



On Tue, Apr 19, 2011 at 11:48 AM, Schuh, Richard rsc...@visa.com wrote:
Isn't that DIAG 88, instead of SECUSER?
 
Regards, 
Richard Schuh 
 
 

From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On 
Behalf Of John Hall
Sent: Tuesday, April 19, 2011 6:41 AM 

To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: SFS problem

Nora,
Batch jobs normally run with the privileges of the owner of the job, 
using the SECUSER facility in z/VM.  With SFS, this can lead to unexpected 
results when a prior batch job leaves the worker with a connection to the 
filepool under a different user's id.  If the job ordering/selection of 
batch workers is somewhat random, you could see the outcome that you're 
experiencing (sometimes it works, sometimes it fails).






The information contained in this e-mail and any accompanying documents may 
contain information that is confidential or otherwise protected from 
disclosure. If you are not the intended recipient of this message, or if this 
message has been addressed to you in error, please immediately alert the sender 
by reply e-mail and then delete this message, including any attachments. Any 
dissemination, distribution or other use of the contents of this message by 
anyone other than the intended recipient is strictly prohibited. All messages 
sent to and from this e-mail address may be monitored as permitted by 
applicable law and regulations to ensure compliance with our internal policies 
and to protect our business. E-mails are not secure and cannot be guaranteed to 
be error free as they can be intercepted, amended, lost or destroyed, or 
contain viruses. You are deemed to have accepted these risks if you communicate 
with us by e-mail. 


Re: Detaching A disk from z/Linux guest dynamically

2011-04-20 Thread Scott Rohling
Yes -

- change the directory entry for the user to point to the new (copied)
volume - put directory online
- on the guest - #CP DETACH 191 and then #CP LINK * 191 191 MR(or on
linux:  vmcp detach 191 and vmcp link myuser 191 191 mr ... where 'myuser'
is the name of the userid..   (the * confuses bash so specify the user).

If this is a Linux guest -- then the 191 isn't accessed any more (Linux is
running)..   so no need to reaccess.

Scott Rohling


On Wed, Apr 20, 2011 at 8:21 AM, Martin, Terry R. (CMS/CTR) (CTR) 
terry.mar...@cms.hhs.gov wrote:

 Hi



 I have a copy of the DASD volume where the A (191) disk resides for a
 specific z/Linux guest. I want to point the guest to the new copied volume
 from the one it is currently using without bringing the guest down. Is there
 a way to do this?



 *Thank You,*

 * *

 *Terry Martin*

 *Lockheed Martin*

 *CMS - CITIC*

 *3300 Lord Baltimore Drive, Suite 200, 21244
 **Engineering Computing*

 *Mainframe Support*

 *Cell - 443 632-4191*

 * *





Re: Backout PTF(s) applied

2011-04-20 Thread Tami Zebrowski-Darrow
Hi Steve,  
 
  
   The VMSES/E way to remove a PTF is with VMFREM.  If you put on an 
RSU the best way to remove it is to take a backup before you 
 
install it. 
 
 
   VMFREM has a TEST option so I would recommend that you use it   
  
first.  If all looks okay then run VMFREM without the TEST 
   
option.  If something does not look right then you can always
 
open a call to the support center. Pay attention to
   
any messages. For example, if a build list was serviced  
 
with the PTF then you will need to do a VMFBLD and rerun  

VMFREM (should tell you this in a message).  
  
   The default for VMFREM in UNAPPLY so if you want to also remove   

the parts associated with the PTF you need to use UNRECEIVE. 
 
Also note that the removed PTF(s) will be put in the exclude 
 
list, by default.  So if you want to apply that PTF again you
 
will have to manually remove it from the exclude list,   
 
such as HCPVM $EXCLIST.  Be aware that a removed PTF may be 
  
a pre-req for another PTF.  If so, then SERVICE or VMFAPPLY 
  
will fail, you can remove it from the exclude list and then 
  
restart SERVICE or VMAPPLY.
  Refer to the VMSES/E Introduction and Reference, Chapter 20, under
the VMFREM EXEC for usage examples. 
 
 
 
   
Sincerely, 
 
 
Tami Zebrowski-Darrow  
  
z/VM VMSES/E Service and Support
IBM Endicott



Re: Detaching A disk from z/Linux guest dynamically

2011-04-20 Thread David Boyes
If the 191 is only used at Linux boot, you can change the directory entry and 
then login to the VM userid running the Linux system and:

BEGIN (if you get a CP READ)
#CP DET 191
#CP LINK * 191 191 MR
#CP DISC

(assuming your LINEND char is #)

If you are actually using the disk during runtime, then it's a lot safer to 
bounce the guest.

-- db


From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf 
Of Martin, Terry R. (CMS/CTR) (CTR)
Sent: Wednesday, April 20, 2011 10:22 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Detaching A disk from z/Linux guest dynamically

Hi

I have a copy of the DASD volume where the A (191) disk resides for a specific 
z/Linux guest. I want to point the guest to the new copied volume from the one 
it is currently using without bringing the guest down. Is there a way to do 
this?

Thank You,

Terry Martin
Lockheed Martin
CMS - CITIC
3300 Lord Baltimore Drive, Suite 200, 21244
Engineering Computing
Mainframe Support
Cell - 443 632-4191




Re: Detaching A disk from z/Linux guest dynamically

2011-04-20 Thread Martin, Terry R. (CMS/CTR) (CTR)
Hi,

Ok I got it. Before I contacted the list I had tried doing the '#CP REL A (DET' 
from the guest. It did not take saying it was unknown command sort of what you 
get when you are issuing a command that the user's class does not allow. So I 
thought that the user did not have authority to do even the DEATCH. So now I 
know!

Thanks!

Thank You,

Terry Martin
Lockheed Martin
CMS - CITIC
3300 Lord Baltimore Drive, Suite 200, 21244
Engineering Computing
Mainframe Support
Cell - 443 632-4191


From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf 
Of Scott Rohling
Sent: Wednesday, April 20, 2011 10:44 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Detaching A disk from z/Linux guest dynamically

Yes -

- change the directory entry for the user to point to the new (copied) volume - 
put directory online
- on the guest - #CP DETACH 191 and then #CP LINK * 191 191 MR(or on linux: 
 vmcp detach 191 and vmcp link myuser 191 191 mr ... where 'myuser' is the name 
of the userid..   (the * confuses bash so specify the user).

If this is a Linux guest -- then the 191 isn't accessed any more (Linux is 
running)..   so no need to reaccess.

Scott Rohling

On Wed, Apr 20, 2011 at 8:21 AM, Martin, Terry R. (CMS/CTR) (CTR) 
terry.mar...@cms.hhs.govmailto:terry.mar...@cms.hhs.gov wrote:
Hi

I have a copy of the DASD volume where the A (191) disk resides for a specific 
z/Linux guest. I want to point the guest to the new copied volume from the one 
it is currently using without bringing the guest down. Is there a way to do 
this?

Thank You,

Terry Martin
Lockheed Martin
CMS - CITIC
3300 Lord Baltimore Drive, Suite 200, 21244
Engineering Computing
Mainframe Support
Cell - 443 632-4191tel:443%20632-4191





Re: Detaching A disk from z/Linux guest dynamically

2011-04-20 Thread David Boyes
Ok I got it. Before I contacted the list I had tried doing the '#CP REL A 
(DET' from the guest. 
 It did not take saying it was unknown command sort of what you get when you 
 are issuing a command
 that the user's class does not allow. So I thought that the user did not have 
 authority to do 
 even the DEATCH. So now I know!

DETACH is a class G command, so everyone can do it. The problem was that 
RELEASE (and the whole concept of file modes) is a *CMS* command. If Linux is 
running, the only thing that's available to change the virtual machine 
configuration is CP commands, eg DETACH in this case. When you IPLed Linux, CMS 
goes away, so RELEASE A ( DET can't work. 
 


Re: Detaching A disk from z/Linux guest dynamically

2011-04-20 Thread Martin, Terry R. (CMS/CTR) (CTR)
Ok thanks Scott got it. I appreciate the input from all!

Thank You,

Terry Martin
Lockheed Martin
CMS - CITIC
3300 Lord Baltimore Drive, Suite 200, 21244
Engineering Computing
Mainframe Support
Cell - 443 632-4191


From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf 
Of Scott Rohling
Sent: Wednesday, April 20, 2011 12:07 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Detaching A disk from z/Linux guest dynamically

Terry..   RELEASE is a CMS command..   not CP.   You can use the CP command 
DETACH to detach a specific address.. but RELEASE will fail.   ACCESS/RELEASE 
are strictly CMS concepts.   If Linux is running -- then CMS is not -- so 
RELEASE/ACCESS have no meaning.

I'm assuming you first IPL CMS in your Linux guests and it runs a PROFILE EXEC, 
which then IPLs the Linux disk.  Once Linux is IPLed - no disks are 'accessed' 
as CMS is gone.   So you're only left with DETACH/LINK to deal with virtual 
disks.

Hope that helps -

Scott Rohling
On Wed, Apr 20, 2011 at 9:55 AM, Martin, Terry R. (CMS/CTR) (CTR) 
terry.mar...@cms.hhs.govmailto:terry.mar...@cms.hhs.gov wrote:
Hi,

Ok I got it. Before I contacted the list I had tried doing the '#CP REL A (DET' 
from the guest. It did not take saying it was unknown command sort of what you 
get when you are issuing a command that the user's class does not allow. So I 
thought that the user did not have authority to do even the DEATCH. So now I 
know!

Thanks!

