Re: anyone running ILMT?
We run it on all of our platforms and do manual scans everywhere since it provides more control than the scan groups. As far as z goes, we use Operations Manager to kick off a few scans at a time so as not to bog down the LPARs and we only do it monthly. The scripts also knows about which filesystems to scan and which ones to bypass and adjusts tlmagent.ini before the scan. I know this can be done in the server itself, but it's just easier to let each platforms script manage it since the respective groups know what's happening on their servers the best. Another thing we do is drop the cache on each server after the scan completes. The first time we let the ILMT server do the scan automatically, the person that set it up put all of the zLinux servers in one scan group and they all kicked off at once. z/VM paging went totally bonkers due to memory overcommit (3 to 1 if I remember correctly). I maintain the ILMT server now. :-) Also, in case you want to manage it via scan groups, check into the lmtcli.sh command as it will allow you to automatically assign servers to different scan groups (and a lot more). I have a script that runs daily and checks for anything in the DEFAULT group (we assign all new servers to DEFAULT) and reassigns them to the correct groups using the command. Since we do manual scans, the scan groups don't do much for us except for reporting and I have a script that runs monthly to check for invalid/missing scans and emails a report to the correct group. The notifications built in to the ILMT server don't really provide a way to do that (not that I could find anyway). Anyway...just some tidbits on how we roll. :-) Leland And no, I never did figure out exactly how to configure the capacity values so if you do I'd be might grateful if you'd pass on the info.
Re: Extending DASD format?
On 6/28/11 9:45 AM, Richard Troth wrote: I will, no doubt, annoy several, but I have to say it: This is why I recommend LDL (misnomer) and don't partition. Agreed. The only CDL formatted volumes we use are for the root disk and we might even do away with those during our SLES11 upgrade. We've always used LDL disks for everything else. I just never saw the benefit. Leland
Re: Extending DASD format?
A few years ago, I modified dasdfmt to allow specification of the
start and end track for formatting. I was using LDL formatted volumes
do I didn't have to worry about the VTOC.
Usage: ./dasdfmt [-htvyLVFk]
[-l volser | --label=volser]
[-b blocksize | --blocksize=blocksize]
[-d disk layout | --disk_layout=disk layout]
[-s track | --start=track]
[-e track | --end=track]
diskspec
-t or --test means testmode
-c or --changeonly change disk layout only...no formatting
-V or --version means print version
-L or --no_label means don't write disk label
-w x or --wait=x means wait x seconds at 1 percent intervals
-s or --start means to start formatting at the specified track
-e or --end means to stop formatting at (and including) the
specified track
-p or --progressbar means show a progress bar
-m x or --hashmarks=x means show a hashmark every x cylinders
-v means verbose mode
-F means don't check if the device is in use
-k means keep volume serial
volser is the volume identifier, which is converted
to EBCDIC and written to disk.
(6 characters, e.g. LNX001
blocksize has to be power of 2 and at least 512
disk layout is either
'cdl' for compatible disk layout (default) or
'ldl' for linux disk layout
and diskspec is either
-f /dev/dasdX or --device=/dev/dasdX
if you do not use devfs
or
-f /dev/dasd//device or --device=/dev/dasd//device
and alternatively
-n or --devno=
in case you are using devfs.
is your hexadecimal device number.
Please report bugs to: linux...@de.ibm.com
On Mon, Jun 27, 2011 at 4:23 PM, Tom Huegel tehue...@gmail.com wrote:
Maybe I left something out.
Since this is CDL format there is a VTOC with an entry for the partition
extent.
I can use a free CMS program LXFMT to update that label without destroying
any data.
The gotcha is that I (LINUX) cannot use the additional DASD because it is
not in a 4K format.
Another solution I thought of would be to define the mdisk to VSE (I suppose
z/OS would work too) then I could use JCL to create a file appending the
current LINUX partition and write a program (any language) to open the file,
write 4K records to the end. and close the file.
Then go back to CMS for LXFMT to update the partition label.. and then
to LINUX to expand the file system..
Safer than me calculating where to DDR copy to, but still a mess...
On Mon, Jun 27, 2011 at 1:57 PM, Jonathan Quay jonathan.q...@ihg.com
wrote:
I don't think you can do what you want to do because the linux partition
table won't see the extra cylinders. Nothing jumps off the page on the
s390tools site. I think you are stuck with defining a bigger minidisk and
copying the data over. LVM's are easy to extend and that is what I use for
almost all my filesystems.
On Mon, Jun 27, 2011 at 4:44 PM, Thomas Kern tlk_sysp...@yahoo.com
wrote:
CPFMTXA can do that cylinder range formatting, but I don't know if Linux
will then allow you to do the resize2fs to enlarge the filesystem control
blocks. It would be worth a try on a TEST MINIDISK.
/Tom Kern
On Mon, 27 Jun 2011 13:28:49 -0700, Tom Huegel tehue...@gmail.com
wrote:
Tom,
Yea that would work too.
It just seems so simple to be able to format a cylinder range (either in
LINUX or CMS) ie FORMAT A10 4K cyl 100:199.. It would just write 4K
blocks
x'00's and be almost done with it. Then LINUX could expand the
filesystem
and away we go.
At least it sounds simple.
On Mon, Jun 27, 2011 at 1:11 PM, Thomas Kern tlk_sysp...@yahoo.com
wrote:
I always did it the old-fashioned way:
1) allocate a new 200 cyl minidisk
2) format it in linux
3) use linux tools to copy data from old to new
4) mount new instead of old
5) remove old from linux configuration
/Tom Kern
On Mon, 27 Jun 2011 10:35:46 -0700, Tom Huegel tehue...@gmail.com
wrote:
I have a minidisk that LINUX uses. It is defined and formatted h use
CDL
format.
The MDISK is 100 cylinders but I want to expand it to 200 cylinders.
How can I write the proper format on cylinders 99 to 199?
The only way I found was to create another mdisk with 200 cylinders
and
format it, then DDR copy cyl 99 to 199 to my old disk.
There must be a better way.
Does anyone know of a utility that will format specific cylinders on
a
disk?
Thanks
--
Jonathan Quay
Systems Engineer - Enterprise Servers and Virtualization
Global Technology
Direct Line: 770-442-7026
Fax: 770-442-7191
http://www.ihg.com
Re: Extending DASD format?
Here's my old patch for it. This was against 1.5.1, but shouldn't be
too difficult to bring up to date. IOW, I longer use it...
Leland
On 6/27/11 5:17 PM, Tom Huegel wrote:
Leland,
Is your updated version generally available?
Thanks
Tom
On Mon, Jun 27, 2011 at 2:35 PM, Leland Lucius lluc...@homerow.net
mailto:lluc...@homerow.net wrote:
A few years ago, I modified dasdfmt to allow specification of the
start and end track for formatting. I was using LDL formatted volumes
do I didn't have to worry about the VTOC.
Usage: ./dasdfmt [-htvyLVFk]
[-l volser | --label=volser]
[-b blocksize | --blocksize=blocksize]
[-d disk layout | --disk_layout=disk layout]
[-s track | --start=track]
[-e track | --end=track]
diskspec
-t or --test means testmode
-c or --changeonly change disk layout only...no formatting
-V or --version means print version
-L or --no_label means don't write disk label
-w x or --wait=x means wait x seconds at 1 percent intervals
-s or --start means to start formatting at the specified track
-e or --end means to stop formatting at (and including) the
specified track
-p or --progressbar means show a progress bar
-m x or --hashmarks=x means show a hashmark every x cylinders
-v means verbose mode
-F means don't check if the device is in use
-k means keep volume serial
volser is the volume identifier, which is converted
to EBCDIC and written to disk.
(6 characters, e.g. LNX001
blocksize has to be power of 2 and at least 512
disk layout is either
'cdl' for compatible disk layout (default) or
'ldl' for linux disk layout
and diskspec is either
-f /dev/dasdX or --device=/dev/dasdX
if you do not use devfs
or
-f /dev/dasd//device or --device=/dev/dasd//device
and alternatively
-n or --devno=
in case you are using devfs.
is your hexadecimal device number.
Please report bugs to: linux...@de.ibm.com mailto:linux...@de.ibm.com
On Mon, Jun 27, 2011 at 4:23 PM, Tom Huegel tehue...@gmail.com
mailto:tehue...@gmail.com wrote:
Maybe I left something out.
Since this is CDL format there is a VTOC with an entry for the
partition
extent.
I can use a free CMS program LXFMT to update that label without
destroying
any data.
The gotcha is that I (LINUX) cannot use the additional DASD
because it is
not in a 4K format.
Another solution I thought of would be to define the mdisk to VSE
(I suppose
z/OS would work too) then I could use JCL to create a file
appending the
current LINUX partition and write a program (any language) to
open the file,
write 4K records to the end. and close the file.
Then go back to CMS for LXFMT to update the partition label.. and
then
to LINUX to expand the file system..
Safer than me calculating where to DDR copy to, but still a mess...
On Mon, Jun 27, 2011 at 1:57 PM, Jonathan Quay
jonathan.q...@ihg.com mailto:jonathan.q...@ihg.com
wrote:
I don't think you can do what you want to do because the linux
partition
table won't see the extra cylinders. Nothing jumps off the page
on the
s390tools site. I think you are stuck with defining a bigger
minidisk and
copying the data over. LVM's are easy to extend and that is
what I use for
almost all my filesystems.
On Mon, Jun 27, 2011 at 4:44 PM, Thomas Kern
tlk_sysp...@yahoo.com mailto:tlk_sysp...@yahoo.com
wrote:
CPFMTXA can do that cylinder range formatting, but I don't know
if Linux
will then allow you to do the resize2fs to enlarge the
filesystem control
blocks. It would be worth a try on a TEST MINIDISK.
/Tom Kern
On Mon, 27 Jun 2011 13:28:49 -0700, Tom Huegel
tehue...@gmail.com mailto:tehue...@gmail.com
wrote:
Tom,
Yea that would work too.
It just seems so simple to be able to format a cylinder range
(either in
LINUX or CMS) ie FORMAT A10 4K cyl 100:199.. It would just
write 4K
blocks
x'00's and be almost done with it. Then LINUX could expand the
filesystem
and away we go.
