Re: time used on Ready; prompt
Looks like someone wrote an EXEC (or maybe a module) -- 'dt' is not a standard z/VM command.. LISTFILE DT * * to figure it out. Scott Rohling On Wed, Aug 10, 2011 at 12:45 PM, James Hammons wrote: > dt > 13:46:20 - Wednesday 10 Aug 2011 > Ready; T=0.01/0.01 13:46:20 > > > -Original Message- > From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On > Behalf Of Mike Walter > Sent: Wednesday, August 10, 2011 12:28 PM > To: IBMVM@LISTSERV.UARK.EDU > Subject: Re: time used on Ready; prompt > > "D T" on a VM system? I think not! MVS (z/OS), yes - that's Display > Time, but never VM. > "Query Time" (abbreviated down to Q T) on VM, yes. And it still works. > > On VM "D T" is the abbreviation for Display (guest storage) Translated (in > hex and character form), which will be happy to display storage, translated, > as in > cp d t > R 03EC2000 85D39114 0E99A630 F6 *eLj..rw.* > > > On some past version, D T alone would display ALL the storage (memory) you > had access to, leading to a very, very long display (usually on the OPERATOR > console, since they are used to MVS commands). I wrote a "D EXEC" for > OPERATOR's 191 disk, displaying the time and suggested that they use "Q T" > from then on. > > Mike Walter > Aon Corporation > The opinions expressed herein are mine alone, not my employer's. > > > -Original Message- > From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On > Behalf Of R P Herrold > Sent: Wednesday, August 10, 2011 10:32 AM > To: IBMVM@LISTSERV.UARK.EDU > Subject: time used on Ready; prompt > > On Wed, 10 Aug 2011, Gentry, Steve wrote: > > > Does anyone remember when or what release IBM stopped displaying the > > time used(for lack of the correct term) on the Ready; prompt? I was > > talking to an old IBM'er/VM'er and he asked about it. I had forgotten > > that it used to be displayed. Just curious when it disappeared. > > well ... on our S/370 during the Nixon administation, we had to type at the > console: >D T > to see the time and date ... so it may have come and gone ;) > > -- Russ herrold >
Re: z/vm page packs at DR
Yes, I meant that you still need to format those allocated as PAGE (or any non PERM type).. I'm used to seeing full volumes so said 1-END.. Personally - I prefer to format/allocate in one step (single cpfmtxa format/allocate) Scott Rohling On Tue, Aug 9, 2011 at 12:26 PM, wrote: > Hi. > No need, 0-END (or 1-END) is not mandatory. > You can use only pieces of dasd for each type, but all referenced in alloc > map, not PERM type, MUST be formatted. If not, you get the paging errors. > To make a one-pack VM, have the VMRES mdisks, some cylinders for page and > some for spool. The minimum needed to get CMS running. All in the same pack. > > > PS. And is possible (not practical) to start with an empty SPOOL: > >1. Restore VMRES, >2. format page/spool, >3. IPL VM, >4. logon MAINT (IPL 190), >5. create the segments and all the other SDFs (or restore them from one >tape). >6. Followed by a new IPL. > > I saw people working this way ( I help them) in the past. > Personally, nowaday this way looks more an academic POC than a valid DR > exercise... > ______ > Clovis > > > From: > Scott Rohling > To: IBMVM@LISTSERV.UARK.EDU Date: 09/08/2011 14:19 Subject: Re: z/vm page > packs at DR Sent by: The IBM z/VM Operating System < > IBMVM@LISTSERV.UARK.EDU> > -- > > > > Don't you still need to format 1-END? In my experience, you can end up > with paging errors if the dasd isn't initialized/formatted. Haven't tried > just cylinder 0 though, so I could be wrong.. > > Scott Rohling > > On Tue, Aug 9, 2011 at 6:06 AM, Gentry, Steve <* > steve.gen...@westernsouthernlife.com*> > wrote: > > We backup cyl 0 (zero) of the page packs just to avoid having to run ICKDSF > to put a label on the packs. We then, of course, restore that cyl 0 at DR. > > Steve > > > > *From:* The IBM z/VM Operating System > [mailto:*IBMVM@LISTSERV.UARK.EDU*] > *On Behalf Of *Crabtree, Anne D* > Sent:* Tuesday, August 09, 2011 8:03 AM > > * > To:* *IBMVM@LISTSERV.UARK.EDU* > *Subject:* z/vm page packs at DR > > > > I currently back up all my z/vm packs (res,page,spool) via an adrdssu job > on z/os each Sunday. At the DR site, I run an adrdssu restore job for these > packs. > > This method works fine, however, I’m wondering if backing up the page packs > is necessary? I was thinking that maybe I could backup only 1 page pack so > that I can get z/vm up and then just init the remaining packs after coming > up. Since the page packs are listed as cpvols in system config, would z/vm > even come up if it couldn’t find all of them? Seems like a waste of time to > back them up… > > > > At DR site, we bring up a z/os “rescue” system in order to run restore jobs > for both z/os and z/vm volumes. Afterwards, our z/vm and z/os systems run > as second level guests. Maybe I need a “rescue” z/vm system as well? > > > > Just wondering what everyone else does. > > > > > > > > Anne D. Crabtree > > System Programmer > > WV Office of Technology Data Center > > 1900 Kanawha Blvd East > > Charleston, WV 25305 > > *(304)558-5914 ext 58292* <%28304%29558-5914%20ext%2058292> > > *(304)558-1441* <%28304%29558-1441> fax > > > >
Re: z/vm page packs at DR
Don't you still need to format 1-END? In my experience, you can end up with paging errors if the dasd isn't initialized/formatted. Haven't tried just cylinder 0 though, so I could be wrong.. Scott Rohling On Tue, Aug 9, 2011 at 6:06 AM, Gentry, Steve < steve.gen...@westernsouthernlife.com> wrote: > We backup cyl 0 (zero) of the page packs just to avoid having to run ICKDSF > to put a label on the packs. We then, of course, restore that cyl 0 at DR. > > > Steve > > ** ** > > *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On > Behalf Of *Crabtree, Anne D > *Sent:* Tuesday, August 09, 2011 8:03 AM > > *To:* IBMVM@LISTSERV.UARK.EDU > *Subject:* z/vm page packs at DR > > ** ** > > I currently back up all my z/vm packs (res,page,spool) via an adrdssu job > on z/os each Sunday. At the DR site, I run an adrdssu restore job for these > packs. > > This method works fine, however, I’m wondering if backing up the page packs > is necessary? I was thinking that maybe I could backup only 1 page pack so > that I can get z/vm up and then just init the remaining packs after coming > up. Since the page packs are listed as cpvols in system config, would z/vm > even come up if it couldn’t find all of them? Seems like a waste of time to > back them up… > > ** ** > > At DR site, we bring up a z/os “rescue” system in order to run restore jobs > for both z/os and z/vm volumes. Afterwards, our z/vm and z/os systems run > as second level guests. Maybe I need a “rescue” z/vm system as well? *** > * > > ** ** > > Just wondering what everyone else does. > > ** ** > > ** ** > > ** ** > > Anne D. Crabtree > > System Programmer > > WV Office of Technology Data Center > > 1900 Kanawha Blvd East > > Charleston, WV 25305 > > (304)558-5914 ext 58292 > > (304)558-1441 fax > > ** ** >
Re: z/vm page packs at DR
On Tue, Aug 9, 2011 at 6:39 AM, Scott Rohling wrote: > No need to re-ipl .. just format the page volumes, allocate as page, label > correctly and attach them to the system... > > Scott Rohling > > > On Tue, Aug 9, 2011 at 6:13 AM, Rich Smrcina wrote: > >> For your initial IPL at DR, you won't need your PAGE packs at all... yes, >> the IPL will complain. As long as AUTOLOG1/2 isn't kicking off lots of other >> machines at DR time, you'll be just fine. Then an exec can format the page >> volumes... re-ipl and all is good. You will need spool space, so you might >> as well copy it (or keep a small spool area available only with the NSS >> files, JUST for DR). >> >> >> On 08/09/2011 07:03 AM, Crabtree, Anne D wrote: >> >>> >>> I currently back up all my z/vm packs (res,page,spool) via an adrdssu job >>> on z/os each Sunday. At the DR site, I run an adrdssu restore job for these >>> packs. >>> >>> This method works fine, however, I’m wondering if backing up the page >>> packs is necessary? I was thinking that maybe I could backup only 1 page >>> pack so that I can get z/vm up and then just init the remaining packs after >>> coming up. Since the page packs are listed as cpvols in system config, would >>> z/vm even come up if it couldn’t find all of them? Seems like a waste of >>> time to back them up… >>> >>> At DR site, we bring up a z/os “rescue” system in order to run restore >>> jobs for both z/os and z/vm volumes. Afterwards, our z/vm and z/os systems >>> run as second level guests. Maybe I need a “rescue” z/vm system as well? >>> >>> Just wondering what everyone else does. >>> >>> Anne D. Crabtree >>> >>> System Programmer >>> >>> WV Office of Technology Data Center >>> >>> 1900 Kanawha Blvd East >>> >>> Charleston, WV 25305 >>> >>> (304)558-5914 ext 58292 >>> >>> (304)558-1441 fax >>> >>> >> >> -- >> Rich Smrcina >> Velocity Software, Inc. >> http://www.velocitysoftware.**com <http://www.velocitysoftware.com> >> >> Catch the WAVV! http://www.wavv.org >> WAVV 2012 - April 13-17, 2012 Covington, KY >> > >
Re: z/vm page packs at DR
No need to re-ipl .. just format the page volumes, allocate as page, label correctly and attach them to the system... Scott Rohling On Tue, Aug 9, 2011 at 6:13 AM, Rich Smrcina wrote: > For your initial IPL at DR, you won't need your PAGE packs at all... yes, > the IPL will complain. As long as AUTOLOG1/2 isn't kicking off lots of other > machines at DR time, you'll be just fine. Then an exec can format the page > volumes... re-ipl and all is good. You will need spool space, so you might > as well copy it (or keep a small spool area available only with the NSS > files, JUST for DR). > > > On 08/09/2011 07:03 AM, Crabtree, Anne D wrote: > >> >> I currently back up all my z/vm packs (res,page,spool) via an adrdssu job >> on z/os each Sunday. At the DR site, I run an adrdssu restore job for these >> packs. >> >> This method works fine, however, I’m wondering if backing up the page >> packs is necessary? I was thinking that maybe I could backup only 1 page >> pack so that I can get z/vm up and then just init the remaining packs after >> coming up. Since the page packs are listed as cpvols in system config, would >> z/vm even come up if it couldn’t find all of them? Seems like a waste of >> time to back them up… >> >> At DR site, we bring up a z/os “rescue” system in order to run restore >> jobs for both z/os and z/vm volumes. Afterwards, our z/vm and z/os systems >> run as second level guests. Maybe I need a “rescue” z/vm system as well? >> >> Just wondering what everyone else does. >> >> Anne D. Crabtree >> >> System Programmer >> >> WV Office of Technology Data Center >> >> 1900 Kanawha Blvd East >> >> Charleston, WV 25305 >> >> (304)558-5914 ext 58292 >> >> (304)558-1441 fax >> >> > > -- > Rich Smrcina > Velocity Software, Inc. > http://www.velocitysoftware.**com <http://www.velocitysoftware.com> > > Catch the WAVV! http://www.wavv.org > WAVV 2012 - April 13-17, 2012 Covington, KY >
Re: Accepting non-display input...
Make sure you follow that with a 'take' so you actually get out of the CONSOLE input: pipe console dark | take 1 | var pw Scott Rohling On Mon, Aug 8, 2011 at 12:45 PM, Frank M. Ramaekers wrote: > Well that was easy. > > Thanks, > > Frank M. Ramaekers Jr. > > > > -Original Message- > From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On > Behalf Of Alan Altmark > Sent: Monday, August 08, 2011 1:28 PM > To: IBMVM@LISTSERV.UARK.EDU > Subject: Re: Accepting non-display input... > > On Monday, 08/08/2011 at 02:17 EDT, "Frank M. Ramaekers" > wrote: > > ?in CMS. Is there a way to do this from REXX or PIPE? > > pipe console dark > > Alan Altmark > > Senior Managing z/VM and Linux Consultant > IBM System Lab Services and Training > ibm.com/systems/services/labservices > office: 607.429.3323 > mobile; 607.321.7556 > alan_altm...@us.ibm.com > IBM Endicott > > _ > This message contains information which is privileged and confidential and > is solely for the use of the > intended recipient. If you are not the intended recipient, be aware that > any review, disclosure, > copying, distribution, or use of the contents of this message is strictly > prohibited. If you have > received this in error, please destroy it immediately and notify us at > privacy...@ailife.com. >
Re: Performence Toolkit not working.
Looks like a corrupted disk.. if you have a backup - I would format the disk and restore it.. If not - you can try and copy as many files off of it as you can (you will likely be able to copy some files, but one or more will cause the system file error to occur). Corruption can be caused by things like two users linking the disk RW - or overlapping disks.. Scott Rohling On Fri, Aug 5, 2011 at 9:47 AM, saurabh khandelwal < sourabhkhandelwal...@gmail.com> wrote: > > Hello, > We have zVM 5.4 System. And I am trying to login with PERFSVM id, > I get below error while connecting. > > LOGON PERFSVM > ENTER PASSWORD (IT WILL NOT APPEAR WHEN TYPED): > > 21:38:57 z/VM Version 5 Release 4.0, Service Level 1001 (64-bit), > 21:38:57 built on IBM Virtualization Technology > 21:38:57 There is no logmsg data > 21:38:57 FILES: NO RDR, NO PRT, NO PUN > 21:38:57 LOGON AT 21:38:57 PDT THURSDAY 08/04/11 > 21:38:57 GRAF L0004 LOGON AS PERFSVM USERS = 21FROM 10.159.14.88 > z/VM V5.4.02010-02-16 14:54 > DMSACP723I B (201) R/O > DMSACP723I D (1CC) R/O > DMSACP723I F (29D) R/O > 21:38:57 Command complete > 21:38:57 Command complete > 21:38:57 Command complete > 21:38:57 Command complete > DMSDKD1307T File system error detected by DMSAUD at address 00F1D940 > (offset 000 > 007A8): > DMSDKD1307T TRKAL request failed with code 8 during an I/O operation using > virtu > al device 191 (mode 'A') > 21:38:57 HCPGIR450W CP entered; disabled wait PSW 000A 00F082CA > > To isolate this, I tried checking user directory for PERFSVM for 191 mini > disk. > > USER PERFSVM PERFSVM 64M 512M ABDEG > MACHINE ESA > XAUTOLOG AUTOLOG1 > ACCOUNT > NAMESAVE MONDCSS > IUCV *MONITOR MSGLIMIT 255 > IUCV *IDENT FCXRES00 GLOBAL > IUCV *IDENT FCXSYSTM GLOBAL > IUCV ALLOW > SHARE ABS 3% > IPL CMS PARM AUTOCR > OPTION QUICKDSP DIAG88 > CONSOLE 0009 3215 > SPOOL 000C 2540 READER * > SPOOL 000D 2540 PUNCH A > SPOOL 000E 1403 A > LINK MAINT 190 190 RR > LINK MAINT 19D 19D RR > LINK MAINT 19E 19E RR > LINK 5VMPTK40 200 200 RR > LINK 5VMPTK40 201 201 RR > LINK 5VMPTK40 1CC 1CC RR > LINK 5VMPTK40 29D 29D RR > MDISK 191 3390 6250 120 540RES MR READ WRITEMULTIPLE > MDISK 195 3390 6370 060 540RES MR READ WRITEMULTIPLE > > Also I logged using MAINT and enabled this product again . > *set product prodid 5vmptk40 state enabled > * > But, still I am getting same error for evice 191 (mode 'A'). > > Can you help me resolve this isse, so tht I can run performence took lit > > -- > Thanks & Regards > Saurabh Khandelwal >
Re: Trapping SMSG messages
You might try 'WAKEUP RESET' just before you do the 'WAKEUP +0 (IUCVMSG' (You didn't say, but assuming you tried this and it worked?). You should also end your routine with WAKEUP RESET (just before you restore msg values - RESET does a SET MSG ON, which may not be what it was). It's not clear in the doc - but I 'think' doing a RESET clears IUCV.. Scott Rohling On Thu, Aug 4, 2011 at 11:37 AM, Frank M. Ramaekers wrote: > ** ** ** ** ** ** > > Good points. I’ve had the problem with MSG/SMSGs still in limbo and the > WAKEUP receives those first. Is there a way to clear these prior to issuing > the WAKEUP (or sending the SMSG)? > > ** ** > > > > Frank M. Ramaekers Jr. > > ** ** > > ** ** > -- > > *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On > Behalf Of *Scott Rohling > *Sent:* Thursday, August 04, 2011 10:55 AM > > *To:* IBMVM@LISTSERV.UARK.EDU > *Subject:* Re: Trapping SMSG messages > > > ** ** > > Another couple of points -- > > ** ** > > - Since you can't control who might send a message to you when - you > probably want to loop until there are no more rc=5.It could be a msg > from another user is stacked in IUCV. > > - DESBUF is kind of brute force -- it wipes out the stack -- and there > could conceivably be things stacked and needed by whatever calls you. > Better to do a 'MAKEBUF';buf=rc ... and then 'DROPBUF' buf ... then > you only drop the things in your 'own' stack.. and you aren't affected by > what may already be in the stack for whatever called you. > > ** ** > > Scott Rohling > > On Thu, Aug 4, 2011 at 9:44 AM, Scott Rohling > wrote: > > Try turning the 'SET MSG IUCV' to 'WAKEUP +0 (IUCVMSG' .. I think this > gets WAKEUP ready - and also issues the SET MSG IUCV. The example under > 'HELP WAKEUP' shows it done this way and I seem to recall needing to do it > in something I'd written. > > ** ** > > Scott Rohling > > ** ** > > On Thu, Aug 4, 2011 at 9:28 AM, Frank M. Ramaekers > wrote: > > I don’t quite understand why I’m missing the first IUCV MSG sent to my > virtual machine after an IPL. The basics of this program is: > > > > 1) Send a SMSG to VMUTIL of ‘RUOKAY’ > > 2) VMUTIL, if alive, will send back a MSG response > “IMOKAY” > > 3) If the proper response is received the RC is set to > zero, all other cases it’s set to 1 > > > > My short REXX: > > > > Trace "O" > > "PIPE LITERAL QUERY SET", > > "| CP", > > "| SPLIT AT ,", > > "| STRIP", > > "| FIND MSG"||, > > "| SPEC W2 1", > > "| VAR SETMSG" > > "CP SET MSG IUCV" > > "CP SMSG VMUTIL RUALIVE" > > "WAKEUP +00:02 (QUIET IUCVMSG CONS" > > wurc=rc > > XRC=1 /* Assume bad */ > > Select > > When wurc==5 then /* Message arrived */ > > Do queued() > > Parse pull WuType WuWho WuMsg > > If WuType=="*MSG" & WuWho=="VMUTIL" & WuMsg="IMOKAY" then > > XRC=0 > > End > > When wurc==6 then /* Console interrupt */ > > Say "Interrupted" > > Otherwise > > Nop > > End /* Select */ > > "CP SET MSG" SetMsg > > /* Flush everything */ > &g
Re: Trapping SMSG messages
Another couple of points -- - Since you can't control who might send a message to you when - you probably want to loop until there are no more rc=5.It could be a msg from another user is stacked in IUCV. - DESBUF is kind of brute force -- it wipes out the stack -- and there could conceivably be things stacked and needed by whatever calls you. Better to do a 'MAKEBUF';buf=rc ... and then 'DROPBUF' buf ... then you only drop the things in your 'own' stack.. and you aren't affected by what may already be in the stack for whatever called you. Scott Rohling On Thu, Aug 4, 2011 at 9:44 AM, Scott Rohling wrote: > Try turning the 'SET MSG IUCV' to 'WAKEUP +0 (IUCVMSG' .. I think this > gets WAKEUP ready - and also issues the SET MSG IUCV. The example under > 'HELP WAKEUP' shows it done this way and I seem to recall needing to do it > in something I'd written. > > Scott Rohling > > > On Thu, Aug 4, 2011 at 9:28 AM, Frank M. Ramaekers > wrote: > >> ** ** ** ** ** ** >> >> I don’t quite understand why I’m missing the first IUCV MSG sent to my >> virtual machine after an IPL. The basics of this program is: >> >> ** ** >> >> **1) **Send a SMSG to VMUTIL of ‘RUOKAY’ >> >> **2) **VMUTIL, if alive, will send back a MSG response >> “IMOKAY” >> >> **3) **If the proper response is received the RC is set >> to zero, all other cases it’s set to 1 >> >> ** ** >> >> My short REXX: >> >> ** ** >> >> Trace "O" >> >> "PIPE LITERAL QUERY SET", >> >> "| CP", >> >> "| SPLIT AT ,", >> >> "| STRIP", >> >> "| FIND MSG"||, >> >> "| SPEC W2 1", >> >> "| VAR SETMSG" >> >> "CP SET MSG IUCV" >> >> "CP SMSG VMUTIL RUALIVE" >> >> "WAKEUP +00:02 (QUIET IUCVMSG CONS" >> >> wurc=rc >> >> XRC=1 /* Assume bad */ >> >> Select >> >> When wurc==5 then /* Message arrived */ >> >> Do queued() >> >> Parse pull WuType WuWho WuMsg >> >> If WuType=="*MSG" & WuWho=="VMUTIL" & WuMsg="IMOKAY" then >> >> XRC=0 >> >> End >> >> When wurc==6 then /* Console interrupt */ >> >> Say "Interrupted" >> >> Otherwise >> >> Nop >> >> End /* Select */ >> >> "CP SET MSG" SetMsg >> >> /* Flush everything */ >> >> "DESBUF" >> >> If Externals()>0 then >> >> Parse external . >> >> Exit XRC >> >> l >> maint >> >> >> ENTER PASSWORD (IT WILL NOT APPEAR WHEN >> TYPED):** >> ** >> >> >> >> >> >> HCPLNM101E DASD 0CF1 forced R/O; R/O by SYSTEM; stable by >> SYSTEM >> >> HCPLNM101E DASD 0CF2 forced R/O; R/O by SYSTEM; stable by >> SYSTEM >> >> z/VM Version 5 Release 4.0, Service Level 1003 >> (64-bit), >> >> built on IBM Virtualization >> Technology >> ***
Re: Trapping SMSG messages
Try turning the 'SET MSG IUCV' to 'WAKEUP +0 (IUCVMSG' .. I think this gets WAKEUP ready - and also issues the SET MSG IUCV. The example under 'HELP WAKEUP' shows it done this way and I seem to recall needing to do it in something I'd written. Scott Rohling On Thu, Aug 4, 2011 at 9:28 AM, Frank M. Ramaekers wrote: > ** ** ** ** ** ** > > I don’t quite understand why I’m missing the first IUCV MSG sent to my > virtual machine after an IPL. The basics of this program is: > > ** ** > > **1) **Send a SMSG to VMUTIL of ‘RUOKAY’ > > **2) **VMUTIL, if alive, will send back a MSG response > “IMOKAY” > > **3) **If the proper response is received the RC is set > to zero, all other cases it’s set to 1 > > ** ** > > My short REXX: > > ** ** > > Trace "O" > > "PIPE LITERAL QUERY SET", > > "| CP", > > "| SPLIT AT ,", > > "| STRIP", > > "| FIND MSG"||, > > "| SPEC W2 1", > > "| VAR SETMSG" > > "CP SET MSG IUCV" > > "CP SMSG VMUTIL RUALIVE" > > "WAKEUP +00:02 (QUIET IUCVMSG CONS" > > wurc=rc > > XRC=1 /* Assume bad */ > > Select > > When wurc==5 then /* Message arrived */ > > Do queued() > > Parse pull WuType WuWho WuMsg > > If WuType=="*MSG" & WuWho=="VMUTIL" & WuMsg="IMOKAY" then > > XRC=0 > > End > > When wurc==6 then /* Console interrupt */ > > Say "Interrupted" > > Otherwise > > Nop > > End /* Select */ > > "CP SET MSG" SetMsg > > /* Flush everything */ > > "DESBUF" > > If Externals()>0 then > > Parse external . > > Exit XRC > > l > maint > > > ENTER PASSWORD (IT WILL NOT APPEAR WHEN > TYPED):*** > * > > > > > > HCPLNM101E DASD 0CF1 forced R/O; R/O by SYSTEM; stable by > SYSTEM > > HCPLNM101E DASD 0CF2 forced R/O; R/O by SYSTEM; stable by > SYSTEM > > z/VM Version 5 Release 4.0, Service Level 1003 > (64-bit), > > built on IBM Virtualization > Technology > > > There is no logmsg > data > > > FILES: 0066 RDR, 0007 PRT, NO > PUN > > > LOGON AT 10:25:22 CDT THURSDAY > 08/04/11 > > > z/VM V5.4.02011-03-31 > 08:13 > > > > > > > PIPINX086I CMS/TSO Pipelines, 5654-030/5655-A17 1.0112 > (Version.Release/Mod) - Generated 3 Jul 2010 at 11:32:36. > > Source: **Princeton** Runtime > Distribution > > > Ready; T=0.02/0.02 > 10:25:24 > > > vmutil > > > > 10:25:25 * MSG FROM VMUTIL : > IMOKAY > > > Ready(1); T=0.01/0.01 10:25:27 > > > vmutil > > Ready; T=0.01/0.01 10:25:41 > > vmutil > > Ready; T=0.01/0.01 10:25:44 > > vmutil > > Ready; T=0.01/0.01 10:25:44 > > vmutil > > Ready; T=0.01/0.01 10:25:45 > > ** ** > > Any way to avoid missing this first MSG? > > ** ** > > Fra
Re: DASD utilization question
Linux and CMS use disks completely differently..Linux will use a minidisk as a partition either directly (such as /dev/dasda1 being mounted as a filesystem) -- or as part of an LVM volume group. It also may not use the minidisk at all.. On Linux -- a 'df -h' command should show you usage of the mounted filesystems. To relate that to a minidisk is possible if the minidisk is a single partition and mounted -- but much more difficult if it's part of an LVM volume group. There are various commands you can issue from Linux to figure it all out: - lsdasd tells you what minidisk address is assigned to which dasd device (e.g. dasda, dasdb, etc) - vgdisplay -v will lists what dasd partitions make are part of a volume group Relate those things to what 'df' shows and you can 'maybe' figure out how full each disk is.. but I would not approach it this way... You want to view usage at the Linux level - and not the physical disk level. The way CMS uses disks, it makes sense -- but Linux can use them in a variety of ways. Scott Rohling On Wed, Aug 3, 2011 at 6:30 PM, Ticona, Luis wrote: > Is there any tool that will allow me to display zVM DASD utilization. > > > I am trying to get similar to the below information but from a zLINUX > server running as a guest under zVM 5.4. > > ** ** > > q > disk > > > LABEL VDEV M STAT CYL TYPE BLKSZ FILES BLKS USED-(%) BLKS LEFT BLK > TOTAL > > MNT191 191 A R/W 175 3390 4096 254 8934-28 22566 > 31500 > > MNT5E5 5E5 B R/W 9 3390 4096 131 1290-80330 > 1620 > > MNT2CC 2CC C R/W 5 3390 4096 60407-45 > 493900 > > MNT51D 51D D R/W26 3390 4096 306 1575-34 3105 > 4680 > > MNT193 193 H R/W 167 3390 4096 1093 21035-70 9025 > 30060 > > MNT190 190 S R/O 100 3390 4096 691 14921-83 3079 > 18000 > > MNT19E 19E Y/S R/O 250 3390 4096 1021 28225-63 16775 > 45000 > > Ready; T=0.01/0.01 20:19:56 > > ** ** > > ** ** > > I go into one of our zLinux servers running under zVM 5.4 and did the same > display command and the only thing I received is just > > Information about their label, vdev, mode. The stat column information was > only OS. Didn’t get info for the files, used-(%), blks left and blk total > columns. > > The volumes in this server are 3390-27. > > ** ** > > The last thing I will attempt to do is dump these dasd to tape using > INNOVATION FDRABR and then get the information about the tracks being dumped > from the small report after the JCL job output is completed. > > ** ** > > Thank you; > > > > ** ** > > *Luis Ticona* > > Management Information Systems Division > > 1 Police Plaza > > New York, NY 10038 > > ** ** > > ltic...@nypd.org or 646-610-5304 > > ** ** > > [image: cid:image001.gif@01C911AB.7C344550] > > ** ** >
Re: Time off running z/VM 5.4 1101 on z196 for first time
I tried not to - but this made me laugh very loud... Scott Rohling On Tue, Aug 2, 2011 at 3:40 PM, Mark Post wrote: > >>> On 8/2/2011 at 02:54 PM, David Boyes wrote: > > How come Z hardware doesn't come with one of these? 8-) > > Because it costs less than $100? > > > Mark Post >
Re: anyone running ILMT?
