Re: How many IFLs on my box?
On Tuesday, 08/09/2011 at 05:42 EDT, Marcy Cortes marcy.d.cor...@wellsfargo.com wrote: Is there away from VM to tell how many IFLs are installed on a z box? Not just defined to my LPAR but on the entire box? Not in a programming interface, no. As you have discovered, STSI 1.2.2. isn't up to the task, giving you information only about the primary CPU type. For what it's worth, the architects are aware of this. I believe one of the monitor config records (MRSYTCUM?) contains an entry for each active logical CPU. I don't know if unassigned CPUs are accounted for in this fashion. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: z/vm page packs at DR
On Tuesday, 08/09/2011 at 01:44 EDT, David Boyes dbo...@sinenomine.net wrote: I?ve done it both ways. If you have flashcopy in the disk hardware, the ?back up one, flash the others, clip the labels with DDR? is really, really efficient, and trivially easy to automate Note that CP FLASHCOPY has a LABEL option to let copy the disk and change the label in a single operation. If the target volumes have been PRE-labeled, you can use the SAVELABEL option. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: ESPF?
On Tuesday, 08/09/2011 at 09:32 EDT, Lee Stewart lstewart.dsgr...@attglobal.net wrote: It would be a great easy way to help z/OS guys who are having to learn VM for Linux... How does changing editors helps someone learn VM? If someone is going to manage VM, they are going to need to be able to do a lot of things. Adding, changing, and deleting lines in a configuration file is going to be the least of their worries. I honestly don't think that making ISPF look like XEDIT would help a VM sysprog learn z/OS more quickly, either. MVSers can learn the basics of XEDIT very quickly, just as I did with ISPF. The several ISPF-like XEDIT profiles running around out there are sufficient IMO. In any case, while I can't find ESPF, I did find XEDIT macros that someone wrote to simulate ESPF. Those macros are not in the VM Download Library and have dependencies on other IBMer-written goodies. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Accepting non-display input...
On Monday, 08/08/2011 at 02:17 EDT, Frank M. Ramaekers framaek...@ailife.com wrote: ?in CMS. Is there a way to do this from REXX or PIPE? pipe console dark Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Performence Toolkit not working.
On Sunday, 08/07/2011 at 10:46 EDT, saurabh khandelwal sourabhkhandelwal...@gmail.com wrote: When MVS crashes, it doesn't get time to write any message into SYSLOG. So I didnt found anything in SYSLOG about MVS crashes. With an MVS crash, the last thing that happens is that MVS loads a disabled wait PSW with the address in the PSW set to a specific value called the wait state code. You need to look up the meaning of that code in the MVS System Codes book. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Q STOR command results
On Friday, 08/05/2011 at 02:31 EDT, Martin, Terry R. (CMS/CTR) (CTR) terry.mar...@cms.hhs.gov wrote: Does the RESERVE work the same for z/OS? Yes. This isn't an OS-specific phenomenon. As Bruce indicated, when you identify memory as reserved in the image profile, it's just a reservation. No guarantees that you're going to get it. Memory that is configured on the box and is available to satisfy reservations is detected by the OS as standby. As the various LPARs bring standby memory online, the standby pool is drained. If you see STANDBY fall below your RESERVED amount, then you better hurry. During POR, you can actually see the transition of memory from RESERVED to STANDBY. LPARs are activated as soon as a chunk of central storage has passed POR checks. While the LPAR is activating, the hardware continues validating memory, activating LPARs as it goes. Eventually, it stops activating LPARs, and the remainder of the memory is validated and placed in the STANDBY pool. This process takes time, so beware that VARY STORAGE may fail when issued immediately after POR since the standby pool may not yet be full enough to satisfy your request. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: CMS/PDF
PDF is part of ISPF, which is a separate product. It's not part of the base VM installation. Regards, Alan Altmark IBM Lab Services - Sent from my BlackBerry Handheld. - Original Message - From: clifford jackson [cliffordjackson...@msn.com] Sent: 08/05/2011 12:27 PM AST To: IBMVM@LISTSERV.UARK.EDU Subject: [IBMVM] CMS/PDF I seem to remember a CMS/PDF function under z/VM if so where can I find it.. Cliff Jackson Senior Systems Programmer 703-607-1393
Re: SSL Configuration on z/VM 6.1
To avoid confusion, implicit means NON-negotiated SSL, at least as far as VM documentation is concerned. Sorry for not being clear on this. Regards, Alan Altmark IBM Lab Services - Sent from my BlackBerry Handheld. - Original Message - From: Betsy Jeffery [betsy_jeff...@mgic.com] Sent: 08/05/2011 03:03 PM EST To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] SSL Configuration on z/VM 6.1 It is finally working. I discovered that the TLSLABEL and SECURECONNECTI= ON INTERNALCLIENTPARMS are for implict (dynamic) connections. Taking these = out corrected my problem. Thanks to all.
Re: SSL Configuration on z/VM 6.1
On Thursday, 08/04/2011 at 10:01 EDT, Betsy Jeffery betsy_jeff...@mgic.com wrote: I have that. Is it perhaps positional? Here's what my DTCPARMS look like : :Mixedcaseparms., :command.vmssl , :parms.keyfile /etc/gskadm/zlinux2.kdb That should be :Mixedcaseparms.keyfile /etc/gskadm/zlinux2.kdb instead of on the :parms. tag (where things are uppercased). Also, what are those commas? Those don't belong in a DTCPARMS file. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Q STOR command results
On Thursday, 08/04/2011 at 10:06 EDT, Richard Baek rb...@bbandt.com wrote: We're trying to add additional storage to some of our zVM LPARs without IPLing the system. : Anyone have any idea what we might be doing wrong ? You need to change the LPAR image profile to have some amount of storage defined as reserved. If you don't do that, the LPAR can't see the unused memory on the box. So make that change, then repeat the deactivation/reactivation sequence. Note that you can set the Reserved value to a maximum value, even if all that memory isn't on the box. Then you can specify how much of that reserved memory CP will bring online. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: HCPDPM1280E with STK 9840C Tape Drive
On Thursday, 08/04/2011 at 04:20 EDT, Jeff Gribbin jeff.grib...@gmail.com wrote: In February 2007, Chris Little reported receiving the message HCPDPM1280E Device 0181 not usable; assign lost while attempting to write to a tape cartridge loaded into a STK 9840C tape drive. As far as I can see, no resolution was posted at the time. Check the OPERATOR's console for I/O error messages. If you don't see anything obvious there, then I encourage you to open a PMR. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: SSL Configuration on z/VM 6.1
That's what I get for trying to do this at the airport. :-) Regards, Alan Altmark IBM Lab Services - Sent from my BlackBerry Handheld. - Original Message - From: Betsy Jeffery [betsy_jeff...@mgic.com] Sent: 08/04/2011 10:17 AM EST To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] SSL Configuration on z/VM 6.1 Actually, your suggestion didn't work; perhaps I had the syntax wrong. = What did work was what I had originally but the change was: :Mixedcaseparms.yes
Re: SSL Configuration on z/VM 6.1
On Thursday, 08/04/2011 at 04:36 EDT, Betsy Jeffery betsy_jeff...@mgic.com wrote: Here's what I have in the PROFILE TCPIP (I believe I have the DTCPARMS straighted out). AUTOLOG SSLSERV 0 ENDAUTOLOG port 23 TCP INTCLIEN 992 TCP INTCLIEN SECURE zvmcert ; SECURED TELNET SSLSERVERID SSLSERV TIMEOUT 60 I'm trying to, for the time being, keep port 23 not secured while I attem pt to get the SSL connection on Port 992. The error I get on the client side is: Connection refused on this port by host Unable to locate IP Host/Gateway If I comment out port 23, I can't make the connection at all - timeouts Do you have PORT 23 PORT 992 in your InternalClientParms? Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: SSL Configuration on z/VM 6.1
On Wednesday, 08/03/2011 at 12:05 EDT, Betsy Jeffery betsy_jeff...@mgic.com wrote: I am trying to decipher the instructions for setting up the PROFILE TCPIP and SYSTEM DTCPARMS statements for the telnet and ftp servers to use SSL. Anyone willing to share their config. information? Please make sure you follow instructions at http://www.vm.ibm.com/related/tcpip/vmsslinf.html. Do not use the information in the book since APARs (see web page) have updated that information. ADVISORY: The latest z/VM 6.1 RSU contains the SSL server upgrade package. If you apply the RSU, you will have to perform migration of your SSL configuration. The next z/VM 5.4 RSU will also have it. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: SSL Configuration on z/VM 6.1
On Wednesday, 08/03/2011 at 04:23 EDT, Daniel Bewley daniel.bew...@gmail.com wrote: I experimented with those parameters but had no success with them in place (I still have the commented line in my profile for when I get bored). I believe the SECURE on the port definition forces it - I know for a fact that I cannot connect to the system without SSL enabled in my client (and a forced port definition of 23 - we use the RUMBA client here and it seems to assume that SSL should travel over some other, unspecified port). Putting the SECURE option on the PORT statement is for those cases like https, where the SSL tunnel is established prior to the flow of any application protocol data. E.g. PORT 80 TCP HTTPSERV 443 TCP HTTPSERV SECURE MYCERT NOAUTOLOG However, current telnet and ftp clients use *negotiated* SSL, where the application decides when to create the SSL tunnel. For these cases, you must configure the telnet and ftp servers to (1) influence the negotiation according to your security policy, and (2) have the name of the certificate they will use. E.g. InternalClientParms SecureConnection Required TLSlabel MYCERT EndInternalClientParms MYCERT is the 8-character label you assigned to a [satisfied] certificate request in the SSL server or an imported certificate. Make sure when you specify the certificate label on gskkyman that you use uppercase. And in this case, the SECURE option is NOT present on the PORT entry. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: How to validate a FILEPOOL