At least it sounds simple.
On Mon, Jun 27, 2011 at 1:11 PM, Thomas Kern
tlk_sysp...@yahoo.com mailto:tlk_sysp...@yahoo.com
wrote:
I always did it the old-fashioned way:
1) allocate a new 200 cyl minidisk
2) format it in linux
3) use linux tools
Re: CPU Measurement Facility for z/VM
On 4/13/11 9:38 PM, Dave Jones wrote: That's what I understand but I could be wrong now.but I don't think so:-) I got a message from our IBM FTSS and their zCP3000 report indicates that monitor domain 5 record 13 contains the CPU Measurement Facility data. But, those fellas do not seem to be documented and I can't find anything about 'em on IBMLink, so I guess we just have to wait a while longer. Leland On 4/13/2011 9:20 PM, Leland Lucius wrote: On 4/13/11 8:46 PM, Dave Jones wrote: Hi, Leland. I don't know what plans VM development might have for supporting the hardware CPU Measurement Facility, like z/OS does with HIS, but I get the impression that the CPU MF is meant to be used mostly by IBM h/w support to detect and diagnose performance issues in the new processors. I don't think there are any z/OS performance setting knobs that you can turn based on what the HIS reports, so it might not be all that interesting to performance folks. That's just the thing. Our performance types are looking forward to getting the data. I don't know why...didn't ask since my neurons tend to get excited by other things. :-) Leland
Re: CPU Measurement Facility for z/VM
On 4/14/11 10:22 AM, Gregg wrote: Not currently supported for z/OS running as a z/VM guest – z/VM native prototype support in process http://share.confex.com/share/116/webprogram/Handout/Session8882/SHARE%202011%20CPU%20MF%20-%20the%20Lucky%20SMF%20113s%20%20z196%20Update%20and%20WSC%20Experiences%20Final%20Final.pdf Thanks for the reference Gregg. I guess our performance dudes will just have to be patient. :-) Leland
CPU Measurement Facility for z/VM
z/OS currently supports hardware instrumentation data collection on z10 and z196 machines via z/OS's Hardware Instrumentation Facility (HIS). In presentations at SHARE and zExpo, IBM seems to indicate that HIS-like support is in the works for z/VM. Is HIS-like support available yet for z/VM? If available, what APAR(s) provide this support? Thanks much, Leland
Re: CPU Measurement Facility for z/VM
On 4/13/11 8:46 PM, Dave Jones wrote: Hi, Leland. I don't know what plans VM development might have for supporting the hardware CPU Measurement Facility, like z/OS does with HIS, but I get the impression that the CPU MF is meant to be used mostly by IBM h/w support to detect and diagnose performance issues in the new processors. I don't think there are any z/OS performance setting knobs that you can turn based on what the HIS reports, so it might not be all that interesting to performance folks. That's just the thing. Our performance types are looking forward to getting the data. I don't know why...didn't ask since my neurons tend to get excited by other things. :-) Leland
Dedicating CPUs to an LPAR
I should know this, but my aging mushy stuff just isn't working for me today. If we define multiple z/VM LPARs with dedicated IFLs, can those IFLs be moved from one LPAR to another? Is it as simple as vary off... and vary on...? Thanks, Leland
Re: smcli - z/VM System Management command line utility
I don't know about you folks, but I've been finding all sorts of uses for this fella. I had intended to use it for our SLES11 upgrade, but I've found it to be useful in all of those little admin kinds of things. And it's now helping quite a bit in on of our HA NFS clusters. I doubt I'll use many of the SMAPI functions, but I'm glad I didn't just stop with the functions I needed for the upgrade. I'm already using a couple that I hadn't originally planned for smcli. Leland (Anyone have a sling? My arm is getting sore from patting myself on the back. ;-D)
Re: smcli - z/VM System Management command line utility
On 2/11/11 10:26 PM, David Boyes wrote: You, sir, are a god. I've been kicking IBM ever since SMAPI came out for something like this. Thanks. Can you port if to CMS as well? Please? It should be very easy to do in Rexx. Heck, if you linked over to the MAINT 193 disk, you could call DMSSAPI directly and leave out the middleman. Leland
Re: smcli - z/VM System Management command line utility
On 2/12/11 3:29 PM, Michael MacIsaac wrote: Leland, Some of you folks might find this useful. smcli looks very cool indeed - thanks! Documentation is slim, agreed :)) Do you have a sample /etc/smcli.conf and -T value that just work? For example, I created a /etc/smapi.conf and tried this: ./smcli-11.042a vnlq -T notsure -n VSW1 -o SYSTEM but it failed. Any pointers will be appreciated. Thanks. Shoot...I meant to document that usage at the top of the script. I'll add it in a little bit. The script sources the contents of /etc/smapi.conf, ~/.smapi, and the environment variables SMHOST, SMUSER, and SMPASS to set the corresponding smhost, smuser, and smpass command arguments. By using them, you do not have to specify them each time you run the command. Here's an example of what you'd put in /etc/smapi.conf and/or ~/.smapi: smhost=zvmserver/4 smuser=maint # --- probably shouldn't use that fella smpass=maint # --- probably shouldn't still be maint. ;-) I'm currently using the IUCV interface, so all I have is: smhost=IUCV Then you just use smcli like so: smcli iqd -T linuxguestname iqd smcli Image_Create_DM -T linuxguestnme directoryentry Leland
smcli - z/VM System Management command line utility
Some of you folks might find this useful. It implements all but 1 of the SMAPI functions in a single bash script. In addition, it supports TCP/IP via bash's builtin /dev/tcp support and IUCV via the embedded smiucv program that you can build using smcli smiucv. Documentation is slim, so you'll have to use the builtin usage information for each function and the System Management Application Programming book from IBM. Anyway, grab it here: http://homerow.net/zvm/smcli I hope someone finds if useful. Leland
RACF SETROPTS MINCHANGE
While checking the SETROPTS one of our auditors happened to notice that RACF on z/VM no longer (or never has) supported the password MINCHANGE value. Was it every there on z/VM? Why wouldn't it be supported on z/VM while it is on z/OS? Just curious. Thanks, Leland
Re: RACF SETROPTS MINCHANGE
Nevermind...he found his notes from the last audit and he had documented the differences at that time. Leland On 11/12/10 5:06 PM, Leland Lucius wrote: While checking the SETROPTS one of our auditors happened to notice that RACF on z/VM no longer (or never has) supported the password MINCHANGE value. Was it every there on z/VM? Why wouldn't it be supported on z/VM while it is on z/OS? Just curious. Thanks, Leland
Tivoli Identity Manager adapter for z/VM
Does one exist? Thanks, Leland
Re: Tivoli Identity Manager adapter for z/VM
Better yet, can the z/VM LDAP server be used to allow user/group/password management between RACF on z/VM and TIM/TDI? Thanks, Leland
Re: Tivoli Identity Manager adapter for z/VM
Ivan Warren wrote: On 10/9/2010 8:50 PM, Leland Lucius wrote: Better yet, can the z/VM LDAP server be used to allow user/group/password management between RACF on z/VM and TIM/TDI? Thanks, Leland TDI is pretty flexible.. It shouldn't be overly hard to do a DIRMAINT adapter.. Not knowing TIM/TDI at all, I've done a bit of reading and it does look like doing password synch with zVM/RACF/LDAP would be possible, but as you pointed out, that leaves DIRMAINT out of the picture so the directory wouldn't be in sync with RACF. Looks like a TDI Connector that talked SMAPI would doo the trick though... Leland
Re: Tivoli Identity Manager adapter for z/VM
Leland Lucius wrote: Ivan Warren wrote: On 10/9/2010 8:50 PM, Leland Lucius wrote: Better yet, can the z/VM LDAP server be used to allow user/group/password management between RACF on z/VM and TIM/TDI? Thanks, Leland TDI is pretty flexible.. It shouldn't be overly hard to do a DIRMAINT adapter.. Not knowing TIM/TDI at all, I've done a bit of reading and it does look like doing password synch with zVM/RACF/LDAP would be possible, but as you pointed out, that leaves DIRMAINT out of the picture so the directory wouldn't be in sync with RACF. Looks like a TDI Connector that talked SMAPI would doo the trick though... Or maybe a TIM service provider would be easier and more direct. Leland
Re: Tivoli Identity Manager adapter for z/VM
Scott Rohling wrote: Unless I'm misunderstanding - the z/VM directory password doesn't need to be in sync with RACF -- once RACF is installed, the directory passwords are irrelevant (except the pw for the RACFVM itself.. which is needed if RACF is down so you can login to the RACFVM guest and do recovery). Keeping the passwords in a readable format is not secure, so you really don't want the actual passwords in the directory. Yea, I was too deep into the TDI/TIM docs to remember anything about z/VM. ;-) Maybe I should just fiddle around the with the z/VM LDAP server to see if I can get it working before going down some other crazy path. Leland
Re: BookManager format softcopy
Alan Altmark wrote: In order to reduce expenses, reduce the amount of time it takes to produce softcopy documentation, and eliminate dependencies on soon-to-be-unsupported internal tools (nothing to do with BookManager READ software), we are thinking about eliminating BOOK (.boo) files from z/VM softcopy production. Personally, I much prefer searching and reading in BookManager format on green screen. It's just easier on the old eyeball. But, I knew ghost files would finally die one day. Leland
DVHDRC3457I DVHUPDIR is unable to update object directory
Just happen to notice this message when TMDISKing and was wondering what would have caused it. I saw a previous thread on this list in 2009, but, in that case, the directory truly did need to be expanded. But, I'm thinking that I should have plenty of space available: q alloc drct EXTENT EXTENT % VOLID RDEV STARTEND TOTAL IN USE HIGH USED -- -- -- -- -- -- VP2W00 261F 1 20 20 1 1 5% ACTIVE -- -- SUMMARY 20 1 5% CKD And I've done other updates since the message spewed forth without it appearing again. So, do I just ignore it??? Thanks, Leland
How to measure XIP benefit
So, I've got an itch to fiddle around with XIP, but I can't figure out how to measure the benefit I might be able to expect or, if I just do it, how to figure out if I gained anything other than hassles. I've played around with it a little using a 512MB DCSS populated with /lib, /lib64, /usr/lib, and /usr/lib64, but I didn't really see any changes to working set sizes in Perf Toolkit. Of course, that's not really saying much since most of the numbers in Perf Toolkit are worse than Greek to me...more like Goa'uld. I know there's probably no easy answer. I also know that just arbitrarily throwing those directories in there wasn't the best use of DCSS space and, if I continue to fiddle, will put more effort into identifying appropriate candidates. (I'm thinking that /proc/*/maps would be a good source for finding the candidates.) Thanks, Leland
Re: How to measure XIP benefit
Richard Troth wrote: Barton might have some hard numbers, since Velocity has been pushing XIP for quite a while now. The benefit is academically obvious. To get your own measurement, you'll need a multiplicity of guests and you'll want to measure VM host load (esp paging) and Linux guest throughput (esp starting execution of programs from XIP space). From the Linux side, execution should be instantaneous. It may help to squeeze memory on both VM and Linux (for the sake of your test), so you may want to run it in a memory constrained test LPAR. One thing I did do was modify the dcssblk module to count the number of mapped page ops and the number of copy ops performed and exposed that in /sys. That way I was able to see the activity change when mounted with/without the xip option. Mainly to prove that I'd done things correctly. You gave me an idea though. I'll setup say 10 or 20 guests under a second level VM. That way I can more easily see memory footprints without normal work getting in the way. I realize it'll run like a dog, but that's fine since we know that mapping memory will always be faster than copy operations (even from cache). Thanks, Leland
Re: PIPE stage that output word relative to another word
That's works just dandy. Thanks much, Leland On Tue, Aug 3, 2010 at 3:46 PM, Frank M. Ramaekers framaek...@ailife.comwrote: Like this? pipe literal k1 v1 k2 v2 k3 v3 k4 v4|split at blank| Join 1 / /|find k3|spec w2 1|console Frank M. Ramaekers Jr. -- *From:* The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] *On Behalf Of *Leland Lucius *Sent:* Tuesday, August 03, 2010 3:09 PM *To:* IBMVM@LISTSERV.UARK.EDU *Subject:* PIPE stage that output word relative to another word I know, I'm probably being stupid here, but I just can't seem to figure it out. Given something like: K1 V1 K2 V2 K3 V3 K4 V4 I want to be able pipe that V3 to a VAR stage. But it needs to be relative to where K3 is so that: K3 V3 K1 V1 K2 V2 K4 V4 would find V3 as well. Thanks, Leland _ This message contains information which is privileged and confidential and is solely for the use of the intended recipient. If you are not the intended recipient, be aware that any review, disclosure, copying, distribution, or use of the contents of this message is strictly prohibited. If you have received this in error, please destroy it immediately and notify us at privacy...@ailife.com.