I always hate it when someone answers my last question and blows off the first :-) Scott Rohling On Tue, Aug 2, 2011 at 3:19 PM, Marcy Cortes wrote: > Here is one answer: > > Q. What is the rationale behind installing the agent into "/var"? > Indications are that it is possible to modify the default installation > location. Is this advisable? > Ans. > === > Recommend to keep the default location BUT you can change the default > locations. > > > > > > Marcy > > -Original Message- > From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On > Behalf Of Alan Altmark > Sent: Tuesday, August 02, 2011 1:06 PM > To: IBMVM@LISTSERV.UARK.EDU > Subject: Re: [IBMVM] anyone running ILMT? > > On Tuesday, 08/02/2011 at 03:43 EDT, David Boyes > wrote: > > > however there are two files that are > > > placed in /etc (tlmagent.ini and tlmlog.properties). > > > > Ditto here -- c'mon, IBM. /etc/tlm, not just dumping them in /etc. > > The part of IBM that might react to that doesn't hang out here. If anyone > doesn't like the installation or configuration process for ILMT, open a > PMR to register your dissatisfaction. > > Alan Altmark > > Senior Managing z/VM and Linux Consultant > IBM System Lab Services and Training > ibm.com/systems/services/labservices > office: 607.429.3323 > mobile; 607.321.7556 > alan_altm...@us.ibm.com > IBM Endicott >
Re: CMS Utilities AUDITOR and VMUTIL
Just a thought.. You could have a TIMES entry on VMUTIL that wakes up each minute and does nothing.. (or something simple like Q TIME) -- the timestamp of the TIMES file could be checked by AUDITOR -- if it hasn't been updated in the last minute - then suspect it is down and recycle. Scott Rohling On Tue, Aug 2, 2011 at 10:12 AM, Frank M. Ramaekers wrote: > ** ** ** ** ** ** > > I had an incident where VMUTIL abended, but AUDITOR didn’t detect it: > > ** ** > > DMSFRO159E Insufficient storage available to satisfy free storage request > from 01139EFE > > DMSMOD109S Virtual storage capacity > exceeded > > PIPCOM1296I ABEND in CMS command. Last 2 lines of output > follow. > > PIPMSG003I ... Issued from stage 2 of pipeline > 1. > > PIPMSG001I ... Running > "CMS". > > PIPASY727I DMSLIO201W The following names are > undefined:. > > PIPASY727I > CEEEV003. > > > : > > : > > ** ** > > The AUDITOR CONTROL file has: > > ** ** > > ** > ** > > * AUDITOR CONTROL ** > ** > > * CMS UTILITIES@VRA8AWY ** > ** > > ** > ** > > ** > ** > > ** > ** > > * MACHINE TESTAUTO FORCE TEST MAX NOTIFY ** > ** > > * ID INTERVAL LOG &AUTO EXIT ERRS USERID ** > ** > > ** > ** > > : > > : > > VMUTIL 00:05:00 1 1 NONE 10 MAINT ** > ** > > ** ** > > Perhaps, I need a TEST EXIT, but I’m not sure how to test that VMUTIL is > operating properly. > > ** ** > > Ideas? > > ** ** > > Frank M. Ramaekers Jr. > > ** ** > > > > Systems Programmer > > MCP, MCP+I, MCSE & RHCE > > ** ** > > American Income Life Insurance Co. > > Phone: (254)761-6649 > > ** ** > > 1200 Wooded Acres Dr. > > Fax: (254)741-5777 > > ** ** > > Waco**, **Texas** **76701 > > ** ** > > ** ** > > ** ** > > ** ** > _ This message > contains information which is privileged and confidential and is solely for > the use of the intended recipient. If you are not the intended recipient, be > aware that any review, disclosure, copying, distribution, or use of the > contents of this message is strictly prohibited. If you have received this > in error, please destroy it immediately and notify us at > privacy...@ailife.com. >
Re: MONVU REXX required but not packaged?
I believe Bill's MONVIEW package has MONVU REXX: http://www.vm.ibm.com/download/packages/descript.cgi?MONVIEW Scott Rohling On Mon, Aug 1, 2011 at 12:36 PM, Daniel Bewley wrote: > Anyone out there who can guide me to a package for or including this? I > downloaded the REORDMON archive from the z/VM package collection, and it > lists this as included in the readme, but it is not there. Likewise, I > cannot find any reference to it in other packages. > > Thanks, > Daniel Bewley >
Re: Time off running z/VM 5.4 1101 on z196 for first time
Did you set the clock when you IPL'd z/VM? Scott Rohling On Fri, Jul 29, 2011 at 5:09 PM, Martin, Terry R. (CMS/CTR) (CTR) < terry.mar...@cms.hhs.gov> wrote: > Hi > > ** ** > > We are getting ready to migrate to a z196 from our z10. We brought a z/VM > 5.4 system up on the z196 for the first time today. We noticed that > > the clock on the VM system was off by 4 hours and 4 minutes (showed as 7AM > when it was 11:04). > > ** ** > > We did not make any changes to the TIMEZONE settings. > > ** ** > > Thanks > > ** ** > > ** ** > > ** ** > > *Thank You,* > > * * > > *Terry Martin* > > *Lockheed Martin* > > *CMS - CITIC* > > *3300 Lord Baltimore Drive, Suite 200, 21244 > **Engineering Computing* > > *Mainframe Support* > > *Cell - 443 632-4191* > > * * > > ** ** >
Re: VM to zLinux Remote Execution
On Fri, Jul 22, 2011 at 4:08 PM, Marcy Cortes wrote: > Another option would be a CP SEND command from a VM user that was SECUSER > to the linux console. You have to alter /etc/inittab to have root logged in > at boot. It makes security auditors drool and convulse if you do that.. an open console with root access. So anyone with SEND priv can be root. REXEC at least does authentication (unencrypted though it may be) This 'is' a nice simple way to talk to a local Linux from CMS in a pinch though.. you will need an EXEC to do the CP SEND so that Address Command can be used and not have it all uppercased. (and set secuser or observer to see the output). I've done this on occasion to diagnose or fix network issues when we can't get in via ssh. But I normally 'login' using the same method (send root - send password -- which glows like a theatre marquee on your own console) - rather than have root logged in automatically. Then start sending commands -- then finish with 'exit'. You also need to know the root (or other user) password though, which you don't if root is automatically logged in. This also (obviously) does not work 'remote' -- only when on the same lpar. I think I've used up my parentheses quota.. Scott Rohling > > > > > Marcy. Sent from my BlackBerry. > > > - Original Message - > From: Davis, Larry (National VM/VSE Capability) [mailto: > larry.dav...@hp.com] > Sent: Friday, July 22, 2011 04:36 PM > To: IBMVM@LISTSERV.UARK.EDU > Subject: Re: [IBMVM] VM to zLinux Remote Execution > > Glad to here > > > Larry Davis > > > -Original Message- > From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On > Behalf Of Tom Duerbusch > Sent: Friday, July 22, 2011 5:26 PM > To: IBMVM@LISTSERV.UARK.EDU > Subject: Re: VM to zLinux Remote Execution > > How about that. It is there, just like you said. > I kept looking for REXEC(D) in the Network Service Configuration panel. > Then opening port 512 in the firewall of the Linux machine. > > And then adding the client machine (VM) to HOSTNAMES on Linux solved the > security problem. > > However, I didn't have to install anything. tcpd was already there in SLES > 11 SP 1. But that could have been due to the "patterns" I selected at > install time. > > So everything is working finefor now. > > Thanks > > Tom Duerbusch > THD Consulting > > >>> "Davis, Larry (National VM/VSE Capability)" > 7/22/2011 1:07 PM >>> > The service is called "exec" in xinetd and it is located in /usr/sbin/tcpd > I had to install it from the repository it was not there by default. > Try looking for exec or tcpd in the repository > > Larry Davis > > > -Original Message- > From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On > Behalf Of Tom Duerbusch > Sent: Friday, July 22, 2011 2:02 PM > To: IBMVM@LISTSERV.UARK.EDU > Subject: Re: VM to zLinux Remote Execution > > I've searched for the basic REXEC daemon for zSeries SLES 11, but I > couldn't find anything. I could have been looking in the wrong place. > > Tom Duerbusch > THD Consulting > > >>> "Davis, Larry (National VM/VSE Capability)" > 7/22/2011 12:34 PM >>> > REXEC is available in Linux but you will get Auditors screaming about it. > We got a wavier at our site. > You can use IPTABLES to restrict REXEC access from/to certain systems. > > Larry Davis > > > -Original Message- > From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On > Behalf Of Tom Duerbusch > Sent: Friday, July 22, 2011 1:32 PM > To: IBMVM@LISTSERV.UARK.EDU > Subject: VM to zLinux Remote Execution > > I'm trying to remotely execute a command with CMS as the client and SLES 11 > SP 1 as the server. > > All documentation I've found so far, shows how to do it from Linux to VM. > > Apparently the problem is, TCPIP for VM only has the unsecured REXEC client > and SLES 11 only has a secured sshd. > > I've searched the VM download page for a ssh client. > I've done some Linux searches for how to dumb down sshd (i.e. to allow > unsecured transfers). > > Of course, there might be program products available, but unless they would > be zero cost products, it's not going to happen in the short term. > > Thanks for any help > > Tom Duerbusch > THD Consulting > (Still on z/VM 5.2) >
Re: Capturing response from SCS
It's a plumbing thing .. HELP PIPE COMMIT ..
commit 0 requests that the commit level of the TCOMMT stage be raised to
0. The TCOMMT stage is then suspended until all the other stages in the
pipeline have committed at least to level 0 or have ended. The return code
from COMMIT is then set to the current aggregate code.
That explains it - right? ;-)
Scott Rohling
On Wed, Jul 20, 2011 at 2:34 PM, Fran Hensler wrote:
> What is line 78 supposed to do?
> 'Commit 0' /* hot to trot */
>
> /Fran Hensler at Slippery Rock University of Pennsylvania USA for 48 years
>mailto:f...@zvm.sru.edu http://zvm.sru.edu/~fjh +1.724.794.6172
> "Yes, Virginia, there is a Slippery Rock"
> --
> On Wed, 20 Jul 2011 10:27:15 -0700 Michael Harding said:
> >Okay, as long as we're posting code...
> >My version is a bit more generic, but also takes into account that it
> might
> >be issued from a SECUSER-ed disconnected id.
> >
> >/*
> >** SMSG's an arbitrary target SVM, captures responses and inserts
> >** into the pipeline.
> >*/
> >Parse Upper arg tgtmach what '(' opts ')' ignored
> >Call InitRtn
> >'CallPipe (Name GetSMsgResp End ?)',
> > 'Literal' timeout_value,
> > '|Delay',
> > '|stopper:Faninany',
> > '|xx:Gate',
> > '?',
> > 'Starmsg *MSG CP SMSG' tgtmach what ||,
> > '|xx:',
> > '|ours:Find 0001' || Left(tgtmach,8,'_') ||,
> > '|dec:Fanout',
> > '|Take 1',
> > '|Spec /' || msg_wait || '/ 1',
> > '|Elastic',
> > '|Delay',
> > '|stopper:',
> > '?dec:',
> > '|Spec 17-* n',
> > '|*:',
> > '?ours:',
> > '|obnd:Pick 17.10 == /HCPMSG045E/',
> > '|Elastic',
> > '|stopper:',
> > '?obnd:',
> > '|Spec /From/ 1 9.8 strip nw /:/ n 17-* nw',
> > '|Cons'
> >Call CleanUp
> >Exit xRc
> >InitRtn:
> >timeout_value = '+20';msg_wait='+1'
> >what = Strip(what)
> >Parse value Diag(8,'Q SET') with . 'MSG' wasmsg . 'CPCONIO' wascpcio .
> >wasmsg = Strip(wasmsg,'T',',')
> >wascpcio = Strip(wascpcio,'T',',')
> >iRc = 0
> >popts=''
> >Do while opts <> ''
> > Parse var opts opt opts
> > Select
> > When Abbrev('TIMEOUT',opt,1) |,
> > Abbrev('DELAY',opt,3) then Do
> >Parse var opts timeout_value opts
> >If Pos('.',timeout_value)=1 then
> > timeout_value='0'timeout_value
> > timeout_value = '+' || timeout_value
> > End
> > When Abbrev('WAITCONT',opt,1) |,
> > Abbrev('WAITON',opt,1) then Do
> > Parse var opts msg_wait opts
> > If pos('.',msg_wait)=1 then msg_wait='0'msg_wait
> > msg_wait = '+' || msg_wait
> > End
> > Otherwise popts = Strip(popts opt)
> > End /* select */
> >End
> > If popts<>'' then what = what'('popts')'
> > If iRc <> 0 then Exit iRc
> > /*>---<*>---<*>---<*>---<*>---<*>---<*/
> > /* Ensure secuser isn't directing msgs elsewhere */
> > /*>---<*>---<*>---<*>---<*>---<*>---<*/
> > dscd = Word(Diag(8,'Q CONS'),3) == 'DISCONNECTED'
> > If dscd then Do
> >Parse value DiagRc(8,'Q PRIV') with . '15'x . ':' myprivs . '15'x
> >If Verify(myprivs,'AC','M')>0 then do_me = '*'
> >Else do_me = ''
> >Parse value DiagRc(8,'Q SECUSER *'),
> > with . '15'x . '15'x suinfo '15'x
> >Parse var suinfo . whoisit .
> >If whoisit<>'not'
> > then Parse value DiagRc(8,'SET SECUSER' do_me 'OFF') with .
> >Else whoisit = ''
> >End
> > 'Commit 0' /* hot to trot */
> > x=Diag(8,'SET MSG IUCV' || '15'x || 'SET CPCONIO IUCV')
> > Return
> >
> > CleanUp:
> > xRc = Rc
> > x = Diag(8,'SET MSG' wasmsg || '15'x || 'SET CPCONIO' wascpcio)
> > If dscd then if whoisit<>''
> >then Parse value Diag(8,'SET SECUSER' do_me whoisit) with .