On Tuesday, 08/02/2011 at 09:53 EDT, Frank M. Ramaekers framaek...@ailife.com wrote: How can you validate a filepool name. I know it?s listed in a QUERY RESOURCE: Only if it's up, of course. But what do you mean by validate? Just QUERY RESOURCE resourcename? Services are simply resources with special LU 6.2-architected names, converted to a displayable format. Service 06F2 is actually 0x06f2. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: How to validate a FILEPOOL
On Tuesday, 08/02/2011 at 10:10 EDT, Frank M. Ramaekers framaek...@ailife.com wrote: Validate? Confirm that a SFS Directory specification is valid (then validate that the VM can ACCESS it). Since the ACCESS command will do all of that, I'm obviously still not following. Sorry. Maybe you're looking for the DMSEXIST() CSL routine? Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Modifying the System Clock on a Running VM System
On Tuesday, 08/02/2011 at 10:08 EDT, peter.w...@ttc.ca wrote: Yes, it can and has been done. As you say, it works well for forward adjustments; CP abends on backward adjustments. For our old Multiprise 2000, which ran slow, it was fine. Our z9 runs fast, so we no longer use it. I don't deny that you have had success with it, but hopefully folks recognize that adjusting the time in this fashion is kind of like bending space-time. If it were that simple, trust me, it would have been done already. - There are timers active throughout CP that must be revisited when the clock is set. But what to do? Was the timer meant to represent a delay interval or a specific time of day (e.g. midnight)? - Some of those timers represent *guest* timers. CP has no idea what kind of time that represents (interval or absolute), so - Virtual machine epochs must be updated in order to avoid time jumps. (CP doesn't virtualize STP/ETR timing signals.) - CP time services (DIAGs) will jump, putting them out of sync with VTOD. Sir Rob's reference to CMS' use of both time sources now comes into play. - Timers that were scheduled to pop within the compressed time interval will now pop all at once. - Missing interrupt timers may be triggered. On current machines, normal oscillator-induced drift and small external time reference changes are automatically corrected by the TOD Clock Steering Facility (see Principles of Operations for gory details). Large changes in time (for small values of large) are handled through time sync checks in which the host is notified of a problematic difference in time. That is, one that cannot be steered in a reasonable amount of time. It is then the host's responsibility to evaluate what it needs to do and do it, including issuing the necessary PTFF or SCK instructions. So, no surprise, IBM recommends AGAINST any use of such a mod on your VM system. (Of course, don't let that stifle your curiosity and experimentation to determine the possible effects of malleable space-time on virtual machines!) Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Time off running z/VM 5.4 1101 on z196 for first time
On Tuesday, 08/02/2011 at 01:32 EDT, Brian Nielsen bniel...@sco.idaho.gov wrote: Is the SE clock update you describe performed on z9's? We did a POR a couple weeks ago and the clock was off by about 27 minutes afterwards. It didn't get caught for a while. The z/OS images now have their TOD prompt re-enabled and the POR instructions now include a step to check the SE clock for accuracy. I assumed it was off due to the drift in the SE clocks since the last POR several years ago. The 24-hour sync has been in place for over 10 years (can't remember when it started). I recommend that you open a PMH so that Product Engineering can advise you. Feedback here on the result would be good. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Modifying the System Clock on a Running VM System
On Tuesday, 08/02/2011 at 01:25 EDT, peter.w...@ttc.ca wrote: And if we had known about Server Time Protocol when we specced our z9, we would have gone with that, since it is a FAR better solution. As you say, the own code approach is playing with fire. In the interests of full disclosure, with the latest service, z/VM's support for STP is limited to a) Obtaining the timezone from STP b) Timestamping I/O with the Correct Time (for XRC) So while STP will ensure that the LPAR has the Correct Time when the LPAR is activated, and the TOD will be steered to the Correct Time, any of the Large Time Jumps induced by the external time reference will be ignored by CP, except for I/O timestamping. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: CMS Utilities AUDITOR and VMUTIL
On Tuesday, 08/02/2011 at 02:19 EDT, Bruce Hayden bjhay...@gmail.com wrote: AUDITOR is supposed to detect CP disabled wait states, but you just had a CMS program abend which left CMS running. AUDITOR will not help you with that unless, as you determined, you write your own exit routine. These kind of failures are usually detected the best way by watching the console, for instance looking for severe DMS messages (such as DMSMOD109S that CMS issued.) And look for any message of the form DMSxxx109S. More generally, DMSxxxnnnS and DMSxxxnnnT are fatal to the application that's running. S brings down the app. T brings down CMS. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: anyone running ILMT?
On Tuesday, 08/02/2011 at 03:43 EDT, David Boyes dbo...@sinenomine.net wrote: however there are two files that are placed in /etc (tlmagent.ini and tlmlog.properties). Ditto here -- c'mon, IBM. /etc/tlm, not just dumping them in /etc. The part of IBM that might react to that doesn't hang out here. If anyone doesn't like the installation or configuration process for ILMT, open a PMR to register your dissatisfaction. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Modifying the System Clock on a Running VM System
On Friday, 07/29/2011 at 08:58 EDT, Rob van der Heij rvdh...@gmail.com wrote: Uh, I'd say it has not desirable effect. CMS uses CP for the seconds, and TOD for the smaller bits... You're right; I shouldn't say no effect. CMS' mixed use of CP and TOD time does affect the accuracy of CMS time values. But for the majority of CMS users, that's a difference that makes no practical difference. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Time off running z/VM 5.4 1101 on z196 for first time
On Friday, 07/29/2011 at 08:36 EDT, Rich Greenberg ric...@panix.com wrote: On: Fri, Jul 29, 2011 at 08:00:12PM -0400,Martin, Terry R. (CMS/CTR) (CTR) Wrote: } Do You mean at the IPL prompt? If so no I don't think we did. Well, thats why they are off. The 2 CPUs clocks are independant of each other. Re-IPL set the clock when prompted. To reset the z/VM clock to match the CEC time, deactivate the LPAR and reactivate it. At that time the LPAR epoch [delta from CEC TOD] will be reset to zero, assuming it hasn't been set to a non-zero value in the LPAR image profile. The System z TOD clock is the best clock in the CEC; a precision timepiece that even detects and adjusts for its own drift (up to a point). If you have STP or ETR, then the TOD clock is also accurate. In that respect, Sir Rob's point about using your wristwatch as a time reference is on point. The SE historically syncs its standard PC battery operated clock (BOC) to the CEC TOD every 24 hours. The BOC instantly moves forward or backward. Why bother? Because at POR, the only time reference is the SE BOC -- the CEC TOD will be set to that value. Once accurately set, the time on the CEC is better since it has comparatively little drift. Starting the z196 GA2 upgrade and the z114: o The SE BOC will sync to the CEC TOD once an hour instead of once a day, improving CEC TOD accuracy after POR. o The SE BOC will be steered the match the CEC TOD instead of making large jumps, avoiding a Paradox that could destroy the universe. o OK, so there's no Paradox, but there are NTP-using firmware components in a zBX environment that benefit from the steering You still need STP to have *accurate* time. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Time off running z/VM 5.4 1101 on z196 for first time
On Monday, 08/01/2011 at 02:30 EDT, David Boyes dbo...@sinenomine.net wrote: Sounds like it would be worth teaching NTP to treat the CEC TOD clock as a stratum 2 time source. For zBX purposes, the need for common time is to get logs properly sequenced. It doesn't have to be ultra-accurate, just close enough. By resyncing the BOC every hour, that becomes doable. If you want your apps to all have a common time reference, then run STP on the z side and an NTP client on each non-z OS image. Will there be alternatives to that in the future? Dunno. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Time off running z/VM 5.4 1101 on z196 for first time
On Monday, 08/01/2011 at 05:06 EDT, Rob van der Heij rvdh...@gmail.com wrote: On Mon, Aug 1, 2011 at 8:25 PM, Alan Altmark alan_altm...@us.ibm.com wrote: o The SE BOC will be steered the match the CEC TOD instead of making large jumps, avoiding a Paradox that could destroy the universe. I would not be suprised to find the steering to be more conceptually speaking. The common approach with consumer grade battery clocks is that the regular synch compares the two and records the apparent drift of the battery clock. Whenever you need to use the battery clock (at POR) you have the time of last synch, the current time according to the battery clock and the recorded drift. Those 3 let you make a pretty good guess about the current true time. Time will tell ;-) The engineers are using the word steer. Personally, I think graviton emitters are used to slow or speed up time, but you might be right.. :-) In any case, prior to this change, the SE clock [you can see it on the screen] would change without regard for the size or direction of the jump. Now, time moves only forward and will speed up or slow down in small increments in order to reach the target time. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Modifying the System Clock on a Running VM System