Thank You,

Terry Martin
Lockheed Martin
CMS - CITIC
3300 Lord Baltimore Drive, Suite 200, 21244
Engineering Computing
Mainframe Support
Cell - 443 632-4191tel:443%20632-4191


From: The IBM z/VM Operating System 
[mailto:IBMVM@LISTSERV.UARK.EDUmailto:IBMVM@LISTSERV.UARK.EDU] On Behalf Of 
Scott Rohling
Sent: Wednesday, April 20, 2011 10:44 AM

To: IBMVM@LISTSERV.UARK.EDUmailto:IBMVM@LISTSERV.UARK.EDU
Subject: Re: Detaching A disk from z/Linux guest dynamically

Yes -

- change the directory entry for the user to point to the new (copied) volume - 
put directory online
- on the guest - #CP DETACH 191 and then #CP LINK * 191 191 MR(or on linux: 
 vmcp detach 191 and vmcp link myuser 191 191 mr ... where 'myuser' is the name 
of the userid..   (the * confuses bash so specify the user).

If this is a Linux guest -- then the 191 isn't accessed any more (Linux is 
running)..   so no need to reaccess.

Scott Rohling

On Wed, Apr 20, 2011 at 8:21 AM, Martin, Terry R. (CMS/CTR) (CTR) 
terry.mar...@cms.hhs.govmailto:terry.mar...@cms.hhs.gov wrote:
Hi

I have a copy of the DASD volume where the A (191) disk resides for a specific 
z/Linux guest. I want to point the guest to the new copied volume from the one 
it is currently using without bringing the guest down. Is there a way to do 
this?

Thank You,

Terry Martin
Lockheed Martin
CMS - CITIC
3300 Lord Baltimore Drive, Suite 200, 21244
Engineering Computing
Mainframe Support
Cell - 443 632-4191tel:443%20632-4191






Re: SFS problem

2011-04-20 Thread John Hall
Thank you, yes, that is correct... Apologies for mixing my terms.  I should
have been saying Alternate ID.

John

On Wed, Apr 20, 2011 at 12:33 PM, Schuh, Richard rsc...@visa.com wrote:

  Actually, SECUSER still exists and is something quite
 different. SECUSER defines a secondary user for receiving console messages
 and entering commands and responses. The entries are done as though they
 came from, not on behalf of, the user.

 Regards,
 Richard Schuh



  --
 *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On
 Behalf Of *John Hall
 *Sent:* Wednesday, April 20, 2011 7:04 AM

 *To:* IBMVM@LISTSERV.UARK.EDU
 *Subject:* Re: SFS problem

 If I recall correctly, DIAG D4 is the one that manipulates the secondary
 ID, aka Alternate ID.  (SECUSER is an old term).  Diag 88 provides the
 ability to link minidisks and perform userid/password validations (if the
 issuer has appropriate authority).

 An interesting usage note for this is that DIAG D4 does not change the
 userid associated with any existing (already active) SFS connections.  This
 is because it is a CP function and manipulates the VMDBK.  Once set, future
 connections (via APPC/VM Connect) will utilize the Alternate ID. ... This is
 why severing all connections prior to setting the AltID will fix this type
 of problem, because CMS will (re) connect and use the AltID.

 If this is Nora's problem, an easy work around would be wrap the job with
 an exec that uses DMSGETWU and DMSPUSWU to set a new default work unit that
 contains the appropriate user, then run the job from the exec, then finally
 reset with DMSPOPWU. (If I'm remembering all of this correctly)

 John

 --
 John Hall
 Safe Software, Inc.
 727-608-8799
 johnh...@safesoftware.com



 On Tue, Apr 19, 2011 at 11:48 AM, Schuh, Richard rsc...@visa.com wrote:

  Isn't that DIAG 88, instead of SECUSER?


 Regards,
 Richard Schuh




  --
 *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On
 Behalf Of *John Hall
 *Sent:* Tuesday, April 19, 2011 6:41 AM

 *To:* IBMVM@LISTSERV.UARK.EDU
 *Subject:* Re: SFS problem

  Nora,
 Batch jobs normally run with the privileges of the owner of the job,
 using the SECUSER facility in z/VM.  With SFS, this can lead to
 unexpected results when a prior batch job leaves the worker with a
 connection to the filepool under a different user's id.  If the job
 ordering/selection of batch workers is somewhat random, you could see the
 outcome that you're experiencing (sometimes it works, sometimes it fails).





Re: Detaching A disk from z/Linux guest dynamically

2011-04-20 Thread Tom Huegel
Since these are CP commands use FOR command and avoid logging on the LINUX
machine.
FOR linuxname CMD DET 191
FOR linuxname CMD LINK * 191 191 MR



On Wed, Apr 20, 2011 at 8:45 AM, David Boyes dbo...@sinenomine.net wrote:

  If the 191 is only used at Linux boot, you can change the directory entry
 and then login to the VM userid running the Linux system and:



 BEGIN (if you get a CP READ)

 #CP DET 191

 #CP LINK * 191 191 MR

 #CP DISC



 (assuming your LINEND char is #)



 If you are actually using the disk during runtime, then it’s a lot safer to
 bounce the guest.



 -- db





 *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On
 Behalf Of *Martin, Terry R. (CMS/CTR) (CTR)
 *Sent:* Wednesday, April 20, 2011 10:22 AM
 *To:* IBMVM@LISTSERV.UARK.EDU
 *Subject:* Detaching A disk from z/Linux guest dynamically



 Hi



 I have a copy of the DASD volume where the A (191) disk resides for a
 specific z/Linux guest. I want to point the guest to the new copied volume
 from the one it is currently using without bringing the guest down. Is there
 a way to do this?



 *Thank You,*

 * *

 *Terry Martin*

 *Lockheed Martin*

 *CMS - CITIC*

 *3300 Lord Baltimore Drive, Suite 200, 21244
 Engineering Computing*

 *Mainframe Support*

 *Cell - 443 632-4191*

 * *





Re: Detaching A disk from z/Linux guest dynamically

2011-04-20 Thread Martin, Terry R. (CMS/CTR) (CTR)
Thanks Tom I was just about to ask this question because I have a bunch of 
guests that I need to change.

Now I tried the FOR command and received this:

HCPFOR070E - Basically it is an authorization issue with the FOR command. We 
are running RACF here so do you know what the profile would be and what RACF 
class would need to be activated to define and permit this resource?  Can I 
also do this via the SECUSER command?

Thank You,

Terry Martin
Lockheed Martin
CMS - CITIC
3300 Lord Baltimore Drive, Suite 200, 21244
Engineering Computing
Mainframe Support
Cell - 443 632-4191


From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf 
Of Tom Huegel
Sent: Wednesday, April 20, 2011 2:37 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Detaching A disk from z/Linux guest dynamically

Since these are CP commands use FOR command and avoid logging on the LINUX 
machine.
FOR linuxname CMD DET 191
FOR linuxname CMD LINK * 191 191 MR



On Wed, Apr 20, 2011 at 8:45 AM, David Boyes 
dbo...@sinenomine.netmailto:dbo...@sinenomine.net wrote:
If the 191 is only used at Linux boot, you can change the directory entry and 
then login to the VM userid running the Linux system and:

BEGIN (if you get a CP READ)
#CP DET 191
#CP LINK * 191 191 MR
#CP DISC

(assuming your LINEND char is #)

If you are actually using the disk during runtime, then it's a lot safer to 
bounce the guest.

-- db


From: The IBM z/VM Operating System 
[mailto:IBMVM@LISTSERV.UARK.EDUmailto:IBMVM@LISTSERV.UARK.EDU] On Behalf Of 
Martin, Terry R. (CMS/CTR) (CTR)
Sent: Wednesday, April 20, 2011 10:22 AM
To: IBMVM@LISTSERV.UARK.EDUmailto:IBMVM@LISTSERV.UARK.EDU
Subject: Detaching A disk from z/Linux guest dynamically

Hi

I have a copy of the DASD volume where the A (191) disk resides for a specific 
z/Linux guest. I want to point the guest to the new copied volume from the one 
it is currently using without bringing the guest down. Is there a way to do 
this?

Thank You,

Terry Martin
Lockheed Martin
CMS - CITIC
3300 Lord Baltimore Drive, Suite 200, 21244
Engineering Computing
Mainframe Support
Cell - 443 632-4191tel:443%20632-4191





Re: Detaching A disk from z/Linux guest dynamically

2011-04-20 Thread Scott Rohling
I'm thinking this would be controlled by VMCMD/VMXEVENT..  on my system a
RAC VMXEVENT LIST shows that 'FOR.C' is 'NO_CTL' - so is not controlled by
RACF.Not quite sure how to tell you to create and permit users to it if
yours is CTL without some more digging.  Maybe someone else will have this
more readily at their fingertips.

FOR is essentially the same as SET SECUSER and SEND commands.. so you can
use these instead of FOR if you like.. :

CP SET SECUSER user *
CP SEND CP user command

Note that CP is in FRONT of the user on the SEND .. indicating you want to
SEND a command to the guest's CP - not the guest OS..

Also note:  You likely want to issue SET SECUSER user RESET shortly after
issuing the SEND CP command so that you don't stay secondary user for
everyone you do this to.

Scott Rohling

On Wed, Apr 20, 2011 at 2:13 PM, Martin, Terry R. (CMS/CTR) (CTR) 
terry.mar...@cms.hhs.gov wrote:

 Thanks Tom I was just about to ask this question because I have a bunch of
 guests that I need to change.



 Now I tried the FOR command and received this:



 HCPFOR070E – Basically it is an authorization issue with the FOR command.
 We are running RACF here so do you know what the profile would be and what
 RACF class would need to be activated to define and permit this resource?
  Can I also do this via the SECUSER command?