PIPE stage that output word relative to another word
I know, I'm probably being stupid here, but I just can't seem to figure it out. Given something like: K1 V1 K2 V2 K3 V3 K4 V4 I want to be able pipe that V3 to a VAR stage. But it needs to be relative to where K3 is so that: K3 V3 K1 V1 K2 V2 K4 V4 would find V3 as well. Thanks, Leland
Re: PIPE stage that output word relative to another word
That's works just dandy. Thanks much, Leland On Tue, Aug 3, 2010 at 3:46 PM, Frank M. Ramaekers framaek...@ailife.com mailto:framaek...@ailife.com wrote: Like this? pipe literal k1 v1 k2 v2 k3 v3 k4 v4|split at blank| Join 1 / /|find k3|spec w2 1|console Frank M. Ramaekers Jr. *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU mailto:IBMVM@LISTSERV.UARK.EDU] *On Behalf Of *Leland Lucius *Sent:* Tuesday, August 03, 2010 3:09 PM *To:* IBMVM@LISTSERV.UARK.EDU mailto:IBMVM@LISTSERV.UARK.EDU *Subject:* PIPE stage that output word relative to another word I know, I'm probably being stupid here, but I just can't seem to figure it out. Given something like: K1 V1 K2 V2 K3 V3 K4 V4 I want to be able pipe that V3 to a VAR stage. But it needs to be relative to where K3 is so that: K3 V3 K1 V1 K2 V2 K4 V4 would find V3 as well. Thanks, Leland _ This message contains information which is privileged and confidential and is solely for the use of the intended recipient. If you are not the intended recipient, be aware that any review, disclosure, copying, distribution, or use of the contents of this message is strictly prohibited. If you have received this in error, please destroy it immediately and notify us at privacy...@ailife.com mailto:privacy...@ailife.com.
Re: Running multiple PIPEDDRs at once?
Rob van der Heij wrote: On Mon, Jul 26, 2010 at 7:57 AM, Leland Lucius lluc...@homerow.net wrote: Is there anyway to do it? I've tried using MTREXX, but the threads run after each other. I've tried multiple stages, but they also run after each other. IIRC the trackread and trackwrite stages use diagnose I/O under the covers, so would block there. Depending on what happens in the rest of the pipe, it may make sense to build a more complicated topology (like with long haul IP connection with varying latency). But probably not with CMS MT as you suggest. You probably should run multiple virtual machines and break up the work like that (though if the disk is the bottleneck, you're not likely to achieve much speed-up). Yepper, I'm to the point of just doing the single threaded, but, even if the trackwrite used a DIAG, then I'd expect threading would get a chance between DIAG calls. I've tried adding a ThreadYield() in a REXX stage, but that just causes all sorts of problems. Just out of curiosity, I think I'll try DDR before throwing in the towel...though I'm not gonna try too hard. :-) Thanks much, Leland
Re: Running multiple PIPEDDRs at once?
Rob van der Heij wrote: On Mon, Jul 26, 2010 at 9:23 AM, Leland Lucius lluc...@homerow.net wrote: Yepper, I'm to the point of just doing the single threaded, but, even if the trackwrite used a DIAG, then I'd expect threading would get a chance between DIAG calls. I've tried adding a ThreadYield() in a REXX stage, but that just causes all sorts of problems. Just out of curiosity, I think I'll try DDR before throwing in the towel...though I'm not gonna try too hard. :-) Yes, I/O issued by DDR will also serialize. I fear I don't know what you're trying to achieve... If you expect to speed up things, my guess is that you gain more by starting the program now than to postpone that a few hours writing complicated code :-) HAHAHA!!! You definitely have my number!!! :-) I do that WAY too often. I usually learn a thing or two while flailing about trying this or that so it not always a waste of time. Leland
Running multiple PIPEDDRs at once?
Is there anyway to do it? I've tried using MTREXX, but the threads run after each other. I've tried multiple stages, but they also run after each other. (Be gentle...a pipe is something I used to smoke with I was a teenager. ;-)) Thanks, Leland
Why don't I see HCP403I messages?
Occasionally our DASD chooses to issue service messages (SIM) to tell us about incidents that have occurred within the DASD subsystem. On z/OS, we get IEA480E messages. On z/VM, we'd expect to receive HCP403I, but we've not been able to find them. We'd assume they'd be going to OPERATOR but nothing there. Is there a setting that we need to change to get these? How does does Linux guests react to SIM messages? Leland
Re: Why don't I see HCP403I messages?
We think we may have found the cause. It seems that one of our DASD subsystems is producing the message, but the other is not. So our storage lackey is checking with EMC as he seems to recall that there's a setting that needs to be enabled. Thanks much, Leland On Fri, May 7, 2010 at 3:54 PM, Mike Walter mike.wal...@hewitt.com wrote: 1) What z/VM release and maintenance level? 2) Are you running PROP or some other PRO-like program (e.g CA's VM:Operator, or IBM's z/VM Operations manager for z/VM) to filter some or all HCP messages? We've received occasional HCPERP403I messages on z/VM 5.4 and z/VM 5.1 (upgraded to z/VM 5.4 April 11). Leland Lucius lluc...@homerow.net Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 05/07/2010 03:25 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Why don't I see HCP403I messages? Occasionally our DASD chooses to issue service messages (SIM) to tell us about incidents that have occurred within the DASD subsystem. On z/OS, we get IEA480E messages. On z/VM, we'd expect to receive HCP403I, but we've not been able to find them. We'd assume they'd be going to OPERATOR but nothing there. Is there a setting that we need to change to get these? How does does Linux guests react to SIM messages? Leland The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited. All messages sent to and from this e-mail address may be monitored as permitted by applicable law and regulations to ensure compliance with our internal policies and to protect our business. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, lost or destroyed, or contain viruses. You are deemed to have accepted these risks if you communicate with us by e-mail.
Re: Why don't I see HCP403I messages?
1) z/VM 6.1 0901 2) Operations Manager, but not filtering CP messages. And we didn't receive the HCP messages on 5.4 either (that I know of) and we weren't running OpsMgr at the time. In case it matters, this is EMC DASD that we're dealing with. At least in one case, we do see an occurrence in EREP, but that's not as handy as the HCP403I message would be. Thanks, Leland On Fri, May 7, 2010 at 3:54 PM, Mike Walter mike.wal...@hewitt.com wrote: 1) What z/VM release and maintenance level? 2) Are you running PROP or some other PRO-like program (e.g CA's VM:Operator, or IBM's z/VM Operations manager for z/VM) to filter some or all HCP messages? We've received occasional HCPERP403I messages on z/VM 5.4 and z/VM 5.1 (upgraded to z/VM 5.4 April 11). Leland Lucius lluc...@homerow.net Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 05/07/2010 03:25 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Why don't I see HCP403I messages? Occasionally our DASD chooses to issue service messages (SIM) to tell us about incidents that have occurred within the DASD subsystem. On z/OS, we get IEA480E messages. On z/VM, we'd expect to receive HCP403I, but we've not been able to find them. We'd assume they'd be going to OPERATOR but nothing there. Is there a setting that we need to change to get these? How does does Linux guests react to SIM messages? Leland The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited. All messages sent to and from this e-mail address may be monitored as permitted by applicable law and regulations to ensure compliance with our internal policies and to protect our business. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, lost or destroyed, or contain viruses. You are deemed to have accepted these risks if you communicate with us by e-mail.