On Thursday, 07/28/2011 at 11:23 EDT, Wandschneider, Scott scott.wandschnei...@wipro.com wrote: We have a host VM system (z/VM 5.4 0902) that is located on the east coast of the USA with a time zone of WEST 04.00.00 however the actual TOD clock is behind by four (4) minutes. Scheduling an IPL is difficult as this system hosts many clients. To adjust the TOD clock, without an IPL, it has been suggested that I issue the following two commands, which appears to have worked on a second level 2.4 VM/ESA system. Comments and suggestions from this group would be appreciated. DEFINE TIMEZONE EDT WEST 03.56.00 SET TIMEZONE EDT Other than IPL, there is no mechanism in VM to adjust the system TOD. Changing the time zone affects only how CP calculates *local* time, in turn affecting any interface that asks CP for local time, including QUERY TIME, diag 0x0C, and diag 0x270. The SET VTOD command is available if you want to influence the TOD seen by a guest. (It has no effect on CMS since CMS uses CP time.) Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: VM to zLinux Remote Execution
On Friday, 07/22/2011 at 01:31 EDT, Tom Duerbusch duerbus...@stlouiscity.com wrote: I'm trying to remotely execute a command with CMS as the client and SLES 11 SP 1 as the server. All documentation I've found so far, shows how to do it from Linux to VM. Apparently the problem is, TCPIP for VM only has the unsecured REXEC client and SLES 11 only has a secured sshd. ssh is not a secured version of rexec, but is a different protocol entirely. You can run rexecd on Linux if you want, but you're going to need to set up iptables to prevent connections from the Outside World. If you don't do that, then your port security scanners are going to find it and report you to the Port Authority. You will then be carted off to the stockade. Implicit is the assumption that 'remote' means 'guest on same system or CEC'. You do not want to send or receive rexecd over real ethernet. I've searched the VM download page for a ssh client. I've done some Linux searches for how to dumb down sshd (i.e. to allow unsecured transfers). Of course, there might be program products available, but unless they would be zero cost products, it's not going to happen in the short term. Sine Nomine has a CMS ssh, scp, and sftp client, but they're not free. See sinenomine.net. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: z/VM memory Limit under z/VM 6.1
On Friday, 07/22/2011 at 06:26 EDT, Martin, Terry R. (CMS/CTR) (CTR) terry.mar...@cms.hhs.gov wrote: I know that the maximum amount of memory that is supported on a z/VM 5.4 LPAR is 250G. Does this limit change under z/VM 6.1, that is, does IBM support a bigger memory foot print for the a z/VM LPAR under 6.1? The limit is 256GB (not 250) and it applies to both z/VM 5.4 and 6.1. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: z/VM memory Limit under z/VM 6.1
On Friday, 07/22/2011 at 06:35 EDT, Martin, Terry R. (CMS/CTR) (CTR) terry.mar...@cms.hhs.gov wrote: Thanks Alan, meant to say 256G. We actually ran into this and I had to split the LPAR. I was hoping that the support for more memory on a z/VM LPAR would increase with version 6, and plans for 6.2? Sorry, Terry, but you're asking for details about an unannounced product. You know better. :-) Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: z/VM memory Limit under z/VM 6.1
On Friday, 07/22/2011 at 08:46 EDT, Martin, Terry R. (CMS/CTR) (CTR) terry.mar...@cms.hhs.gov wrote: No problem thanks Alan. I didn't mean to leave you swinging, Terry! I had meant to say, too, that the VM team is actively working to support bigger LPARs. There's a lot to do. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile: 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: RES: RES: Z/VM LOGO don't refresh
On Thursday, 07/21/2011 at 10:30 EDT, Sérgio Lima Costa sergio.co...@cetip.com.br wrote: CP REFRESH LOGOVSM VSCS HCPZLC6784E VSM VSCS not logged on. Ready(06784); T=0.01/0.01 11:23:56 : q n : VSM - TCPIP VSM - VTAM You have VSCS running in the VTAM virtual machine, not in VSCS (as some people do), so use REFRESH LOGOVSM VTAM. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: SMTP IPMAILERADDRESS
On Wednesday, 07/20/2011 at 03:18 EDT, Ewald Roller e.rol...@rolf-benz.de wrote: Hello, I tried so setup a new SMTP-Server on z/VM 5.4. I want to remove the seperate TCPIP DATA on SMTPs 191 (w/o DNS) and use the Parameter IPMAILERADDRESS instead to forward all mails to our exchange-server: IPMAILERADDRESS ALL 1.2.3.4 ENDIPMAILERADDRESS This doesn't work, the SMTP Consolelog shows IP Mailer Address/Hostname : 1.2.3.4 IP Mailer ALL enabled : No Searching the archives, I noticed, that this problem should have been solved since z/VM 5.2 . What do I miss ?? Something strange. EndIPMailerAddress is only for IPMailerAddress [ALL] LIST. You should be getting a syntax error on SMTP's console and he shouldn't be starting. I get DTCRUN1011I Running server command: SMTP DTCRUN1011I No parameters in use DTCSMT1032E Unrecognized configuration file statement ENDIPMAILERADDRESS on line 386 DTCRUN1014I Server ended normally at 10:45:55 on 21 Jul 2011 (Thursday) When I remove the EndIPMailerAddress, it starts find and I have ALL Enabled : Yes. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Ficon CTC's between LPAR's in same Box
On Thursday, 07/21/2011 at 11:33 EDT, Rob van der Heij rvdh...@gmail.com wrote: On Wed, Jul 20, 2011 at 8:29 AM, Crispin Hugo crispin.h...@macro4.com wrote: Am I right to assume, if I am clever(?) with the configuration, I could connect all 15 LPARS to each other with CTCs ? If you also plan to run ISLINK connections between them, you need to be careful. We had lots of problems in the past when multiple paths exist between a pair of systems. You can't avoid through connections to build, so while you're bringing up system various indirect connections already are active. When that intermediate system goes AWOL, you have lost your conversation anyway. In a Single System Image cluster, you have to have fully interconnected ISFC links. No hops. Redundancy is provided by allowing multiple ISFC links between any pair of systems. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Separate virtual switch controllers
On Thursday, 07/21/2011 at 03:16 EDT, O'Brien, Dennis L dennis.l.o'br...@bankofamerica.com wrote: I believe there was a statement from IBM that the two default controllers, DTCVSW1 and DTCVSW2, are sufficient for any number of virtual switches. Is there any security risk if the same controllers manage virtual switches for multiple zones? No, there is no security risk. As you correctly remember, no data flows through the controller. Is is there to start, stop, and monitor the OSAs. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: INPUT/OUTPUT CONFIGURATION
On Thursday, 07/21/2011 at 03:32 EDT, Sherry Everhart severh...@maccnet.com wrote: I am interested in knowing how to configure a spare ESCON channel to our DASD so that if one of the existing eight shared channels goes belly-up (like it did last week) we can just move the cable over and not have to POR. I'm currently looking in the System z Input/Output Configuration Program User's Guide for ICP IOCP but I'm not sure what to look for. IOCP is complaining because you are trying to assign more than 8 paths to a Control Unit. (See Machine Limits appendix.) The service rep will use PCHID/CHPID reassignment on the SE to logically move the CHPID associated with the failing port (PCHID) to a good port on the *same card*. Check out the IBM System z Connectivity Handbook (redbook). It has an extensive discussion on ESCON channel sparing. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Separate virtual switch controllers
On Thursday, 07/21/2011 at 04:15 EDT, O'Brien, Dennis L dennis.l.o'br...@bankofamerica.com wrote: I know we could use VLAN?s. The network people would rather spend money on additional OSA?s. It is a common (possibly best) practice to keep Internet and intranet traffic segregated onto separate (not trunked) physical switches. That will preclude any use of VLANs to carry both kinds of traffic and eliminates a potential point of accidental crossover. Also simplifies physical audits of the network. THAT cable carries Evil Internet traffic. Watch out! Don't get any on you! THAT cable carries Goodness and Light intranet traffic. If the two were to mix well, let me just say 'subspace vacuole' and leave it at that. I?m sure IBM won?t object. We'll suffer through, somehow. :-) Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: SMTP IPMAILERADDRESS
On Thursday, 07/21/2011 at 12:11 EDT, Ewald Roller e.rol...@rolf-benz.de wrote: Problem is partially solved (but I'm not satisfied): Although I have defined in SYSTEM DTCPARMS for my SMTP-Server SMTP02 the :parms Operand with :parms.SMTP02 CONFIG * the server never used it... Is it possible, to force it to use the defined CONFIG file? I want to have SMTP-Userid name and Config-name the same. That sounds to me like you don't have a valid :type.server definition in your SYSTEM DTCPARMS for SMTP02. Note that you can use TCPRUNXT EXEC to build :parms. tags dynamically at runtime. No need for static configuration. For example: If this is the BEGIN call AND the server class is SMTP THEN set the :parms tag to userid() CONFIG *. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Where is PPS EXEC?