 *Thank You,*

 * *

 *Terry Martin*

 *Lockheed Martin*

 *CMS - CITIC*

 *3300 Lord Baltimore Drive, Suite 200, 21244
 **Engineering Computing*

 *Mainframe Support*

 *Cell - 443 632-4191*

 * *



 *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On
 Behalf Of *Tom Huegel
 *Sent:* Wednesday, April 20, 2011 2:37 PM

 *To:* IBMVM@LISTSERV.UARK.EDU
 *Subject:* Re: Detaching A disk from z/Linux guest dynamically



 Since these are CP commands use FOR command and avoid logging on the LINUX
 machine.

 FOR linuxname CMD DET 191
 FOR linuxname CMD LINK * 191 191 MR






 On Wed, Apr 20, 2011 at 8:45 AM, David Boyes dbo...@sinenomine.net
 wrote:

 If the 191 is only used at Linux boot, you can change the directory entry
 and then login to the VM userid running the Linux system and:



 BEGIN (if you get a CP READ)

 #CP DET 191

 #CP LINK * 191 191 MR

 #CP DISC



 (assuming your LINEND char is #)



 If you are actually using the disk during runtime, then it’s a lot safer to
 bounce the guest.



 -- db





 *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On
 Behalf Of *Martin, Terry R. (CMS/CTR) (CTR)
 *Sent:* Wednesday, April 20, 2011 10:22 AM
 *To:* IBMVM@LISTSERV.UARK.EDU
 *Subject:* Detaching A disk from z/Linux guest dynamically



 Hi



 I have a copy of the DASD volume where the A (191) disk resides for a
 specific z/Linux guest. I want to point the guest to the new copied volume
 from the one it is currently using without bringing the guest down. Is there
 a way to do this?



 *Thank You,*

 * *

 *Terry Martin*

 *Lockheed Martin*

 *CMS - CITIC*

 *3300 Lord Baltimore Drive, Suite 200, 21244
 Engineering Computing*

 *Mainframe Support*

 *Cell - 443 632-4191*

 * *







Re: Detaching A disk from z/Linux guest dynamically

2011-04-20 Thread Rob van der Heij
On Wed, Apr 20, 2011 at 10:13 PM, Martin, Terry R. (CMS/CTR) (CTR)
terry.mar...@cms.hhs.gov wrote:

 HCPFOR070E – Basically it is an authorization issue with the FOR command. We
 are running RACF here so do you know what the profile would be and what RACF
 class would need to be activated to define and permit this resource?  Can I
 also do this via the SECUSER command?

The SECUSER can issue these
#CP SEND CP LINUX007 DET 191
#CP SEND CP LINUX007 LINK * 191 191 MR

But in general I consider it abuse of power to use a privileged userid
(with FOR authorisation or as SECUSER) when the user could have done
it himself. You could also do it from Linux (use modprobe vmcp if
that does not happen at boot time already)
vmcp det 191
vmcp link * 191 191 mr

Rob


Re: Detaching A disk from z/Linux guest dynamically

2011-04-20 Thread Tom Huegel
If that is the rule, then we don't need SECUSER or FOR, or when would you
use them?? Just courious.

On Wed, Apr 20, 2011 at 1:40 PM, Rob van der Heij rvdh...@gmail.com wrote:

 On Wed, Apr 20, 2011 at 10:13 PM, Martin, Terry R. (CMS/CTR) (CTR)
 terry.mar...@cms.hhs.gov wrote:

  HCPFOR070E – Basically it is an authorization issue with the FOR command.
 We
  are running RACF here so do you know what the profile would be and what
 RACF
  class would need to be activated to define and permit this resource?  Can
 I
  also do this via the SECUSER command?

 The SECUSER can issue these
 #CP SEND CP LINUX007 DET 191
 #CP SEND CP LINUX007 LINK * 191 191 MR

 But in general I consider it abuse of power to use a privileged userid
 (with FOR authorisation or as SECUSER) when the user could have done
 it himself. You could also do it from Linux (use modprobe vmcp if
 that does not happen at boot time already)
 vmcp det 191
 vmcp link * 191 191 mr

 Rob



Re: Detaching A disk from z/Linux guest dynamically

2011-04-20 Thread Scott Rohling
I think Rob's comment is valid depending on the situation...   You typically
would not 'mess' with a running guest unless you own that guest and are
responsible for it's continued operation.   The owner would want to know why
the change was needed and the recommended implementation and want to do it
themselves when they deem it necessary and not have you mucking about with
their live guest.

In the case of Linux guests which are IPLing CMS and then Linux -- the lines
are a little blurrier.   The Linux guys probably don't want to be bothered
messing around with the 191 disk and something that to them is part of the
hypervisor and not their concern.   As long as you don't mess with anything
that Linux uses -- they don't care.

There are certainly valid uses for SECUSER/SEND/FOR commands -- I don't
agree that their use is an abuse of power.  But of course they could be
depending on what you do with them.   I suppose you could consider a
SHUTDOWN command an abuse of power as well...   ;-)

Scott Rohling

On Wed, Apr 20, 2011 at 3:22 PM, Tom Huegel tehue...@gmail.com wrote:

 If that is the rule, then we don't need SECUSER or FOR, or when would you
 use them?? Just courious.


 On Wed, Apr 20, 2011 at 1:40 PM, Rob van der Heij rvdh...@gmail.comwrote:

 On Wed, Apr 20, 2011 at 10:13 PM, Martin, Terry R. (CMS/CTR) (CTR)
 terry.mar...@cms.hhs.gov wrote:

  HCPFOR070E – Basically it is an authorization issue with the FOR
 command. We
  are running RACF here so do you know what the profile would be and what
 RACF
  class would need to be activated to define and permit this resource?
  Can I
  also do this via the SECUSER command?

 The SECUSER can issue these
 #CP SEND CP LINUX007 DET 191
 #CP SEND CP LINUX007 LINK * 191 191 MR

 But in general I consider it abuse of power to use a privileged userid
 (with FOR authorisation or as SECUSER) when the user could have done
 it himself. You could also do it from Linux (use modprobe vmcp if
 that does not happen at boot time already)
 vmcp det 191
 vmcp link * 191 191 mr

 Rob





Re: Detaching A disk from z/Linux guest dynamically

2011-04-20 Thread Rob van der Heij
On Wed, Apr 20, 2011 at 11:22 PM, Tom Huegel tehue...@gmail.com wrote:
 If that is the rule, then we don't need SECUSER or FOR, or when would you
 use them?? Just courious.

Don't know whether it is *the* rule, but it's mine. When you do your
job with the least amount of special privileges, there's less to
justify. In many cases you need to audit the use of these special
privileges, so it helps to avoid the need for special privileges.

And there's the risk of mistakes. Even though you can, you shouldn't
use MAINT for all kind of trivial work that could be done also on a
normal userid. There's a trade-off between convenience and security,
and only you can do that yourself. YMMV depending on how long ago you
shut down the production system or forced off the wrong virtual
machine.

The purpose of SECUSER is to perform programmed interaction with a
virtual machine that runs a program that does not offer that amount of
control. When you SET SECUSER to steal control in such a situation,
you risk integrity because not all console output is trapped anymore.
The FOR command avoids stealing secuser, but does risk the guest being
in console function wait when the legitimate controller wants to issue
a command. And you might confusing things by producing unexpected
console output.

One of my other rules is not to hide evidence of what you've done, and
leave a clear trail in case you get lost and people come looking for
you. To see in the operator logging who logged on to the virtual
machine may save you hours when searching for clues. It often
outweighs the few seconds you gain by sneaking a command under the
covers with FOR.

Rob


z/VM RedHat Virtual Machine Memory abend

2011-04-20 Thread Carlos Bodra - Pessoal




Hi s390x Gurus

I´m new to Linux on z and we are conducting a POC test of Linux Red Hat 
with Oracle running under z/VM 5.4 RSU 1003

and a z/10 BC model A00 (IFL Only).

If linux virtual machine is defined with 64G in directory we got an 
abend during startup (see below). Doing some tests I found that I
can define it until 59G in directory (60794036k from TOP linux command) 
and it will startup correctly.


My questions are:

1 - Is this a limitation of linux s390x or Red Hat distribution?
2 - Is this a linux s390x bug or Red Hat distribution?
3 - How can I circunvent this so we can continue with POC (Proof Of 
Concept)?


Thanks in advance for all hints and tips about.


00: Booting default (2.6.18-194.8.1.el5)...
Linux version 2.6.18-194.8.1.el5 
(mockbu...@s390-002.build.bos.redhat.com) (gcc
version 4.1.2 20080704 (Red Hat 4.1.2-48)) #1 SMP Wed Jun 23 11:09:16 
EDT 2010

We are running under VM (64 bit mode)
Detected 3 CPU's
Boot cpu address  0
Built 1 zonelists.  Total pages: 16777216
Kernel command line: root=LABEL=/ BOOT_IMAGE=0
PID hash table entries: 4096 (order: 12, 32768 bytes)
Dentry cache hash table entries: 8388608 (order: 14, 67108864 bytes)
Inode-cache hash table entries: 4194304 (order: 13, 33554432 bytes)
*Memory: 65951564k/67108864k available* (3414k kernel code, 0k reserved, 
2256k dat

a, 136k init)
Write protected kernel read-only data: 0x356000 - 0x409fff
Calibrating delay loop... 2981.88 BogoMIPS (lpj=14909440)
Security Framework v1.0.0 initialized
SELinux:  Initializing.
selinux_register_security:  Registering secondary module capability
Capability LSM initialized as secondary
Mount-cache hash table entries: 256
cpu 0 phys_idx=0 vers=FF ident=01F2D6 machine=2098 unused=8000
cpu 1 phys_idx=1 vers=FF ident=01F2D6 machine=2098 unused=8000
cpu 2 phys_idx=2 vers=FF ident=01F2D6 machine=2098 unused=8000
Brought up 3 CPUs
migration_cost=1000
checking if image is initramfs...it isn't (bad gzip magic numbers); 
looks like a

n initrd
Freeing initrd memory: 2759k freed
list_del corruption. prev-next should be 8001bff0, but was 
8001

c840
kernel BUG at lib/list_debug.c:65!
illegal operation: 0001 Ý#1¨
CPU: 0 Not tainted 2.6.18-194.8.1.el5 #1
Process swapper (pid: 1, task: c611f788, ksp: c6123b10)
Krnl PSW : 040400018000 002685d6 (list_del+0x9e/0xcc)
Krnl GPRS: 0015 c6123cb8 0026 
0400
   0012a83e 0733 000a 
0050e400
   0001  8001bf90 
8001bff0
   8001bfce 00369878 002685d2 
c6123d10