DCSS type SN?
If I were to define a DCSS as type SN and populate it with a filesystem full of data, how is z/VM going to share it among several Linux guests? I'm assuming that the pages of the DCSS are shared among the guests such that there's really only one page actually in memory and that every guest is mapped to that page right? So, what about the pages that are written to? I understand that for type SW, every guest would see the updated page and there's still only 1 page in memory. But what happens for type SN? If a guest writes to a page, are the updates visible to the other guests? I know, I know...I can just test it myself, but it would be good to hear it from the ppl that know for sure. Thanks, Leland
Re: Compression support added to VMA
Kris Buelens wrote: The new version looks much nicer too. Thanks. I try the ADD process and added a CAL.CMD file to an existing VMARC file, that I then uploaded to VM: l qdsk vmarc (ISO FILENAME FILETYPE FM FORMAT LRECL RECS BLOCKS DATE TIME QDSK VMARCA1 F 80125 3 2010-03-12 09:59:41 Ready MAINT at AGC ; T=0.01/0.01 10:01:07 vmarc list QDSK VMARC A CAL CMD A1. Bytes in=2400, bytes out= 0 ( 0%). QDSK EXEC A1. Bytes in=7600, bytes out= 0 ( 0%). Ready MAINT at AGC ; T=0.01/0.01 10:01:19 vmarc unpk QDSK VMARC A Unexpected error during output. RC=11. Ready MAINT at AGC (00011); T=0.01/0.01 10:01:25 If the 11 is an FSWRITE retruncode: 11 FSCB is not marked with a record format of F nor of V I didn't change the settings (that I just now detected), they still read: fmode A1, refcm Variable, lrecl 65535, compression LZW; conversion empty Can you send me the file? That'd be a big help. I don't know how difficult this would be: now when adding files to a VMARC, one would first need to update the settings (to set the characteristics of the files to be added). It would be much better if the File Open dialog could be changed to include these settings on the Open panel, otherwise chances are great one will forget to set the right things. Yea, that is a pain isn't it. There's a couple of ways to go about addressing it. I could use the unreleased version of wxWidgets which provides a means of adding controls directly to the Open File dialog. This would work for the Windows and Mac versions since I build they are prebuilt, but it wouldn't be quite so easy for Linux users since they have to build VMA themselves and distros aren't packaging that version of wxWidgets yet. Another way would be to get the list of files via the standard Open Dialog and then pop up another dialog that would list the files selected. You could then change the properties for all files or for individual files. (This seems the most likely option.) A third option is to display a properties dialog for each file prior to adding it. This is the easiest and quickest to do since the dialog is already present is and is already displayed if the input filenames aren't in 8.8.2 format. Leland
Re: Compression support added to VMA
Mark Post wrote: On 3/11/2010 at 12:59 PM, Leland Lucius lluc...@homerow.net wrote: You can now create and/or update VMARC files on Linux, OS X, and Windows. ASIS and LZW storage methods are currently supported and I'll be adding S2 support after SHARE. Download the update here: http://homerow.net/zvm/vma Keep a critical eye open when trying it out and let me know of critters or odd behavior. There's bound to be some... When I compile the source I get this: make: wx-config: Command not found. Where does that command come from? It'll be installed with wxWidgets. You probably have to install a dev version of wxWidgets.
Re: What does this wait state PSW mean?
Alan Altmark wrote: On Wednesday, 02/17/2010 at 05:31 EST, Leland Lucius lluc...@homerow.net wrote: After varying off a processor, we received a disabled wait PSW of: 0bad0bad0bad0bad0bad0bad0bad0bad Systems still active and we wouldn't have even known about it, but someone happened to be digging around in the HMC and noticed. You varied off a processor from whom using what command? That wait state is not a CP-generated wait state. From z/VM 6.1 using vary offline processor 04. The message above was found on the HMC.
Re: Moving On
Mark Wheeler wrote: Friends, After 8 1/2 months of unplanned retirement, I am pleased to announce that I have started a new job at UnitedHealth Group, supporting z/VM and zLinux. Lots of good things happening here, and I'm working with a bunch of terrific people. Alright Mark! I'm glad you were able to get back into z/VM and Linux. I'll yak at ya at the next user group meeting. Leland
What does this wait state PSW mean?
After varying off a processor, we received a disabled wait PSW of: 0bad0bad0bad0bad0bad0bad0bad0b ad Systems still active and we wouldn't have even known about it, but someone happened to be digging around in the HMC and noticed. Leland
Re: What does this wait state PSW mean?
:-D Same thing my mama used to tell me some 30 years ago. :-) Leland On Wed, Feb 17, 2010 at 4:44 PM, David Boyes dbo...@sinenomine.net wrote: “Don’t Do That”. On 2/17/10 5:20 PM, Leland Lucius lluc...@homerow.net wrote: After varying off a processor, we received a disabled wait PSW of: 0bad0bad0bad0bad0bad0bad0bad0b ad Systems still active and we wouldn't have even known about it, but someone happened to be digging around in the HMC and noticed.
What does this wait state PSW mean?
After varying off a processor, we received a disabled wait PSW of: 0bad0bad0bad0bad0bad0bad0bad0bad Systems still active and we wouldn't have even known about it, but someone happened to be digging around in the HMC and noticed. Leland
Re: What does this wait state PSW mean?
Yepper, exact text was: Central processor (CP) 4 in partition VMI1, entered disabled wait state. The disabled wait program status word (PSW) is 0bad0bad0bad0bad0bad0bad0bad0bad. Central storage bytes 0-7 are: 0bad0bad0bad0bad0bad0bad0bad0bad. Refer to your operating system console or documentation for recovery procedures. I didn't find any messages in Operator, nor did I get any LOGREC records. It did call home, so maybe we'll find out something there...though I doubt it. Leland On Wed, Feb 17, 2010 at 5:15 PM, Ivan Warren i...@vmfacility.fr wrote: Leland Lucius wrote: After varying off a processor, we received a disabled wait PSW of: 0bad0bad0bad0bad0bad0bad0bad0b ad Systems still active and we wouldn't have even known about it, but someone happened to be digging around in the HMC and noticed. Leland The odd thing is that this is anything BUT a disabled wait PSW ! X'0B' = B'1011' (Ext and I/O mask ints are enabled) X'AD' = B'10101101' (KEY=10, EC=1 - invalid for a z/Arch PSW, MCK Ints enabled, Wait state bit off, Problem State = 1) Leland.. Are you sure your HMC said it was a 'Disabled Wait' PSW ? --Ivan
Re: What does this wait state PSW mean?
'Ceptin that we're sharing all of the IFLs across several LPARs... Leland On Wed, Feb 17, 2010 at 5:30 PM, Schuh, Richard rsc...@visa.com wrote: If all LPARs using the same type of processor were running with dedicated processors, I would not be surprised to see the one varied off to be put in some kind of disabled state. Regards, Richard Schuh -- *From:* The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] *On Behalf Of *Leland Lucius *Sent:* Wednesday, February 17, 2010 3:12 PM *To:* IBMVM@LISTSERV.UARK.EDU *Subject:* Re: What does this wait state PSW mean? :-D Same thing my mama used to tell me some 30 years ago. :-) Leland On Wed, Feb 17, 2010 at 4:44 PM, David Boyes dbo...@sinenomine.netwrote: “Don’t Do That”. On 2/17/10 5:20 PM, Leland Lucius lluc...@homerow.net wrote: After varying off a processor, we received a disabled wait PSW of: 0bad0bad0bad0bad0bad0bad0bad0b ad Systems still active and we wouldn't have even known about it, but someone happened to be digging around in the HMC and noticed.
Using GOMCMD from Operations Manager server
Is there anyway to use GOMCMD from an EXEC that's running within an Operations Manager server? All I get so far is a return code 36. Basically, I need to issue OpMgr commands like DEFSCHD and DEFACTN from the EXEC. Anyway to do it? Thanks, Leland
Re: Using GOMCMD from Operations Manager server
Tracy Dean wrote: On Sun, 7 Feb 2010 07:43:45 -0600, Leland Lucius lluc...@homerow.net wrote: Is there anyway to use GOMCMD from an EXEC that's running within an Operations Manager server? All I get so far is a return code 36. Leland, Today, Operations Manager does not allow GOMCMD to run within the Operations Manager servers. You have to issue the DEFSCHD in the COMMAND parameter of a DEFACTN statement with ENV(GOM). However, you are not the first to need to run GOMCMD within an action EXEC. So watch for the upcoming PTF to APAR PM06671. With this PTF you'll be able to do what you want. Excellent! Thanks much. Leland
Re: WWBD - One large VM LPAR or multiple smaller ones?
Y'all have convinced me, or should I say, have enabled me to proceed as desired. ;-) No immediate guffaws at the idea is good enough for me. Thanks much, Leland
Re: WWBD - One large VM LPAR or multiple smaller ones?
Marcy Cortes wrote: Isn't there a 256G limit to a z/VM lpar? Yepper. I just threw those number out to make the math easier. ;-) Anyway, I'd split it to 2 or 3 as well. It will make your life easier for VM maintenance if you have servers that can't go down much. That's exactly what I was thinking. I just wanted to make sure I wasn't being more of an idiot than normal. :-) Thanks much, Leland
Re: Crytpo personality change
On Thu, Aug 13, 2009 at 1:13 PM, Marcy Cortes marcy.d.cor...@wellsfargo.com wrote: To see the change our HW guys made to redefine CEX2C to CEX2A, do we need a VM IPL? We had to make this change also and we did wind up doing an IPL. Everything that the guy responsible for the hardware tried did not make a difference until we IPL'd. We also reactivated the LPAR too just to be safe. Don't really know if that was needed though. Leland
New version of TXT2PDF (finally) uploaded
I've finally gotten around to uploading a new version of TXT2PDF. This one adds TrueType embedding and subsetting, better mapping of Unicode characters, GPLv2 licensed, and some other minor changes. You can get the it from: http://homerow.net/rexx/txt2pdf/ While there, check out the new examples of some simple examples of what you can achieve with these new changes. I've informed Lionel and forwarded him the manual changes, so I'd expect there to be updated z/OS XMIT version soon. In the meantime, you could extract the TXT2PDF EXEC from the tarball. Leland Here's what was changed: History: 04/17/09 - LLL - Added TrueType font embedding and subsetting. The XFONT keyword was updated to specify the fonts. Added the DELIM keyword to allow using characters other the / as the parameter separator. Added the ENCODING keyword to provide support for Unicode. Added new font name parameter to the TMARK type of the BG keyword. Added ROWCOL subtype to the ATTR type of the TEXT keyword. Object lengths are no longer forward references to separate objects, somewhat reducing PDF size. Fixed control character initialization so that it they are translated properly. Made sure all SELECTs had an OTHERWISE to make the REXX compiler happier. More minor cleanup. 11/31/08 - LLL - Changed license to GPLv2 from QPL. There were companies wanting to distribute TXT2PDF with their product and the QPL was too restrictive. Even though the GPL allows it, I hope the companies do not try to make money off of TXT2PDF since I was kind enough to make it easier to redistribute. May a pox be on them if they do. :-)
Sorting monitor data?