On Wednesday, 07/20/2011 at 08:47 EDT, David Boyes dbo...@sinenomine.net wrote: On a standard RSCS install, where do PPS EXEC and PPS XEDIT land? On the 406 disk or .PACKAGE subdirectory. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: REXEC and RXAGENT1
On Wednesday, 07/20/2011 at 10:18 EDT, Tom Duerbusch duerbus...@stlouiscity.com wrote: My manuals (z/VM 5.2) do not show a method of recycling REXECD using the OBEYFILE command. It does show it for about a dozen other servers, but not for REXECD. Searching the archives, I found very few questions about REXECD and nothing concerning OBEYFILE. Is it possible that your comment about OBEYFILE to restart TCPIP servers, a general comment and not explicitly for the REXECD server? The OBEYFILE technique for resetting the restart counter applies to any server actually monitored by the stack. That is, those with PORT reservations that do not have NOAUTOLOG in them. You will not find any server-specific reference; only the generic usage note on the MaxRestart statement. (And it doesn't apply to RXAGENTx servers because they don't even talk to TCP/IP!) 06:01:09 AUTO LOGON *** RXAGENT1 USERS = 62BY REXECD 06:01:09 USER DSC LOGOFF AS REXECD USERS = 61 USER DSC LOGOFF AS REXECD USERS = 61 06:01:12 DTCIPI030W STARTANEWLIFE: VICTIM REXECD CALLED FOR REASON: CLIENT HAS ENDED TCP/IP SERVICE REXECD's and RXAGENT1's console logs should have some information on them. REXECD is ending *itself*. Perhaps there is a problem with RXAGENT1's use of RXSNDIU? Perhaps some authority problem? But whatever you do, don't logon to REXECD or RXAGENT1, or use SET SECUSER to figure out what's happening. If you try to look at their consoles in real time, you interfere with their communications. Rome will burn and civilization will end. (SET OBSERVER might be ok...dunno.) Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: IBM 2nd Qtr
On Tuesday, 07/19/2011 at 08:12 EDT, Jonathan Quay jonathan.q...@ihg.com wrote: Any word on processor mix in there (CP vs IFL, etc)? Would be interesting to see how much is new and additional Linux on Z. You can read IBM's press release at http://www.ibm.com/investor. It does not contain any further description of the processor mix. Gartner has published (to its clients) reports that provide their views on how Linux is doing on the mainframe. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Ficon CTC's between LPAR's in same Box
On Tuesday, 07/19/2011 at 11:34 EDT, Petersen, David david.peter...@us.ngrid.com wrote: Take a look at the following redbook. This can be done with Hipersockets, an internal method of communicating between LPARS in the same box. Therefore, no need to wire any cards. Via PVM-over-TCP/IP, yes. However, if you want to be able to use z/VM Single System Image in the future, you will need CTCs, as cross-system communication is needed prior to the point that virtual machines start running. As an aside, note that PVM is not licensed under IPLA for use on IFLs, so a Special Bid is required. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Behaviour after restart
On Monday, 07/18/2011 at 12:50 EDT, Jim Bohnsack jab...@cornell.edu wrote: I saw the same, or a similar problem a couple of years ago. It had something to do with the terminal emulator I was using. I had the problem with Vista emulator from Tom Brennan Software. Switching to a different emulator for the 2nd level system cured it and after installing an RSU or something, the problem went away and I could go back to Vista. On a normal IPL, if the system is coming up warm (e.g. AUTO_WARM_IPL) without the PROMPT override, then the system operator will be TERMINAL HOLD OFF. On a SHUTDOWN REIPL, the operator (inexplicably) comes up TERMINAL HOLD ON. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Behaviour after restart
On Monday, 07/18/2011 at 02:19 EDT, Mike Walter mike.wal...@aonhewitt.com wrote: Thanks for the explanation. Could one have a reasonable expectation that in the z/VM release 6.next, SHUTDOWN REIPL might be updated to handle 'TERMINAL HOLD OFF' in the same fashion as it was handled at the previous non-'REIPL', or perhaps have a more clearly-defined (less inexplicable) action in SYSTEM CONFIG? No one has reported this behavior as a potential bug, so your expectation is somewhat optimistic. Until today, I never even noticed the difference since I don't do any automated SHUTDOWN REIPLs and pressing PA2 is part of my DNA. If anyone feels that the current behavior is causing them difficulties, then please contact the Support Center to discuss. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: z/VM network setup
With the advent of OSA-ICC and the integrated 3270, the need for a separate osa for vm tcpip has been reduced to one of preference or policy, not necessity. Just be sure that it is properly configured to keep vm tcpip out of your production workload networks. It is a server management interface and needs to be protected accordingly. Regards, Alan Altmark IBM Lab Services - Sent from my BlackBerry Handheld.
Re: z10 HMC Automatic Activation Profiles
On Friday, 07/15/2011 at 03:35 EDT, Carlos Bodra - Pessoal cbo...@terra.com.br wrote: Hi List! In z10 HMC under Automatic Activation Profiles, I can found following MODES under Processor tag for each LPAR defined: Z/VM: When should I use this option? When you want your z/VM to have access to more than one CPU type: CPs, IFLs, CFs, zIIPs, and zAAPs. Just beware that that will have an affect your z/VM software pricing. Talk to your IBM rep about it. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: REXEC and RXAGENT1
On Friday, 07/15/2011 at 03:43 EDT, Tom Duerbusch duerbus...@stlouiscity.com wrote: I'm having a brain check. I've enabled REXEC which is working well. And I thing I enabled the server machines RXAGENT1 and RXAGENT2. How I read the documentation, both these agent machines should fire up when the REXECD server is started. My agent machines don't automatically start. And when I try to send a command to the guest server, I get back a message about an agent server not being available. My DTCPARMs seem to be correct: :nick.REXECD :Parms. :Anonymous.yes Anonymous access?!? Not Good. Unauthenticated access to a class G user, eh? :ESM_Enable. :ESM_Validate. :Nick.RXAGENT1 :type.server :class.rexec_agent :For.REXECD :Nick.RXAGENT2 :type.server :class.rexec_agent :For.REXECD I don't see anything in the TCPIP configuration file about the RXAGENTx machines. Just what am I missing? Make sure you restart REXECD after you make changes to the rexec_agent servers. You can also change REXECD's profile to add the (DEBUG option to the TCPRUN invocation. (Don't SCIF use console log.) And use :parms.-d to turn on REXECD debugging. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: REXEC and RXAGENT1
On Friday, 07/15/2011 at 04:42 EDT, Tom Duerbusch duerbus...@stlouiscity.com wrote: This is what I get with debug on: rexec -d -l guest -p guest 205.235.227.74 cp ind REXEC Level 520, Internal version id MT04091 parms is -d -l guest -p guest 205.235.227.74 ind Not seeing TCPRUN output created by (DEBUG option on TCPRUN. Looking for REXECD initialization. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Log usage of FTP
On Wednesday, 07/13/2011 at 10:47 EDT, Kris Buelens kris.buel...@gmail.com wrote: My customer want to see what IP addresses are still using FTP with his z/VM system. Is there a simpler way than coding a CHKIPADR exit exec, (or a NETSTAT every second like he does now)? I don't see a parameter one can code. Maybe some trace option? No, nothing simpler than CHKIPADR. By an odd quirk of fate, the server trace doesn't include the IP address. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: page pack question
On Tuesday, 07/12/2011 at 10:38 EDT, Crabtree, Anne D anne.d.crabt...@wv.gov wrote: I installed release 6.1 of z/vm but I don?t have enough mod 3?s to label as page packs to match the 5.4 system. Is there any reason that I can?t use the 5.4 page packs when I ipl 6.1 on level 1? On z/os, this is what I always do but on z/vm I usually define new page packs (ie 610pag, 610pg1, etc..) You can use the same paging and T-disk volumes. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: CPUID Anomaly
On Tuesday, 07/12/2011 at 10:56 EDT, James Poirier james.poir...@doit.nh.gov wrote: This past weekend after an IPL of our z10 to apply RSU 5409 and a VTAM ptf I discovered that the reported CPUID in zVM had changed: CPUID prior to this weedend was : FF01C82620988000 CPUID after IPL was : FF00C82620988000 The difference in the above id?s is 1C8262 to 0C8262. Also, made a change to MODE from s/390 to ZVM. No IOCDS changes were made. After I discovered the changed CPUID I backed everything out and there was no change in the CPUID. I did finally put everything back and just dealt with the new CPUID. Also found out that MCL?s had been applied to the HMC but not to the SE?s. Has anybody seen this behavior? Looks like you changed LPARs. When the Format bit (48) is 1 (as yours is), word 0 of the virtual CPU ID is of the form FFpp, where pp is the UPID (user partition id #), and n is a digit derived from the CPU id. See the STORE CPU ID instruction in the z/Architecture book. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: CPUID Anomaly
On Tuesday, 07/12/2011 at 11:10 EDT, James Poirier james.poir...@doit.nh.gov wrote: It appears that it probably is but we made no changes to affect the LPAR id, also the HMC reports that the CPUID is 1C8262 and that is what we used to get before this last IPL. Then you need to contact the Support Center. CP issues a STIDP as each processor starts. When you log on, a copy of the stored CPU id is copied into your VMDBK, with the HOB set to FF. This is your default CPU ID. It is overridden by the CPU statement in your directory entry or the SET CPUID command. If the HMC reports the LPAR UPID as 01, but the STIDP instruction stored 00, that's not good. Make sure you are looking at the image profile (General), not the CPC Details. (There are more digits in the CPU serial # than are contained in the CPU ID.) Perhaps changing the LPAR mode caused a change in the UPID? Though I don't know why it would Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Again IOCDS and dynamic activation.
On Friday, 07/08/2011 at 12:17 EDT, Rick Barlow rrhbar...@gmail.com wrote: As several people have said, the only way to prevent devices from appearing to your z/VM LPAR when a dynamic activation is done is to use the SET DEVICES NOTACCEPTED command either in your SYSTEM CONFIG or in AUTOLOG1. (I recommend using SYSTEM CONFIG.) If you never, ever want those devices to show up to your z/VM LPAR(s), then the IOCDS should be coded with the NOTPART parameter to prevent the devices from ever being visible to those partitions. I recently discovered that some folks don't know that that you *can* control access on a per-device basis. For those using HCD, the Working with Devices chapter of the HCD book describes Restricting Partition Access for Devices. Note that this is the same technique you have to use to manage subchannel limits on chpids when you have a lot of LPARs. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: SFS Catalog Storage Pool
On Thursday, 07/07/2011 at 12:35 EDT, Schuh, Richard rsc...@visa.com wrote: Something ought to be done about the instructions regarding MAXUSERS. A few years ago, I had a small system that only had 64 users in the directory. It had performance problems (a complete freeze of any user that tried to use SFS) with MU of 100, 200, or 300. Upping it to 1000 fixed the problem. And no, Alan or Mike, I will not open an incident or call the Support Center (Unless I call to say goodbye) :-) Anyone can send e-mail to mhvr...@us.ibm.com and comment on the pubs. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Two simple TCPIP / FTPSERVE questions.