Krnl Code: d2 07 10 08 20 08 e3 10 d0 08 00 04 e3 10 20 08 00 24 e3 10
Call Trace:
(Ý002685d2¨ list_del+0x9a/0xcc)
 Ý0017820a¨ free_pages_bulk+0x9e/0x34c
 Ý0017868a¨ free_hot_cold_page+0x1d2/0x1f4
 Ý001009c0¨ free_initrd_mem+0x8c/0xc8
 Ý005944ee¨ free_initrd+0xba/0xe4
 Ý0058e324¨ init+0x1a0/0x32c
 Ý0010558e¨ kernel_thread_starter+0x6/0xc
 Ý00105588¨ kernel_thread_starter+0x0/0xc

0Kernel panic - not syncing: Fatal exception: panic_on_oops
01: HCPGSP2629I The virtual machine is placed in CP mode due to a SIGP 
stop from

 CPU 00.
02: HCPGSP2629I The virtual machine is placed in CP mode due to a SIGP 
stop from

 CPU 00.
00: HCPGIR450W CP entered; disabled wait PSW 00020001 8000  
0010BDBE




--
Carlos Bodra
IBM Certified Specialist System z   
Sao Paulo - Brazil



Re: z/VM RedHat Virtual Machine Memory abend

2011-04-20 Thread Davis, Larry (National VM/VSE Capability)
Are you Running VM on this or zLinux only on an LPAR?

Larry Davis

From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf 
Of Carlos Bodra - Pessoal
Sent: Wednesday, April 20, 2011 6:19 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: z/VM RedHat Virtual Machine Memory abend




Hi s390x Gurus

I´m new to Linux on z and we are conducting a POC test of Linux Red Hat with 
Oracle running under z/VM 5.4 RSU 1003
and a z/10 BC model A00 (IFL Only).

If linux virtual machine is defined with 64G in directory we got an abend 
during startup (see below). Doing some tests I found that I
can define it until 59G in directory (60794036k from TOP linux command) and it 
will startup correctly.

My questions are:

1 - Is this a limitation of linux s390x or Red Hat distribution?
2 - Is this a linux s390x bug or Red Hat distribution?
3 - How can I circunvent this so we can continue with POC (Proof Of Concept)?

Thanks in advance for all hints and tips about.


00: Booting default (2.6.18-194.8.1.el5)...
Linux version 2.6.18-194.8.1.el5 
(mockbu...@s390-002.build.bos.redhat.commailto:mockbu...@s390-002.build.bos.redhat.com)
 (gcc
version 4.1.2 20080704 (Red Hat 4.1.2-48)) #1 SMP Wed Jun 23 11:09:16 EDT 2010
We are running under VM (64 bit mode)
Detected 3 CPU's
Boot cpu address  0
Built 1 zonelists.  Total pages: 16777216
Kernel command line: root=LABEL=/ BOOT_IMAGE=0
PID hash table entries: 4096 (order: 12, 32768 bytes)
Dentry cache hash table entries: 8388608 (order: 14, 67108864 bytes)
Inode-cache hash table entries: 4194304 (order: 13, 33554432 bytes)
Memory: 65951564k/67108864k available (3414k kernel code, 0k reserved, 2256k dat
a, 136k init)
Write protected kernel read-only data: 0x356000 - 0x409fff
Calibrating delay loop... 2981.88 BogoMIPS (lpj=14909440)
Security Framework v1.0.0 initialized
SELinux:  Initializing.
selinux_register_security:  Registering secondary module capability
Capability LSM initialized as secondary
Mount-cache hash table entries: 256
cpu 0 phys_idx=0 vers=FF ident=01F2D6 machine=2098 unused=8000
cpu 1 phys_idx=1 vers=FF ident=01F2D6 machine=2098 unused=8000
cpu 2 phys_idx=2 vers=FF ident=01F2D6 machine=2098 unused=8000
Brought up 3 CPUs
migration_cost=1000
checking if image is initramfs...it isn't (bad gzip magic numbers); looks like a
n initrd
Freeing initrd memory: 2759k freed
list_del corruption. prev-next should be 8001bff0, but was 8001
c840
kernel BUG at lib/list_debug.c:65!
illegal operation: 0001 Ý#1¨
CPU: 0 Not tainted 2.6.18-194.8.1.el5 #1
Process swapper (pid: 1, task: c611f788, ksp: c6123b10)
Krnl PSW : 040400018000 002685d6 (list_del+0x9e/0xcc)
Krnl GPRS: 0015 c6123cb8 0026 0400
   0012a83e 0733 000a 0050e400
   0001  8001bf90 8001bff0
   8001bfce 00369878 002685d2 c6123d10
Krnl Code: d2 07 10 08 20 08 e3 10 d0 08 00 04 e3 10 20 08 00 24 e3 10
Call Trace:
(Ý002685d2¨ list_del+0x9a/0xcc)
 Ý0017820a¨ free_pages_bulk+0x9e/0x34c
 Ý0017868a¨ free_hot_cold_page+0x1d2/0x1f4
 Ý001009c0¨ free_initrd_mem+0x8c/0xc8
 Ý005944ee¨ free_initrd+0xba/0xe4
 Ý0058e324¨ init+0x1a0/0x32c
 Ý0010558e¨ kernel_thread_starter+0x6/0xc
 Ý00105588¨ kernel_thread_starter+0x0/0xc

 0Kernel panic - not syncing: Fatal exception: panic_on_oops
01: HCPGSP2629I The virtual machine is placed in CP mode due to a SIGP stop from
 CPU 00.
02: HCPGSP2629I The virtual machine is placed in CP mode due to a SIGP stop from
 CPU 00.
00: HCPGIR450W CP entered; disabled wait PSW 00020001 8000  0010BDBE





--

Carlos Bodra

IBM Certified Specialist System z

Sao Paulo - Brazil


Re: z/VM RedHat Virtual Machine Memory abend

2011-04-20 Thread Carlos Bodra - Pessoal

Larry,

We are running it z/VM 5.4 RSU 1003 (lastest), but problem is connected 
to Linux, because I changed MAINT user memory to 128GB and all runs fine.

This machine has no CP´s just IFL´s processors.

Carlos Bodra
IBM Certified Specialist System z   
Sao Paulo - Brazil


Em 20/04/2011 19:24, Davis, Larry (National VM/VSE Capability) escreveu:


Are you Running VM on this or zLinux only on an LPAR?

Larry Davis**

*From:*The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] 
*On Behalf Of *Carlos Bodra - Pessoal

*Sent:* Wednesday, April 20, 2011 6:19 PM
*To:* IBMVM@LISTSERV.UARK.EDU
*Subject:* z/VM RedHat Virtual Machine Memory abend




Hi s390x Gurus

I´m new to Linux on z and we are conducting a POC test of Linux Red 
Hat with Oracle running under z/VM 5.4 RSU 1003

and a z/10 BC model A00 (IFL Only).

If linux virtual machine is defined with 64G in directory we got an 
abend during startup (see below). Doing some tests I found that I
can define it until 59G in directory (60794036k from TOP linux 
command) and it will startup correctly.


My questions are:

1 - Is this a limitation of linux s390x or Red Hat distribution?
2 - Is this a linux s390x bug or Red Hat distribution?
3 - How can I circunvent this so we can continue with POC (Proof Of 
Concept)?


Thanks in advance for all hints and tips about.


00: Booting default (2.6.18-194.8.1.el5)...
Linux version 2.6.18-194.8.1.el5 
(mockbu...@s390-002.build.bos.redhat.com 
mailto:mockbu...@s390-002.build.bos.redhat.com) (gcc
version 4.1.2 20080704 (Red Hat 4.1.2-48)) #1 SMP Wed Jun 23 11:09:16 
EDT 2010

We are running under VM (64 bit mode)
Detected 3 CPU's
Boot cpu address  0
Built 1 zonelists.  Total pages: 16777216
Kernel command line: root=LABEL=/ BOOT_IMAGE=0
PID hash table entries: 4096 (order: 12, 32768 bytes)
Dentry cache hash table entries: 8388608 (order: 14, 67108864 bytes)
Inode-cache hash table entries: 4194304 (order: 13, 33554432 bytes)
*Memory: 65951564k/67108864k available*(3414k kernel code, 0k 
reserved, 2256k dat

a, 136k init)
Write protected kernel read-only data: 0x356000 - 0x409fff
Calibrating delay loop... 2981.88 BogoMIPS (lpj=14909440)
Security Framework v1.0.0 initialized
SELinux:  Initializing.
selinux_register_security:  Registering secondary module capability
Capability LSM initialized as secondary
Mount-cache hash table entries: 256
cpu 0 phys_idx=0 vers=FF ident=01F2D6 machine=2098 unused=8000
cpu 1 phys_idx=1 vers=FF ident=01F2D6 machine=2098 unused=8000
cpu 2 phys_idx=2 vers=FF ident=01F2D6 machine=2098 unused=8000
Brought up 3 CPUs
migration_cost=1000
checking if image is initramfs...it isn't (bad gzip magic numbers); 
looks like a

n initrd
Freeing initrd memory: 2759k freed
list_del corruption. prev-next should be 8001bff0, but was 
8001

c840
kernel BUG at lib/list_debug.c:65!
illegal operation: 0001 Ý#1¨
CPU: 0 Not tainted 2.6.18-194.8.1.el5 #1
Process swapper (pid: 1, task: c611f788, ksp: c6123b10)
Krnl PSW : 040400018000 002685d6 (list_del+0x9e/0xcc)
Krnl GPRS: 0015 c6123cb8 0026 
0400
   0012a83e 0733 000a 
0050e400
   0001  8001bf90 
8001bff0
   8001bfce 00369878 002685d2 
c6123d10