> > Return
> >
>
Re: REXEC and RXAGENT1
Well - I dug a bit deeper - looked at TCPRUN EXEC, etc..:type. and .class do seem to be required to modify server entries. In fact - the section in TCPIP Planning and Admin section on 'Customizing Servers' shows several examples all specify :type and :class. I think where we both were confused is in Step 2 of 'Configuring the REXEC Server'.. it shows what looks like a :nickname entry, but is actually a list of tags that are recognized for REXEC. To modify those tags, you still need to create an entry using :nick, :type, and :class. So - not a bug.. maybe a candidate for a reader comment? It's spelled out in the 'DTCPARMS File Format' section that: Every entry must include either a :Type.Server or a :Type.Class definition. Entries that define a server using a :Type.Server definition must also include a :Class. tag and value to identify the class to which that server belongs. It certainly slipped by me though in looking at your DTCPARMS entry! Scott Rohling On Fri, Jul 15, 2011 at 5:01 PM, Scott Rohling wrote: > Hmmph.. we didn't have REXECD enabled on my test system -- so I did so .. > and added the :nick.REXECD tag with Anonymous.YES to SYSTEM DTCPARMS. > > What I see on a debug is much like yours - but also with this: > > +++ Lookup_Details.OUT > $ParmFile_Serve = IBM DTCPARMS E1 > $ParmFile_Class = IBM DTCPARMS E1 > +++ Lookup_Details.OUT > $ParmFile_Serve = IBM DTCPARMS E1 > $ParmFile_Class = IBM DTCPARMS E1 > > Like you - my SYSTEM DTCPARMS is on D.. so it doesn't appear it's using > it. > > > The NAME SEARCH debug info got me thinking.. So I did this in my SYSTEM > DTCPARMS: > > :Nick.REXECD :Type.Server :Class.rexec > :Parms.-d > :Anonymous.YES > :ESM_Enable. > :ESM_Validate. > > Note that I added :Type.Server and :class.rexec > > Once I did this -- voila -- it found my entry in SYSTEM DTCPARMS, started > up RXAGENT1 and was happy. Even the -d parm was honored and I get more > debug info from rexec itself. > > So - this looks like bug - either doc or code...but try changing your > :Nick.REXECD to include type and class. > > The NAMES file search seems to be looking for both the nickname AND the > Type tag. To specify :type - you also have to specify :class.I'm > guessing it should be searching on just :Nick.. and this is a workaround. > > Hope this helps.. please open a PMR! > > Scott Rohling > > > > On Fri, Jul 15, 2011 at 4:08 PM, Tom Duerbusch > wrote: > >> I only have two of them, SYSTEM and IBM. I'm updating SYSTEM. >> It is on the D drive for user REXECD which is above the E drive where the >> IBM is. >> >> But that got me looking at the IBM on. >> That set of parms are different then what is on the SYSTEM on. >> >> The subset of the IBM one is: >> >> :nick.REXECD:type.server :class.rexec >> :nick.RXAGENT1 :type.server :class.rexec_agent :for.REXECD >> >> >> .*== >> .* Remote Execution (REXEC) and Remote Shell (RSH) daemon >> .*-- >> :nick.rexec :type.class >> :name.Remote Execution daemon >> :command.REXECD >> :runtime.C >> >> :anonymous.NO >> >> :ESM_Enable.NO >> :ESM_Validate.RPIVAL >> :ESM_Racroute.RPIUCMS >> >> .*== >> .* Anonymous Remote Execution (REXEC) and Remote Shell (RSH) agents >> .*-- >> :nick.rexec_agent >> :type.class >> :name.Anonymous Remote Execution agent >> :command.RXSNDIU >> :runtime.C >> >> My SYSTEM one only has: >> >> :Nick.REXECD >> :Parms. >> :Anonymous.YES >> :ESM_Enable. >> :ESM_Validate. >> >> :Nick.RXAGENT1 :type.server :class.rexec_agent >> :For.REXECD >> >> :Nick.RXAGENT2 :type.server :class.rexec_agent >> :For.REXECD >> >> >> Looking at the output from debug, it sure looks like I'm picking up the >> IBM DTCPARMS. >> But based on other items in my SYSTEM DTCPARMS file, I know that it is, >> being executed. >> >> Tom Duerbusch >> THD Consulting >> >> >>> Scott Rohling 7/15/2011 4:52 PM >>> >> Which DTCPARMS are you updating?Is a 'lower level' one perhaps >> overriding?The or
Re: REXEC and RXAGENT1
Hmmph.. we didn't have REXECD enabled on my test system -- so I did so .. and added the :nick.REXECD tag with Anonymous.YES to SYSTEM DTCPARMS. What I see on a debug is much like yours - but also with this: +++ Lookup_Details.OUT $ParmFile_Serve = IBM DTCPARMS E1 $ParmFile_Class = IBM DTCPARMS E1 +++ Lookup_Details.OUT $ParmFile_Serve = IBM DTCPARMS E1 $ParmFile_Class = IBM DTCPARMS E1 Like you - my SYSTEM DTCPARMS is on D.. so it doesn't appear it's using it. The NAME SEARCH debug info got me thinking.. So I did this in my SYSTEM DTCPARMS: :Nick.REXECD :Type.Server :Class.rexec :Parms.-d :Anonymous.YES :ESM_Enable. :ESM_Validate. Note that I added :Type.Server and :class.rexec Once I did this -- voila -- it found my entry in SYSTEM DTCPARMS, started up RXAGENT1 and was happy. Even the -d parm was honored and I get more debug info from rexec itself. So - this looks like bug - either doc or code...but try changing your :Nick.REXECD to include type and class. The NAMES file search seems to be looking for both the nickname AND the Type tag. To specify :type - you also have to specify :class.I'm guessing it should be searching on just :Nick.. and this is a workaround. Hope this helps.. please open a PMR! Scott Rohling On Fri, Jul 15, 2011 at 4:08 PM, Tom Duerbusch wrote: > I only have two of them, SYSTEM and IBM. I'm updating SYSTEM. > It is on the D drive for user REXECD which is above the E drive where the > IBM is. > > But that got me looking at the IBM on. > That set of parms are different then what is on the SYSTEM on. > > The subset of the IBM one is: > > :nick.REXECD:type.server :class.rexec > :nick.RXAGENT1 :type.server :class.rexec_agent :for.REXECD > > > .*== > .* Remote Execution (REXEC) and Remote Shell (RSH) daemon > .*-- > :nick.rexec :type.class > :name.Remote Execution daemon > :command.REXECD > :runtime.C > > :anonymous.NO > > :ESM_Enable.NO > :ESM_Validate.RPIVAL > :ESM_Racroute.RPIUCMS > > .*== > .* Anonymous Remote Execution (REXEC) and Remote Shell (RSH) agents > .*-- > :nick.rexec_agent > :type.class > :name.Anonymous Remote Execution agent > :command.RXSNDIU > :runtime.C > > My SYSTEM one only has: > > :Nick.REXECD > :Parms. > :Anonymous.YES > :ESM_Enable. > :ESM_Validate. > > :Nick.RXAGENT1 :type.server :class.rexec_agent > :For.REXECD > > :Nick.RXAGENT2 :type.server :class.rexec_agent > :For.REXECD > > > Looking at the output from debug, it sure looks like I'm picking up the IBM > DTCPARMS. > But based on other items in my SYSTEM DTCPARMS file, I know that it is, > being executed. > > Tom Duerbusch > THD Consulting > > >>> Scott Rohling 7/15/2011 4:52 PM >>> > Which DTCPARMS are you updating?Is a 'lower level' one perhaps > overriding?The order is userid, nodeid, SYSTEM, and lastly IBM DTCPARMS > which should not be touched. > > Scott Rohling > > On Fri, Jul 15, 2011 at 3:11 PM, Tom Duerbusch > wrote: > > > OK, got it. > > > > For REXECD: > > > > 'Access 198 D' > > 'Access 591 E' > > 'Access 592 F' > > QUEUE "EXEC TCPRUN (DEBUG" > > > > > > TCPRUN DEBUG: > > > > TCPRUN Level = 520 > > TIME IS 15:55:07 CDT FRIDAY 07/15/11 > > CONNECT= 00:14:44 VIRTCPU= 000:00.27 TOTCPU= 000:00.35 > > z/VM Version 5 Release 2.0, service level 0602 (64-bit) > > Generated at 09/18/06 18:39:52 CDT > > IPL at 08/08/10 16:51:42 CDT > > USERID=REXECD MACH=XA STOR=32M VIRT=V XSTORE=NONE > > IPLSYS=CMS DEVNUM=00016 > > CMS Level 22, Service Level 602 > > -- > > +++ GetInternetData > > $TCPhost= STLMP11 > > $TCPstack = TCPIP > > DTCRUN1022I Console log will be sent to default owner ID: TCPMAINT > > +++ Lookup_Details.IN > > How = BYUSER > > Search_Value= > > +++ Namesearch: > > Target = :NICK REXECD :TYPE SERVER > > NFopts = > > $SearchResults. = @NICK REXECD > >@TYPE SERVER > >@CLASS REXEC > > +++ Lookup_Details.IN > > How = BYCLASS >
Re: REXEC and RXAGENT1
Which DTCPARMS are you updating?Is a 'lower level' one perhaps overriding?The order is userid, nodeid, SYSTEM, and lastly IBM DTCPARMS which should not be touched. Scott Rohling On Fri, Jul 15, 2011 at 3:11 PM, Tom Duerbusch wrote: > OK, got it. > > For REXECD: > > 'Access 198 D' > 'Access 591 E' > 'Access 592 F' > QUEUE "EXEC TCPRUN (DEBUG" > > > TCPRUN DEBUG: > > TCPRUN Level = 520 > TIME IS 15:55:07 CDT FRIDAY 07/15/11 > CONNECT= 00:14:44 VIRTCPU= 000:00.27 TOTCPU= 000:00.35 > z/VM Version 5 Release 2.0, service level 0602 (64-bit) > Generated at 09/18/06 18:39:52 CDT > IPL at 08/08/10 16:51:42 CDT > USERID=REXECD MACH=XA STOR=32M VIRT=V XSTORE=NONE > IPLSYS=CMS DEVNUM=00016 > CMS Level 22, Service Level 602 > -- > +++ GetInternetData > $TCPhost= STLMP11 > $TCPstack = TCPIP > DTCRUN1022I Console log will be sent to default owner ID: TCPMAINT > +++ Lookup_Details.IN > How = BYUSER > Search_Value= > +++ Namesearch: > Target = :NICK REXECD :TYPE SERVER > NFopts = > $SearchResults. = @NICK REXECD >@TYPE SERVER >@CLASS REXEC > +++ Lookup_Details.IN > How = BYCLASS > Search_Value= REXEC > +++ Namesearch: > Target = :NICK REXEC :TYPE CLASS > NFopts = > $SearchResults. = @NICK REXEC >@TYPE CLASS >@NAME Remote Execution daemon >@COMMAND REXECD >@RUNTIME C >@ANONYMOUS NO >@ESM_ENABLE NO >@ESM_VALIDATE RPIVAL >@ESM_RACROUTE RPIUCMS > +++ Lookup_Details.OUT > +++ Lookup_Details.OUT > +++ Query_Write > @Diskwarn = NO > pctneed = NO > fm = > DTCRUN1021R To cancel Remote Execution daemon startup, type any non-blan >character and press ENTER. To continue startup, just press E > DTCRUN1011I Server started at 15:55:08 on 15 Jul 2011 (Friday) > DTCRUN1011I Running "REXECD" > > > OK, now I see the problem "@ANONYMOUS NO ", so back to the DTCPARMS: > > :nick.REXECD > :Parms. > :Anonymous.yes > :ESM_Enable. > :ESM_Validate. > > :Nick.RXAGENT1 :type.server :class.rexec_agent > :For.REXECD > > :Nick.RXAGENT2 :type.server :class.rexec_agent > :For.REXECD > > What is wrong with my :Anonymous.yes? > > Tom Duerbusch > THD Consulting > > >>> Alan Altmark 7/15/2011 3:45 PM >>> > On Friday, 07/15/2011 at 04:42 EDT, Tom Duerbusch > wrote: > > This is what I get with debug on: > > > > rexec -d -l guest -p guest 205.235.227.74 cp ind > > REXEC Level 520, Internal version id MT04091 > > parms is -d -l guest -p guest 205.235.227.74 ind > > Not seeing TCPRUN output created by (DEBUG option on TCPRUN. Looking for > REXECD initialization. > > Alan Altmark > > Senior Managing z/VM and Linux Consultant > IBM System Lab Services and Training > ibm.com/systems/services/labservices > office: 607.429.3323 > mobile; 607.321.7556 > alan_altm...@us.ibm.com > IBM Endicott >
Re: REXEC and RXAGENT1
re: using particular user .. yes - it would be much more efficient to do the list of commands in a REXX script on the host rather than issuing 'rexec' for each, if that's all the client is doing. Ideally - a single command (pass parms to effect behavior) is all you want to issue with the rexec client to accomplish a particular task. re: agents ..as Alan says - we want to see the debug on the REXECD server -- to try and see why agents aren't getting started. Hoping to find a clue as to why they aren't. Scott Rohling On Fri, Jul 15, 2011 at 2:42 PM, Tom Duerbusch wrote: > I duplicated the RXAGENT1 to make the RXAGENT2 in the directory and added > the info in the DTCPARMS. > > They do have the LINK REXECD 191 191 RR in the directory. > > When I force REXECD, TCPIP automatically brings it back up. No attempt is > made to bring up the agents. > > The only problem I have with using REXECD with a particular user, which is > solved by using the agents, is that I have a list of commands that I'm > sending off to be executed and some of them fail with "Unable to autolog > user" message. In other words, the machine didn't finish logging off before > the next remote command was being issued. I might bypass this problem by > executing a rexx program instead of individual commands. > > Tom Duerbusch > THD Consulting > > >>> Scott Rohling 7/15/2011 3:01 PM >>> > Only RXAGENT1 is supplied .. which makes me then wonder if these agents > are built as they should be -- doing a LINK REXECD 191 191 RR for their A > disk, etc? Did you model RXAGENT2 on 1? What you show seems correct.. > so > searching for clues :) Does the REXECD console show it is attempting to > start -- any error msgs? Is RACF installed - if so, is REXECD authorized > to autolog? > > These agent ids are only for anonymous requests.. any trouble using REXECD > for a particular user? > > Just a note that don't set SECUSER on these guests to watch -- you'll mess > up the message interactivity between them. > > Any errors at all you are seeing would be good clues.. > > Scott Rohling > > On Fri, Jul 15, 2011 at 1:43 PM, Tom Duerbusch > wrote: > > > I'm having a brain check. > > > > I've enabled REXEC which is working well. > > And I thing I enabled the server machines RXAGENT1 and RXAGENT2. > > > > How I read the documentation, both these agent machines should fire up > when > > the REXECD server is started. > > My agent machines don't automatically start. > > And when I try to send a command to the guest server, I get back a > message > > about an agent server not being available. > > > > My DTCPARMs seem to be correct: > > > > :nick.REXECD > > :Parms. > > :Anonymous.yes > > :ESM_Enable. > > :ESM_Validate. > > > > :Nick.RXAGENT1 :type.server :class.rexec_agent > > :For.REXECD > > > > :Nick.RXAGENT2 :type.server :class.rexec_agent > > :For.REXECD > > > > I don't see anything in the TCPIP configuration file about the RXAGENTx > > machines. > > > > Just what am I missing? > > > > Tom Duerbusch > > THD Consulting > > (Sorry officer. I just thought you wanted to race) > > >
Re: REXEC and RXAGENT1
Only RXAGENT1 is supplied .. which makes me then wonder if these agents are built as they should be -- doing a LINK REXECD 191 191 RR for their A disk, etc? Did you model RXAGENT2 on 1? What you show seems correct.. so searching for clues :) Does the REXECD console show it is attempting to start -- any error msgs? Is RACF installed - if so, is REXECD authorized to autolog? These agent ids are only for anonymous requests.. any trouble using REXECD for a particular user? Just a note that don't set SECUSER on these guests to watch -- you'll mess up the message interactivity between them. Any errors at all you are seeing would be good clues.. Scott Rohling On Fri, Jul 15, 2011 at 1:43 PM, Tom Duerbusch wrote: > I'm having a brain check. > > I've enabled REXEC which is working well. > And I thing I enabled the server machines RXAGENT1 and RXAGENT2. > > How I read the documentation, both these agent machines should fire up when > the REXECD server is started. > My agent machines don't automatically start. > And when I try to send a command to the guest server, I get back a message > about an agent server not being available. > > My DTCPARMs seem to be correct: > > :nick.REXECD > :Parms. > :Anonymous.yes > :ESM_Enable. > :ESM_Validate. > > :Nick.RXAGENT1 :type.server :class.rexec_agent > :For.REXECD > > :Nick.RXAGENT2 :type.server :class.rexec_agent > :For.REXECD > > I don't see anything in the TCPIP configuration file about the RXAGENTx > machines. > > Just what am I missing? > > Tom Duerbusch > THD Consulting > (Sorry officer. I just thought you wanted to race) >
Re: DIRMAINT Cleanup
You can attempt to cancel the workunits.. DIRM WORKUNIT ww CANCEL. You should see what the status is first:DIRM STATUS WORKUNIT ALL. DIRM STATUS DATAMOVE will show whether there are pending requests. DIRM STATUS WORKUNIT FAIL will show you workunits that failed (and you can look at the WUCFFAIL files on DIRMAINT 1DF to see what may have happened). In then end if all looks well and you simply want DATAMOVE to release the disks - you can do a DIRM GET/REPLACE on DATAMOVE and remove the MDISK entries (and recycle DATAMOVE).. but this is usually a very last resort. Scott Rohling On Fri, Jul 15, 2011 at 9:28 AM, Vogtmann, Wallace B wrote: > I'm having an issue with "cleaning up" after some DIRMAINT / RACF issues - > not all of the > correct RACF rules existed and caused some issues. > > We now (think we) have RACF resolved and I'm trying to clean-up DIRMAINT. > The main > issue is with the MDisk items that were being created/changed at the time. > As you can see > below, the mdisk map shows overlaps - the two DATAMOVE items. > > The NOVSTART values are correct and working, so how do I remove the > DATAMOVE entries? > DIRMAINT doesn't seem to have any outstanding work to do, but... > > > LXY000 3390 0 0 1 Gap > NOVSTART 0191 * 1 5 5 > NOVSTART 019F * 6 55 50 > NOVSTART 0150 *56 3338 3283 > Overlap > DATAMOVE 0100 *57 3339 3283 > Overlap > NOVSTART 0151 * 3339 6676 3338 > Overlap > DATAMOVE 0101 * 3340 6677 3338 >6678 10016 3339 Gap > > - Wally Vogtmann > - Technical Services > - wvogt...@tcfbank.com > > Disclaimer > This email may contain privileged and/or confidential information that > is intended solely for the use of the addressee. If you are not the > intended recipient, you are strictly prohibited from disclosing, copying, > distributing or using any of the information contained in the transmission. > If you received this communication in error, please contact the sender > (“Company”) immediately and destroy the material in its entirety, > including all electronic and hard copies. > > This communication may contain nonpublic personal information about > consumers which is subject to restrictions under the Gramm-Leach-Bliley > Act and the Sarbanes-Oxley Act. You may not directly or indirectly reuse > or disclose such nonpublic personal information for any purpose other than > to provide the services for which you are receiving the information. > > There are risks associated with the use of electronic transmission. The > sender of this information does not control the method of transmittal or > any service providers and the sender assumes no duty, liability, or > obligation for the security, receipt, or any third party interception of > this transmission. > > The Company reserves the right to amend statements made herein in the event > of a mistake. Unless expressly stated herein to the contrary, only > agreements > in writing signed by an authorized officer of the Company may be enforced > against it. >
Re: z/VM network setup
It's hard to answer without knowing the network topology or security policies. z/VM can be on a different subnet or network than Linux (or of course the same one). I would say in general it's best to separate z/VM from Linux by either using a different OSA address or a different VSWITCH for TCPIP, but it really 'depends'. In terms of what I've seen implemented at various customers, I would say that typically z/VM uses an entirely different OSA (or vlan id if on same physical OSA) then the Linux guests. z/VM is typically on an 'admin' network which provides access to hosts internally.. Linux guests are typically on an entirely different network, which may feed into a DMZ or some kind of external network. Not sure this helps - I'm sure others have input that might.. Scott Rohling On Fri, Jul 15, 2011 at 5:53 AM, Lemuel Raciles Deza < lemuel.d...@riyadbank.com> wrote: > ** ** > > Hi to all, > > ** ** > > We’re soon to be a z/VM shop with LINUX as guests. We are looking to > implement VSWITCH layer2 support using OSA3. Is it recommended to share the > VSWITCH OSA with the TCPIP stack or use separate OSAs. Must they belong to > the same subnet or network? What would be the recommended best practices > design for z/VM network? > > ** ** > > All the help appreciated. > > ** ** > > Warm regards, > > Lemuel Deza > > ** ** > > ** ** > > This email and any files transmitted with it are confidential and intended > solely for the use of the individual or entity to whom they are addressed. > Please note that any views or opinions presented in this email are solely > those of the author and do not necessarily represent those of Riyad Bank. > Finally, the recipient should check this email and any attachments for the > presence of any viruses. Riyad Bank accepts no liability for any damage > caused by any virus / error transmitted by this email. > >
Re: CMSDDR failing