Can monitor data be sorted so that it can be fed into CP3KVMXT (CP3000 summarizer)? We collect monitor data using Brian Wade's LINMON package which allows us to collect it into smaller files. We then FTP these files over to z/OS for processing by MXG. Problem is CP3KVMXT doesn't like it when the files are in reverse order, so I'd like to sort them before feeding to CP3KVMXT. Any idea on how I'd go about doing that? Thanks, Leland
Re: Sorting monitor data?
Mike Walter wrote: Forewarning: I have no knowledge of LINMON package details. There may/must be better ways of doing this, but this may help. Isn't there a sufficient date/timestamp already on each generated record that could be used to sort them before CP3KVMXT processing? Yepper, there's a date field and I've tried sorting by that, but CP3KVMXT specifically look for a record beginning with '87'x as the first record. Of course, I just had to comment out that check and give it a try, but it causes a specification exception. :-) If not, would it be possible in your case to modify the LINMON package or the MSUX EXEC (exit) to write a prefix at the start of each record before it is written to disk. That prefix could be the mmddhhmmssnn where yymmddhhmmss is the time that this process prefix began, and the 'nnn's are a sequence number (easily generated with a PIPEs SPECS stage). When you are ready to run them into CP3KVMXT, first sort on that prefix, and stripping it before re-writing them all as one large file. But that seems to defeat the purpose of writing the file in smaller pieces, no? Unfortunately, the files in question have already been created. I can fix the out-of-order issue for future collections, but I was hoping to be able to feed CP3KVMXT a particularly nasty day we had recently. Leland
Re: Sorting monitor data?
Schuh, Richard wrote: IIRC, that is a configuration record that is written when the monitor is initialized. It was required by MICS. ESAWRITE has the ability to start each raw data file with one of these records. If you don't have ESAWRITE, you can find a configuration record in any file, retain a copy of it and include it in the files processed by the program. Just found that out. The MDATPEEK stage that CP3KVMXT uses requires that control record. So, now I have something to work on the rest of the day. :-) Leland
EVALBLOK and RELEASEing it
Let's say I have an external REXX function that needs to return more data than there's space for in the default EVALBLOK that's provided by CMS. Allocating a new one and storing it's addr in the EPLIST isn't a easy enough. But, the should the original be CMSSTOR RELEASEd? Not doing so causes memory leakage. But maybe there's a proper way of letting REXX know that it wasn't used and should be discarded??? Thanks, Leland
Re: EVALBLOK and RELEASEing it
EPLIST isn't a easy enough. EPLIST IS easy enough. :-( Leland
Re: Opinions needed on next version of TXT2PDF
Cool. Sounds pretty involved. Glad you added the detail about the
underlining too since this new version will be including fixes for
carriage control handling that may affect that. (It shouldn't but you'd
most definitely want to test it before replacing your existing versioqn.
;-))
Leland
Fran Hensler wrote:
LeLand -
I have TXT2PDF running as a stage of a PIPE that reads input
from the RDR and sends it directly to RSCS or my FTP2HOME machine
where it gets FTP'd the the user's network home drive. I use the FORM
and DIST parameters to decide how to the files should be processed
and distributed.
We use TXT2PDF in production every day. The main use is to produce
academic transcripts. The text of the transcript is created on VSE
and routed to my VM/PDF machine where the registrar's signature and
the seal of the university are added from .jpg files. The result is
sent either to RSCS for direct printing to PDF capable printers or it
is sent with SSL security to the eScrip-Safe.com Global Electronic
Delivery Network. See: http://www.scrip-safe.com/sendtrans.html
The second popular use is to send reports from VSE to a user's
network home drive. The reports are routed through VM/PDF where the
green bar overlay is added. An unexpected bonus I discovered is that
space suppress carriage control works perfectly and we can
therefore send underlined data. Without PDF the underline appears
on a new line.
I'm VERY happy with TXT2PDF and I recommend it every chance I get.
At this time I am not looking for any improvements to TXT2PDF. I may
use the fonts feature when available but I doubt if I'd ever use
the UNICODE feature.
/Fran Hensler at Slippery Rock University of Pennsylvania USA for 45 years
mailto:[EMAIL PROTECTED] http://zvm.sru.edu/~fjh +1.724.738.2153
Yes, Virginia, there is a Slippery Rock
--
On Wed, 19 Nov 2008 14:31:46 -0600 LeLand Lucius said:
{snip}
I guess another couple of questions would be to ask if anyone even uses TXT2PDF
anymore and if they have ever mucked about with the translation tables?
Leland
Re: Opinions needed on next version of TXT2PDF
Quoting Hughes, Jim [EMAIL PROTECTED]: We did make a minor change to have the PDF open with bookmarks visable. What was the change? If you'd like, I'l make it permanent as it sounds like a useful addition. You have done an excellent job Leland. Thanks. Thanks much, Leland
Re: Opinions needed on next version of TXT2PDF
Hughes, Jim wrote: Here is my change. Its been quite a while. When the PDF is opened, the book marks are opened on the left and the pages are opened on the right. || Generate the catalog object and save ID */ numCatalogObj = PDFNewObj() CALL PDFQueueCntl CALL PDFQueueCntl /Type /Catalog CALL PDFQueueCntl /Pages || numPagesObj || 0 R IF pdf.boolIndex THEN DO /* jim */ CALL PDFQueueCntl /PageMode /UseOutlines CALL PDFQueueCntl /Outlines || numOutlinesObj || 0 R END CALL PDFQueueCntl CALL PDFEndObj Cool, already in there. You must have an older version as it was added on June 30, of '02. Leland
Re: RACF, setropts inactive() and long running guests
Alan Altmark wrote: On Sunday, 09/28/2008 at 12:50 EDT, Leland Lucius [EMAIL PROTECTED] wrote: This would certainly make it easy and we wouldn't have to have any non-standard scheduled touching of the ID. I'll have to ponder it a little though since we do log onto a guest every so often to get to its console. But, that's so seldom, a call to the security group could temporarily add a password. You don't need to logon to get the console. From a class C user: CP SEND CP linuxuser CLOSE CONS TO whomever But, if the server can't be accessed via the network, we may need to access the console to play around...like maybe in single user mode. Mind you, we hardly ever have to do it, but... I've been playing around with your method (LOGONBY and NOPASS) and it looks like its going to work beautifully. And the best part is that it can all be controlled via DIRMAINT...no security group involvement. (They let us do DIRMAINT, but not RACF. :-)) Thanks, Leland
Re: RACF, setropts inactive() and long running guests
Kris Buelens wrote: If that doesn't suit you: To take care of MAINT friends, you might use a server like VMUTIL to have those XAUTOLOGged every month or so. Now I get what ppl were saying before about XAUTOLOGing things regularly. Didn't sink in before... For other servers that cannot be XAUTOLOG this way, there may be a way to fool RACF, I didn't test, but maybe it can work. My first idea was to open an FTP session into z/VM, and use the userid password of the server whose last logon time you want to update. Further thought: use the CSL call to perform password validation. Obvious problem/drawback: you need to know the server's password. Can be easily tested by observing the last logon date with the RAC LISTUSER command. Or precede the FTP/CSL call with a DIRM SETPW, so the password is known and, when done, do the DIRM SETPW again to some random value. That would work just dandy for us. Will give this a try if there's nobody mentions a RACF-way of doing it. Thanks, Leland
Re: RACF, setropts inactive() and long running guests
Alan Altmark wrote: A possible compromise could be: ALTUSER userid NOPHRASE NOPASSWORD will completely remove the password and phrase. - No one can logon directly to or use the id for authentication - The user can still be XAUTOLOGed - The user will never be revoked due to inactivity or too many logon attempts with a bad password This would certainly make it easy and we wouldn't have to have any non-standard scheduled touching of the ID. I'll have to ponder it a little though since we do log onto a guest every so often to get to its console. But, that's so seldom, a call to the security group could temporarily add a password. Thanks much, Llenad
Re: RACF, setropts inactive() and long running guests
Scott Rohling wrote: Yes... Sent from my iPhone On Sep 27, 2008, at 5:48 PM, Thomas Kern [EMAIL PROTECTED] wrote: Could we still get onto that userid via LOGONBY? Awesome, then that sounds like the way to go. Thanks everyone! Leland
RACF, setropts inactive() and long running guests
Just wondering what folks set INACTIVE() to a Linux only environment where guests stay up for long periods or where MAINT and the like aren't used for long periods. When we installed RACFVM, our security team set the same options as are being used on z/OS which we all thought was a good idea. But, we've been getting a lot of guests with revoked IDs. It wasn't until today when logging onto MAINT did we realize what we'd done since the logon seemed to hang and we didn't figure out what was going on until we looked at OPERATORs console: ICH303I INACTIVE INTERVAL EXCEEDED BY SPECIAL USER MAINT AT TERMINAL AC182D8F. 13ICH304D REPLY Y TO ACTIVATE USER OR N TO REVOKE USERID MAINT . So, we have the notion of simply change our INACTIVE(45) to NOINACTIVE (if we can get security to bite), but were wondering if there were other options. Thanks, Leland
HyperPAV usage
Is it possible to take advantage of HyperPAV with SLES9/10? I realize that HyperPAV is not directly supported by the kernel versions available in SLES, so it looks like we're stuck with static aliases. So, what I'd like to do is define a bunch of HyperPAV aliases for z/VM to manage and then define static aliases in the user directory for the guest...from the manual: MDISK E100 3390 100 200 PAK002 MINIOPT PAVALIAS E101-E103 Will that work or are we stuck with having to define static aliases? Thanks much, Leland
Re: HyperPAV usage
So, it looks like we're stuck with static PAVs for now if we want to be able to access a single volume via 3 addresses in the same guest? Thanks much, Leland Steve Wilkins wrote: Each control unit can be in either Hyperpav or static PAV mode; not both. Therefore, you can define MDISK E100 with 3 virtual static PAV alias devices, but E100 must be associated with a real device that is on a controller in static PAV mode. Also, there must be 3 real alias devices on that controller (defined to the real Base) in order to back E101-E103. Steve Wilkins z/VM Development Inactive hide details for Leland Lucius [EMAIL PROTECTED]Leland Lucius [EMAIL PROTECTED] *Leland Lucius [EMAIL PROTECTED]* Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 08/22/2008 01:08 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject HyperPAV usage Is it possible to take advantage of HyperPAV with SLES9/10? I realize that HyperPAV is not directly supported by the kernel versions available in SLES, so it looks like we're stuck with static aliases. So, what I'd like to do is define a bunch of HyperPAV aliases for z/VM to manage and then define static aliases in the user directory for the guest...from the manual: MDISK E100 3390 100 200 PAK002 MINIOPT PAVALIAS E101-E103 Will that work or are we stuck with having to define static aliases? Thanks much, Leland
RACF and protecting against the unknown
Hi, it's the RACF newbie again. RACF has been running fine for us and went in without a hitch thanks to all of y'all. But, because we have nothing better to do, we've been sitting around trying to think of scenarios that we may come up against in the future and we want to be able to recover from them. Here's one of 'em: We have removed the password from MAINT and the 2 of us sysprog wannabes have setup RACF to allow us to LOGONBY to MAINT. Works beautifully. But, what would happen if some malicious individual decided to attempt sufficient invalid logons to cause us our IDs to be revoked. How would we ever get back to MAINT? Now, add in the security admins ID to the mix. Then what? Also, any war stories about getting into a situation where no one could log on due to RACF being unavailable? Should we be concerned about a case like this? What recovery is possible? Okay, okay...so we're a couple of paranoid sysprog wannabes...I knew I shouldn't have smoked those alternative cigarettes when I was younger. :-) Thanks much, Leland
Re: RACF and protecting against the unknown
Thanks Rob and John. I'll set me up a 2nd level VM and give y'alls ideas a try. Leland
What do your operators do?