Krnl Code: d2 07 10 08 20 08 e3 10 d0 08 00 04 e3 10 20 08 00 24 e3 10
Call Trace:
(Ý002685d2¨ list_del+0x9a/0xcc)
 Ý0017820a¨ free_pages_bulk+0x9e/0x34c
 Ý0017868a¨ free_hot_cold_page+0x1d2/0x1f4
 Ý001009c0¨ free_initrd_mem+0x8c/0xc8
 Ý005944ee¨ free_initrd+0xba/0xe4
 Ý0058e324¨ init+0x1a0/0x32c
 Ý0010558e¨ kernel_thread_starter+0x6/0xc
 Ý00105588¨ kernel_thread_starter+0x0/0xc

0Kernel panic - not syncing: Fatal exception: panic_on_oops
01: HCPGSP2629I The virtual machine is placed in CP mode due to a SIGP 
stop from

 CPU 00.
02: HCPGSP2629I The virtual machine is placed in CP mode due to a SIGP 
stop from

 CPU 00.
00: HCPGIR450W CP entered; disabled wait PSW 00020001 8000 
 0010BDBE





--
Carlos Bodra
IBM Certified Specialist System z
Sao Paulo - Brazil


Re: Detaching A disk from z/Linux guest dynamically

2011-04-20 Thread Rob van der Heij
On Wed, Apr 20, 2011 at 11:54 PM, Scott Rohling scott.rohl...@gmail.com wrote:

 There are certainly valid uses for SECUSER/SEND/FOR commands -- I don't
 agree that their use is an abuse of power.  But of course they could be
 depending on what you do with them.   I suppose you could consider a
 SHUTDOWN command an abuse of power as well...   ;-)

Your response shows that I failed to make my point. What I mean with
abuse of power is doing the job with tools that are sharper or
heavier than needed.

I have no reason to walk around all day with a userid capable to issue
a SHUTDOWN. Most serious installations that I know have rearranged
their privilege classes such that
1) don't use a CLASS A userid unless you have things that require it
2) rearrange popular commands (like LOCK and UNLOCK) to avoid 1) as
long as you can
3) move the SHUTDOWN out of CLASS A to avoid mistakes by those that need CLASS A

Rob


Re: z/VM RedHat Virtual Machine Memory abend

2011-04-20 Thread Davis, Larry (National VM/VSE Capability)
What is your Hardware Memory configuration for Main Storage and XSTORE for VM



Larry Davis

From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf 
Of Carlos Bodra - Pessoal
Sent: Wednesday, April 20, 2011 6:39 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: z/VM RedHat Virtual Machine Memory abend

Larry,

We are running it z/VM 5.4 RSU 1003 (lastest), but problem is connected to 
Linux, because I changed MAINT user memory to 128GB and all runs fine.
This machine has no CP´s just IFL´s processors.



Carlos Bodra

IBM Certified Specialist System z

Sao Paulo - Brazil

Em 20/04/2011 19:24, Davis, Larry (National VM/VSE Capability) escreveu:
Are you Running VM on this or zLinux only on an LPAR?

Larry Davis

From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf 
Of Carlos Bodra - Pessoal
Sent: Wednesday, April 20, 2011 6:19 PM
To: IBMVM@LISTSERV.UARK.EDUmailto:IBMVM@LISTSERV.UARK.EDU
Subject: z/VM RedHat Virtual Machine Memory abend




Hi s390x Gurus

I´m new to Linux on z and we are conducting a POC test of Linux Red Hat with 
Oracle running under z/VM 5.4 RSU 1003
and a z/10 BC model A00 (IFL Only).

If linux virtual machine is defined with 64G in directory we got an abend 
during startup (see below). Doing some tests I found that I
can define it until 59G in directory (60794036k from TOP linux command) and it 
will startup correctly.

My questions are:

1 - Is this a limitation of linux s390x or Red Hat distribution?
2 - Is this a linux s390x bug or Red Hat distribution?
3 - How can I circunvent this so we can continue with POC (Proof Of Concept)?

Thanks in advance for all hints and tips about.


00: Booting default (2.6.18-194.8.1.el5)...
Linux version 2.6.18-194.8.1.el5 
(mockbu...@s390-002.build.bos.redhat.commailto:mockbu...@s390-002.build.bos.redhat.com)
 (gcc
version 4.1.2 20080704 (Red Hat 4.1.2-48)) #1 SMP Wed Jun 23 11:09:16 EDT 2010
We are running under VM (64 bit mode)
Detected 3 CPU's
Boot cpu address  0
Built 1 zonelists.  Total pages: 16777216
Kernel command line: root=LABEL=/ BOOT_IMAGE=0
PID hash table entries: 4096 (order: 12, 32768 bytes)
Dentry cache hash table entries: 8388608 (order: 14, 67108864 bytes)
Inode-cache hash table entries: 4194304 (order: 13, 33554432 bytes)
Memory: 65951564k/67108864k available (3414k kernel code, 0k reserved, 2256k dat
a, 136k init)
Write protected kernel read-only data: 0x356000 - 0x409fff
Calibrating delay loop... 2981.88 BogoMIPS (lpj=14909440)
Security Framework v1.0.0 initialized
SELinux:  Initializing.
selinux_register_security:  Registering secondary module capability
Capability LSM initialized as secondary
Mount-cache hash table entries: 256
cpu 0 phys_idx=0 vers=FF ident=01F2D6 machine=2098 unused=8000
cpu 1 phys_idx=1 vers=FF ident=01F2D6 machine=2098 unused=8000
cpu 2 phys_idx=2 vers=FF ident=01F2D6 machine=2098 unused=8000
Brought up 3 CPUs
migration_cost=1000
checking if image is initramfs...it isn't (bad gzip magic numbers); looks like a
n initrd
Freeing initrd memory: 2759k freed
list_del corruption. prev-next should be 8001bff0, but was 8001
c840
kernel BUG at lib/list_debug.c:65!
illegal operation: 0001 Ý#1¨
CPU: 0 Not tainted 2.6.18-194.8.1.el5 #1
Process swapper (pid: 1, task: c611f788, ksp: c6123b10)
Krnl PSW : 040400018000 002685d6 (list_del+0x9e/0xcc)
Krnl GPRS: 0015 c6123cb8 0026 0400
   0012a83e 0733 000a 0050e400
   0001  8001bf90 8001bff0
   8001bfce 00369878 002685d2 c6123d10
Krnl Code: d2 07 10 08 20 08 e3 10 d0 08 00 04 e3 10 20 08 00 24 e3 10
Call Trace:
(Ý002685d2¨ list_del+0x9a/0xcc)
 Ý0017820a¨ free_pages_bulk+0x9e/0x34c
 Ý0017868a¨ free_hot_cold_page+0x1d2/0x1f4
 Ý001009c0¨ free_initrd_mem+0x8c/0xc8
 Ý005944ee¨ free_initrd+0xba/0xe4
 Ý0058e324¨ init+0x1a0/0x32c
 Ý0010558e¨ kernel_thread_starter+0x6/0xc
 Ý00105588¨ kernel_thread_starter+0x0/0xc

 0Kernel panic - not syncing: Fatal exception: panic_on_oops
01: HCPGSP2629I The virtual machine is placed in CP mode due to a SIGP stop from
 CPU 00.
02: HCPGSP2629I The virtual machine is placed in CP mode due to a SIGP stop from
 CPU 00.
00: HCPGIR450W CP entered; disabled wait PSW 00020001 8000  0010BDBE






--

Carlos Bodra

IBM Certified Specialist System z

Sao Paulo - Brazil


Re: z/VM RedHat Virtual Machine Memory abend

2011-04-20 Thread Carlos Bodra - Pessoal

q stor
STORAGE = 48G CONFIGURED = 48G INC = 128M STANDBY = 0  RESERVED = 0
Ready; T=0.01/0.01 20:33:09

No xstore defined.

Carlos Bodra
IBM Certified Specialist System z   
Sao Paulo - Brazil


Em 20/04/2011 20:04, Davis, Larry (National VM/VSE Capability) escreveu:


What is your Hardware Memory configuration for Main Storage and XSTORE 
for VM


Larry Davis**

*From:*The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] 
*On Behalf Of *Carlos Bodra - Pessoal

*Sent:* Wednesday, April 20, 2011 6:39 PM
*To:* IBMVM@LISTSERV.UARK.EDU
*Subject:* Re: z/VM RedHat Virtual Machine Memory abend

Larry,

We are running it z/VM 5.4 RSU 1003 (lastest), but problem is 
connected to Linux, because I changed MAINT user memory to 128GB and 
all runs fine.

This machine has no CP´s just IFL´s processors.


Carlos Bodra
IBM Certified Specialist System z
Sao Paulo - Brazil


Em 20/04/2011 19:24, Davis, Larry (National VM/VSE Capability) escreveu:

Are you Running VM on this or zLinux only on an LPAR?