I'd definitely give PIPEDDR a try! Splitting up a minidisk sounds like extra steps you don't need to go through... If this is just a one time thing - I guess do whatever works. PIPEDDR is a lot more flexible though.. Scott Rohling On Tue, Jul 12, 2011 at 12:13 AM, Victor Ochoa Avila wrote: > Hi Wayne, I've used PIPEDDR in 10GB MDISK and work fine, no problem. > > Download the new version of here > > > http://www.vm.ibm.com/download/packages/ > > It is a great tool of Bruce Hayden. > > > Regards > > ATTE > > Victor Hugo Ochoa Avila > BBVA America > Mexico D.F > > 2011/7/11 Scott Rohling > >> Sorry -I meant that 512*2097152 = 1073741824 .. which is >> the real block count when starting at 0 >> >> Exactly 1 gigabyte... >> >> Scott Rohling >> >> >> On Mon, Jul 11, 2011 at 4:21 PM, Scott Rohling >> wrote: >> >>> I'm wondering if CMSDDR has some kind of internal limit of 1G.. I notice >>> that: >>> >>> >>> 512*2097151=1073741824(512 byte blocks) >>> 1024*1024*1024=1073741824 (1K cubed) >>> >>> Scott Rohling >>> >>> >>> >>> On Mon, Jul 11, 2011 at 4:06 PM, Smith, Wayne H Mr CTR DISA CDB12 < >>> wayne.smith@csd.disa.mil> wrote: >>> >>>> ** >>>> >>>> I’m having issues using CMSDDR. The output is copied below. Any >>>> thoughts? >>>> >>>> The device I’m CMSDDRing is an MDISK defined on an EDEV. The size of >>>> the MDISK is 17 gig. >>>> >>>> I **can** use CP DDR to copy the MDISK to another MDISK of equal size >>>> defined on the same EDEV. I ran CP DDR because the error message >>>> seemed to imply that there was an I/O error reading the input device(A497). >>>> CP DDR could read the entire MDISK so I believe the error message is >>>> misleading. >>>> >>>> A couple random pieces of information: >>>> >>>>- We are running z/VM 5.4; CMS Level 24, Service Level 002 >>>> >>>>- I’ve used CMSDDR to create CMS files from other smaller MDISKs >>>> defined on the same EDEV. >>>> >>>>- The MDISK on which I’m trying to create the new file is larger >>>> than the MDISK I’m trying to CMSDDR. >>>> >>>>- I’ve tried CMSDDR with a small and large (2 gig) virtual machine >>>> size. >>>> >>>>- The CMSDDR invocation which fails does create a file on the >>>> target MDISK. I believe it contains blocks 0-2097151. >>>> >>>> cmsddr dump a497 temp z >>>> >>>> z/VM DASD DUMP/RESTORE PROGRAM >>>> >>>> HCPDDR696I VOLID READ IS LXA497 NOT VOLSER >>>> >>>> DUMPING LXA497 >>>> >>>> DUMPING DATA 07/11/11 AT 20.42.35 GMT FROM LXA497 >>>> >>>> INPUT BLOCK EXTENTSOUTPUT BLOCK EXTENTS >>>> >>>>START STOP STARTSTOP >>>> >>>> HCPDDR705E I/O ERROR A497 IRB 000311D0 0E00 >>>> >>>> >>>> SNS 8000 0004 >>>> >>>> >>>> CCW 63031820 4010 >>>> >>>> INPUT 02097152 OUTPUT 02097152 >>>> >>>> 0209715102097151 >>>> >>>> END OF DUMP >>>> >>>> BYTES IN 1073829304 BYTES OUT 0020546574 >>>> >>>> BLOCKS NOT COMPACTED ON TAPE - 00 >>>> >>>> END OF JOB >>>> >>>> Ready(4); T=0.80/1.42 16:42:54 >>>> >>>> >>> >> > > > -- > Victor Hugo Ochoa Avila > z/OS & z/VM systems programmer > Mexico, City. >
Re: CMSDDR failing
This is what the 6.1 CMS Admin and Planning says: A single CMS file can contain up to approximately (231-1)-132,000 disk blocks of data, grouped into as many as 231-1 logical records, all of which must be on the same minidisk 2**31 = 2147483648So: (2147483648-1) - 132,000 = 2,147,351,647 With 512 byte blocks - this should be around 1TB ... though it depends on the logical record length.. Glad you found a workaround.. just trying to understand limits. Seems CMSDDR is likely the one with limits. Scott Rohling On Tue, Jul 12, 2011 at 7:48 AM, Smith, Wayne H Mr CTR DISA CDB12 < wayne.smith@csd.disa.mil> wrote: > I believe I've found a solution to my problem. I've defined 4 "small" > MDISK overlays on the 17G MDISK; each section can be CMSDDRed. I assume > I was running into some type of CMS file size restriction. I don't > really need to know what the restriction is/was. I can accomplish my > task by splitting up the MDISK. > > > > -Original Message- > From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On > Behalf Of Victor Ochoa Avila > Sent: Tuesday, July 12, 2011 2:14 > To: IBMVM@LISTSERV.UARK.EDU > Subject: Re: CMSDDR failing > > Hi Wayne, I've used PIPEDDR in 10GB MDISK and work fine, no problem. > > Download the new version of here > > > > http://www.vm.ibm.com/download/packages/ > > It is a great tool of Bruce Hayden. > > > Regards > > ATTE > > Victor Hugo Ochoa Avila > BBVA America > Mexico D.F > > > 2011/7/11 Scott Rohling > > >Sorry -I meant that 512*2097152 = 1073741824 .. > which is the real block count when starting at 0 > >Exactly 1 gigabyte... > > >Scott Rohling > > >On Mon, Jul 11, 2011 at 4:21 PM, Scott Rohling > wrote: > > >I'm wondering if CMSDDR has some kind of internal limit > of 1G.. I notice that: > > >512*2097151=1073741824(512 byte blocks) >1024*1024*1024=1073741824 (1K cubed) > >Scott Rohling > > > >On Mon, Jul 11, 2011 at 4:06 PM, Smith, Wayne H Mr CTR > DISA CDB12 wrote: > > > > >I'm having issues using CMSDDR. The output is > copied below. Any thoughts? > >The device I'm CMSDDRing is an MDISK defined on > an EDEV. The size of the MDISK is 17 gig. > >I *can* use CP DDR to copy the MDISK to another > MDISK of equal size defined on the same EDEV. I ran CP DDR because the > error message seemed to imply that there was an I/O error reading the > input device(A497). CP DDR could read the entire MDISK so I believe the > error message is misleading. > > > >A couple random pieces of information: > > - We are running z/VM 5.4; CMS Level 24, > Service Level 002 > > - I've used CMSDDR to create CMS files from > other smaller MDISKs defined on the same EDEV. > > - The MDISK on which I'm trying to create > the new file is larger than the MDISK I'm trying to CMSDDR. > > - I've tried CMSDDR with a small and large > (2 gig) virtual machine size. > > - The CMSDDR invocation which fails does > create a file on the target MDISK. I believe it contains blocks > 0-2097151. > > > >cmsddr dump a497 temp z > > > >z/VM DASD DUMP/RESTORE PROGRAM > >HCPDDR696I VOLID READ IS LXA497 NOT VOLSER > >DUMPING LXA497 > >DUMPING DATA 07/11/11 AT 20.42.35 GMT FROM > LXA497 > >INPUT BLOCK EXTENTSOUTPUT BLOCK > EXTENTS > > START STOP START > STOP > >HCPDDR705E I/O ERROR A497 IRB 000311D0 > 0E00 > >SNS 8000 0004 > > >CCW 63031820 4010 > >INPUT 02097152 OUTPUT 02097152 > > 02097151 > 02097151 > >END OF DUMP > > BYTES IN 1073829304 BYTES OUT 0020546574 > > BLOCKS NOT COMPACTED ON TAPE - 00 > >END OF JOB > >Ready(4); T=0.80/1.42 16:42:54 > > > > > > > > > -- > Victor Hugo Ochoa Avila > z/OS & z/VM systems programmer > Mexico, City. >
Re: CMSDDR failing
Sorry -I meant that 512*2097152 = 1073741824 .. which is the real block count when starting at 0 Exactly 1 gigabyte... Scott Rohling On Mon, Jul 11, 2011 at 4:21 PM, Scott Rohling wrote: > I'm wondering if CMSDDR has some kind of internal limit of 1G.. I notice > that: > > > 512*2097151=1073741824(512 byte blocks) > 1024*1024*1024=1073741824 (1K cubed) > > Scott Rohling > > > > On Mon, Jul 11, 2011 at 4:06 PM, Smith, Wayne H Mr CTR DISA CDB12 < > wayne.smith@csd.disa.mil> wrote: > >> ** >> >> I’m having issues using CMSDDR. The output is copied below. Any >> thoughts? >> >> The device I’m CMSDDRing is an MDISK defined on an EDEV. The size of the >> MDISK is 17 gig. >> >> I **can** use CP DDR to copy the MDISK to another MDISK of equal size >> defined on the same EDEV. I ran CP DDR because the error message seemed >> to imply that there was an I/O error reading the input device(A497). CP >> DDR could read the entire MDISK so I believe the error message is >> misleading. >> >> A couple random pieces of information: >> >>- We are running z/VM 5.4; CMS Level 24, Service Level 002 >> >>- I’ve used CMSDDR to create CMS files from other smaller MDISKs >> defined on the same EDEV. >> >>- The MDISK on which I’m trying to create the new file is larger than >> the MDISK I’m trying to CMSDDR. >> >>- I’ve tried CMSDDR with a small and large (2 gig) virtual machine >> size. >> >>- The CMSDDR invocation which fails does create a file on the target >> MDISK. I believe it contains blocks 0-2097151. >> >> cmsddr dump a497 temp z >> >> z/VM DASD DUMP/RESTORE PROGRAM >> >> HCPDDR696I VOLID READ IS LXA497 NOT VOLSER >> >> DUMPING LXA497 >> >> DUMPING DATA 07/11/11 AT 20.42.35 GMT FROM LXA497 >> >> INPUT BLOCK EXTENTSOUTPUT BLOCK EXTENTS >> >>START STOP STARTSTOP >> >> HCPDDR705E I/O ERROR A497 IRB 000311D0 0E00 >> >> SNS 8000 0004 >> >> >> CCW 63031820 4010 >> >> INPUT 02097152 OUTPUT 02097152 >> >> 0209715102097151 >> >> END OF DUMP >> >> BYTES IN 1073829304 BYTES OUT 0020546574 >> >> BLOCKS NOT COMPACTED ON TAPE - 00 >> >> END OF JOB >> >> Ready(4); T=0.80/1.42 16:42:54 >> >> >
Re: CMSDDR failing
I'm wondering if CMSDDR has some kind of internal limit of 1G.. I notice that: 512*2097151=1073741824(512 byte blocks) 1024*1024*1024=1073741824 (1K cubed) Scott Rohling On Mon, Jul 11, 2011 at 4:06 PM, Smith, Wayne H Mr CTR DISA CDB12 < wayne.smith@csd.disa.mil> wrote: > ** > > I’m having issues using CMSDDR. The output is copied below. Any > thoughts? > > The device I’m CMSDDRing is an MDISK defined on an EDEV. The size of the > MDISK is 17 gig. > > I **can** use CP DDR to copy the MDISK to another MDISK of equal size > defined on the same EDEV. I ran CP DDR because the error message seemed > to imply that there was an I/O error reading the input device(A497). CP > DDR could read the entire MDISK so I believe the error message is > misleading. > > A couple random pieces of information: > >- We are running z/VM 5.4; CMS Level 24, Service Level 002 > >- I’ve used CMSDDR to create CMS files from other smaller MDISKs > defined on the same EDEV. > >- The MDISK on which I’m trying to create the new file is larger than > the MDISK I’m trying to CMSDDR. > >- I’ve tried CMSDDR with a small and large (2 gig) virtual machine > size. > >- The CMSDDR invocation which fails does create a file on the target > MDISK. I believe it contains blocks 0-2097151. > > cmsddr dump a497 temp z > > z/VM DASD DUMP/RESTORE PROGRAM > > HCPDDR696I VOLID READ IS LXA497 NOT VOLSER > > DUMPING LXA497 > > DUMPING DATA 07/11/11 AT 20.42.35 GMT FROM LXA497 > > INPUT BLOCK EXTENTSOUTPUT BLOCK EXTENTS > >START STOP STARTSTOP > > HCPDDR705E I/O ERROR A497 IRB 000311D0 0E00 > > SNS 8000 0004 > > CCW 63031820 4010 > > INPUT 02097152 OUTPUT 02097152 > > 0209715102097151 > > END OF DUMP > > BYTES IN 1073829304 BYTES OUT 0020546574 > > BLOCKS NOT COMPACTED ON TAPE - 00 > > END OF JOB > > Ready(4); T=0.80/1.42 16:42:54 > >
Re: Varsity Inn North & South & University Plaza - VM Workshop Hotels
Maybe the workshop can provide a website to share such things.. I think it's fine to announce these events here -- but all the attendance, lodging, etc type details should be discussed elsewhere (IMHO). Scott Rohling On Tue, Jun 28, 2011 at 12:18 PM, Mike Walter wrote: > I’m not so sure… this is regarding lodging for the VM Workshop. VM is > definitely the direct point of this list. > > ** ** > > My initial report was to share what I saw in concern for those attending > the workshop. My reply today was to answer the question asked about the > source of that report. But I think we’re pretty much done now if that will > help you any sleep better… don’t let the bed bugs bite! ;-) > > ** ** > > (Now I’m all itchy!) > > ** ** > > Mike Walter > > ** ** > > *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On > Behalf Of *Scott Rohling > *Sent:* Tuesday, June 28, 2011 1:09 PM > > *To:* IBMVM@LISTSERV.UARK.EDU > *Subject:* Re: Varsity Inn North & South & University Plaza - VM Workshop > Hotels > > ** ** > > Gentlemen -- I'm sure there's a better place to discuss hotels, bed bugs, > etc? > > ** ** > > Scott Rohling > > ** ** >
Re: Varsity Inn North & South & University Plaza - VM Workshop Hotels
Gentlemen -- I'm sure there's a better place to discuss hotels, bed bugs, etc? Scott Rohling
Re: Question on SHUTDOWNTIME
What's ME8PROX2? That seems to be taking a full 30 seconds to terminate.. Scott Rohling On Thu, Jun 23, 2011 at 5:05 PM, Marcy Cortes wrote: > The default is 30 seconds (Q SHUTDOWNTIME) for the CP's portion of the > shutdown process. > I recall hearing that is good default. > > We are seeing systems exceed that - 33 seconds in this one that seemed to > come with bonus messages (that is our SW seemed to capture the HCPWRP963I's > on this one). > > > Are others seeing that? > > > > Here's an example. > > MZ8-300:Jun 18 23:56:00-SYSTEM 000%49 Users VM:Operator on > OPERATOR(ME8VM)Sun 19Jun11 01:56 > 01:51:48 HCPSHU6018I The processor controller has sent a > shutdown signal with a > timeout interval of 300 seconds > 01:51:48 HCPSHU6019I Guests may not have time to shut down > because VM SHUTDOWN > requires 30 seconds > 01:51:48 HCPSIG2113I User VMSERVU has reported successful > termination > 01:51:48 HCPSIG2113I User ME8SFS has reported successful > termination > 01:52:18 HCPSIG2113I User ME8PROX2 has reported successful > termination > > > MZ8-300:Jun 18 23:56:19-01:56:19 Processor 01 offline > MZ8-300:Jun 18 23:56:19-01:56:19 Processor 02 offline > MZ8-300:Jun 18 23:56:20-01:56:20 Processor 03 offline > MZ8-300:Jun 18 23:56:20-01:56:20 Processor 04 offline > MZ8-300:Jun 18 23:56:21-01:56:21 Processor 05 offline > MZ8-300:Jun 18 23:56:37- 01:56:37 HCPWRP963I SHUTDOWN STEP USOAC - JOURNAL > USER TERMINATION > MZ8-300:Jun 18 23:56:38- 01:56:38 HCPWRP963I SHUTDOWN STEP MFRSD - > TERMINATE HARDWARE LOADER > MZ8-300:Jun 18 23:56:38- 01:56:38 HCPWRP963I SHUTDOWN STEP APISD - > TERMINATE OTHER PROCESSORS > MZ8-300:Jun 18 23:56:39- 01:56:39 HCPWRP963I SHUTDOWN STEP ENASD - DISABLE > TERMINAL DEVICES > MZ8-300:Jun 18 23:56:40- 01:56:39 HCPWRP963I SHUTDOWN STEP XLGIN - CLEAR > CROSS-SYSTEM LINK FLAGS > MZ8-300:Jun 18 23:56:40- 01:56:40 HCPWRP963I SHUTDOWN STEP ISHDN - SHUT > DOWN I/O SUBSYSTEM > MZ8-300:Jun 18 23:56:41- 01:56:41 HCPWRP963I SHUTDOWN STEP SVACV - ACTIVATE > TERMINATION SAVE AREAS > MZ8-300:Jun 18 23:56:41- 01:56:41 HCPWRP963I SHUTDOWN STEP MXYTM - STOP > CHANNEL PATH MEASUREMENT FACILIT > > MZ8-300:Jun 18 23:56:42- 01:56:42 HCPWRP963I SHUTDOWN STEP CHMOF - DISABLE > CHANNEL MEASUREMENT > MZ8-300:Jun 18 23:56:43- 01:56:42 HCPWRP963I SHUTDOWN STEP ISHDA - DISABLE > ALL DEVICES > MZ8-300:Jun 18 23:56:48- 01:56:47 HCPWRP963I SHUTDOWN STEP CKPSH - TAKE A > CHECKPOINT > MZ8-300:Jun 18 23:56:49- 01:56:49 HCPWRP963I SHUTDOWN STEP OPRCK - SAVE > OPERATOR CONSOLE LIST > MZ8-300:Jun 18 23:56:50- 01:56:49 HCPWRP963I SHUTDOWN STEP MCWMD - > DETERMINE MACHINE CHECK STATUS > MZ8-300:Jun 18 23:56:50- 01:56:50 HCPWRP963I SHUTDOWN STEP SDVRS - RESET > IBM DASD CU CHARACTERISTICS > MZ8-300:Jun 18 23:56:51- > > > > > >HCPWRP962I VM SHUTDOWN COMPLETED IN 33 SEC >01:56:51 HCPWRP963I SHUTDOWN STEP SVADV - DEACTIVATE > TERMINATION SAVE AREAS > > > > > > >HCPWRP962I VM SHUTDOWN COMPLETED IN 33 SEC > MZ8-300:Jun 18 23:56:52- 01:56:51 HCPWRP961W SYSTEM SHUTDOWN COMPLETE > > > > > > Marcy >
Re: VM Workshop - Session Grid Now Available
Not 'penguin resuscitation' ? ;-) Scott Rohling On Wed, Jun 22, 2011 at 4:56 PM, Mark Post wrote: > >>> On 6/22/2011 at 01:49 PM, Len Diegel wrote: > > I wanted to let everyone know that the VM Workshop Session Grid is now > > available on the web site: > > The sessions listed with my name on them were added to the grid > prematurely, and there's one too many of them. I haven't received approval > to travel just yet, so I can't guarantee my appearance at this time. > > The "SuSE Linux trouble shooting" (it's SUSE, by the way, not SuSE), and > "Saving your bacon - recovering from common startup failures" are actually > the same session, with the correct title being the "Saving your bacon" one. > > > Mark Post >
Re: Moving on
Rich - thanks for all the great input and assistance! Best of luck enjoying your freedom... And - you can always stay on the list with your personal email if you start to miss us :-) Best regards - Scott Rohling On Wed, Jun 22, 2011 at 10:51 AM, Schuh, Richard wrote: > After 48 years in the industry, involved with VM for the last 38 of them, > I will be retiring early next month. I don't think it is possible to find a > better group of people than the VM List. The professionalism, the > willingness, even eagerness, to help others is outstanding. You have made my > job easier. I wish you all the best. It has been nice, sometimes even fun, > to know and work with such an exemplary group of people. > > Regards, > Richard Schuh > > > >
Re: Problems at DR test
my 2 cents: because most 009 consoles are defined as 3215 on z/VM guests. (as for the ones that are listed.. ummm.. darts? :-) Scott Rohling On Tue, Jun 21, 2011 at 8:09 AM, David Boyes wrote: > 1) This is the default value for Operator_Consoles in the SYSTEM CONFIGfile > (and probably most shops do not delete or change the last two entries): > Operator_Consoles 0020 0021 0022 0023 0E20 0E21 1020 , > System_3270 System_Console > As I understand it, the Operating System Messages window is always > available to each LPAR. So if it is in most "path"s for z/VM to find a > console, why should we ever see PSWs of 1010? Shouldn't z/VM always find > the Operating System Messages window as a last resort? (I must have one of > my assumptions wrong, because we do see "1010"s). > > > > Related question: given the addresses listed in the default list seem kinda > random, is there any reason why 009 **isn’t** listed? >
Re: Problems at DR test
> > Oh, it just cannot be responded to normally when ‘HCPSED6013A A CP read is > pending’ is displayed. Instead all responses must be prefixed with “#CP > VINPUT VMSG ‘. > > ** ** > > > > Frank M. Ramaekers Jr. > > ** ** > > ** ** > -- > > * > * > Ok - that explains the console statements. If you want the systems to IPL identically then check out the Features statement in SYSTEM CONFIG. One appears to have Auto_IPL WARM DRAIN -- the other doesn't and you get HCPSED6013A and have to respond to a prompt. Glad you got through it all! Scott Rohling
Re: Problems at DR test
On a 2nd level z/VM, these consoles don't exist -- so a wait 1010 is very possible... on a 1st level system, I agree with you - we'd have to hear more to figure it out, I think. I'm actually not seeing why console definitions are explaining why one of the Frank's guests IPL without a prompt, and the other stops at the prompt. To me, this is clearly due to the use of Auto_IPL in the SYSTEM CONFIG. If the prompt cannot be responded to - ok - that's about consoles ... but the original question is likely about a difference in the Features Auto_IPL setting.. which I suggesed pretty early on in this thread. Scott Rohling On Tue, Jun 21, 2011 at 6:57 AM, Michael MacIsaac wrote: > > Hi, > > This thread has brought up a question in my mind (maybe it's a dumb one, > but I'll ask it anyway :)) > > Assumptions: > > 1) This is the default value for Operator_Consoles in the SYSTEM CONFIGfile > (and probably most shops do not delete or change the last two entries): > Operator_Consoles 0020 0021 0022 0023 0E20 0E21 1020 , > System_3270 System_Console > > > 2) System_3270 == the Integrated 3270 console == the mnemonic "SYSG" > > 3) System_Console == the Operating System Messages window == the mnemonic > "SYSC" > > As I understand it, the Operating System Messages window is always > available to each LPAR. So if it is in most "path"s for z/VM to find a > console, why should we ever see PSWs of 1010? Shouldn't z/VM always find > the Operating System Messages window as a last resort? (I must have one of > my assumptions wrong, because we do see "1010"s). > > Thanks. > > "Mike MacIsaac"(845) 433-7061 >
Re: Problems at DR test
If you're not getting the prompt - you likely have Auto_IPL Warm or Auto_IPL Force configured in your SYSTEM CONFIG... I use Auto_IPL FORCE on my test systems so that they come up without the need for operator response. Scott Rohling On Mon, Jun 20, 2011 at 7:07 AM, Frank M. Ramaekers wrote: > ** ** ** ** ** ** > > I’m attempting to bring up our VM system under 2nd level at the DR site. > The problem that I’m running into is: > > ** ** > > 08:58:10 HCPZCO6718I Using parm disk 1 on volume 610RES (device 06F8) > > 08:58:10 HCPZCO6718I Parm disk resides on cylinders 39 through 158. > > 08:58:10 Start ((Warm|Force|COLD|CLEAN) (DRain) (DIsable) (NODIRect) > > 08:58:10 (NOAUTOlog)) or (SHUTDOWN) > > H HCPSED6013A A CP read is pending. > > ** ** > > The HCPSED6013A seems to be the problem. At our site, I have two VMs that > I can IPL under our z/VM 5.4. One will IPL just fine (i.e. no HCPSED6013A) > the other doesn’t’ and displays this message. Both VMs are configured > (DIRECT) the same. I’m at a loss as to why this happens with one and not > the other. > > ** ** > > We had no problems during the last DR, but we’ve applied z/VM 5.4 > maintenance since then (1003). > > ** ** > > Ideas? > > ** ** > > ** ** > > Frank M. Ramaekers Jr. > > ** ** > > > > Systems Programmer > > MCP, MCP+I, MCSE & RHCE > > ** ** > > American Income Life Insurance Co. > > Phone: (254)761-6649 > > ** ** > > 1200 Wooded Acres Dr. > > Fax: (254)741-5777 > > ** ** > > Waco**, **Texas** **76701 > > ** ** > > ** ** > > ** ** > _ This message > contains information which is privileged and confidential and is solely for > the use of the intended recipient. If you are not the intended recipient, be > aware that any review, disclosure, copying, distribution, or use of the > contents of this message is strictly prohibited. If you have received this > in error, please destroy it immediately and notify us at > privacy...@ailife.com. >
Re: CLONEBKP: New package at zVM/downloads