On Wednesday, 07/06/2011 at 04:25 EDT, Colin Allinson cgallin...@amadeus.com wrote: This is very basic and simple but I can't seem to see the answer anywhere (although it is probably staring me in face). Once TCPIP has decided that it has tried to restart a server (FTPSERVE) the maximum number of time and abandons further attempts - how can I reset this once the problem has been resolved? From Usage Note #1 for MaxRestart: If a user is restarted MAXRESTART times, the TCP/IP server will send a message to the INFORM list and stop restarting the user. After that, you can tell the TCP/IP server to attempt to restart the user another MAXRESTART times by dynamically specifying the user's PORT statement without the NOAUTOLOG operand. So you can use OBEYFILE or NETSTAT OBEY. We rely very heavily on incoming FTP but we have found that FTPSERVE does not like receiving files onto a corrupt disk and sulks heavily (Sorting the cause of the corruption is a separate problem and not as simple as it first appears). Is there any easy way (or a tool) to monitor that FTPSERVE is currently functional so that remedial action can be taken automatically (in the middle of the night) if it is not? You could watch FTPSERVE's console for unexpected ending conditions. You may also wish to use FTP 127.0.0.1 (loopback) with the program stack and the EXIT parameter to see if FTP is up. Or just establish a TCP connection to port 21, look for the welcome banner, then issue QUIT. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: IBM Sterling Connect:Direct for z/VM Announcement
On Wednesday, 07/06/2011 at 04:59 EDT, David Boyes dbo...@sinenomine.net wrote: Don't know if you all saw this. I was hoping that when IBM bought them, they might enhance the VM product. Instead, they killed it. Sigh. Figures. That VSAM thing is the killer prereq -- everything that started life on MVS requires it as a prereq, and thus is doomed to destruction. Convenient excuse to kill off more CMS applications. As I mentioned back in 2009 (what? you don't remember?), CMS still supports the Alternate VSAM Emulator added in 1985. It was specifically invented to enable Something Else to get control when VSAM macros were used. SQL/DS exploited it back in the day, if memory serves, but I don't know if DB2/VM supports it. (Maybe we added it for the short-lived CICS/VM?) See the CMS Application Development Guide to Assembler for details. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Where console message is stored using Operation Manager
On Tuesday, 07/05/2011 at 12:42 EDT, Michael Harding/Oakland/IBM@IBMUS wrote: Beg to differ. While all messages for all monitored userids are logged to Operations Manager's log on disk, recent (for various values of recent) console activity is kept in data spaces, the size of which is specifiable. That's why, for a particularly active (console-wise) userid, one can only page back so far. Actually, that can be several days for low-console-activity userids, but may be only an hour or a few for those which really pump out messages. We don't really differ on this. I read stored as permanently stored. The messages are permanently[1] stored on disk, but as you say, recent messages are also kept in a data space, one for each monitored user. The amount of data in a user's private data space is controlled by DEFDSPS (default 1M). I believe all of the VIEWxxx commands get their data only from the data spaces, not the log file(s). Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott [1] Subject to your retention policy. Obviously you can't accumulate it on local disk forever!
Re: SHUTTRAP
On Monday, 07/04/2011 at 09:12 EDT, David Boyes dbo...@sinenomine.net wrote: SA22-7832-08, pg. 11-16, in the section on Warnings. There's about two sentences referring to power failure. The rest is in the SHUTTRAP source code. I said it was tiny. 8-). Indeed, and vague, too. :-) According to SHUTTRAP source, the LPAR deactivation event (Quiesce) is reflected via an unsolicited Service Signal external interrupt with event 0x1D, not a Warning machine check. So it's definitely in the not published camp. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Where console message is stored using Operation Manager
On Monday, 07/04/2011 at 10:13 EDT, Lu GL Gao lu...@cn.ibm.com wrote: If we use Operation Manager on z/VM, we can supervise user's console by GOMCMD OPMGRM1 VIEWCON USER(). This console message includes historical loging messages for that user. What these messages were stored in? in spool or in storage? How can I check the space left to store these messages? They are stored on disk. Read the Log Management appendix of the Operations Manager Administration Guide. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Bennie Pugh (was: VSE-L ListServ dead?)
On Wednesday, 06/29/2011 at 10:51 EDT, Frank M. Ramaekers framaek...@ailife.com wrote: Unfortunately a post just came from Pete Clark with some bad news about Bennie Pugh's untimely passing I received this tragic news last night. Bennie was truly one of the nicest people I ever met. During my long tenure at WAVV, Bennie always went the extra mile to accommodate my requests. I will miss him. This is a heavy blow to WAVV as well. As one of the Triumvirate (with Charlie and Pete), a lot of the conference logistics rested on his shoulders. He was a talented hotel and conference venue negotiator, helping to keep WAVV conference fees and hotel rates as low as humanly possible. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: SHUTTRAP
On Wednesday, 06/29/2011 at 10:11 EDT, Shimon Lebowitz shim...@iname.com wrote: If I were to cancel the SHUTDOWN, I would have to re-enable RELOGing, but to date I have not built in such a function. I have also never cancelled a SHUTDOWN, so if it ever happens, I will need to do the enable manually. (Of course, I better document this, or my successor won't know why RELOG stopped working...) I had never cancelled one either, until this note stream popped up. Then I began to play with issuing SIGNAL SHUTDOWN to my 2nd level system (simulating LPAR deactivation) and then cancelled the shutdown. What it revealed is that CP issues a bogus message, telling me that SHUTDOWN REIPL has been cancelled. :-) And I wish CP would decide if he's a Brit or a Yank. Sometimes he says cancelled and sometimes canceled. But maybe that's ok - so do I. :-) Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: SHUTTRAP
On Tuesday, 06/28/2011 at 03:10 EDT, Schuh, Richard rsc...@visa.com wrote: No only is it not obvious, so far I have been unable to find it in the documentation. You can specify a wait state code on the SHUTDOWN command and it can be anything between 1 and . I cannot find where the default is FFF. Is that a true system default or is it a code you have adopted for your use? You will not find any published information on the mechanism. I *observe* that if you SIGNAL SHUTDOWN to a 2nd level VM, it will load wait state FFF and the SIGNAL SHUTDOWN command gives a successful termination message. Draw your own conclusions. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: SHUTTRAP
On Tuesday, 06/28/2011 at 07:35 EDT, Schuh, Richard rsc...@visa.com wrote: Close, but I am not willing to grant you a cigar. If all, or even most, have the same Signalled by id, then either a signal shutdown all was done or a program did multiple signal shutdown user userid commands in rapid sequence. You cannot tell the difference between SIGNAL SHUTDOWN USER and SIGNAL SHUTDOWN ALL. If the signal is the result of an LPAR deactivation (or 2nd level equivalent), then the Signalled By user will be SYSTEM. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: SHUTTRAP
On Tuesday, 06/28/2011 at 10:06 EDT, David Boyes dbo...@sinenomine.net wrote: You will not find any published information on the mechanism. There is a tiny amount of information in the POP manual in the external interrupt section on the original LPAR deactivation signal and what's supposed to happen when it triggers, but the end comment is that the effect will be implementation dependent. What POP are you looking at? I can't find any reference to LPAR deactivation. The only machine-dependent external interrupt I can find is Service Signal and that covers a lot of ground, notifying the OS of the completion of some previously requested machine function. The 9730/9221 used to reflect now on batteries! and now on utility power! via an external damage machine check. The logical response to batteries! would be to almost-but-not-quite shutdown and quiesce. That is, go into an enabled wait for utility! and then come roaring back to life with an almost-but-not-quite IPL. (The machine even had a published DIAGNOSE to cause the machine to power down.) Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Question on SHUTDOWNTIME
On Thursday, 06/23/2011 at 07:06 EDT, Marcy Cortes marcy.d.cor...@wellsfargo.com wrote: The default is 30 seconds (Q SHUTDOWNTIME) for the CP's portion of the shutdown process. I recall hearing that is good default. We are seeing systems exceed that - 33 seconds in this one that seemed to come with bonus messages (that is our SW seemed to capture the HCPWRP963I's on this one). Are others seeing that? In my experience IPL and SHUTDOWN times are directly related to the number of devices. Any device you don't use should be kept in OFFLINE_AT_IPL. That will drastically improve startup/shutdown. On one system, I went from 44 seconds to about 12 by simply getting rid of those pesky shouldn't-be-in-the-I/O-configuration-anyway MVS volumes. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: RMSMASTR and shutdowns
On Thursday, 06/23/2011 at 05:12 EDT, Marcy Cortes marcy.d.cor...@wellsfargo.com wrote: Out of the box, RMSMASTR behaves very badly on a signal shutdown of your VM system. We have to use this to mount tapes in the VTS. RMSMASTR has files in VMSYSU: and VMSYS:, which both use signal shutdown by default. RMSMASTR hangs up the shutdown of VMSYS: until your system default shutdown time is up. That could be very long time. Or not, but not getting all the way down has required us to need FORCE starts on some systems on occasions, so a shorter time isn't even helpful. So we wrote our own SHUTTRAP thing to issue a DMSMSRM STOP command. This doesn't reliably work either. It's very timing dependent since this service machine gets the signal at the same time as VMSERVR and VMSERVS and if they beat it, the DFSMSRM STOP says not authorized (the auth file is in VMSYSU:) I opened a PMR once upon a time and it was rejected. We're trying to get things automated enough so that operations does nothing on the VM side and GDPS which signals the processor controller to shutdown the LPAR is sufficient. Does anyone else think this should be considered a defect? I do! I do! Sadly, that doesn't mean much. As pointed out by Kris on prior occasions, you can use UCOMDIR NAMES to redirect RMSMASTER to another server. That private little SFS server, solely to hold the configuration file, would be configured with NOSHUTDOWNSIGNAL. After CA:Operator shuts down RMSMASTER, it can then shut down the SFS. If it doesn't get shutdown normally, no biggie, since you would match this with a change to RMSMASTER's PROFILE EXEC to copy the REAL config file from a minidisk of your choosing into SFS before initializing the server. Then, if you should have to rebuild Private Little SFS from scratch, it doesn't matter - the config file is safe. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: RMSMASTR and shutdowns
On Friday, 06/24/2011 at 03:48 EDT, David Boyes dbo...@sinenomine.net wrote: As pointed out by Kris on prior occasions, you can use UCOMDIR NAMES to redirect RMSMASTER to another server. Ugh. What a hack. Works, but ... ick. Hack?!? That's what UCOMDIR/SCOMDIR were designed for and why CMS manages APPC the way it does. FIlepool references in CMS are, by design, symbolic destination names. If you don't have a COMDIR entry, you get the defaults (e.g. TPN = symbolic name). True, it's unusual, undesirable, annoying and a violation of all we hold sacred in computing (WYSI*N*WYG!), but . OK. it's a hack. ;-) Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: RMSMASTR and shutdowns
On Friday, 06/24/2011 at 04:31 EDT, Marcy Cortes marcy.d.cor...@wellsfargo.com wrote: Bleah.. and Yuck. NO NO NO. What's the point of putting 1 file in a SFS if you can't share it anyway??? Put it on a minidisk. 1 cyl is fine. And maybe when I have SSI , I can actually share it. It's 7 4k blocks of config data. Maybe IBM was trying to save me the other 96% of a cylinder by putting it in SFS? The rest of the component is on minidisk... But you CAN update it while RMSMASTER is up, can you not? I am guessing that there was a requirement to be able to update the config file without bringing the server down. Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: RMSMASTR and shutdowns
On Friday, 06/24/2011 at 05:46 EDT, Marcy Cortes marcy.d.cor...@wellsfargo.com wrote: Look at it this way. I don't want to have to have some VM guy with 30 years of experience needed to figure out where I put the config file for a product. :-) If was easy, ANYONE could do it. Ooo, look, there's the file that takes your request and sends it off magically to ... Oh wait, you lost that file you didn't know about in the migration from 6.8 to 6.9? and now you can't mount tapes. You mean you want to be able to register your own files on your own disks with the Migration Tool? Wow. Cool idea. If only :-) Uh oh, back off the upgrade since its going to take more than your 2 hour change window to get IBM on the phone to figure out why since I didn't answer my phone after winning the Lotto and running off to Bora Bora. Didn't we agree not to publicly reveal the location of the VM Expert Assisted Living Facility, Retirement Community, and Sanitarium?!? But it won't help; the IBM phones will be forwarded there anyway. ;-) Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Problems at DR test
Kris, I wasn't disputing the current state of affairs, but was expressing my opinion on how it *should* work. Regards, Alan Altmark IBM Lab Services - Sent from my BlackBerry Handheld.