Larry Davis

*From:*The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] 
*On Behalf Of *Carlos Bodra - Pessoal

*Sent:* Wednesday, April 20, 2011 6:19 PM
*To:* IBMVM@LISTSERV.UARK.EDU mailto:IBMVM@LISTSERV.UARK.EDU
*Subject:* z/VM RedHat Virtual Machine Memory abend




Hi s390x Gurus

I´m new to Linux on z and we are conducting a POC test of Linux Red 
Hat with Oracle running under z/VM 5.4 RSU 1003

and a z/10 BC model A00 (IFL Only).

If linux virtual machine is defined with 64G in directory we got an 
abend during startup (see below). Doing some tests I found that I
can define it until 59G in directory (60794036k from TOP linux 
command) and it will startup correctly.


My questions are:

1 - Is this a limitation of linux s390x or Red Hat distribution?
2 - Is this a linux s390x bug or Red Hat distribution?
3 - How can I circunvent this so we can continue with POC (Proof Of 
Concept)?


Thanks in advance for all hints and tips about.


00: Booting default (2.6.18-194.8.1.el5)...
Linux version 2.6.18-194.8.1.el5 
(mockbu...@s390-002.build.bos.redhat.com 
mailto:mockbu...@s390-002.build.bos.redhat.com) (gcc
version 4.1.2 20080704 (Red Hat 4.1.2-48)) #1 SMP Wed Jun 23 11:09:16 
EDT 2010

We are running under VM (64 bit mode)
Detected 3 CPU's
Boot cpu address  0
Built 1 zonelists.  Total pages: 16777216
Kernel command line: root=LABEL=/ BOOT_IMAGE=0
PID hash table entries: 4096 (order: 12, 32768 bytes)
Dentry cache hash table entries: 8388608 (order: 14, 67108864 bytes)
Inode-cache hash table entries: 4194304 (order: 13, 33554432 bytes)
*Memory: 65951564k/67108864k available*(3414k kernel code, 0k 
reserved, 2256k dat

a, 136k init)
Write protected kernel read-only data: 0x356000 - 0x409fff
Calibrating delay loop... 2981.88 BogoMIPS (lpj=14909440)
Security Framework v1.0.0 initialized
SELinux:  Initializing.
selinux_register_security:  Registering secondary module capability
Capability LSM initialized as secondary
Mount-cache hash table entries: 256
cpu 0 phys_idx=0 vers=FF ident=01F2D6 machine=2098 unused=8000
cpu 1 phys_idx=1 vers=FF ident=01F2D6 machine=2098 unused=8000
cpu 2 phys_idx=2 vers=FF ident=01F2D6 machine=2098 unused=8000
Brought up 3 CPUs
migration_cost=1000
checking if image is initramfs...it isn't (bad gzip magic numbers); 
looks like a

n initrd
Freeing initrd memory: 2759k freed
list_del corruption. prev-next should be 8001bff0, but was 
8001

c840
kernel BUG at lib/list_debug.c:65!
illegal operation: 0001 Ý#1¨
CPU: 0 Not tainted 2.6.18-194.8.1.el5 #1
Process swapper (pid: 1, task: c611f788, ksp: c6123b10)
Krnl PSW : 040400018000 002685d6 (list_del+0x9e/0xcc)
Krnl GPRS: 0015 c6123cb8 0026 
0400
   0012a83e 0733 000a 
0050e400
   0001  8001bf90 
8001bff0
   8001bfce 00369878 002685d2 
c6123d10

Krnl Code: d2 07 10 08 20 08 e3 10 d0 08 00 04 e3 10 20 08 00 24 e3 10
Call Trace:
(Ý002685d2¨ list_del+0x9a/0xcc)
 Ý0017820a¨ free_pages_bulk+0x9e/0x34c
 Ý0017868a¨ free_hot_cold_page+0x1d2/0x1f4
 Ý001009c0¨ free_initrd_mem+0x8c/0xc8
 Ý005944ee¨ free_initrd+0xba/0xe4
 Ý0058e324¨ init+0x1a0/0x32c
 Ý0010558e¨ kernel_thread_starter+0x6/0xc
 Ý00105588¨ kernel_thread_starter+0x0/0xc

0Kernel panic - not syncing: Fatal exception: panic_on_oops
01: HCPGSP2629I The virtual machine is placed in CP mode due to a SIGP 
stop from

 CPU 00.
02: HCPGSP2629I The virtual machine is placed in CP mode due to a SIGP 
stop from

 CPU 00.
00: HCPGIR450W CP entered; disabled wait PSW 00020001 8000 
 0010BDBE






--
Carlos Bodra
IBM Certified Specialist System z
Sao Paulo - Brazil


Re: z/VM RedHat Virtual Machine Memory abend

2011-04-20 Thread Scott Rohling
Since you are overcommitting memory -- how much paging space do you have?

Scott Rohling

On Wed, Apr 20, 2011 at 5:32 PM, Carlos Bodra - Pessoal cbo...@terra.com.br
 wrote:

  q stor
 STORAGE = 48G CONFIGURED = 48G INC = 128M STANDBY = 0  RESERVED = 0
 Ready; T=0.01/0.01 20:33:09

 No xstore defined.

  Carlos Bodra 
 IBM Certified Specialist System z 
 Sao Paulo - Brazil


 Em 20/04/2011 20:04, Davis, Larry (National VM/VSE Capability) escreveu:

  What is your Hardware Memory configuration for Main Storage and XSTORE
 for VM







 Larry Davis**



 *From:* The IBM z/VM Operating System 
 [mailto:IBMVM@LISTSERV.UARK.EDUIBMVM@LISTSERV.UARK.EDU]
 *On Behalf Of *Carlos Bodra - Pessoal
 *Sent:* Wednesday, April 20, 2011 6:39 PM
 *To:* IBMVM@LISTSERV.UARK.EDU
 *Subject:* Re: z/VM RedHat Virtual Machine Memory abend



 Larry,

 We are running it z/VM 5.4 RSU 1003 (lastest), but problem is connected to
 Linux, because I changed MAINT user memory to 128GB and all runs fine.
 This machine has no CP´s just IFL´s processors.


  Carlos Bodra

 IBM Certified Specialist System z

 Sao Paulo - Brazil


 Em 20/04/2011 19:24, Davis, Larry (National VM/VSE Capability) escreveu:

 Are you Running VM on this or zLinux only on an LPAR?



 Larry Davis



 *From:* The IBM z/VM Operating System 
 [mailto:IBMVM@LISTSERV.UARK.EDUIBMVM@LISTSERV.UARK.EDU]
 *On Behalf Of *Carlos Bodra - Pessoal
 *Sent:* Wednesday, April 20, 2011 6:19 PM
 *To:* IBMVM@LISTSERV.UARK.EDU
 *Subject:* z/VM RedHat Virtual Machine Memory abend






 Hi s390x Gurus

 I´m new to Linux on z and we are conducting a POC test of Linux Red Hat
 with Oracle running under z/VM 5.4 RSU 1003
 and a z/10 BC model A00 (IFL Only).

 If linux virtual machine is defined with 64G in directory we got an abend
 during startup (see below). Doing some tests I found that I
 can define it until 59G in directory (60794036k from TOP linux command) and
 it will startup correctly.

 My questions are:

 1 - Is this a limitation of linux s390x or Red Hat distribution?
 2 - Is this a linux s390x bug or Red Hat distribution?
 3 - How can I circunvent this so we can continue with POC (Proof Of
 Concept)?

 Thanks in advance for all hints and tips about.


 00: Booting default
 (2.6.18-194.8.1.el5)...
 Linux version 2.6.18-194.8.1.el5 (mockbu...@s390-002.build.bos.redhat.com)
 (gcc
 version 4.1.2 20080704 (Red Hat 4.1.2-48)) #1 SMP Wed Jun 23 11:09:16 EDT
 2010
 We are running under VM (64 bit
 mode)
 Detected 3
 CPU's
 Boot cpu address
 0
 Built 1 zonelists.  Total pages:
 16777216
 Kernel command line: root=LABEL=/
 BOOT_IMAGE=0
 PID hash table entries: 4096 (order: 12, 32768
 bytes)
 Dentry cache hash table entries: 8388608 (order: 14, 67108864
 bytes)
 Inode-cache hash table entries: 4194304 (order: 13, 33554432
 bytes)
 *Memory: 65951564k/67108864k available* (3414k kernel code, 0k reserved,
 2256k dat
 a, 136k
 init)
 Write protected kernel read-only data: 0x356000 -
 0x409fff
 Calibrating delay loop... 2981.88 BogoMIPS
 (lpj=14909440)
 Security Framework v1.0.0
 initialized
 SELinux:
 Initializing.
 selinux_register_security:  Registering secondary module
 capability
 Capability LSM initialized as
 secondary
 Mount-cache hash table entries:
 256
 cpu 0 phys_idx=0 vers=FF ident=01F2D6 machine=2098
 unused=8000
 cpu 1 phys_idx=1 vers=FF ident=01F2D6 machine=2098
 unused=8000
 cpu 2 phys_idx=2 vers=FF ident=01F2D6 machine=2098
 unused=8000
 Brought up 3
 CPUs
 migration_cost=1000

 checking if image is initramfs...it isn't (bad gzip magic numbers); looks
 like a
 n
 initrd