So, my RACF question and all the answers y'all gave made me think of another... What do your operators do within z/VM? The reason I ask is because we haven't given our operations staff access to any of our z/VMs. What am I missing? Why do they need access? What should they be doing and aren't? (Mind you, we are zLinux only.) Leland
Re: What do your operators do?
Thanks everyone for paint the pictures. Let's see...We don't have tape attached to our z/VMs. We rarely do server reboots and very rarely IPL our z/VMs (both of which will be changing though) and z/VM has almost never complained about anything. When we do IPL/reboot it's usually due to change, so we're around anyway. The one time that z/VM did cause us concern was during IPL, so again, we were around. We have had to take a couple of chpids offline here and there for the HW guys, but we've either been notified of a problem or we were aware of a change. Either case, we've made ourselves available. So, we must be much smaller than everyone else, are too power hungry to relinquish control, or we've just been very lucky. :-) In any case, I still don't think they need access. And I'd wager they would agree. :-) Thanks again, Leland
Re: What do your operators do?
Quoting Marcy Cortes [EMAIL PROTECTED]: Some of us are just way way too far from our systems to be around. One data center is 2000 miles, the other like 800. Added to that, they don't let us in :) and who wants to go to MN in January or AZ in August anyway! Awww, MN's not that bad. Spent many a day on the bus stop in 20-30 below wind chills. I'll have to agree about AZ though. :-) Leland
Re: What do your operators do?
Quoting Schuh, Richard [EMAIL PROTECTED]: It kind of reminds me of a trip to the Navy's Atlantic Intelligence Center in 1968 - each of us in the group was accompanied by two armed Marine guards. There were more guards in the meeting room than there were participants. I'm impressed Richard...they let YOU into an Intelligence center? Who would've thunk it... Leland :-D Just to make sure, that WAS a joke!!! :-D
RACF and MAINT
Being new to this RACF on VM thing, I'm a little paranoid about how the MAINT user should be handled in relation to things like password policies. Mind you, we don't use MAINT all that often, but I'd hate to get myself in a position where I needed it and was unable to use it because the password was revoked or something similar. How do y'all handle MAINT with RACF. Is it really a major concern or am I just being a fraidy cat? Leland
Re: RACF and MAINT
This was all good stuff and to summarize... We remove the password from MAINT using NOPASSWORD and we give us special people LOGONBY. Don't know if we'll worry about the inactivity issue jus t yet, but we'll see. Thanks a heap all, Leland
Re: RACF and MAINT
Quoting Jim Bohnsack [EMAIL PROTECTED]: Leland--In addition to the following suggestions to use logonby is that some time ago, auditors dinged us (them--it was before I arrived on the scene) because the MAINT and other privileged userids had shared passwords. Auditors don't like that. Connect your system programmer type people to a $SYSTEMS group or something like that and PERMIT the $SYSTEMS group to logonby to MAINT and other id's that you would want them to share. It will only be two of us, but if I'm understanding correctly, assigning any other users besides MAINT to the $SYSTEMS group would automagically give us two LOGONBY auth for those users as well. That sounds keen to me. Thanks, Leland
Re: RACF and MAINT
Quoting Mike Harding [EMAIL PROTECTED]: No, that's backwards. You permit the $SYSTEMS group to the logonby.maint resource, then users who have a connect to that group automatically have the ability to use logonby to the maint id. You would need to define the resource and do the permit for any other shared id for which you wanted to do logonby. I think you could use a RACFVARS profile if you wanted to act on a group of userids. See the Security Admin's manual. In the simple case, though: 1. ADDGROUP $SYSTEMS OWNER(SYS1) 2. CONNECT USER1 GROUP($SYSTEMS) 3. CONNECT USER2 GROUP($SYSTEMS) ... 4. RDEF SURROGAT LOGONBY.MAINT UACC(NONE)... 5. PERMIT LOGONBY.MAINT CLASS(SURROGAT) ACCESS(READ) ID($SYSTEMS) Now as your systems group membership fluctuates, you connect new members to the $systems group and remove departing ones. But per this example you'd have to repeat the RDEF/PERMIT for other service/maintenance userids. --Mike Ah, I got it now. I'll pass on your explanation to our RACF goddess. She'll probably be wondering why I was asking y'all and not her anyway. :-) Thanks again, Leland
Re: RACF and MAINT
Quoting Rob van der Heij [EMAIL PROTECTED]: On Tue, Jul 1, 2008 at 11:24 PM, Leland [EMAIL PROTECTED] wrote: Ah, I got it now. I'll pass on your explanation to our RACF goddess. She'll probably be wondering why I was asking y'all and not her anyway. :-) Did you not get a we don't have that on MVS so you don't need it on VM ;-) Or did they finally get logonby on MVS as well? Nope, she did it right away and was very pleased with the results. She did ask when RACF was being enabled on the other LPARs though. :-) Leland
Install RACF without HLASM???
So, is it possible? We are a new installation, and have attempted to set the DISKF in SYSSEC to DEFER. Unfortunately, no go. What am I missing? Leland
Re: Install RACF without HLASM???
Thanks Alan and Tom. I'm going to attempt the mangled assembler method f irst, just because that sounds fun. Failing that, I'm a gonna zap the nucleus. Actually, t hat sounds fun too. :-) Thanks again, Leland On Tue, 3 Jun 2008 15:16:29 -0500, Thomas Kern [EMAIL PROTECTED] wr ote: The ZAP command comes to mind, and seems appropriate. An MVS-type progra m to customize and MVS-type product. /Tom Kern On Tue, 3 Jun 2008 16:03:18 -0400, Alan Altmark [EMAIL PROTECTED] wrote: On Tuesday, 06/03/2008 at 02:44 EDT, Leland Lucius [EMAIL PROTECTED] wrote: So, is it possible? We are a new installation, and have attempted to set the DISKF in SYSSEC to DEFER. Unfortunately, no go. Officially, you cannot customize HCPRWA without HLASM. If you're good at assembler and VMSES/E build lists, you may be able to alter the modules and macros in such a way to enable it to assemble wit h the ASSEMBLE command. (e.g. I don't think it needs HCPPROLG and HCPEPI LG macros). Not supported, of course, but maybe a way to avoid buying the assembler. The good news is that HCPRWA is just a table with well-defi ned external references. You just need to be sure the TEXT deck attributes are overridden at LOAD time to ensure it is RMODE ANY. YMMV. I haven' t tried it. Developing a way to customize HCPRWA (et. al.) without HLASM is on the To Do list. Alan Altmark z/VM Development IBM Endicott = == =
Re: Syntax Highlighting in XEdit (similar to z/OS ISPF Edit) ?
Quoting Alan Ackerman [EMAIL PROTECTED]: On Mon, 12 May 2008 01:07:04 -0500, Leland Lucius [EMAIL PROTECTED] wrote: It's not the best solution, but it does provide highlighting...just not in real time: http://vm.marist.edu/~pipeline/index.html#QDI And here's a mod I did to it for REXX keywords: http://homerow.net/zvm/qdi.htm Leland = I went to your link and clicked on qdi update but all I got was: Sorry homerow.net, you can't do qdi.update The same thing happened for updqdi exec. Sorry about that. I've let my site go a little and need to give it a little TLC one of these days. You can get the files from here: http://homerow.net/files/updqdi.exec http://homerow.net/files/qdi.update Leland
Re: Syntax Highlighting in XEdit (similar to z/OS ISPF Edit) ?