Alyce -- not sure what you mean, at least in the context of flashcopy.. ? If you mean CLONEBKP, I believe it's making a copy of the spool volume(s), so NSS/DCSS/etc would be preserved.. Scott Rohling On Fri, Jun 17, 2011 at 5:20 PM, Austin, Alyce (CIV) wrote: > > > What about the NSSs? > > ** ** > > Thanks, > > Alyce > > ** ** > -- > > *From:* **The IBM z/VM Operating System** [mailto:IBMVM@LISTSERV.UARK.EDU] > *On Behalf Of *Eric R Farman > *Sent:* Friday, June 17, 2011 1:57 PM > > *To:* IBMVM@LISTSERV.UARK.EDU > *Subject:* Re: CLONEBKP: New package at zVM/downloads > > > ** ** > > FLASHCOPY SYNC is only useful for older (Version 1) FlashCopy hardware. > Modern storage subsystems, such as DS8000, will not change their behavior > with this parameter. From the FLASHCOPY helpfile: > > SYNChronous > (For FlashCopy Version 1 hardware) tells CP to process the command > immediately and to wait until the hardware has accepted all parameters, > all messages from the Enterprise Storage Server(R) (ESS) subsystem have > been processed, and the FLASHCOPY command completes. > > As stated previously, issuing a second FLASHCOPY command while one is in > progress will result in an error. > > The CP QUERY FLASHCOPY HARDWARE command can be used to determine if a > FlashCopy has completed it's background copy or not, regardless of whether > or not it's a persistent relationship. > > Regards, >Eric > > Eric Farman > z/VM I/O Development > IBM Endicott**, ** NY > (607)429-4958 (tie 620) > > > > From: > > Kris Buelens > > To: > > IBMVM@LISTSERV.UARK.EDU > > Date: > > 06/17/2011 04:03 PM > > Subject: > > Re: CLONEBKP: New package at zVM/downloads > > Sent by: > > **The IBM z/VM Operating System** > > ** ** > -- > > > > > FLASHCOPY SYNC does not wait until the target disk is copied. So, you can > try to launch a second FLASHCOPY while the previous is still busy, and your > attempt will fail. > > 2011/6/17 Alan Altmark > On Friday, 06/17/2011 at 01:37 EDT, Scott Rohling > wrote: > > It will likely fail, with a message that the target is not in the > required > > state and is the target of an existing flashcopy...until the > background > > copying finishes -- you won't be able to flash to the same target. > > This sounds like a good use of the FLASHCOPY SYNCH option. > > Alan Altmark > > z/VM and Linux on System z Consultant > IBM System Lab Services and Training* > *ibm.com/systems/services/labservices > office: 607.429.3323 > mobile; 607.321.7556* > *alan_altm...@us.ibm.com > IBM Endicott > > > > -- > Kris Buelens, > IBM Belgium, VM customer support >
Re: CLONEBKP: New package at zVM/downloads
Sorry - looks like you need to use HELP CPQUERY FLASHC to display help... Scott Rohling On Fri, Jun 17, 2011 at 11:46 AM, Scott Rohling wrote: > CP QUERY FLASHCOPY -- and there are several operands to query different > aspects of the persistent flashcopy relationship table.. I'm pretty sure > there are also some ICKDSF functions that do this also... > > Anyway - HELP CPQUERY FLASHCOPY for more info on that.. > > Scott Rohling > > > On Fri, Jun 17, 2011 at 11:40 AM, Edward M Martin wrote: > >> Hello Everyone, >> >> ** ** >> >> On the z/VSE side the commands will show the relationships of source to >> target volume. >> >> ** ** >> >> IXFP STATUS >> >> STATUS,CUU >> >> ** ** >> >> I am sure there is a z/VM query command but I can’t find it (again). >> >> ** ** >> >> ** ** >> >> Ed Martin >> >> Aultman Health Foundation >> >> 330-363-5050 >> >> Ext 35050 >> >> ** ** >> >> *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On >> Behalf Of *Scott Rohling >> *Sent:* Friday, June 17, 2011 1:34 PM >> >> *To:* IBMVM@LISTSERV.UARK.EDU >> *Subject:* Re: CLONEBKP: New package at zVM/downloads >> >> ** ** >> >> It will likely fail, with a message that the target is not in the required >> state and is the target of an existing flashcopy...until the background >> copying finishes -- you won't be able to flash to the same target. >> >> ** ** >> >> Scott Rohling >> >> On Fri, Jun 17, 2011 at 11:06 AM, Alain Benveniste >> wrote: >> >> What would happen if we have flashcopy and we execute the same command 2 >> times in sequence ? >> >> Alain >> >> Envoyé de mon iPhone >> >> Le 17 juin 2011 à 17:44, Tom Duerbusch a >> écrit : >> >> >> > To throw another tangent to this >> > >> > On z/VSE, FCOPY detects the present of FLASHCOPY and will use FLASHCOPY >> when available and it makes sense to use it. >> > >> > I got plenty of calls from Operations when a DS8100 was brought in and >> we intended to phase in FLASHCOPY. FCOPY "phased" it in, very quickly . >> > >> > Tom Duerbusch >> > THD Consulting >> > >> >>>> Scott Rohling 6/16/2011 3:45 PM >>> >> > No - the CP FLASHCOPY command only works with the flashcopy feature on >> the >> > DASD -- it will simply fail if it's not enabled. You may have been >> using a >> > 'wrapper' EXEC that did that for you a while ago or something. >> > >> > Even if FLASHCOPY is specified for an option in the CLONEBKUP tool - I >> would >> > suggest it fall back to DDR if flashcopy fails -- as it will if you are >> > copying dasd that are on different subsystems.. >> > >> > Scott Rohling >> > >> > >> > >> > On Thu, Jun 16, 2011 at 2:22 PM, Davis, Larry (National VM/VSE >> Capability) < >> > larry.dav...@hp.com> wrote: >> > >> >> I Believe Flashcopy uses DDR, if Flashcopy is not available on the >> >> subsystem, But that was a while ago. >> >> >> >> >> >> >> >> Larry Davis** >> >> >> >> >> >> >> >> *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] >> *On >> >> Behalf Of *Scott Rohling >> >> *Sent:* Thursday, June 16, 2011 4:16 PM >> >> >> >> *To:* IBMVM@LISTSERV.UARK.EDU >> >> *Subject:* Re: CLONEBKP: New package at zVM/downloads >> >> >> >> >> >> >> >> key word 'option' .. it's pretty easy to code for doing either a >> >> flashcopy or ddr, whether passed as an option, or even detected >> >> automatically (try a flash and if it fails do the ddr). >> >> >> >> >> >> >> >> Scott Rohling >> >> >> >> On Thu, Jun 16, 2011 at 2:13 PM, Mark Post wrote: >> >> >> >>>>> On 6/16/2011 at 08:06 AM, "Frank M. Ramaekers" < >> framaek...@ailife.com> >> >> wrote: >> >>> 1 suggestion: FLASHCOPY option (to replace DDR) >> >> >> >> Which would then break on all the systems where it hasn't been >> purchased. >> >> >> >> >> >> Mark Post >> >> >> >> >> >> >> >> ** ** >> > >
Re: CLONEBKP: New package at zVM/downloads
CP QUERY FLASHCOPY -- and there are several operands to query different aspects of the persistent flashcopy relationship table.. I'm pretty sure there are also some ICKDSF functions that do this also... Anyway - HELP CPQUERY FLASHCOPY for more info on that.. Scott Rohling On Fri, Jun 17, 2011 at 11:40 AM, Edward M Martin wrote: > Hello Everyone, > > ** ** > > On the z/VSE side the commands will show the relationships of source to > target volume. > > ** ** > > IXFP STATUS > > STATUS,CUU > > ** ** > > I am sure there is a z/VM query command but I can’t find it (again). > > ** ** > > ** ** > > Ed Martin > > Aultman Health Foundation > > 330-363-5050 > > Ext 35050 > > ** ** > > *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On > Behalf Of *Scott Rohling > *Sent:* Friday, June 17, 2011 1:34 PM > > *To:* IBMVM@LISTSERV.UARK.EDU > *Subject:* Re: CLONEBKP: New package at zVM/downloads > > ** ** > > It will likely fail, with a message that the target is not in the required > state and is the target of an existing flashcopy...until the background > copying finishes -- you won't be able to flash to the same target. > > ** ** > > Scott Rohling > > On Fri, Jun 17, 2011 at 11:06 AM, Alain Benveniste > wrote: > > What would happen if we have flashcopy and we execute the same command 2 > times in sequence ? > > Alain > > Envoyé de mon iPhone > > Le 17 juin 2011 à 17:44, Tom Duerbusch a > écrit : > > > > To throw another tangent to this > > > > On z/VSE, FCOPY detects the present of FLASHCOPY and will use FLASHCOPY > when available and it makes sense to use it. > > > > I got plenty of calls from Operations when a DS8100 was brought in and we > intended to phase in FLASHCOPY. FCOPY "phased" it in, very quickly . > > > > Tom Duerbusch > > THD Consulting > > > >>>> Scott Rohling 6/16/2011 3:45 PM >>> > > No - the CP FLASHCOPY command only works with the flashcopy feature on > the > > DASD -- it will simply fail if it's not enabled. You may have been > using a > > 'wrapper' EXEC that did that for you a while ago or something. > > > > Even if FLASHCOPY is specified for an option in the CLONEBKUP tool - I > would > > suggest it fall back to DDR if flashcopy fails -- as it will if you are > > copying dasd that are on different subsystems.. > > > > Scott Rohling > > > > > > > > On Thu, Jun 16, 2011 at 2:22 PM, Davis, Larry (National VM/VSE > Capability) < > > larry.dav...@hp.com> wrote: > > > >> I Believe Flashcopy uses DDR, if Flashcopy is not available on the > >> subsystem, But that was a while ago. > >> > >> > >> > >> Larry Davis** > >> > >> > >> > >> *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] > *On > >> Behalf Of *Scott Rohling > >> *Sent:* Thursday, June 16, 2011 4:16 PM > >> > >> *To:* IBMVM@LISTSERV.UARK.EDU > >> *Subject:* Re: CLONEBKP: New package at zVM/downloads > >> > >> > >> > >> key word 'option' .. it's pretty easy to code for doing either a > >> flashcopy or ddr, whether passed as an option, or even detected > >> automatically (try a flash and if it fails do the ddr). > >> > >> > >> > >> Scott Rohling > >> > >> On Thu, Jun 16, 2011 at 2:13 PM, Mark Post wrote: > >> > >>>>> On 6/16/2011 at 08:06 AM, "Frank M. Ramaekers" < > framaek...@ailife.com> > >> wrote: > >>> 1 suggestion: FLASHCOPY option (to replace DDR) > >> > >> Which would then break on all the systems where it hasn't been > purchased. > >> > >> > >> Mark Post > >> > >> > >> > > ** ** >
Re: CLONEBKP: New package at zVM/downloads
It will likely fail, with a message that the target is not in the required state and is the target of an existing flashcopy...until the background copying finishes -- you won't be able to flash to the same target. Scott Rohling On Fri, Jun 17, 2011 at 11:06 AM, Alain Benveniste wrote: > What would happen if we have flashcopy and we execute the same command 2 > times in sequence ? > > Alain > > Envoyé de mon iPhone > > Le 17 juin 2011 à 17:44, Tom Duerbusch a > écrit : > > > To throw another tangent to this > > > > On z/VSE, FCOPY detects the present of FLASHCOPY and will use FLASHCOPY > when available and it makes sense to use it. > > > > I got plenty of calls from Operations when a DS8100 was brought in and we > intended to phase in FLASHCOPY. FCOPY "phased" it in, very quickly . > > > > Tom Duerbusch > > THD Consulting > > > >>>> Scott Rohling 6/16/2011 3:45 PM >>> > > No - the CP FLASHCOPY command only works with the flashcopy feature on > the > > DASD -- it will simply fail if it's not enabled. You may have been > using a > > 'wrapper' EXEC that did that for you a while ago or something. > > > > Even if FLASHCOPY is specified for an option in the CLONEBKUP tool - I > would > > suggest it fall back to DDR if flashcopy fails -- as it will if you are > > copying dasd that are on different subsystems.. > > > > Scott Rohling > > > > > > > > On Thu, Jun 16, 2011 at 2:22 PM, Davis, Larry (National VM/VSE > Capability) < > > larry.dav...@hp.com> wrote: > > > >> I Believe Flashcopy uses DDR, if Flashcopy is not available on the > >> subsystem, But that was a while ago. > >> > >> > >> > >> Larry Davis** > >> > >> > >> > >> *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] > *On > >> Behalf Of *Scott Rohling > >> *Sent:* Thursday, June 16, 2011 4:16 PM > >> > >> *To:* IBMVM@LISTSERV.UARK.EDU > >> *Subject:* Re: CLONEBKP: New package at zVM/downloads > >> > >> > >> > >> key word 'option' .. it's pretty easy to code for doing either a > >> flashcopy or ddr, whether passed as an option, or even detected > >> automatically (try a flash and if it fails do the ddr). > >> > >> > >> > >> Scott Rohling > >> > >> On Thu, Jun 16, 2011 at 2:13 PM, Mark Post wrote: > >> > >>>>> On 6/16/2011 at 08:06 AM, "Frank M. Ramaekers" < > framaek...@ailife.com> > >> wrote: > >>> 1 suggestion: FLASHCOPY option (to replace DDR) > >> > >> Which would then break on all the systems where it hasn't been > purchased. > >> > >> > >> Mark Post > >> > >> > >> >
Re: CLONEBKP: New package at zVM/downloads
No - the CP FLASHCOPY command only works with the flashcopy feature on the DASD -- it will simply fail if it's not enabled. You may have been using a 'wrapper' EXEC that did that for you a while ago or something. Even if FLASHCOPY is specified for an option in the CLONEBKUP tool - I would suggest it fall back to DDR if flashcopy fails -- as it will if you are copying dasd that are on different subsystems.. Scott Rohling On Thu, Jun 16, 2011 at 2:22 PM, Davis, Larry (National VM/VSE Capability) < larry.dav...@hp.com> wrote: > I Believe Flashcopy uses DDR, if Flashcopy is not available on the > subsystem, But that was a while ago. > > > > Larry Davis** > > > > *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On > Behalf Of *Scott Rohling > *Sent:* Thursday, June 16, 2011 4:16 PM > > *To:* IBMVM@LISTSERV.UARK.EDU > *Subject:* Re: CLONEBKP: New package at zVM/downloads > > > > key word 'option' .. it's pretty easy to code for doing either a > flashcopy or ddr, whether passed as an option, or even detected > automatically (try a flash and if it fails do the ddr). > > > > Scott Rohling > > On Thu, Jun 16, 2011 at 2:13 PM, Mark Post wrote: > > >>> On 6/16/2011 at 08:06 AM, "Frank M. Ramaekers" > wrote: > > 1 suggestion: FLASHCOPY option (to replace DDR) > > Which would then break on all the systems where it hasn't been purchased. > > > Mark Post > > >
Re: CLONEBKP: New package at zVM/downloads
key word 'option' .. it's pretty easy to code for doing either a flashcopy or ddr, whether passed as an option, or even detected automatically (try a flash and if it fails do the ddr). Scott Rohling On Thu, Jun 16, 2011 at 2:13 PM, Mark Post wrote: > >>> On 6/16/2011 at 08:06 AM, "Frank M. Ramaekers" > wrote: > > 1 suggestion: FLASHCOPY option (to replace DDR) > > Which would then break on all the systems where it hasn't been purchased. > > > Mark Post >
Re: zVM crash
That's odd .. wait 1010 means 'no console available'.. any chance someone was deactivating your lpar or trying to reload it? Scott Rohling On Tue, Jun 14, 2011 at 7:46 AM, Burton, Randy wrote: > I'm curious if this error rings a bell with any of you. We of course > have an ETR open and are working with IBM. No hardware errors on the > HMC, so we believe this was software and not hardware. Here's the last > operator log message before the LPAR went into a disabled wait: > > HCPMPG9152E PROCESSOR 01 IS BEING VARIED OFFLINE BECAUSE IT IS NOT > RESPONSIVE. > > Disabled wait PSW was: > 00021010 > > HMC message was: > Central processor (CP) 0 in partition VMD1, entered disabled wait state. > > Fortunately this was our development (test) zVM system, running a bunch > of test zLinux guests. We're running zVM 6.1 on a z10. Of course we > are nervous because what happens in test can happen in production. We > IPLed and so far so good. > > Thanks in advance for any help/suggestions! > > Randy Burton > BB&T Bank >
Re: Duplicate CP Monitor records TCPIP
Hmmm.. some questions then: - Are the z/VM and TCPIP levels all the same? - Are the OSA's attached to TCPIP the same way (DEDICATE in directory, via a DTCPARMS, or?) - Are the OSA cards the same.. defined the same? - Any NICDEF's defined to TCPIP on this LPAR? (though I would think it would show as a different OSA ) - Could a different ports be being used on the same OSA? You've likely thought of this stuff already - just thinking of stuff I would check. Can't think of any reason offhand. Well - maybe one: does TCPIP on this LPAR have 2 virtual CPU's defined? Seems like the number of CPU's can influence, but I'm probably thinking of accounting records.. Scott Rohling On Thu, Jun 9, 2011 at 11:56 AM, Berry van Sleeuwen < berry.vansleeu...@xs4all.nl> wrote: > Hi Scott, > > Yes, the records are identical. After a SORT UNIQUE the duplicate records > are discarded. The only thing that is not identical is the TOD field. The > second (and third) record are produced a few miliseconds after the first. > When I discard the miliseconds the records themselves are truly identical. > That leads me to believe that these are seperatly created records. > > The record produced by the TCPIP stack contains data from the OSA device, > we are interested in the number of bytes in and out for the device during > the minute interval. > > As I understand it there is a buffer for each device. So the OSA devices > each have a record and the CTC devices also have a record. And indeed that > is what we get on other LPARs. Only on this particular LPAR we have more > than one record. And only for the OSA's, not for the CTC's. > > Regards, Berry. > > Op 09-06-11 16:51, Scott Rohling schreef: > >> Just poking around found this description of the monitor record: >> >> DESCRIPTIVE NAME - Monitor Sample Record >> Domain 10 - Appldata domain >> Record 2 - Application Data Sample Record >> DESCRIPTION - Application data as found in the application-defined >>buffer at the time of this sample interval. A >>separate record is generated for each buffer >>declared by the virtual machine(s) via the Diagnose >>'DC' START operation. >> Seems to imply a separate record is generated for each buffer declared.. >> I'm not sure what the application data sample is in this case. Are the >> records truly duplicates? (the whole record is absolutely identical, >> displayable chars or not) Perhaps the application data needs to be >> appended to come up with the entire field? >> Scott Rohling >> >> On Thu, Jun 9, 2011 at 8:04 AM, Berry van Sleeuwen < >> berry.vansleeu...@xs4all.nl <mailto:berry.vansleeu...@xs4all.nl>> wrote: >> >>Hi listers, >> >>I am looking at processing the userrecords in the CP MONITOR for >>the TCPIP >>stacks. These are in CP MONITOR domain 0A record 02. The data is >>collected >>though a STARMON stage, basically "PIPE STARMON | locate >> | > >>fielid". >> >>Most LPARs have records like I'd expect them but I have found that >>in one >>LPAR we have duplicate records for subrecordtype 05 for each of >>the the OSA >>devices. >> >>The CTC's for VSE systems have one record per minute for each VSE >>system. >>The OSA links have 2 identical records (apart from a slight >>difference in >>timestamp, a few miliseconds apart). A second IP stack even writes >>3 records >>for every minute. >> >>So basically we see: >>00:01 VSE1 >>00:01 VSE2 >>00:01 OSA1 >>00:01 OSA2 >>00:01 OSA1 >>00:01 OSA2 >>00:02 ... >> >>What can cause the CP monitor to have these duplicate records? >> >>TIA, Berry. >> >> >>
Re: Duplicate CP Monitor records TCPIP
Just poking around found this description of the monitor record: DESCRIPTIVE NAME - Monitor Sample Record Domain 10 - Appldata domain Record 2 - Application Data Sample Record DESCRIPTION - Application data as found in the application-defined buffer at the time of this sample interval. A separate record is generated for each buffer declared by the virtual machine(s) via the Diagnose 'DC' START operation. Seems to imply a separate record is generated for each buffer declared.. I'm not sure what the application data sample is in this case. Are the records truly duplicates? (the whole record is absolutely identical, displayable chars or not) Perhaps the application data needs to be appended to come up with the entire field? Scott Rohling On Thu, Jun 9, 2011 at 8:04 AM, Berry van Sleeuwen < berry.vansleeu...@xs4all.nl> wrote: > Hi listers, > > I am looking at processing the userrecords in the CP MONITOR for the TCPIP > stacks. These are in CP MONITOR domain 0A record 02. The data is collected > though a STARMON stage, basically "PIPE STARMON | locate | > > fielid". > > Most LPARs have records like I'd expect them but I have found that in one > LPAR we have duplicate records for subrecordtype 05 for each of the the OSA > devices. > > The CTC's for VSE systems have one record per minute for each VSE system. > The OSA links have 2 identical records (apart from a slight difference in > timestamp, a few miliseconds apart). A second IP stack even writes 3 > records > for every minute. > > So basically we see: > 00:01 VSE1 > 00:01 VSE2 > 00:01 OSA1 > 00:01 OSA2 > 00:01 OSA1 > 00:01 OSA2 > 00:02 ... > > What can cause the CP monitor to have these duplicate records? > > TIA, Berry. >
Re: Time stamp each message on console
Time yes: CP TERMINAL TIMESTAMP ON Scott Rohling On Tue, Jun 7, 2011 at 10:25 AM, Frank M. Ramaekers wrote: > Isn’t there a way to force a time and/or date stamp for each line written > to the console? > > > > Frank M. Ramaekers Jr. > > > > Systems Programmer > > MCP, MCP+I, MCSE & RHCE > > > > American Income Life Insurance Co. > > Phone: (254)761-6649 > > > > 1200 Wooded Acres Dr. > > Fax: (254)741-5777 > > > > Waco, Texas 76701 > > > > > > > _ This message > contains information which is privileged and confidential and is solely for > the use of the intended recipient. If you are not the intended recipient, be > aware that any review, disclosure, copying, distribution, or use of the > contents of this message is strictly prohibited. If you have received this > in error, please destroy it immediately and notify us at > privacy...@ailife.com. >
Re: REXXDATE MODULE
I do recall this function and even used it (trying to find archives) back in
the pre-Y2K conversions. The internal DATE() function in REXX seems to
provide most of what is needed, though. You can translate date formats ..
and I usually do date calculations using DATE('B). I'm pretty sure REXXDATE
did date calculations/conversion - but I need to dig up my old code. If I
can find out more I will post, but would consider converting to DATE() and
some REXX code to avoid reliance on the module (which I doubt is supported).
Scott Rohling
On Mon, Jun 6, 2011 at 10:39 AM, Schuh, Richard wrote:
> We have a legacy (pejorative intended) program named REXXDATE MODULE for
> which we have no source. It is dated 8/3/1994, which predates my arrival at
> Visa. Does anyone know if this is something that was made generally
> available to the VM community and, if so, is the source available? I has
> suddenly started blowing up, repeatable, for one application. I really don't
> want to dis-assemble it for debugging purposes.