Re: Problems at DR test
On Wednesday, 06/22/2011 at 11:41 EDT, Schuh, Richard rsc...@visa.com wrote: Have you submitted requirements? :-) Why, no. I just figured I'd post here like everyone else and hope for a miracle. :-) [Certain People in the Lab will be disappointed to the know that I will be back in the office on Friday!] Alan Altmark Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Standalone DDR License
On Wednesday, 06/22/2011 at 11:14 EDT, Tom Duerbusch duerbus...@stlouiscity.com wrote: If I had a license for VM and I DDR some full pack VSE volumes. Eventually I dropped the license for VM. Now I need to restore those VSE volumes. Am I licensed to be able to use the standalone version of DDR to recover those volumes? official answer Your obligations are set forth in the base license agreements and the License Information Document that came with your VM order. If needed, consult legal counsel to help you interpret those documents. /official answer unofficial answer If you used z/VM 4.1 or later, you're fine. Under the International Program Licensing Agreement terms and conditions, your license exists unless IBM terminates it. The license set forth under the IBM Customer Agreement (e.g. z/VM 3.1 or earlier, z/OS, many VM program products) is continually renewed on a monthly basis. As long as you pay the MLC, the license remains in effect. When you no longer have a license, you must destroy all copies of the licensed code. /unofficial answer Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Moving on
Congratulations, Richard! It's been a pleasure working with you these many years! I am glad to see that you will still be hanging around the VM Clubhouse -- your experience and contributions are greatly appreciated! Regards, Alan Senior Managing z/VM and Linux Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 alan_altm...@us.ibm.com
Re: FTP to the VM RDR
Read the ftp server configuration chapter in the tcp/ip planning book. You need to add privilege class D to the server and configure the RDR statement into SRVRFTP CONFIG. Regards, Alan Altmark IBM Lab Services - Sent from my BlackBerry Handheld. - Original Message - From: Lu GL Gao [lu...@cn.ibm.com] Sent: 06/23/2011 01:34 PM ZE8 To: IBMVM@LISTSERV.UARK.EDU Subject: Re: [IBMVM] FTP to the VM RDR In our environment, when I trid to send data to a user's reader, why the following message shown? -- 502 Support for STOR to VM reader is not enabled -- Best Regards! Gao Lu (高路) I/T Specialist Global Technology Services IBM Global Services (China) Company Limited. Address:18/F, Pangu Plaza, No.27, Central North 4th Ring Road, Chaoyang District, Beijing, 100101 地址：北京市朝阳区北四环中路27号盘古大观写字楼18层，100101 BeiJing 100027, PRC Cell Phone: 15001327619 Internet ID: lu...@cn.ibm.com Raymond Noal raymond.noal@emc .com To Sent by: The IBM IBMVM@LISTSERV.UARK.EDU z/VM Operating cc System IBMVM@LISTSERV.U Subject ARK.EDU Re: FTP to the VM RDR 2011-06-14 02:02 Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.U ARK.EDU Dave, Try – [CD|CDW] userid.RDR Raymond E. Noal EMC² where information lives Phone: (508) 249-4076 Ext: 44076 From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On Behalf Of Tracy, David Sent: Monday, June 13, 2011 1:58 PM To: IBMVM@LISTSERV.UARK.EDU Subject: FTP to the VM RDR All, Can any give me the FTP command to transfer to the Reader instead of mini-disk? Thank you… …Dave
Re: Problems at DR test
On 6/21/2011 9:18 AM, Scott Rohling wrote: my 2 cents: because most 009 consoles are defined as 3215 on z/VM guests. (as for the ones that are listed.. ummm.. darts? :-) There's no reason why CP could not issue TERM CONMODE 3270, as Linux does when instructed to use a 3270 console. Even CMS issues TERM CONMODE 3215 when it IPLs. Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Problems at DR test
On Tuesday, 06/21/2011 at 02:40 EDT, gclo...@br.ibm.com wrote: Is SYSC the unique restriction? Another legacy of the last millennium? Restriction against what? It is the one unifying console interface. It works for all the OSes. If you know how to use it for one OS, you know how to use it for the others, both on the HMC and via #CP VINPUT VMSG. And it operates whether the guest is running in 3270 mode or 3215. Ideally, you shouldn't even have to code it in SYSTEM CONFIG. System_3270 (SYSG) and System_Console (SYSC) should be the consoles of last resort. If you don't specify any operator or emergency consoles, SYSG and SYSC are what you get. If the 3270 session is started, you get that. If not, you get the linemode console. Easy. The only time a 1010 would be given would be if an explicitly specified console at IPL wasn't available for use. And I have to think about whether I believe that SAPL parms or LOADPARM that are re-used on SHUTDOWN REIPL constitute explicitly specified -- I don't think so. IMO, for the purposes of abend restart and SHUTDOWN REIPL, that stored value is simply prepended to the operator and emergency console lists. Just come up on the next available operator console with a message that says PREVIOUS CONSOLE DEVICE 01F IS NO LONGER AVAILABLE. While we're Wishing, I would also wish that CP would accompany all IPL wait states with a message to the integrated console, including SPECIFIED CONSOLE DEVICE 009 IS NOT A 3270. (Natch, the system has to be able to come up far enough to allow CP to connect to SYSC!) The one wait state with no message would be the one for I can't establish a connection with the integrated console - something is seriously wrong. (If SYSC doesn't exist at all, that's a horse of a different color.) An always-on, always-there console changes the nature of traditional CP error reporting. Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: CLONEBKP: New package at zVM/downloads
On Friday, 06/17/2011 at 01:37 EDT, Scott Rohling scott.rohl...@gmail.com wrote: It will likely fail, with a message that the target is not in the required state and is the target of an existing flashcopy...until the background copying finishes -- you won't be able to flash to the same target. This sounds like a good use of the FLASHCOPY SYNCH option. Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: IPLing z/VM 2nd level with many lines and columns
An incorrect mtu specification somewhere along the data path can cause this, as might pcomm v6. See the internal pcomm forum. Regards, Alan Altmark IBM Lab Services - Sent from my BlackBerry Handheld. - Original Message - From: Michael MacIsaac Sent: 06/15/2011 01:30 AM AST To: IBMVM@LISTSERV.UARK.EDU Subject: [IBMVM] IPLing z/VM 2nd level with many lines and columns Hi, We ran into a problem IPLing a z/VM 2nd level using a 3270 emulator (PComm) with a setting of 62x160 (LINESxCOLS). Setting it back to 43x80 worked around the problem. Is this a known issue? Thanks. (I know, I know, Doctor it hurts when I do this - So don't do this :)) Mike MacIsaac mike...@us.ibm.com (845) 433-7061
Re: z/OS 1.4 running under z/VM 5.4 over a z890
On Wednesday, 06/15/2011 at 04:23 EDT, Carlos Bodra - Pessoal cbo...@terra.com.br wrote: Can I use z/VM 5.4 as host to a z/OS 1.4 guest? z/OS 1.8 is the oldest release that is *supported* by z/VM 5.4. See Appendix B of the Running Guest Operating Systems book. Will z/OS 1.4 *run*? I don't see why not, as long as you have the z990 Exploitation support installed per http://www-03.ibm.com/systems/z/os/zos/support/zos_server_support.html. Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: z/VM page space
On Tuesday, 06/14/2011 at 01:30 EDT, David Boyes dbo...@sinenomine.net wrote: I think that's why you'd have to force CP to dirty the page rather than doing it inside a virtual machine, especially with CP's own pages potentially written at startup. Probably only doable from inside CP itself, or at minimum, via manipulate of real storage rather than virtual storage. There Be Dragons. Another project for my Copious Spare Time. Not. And now you know why DRAIN MIGRATE doesn't exist. :-) As Bill Holder, z/VM Memory Master, alludes, there are no data structures in CP that index the contents of paging volumes. You would have to traverse every users' memory management data structures to find references to page slots on the drained volume. In short, Eeeww. Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Duplicate CP Monitor records TCPIP
On Monday, 06/13/2011 at 07:46 EDT, Berry van Sleeuwen berry.vansleeu...@xs4all.nl wrote: I think so but I'm not quite sure. We use the NETSTAT OBEY sometimes, usually for stop or start of a link. For instance NETSTAT OBEY START DEVHW1. The only way I could think of to get the same record more than once is to declare it more than once to CP. (DIAG 0xDC doesn't appear to have a this buffer has been previously declared return code.) It would be interesting to know if the number of extra LCB (0x05) monitor records is in any way related to the number of times you START the device or re-define any of the LINK attributes. I agree with Bill; you need a PMR to poke at it further. Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Duplicate CP Monitor records TCPIP
On Fri, 10 Jun 2011 09:43:52 -0500, Berry van Sleeuwen berry.vansleeu...@xs4all.nl wrote: The IP stack hasn't been stopped, at least as far as I know. The last ti me the stacks were stopped was due to a VM IPL. If indeed multiple buffers were created, would it make sense that the sa me data is reported in all buffers? I would expect, if new buffers were cre ated for the devices the data in the newest buffers would be incremented with the new data and the old buffers would stay on their old values. Berry, has OBEYFILE or NETSTAT OBEY been used against this stack? Alan Altmark IBM
Re: Again IOCDS and dynamic activation.