 Freeing initrd memory: 2759k
 freed
 list_del corruption. prev-next should be 8001bff0, but was
 8001
 c840

 kernel BUG at
 lib/list_debug.c:65!
 illegal operation: 0001
 Ý#1¨
 CPU: 0 Not tainted 2.6.18-194.8.1.el5
 #1
 Process swapper (pid: 1, task: c611f788, ksp:
 c6123b10)
 Krnl PSW : 040400018000 002685d6
 (list_del+0x9e/0xcc)
 Krnl GPRS: 0015 c6123cb8 0026
 0400
0012a83e 0733 000a
 0050e400
0001  8001bf90
 8001bff0
8001bfce 00369878 002685d2
 c6123d10
 Krnl Code: d2 07 10 08 20 08 e3 10 d0 08 00 04 e3 10 20 08 00 24 e3
 10
 Call
 Trace:
 (Ý002685d2¨
 list_del+0x9a/0xcc)
  Ý0017820a¨
 free_pages_bulk+0x9e/0x34c
  Ý0017868a¨
 free_hot_cold_page+0x1d2/0x1f4
  Ý001009c0¨
 free_initrd_mem+0x8c/0xc8
  Ý005944ee¨
 free_initrd+0xba/0xe4
  Ý0058e324¨
 init+0x1a0/0x32c
  Ý0010558e¨
 kernel_thread_starter+0x6/0xc
  Ý00105588¨
 kernel_thread_starter+0x0/0xc


  0Kernel panic - not syncing: Fatal exception:
 panic_on_oops
 01: HCPGSP2629I The virtual machine is placed in CP mode due to a SIGP stop
 from
  CPU
 00.
 02: HCPGSP2629I The virtual machine is placed in CP mode due to a SIGP stop
 from
  CPU
 00.
 00: 

Re: z/VM RedHat Virtual Machine Memory abend

2011-04-20 Thread Davis, Larry (National VM/VSE Capability)
Well that may be a problem VM always needs a little XSTORE unlike MVS and 
because you are trying to allocate a guest with more memory than you have Real 
Memory to support than VM will need someplace to Swap. How many Paging volumes 
do you have and what are their sizes.

Also don't think that a WAS server on a zSeries box will need that much 
Storage. I would start him off with 32 GB maybe but give him some VDISK SWAP 
Space.

Other s on this List can help with that and there is a Redpaper on setting up 
WebSphere on zLinux I attached it here, but if it doesn't make it search for 
Linux on IBM zSeries and S/390: z/VM Configuration for WebSphere Deployments

Larry Davis

From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf 
Of Carlos Bodra - Pessoal
Sent: Wednesday, April 20, 2011 7:33 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: z/VM RedHat Virtual Machine Memory abend

q stor
STORAGE = 48G CONFIGURED = 48G INC = 128M STANDBY = 0  RESERVED = 0
Ready; T=0.01/0.01 20:33:09

No xstore defined.



Carlos Bodra

IBM Certified Specialist System z

Sao Paulo - Brazil

Em 20/04/2011 20:04, Davis, Larry (National VM/VSE Capability) escreveu:
What is your Hardware Memory configuration for Main Storage and XSTORE for VM



Larry Davis

From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf 
Of Carlos Bodra - Pessoal
Sent: Wednesday, April 20, 2011 6:39 PM
To: IBMVM@LISTSERV.UARK.EDUmailto:IBMVM@LISTSERV.UARK.EDU
Subject: Re: z/VM RedHat Virtual Machine Memory abend

Larry,

We are running it z/VM 5.4 RSU 1003 (lastest), but problem is connected to 
Linux, because I changed MAINT user memory to 128GB and all runs fine.
This machine has no CP´s just IFL´s processors.




Carlos Bodra

IBM Certified Specialist System z

Sao Paulo - Brazil

Em 20/04/2011 19:24, Davis, Larry (National VM/VSE Capability) escreveu:
Are you Running VM on this or zLinux only on an LPAR?

Larry Davis

From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf 
Of Carlos Bodra - Pessoal
Sent: Wednesday, April 20, 2011 6:19 PM
To: IBMVM@LISTSERV.UARK.EDUmailto:IBMVM@LISTSERV.UARK.EDU
Subject: z/VM RedHat Virtual Machine Memory abend




Hi s390x Gurus

I´m new to Linux on z and we are conducting a POC test of Linux Red Hat with 
Oracle running under z/VM 5.4 RSU 1003
and a z/10 BC model A00 (IFL Only).

If linux virtual machine is defined with 64G in directory we got an abend 
during startup (see below). Doing some tests I found that I
can define it until 59G in directory (60794036k from TOP linux command) and it 
will startup correctly.

My questions are:

1 - Is this a limitation of linux s390x or Red Hat distribution?
2 - Is this a linux s390x bug or Red Hat distribution?
3 - How can I circunvent this so we can continue with POC (Proof Of Concept)?

Thanks in advance for all hints and tips about.


00: Booting default (2.6.18-194.8.1.el5)...
Linux version 2.6.18-194.8.1.el5 
(mockbu...@s390-002.build.bos.redhat.commailto:mockbu...@s390-002.build.bos.redhat.com)
 (gcc
version 4.1.2 20080704 (Red Hat 4.1.2-48)) #1 SMP Wed Jun 23 11:09:16 EDT 2010
We are running under VM (64 bit mode)
Detected 3 CPU's
Boot cpu address  0
Built 1 zonelists.  Total pages: 16777216
Kernel command line: root=LABEL=/ BOOT_IMAGE=0
PID hash table entries: 4096 (order: 12, 32768 bytes)
Dentry cache hash table entries: 8388608 (order: 14, 67108864 bytes)
Inode-cache hash table entries: 4194304 (order: 13, 33554432 bytes)
Memory: 65951564k/67108864k available (3414k kernel code, 0k reserved, 2256k dat
a, 136k init)
Write protected kernel read-only data: 0x356000 - 0x409fff
Calibrating delay loop... 2981.88 BogoMIPS (lpj=14909440)
Security Framework v1.0.0 initialized
SELinux:  Initializing.
selinux_register_security:  Registering secondary module capability
Capability LSM initialized as secondary
Mount-cache hash table entries: 256
cpu 0 phys_idx=0 vers=FF ident=01F2D6 machine=2098 unused=8000
cpu 1 phys_idx=1 vers=FF ident=01F2D6 machine=2098 unused=8000
cpu 2 phys_idx=2 vers=FF ident=01F2D6 machine=2098 unused=8000
Brought up 3 CPUs
migration_cost=1000
checking if image is initramfs...it isn't (bad gzip magic numbers); looks like a
n initrd
Freeing initrd memory: 2759k freed
list_del corruption. prev-next should be 8001bff0, but was 8001
c840
kernel BUG at lib/list_debug.c:65!
illegal operation: 0001 Ý#1¨
CPU: 0 Not tainted 2.6.18-194.8.1.el5 #1
Process swapper (pid: 1, task: c611f788, ksp: c6123b10)
Krnl PSW : 040400018000 002685d6 (list_del+0x9e/0xcc)
Krnl GPRS: 0015 c6123cb8 0026 0400
   0012a83e 0733 000a 0050e400
   0001  8001bf90 8001bff0
   8001bfce 00369878 002685d2 c6123d10
Krnl Code: d2 07 10 08 20 08 e3 10 d0 08 00 04 e3 10 20 08 00 24 e3 10
Call Trace:

Re: z/VM RedHat Virtual Machine Memory abend

2011-04-20 Thread Quay, Jonathan (IHG)
I would also wonder where you came up with that 64G virtual memory requirement. 
 The rules of thumb that apply to intel environments are counterproductive in 
the Z environment.  I hope our Velocity friends will expound at length about 
that.

 



From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf 
Of Davis, Larry (National VM/VSE Capability)
Sent: Wednesday, April 20, 2011 7:55 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: z/VM RedHat Virtual Machine Memory abend

 

Well that may be a problem VM always needs a little XSTORE unlike MVS and 
because you are trying to allocate a guest with more memory than you have Real 
Memory to support than VM will need someplace to Swap. How many Paging volumes 
do you have and what are their sizes. 

 

Also don't think that a WAS server on a zSeries box will need that much 
Storage. I would start him off with 32 GB maybe but give him some VDISK SWAP 
Space.

 

Other s on this List can help with that and there is a Redpaper on setting up 
WebSphere on zLinux I attached it here, but if it doesn't make it search for 
Linux on IBM zSeries and S/390: z/VM Configuration for WebSphere Deployments

 

Larry Davis

 

From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf 
Of Carlos Bodra - Pessoal
Sent: Wednesday, April 20, 2011 7:33 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: z/VM RedHat Virtual Machine Memory abend

 

q stor   
STORAGE = 48G CONFIGURED = 48G INC = 128M STANDBY = 0  RESERVED = 0  
Ready; T=0.01/0.01 20:33:09  

No xstore defined.



Carlos Bodra 
IBM Certified Specialist System z   
Sao Paulo - Brazil


Em 20/04/2011 20:04, Davis, Larry (National VM/VSE Capability) escreveu: 

What is your Hardware Memory configuration for Main Storage and XSTORE for VM 

 

 

 

Larry Davis

 

From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf 
Of Carlos Bodra - Pessoal
Sent: Wednesday, April 20, 2011 6:39 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: z/VM RedHat Virtual Machine Memory abend

 

Larry,

We are running it z/VM 5.4 RSU 1003 (lastest), but problem is connected to 
Linux, because I changed MAINT user memory to 128GB and all runs fine.
This machine has no CP´s just IFL´s processors.




Carlos Bodra 
IBM Certified Specialist System z   
Sao Paulo - Brazil


Em 20/04/2011 19:24, Davis, Larry (National VM/VSE Capability) escreveu: 

Are you Running VM on this or zLinux only on an LPAR?

 

Larry Davis

 

From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf 
Of Carlos Bodra - Pessoal
Sent: Wednesday, April 20, 2011 6:19 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: z/VM RedHat Virtual Machine Memory abend

 




Hi s390x Gurus

I´m new to Linux on z and we are conducting a POC test of Linux Red Hat with 
Oracle running under z/VM 5.4 RSU 1003 
and a z/10 BC model A00 (IFL Only).

If linux virtual machine is defined with 64G in directory we got an abend 
during startup (see below). Doing some tests I found that I
can define it until 59G in directory (60794036k from TOP linux command) and it 
will startup correctly.