--On May 11, 2008 8:27:25 PM -0500 Lionel B. Dyck [EMAIL PROTECTED] wrote: Is it possible (and if so has anyone done it) to have an XEdit Macro that enables syntax highlighting similar to that available to the z/OS ISPF Ed itor? Hi Lionel, It's not the best solution, but it does provide highlighting...just not in real time: http://vm.marist.edu/~pipeline/index.html#QDI And here's a mod I did to it for REXX keywords: http://homerow.net/zvm/qdi.htm Leland
Re: Syntax Highlighting in XEdit (similar to z/OS ISPF Edit) ?
--On May 11, 2008 8:27:25 PM -0500 Lionel B. Dyck [EMAIL PROTECTED] wrote: Is it possible (and if so has anyone done it) to have an XEdit Macro that enables syntax highlighting similar to that available to the z/OS ISPF Ed itor? Hi Lionel, It's not the best solution, but it does provide highlighting...just not in real time: http://vm.marist.edu/~pipeline/index.html#QDI And here's a mod I did to it for REXX keywords: http://homerow.net/zvm/qdi.htm Leland
Re: VM source code
Thanks all. Found where to register and download in IBM ResourceLink if anyone else is lookin'. Leland
VM source code
Is the source code no longer distributed? If I'm remembering correctly, most of the source distributed with at least 4.3.0 or 4.4.0? Just got a moistened whistle while at SHARE and wanted to do a bit of casual reading. :-) Leland
Re: Is 275GB of VDISK stupid?
On 12/3/07 2:55 AM, Rob van der Heij [EMAIL PROTECTED]
wrote:
Because of the Linux algorithm for using swap, a VDISK used for swap
even a little will eventually be used completely.
I realize that VDISK is special in the world of Linux, but why doesn't
someone give us the option of preventing this? Looks to me like adding one
line in swapfile.c would allow pages to cluster at the beginning of a disk
instead of running to the end and starting over at the beginning.
si-flags += SWP_SCANNING;
---goto lowest;
if (unlikely(!si-cluster_nr)) {
So, just make this a configurable option via procfs and let us decide. :-)
Leland
Re: Is 275GB of VDISK stupid?
On 12/3/07 12:15 PM, Jim Bohnsack [EMAIL PROTECTED] wrote: Leland Lucius wrote: It sounds like a good idea and since Linux is open source, I suspect that if you wrote it, Leland, we might use it. The option would have to be on a per device basis since we'd still want normal disk to use the ring approach. Unfortunately, I don't see it getting much use unless it were accepted into the main tree since it would require a kernel rebuild. I don't think most shops would care to do this. ;-) Leland
Is 275GB of VDISK stupid?
Okay, I'm pretty sure I know the answer to that, but stupid and me sit next to each other fairly often... :-) Anyway, we're in the midst of refreshing our DASD and part of that will be to get rid of MOD3s. This happens to be what we use for secondary swap on each Linux guest so a little rethinking is in order. (We use DCSS for primary swap.) The boring alternative would be to do a one for one swap of a MOD9 for a MOD3. Or define a pool of MOD9s and dole out a MOD3s worth using DIRMAINT. But, I like a little excitement every so often, so I got this crazy idea to replace all secondary swap with VDISK and just boost up the VM paging volumes. We don't actually hit Linux swap all that much so probably 15% or so of that 275GB is ever really in use. (Yes, I know...we're probably oversizing our guests, but that's a different story.) I know I'd have go boost up the number of paging volumes, but does VM have to map all of that storage even if it doesn't get used? So what do y'all think? Have I been drinking too much of Adam's cough syrup? Leland
Re: Upgrade to z/VM 5.3 hangs
Quoting Bill Holder [EMAIL PROTECTED]: Responding all the way back to Mark Ristvedt's original post in this thread: Mark, do you have any data showing how busy your paging system was during or just prior to the hang / slowdown period? For that problem to be addressed by VM64269 and VM64297, there would have to be substantial and unusually high paging activity right before or during the problem period. Mark has gone for the weekend, but I can tell ya that we have some fairly spotty data during the period. The reason is that both times the problem occurred (2 separate IPLs), most everything (especially service machines) froze up. However, for a few intervals leading up to the first hang, the Velocity Page Space Analysis report did show large spikes in the User Owned/Attached Expanded Storage pages. All other intervals for these columns had 0. Actually, we never see anything other than 0 for these, even during a normal business day. On Sunday, we will be bringing up 5.3 again to recreate the problem and get a dump. We will then bring up a 5.3 w/5302+hipers and the test fix to try and recreate it again. Even though it's rumored that you can run for days or weeks without hitting the problem, we did it twice in one day so we're fairly confident that we'll be able to do it again. Especially since the second time was a more controlled IPL (as in me starting guests 1 and 2 at a time). Leland
Re: Upgrade to z/VM 5.3 hangs
Hi Marcy, Thanks for the info. We go the test fix for 64297 (which they say includes 64269) last night and we hope to get a test window this weekend...if for nothing else but to get a dump. But, if we can recreate it, we're gonna try the fix after taking the dump. Thanks again, Leland On 10/15/07 2:26 PM, Marcy Cortes [EMAIL PROTECTED] wrote: Make sure you get a snapdump next time. There's quite a few HIPERs out there beyond 0701, you may want to go pull them all. Sounds kinda similar to something we've experienced - resolved by VM64269 and VM64297. Marcy Cortes This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Leland Sent: Monday, October 15, 2007 11:45 AM To: IBMVM@LISTSERV.UARK.EDU Subject: [IBMVM] Upgrade to z/VM 5.3 hangs I am wondering if anyone has seen this when upgrading from VM 5.2 to VM 5.3. We opened an ETR for our issue with IBM this morning. Yesterday we attempted to upgrade to z/VM 5.3 0701 and ran into a problem that caused us to back out to z/VM 5.2. After bringing up 10 service machines and roughly 50 Linux guests, we started 2 more Linux guests. This caused MAINT's and another tn3270 session to hang. We thought perhaps TCPIP had died, so we went to our Visara console and that was hung to. We were able to ssh into some of the Linux guests and bring down stuff like Websphere and Oracle, but we could not get into all of the guests. When we tried a vmcp command in one guest, it immediatey locked that guest. We have all of our guests connected to VSWITCHes directly, so no ROUTED stuff was involved. The two guests are similar to others that started fine. One was a Websphere and the other is an Oracle guest. The Oracle is different in that its database is on SCSI disk with direct attached FCP channels, it is the only guest we have using FCP and SCSI. We weren't doing any paging and our IFL's were running at around 20%. We didn't get a dump, but are scheduling a time soon to do so. Any ideas would be appreciated. Thank you. Mark Ristvedt BCBSMN (via me ;-))
Upgrade to z/VM 5.3 hangs
I am wondering if anyone has seen this when upgrading from VM 5.2 to VM 5.3. We opened an ETR for our issue with IBM this morning. Yesterday we attempted to upgrade to z/VM 5.3 0701 and ran into a problem that caused us to back out to z/VM 5.2. After bringing up 10 service machines and roughly 50 Linux guests, we started 2 more Linux guests. This caused MAINT's and another tn3270 session to hang. We thought perhaps TCPIP had died, so we went to our Visara console and that was hung to. We were able to ssh into some of the Linux guests and bring down stuff like Websphere and Oracle, but we could not get into all of the guests. When we tried a vmcp command in one guest, it immediatey locked that guest. We have all of our guests connected to VSWITCHes directly, so no ROUTED stuff was involved. The two guests are similar to others that started fine. One was a Websphere and the other is an Oracle guest. The Oracle is different in that its database is on SCSI disk with direct attached FCP channels, it is the only guest we have using FCP and SCSI. We weren't doing any paging and our IFL's were running at around 20%. We didn't get a dump, but are scheduling a time soon to do so. Any ideas would be appreciated. Thank you. Mark Ristvedt BCBSMN (via me ;-))
First attempt at FCP not going so well...
We're attempting to define an FCP channel with 8 LUNs and we can see the WWPN of the Hitachi port, but nothing else. (Basically, I have know idea what I'm doing. :-)) When I run: scsidisk noprompt erase debug It seems to detect the remote port and the z port, but it's not very happy when it tries to do anything with them. Here's the output: INFO::START @ 30 Jul 2007 16:28:07 INFO::No of attached FCP Channels found=1 INFO::Choosen FCP Sub-Channel Device(s)=ALL DEVICES INFO::FCP SUB-CHANNEL 0999 Initialized INFO::For Sub Channel 0999 No of WWPNs found=2 INFO::For 0999 Choosen WWPN(s)=ALL WWPNs INFO::FCP SUB-CHANNEL 0999 Re-Initialized WARNING::WWPN 50060E8003AA070B Could Not be Opened DEBUG::ERROR RC:50060E8003AA070B THINOP()=-1559691091 WARNING::WWPN 50060E8003AA070B ignored DEBUG::ERROR RC:50060E8003AA070B GETLUN()=-112 WARNING::WWPN 50060E8003AA070B Could Not be Closed DEBUG::ERROR RC:50060E8003AA070B THINCP()=-13 INFO::FCP SUB-CHANNEL 0999 Re-Initialized WARNING::WWPN 5005076401E240ED Could Not be Opened DEBUG::ERROR RC:5005076401E240ED THINOP()=-1477508179 WARNING::WWPN 5005076401E240ED ignored DEBUG::ERROR RC:5005076401E240ED GETLUN()=-112 WARNING::WWPN 5005076401E240ED Could Not be Closed DEBUG::ERROR RC:5005076401E240ED THINCP()=-13 INFO::FCP SUB-CHANNEL 0999 RESET RC=0 INFO::END @ 30 Jul 2007 16:28:07 PROGRAM EXIT Any ideas? Any way to find out what those error codes mean? Thanks much, Leland
Re: First attempt at FCP not going so well...