On Friday, 06/10/2011 at 09:18 EDT, Tom Huegel tehue...@gmail.com wrote: I am having a problem with dynamic activation of the IOCDS by z/OS. : Am I missing something? Is this the way it is supposed to work? Is there a way to prevent this from happening? SET NEW_DEVICES INIT is documented as affecting device for which an I/O machine check is received, but there are mechanisms that can add devices without generating that machine check. And then we must all confab about what new means. I suggest that you open a PMR so that you can talk to Extreme Experts. Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: z/VM 5.4 FTP Installation ... ? ...
On Friday, 06/10/2011 at 07:51 EDT, Malcolm Beattie beatt...@uk.ibm.com wrote: (2) Have you ever done it using non-offset-0 minidisks? Yup, multiple times. Shouldn't cause any problems at all. Just so long is there's enough room on the resulting minidisks to fit a whole mod-3 minus a few cylinders or whole mod-9 minus a few cylinders. I forget the exact number (there's a table in one of the manuals) but I'm pretty sure the installation lets you shave more than one cylinder from a whole mod3 or mod9--i.e. it doesn't use, need or care about the last 2-3 cyls on the volumes you give it. The system layout is explicitly designed to occupy no more than n-1 cyls. This was done to accommodate non-fullpack minidisk installation. Hmmm... this isn't made clear in the Program Directory. A simple FLASHCOPY with relocation will take care of getting it production-ready in, um, a flash. As it were. Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: REXXCPS EXEC
On Friday, 06/10/2011 at 10:25 EDT, Mike Hammock m...@hammocktree.us wrote: Just remember that REXXCPS is a single thread; it can only test a single processor/core. If you have a multi-processor system you have to multiple by the number of processors and adjust for N-way interference. I.e. It's just another instance of bogomips. Treat it the same way. Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: REXXCPS EXEC
On Friday, 06/10/2011 at 01:47 EDT, Mike Hammock m...@hammocktree.us wrote: Of course, pretty soon we may have to start using BIPS (Billions of .). Let's see, what word can we find that starts with B that means Meaningless? (yawn) (scratch) (scratch) I vote for Beaningless. It even pulls in: - Useless accounting (bean counters) - Smacking someone on the head (beaning them) (burp) -- Chuckie (snore)
Re: Question regarding zVM and CF when running in a LPAR
On Thursday, 06/09/2011 at 10:12 EDT, David Booher david.boo...@quest.com wrote: Am I understanding correctly that the CFUSER virtual machines that you can run when z/VM is running natively and now be run in zVM when running in an LPAR? This was added in zVM 5.4? There has never been a restriction on using virtual coupling in an LPAR. The only thing that is required is that the machine be licensed for Coupling Facility, which, IIRC, is demonstrated by the presence of at least one coupling link on the box. (But that may have changed over the years) If the machine is not licensed for CF, then virtual CF cannot be used. What IS relatively new is that if you are running in a z/VM mode LPAR, then you can have real CF engines in the z/VM LPAR and virtual CFs will be dispatched on real CFs. Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Question regarding zVM and CF when running in a LPAR
On Thursday, 06/09/2011 at 11:14 EDT, Mike Walter mike.wal...@aonhewitt.com wrote: I'm not sure if this will be of any help, but here are the CF-related console messages extracted from our most recent IPL of a z/VM 5.4 system running in an LPAR on a z10: You can find sample output and other information on the virtual Coupling Facility in the Running Guest Operating Systems book. The relevant error in this case is CFCC4 : HCPMFT2814E THE REQUEST TO LOAD CFCC4 FROM THE PROCESSOR CONTROLLER DID NOT COMPLETE IN THE ALLOTTED TIME. HELP HCP2814E tells you to try again, but that if it fails repeatedly to open a PMR. SEND won't work until the CF is loaded and ready. z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Duplicate CP Monitor records TCPIP
On Thursday, 06/09/2011 at 10:06 EDT, Berry van Sleeuwen berry.vansleeu...@xs4all.nl wrote: What can cause the CP monitor to have these duplicate records? A type 0x05 record is, I think, produced for each LCB (Link Control Block) in the stack. Does the OSA device have multiple LINKs? Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Dynamic Activation of New IODF
On Tue, 7 Jun 2011 11:14:44 -0400, Michael Coffin michaelcof...@mccci.co m wrote: Is it even possible to store a new IOCDS, mark it as active for the next POR AND have CP add/change/delete IO definitions by comparing the prior IOCDS with the newly activated one? Yes, that's precisely what HCD does. HCD will compare the new I/O configuration and the current I/O configuration, and will dynamically update the current I/O configuration to match the new one. As it does that, each LPAR whose OS is enabled for dynamic I/O will receive notification of any updated I/O componentry. In CP's case, that means bringing paths and devices online (subject to SYSTEM CONFIG and prior VAR Y commands). Unlike HCD on z/VM, HCD on z/OS knows how to do everything for all device s used by all operating systems. This is why when VM and MVS are on the same box, you let HCD on MVS do all the heavy lifting. Alan Altmark IBM
Re: Sending messages to z/OS from z/VM using RSCS
On Monday, 06/06/2011 at 12:41 EDT, Hughes, Jim jim.hug...@doit.nh.gov wrote: I am able to send messages to a z/OS TSO userid using the RSCS command MSG from z/VM. How would the TSO userid send a message to me on the z/VM node? z/VM node is DIS3081. Z/OS node is MVSSYS. Would the z/OS TSO userid be able to issue commands to the z/VM system or would PROP be involved? No, the TSO user cannot issue VM commands directly. All they can do is issue a message to (for example, OPERATOR) on the the target system. PROP (or whatever automation you have) would see the message and the origin information, and decide what to do: issue a command, reject, forward, whatever. That's up to the action routine. Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Sending messages to z/OS from z/VM using RSCS
On Monday, 06/06/2011 at 02:31 EDT, Hughes, Jim jim.hug...@doit.nh.gov wrote: How do I use TSO to send the message to z/VM operator at node DIS3081? TRANSMIT (XMIT). It's been a while, but IIRC the basics are: XMIT DIS3081.OPERATOR MSG will prompt the issuer. XMIT DIS3081.OPERATOR MSGFILE(ddname) XMIT DIS3081.OPERATOR MSGDATASET(dsname) will send a file as a message. If you use TERMINAL, FILE, or DSNAME options, then the input is sent as a file to the target user's RDR. (Back when I used TSO on a regular basis, TRANSMIT hadn't been invented, yet.) Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: PROBLEMS WITH DEDICATE DASD IN z/VM 6.1
On Friday, 06/03/2011 at 11:30 EDT, gclo...@br.ibm.com wrote: A millennium ago (before year 2000) I ear that DEDICATE dasd have better performance, maybe due no need to translate CCW. But, I change all my definitions when DEVNO was introduced: gain in flexibility, enabling dasd sharing for full packs without need to any Attach (when not in use, dasd remains FREE, isolated from CMS). And no performance problems. My question: nowadays, the performance still is a factor to use DEDICATE versus MDISK DEVNO? Back when we had native mode on the machines (no LPAR), dedicated devices were eligible for I/O Assist in V=R and V=F guests. That's all gone. Today, a dedicated device: - Does not have CCW command word validity checks - Does not use minidisk cache - Can be attached to only one user at a time (subject only to gaming of the IOCDS) - Is not subject to ESM security controls - (I think) does not have a CCW chain broken by CP in some circumstances (working allegiance is maintained by default) As to whether that will affect performance in any meaningful way depends entirely on the I/O workload. But I don't think I'd use performance as my primary criteria. I'd probably start with DEVNO and then see if I have any issues that DEDICATE would solve. Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: HMC security (was: zvm directions)
On Thursday, 06/02/2011 at 08:30 EDT, Philip Tully tull...@optonline.net wrote: My reason to start the zvm directions thread was to start people talking. And that's a Good Thing, Phil. Having an awareness that the model of mainframe management begun in the 60s (and still in place today) is changing will help to ensure that people aren't surprised by the change. It will also help raise awareness of the challenges (both to you and to IBM) waiting in the wings. For those who want to talk online about zEnterprise generally, IBM-MAIN and [really?] Systemz Mainframe on Facebook probably have better visibility within the relevant circles in IBM that does IBMVM. Of course, if you want to specifically talk about how z/VM management is affected zEnterprise ensemble management using Unified Resource Manager, then there's no better place than here! :-) Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: EXECIO DISKW Question
On Wednesday, 06/01/2011 at 10:50 EDT, Sergio Lima sergiovm...@hotmail.com wrote: We want write a REXX EXEC , that do a Update in place. Another words, I need, read the record 1 from the file, and then rewrite the same record. Is possible? Yes. There are a few programming considerations: 1. If the file is RECFM F, you can change any record you want. 2. If the file is RECFM V, you can change any record you want. 3. If you change the LRECL of a record in a RECFM V file, that record will become the last record in the file. 4. If other virtual machines have the disk accessed while you're doing this, then you can use filemode number 6 to cause the records to be physically rewritten to the same disk location. 5. Update-in-place using fm6 exposes the file to corruption if the system or CMS dies in the middle of a write. For more information, please read these (sub)sections of Ch. 9 (CMS File System) of the CMS Application Development Guide for Assembler - Replacing Records - EDF Data Integrity - Extending the file Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: Applications Programmer/Analyst Jobs in Germany (UNCLASSIFIED)