>
> Regards,
> Richard Schuh
>
>
>
>
Re: Disabled Wait state not in the CP Messages and Codes Manual
Take a look at this thread: http://www.mail-archive.com/ibmvm@listserv.uark.edu/msg34708.html <http://www.mail-archive.com/ibmvm@listserv.uark.edu/msg34708.html>Scott Rohling On Wed, Jun 1, 2011 at 11:29 AM, Davis, Larry (National VM/VSE Capability) < larry.dav...@hp.com> wrote: > We received this Disabled Wait state from a z10 processor we are trying to > IPL a zVM 6.1 system that was dumped and restored from an MVS system on to > new DASD. > > Central processor (CP) 0 in partition LPLH, entered disabled wait state. > The disabled wait program status word (PSW) is 000a000f. > Central storage bytes 0-7 are: 000a000f. > > Does anyone know what would cause this Wait state? > > Larry Davis > VM Capability > HP Enterprise Services > Tel: +1 813 394 4240 > E-mail: larry.dav...@hp.com<mailto:larry.dav...@hp.com> >
Re: Nothing today?
If it ain't broke... go fishin'... Scott Rohling On Tue, May 17, 2011 at 2:09 PM, Frank M. Ramaekers wrote: > No posts today? > > > > Frank M. Ramaekers Jr. > > > > Systems Programmer > > MCP, MCP+I, MCSE & RHCE > > > > American Income Life Insurance Co. > > Phone: (254)761-6649 > > > > 1200 Wooded Acres Dr. > > Fax: (254)741-5777 > > > > Waco, Texas 76701 > > > > > > > _ This message > contains information which is privileged and confidential and is solely for > the use of the intended recipient. If you are not the intended recipient, be > aware that any review, disclosure, copying, distribution, or use of the > contents of this message is strictly prohibited. If you have received this > in error, please destroy it immediately and notify us at > privacy...@ailife.com. >
Re: Problem with z/Linux guest Ethernet frames (buffering ?)
Just a guess, but have you checked MTU sizes? Are you using a VSWITCH for the guests or dedicated OSA? Scott Rohling On Wed, May 4, 2011 at 5:15 PM, Bhemidhi, Ashwin wrote: > Hello all, > > > > Recently we started noticing on few of our Linux guest that Ethernet frames > were being delayed up to 25 seconds from the time they were sent to the time > the guest received them. The frames are Ethernet LLC keep alive polls > (layer 2 poll) that are sent by a Cisco SNA switch router every 30 secs. > Both the router and the Linux guest are in the same LAN. > > > > Looking at the ethereal traces captured on the guest. During normal > operation the keep alive Frames are being sent every 30 secs and the z/Linux > guest responds to the poll with in 60 micro seconds. But few times we > noticed that the frames were being delayed up to 25 seconds (total time from > the previous poll is 30+25) after the router sends the poll frame to the > time the Linux guest receives them. This is causing the keep alive timer ( > 9 secs = 1 sec X 8 retries) to expire and disconnect sessions. The Linux > guest eventually receives the frames including the retires all at the same > but by that time the sessions are dropped the router. It appears that the > frames are being buffered and are delayed by the guest receives them. > > > > We for sure know that the router is sending the poll every 30 seconds but > some were some how the frames were buffered (?) for 25 secs before being > delivered to the guest. I am trying to figure at which layer the delay was > being introduced. Are there any other traces that I can turn on z/VM to > diagnose the problem? Were do I start looking at? > > > > z/VM LPAR is a small one running 8 guest with 80MB memory and 16MB and 48MB > vdisk on a z10 > > > > IFL utilization : 2% X 2 IFLS, > > Central Storage : 95% 768 MB, > > XSTORE : 97% 256MB, > > PAGE : 12% X 2 3390-3 page DASD. > > > > Paging/Spooling activity: 0/s (most of the times) > > > > Thank you, > > Ashwin Bhemidhi >
Re: password_on_cmds feature statement in CONFIG
Terry - I understand.. you sometimes want to set certain values, etc... Here is one way with a quick sample of code: /* Common PROFILE EXEC */ Address Command /* Is there an EXEC on the A disk with the same name as the guest? */ 'ESTATE' userid() 'EXEC A' /* If so - Execute it */ If rc = 0 Then 'EXEC' userid() /* Otherwise - Execute this */ Else Do /* this is the common profile exec part -- anyone without their own 'user EXEC' file on the A disk does this */ 'EXEC SWAPGEN 100 10' End /* You can also more here that you want everyone to do whether that have their own EXEC or not */ 'CP SET PF12 RETRIEVE' So - this provides a way to have a special PROFILE EXEC for a particular user. If LINUX1 is running the common PROFILE EXEC -- and it finds a LINUX1 EXEC on the A disk - it executes it. This is where you would have your special SWAPGEN stuff: /* LINUX1 EXEC - special stuff for LINUX1 guest*/ Address Command 'EXEC SWAPGEN 100 2' There are lots of ways to do this -- including using a control file that is read to find out what special things a particular guest might need -- but the above is straightforward and simple.You just have a 'guestname EXEC' on the LNXADMIN 391 for guests that have special needs. Hope this sample helps... I'm sure others have been pretty creative in this area and have lots of ideas! Scott Rohling On Fri, Apr 22, 2011 at 6:43 PM, Martin, Terry R. (CMS/CTR) (CTR) < terry.mar...@cms.hhs.gov> wrote: > Thanks Scott. I use a combination of the guest having its own A disk and a > common link to the LNXADMIN user’s A disk. The reason I do the separate > guest A disk is because I may have differences per guest. Such as I execute > the SWAPGEN EXEC to allocate the VDISK from the PROFILE EXEC of the user and > a lot of these allocations are guest specific. > > > > In the PROFILE EXEC for each guest I have the LINK LNXADMIN 191 391 RR. > This is the common A disk. I could move the LINK for this to the Directory > entry for each guest, but how do I execute a PROFILE specific to a guest if > I am using a common PROFILE for all guests on the LNXADMIN 191(391)? > > > > *Thank You,* > > * * > > *Terry Martin* > > *Lockheed Martin* > > *CMS - CITIC* > > *3300 Lord Baltimore Drive, Suite 200, 21244 > **Engineering Computing* > > *Mainframe Support* > > *Cell - 443 632-4191* > > * * > > > > *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On > Behalf Of *Scott Rohling > *Sent:* Friday, April 22, 2011 5:29 PM > > *To:* IBMVM@LISTSERV.UARK.EDU > *Subject:* Re: password_on_cmds feature statement in CONFIG > > > > Nope -- the inline password still fails with HCP118E even if there is a > LINK in my directory for the disk. I believe the PASSWORD_ON_CMDS LINK NO > has no exceptions .. once you set it NO - you can't use an inline password > - you must be prompted for it (which won't happen if you have RACF > controlling LINK). > > > > I agree that these LINK statements should be in the directory, though.. > maybe part of a directory profile that Linux guests use (e.g. INCLUDE > LINUX). I also highly recommend a common PROFILE EXEC on a common 191 disk > if that isn't already being used. Make it LNXADMIN 191 191 RR -- and all > the guests will execute the PROFILE EXEC on LNXAMDIN 191. I always hate > seeing individual 191 disks for Linux guests :-( > > > > Scott Rohling > > On Fri, Apr 22, 2011 at 3:16 PM, Rob van der Heij > wrote: > > > And when you go make these changes, consider putting the LINK > statements in the CP directory instead (in an include profile even, if > applicable). I think there was a PTF to make sure that as long as you > try to link to the same disk that was already in the directory entry > (and granted by RACF) you would get away with the inline password (but > maybe Scott and check that - must be 15 years ago that I did such > things) > >
Re: password_on_cmds feature statement in CONFIG
Nope -- the inline password still fails with HCP118E even if there is a LINK in my directory for the disk. I believe the PASSWORD_ON_CMDS LINK NO has no exceptions .. once you set it NO - you can't use an inline password - you must be prompted for it (which won't happen if you have RACF controlling LINK). I agree that these LINK statements should be in the directory, though.. maybe part of a directory profile that Linux guests use (e.g. INCLUDE LINUX). I also highly recommend a common PROFILE EXEC on a common 191 disk if that isn't already being used. Make it LNXADMIN 191 191 RR -- and all the guests will execute the PROFILE EXEC on LNXAMDIN 191. I always hate seeing individual 191 disks for Linux guests :-( Scott Rohling On Fri, Apr 22, 2011 at 3:16 PM, Rob van der Heij wrote: > > And when you go make these changes, consider putting the LINK > statements in the CP directory instead (in an include profile even, if > applicable). I think there was a PTF to make sure that as long as you > try to link to the same disk that was already in the directory entry > (and granted by RACF) you would get away with the inline password (but > maybe Scott and check that - must be 15 years ago that I did such > things) >
Re: password_on_cmds feature statement in CONFIG
Terry - one more thing .. to make sure that ALL of your Linux guests are authorized to link (not just the one you tested on) you might want to check the RACF definitions: RAC RLIST VMMDISK LNXADMIN.191 AUTH This should give you a list of groups/users that are authorized.. You're okay if: - The Universal Access (UACC) for LNXADMIN 191 is READ or - The authorization list contains all the Linux guests with READ access or - The authorization list contains a group with READ access to which all Linux guests belong (and LIST OF GROUPS ACCESS CHECKING is active in RACF) Scott Rohling On Fri, Apr 22, 2011 at 2:11 PM, Scott Rohling wrote: > Rob -- Right you are!I just checked this on a system that has > password_on_cmds NO for LINK.. (and RACF installed controlling links) > > If I enter the LINK with a password: > > link maint 191 391 rr read > HCPLNM118E MAINT 0191 not linked; command format not valid > Ready(00118); T=0.01/0.01 16:07:36 > > Note that if I leave the password off - it works fine -- (and btw - my user > is authorized to LINK to MAINT 191 in RACF) > > So Terry -- you will need to remove the password from the LINK statement in > the PROFILE EXECs before setting password_on_cmds to NO! Now that you know > it works without the password -- that should be safe. > > Good catch, Rob ... > > Scott Rohling > > On Fri, Apr 22, 2011 at 1:59 PM, Rob van der Heij wrote: > >> On Fri, Apr 22, 2011 at 9:24 PM, Scott Rohling >> wrote: >> >> > Hi Terry - If RACF is installed and controlling links - then the >> password >> > on the link statement is likely being ignored and is there from pre-RACF >> > days.. >> >> The password is ignored now because access control is done by RACF. >> But my recollection is that when he changes CP to not allow >> password_on_cmds the LINK statement with a password would be rejected >> despite the fact that RACF does not use the password. If so, then the >> change in the configuration file might break things that work now... >> >> I believe this was what justified a local mod for one of our systems. >> We could not go through the code to check for statements with inline >> password, but did not want to allow people to type their password on >> logon in plain text either. >> >> Rob >> > >
Re: password_on_cmds feature statement in CONFIG
Rob -- Right you are!I just checked this on a system that has password_on_cmds NO for LINK.. (and RACF installed controlling links) If I enter the LINK with a password: link maint 191 391 rr read HCPLNM118E MAINT 0191 not linked; command format not valid Ready(00118); T=0.01/0.01 16:07:36 Note that if I leave the password off - it works fine -- (and btw - my user is authorized to LINK to MAINT 191 in RACF) So Terry -- you will need to remove the password from the LINK statement in the PROFILE EXECs before setting password_on_cmds to NO! Now that you know it works without the password -- that should be safe. Good catch, Rob ... Scott Rohling On Fri, Apr 22, 2011 at 1:59 PM, Rob van der Heij wrote: > On Fri, Apr 22, 2011 at 9:24 PM, Scott Rohling > wrote: > > > Hi Terry - If RACF is installed and controlling links - then the > password > > on the link statement is likely being ignored and is there from pre-RACF > > days.. > > The password is ignored now because access control is done by RACF. > But my recollection is that when he changes CP to not allow > password_on_cmds the LINK statement with a password would be rejected > despite the fact that RACF does not use the password. If so, then the > change in the configuration file might break things that work now... > > I believe this was what justified a local mod for one of our systems. > We could not go through the code to check for statements with inline > password, but did not want to allow people to type their password on > logon in plain text either. > > Rob >
Re: password_on_cmds feature statement in CONFIG
Hi Terry - If RACF is installed and controlling links - then the password on the link statement is likely being ignored and is there from pre-RACF days.. Before I ramble on about all the possibilities - you might just want to try this on one of the Linux guests: DET 391 LINK LNXADMIN 191 391 RR If it works -- then no worries.. the password is being ignored. if not - let us know the failure and I can suggest what needs setting up in RACF. Scott Rohling On Fri, Apr 22, 2011 at 1:02 PM, Martin, Terry R. (CMS/CTR) (CTR) < terry.mar...@cms.hhs.gov> wrote: > Hi > > > > Here is one I found. This (see below) in all of my z/Linux guests PROFILE > EXECs. So it would appear that if I set the LINK to 'NO' the guests would > not come up. > > > > So I do have RACF/VM what would be the CLASS/PROFILE/RDEF to allow this to > work without the password on the LINK? > > > > > > 'cp link lnxadmin 191 391 rr read' > > > > Thank You, > > > > Terry Martin > > Lockheed Martin > > CMS - CITIC > > 3300 Lord Baltimore Drive, Suite 200, 21244 > > Engineering Computing > > Mainframe Support > > Cell - 443 632-4191 > > > > > > > > -Original Message- > From: The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] On > Behalf Of Bruce Hayden > Sent: Friday, April 22, 2011 2:06 PM > To: IBMVM@LISTSERV.UARK.EDU > Subject: Re: password_on_cmds feature statement in CONFIG > > > > I'm pretty sure you run RACF, so you'd never put a password on a LINK > > command anyway. And you stated that you use XAUTOLOG and not AUTOLOG, > > so no password is needed there. I can't think of any reason it would > > cause any issue for you. Most systems I use do not allow passwords on > > those commands. > > > > On Fri, Apr 22, 2011 at 1:43 PM, Martin, Terry R. (CMS/CTR) (CTR) > > wrote: > > > Hi > > > > > > > > > > > > We have be told by the auditors to set the AUTOLOG and LINK to in the > > > PASSWORD_ON_CMDS parameter to ‘NO’ on the SYSTEM CONFIG Features > statement. > > > It seems that we tried this the last time the auditors mentioned this and > we > > > had problems and did not change it. I can’t remember what the issues > were. > > > > > > > > > > > > Can anyone comment on what I would need to be aware of if this change was > > > made? I do XAUTOLOG our z/Linux guests at startup time so would I need to > > > change anything there? > > > > > > > > > > > > Thanks in advance! > > > > > > > > > > > > Thank You, > > > > > > > > > > > > Terry Martin > > > > > > Lockheed Martin > > > > > > CMS - CITIC > > > > > > 3300 Lord Baltimore Drive, Suite 200, 21244 > > > Engineering Computing > > > > > > Mainframe Support > > > > > > Cell - 443 632-4191 > > > > > > > > > > > > > > > > > > > > -- > > Bruce Hayden > > z/VM and Linux on System z ATS > > IBM, Endicott, NY >
Re: Detaching A disk from z/Linux guest dynamically
To strain that metaphor .. if you build an apartment house, you have to consider the tenants. :-) I think we're all likely in agreement .. all of these commands and tools allow us to manage our z/VM systems. We don't want to use a sledgehammer if a rubber mallet will do. We don't want to compromise security or integrity just to replace a scratched doorknob. We want at hand all of the tools we might possibly need in an emergency and to be trusted to use them carefully. I think the phrase 'abuse of power' got us a bit defensive (I know I reacted). But I think Rob's real point (security/integrity and not using more power than required) is very valid. Scott Rohling p.s. In the case of the original post - which seems to be the need to swap out a volume currently used by guests for minidisks - SECUSER/SEND/FOR is the only way (short of recycling the guest) to accomplish it without contacting every owner and having them execute commands. How critical that is or whether it couldn't wait until the next recycle - only Terry knows. On Thu, Apr 21, 2011 at 6:26 AM, Tom Huegel wrote: > I guess it is a matter of opinion, personally I think that if a man is to > build a house he should be able to use all of the tools in his toolbox. > > > On Wed, Apr 20, 2011 at 5:43 PM, Rob van der Heij wrote: > >> On Wed, Apr 20, 2011 at 11:54 PM, Scott Rohling >> wrote: >> >> > There are certainly valid uses for SECUSER/SEND/FOR commands -- I don't >> > agree that their use is an abuse of power. But of course they could be >> > depending on what you do with them. I suppose you could consider a >> > SHUTDOWN command an abuse of power as well... ;-) >> >> Your response shows that I failed to make my point. What I mean with >> "abuse of power" is doing the job with tools that are sharper or >> heavier than needed. >> >> I have no reason to walk around all day with a userid capable to issue >> a SHUTDOWN. Most serious installations that I know have rearranged >> their privilege classes such that >> 1) don't use a CLASS A userid unless you have things that require it >> 2) rearrange popular commands (like LOCK and UNLOCK) to avoid 1) as >> long as you can >> 3) move the SHUTDOWN out of CLASS A to avoid mistakes by those that need >> CLASS A >> >> Rob >> > >
Re: z/VM RedHat Virtual Machine Memory abend
Since you are overcommitting memory -- how much paging space do you have? Scott Rohling On Wed, Apr 20, 2011 at 5:32 PM, Carlos Bodra - Pessoal wrote: > q stor > STORAGE = 48G CONFIGURED = 48G INC = 128M STANDBY = 0 RESERVED = 0 > Ready; T=0.01/0.01 20:33:09 > > No xstore defined. > > Carlos Bodra > IBM Certified Specialist System z > Sao Paulo - Brazil > > > Em 20/04/2011 20:04, Davis, Larry (National VM/VSE Capability) escreveu: > > What is your Hardware Memory configuration for Main Storage and XSTORE > for VM > > > > > > > > Larry Davis** > > > > *From:* The IBM z/VM Operating System > [mailto:IBMVM@LISTSERV.UARK.EDU] > *On Behalf Of *Carlos Bodra - Pessoal > *Sent:* Wednesday, April 20, 2011 6:39 PM > *To:* IBMVM@LISTSERV.UARK.EDU > *Subject:* Re: z/VM RedHat Virtual Machine Memory abend > > > > Larry, > > We are running it z/VM 5.4 RSU 1003 (lastest), but problem is connected to > Linux, because I changed MAINT user memory to 128GB and all runs fine. > This machine has no CP´s just IFL´s processors. > > > Carlos Bodra > > IBM Certified Specialist System z > > Sao Paulo - Brazil > > > Em 20/04/2011 19:24, Davis, Larry (National VM/VSE Capability) escreveu: > > Are you Running VM on this or zLinux only on an LPAR? > > > > Larry Davis > > > > *From:* The IBM z/VM Operating System > [mailto:IBMVM@LISTSERV.UARK.EDU] > *On Behalf Of *Carlos Bodra - Pessoal > *Sent:* Wednesday, April 20, 2011 6:19 PM > *To:* IBMVM@LISTSERV.UARK.EDU > *Subject:* z/VM RedHat Virtual Machine Memory abend > > > > > > > Hi s390x Gurus > > I´m new to Linux on z and we are conducting a POC test of Linux Red Hat > with Oracle running under z/VM 5.4 RSU 1003 > and a z/10 BC model A00 (IFL Only). > > If linux virtual machine is defined with 64G in directory we got an abend > during startup (see below). Doing some tests I found that I > can define it until 59G in directory (60794036k from TOP linux command) and > it will startup correctly. > > My questions are: > > 1 - Is this a limitation of linux s390x or Red Hat distribution? > 2 - Is this a linux s390x bug or Red Hat distribution? > 3 - How can I circunvent this so we can continue with POC (Proof Of > Concept)? > > Thanks in advance for all hints and tips about. > > > 00: Booting default > (2.6.18-194.8.1.el5)... > Linux version 2.6.18-194.8.1.el5 (mockbu...@s390-002.build.bos.redhat.com) > (gcc > version 4.1.2 20080704 (Red Hat 4.1.2-48)) #1 SMP Wed Jun 23 11:09:16 EDT > 2010 > We are running under VM (64 bit > mode) > Detected 3 > CPU's > Boot cpu address > 0 > Built 1 zonelists. Total pages: > 16777216 > Kernel command line: root=LABEL=/ > BOOT_IMAGE=0 > PID hash table entries: 4096 (order: 12, 32768 > bytes) > Dentry cache hash table entries: 8388608 (order: 14, 67108864 > bytes) > Inode-cache hash table entries: 4194304 (order: 13, 33554432 > bytes) > *Memory: 65951564k/67108864k available* (3414k kernel code, 0k reserved, > 2256k dat > a, 136k > init) > Write protected kernel read-only data: 0x356000 - > 0x409fff > Calibrating delay loop... 2981.88 BogoMIPS > (lpj=14909440) > Security Framework v1.0.0 > initialized > SELinux: > Initializing. > selinux_register_security: Registering secondary module > capability > Capability LSM initialized as > secondary > Mount-cache hash table entries: > 256 > cpu 0 phys_idx=0 vers=FF ident=01F2D6 machine=2098 > unused=8000 > cpu 1 phys_idx=1 vers=FF ident=01F2D6 machine=2098 > unused=8000 > cpu 2 phys_idx=2 vers=FF ident=01F2D6 machine=2098 > unused=8000 > Brought up 3 > CPUs > migration_cost=1000 > > checking if image is initramfs...it isn't (bad gzip magic numbers); looks > like a > n > initrd > > Freeing initrd memory: 2759k > freed > list_del corruption. prev->next should be 8001bff0, but was > 8001 > c840 > > kernel BUG at > lib/list_debug.c:65! > illegal operation: 0001 > Ý#1¨ > CPU: 0 Not tainted 2.6.18-194.8.1.el5 > #1 > Process swapper (pid: 1, task: c611f788, ksp: > c6123b10) > Krnl PSW : 040400018000 002685d6 > (list_del+0x9e/0xcc) > Krnl GPRS: 0015 c6123cb8 0026 > 0400 >0012a83e 0733 000a > 0050e400 >0001 8001bf90 > 8001bff0 >8001bfce 00369878 002685d2 > c6123d10 > Krnl Code: d2 07 10 08 20 08 e3 10 d0 08 00 04 e3 10 20 08 00 24 e3 > 10 > C
Re: Detaching A disk from z/Linux guest dynamically