Quoting Richard Troth [EMAIL PROTECTED]: Do you know the target WWPNs and LUNs that you want to use? Yep, the 50060E8003AA070B below is the WWPN on the Hitachi. They've provided me with the LUNs as well, but I'm too lazy to type 'em in. :-) Leland -- R; - Original Message - From: Leland [EMAIL PROTECTED] Sent: 07/30/2007 05:24 PM To: IBMVM@LISTSERV.UARK.EDU Subject: First attempt at FCP not going so well... We're attempting to define an FCP channel with 8 LUNs and we can see the WWPN of the Hitachi port, but nothing else. (Basically, I have know idea what I'm doing. :-)) When I run: scsidisk noprompt erase debug It seems to detect the remote port and the z port, but it's not very happy when it tries to do anything with them. Here's the output: INFO::START @ 30 Jul 2007 16:28:07 INFO::No of attached FCP Channels found=1 INFO::Choosen FCP Sub-Channel Device(s)=ALL DEVICES INFO::FCP SUB-CHANNEL 0999 Initialized INFO::For Sub Channel 0999 No of WWPNs found=2 INFO::For 0999 Choosen WWPN(s)=ALL WWPNs INFO::FCP SUB-CHANNEL 0999 Re-Initialized WARNING::WWPN 50060E8003AA070B Could Not be Opened DEBUG::ERROR RC:50060E8003AA070B THINOP()=-1559691091 WARNING::WWPN 50060E8003AA070B ignored DEBUG::ERROR RC:50060E8003AA070B GETLUN()=-112 WARNING::WWPN 50060E8003AA070B Could Not be Closed DEBUG::ERROR RC:50060E8003AA070B THINCP()=-13 INFO::FCP SUB-CHANNEL 0999 Re-Initialized WARNING::WWPN 5005076401E240ED Could Not be Opened DEBUG::ERROR RC:5005076401E240ED THINOP()=-1477508179 WARNING::WWPN 5005076401E240ED ignored DEBUG::ERROR RC:5005076401E240ED GETLUN()=-112 WARNING::WWPN 5005076401E240ED Could Not be Closed DEBUG::ERROR RC:5005076401E240ED THINCP()=-13 INFO::FCP SUB-CHANNEL 0999 RESET RC=0 INFO::END @ 30 Jul 2007 16:28:07 PROGRAM EXIT Any ideas? Any way to find out what those error codes mean? Thanks much, Leland
Re: First attempt at FCP not going so well...
Quoting Richard Troth [EMAIL PROTECTED]: Do you know the target WWPNs and LUNs that you want to use? Incidentially, this is what I get when bringing on of these animals online to Linux: zfcp: The adapter 0.0.9000 reported the following characteristics: WWNN 0x5005076400ce930e, WWPN 0x5005076401e240ed, S_ID 0x00613b13, adapter version 0x4, LIC version 0x607, FC link speed 2 Gb/s zfcp: Switched fabric fibrechannel network detected at adapter 0.0.9000. Then, when I try to add a port: zfcp: port erp failed (adapter 0.0.9000, wwpn=0x50060e8003aa070b) Thanks much, Leland
Re: First attempt at FCP not going so well...
Cool. That¹s what I sort of figured, but I really didn¹t have a clue. I will talk with them tomorrow. Thanks much, Leland On 7/30/07 5:39 PM, Eric R Farman [EMAIL PROTECTED] wrote: Hi Leland, So, the Discovery Tool cannot open the WWPN of the Hitachi (it makes sense that it cannot open the port it is leaving from, so that error is okay). The error seems to suggest that perhaps the request is being blocked by a zoning/masking scheme within the Hitachi? That's what it seems at a cursory glance, anyway. Regards, Eric Eric Farman z/VM I/O Development IBM Endicott, NY Leland [EMAIL PROTECTED] Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 07/30/2007 06:03 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: First attempt at FCP not going so well... Quoting Richard Troth [EMAIL PROTECTED]: Do you know the target WWPNs and LUNs that you want to use? Yep, the 50060E8003AA070B below is the WWPN on the Hitachi. They've provided me with the LUNs as well, but I'm too lazy to type 'em in. :-) Leland -- R; - Original Message - From: Leland [EMAIL PROTECTED] Sent: 07/30/2007 05:24 PM To: IBMVM@LISTSERV.UARK.EDU Subject: First attempt at FCP not going so well... We're attempting to define an FCP channel with 8 LUNs and we can see the WWPN of the Hitachi port, but nothing else. (Basically, I have know idea what I'm doing. :-)) When I run: scsidisk noprompt erase debug It seems to detect the remote port and the z port, but it's not very happy when it tries to do anything with them. Here's the output: INFO::START @ 30 Jul 2007 16:28:07 INFO::No of attached FCP Channels found=1 INFO::Choosen FCP Sub-Channel Device(s)=ALL DEVICES INFO::FCP SUB-CHANNEL 0999 Initialized INFO::For Sub Channel 0999 No of WWPNs found=2 INFO::For 0999 Choosen WWPN(s)=ALL WWPNs INFO::FCP SUB-CHANNEL 0999 Re-Initialized WARNING::WWPN 50060E8003AA070B Could Not be Opened DEBUG::ERROR RC:50060E8003AA070B THINOP()=-1559691091 WARNING::WWPN 50060E8003AA070B ignored DEBUG::ERROR RC:50060E8003AA070B GETLUN()=-112 WARNING::WWPN 50060E8003AA070B Could Not be Closed DEBUG::ERROR RC:50060E8003AA070B THINCP()=-13 INFO::FCP SUB-CHANNEL 0999 Re-Initialized WARNING::WWPN 5005076401E240ED Could Not be Opened DEBUG::ERROR RC:5005076401E240ED THINOP()=-1477508179 WARNING::WWPN 5005076401E240ED ignored DEBUG::ERROR RC:5005076401E240ED GETLUN()=-112 WARNING::WWPN 5005076401E240ED Could Not be Closed DEBUG::ERROR RC:5005076401E240ED THINCP()=-13 INFO::FCP SUB-CHANNEL 0999 RESET RC=0 INFO::END @ 30 Jul 2007 16:28:07 PROGRAM EXIT Any ideas? Any way to find out what those error codes mean? Thanks much, Leland
Hipersockets and security???
Okay, I need y'alls help. I have a security team that is demanding that we encrypt traffic between 2 Linux guests communicating across real hipersockets. I admit that my brain sometimes works about as well as a frog wielding a jack hammer, but isn't it rather ridiculous to encrypt data across hipersockets? What would the purpose be other than to satisfy some overdone security requirements??? Any pointers to some industry recognized security certification (may) help. Thanks much, Leland
Re: Hipersockets and security???
Quoting Alan Altmark [EMAIL PROTECTED]: A certification of what? Honestly I don't know. Anything that says See, I told you it was secure! :-) Hipersockets traffic is internal to the box. Perhaps they are worried about a lack of control on the I/O configuration (HMC access, dynamic I/O), allowing unauthorized connection to an IQD CHPID? No chance of that. They wouldn't know a CHPID from Officer Francis Llewellyn Poncherello. Basically, they're saying that it's a communication link so it has to be encrypted. I actually think I'm gonna be on the losing end of this one... :-( Leland
Private network between 2 VMs?
So how would you folks set up a private network between 2 VMs (5.2) runnnig, each running on a separate z/900? We're gonna try out Oracle RAC and it requires a private network for it s Fusion reactor. Thanks, Leland
Re: Updated Community VM Redbook outline posted
Quoting David Boyes [EMAIL PROTECTED]: Still horked. LOL - I like that word...nice ring to it. Hmph. The file is fine, and Firefox can retrieve it fine, just not IE. For now, download it to local disk (right click and save it) and open it from there. I'll track down what's going on later this evening, but you can still get the file to read on the plane. It works fine for me on Windows 2000, IE 5.5, and Acroreader 6.0. I do not have reader set to open the pdf within IE...I prefer reader to upon standalone. I suspect that's what's causing the issues for folks. Leland
Re: Updated Community VM Redbook outline posted
Quoting Bill Dodge [EMAIL PROTECTED]: The situation is not limited to Acrobat. The same happens with Word, Excel, Notepad and Wordpad that I have discovered. It seems to have appeared at some XP or IE update in the last 6 months. I quit complaining and just started saving everything. Just another burden to add to the heavy load. Now that you mention it, I have that problem as home (XP, blah, blah) as well. I'd forgotten about that. But, I tend to do the save and read method anyway. Leland
Re: Encryption Pipe stage
Quoting Rob van der Heij [EMAIL PROTECTED]: If we had a CMS Pipelines stage to do it, I expect it would at least be able to do it without special hardware. Last year I got the md5 stage for x-mas, but I don't think we're much further than that. I have RC4 (40-bit to 128-bit) source if anyone wants to pipeify it. Mind you, RC4 is not the greatest either. This could actually be a good trial of GCC for CMS since it could be used to create the assembler source from open-source encryption algos. The assembler could then be prettied up and pipeified. Ignore me...just thinkin' out my fingers again. Leland
Re: Can I verify zVM is running on an IFL?
Quoting Jim Bohnsack [EMAIL PROTECTED]: On the PERFSVM LPAR screen, if you scroll to the right and look at the Type column. I pointed at it and hit PF1 for help and got this. Don't have an IFL, so I don't know what it would show--progable IFL. Partition Nr. #Proc Weight Wait-C Cap %Load CPU %Ovhd %Susp %VMld %Logld Type VM112 2DEDYES NO ... 0 .0.1 45.8 45.8 Spec Interesting part is that if you shutdown Perfsvm and start it back up, it says that it requires sample data for the LPAR display. Could the info be in the sample records somewhere??? Leland
Re: Can I verify zVM is running on an IFL?
On Mon, 12 Jun 2006 15:21:02 -0500, Leland Lucius [EMAIL PROTECTED] wrote: Interesting part is that if you shutdown Perfsvm and start it back up, i t says that it requires sample data for the LPAR display. Could the info be in the sample records somewhere??? Like maybe here: http://www.vm.ibm.com/pubs/mon520/MRSYTCUP.HTML#SYTCUP_LCPTYPE It shows up as an ICF, but I wouldn't think it to be a far stretch to consider that an IFL if you running on it... :-) Leland