My questions are:

1 - Is this a limitation of linux s390x or Red Hat distribution?
2 - Is this a linux s390x bug or Red Hat distribution?
3 - How can I circunvent this so we can continue with POC (Proof Of Concept)? 

Thanks in advance for all hints and tips about.


00: Booting default (2.6.18-194.8.1.el5)... 
Linux version 2.6.18-194.8.1.el5 (mockbu...@s390-002.build.bos.redhat.com) (gcc 
version 4.1.2 20080704 (Red Hat 4.1.2-48)) #1 SMP Wed Jun 23 11:09:16 EDT 2010  
We are running under VM (64 bit mode)   
Detected 3 CPU's
Boot cpu address  0 
Built 1 zonelists.  Total pages: 16777216   
Kernel command line: root=LABEL=/ BOOT_IMAGE=0  
PID hash table entries: 4096 (order: 12, 32768 bytes)   
Dentry cache hash table entries: 8388608 (order: 14, 67108864 bytes)
Inode-cache hash table entries: 4194304 (order: 13, 33554432 bytes) 
Memory: 65951564k/67108864k available (3414k kernel code, 0k reserved, 2256k dat
a, 136k init)   
Write protected kernel read-only data: 0x356000 - 0x409fff  
Calibrating delay loop... 2981.88 BogoMIPS (lpj=14909440)   
Security Framework v1.0.0 initialized   
SELinux:  Initializing. 
selinux_register_security:  Registering secondary module capability 

Re: z/VM RedHat Virtual Machine Memory abend

2011-04-20 Thread Richard Troth
I didn't say anything at first because clearly there IS a problem. Linux is
crashing when presented with 64G of storage, but not when presented with
59G, per what Carlos said at the start. This is not likely a VM or hardware
problem.

True, the req is probably ROT and not based on actual application needs but
on platform assumptions. If 59G IPLs, then run the POC with that and see
what happens. In production you will almost certainly want to REDUCE the
memory given to each v-machine. 59G is typically too much, sometimes *way*
too much.

Virtualized Linux has been around for more than ten years, but many
consultants and app vendors still don't understand.

-- Rick, Velocity friend; 





On Apr 20, 2011 8:04 PM, Quay, Jonathan (IHG) jonathan.q...@ihg.com
wrote:


Re: z/VM RedHat Virtual Machine Memory abend

2011-04-20 Thread David Boyes
Check the amount of paging space you have defined for the VM system. You can 
define a virtual machine far bigger than you can actually use if you have 
insufficient paging space.  The guest will work for a while, until it tries to 
access a page that can't be supported with backing store, and you get weird 
memory problems like that.

Also, seriously ask why the virtual machine needs to be so large. If it's 
because that's the way it is on the distributed platform, that's going to do 
more harm than good - I/O avoidance is not as important on this platform as it 
is elsewhere (the biggest reason for huge memory sizes).  Start with 1 or 2G, 
reduce the size of SGA, and make sure you use VDISK for swap. Also make sure 
you have some XSTORE defined if you're going to have virtual machines that big 
- you're going to need it for setting up a paging hierarchy that can sustain 
moving


Re: z/VM RedHat Virtual Machine Memory abend

2011-04-20 Thread David Boyes
Check the amount of paging space you have defined for the VM system.

Is this a brand new VM install right out of the box? If so, then this is most 
likely to be the problem. 48G of real, plus the default paging areas in a brand 
new VM install add up to just about 52G or so, depending on whether you used 
mod 3 or mod 9s.

It works for MAINT because CMS is extremely memory efficient; it doesn't 
require that every page in the virtual machine definition be actually present 
when it IPLs, and it touches only what it actually needs. Linux touches every 
page at some point, so you need enough paging space to support the total size 
of all the virtual machines you define, plus a little bit of insurance.

Add at least 3-4 mod 9 or mod 27s as paging space and see if the problem goes 
away.


FTPS using zVM FTP client ?

2011-04-20 Thread Bill Pettit
We have a vendor that we need to ftp files to from our zVM 5.4 system.   The 
vendor says we need to use FTPS over IMPLICIT TLS/SSL.

I have been reading the TCPIP Users Guide and it appears the this is possible 
from our zVM 5.4 system if I configure and use the SECURECONTROL and SECUREDATA 
statements in a FTP DATA file, which I have done.   So far I have not had any 
luck connecting to them.   If anyone else has done something similar can you 
tell me if I am missing something?

Thank you in advance...

Bill Pettit


Re: FTPS using zVM FTP client ?

2011-04-20 Thread Alan Altmark
The ftp client supports only negotiated SSL/TLS per  RFC 4217.



Regards,

Alan Altmark
IBM Lab Services

-
Sent from my BlackBerry Handheld.


- Original Message -
From: Bill Pettit [bill.pet...@ormutual.com]
Sent: 04/20/2011 02:11 PM MST
To: IBMVM@LISTSERV.UARK.EDU
Subject: [IBMVM] FTPS using zVM FTP client  ?



We have a vendor that we need to ftp files to from our zVM 5.4 system.   The 
vendor says we need to use FTPS over IMPLICIT TLS/SSL.

I have been reading the TCPIP Users Guide and it appears the this is possible 
from our zVM 5.4 system if I configure and use the SECURECONTROL and SECUREDATA 
statements in a FTP DATA file, which I have done.   So far I have not had any 
luck connecting to them.   If anyone else has done something similar can you 
tell me if I am missing something?

Thank you in advance...

Bill Pettit


Re: Detaching A disk from z/Linux guest dynamically

2011-04-20 Thread Alan Altmark
If you have access to the user's LOGONBY profile in the SURROGAT class, you can 
issue the FOR command.

I didn't think there was any point in requiring separate authorization for 
LOGON BY and FOR.

And with or without RACF, if you are the current secuser you can issue FOR.

(Yes, the ESMs provide more functionality than CP by himself.)


Regards,

Alan Altmark
IBM Lab Services

-
Sent from my BlackBerry Handheld.


- Original Message -
From: Martin, Terry R. (CMS/CTR) (CTR) [terry.mar...@cms.hhs.gov]
Sent: 04/20/2011 04:13 PM AST
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: [IBMVM] Detaching A disk from z/Linux guest dynamically



Thanks Tom I was just about to ask this question because I have a bunch of 
guests that I need to change.

Now I tried the FOR command and received this:

HCPFOR070E - Basically it is an authorization issue with the FOR command. We 
are running RACF here so do you know what the profile would be and what RACF 
class would need to be activated to define and permit this resource?  Can I 
also do this via the SECUSER command?

Thank You,

Terry Martin
Lockheed Martin
CMS - CITIC
3300 Lord Baltimore Drive, Suite 200, 21244
Engineering Computing
Mainframe Support
Cell - 443 632-4191


From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf 
Of Tom Huegel
Sent: Wednesday, April 20, 2011 2:37 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Detaching A disk from z/Linux guest dynamically

Since these are CP commands use FOR command and avoid logging on the LINUX 
machine.
FOR linuxname CMD DET 191
FOR linuxname CMD LINK * 191 191 MR



On Wed, Apr 20, 2011 at 8:45 AM, David Boyes 
dbo...@sinenomine.netmailto:dbo...@sinenomine.net wrote:
If the 191 is only used at Linux boot, you can change the directory entry and 
then login to the VM userid running the Linux system and:

BEGIN (if you get a CP READ)
#CP DET 191
#CP LINK * 191 191 MR
#CP DISC

(assuming your LINEND char is #)

If you are actually using the disk during runtime, then it's a lot safer to 
bounce the guest.

-- db


From: The IBM z/VM Operating System 
[mailto:IBMVM@LISTSERV.UARK.EDUmailto:IBMVM@LISTSERV.UARK.EDU] On Behalf Of 
Martin, Terry R. (CMS/CTR) (CTR)
Sent: Wednesday, April 20, 2011 10:22 AM
To: IBMVM@LISTSERV.UARK.EDUmailto:IBMVM@LISTSERV.UARK.EDU
Subject: Detaching A disk from z/Linux guest dynamically

Hi

I have a copy of the DASD volume where the A (191) disk resides for a specific 
z/Linux guest. I want to point the guest to the new copied volume from the one 
it is currently using without bringing the guest down. Is there a way to do 
this?

Thank You,

Terry Martin
Lockheed Martin
CMS - CITIC
3300 Lord Baltimore Drive, Suite 200, 21244
Engineering Computing
Mainframe Support
Cell - 443 632-4191tel:443%20632-4191





Re: z/VM RedHat Virtual Machine Memory abend

2011-04-20 Thread Carlos Bodra
 Thanks a lot for hints.
 Barton, and others, I will redifine storage areas to get xstore. I
can add more 2 or 3 3390-3 page volumes. Today there is only one
volume for page and one for spool. 
 Please keep in mind, that this is a no production z10 installed in
our data center just for POC tests, so I can change definitions very
very fast.
 I will do changes next monday and return here with results.
 Thanks again and Happy Easter for all!!!
 Carlos Bodra
 On Qua 20/04/11 22:52 , David Boyes dbo...@sinenomine.net sent:
Check the amount of paging space you have defined for the VM system.

Is this a brand new VM install right out of the box? If so, then
this is most likely to be the problem. 48G of real, plus the default
paging areas in a brand new VM install add up to just about 52G or so,
depending on whether you used mod 3 or mod 9s.
 It works for MAINT because CMS is extremely memory efficient; it
doesn’t require that every page in the virtual machine definition be
actually present when it IPLs, and it touches only what it actually
needs. Linux touches every page at some point, so you need enough
paging space to support the total size of all the virtual machines you
define, plus a little bit of insurance. 
Add at least 3-4 mod 9 or mod 27s as paging space and see if the
problem goes away.