I think Rob's comment is valid depending on the situation... You typically would not 'mess' with a running guest unless you own that guest and are responsible for it's continued operation. The owner would want to know why the change was needed and the recommended implementation and want to do it themselves when they deem it necessary and not have you mucking about with their live guest. In the case of Linux guests which are IPLing CMS and then Linux -- the lines are a little blurrier. The Linux guys probably don't want to be bothered messing around with the 191 disk and something that to them is part of the hypervisor and not their concern. As long as you don't mess with anything that Linux uses -- they don't care. There are certainly valid uses for SECUSER/SEND/FOR commands -- I don't agree that their use is an abuse of power. But of course they could be depending on what you do with them. I suppose you could consider a SHUTDOWN command an abuse of power as well... ;-) Scott Rohling On Wed, Apr 20, 2011 at 3:22 PM, Tom Huegel wrote: > If that is the rule, then we don't need SECUSER or FOR, or when would you > use them?? Just courious. > > > On Wed, Apr 20, 2011 at 1:40 PM, Rob van der Heij wrote: > >> On Wed, Apr 20, 2011 at 10:13 PM, Martin, Terry R. (CMS/CTR) (CTR) >> wrote: >> >> > HCPFOR070E – Basically it is an authorization issue with the FOR >> command. We >> > are running RACF here so do you know what the profile would be and what >> RACF >> > class would need to be activated to define and permit this resource? >> Can I >> > also do this via the SECUSER command? >> >> The SECUSER can issue these >> #CP SEND CP LINUX007 DET 191 >> #CP SEND CP LINUX007 LINK * 191 191 MR >> >> But in general I consider it abuse of power to use a privileged userid >> (with FOR authorisation or as SECUSER) when the user could have done >> it himself. You could also do it from Linux (use "modprobe vmcp" if >> that does not happen at boot time already) >> vmcp "det 191" >> vmcp "link * 191 191 mr" >> >> Rob >> > >
Re: Detaching A disk from z/Linux guest dynamically
I'm thinking this would be controlled by VMCMD/VMXEVENT.. on my system a RAC VMXEVENT LIST shows that 'FOR.C' is 'NO_CTL' - so is not controlled by RACF.Not quite sure how to tell you to create and permit users to it if yours is CTL without some more digging. Maybe someone else will have this more readily at their fingertips. FOR is essentially the same as SET SECUSER and SEND commands.. so you can use these instead of FOR if you like.. : CP SET SECUSER user * CP SEND CP user command Note that CP is in FRONT of the user on the SEND .. indicating you want to SEND a command to the guest's CP - not the guest OS.. Also note: You likely want to issue SET SECUSER user RESET shortly after issuing the SEND CP command so that you don't stay secondary user for everyone you do this to. Scott Rohling On Wed, Apr 20, 2011 at 2:13 PM, Martin, Terry R. (CMS/CTR) (CTR) < terry.mar...@cms.hhs.gov> wrote: > Thanks Tom I was just about to ask this question because I have a bunch of > guests that I need to change. > > > > Now I tried the FOR command and received this: > > > > HCPFOR070E – Basically it is an authorization issue with the FOR command. > We are running RACF here so do you know what the profile would be and what > RACF class would need to be activated to define and permit this resource? > Can I also do this via the SECUSER command? > > > > *Thank You,* > > * * > > *Terry Martin* > > *Lockheed Martin* > > *CMS - CITIC* > > *3300 Lord Baltimore Drive, Suite 200, 21244 > **Engineering Computing* > > *Mainframe Support* > > *Cell - 443 632-4191* > > * * > > > > *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On > Behalf Of *Tom Huegel > *Sent:* Wednesday, April 20, 2011 2:37 PM > > *To:* IBMVM@LISTSERV.UARK.EDU > *Subject:* Re: Detaching A disk from z/Linux guest dynamically > > > > Since these are CP commands use FOR command and avoid logging on the LINUX > machine. > > FOR linuxname CMD DET 191 > FOR linuxname CMD LINK * 191 191 MR > > > > > > > On Wed, Apr 20, 2011 at 8:45 AM, David Boyes > wrote: > > If the 191 is only used at Linux boot, you can change the directory entry > and then login to the VM userid running the Linux system and: > > > > BEGIN (if you get a CP READ) > > #CP DET 191 > > #CP LINK * 191 191 MR > > #CP DISC > > > > (assuming your LINEND char is #) > > > > If you are actually using the disk during runtime, then it’s a lot safer to > bounce the guest. > > > > -- db > > > > > > *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On > Behalf Of *Martin, Terry R. (CMS/CTR) (CTR) > *Sent:* Wednesday, April 20, 2011 10:22 AM > *To:* IBMVM@LISTSERV.UARK.EDU > *Subject:* Detaching A disk from z/Linux guest dynamically > > > > Hi > > > > I have a copy of the DASD volume where the A (191) disk resides for a > specific z/Linux guest. I want to point the guest to the new copied volume > from the one it is currently using without bringing the guest down. Is there > a way to do this? > > > > *Thank You,* > > * * > > *Terry Martin* > > *Lockheed Martin* > > *CMS - CITIC* > > *3300 Lord Baltimore Drive, Suite 200, 21244 > Engineering Computing* > > *Mainframe Support* > > *Cell - 443 632-4191* > > * * > > > > >
Re: Detaching A disk from z/Linux guest dynamically
Terry.. RELEASE is a CMS command.. not CP. You can use the CP command DETACH to detach a specific address.. but RELEASE will fail. ACCESS/RELEASE are strictly CMS concepts. If Linux is running -- then CMS is not -- so RELEASE/ACCESS have no meaning. I'm assuming you first IPL CMS in your Linux guests and it runs a PROFILE EXEC, which then IPLs the Linux disk. Once Linux is IPLed - no disks are 'accessed' as CMS is gone. So you're only left with DETACH/LINK to deal with virtual disks. Hope that helps - Scott Rohling On Wed, Apr 20, 2011 at 9:55 AM, Martin, Terry R. (CMS/CTR) (CTR) < terry.mar...@cms.hhs.gov> wrote: > Hi, > > > > Ok I got it. Before I contacted the list I had tried doing the ‘#CP REL A > (DET’ from the guest. It did not take saying it was unknown command sort of > what you get when you are issuing a command that the user’s class does not > allow. So I thought that the user did not have authority to do even the > DEATCH. So now I know! > > > > Thanks! > > > > *Thank You,* > > * * > > *Terry Martin* > > *Lockheed Martin* > > *CMS - CITIC* > > *3300 Lord Baltimore Drive, Suite 200, 21244 > **Engineering Computing* > > *Mainframe Support* > > *Cell - 443 632-4191* > > * * > > > > *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On > Behalf Of *Scott Rohling > *Sent:* Wednesday, April 20, 2011 10:44 AM > > *To:* IBMVM@LISTSERV.UARK.EDU > *Subject:* Re: Detaching A disk from z/Linux guest dynamically > > > > Yes - > > > > - change the directory entry for the user to point to the new (copied) > volume - put directory online > > - on the guest - #CP DETACH 191 and then #CP LINK * 191 191 MR(or on > linux: vmcp detach 191 and vmcp link myuser 191 191 mr ... where 'myuser' > is the name of the userid.. (the * confuses bash so specify the user). > > > > If this is a Linux guest -- then the 191 isn't accessed any more (Linux is > running).. so no need to reaccess. > > > > Scott Rohling > > > > On Wed, Apr 20, 2011 at 8:21 AM, Martin, Terry R. (CMS/CTR) (CTR) < > terry.mar...@cms.hhs.gov> wrote: > > Hi > > > > I have a copy of the DASD volume where the A (191) disk resides for a > specific z/Linux guest. I want to point the guest to the new copied volume > from the one it is currently using without bringing the guest down. Is there > a way to do this? > > > > *Thank You,* > > * * > > *Terry Martin* > > *Lockheed Martin* > > *CMS - CITIC* > > *3300 Lord Baltimore Drive, Suite 200, 21244 > Engineering Computing* > > *Mainframe Support* > > *Cell - 443 632-4191* > > * * > > > > >
Re: Detaching A disk from z/Linux guest dynamically
Yes - - change the directory entry for the user to point to the new (copied) volume - put directory online - on the guest - #CP DETACH 191 and then #CP LINK * 191 191 MR(or on linux: vmcp detach 191 and vmcp link myuser 191 191 mr ... where 'myuser' is the name of the userid.. (the * confuses bash so specify the user). If this is a Linux guest -- then the 191 isn't accessed any more (Linux is running).. so no need to reaccess. Scott Rohling On Wed, Apr 20, 2011 at 8:21 AM, Martin, Terry R. (CMS/CTR) (CTR) < terry.mar...@cms.hhs.gov> wrote: > Hi > > > > I have a copy of the DASD volume where the A (191) disk resides for a > specific z/Linux guest. I want to point the guest to the new copied volume > from the one it is currently using without bringing the guest down. Is there > a way to do this? > > > > *Thank You,* > > * * > > *Terry Martin* > > *Lockheed Martin* > > *CMS - CITIC* > > *3300 Lord Baltimore Drive, Suite 200, 21244 > **Engineering Computing* > > *Mainframe Support* > > *Cell - 443 632-4191* > > * * > > >
Re: VMLINK behavior
Does VMLINK with the NONAMES option cause the same behavior? VMLINK user disk (NON I'm not sure about in this case, but NAMES files can sometimes create problems when using VMLINK - so I tend to use NONames Scott Rohling On Tue, Apr 19, 2011 at 2:08 PM, Alain Benveniste wrote: > I executed this exec : > /**/ > "VMLINK 5VMDIR40 0491" > "VMLINK 5VMDIR40 0492" > "VMLINK 5VMDIR40 011F" > "VMLINK 5VMDIR40 041F" > "VMLINK DIRMAINT 01AA" > "VMLINK DIRMAINT 01FA" > "VMLINK DIRMAINT 02AA" > "VMLINK DIRMAINT 0155" > "VMLINK DIRMAINT 01DF" > > > DMSACC048E Invalid filemode S > Ready(02024); T=0.01/0.01 16:05:35 > > I received DMSACC048E Invalid filemode S for the VMLINK DIRMAINT 01DF > > q disk > LABEL VDEV M STAT CYL TYPE BLKSZ FILES BLKS USED-(%) BLKS LEFT BLK > TOTAL > MNT191 191 A R/W 175 3390 4096 121 1459-05 30041 > 31500 > MNT190 190 S R/O 100 3390 4096 704 15293-85 2707 > 18000 > DIR155 127 T R/O 9 3390 4096 10 23-01 1597 > 1620 > DIR1AA 126 U R/O 9 3390 40966 13-01 1607 > 1620 > DRM41F 125 V R/O 8 3390 4096 50642-45798 > 1440 > DIR11F 124 W R/O15 3390 4096 49629-23 2071 > 2700 > DRM492 121 X R/O15 3390 4096 269 1490-55 1210 > 2700 > MNT19E 19E Y/S R/O 250 3390 4096 1779 38956-87 6044 > 45000 > DRM491 120 Z R/O15 3390 4096 259 1410-52 1290 > 2700 > Ready; T=0.01/0.01 16:05:41 > > I used the version of vmlink created in september 2010 > > Alain Benveniste >
Re: DIRMAINT
You should name it to USER INPUT - not INPUT USER.. You also need to ERASE or RENAME USER DIRECT on the DIRMAINT 1DF as well.. I'm really not sure if the above is the reason you are getting the message -- maybe you entered the password wrong - not sure.. but make sure you are rebuilding the directory correctly. Scott Rohling On Mon, Apr 11, 2011 at 12:33 PM, Martin, Terry R. (CMS/CTR) (CTR) < terry.mar...@cms.hhs.gov> wrote: > Hi > > > > I think I may have screwed up here. I had to make multiple changes to my > Directory so I did the following: > > > > I did a DIRM USER WITHPASS to get the current directory > > > > I then added my changes to USER WITHPASS on my A disk > > > > I then shutdown DIRMAINT. > > > > I then copied the USER WITHPASS from my A disk to DIRMAINT’S 1DF disk as > INPUT USER > > > > I then started DIRMAINT backup issuing the DVHBEGIN command > > > > I then logged on to MAINT and issued DIRM FOR M1P3 GET and I get the > following. Where did I mess up?: > > > > > > DVHREQ2286E The password you supplied does not match the current > > DVHREQ2286E directory password for MAINT; your request is ignored. > > > > > > *Thank You,* > > * * > > *Terry Martin* > > *Lockheed Martin* > > *CMS - CITIC* > > *3300 Lord Baltimore Drive, Suite 200, 21244 > **Engineering Computing* > > *Mainframe Support* > > *Cell - 443 632-4191* > > * * > > >
Re: WAKEUP
WAKEUP will stack the command (or text or whatever is there) -- not execute it.. you need code around it to pull it off the stack and execute it.. Scott Rohling On Fri, Apr 8, 2011 at 9:09 AM, Billy Bingham < billy.bingham...@suddenlink.net> wrote: > Hello, > > I'm trying to understand WAKEUP. I have the following in WAKEUP TIMES A: > > ALL 09:01:00 04/07/11 CP MSG OPERATOR BACKUP THE DASD TONIGHT > > I enter the command: wakeup 09:12 (file > > This is displayed: > DMSCYW2246I 08:58:43 WAKEUP at 09:01:00 (137 > sec). > > At 09:01 as expected I get the following on the user console: > > DMSCYW2246I* 1 ALL 09:01:00 04/08/11 CP MSG OPERATOR BACKUP THE DASD > TONIGHT > Ready(3); T=0.01/0.01 > 09:01:00 > > IS the RC 3 from WAKEUP or from the CP MSG... command. The message does > not get displayed on OPERATOR's console, but if I enter the CP MSG... > command itself the message gets to OPERATOR. > > > Thanks, > > Billy >
Re: DIRMAINT question regarding DASD
And you don't have to take DIRMAINT down to erase files--you can issue DIRM CMS ERASE xxx VCONTROL E (don't have a system handy - I think 1DF is accessed as E -- otherwise do a DIRM CMS Q DISK or DIRM CMS LISTFILE * VCONTROL * to figure it out) Scott Rohling On Fri, Apr 8, 2011 at 9:36 AM, Scott Rohling wrote: > I would try a DIRM RLDE first... that should rebuild the VCONTROL files... >I'm 'pretty' sure it erases them all first --- but if not - then yes, you > can erase them, though I would report it as a bug and leave one around to be > able to recreate. > > Scott Rohling > > > On Fri, Apr 8, 2011 at 9:20 AM, wrote: > >> You can erase them but you will have to take down DIRMAINT first >> >> *Joseph Di Pippo >> Operating Systems Programmer III >> FRIT Computing Services >> z/OS, z/VM, Hardware Support >> 1-201-531-3820* >> >> >> >> From:Karl Kingston >> To:IBMVM@LISTSERV.UARK.EDU >> Date:04/08/2011 11:11 AM >> Subject:Re: DIRMAINT question regarding DASD >> Sent by:The IBM z/VM Operating System >> -- >> >> >> >> Found them. So how do I get rid of them? >> >> >> >> >> >> From:joe.dipi...@frit.frb.org >> To:IBMVM@LISTSERV.UARK.EDU >> Date:04/08/2011 11:08 AM >> Subject:Re: DIRMAINT question regarding DASD >> Sent by:The IBM z/VM Operating System >> -- >> >> >> >> Karl, >> >> The VCONTROL files can be found on the DIRMAINT 1DF minidisk. >> >> LINK * 1DF 1DF RR >> ACCESS 1DF m >> FILELIST * * m * >> >> Joseph Di Pippo >> Operating Systems Programmer III >> FRIT Computing Services >> z/OS, z/VM, Hardware Support >> 1-201-531-3820* >> >> >> >> From:Karl Kingston >> To:IBMVM@LISTSERV.UARK.EDU >> Date:04/08/2011 11:05 AM >> Subject:Re: DIRMAINT question regarding DASD >> Sent by:The IBM z/VM Operating System >> -- >> >> >> >> VCONTROL file? where do I find this? >> >> >> >> >> >> From:joe.dipi...@frit.frb.org >> To:IBMVM@LISTSERV.UARK.EDU >> Date:04/08/2011 11:00 AM >> Subject:Re: DIRMAINT question regarding DASD >> Sent by:The IBM z/VM Operating System >> -- >> >> >> >> Karl, >> >> You are saying that at not time in the past, these volumes were not >> referenced in any of your user directory entries? What is the creation date >> of the vcontrol file? * >> >> Joseph Di Pippo >> Operating Systems Programmer III >> FRIT Computing Services >> z/OS, z/VM, Hardware Support >> 1-201-531-3820* >> >> >> >> From:Karl Kingston >> To:IBMVM@LISTSERV.UARK.EDU >> Date:04/08/2011 10:57 AM >> Subject:Re: DIRMAINT question regarding DASD >> Sent by:The IBM z/VM Operating System >> -- >> >> >> >> Yes, the DIRMAP shows: >> >> VM1L0A 3390 0 1112 1113 Gap >> >> 0 >> >> VM1L06 3390 0 1112 1113 Gap >> >> 0 >> >> VM1L07 3390 0 1112 1113 Gap >> >> 0 >> >> VM1L08 3390 0 1112 1113 Gap >> >> 0 >> >> VM1L09 3390 0 1112 1113 Gap >> >> 0 >> >> >> But why are they there? They're not supposed to be there. >> >> >> >> >> From:joe.dipi...@frit.frb.org >> To:IBMVM@LISTSERV.UARK.EDU >> Date:04/08/2011 10:54 AM >> Subject:Re: DIRMAINT question regarding DASD >> Sent by:The IBM z/VM Operating System >> -- >> >> >> >> Karl, >> >> Did you run a DIRM DI
Re: DIRMAINT question regarding DASD
I would try a DIRM RLDE first... that should rebuild the VCONTROL files... I'm 'pretty' sure it erases them all first --- but if not - then yes, you can erase them, though I would report it as a bug and leave one around to be able to recreate. Scott Rohling On Fri, Apr 8, 2011 at 9:20 AM, wrote: > You can erase them but you will have to take down DIRMAINT first > > *Joseph Di Pippo > Operating Systems Programmer III > FRIT Computing Services > z/OS, z/VM, Hardware Support > 1-201-531-3820* > > > > From:Karl Kingston > To:IBMVM@LISTSERV.UARK.EDU > Date:04/08/2011 11:11 AM > Subject:Re: DIRMAINT question regarding DASD > Sent by:The IBM z/VM Operating System > -- > > > > Found them. So how do I get rid of them? > > > > > > From:joe.dipi...@frit.frb.org > To:IBMVM@LISTSERV.UARK.EDU > Date:04/08/2011 11:08 AM > Subject:Re: DIRMAINT question regarding DASD > Sent by:The IBM z/VM Operating System > -- > > > > Karl, > > The VCONTROL files can be found on the DIRMAINT 1DF minidisk. > > LINK * 1DF 1DF RR > ACCESS 1DF m > FILELIST * * m * > > Joseph Di Pippo > Operating Systems Programmer III > FRIT Computing Services > z/OS, z/VM, Hardware Support > 1-201-531-3820* > > > > From:Karl Kingston > To:IBMVM@LISTSERV.UARK.EDU > Date:04/08/2011 11:05 AM > Subject:Re: DIRMAINT question regarding DASD > Sent by:The IBM z/VM Operating System > -- > > > > VCONTROL file? where do I find this? > > > > > > From:joe.dipi...@frit.frb.org > To:IBMVM@LISTSERV.UARK.EDU > Date:04/08/2011 11:00 AM > Subject:Re: DIRMAINT question regarding DASD > Sent by:The IBM z/VM Operating System > -- > > > > Karl, > > You are saying that at not time in the past, these volumes were not > referenced in any of your user directory entries? What is the creation date > of the vcontrol file? * > > Joseph Di Pippo > Operating Systems Programmer III > FRIT Computing Services > z/OS, z/VM, Hardware Support > 1-201-531-3820* > > > > From:Karl Kingston > To:IBMVM@LISTSERV.UARK.EDU > Date:04/08/2011 10:57 AM > Subject:Re: DIRMAINT question regarding DASD > Sent by:The IBM z/VM Operating System > -- > > > > Yes, the DIRMAP shows: > > VM1L0A 3390 0 1112 1113 Gap > > 0 > > VM1L06 3390 0 1112 1113 Gap > > 0 > > VM1L07 3390 0 1112 1113 Gap > > 0 > > VM1L08 3390 0 1112 1113 Gap > > 0 > > VM1L09 3390 0 1112 1113 Gap > > 0 > > > But why are they there? They're not supposed to be there. > > > > > From:joe.dipi...@frit.frb.org > To:IBMVM@LISTSERV.UARK.EDU > Date:04/08/2011 10:54 AM > Subject:Re: DIRMAINT question regarding DASD > Sent by:The IBM z/VM Operating System > -- > > > > Karl, > > Did you run a DIRM DIRMAP? * > > > Joseph Di Pippo > Operating Systems Programmer III > FRIT Computing Services > z/OS, z/VM, Hardware Support > 1-201-531-3820* > > > > From:Karl Kingston > To:IBMVM@LISTSERV.UARK.EDU > Date:04/08/2011 10:47 AM > Subject:Re: DIRMAINT question regarding DASD > Sent by:The IBM z/VM Operating System > -- > > > > Joe, > > Searched the directory but didn't find them. > > > > > > From:joe.dipi...@frit.frb.org > To:IBMVM@LISTSERV.UARK.EDU > Date:04/08/2011 10:44 AM > Subject:Re: DIRMAINT question regarding DASD > Sent by:The IBM z/VM Operating System > -- > > > > Karl, > > I believe that they are created in response to volume references found
Re: z/VM & z/OS sharing same DASD
You're hitting the nail on the head.. 'best practice' is to dedicate the DASD to each LPAR in the IODEF.. but this is best practice when security or data integrity demands 'physical' separation. It keeps you from shooting yourself in the foot and makes it impossible for an LPAR to effect another's DASD (unless the IODEF allows it). It comes at a cost, though. You also have to take other things into consideration.. Maybe you want to backup your z/VM system volumes from z/OS - maybe you want the flexibility to put a free volume on either LPAR quickly without loading a new IODEF. What are the real requirements and restrictions you have to live under? What makes sense to you in terms of keeping things 'safe'? Some solutions beyond IO definitions (from a z/VM perspective - maybe others can talk about z/OS): - Update SYSTEM CONFIG on z/VM to only put online the addresses that you've designated belong to the z/VM LPAR.Make that your control and update it if you bring DASD dynamically to give to z/VM - Use AUTOLOG1/2 PROFILE EXEC to VARY OFF/ON the appropriate addresses so z/VM only has online what belongs to it. This is now your control over what's online to z/VM or not. The only way to really prevent someone with privs from varying on the DASD is to make the control the IODEF.. the LPAR only sees what belongs to it - period. The real question is 'what are the rules I must abide by'? -- maybe you have a company policy that addresses it - maybe you don't. Within those boundaries (or lack of them) - come up with the safest way to implement with the lowest amount of effort. You're not making mountains -- you have valid questions.. and the valid security/integrity concern of an LPAR having access to another's data. You need some solution to keep it all straight for sure! Scott Rohling On Tue, Apr 5, 2011 at 4:43 PM, Karl Huf wrote: > I could have sworn I had seen something about this in a presentation > regarding "best practices" for configuring z/OS & z/VM LPAR's that share > the same DASD subsystems but now that I need it, no joy. > > We have 2 (z10) CEC's, each with z/VM and z/OS LPAR's attached via FICON > Directors to a pair of DS8700's. As currently configured all of the DASD > is defined on common LCU's and all of the DASD is online to all systems. > This makes me nervous but perhaps my fears are unfounded? My gut tells me > that a better configuration would be having the VM DASD segregated onto > dedicated LCU's and the rest of the MVS DASD on their own LCU's - and that > the respective devices not be online to the "foreign" OS's. Due to other > recent discoveries we have some DASD reconfiguration work ahead of us > anyway and, if it's worthwhile, I'd like to pile on with getting the VM > DASD to be isolated as part of that work - but at the moment I can't > quantify to those that would do the work why. > > Are there good reasons or am I making mountains where there are no > molehills? TIA. > > > > ___ > Karl S Huf | Senior Vice President | World Wide Technology > 840 S Canal, Chicago, IL, 60607 | phone (312)630-6287 | k...@ntrs.com > Please visit northerntrust.com > CONFIDENTIALITY NOTICE: This communication is confidential, may be > privileged and is meant only for the intended recipient. If you are not > the intended recipient, please notify the sender ASAP and delete this > message from your system. > > IRS CIRCULAR 230 NOTICE: To the extent that this message or any attachment > concerns tax matters, it is not intended to be used and cannot be used by > a taxpayer for the purpose of avoiding penalties that may be imposed by > law. For more information about this notice, see > http://www.northerntrust.com/circular230 > > P Please consider the environment before printing this e-mail. >
Re: Is there a free evaluation copy of Linux for z/VM?