On Wednesday, 06/01/2011 at 01:58 EDT, Danny Padilla p_enterpri...@cox.net wrote: Sounds GreatWhats the next step ? Have a *PRIVATE* conversation with the OP. :-) Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: HMC security (was: zvm directions)
On Wednesday, 06/01/2011 at 11:18 EDT, David Boyes dbo...@sinenomine.net wrote: The Unified Resource Manager's Storage Administrator function includes the ability exporting the WWPN configuration and importing an access list based on it. (Sorry, I haven't personally used it, yet, so I can't comment further.) Yes, it can. It's pretty much useless. Trouble is, none of IBM's OTHER storage management tools can produce a format that the URM SA function wants to read, and vice versa. There also aren't much in the way of APIs to create tools that can. Seriously, if the URM is supposed to drive and be driven based on the ensemble management stuff, wouldn't it be kinda logical to think that *maybe* the other tools FROM THE SAME VENDOR might want to be aware of what it needs without having to invent the wheel? If we wait until everything is fully integrated and interoperable, we'd never get the thing out the door. Step 1: Introduce the product to the marketplace. My only counsel is Watch this space. I guess I'm seeing one useful thing out of this discussion: IBM talking to the zBLC for requirements about interfaces and toolsets gets the rest of us products that only the zBLC members -- usually the LARGEST Z sites -- can afford to deploy. I think it would be helpful for IBM to talk to people that can't deploy products that use large amounts of consulting time about Z interfaces and toolsets. I think that would do wonders to help the satisfaction and comfort level with these new functions. Sorry, that's beyond my pay grade. Folks with concerns on that front should arrange to speak with an IBM System z executive. Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: HMC security (was: zvm directions)
On Tuesday, 05/31/2011 at 11:03 EDT, Philip Tully tull...@optonline.net wrote: Or listening to our SAN provisioning group here that every other platform integrates well with their tools, whereas on the Z they need to actually type wwpn's. The Unified Resource Manager's Storage Administrator function includes the ability exporting the WWPN configuration and importing an access list based on it. (Sorry, I haven't personally used it, yet, so I can't comment further.) If you have specific needs that you feel aren't being met, make sure you're talking to the right people. Heads up: They don't hang out here. This is a case, again, where you can ask your IBMers or BPs to set up a conference call. Where particular software is involved, I suggest talking to whoever is responsible for that software. (HW architects cannot solve SW availability problems.) Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: z/VM 5.4 TCP/IP stack name
On Friday, 05/27/2011 at 07:48 EDT, E. Roller ewald.rol...@rolf-benz.com wrote: Yesterday I tried to rename one of my two TCPIP Stacks. I have TCPIP and TCPIP02 and wanted to rename TCPIP to TCPIP01. After doing that with the appropiate file and parameter updates, I was not able to do a NETSTAT command against TCPIP01, I got VM-Intercommunication errors. Maybe a silly question, but before I go into deeper investigation, I want to know if it is necessary to have the first stack named TCPIP. It's not necessary, no, but you are going to create more trouble for yourself than you need. - Since the user ID is provided by IBM, you will have to do a PPF override so that SERVICE and PUT2PROD know what you've done. - Create :Type.SERVER entries in SYSTEM DTCPARMS for all servers and specify the :Stack. tag as appropriate. (Warning: Do not change IBM DTCPARMS and do not perform a mass copy of IBM DTCPARMS to SYSTEM DTCPARMS.) - Change TCPIP DATA to include the TCPIPUSERID statement to point to your stack You may want to leave TCPIP in the directory (NOLOG) in order to provide indirect minidisk links to the 198, 591, and 592 just in case someone says LINK TCPIP instead of LINK TCPMAINT. The maxim that you don't change or delete what IBM provides, but only add to it, is a good one. While PPF overrides work well for service, there is no generally accessible system registry (e.g. some form of system environment variables) to let the rest of the system know what it is you've done. My recommendation: Create all the stacks you want, but leave TCPIP Co. alone. Use the suite as your master TCP/IP instance, even if you don't bring them up. Alan Altmark z/VM and Linux on System z Consultant IBM System Lab Services and Training ibm.com/systems/services/labservices office: 607.429.3323 mobile; 607.321.7556 alan_altm...@us.ibm.com IBM Endicott
Re: HMC security (was: zvm directions)
On Thursday, 05/26/2011 at 11:10 EDT, David Boyes dbo...@sinenomine.net wrote: But it's certainly a common one. I can think of at least a dozen sites that have heard this requirement from IBMers. I've always thought the proper solution to this was to add a badge reader to the HMC to allow IBMers to enable these ids only when they are physically present (and responsible for them). I will try to find out where this is coming from and see if there are some adjustments that can be made. I note that the checklist in 4.6.5 of the SAPR Guide only says Requirements for passwords and userids for the Hardware Management Console and Support Element of the 2817 Server have been determined. And herein lies some of the resistance. Agreed, this is the Right and Proper Way. If I am to operate in this way, I need to engineer Yet Another identity management system (at best a plugin to an existing one, at worst an entire new system). There is not a single commercially available identity management system (including Tivoli products) that would know what a HMC is if it bit them in the rear. None of them understand any of the roles you describe, and none of the IT security weenies who run this stuff day to day have any grasp of this. It doesn't show up in their point-to-click-to-manage world -- you're dealing with people who think AD is the be-all, end-all, not RACF. After all, it's just a PC, right? (*snort*) -- doesn't work with *their* tool, doesn't happen. I concede the point that that will change over time, since this is more likely to impact z/OS sites and thus actually cause money to be spent, but you're moving too fast for the real world here. (I made this point in the design discussions about ensembles in Research; clearly I didn't have a big enough tantrum to crack the light of reality over this horizon). Local password management? I'm not following you on this. My client has all 'normal' HMC IDs authenticated with the corporate directory server (Active Directory). See above. AD integration for an HMC requires modifying the default AD schema to allow somewhere to store all those nifty new attributes, which is a one-way street. You can't go back. Windows admins (unless they are very very good) flee screaming from this, as it's an irrevocable step and it changes the support posture for a lot of other products, including some ones that have nothing to do with System Z (try calling Microsoft with a Exchange problem if you have a modified AD schema. You won't like it. Trust me.) This isn't a z-specific issue. Further, Microsoft says that AD Lightweight Directory Service (AD LDS) can be used in such a way that it isn't necessary to extend the AD schema. http://www.microsoft.com/windowsserver2008/en/us/ad-main.aspx Not being an AD admin, I can admit that the subtleties escape me. They may not need them, but setting up a separate provisioning process with all the attendant auditing, etc to manage them in a responsible way (let alone letting a non-human agent do anything to configurations without having exits for MY change management system (whatever that may be), as some of the ensemble code proposes to require in the near future) is pretty much a non-starter. Separation of powers, if nothing else -- if I can change the hardware configuration, I'm not allowed to change the user authorizations, and otherwise, WYSIWG wrt HMC management, and that doesn't include letting automation tinker with it. I guess the message we're trying to convey is that if this thing is to become the management endpoint for the System Z, a lot more thought needs to be put into deployment integration with other parts of the environment before people are going to be comfortable with the level of power that this thing has over the crown jewels. If it's treated as the control point, it's got to play nice with OUR control points. IBM can't revoke support for it when we install the stuff that makes it work for our businesses. The current message from IBM is a little too blue-centric for that to be realistic. Stay your sword, good man! The good news is that the z196 introduced a way for you to do that. It is no longer required to pre-define HMC users to the HMC. 1. Create one or more User Templates. These are model user IDs that can be associated with an HMC user for whom no User Profile exists. Except for the fact you can't use them for authentication purposes, they are conceptually the same as user profiles. 2. Create one or more User Patterns. This is a pattern that, when matched against a login ID (for example, u...@company.com) for which no user profile exists, identifies how to decide if the user can log in and, if so, what user template should be associated with them. Hopefully that will take a big bite out of the problem. Alan Altmark z/VM and Linux on System z Consultant