There is a mailing list for Linux on z >> linux-...@vm.marist.edu Both Novell (SLES) and RedHat (RHEL) can be downloaded at their respective web sites.. you'll be looking for the 's390x' binaries. You can download and use for free (respecting the various GPLs, etc).. and then purchase if you want support and access to updates, etc. There are also other flavors (e.g. CentOS) but if you likely want to stick with SLES or RHEL. Most government agencies I've worked with have been using RHEL on both the mainframe and other platforms.. but that's just from personal experience - I haven't done a survey or anything :) Usually, for ease of migration and support - you stick with the distro you use on the distributed platforms.. Scott Rohling On Mon, Apr 4, 2011 at 8:43 AM, Hughes, Jim wrote: > Is there a free evaluation copy of Linux for z/VM? There are rumors > from those flying at 50,000 feet that we may be asked questions about > Linux on z/VM. > > On the other hand, would it be a proper use of this forum to post the > questions here or is there a Linux for z/VM list? > > > Jim Hughes > Consulting Systems Programmer > Mainframe Technical Support Group > Department of Information Technology > State of New Hampshire > 27 Hazen Drive > Concord, NH 03301 > 603-271-5586Fax 603.271.1516 > > Statement of Confidentiality: The contents of this message are > confidential. Any unauthorized disclosure, reproduction, use or > dissemination (either whole or in part) is prohibited. If you are not > the intended recipient of this message, please notify the sender > immediately and delete the message from your system. >
Re: Dynamically adding page space
Well -- VMPPG5 is not VMPAG5.. relabel 100C to VMPPG5 and maybe it will go better ;-) Scott Rohling On Tue, Mar 29, 2011 at 7:19 AM, Bauer, Bobby (NIH/CIT) [E] < baue...@mail.nih.gov> wrote: > and now for the rest of the email > > > > q cpowned > > Slot Vol-ID Rdev Type Status > >1 VMPRES 1003 OwnOnline and attached > >2 VMPSPL 1004 OwnOnline and attached > >3 VMPPAG 1002 OwnOnline and attached > >4 VMPW01 1005 OwnOnline and attached > >5 VMPW02 1006 OwnOnline and attached > >6 VMPPG2 10E5 OwnOnline and attached > >7 VMPW03 10EF OwnOnline and attached > >8 VMPPG3 108F OwnOnline and attached > >9 VMPPG4 109C OwnOnline and attached > > 10 VMPPG5 OwnOffline > > > > q 100c > > DASD 100C CP SYSTEM VMPAG5 0 > > > > > > Bobby Bauer > Center for Information Technology > National Institutes of Health > Bethesda, MD 20892-5628 > 301-594-7474 > > *From:* Bauer, Bobby (NIH/CIT) [E] > *Sent:* Tuesday, March 29, 2011 9:18 AM > > *To:* IBMVM@LISTSERV.UARK.EDU > *Subject:* RE: Dynamically adding page space > > > > That would help! > > > > I did that but it still didn’t changed the cpowned state > > > > > > Bobby Bauer > Center for Information Technology > National Institutes of Health > Bethesda, MD 20892-5628 > 301-594-7474 > > *From:* Karl Kingston [mailto:karlkings...@ongov.net] > *Sent:* Tuesday, March 29, 2011 9:14 AM > *To:* IBMVM@LISTSERV.UARK.EDU > *Subject:* Re: Dynamically adding page space > > > > You're missing: > > ATTACH 100C TO SYSTEM > > > > > > From:"Bauer, Bobby (NIH/CIT) [E]" > To:IBMVM@LISTSERV.UARK.EDU > Date:03/29/2011 09:10 AM > Subject:Dynamically adding page space > Sent by:The IBM z/VM Operating System > -- > > > > > I’m trying to dynamically add a page pack to our z/VM system and I’ve got a > situation that I don’t have in my notes. z/VM 5.4 on a z9 > I’ve formatted the volume (3330-3) as a page volume and defined a cpowned > slot for it. > > def cpowned slot 10 VMPPG5 > > But when I display cpowned, it show as offline: > > q cpowned > Slot Vol-ID Rdev Type Status >1 VMPRES 1003 OwnOnline and attached >2 VMPSPL 1004 OwnOnline and attached >3 VMPPAG 1002 OwnOnline and attached >4 VMPW01 1005 OwnOnline and attached >5 VMPW02 1006 OwnOnline and attached >6 VMPPG2 10E5 OwnOnline and attached >7 VMPW03 10EF OwnOnline and attached >8 VMPPG3 108F OwnOnline and attached >9 VMPPG4 109C OwnOnline and attached > 10 VMPPG5 OwnOffline > > However: > > q 100c > DASD 100C VMPAG5 > > > So what have I missed? > > > Bobby Bauer > Center for Information Technology > National Institutes of Health > Bethesda, MD 20892-5628 > 301-594-7474 > > >
Re: updating IPLPARMS to new console address
You can set the console addresses in SYSTEM CONFIG that z/VM should use... see the 'Operator_Consoles' variable. SET IPLPARMS is for a subsequent SHUTDOWN RESTART .. which it doesn't sound like you did from the way you worded it? Scott Rohling On Sun, Mar 27, 2011 at 12:50 PM, Phillip Gramly wrote: > I want to change the IPLPARMS to use an ICC console address instead of a > real address on our old 3174. > I used the CP command SET IPLPARMS and replied CONS=B00 and got the message > back: > IPL parameters have been replaced > > If I check it with Q IPLPARMS it shows B00 > indeed, when I issue SHUTDOWN, the messages start displaying on the OSA-ICC > B00 address TN3270 > But, when I restart VM, it IPLs on the old 3174 address. > > How do I make the SET IPLPARMS override permanent? > > Phillip Gramly > Systems Programmer > Communications Data Group > Champaign, IL >
Re: Anyone using Dirmaint with a z10?
I recall using SET CPUID (command or directory) to make yourself immune to the system CPUID changing.. - Set the DIRMAINT guests (DIRMAINT/DIRMSAT/DATAMOVE) to a simple CPUID number (e.g. 1) - Use the CPUID in the directory (1) - Use different numbers if you need to distinguish between systems (2, etc) -- DIRMSAT machines only -- everyone else can stay 1 in the complex. I tried this a long time ago and it worked fine - but others were uncomfortable with 'hiding' the real CPUID... I can't recall the objections now. You can also play games with CPUID to make SYSTEM NETID immune .. (1 is always MYVM1, 2 is MYVM2, etc). I think setting CPUID (making it truly virtual) can be a useful method in the right circumstances (sorry - perhaps not germane to Robert's problem (though it may be a future strategy?) - but Kris's comment on the CPUID got me thinking about it again) Scott Rohling On Sun, Mar 20, 2011 at 7:02 AM, Kris Buelens wrote: > You've got the model from Q CPUID? (a z10 BC is a 2098, an EC is a 2097) > No hex 41 somewhere? SET OUTPUT 41 _ can make those visible. > The DIRMSAT has no CPUID statement in its directory entry? So CP FOR > DIRMSAT CMD Q CPUID can help. > > > 2011/3/20 RPN01 > >> We just installed a z10 processor this morning, and the Dirmaint >> satellite on it won’t install a directory. The message I get says that there >> is no DIRECTORY statement which matches the serial and model number, and >> then has the serial and model in parens. OK, so I cut and paste the serial >> and model and copied it into a directory statement in Dirmaint (which >> actually matched what I had there, but hey, I wanted to be sure it was >> right). I tried direct again, and it still says the same thing. >> >> The old statement for our z9 was: >> >> DIRECTORY 0123 3390 54GRES 0123 025A7E-2094 GRIZZLY >> >> >> And I replaced it with the following for the z10: >> >> DIRECTORY 0123 3390 54GRES 0123 02B3E6-2097 GRIZZLY >> >> What small gem of wisdom am I missing here? >> >> -- >> Robert P. Nix Mayo Foundation.~. >> RO-OC-1-18 200 First Street SW/V\ >> 507-284-0844 Rochester, MN 55905 /( )\ >> -^^-^^ >> "In theory, theory and practice are the same, but >> in practice, theory and practice are different." >> >> > > > -- > Kris Buelens, > IBM Belgium, VM customer support >
Re: Moderator comment, Re: [IBMVM] "Social Security Confronts IT Obsolescence"
Let me gently nudge you away from apologizing for the USA and rambling on - moderator or not. It's enough to say this forum is for technical discussions - not politics, religion, sports, or other interests. The SSA discussion is certainly way off topic, but I think you just went off on your own rant. IMHO. Let's just forgive, forget and move on.. Scott Rohling On Tue, Mar 15, 2011 at 1:59 PM, IBMVM Moderator wrote: > "And now, a word from our moderator..." > > Ladies, Gentlemen, dearest colleagues: > > Allow me, if I may, to offer a gentle nudge back toward the stated topic of > the list. > > Many of our fellow travelers on this list are - as hard as this may be for > some of the audience to believe - citizens of nations other than the USA. > Like many of you who are US citizens, I have my own well-reasoned, > insightful, passionate opinions regarding the energetic hi-jinks displayed > by the entirety of our duly elected government. > > That being said, I must beg all of you to please bear in mind the > following: > >- This forum is intended to serve as a vessel for all things related to > z/VM. Should the US SSA choose to implement solutions to their IT > infrastructure problems which leverage this technology, I am certain that > many of us will be positively giddy with joy. > >- This is not an appropriate forum for the airing one's political > opinions. To do otherwise is to abuse the hospitality of our gracious host, > The University of Arkansas. > >- With respect to our colleagues who are not resident in the USA, may I > suggest that discussions of US political theater in this forum are, at > worst, vulgar displays of family drama in front of guests. At best, this > behavior is comparable to holding our innocent and hitherto-unsuspecting > companions hostage in a small enclosed space while airing your (no doubt > well-founded) opinions regarding the intellectual superiority of one's > grandchildren, the intimate personal details of recent medical care > experiences, or the ethical / moral shortcomings of the new neighbors. > > Although the hapless targets of these epiphanies may bear this rudeness > with apparent good grace, I am compelled to speculate that they are > vigorously scrambling about the interior of their own minds, desperately > laboring to choose which of their own limbs they could best discreetly gnaw > off in order to effect an escape from further conversation. > > In brief: Kindly stick to the nuts and bolts of the technical issue > presented for discussion. Pithy witticisms regarding the surrounding > political infrastructure are not germane, and thus would be better directed > to practically any venue other than this one. Your extreme cleverness is > already obvious by simple virtue of your presence on the list, and need not > be further displayed to the rest of the class. > > Your irascible yet lovable moderator, > > -dan. > > Daniel P. Martin -- IBMVM List Janitor > modera...@gizmoworks.com / dmar...@gizmoworks.com >
Re: DMSJLD653E Error
A HELP LISTDIR shows this: DMS1240E You are not authorized to connect to file pool filepoolid (RC=76) Not your message, but the RC seems to indicate that TCPMAINT isn't authorized to the filepool... Scott Rohling On Thu, Mar 10, 2011 at 7:11 AM, Willimann, Alan (NIH/CIT) [C] < alan.willim...@nih.gov> wrote: > After applying latest PTF’s to z/VM 5.4, tried to define a SFS pool for > SSLSERV. > > Signed on to TCPMAINT. > > > > DIRLIST VMSYS:. > > DMSJLD653E Error executing LISTDIR, rc=76 > > > > What do I need to do? > > > > Thanks, > > > > Alan Willimann > > Center for Information Technology > > National Institute of Health > > Bethesda, MD 20892-5628 > > 301-402-5158 office > > 410-422-9671 cell > > >
Re: zVM User Definitions
Good point, Kris. We actually do the same.. we have a VMADMINS group -- and give that permissiong to LOGONBY. We add/remove people from the VMADMINS group - not all the defininitions it may be part of. It 'is' a much better way to manage things. You do need to make sure GROUPLIST is YES so that groups other than the default group are checked for permissions. Scott Rohling On Wed, Mar 9, 2011 at 11:30 AM, Kris Buelens wrote: > At my former customer, we created several RACF groups. To name a few: > LBSYST to control LOGONBY to various users by system programmers > LBOPER for the operators' group > SYSALL to permit the system programmers to link to most MDISKs > When there is a new system programmer: > RAC CONNECT theNewGuy GROUP(SYSALL) SPECIAL > RAC CONNECT theNewGuy GROUP(LBSYST) SPECIAL > For a new server: > RAC RDEFINE SURROGAT LOGONBY.server > RAC PERMIT LOGONBY.server CLASS(SURROGAT) ID(LBSYST) ACCESS(ALTER) > For a new system SW minidisk: > RAC RDEFINE VMMDISK xx. > RAC PERMIT x. CLAS(VMMDISK) ID(SYSALL) ACCESS(ALTER) > > In general: work with groups, and give permissions to groups, not to > individual people. > > 2011/3/9 Richard Troth > > You've gotten several excellent responses along the common theme: "logon >> by". >> >> I like to translate VM concepts into Unix/Linux/POSIX concepts for the >> sake of your peers. Think "sudo". If your auditors fear that word >> (they should not), then remind them that you have RACF in place, so >> z/VM will only do this under control of the security tool. (It *can* >> do logon by w/o RACF, but config is different.) >> >> In Unix/Linux land, many admins increasingly require: sign on with >> your own credentials, then 'sudo' as needed. It's good hygiene. You >> get a better audit trail and yet can still do all the work you need >> to. The difference on z/VM is that you're using virtual machines >> instead of just processes, so you have to do it from the logon screen >> ... >> >>logon maint by wvogtman >> >> Ahhh... Enjoy! >> >> -- R; <>< >> Rick Troth >> Velocity Software >> http://www.velocitysoftware.com/ >> >> >> >> >> >> >> >> >> On Wed, Mar 9, 2011 at 11:28, Vogtmann, Wallace B >> wrote: >> > We're new to zVM. Have the system operational with standard IBM supplied >> > User/Guest definitions. For example, we've implemented RACF, DIRMAINT, >> > & PERF TK (soon Omegamon XE). >> > >> > Our security folks don't really like us logging in as MAINT, TCPMAINT, >> > RACMAINT, etc. to do our changes - can't really tell who is doing what. >> > Plus it's hard to have good/secure passwords when need to have multiple >> > real users login to multiple guests, etc. >> > >> > Is there any examples of what would be good definitions for (1) standard >> > system programmer guest accounts and (2) standard service machines? What >> > RIGHTS and ACCESS definitions should be standard. We only plan on >> running >> > Linux guests and standard IBM/3rd party tools, so just need a few >> > Users/Guests >> > that have the appropriate access for SysProg support, etc. >> > >> > Basically, we have the system in and operational, but NOW how should we >> > REALLY >> > have it setup to run/manage it securely and effectively. Any RedBooks? >> > I've looked, but don't see any that fit the bill. >> > >> > Thx >> > - Wally Vogtmann >> > - Technical Services >> > - wvogt...@tcfbank.com >> > Disclaimer >> > This email may contain privileged and/or confidential information that >> > is intended solely for the use of the addressee. If you are not the >> > intended recipient, you are strictly prohibited from disclosing, >> copying, >> > distributing or using any of the information contained in the >> transmission. >> > If you received this communication in error, please contact the sender >> > (“Company”) immediately and destroy the material in its entirety, >> > including all electronic and hard copies. >> > >> > This communication may contain nonpublic personal information about >> > consumers which is subject to restrictions under the Gramm-Leach-Bliley >> > Act and the Sarbanes-Oxley Act. You may not directly or indirectly >> reuse >> > or disclose
Re: zVM User Definitions
Ah - and maybe RAC SETROPTS NORACLIST(SURROGAT) unless you like having to do a REFRESH whenever SURROGAT definitions are fiddled with. Thanks, Bruce! ;-) Scott Rohling On Wed, Mar 9, 2011 at 9:35 AM, Bruce Hayden wrote: > And of course: > RAC SETROPTS CLASSACT(SURROGAT) > > On Wed, Mar 9, 2011 at 11:33 AM, Scott Rohling > wrote: > > My suggestion would be to use RACF SURROGAT ..For example: > > RAC RDEF SURROGAT LOGONBY.MAINT > > RAC PERMIT LOGONBY.MAINT CL(SURROGAT) ID(YOURID) ACC(READ). > > > > Now, when you login to maint -- they will know who did it. You would > login > > to MAINT using: > > LOGON MAINT BY YOURID > > And enter YOURID password.. > > This should give them the audit trail they need - and keeps passwords > > private, etc. > > Scott Rohling > > > > On Wed, Mar 9, 2011 at 9:28 AM, Vogtmann, Wallace B < > wvogt...@tcfbank.com> > > wrote: > >> > >> We're new to zVM. Have the system operational with standard IBM supplied > >> User/Guest definitions. For example, we've implemented RACF, DIRMAINT, > >> & PERF TK (soon Omegamon XE). > >> > >> Our security folks don't really like us logging in as MAINT, TCPMAINT, > >> RACMAINT, etc. to do our changes - can't really tell who is doing what. > >> Plus it's hard to have good/secure passwords when need to have multiple > >> real users login to multiple guests, etc. > >> > >> Is there any examples of what would be good definitions for (1) standard > >> system programmer guest accounts and (2) standard service machines? What > >> RIGHTS and ACCESS definitions should be standard. We only plan on > running > >> Linux guests and standard IBM/3rd party tools, so just need a few > >> Users/Guests > >> that have the appropriate access for SysProg support, etc. > >> > >> Basically, we have the system in and operational, but NOW how should we > >> REALLY > >> have it setup to run/manage it securely and effectively. Any RedBooks? > >> I've looked, but don't see any that fit the bill. > >> > >> Thx > >> - Wally Vogtmann > >> - Technical Services > >> - wvogt...@tcfbank.com > >> Disclaimer > >> This email may contain privileged and/or confidential information that > >> is intended solely for the use of the addressee. If you are not the > >> intended recipient, you are strictly prohibited from disclosing, > copying, > >> distributing or using any of the information contained in the > >> transmission. > >> If you received this communication in error, please contact the sender > >> (“Company”) immediately and destroy the material in its entirety, > >> including all electronic and hard copies. > >> > >> This communication may contain nonpublic personal information about > >> consumers which is subject to restrictions under the Gramm-Leach-Bliley > >> Act and the Sarbanes-Oxley Act. You may not directly or indirectly > reuse > >> or disclose such nonpublic personal information for any purpose other > than > >> to provide the services for which you are receiving the information. > >> > >> There are risks associated with the use of electronic transmission. The > >> sender of this information does not control the method of transmittal or > >> any service providers and the sender assumes no duty, liability, or > >> obligation for the security, receipt, or any third party interception of > >> this transmission. > >> > >> The Company reserves the right to amend statements made herein in the > >> event > >> of a mistake. Unless expressly stated herein to the contrary, only > >> agreements > >> in writing signed by an authorized officer of the Company may be > enforced > >> against it. > > > > > > > > -- > Bruce Hayden > z/VM and Linux on System z ATS > IBM, Endicott, NY >
Re: zVM User Definitions
Oh - and to make sure MAINT can't be logged on except by a LOGONBY user: RAC PERMIT LOGONBY.MAINT CL(SURROGAT) ID(MAINT) ACC(NONE) Now MAINT can't be logged into directly using it's own password. Scott Rohling On Wed, Mar 9, 2011 at 9:33 AM, Scott Rohling wrote: > My suggestion would be to use RACF SURROGAT ..For example: > > RAC RDEF SURROGAT LOGONBY.MAINT > RAC PERMIT LOGONBY.MAINT CL(SURROGAT) ID(YOURID) ACC(READ). > > > Now, when you login to maint -- they will know who did it. You would > login to MAINT using: > > LOGON MAINT BY YOURID > > And enter YOURID password.. > > This should give them the audit trail they need - and keeps passwords > private, etc. > > Scott Rohling > > > On Wed, Mar 9, 2011 at 9:28 AM, Vogtmann, Wallace B > wrote: > >> We're new to zVM. Have the system operational with standard IBM supplied >> User/Guest definitions. For example, we've implemented RACF, DIRMAINT, >> & PERF TK (soon Omegamon XE). >> >> Our security folks don't really like us logging in as MAINT, TCPMAINT, >> RACMAINT, etc. to do our changes - can't really tell who is doing what. >> Plus it's hard to have good/secure passwords when need to have multiple >> real users login to multiple guests, etc. >> >> Is there any examples of what would be good definitions for (1) standard >> system programmer guest accounts and (2) standard service machines? What >> RIGHTS and ACCESS definitions should be standard. We only plan on running >> Linux guests and standard IBM/3rd party tools, so just need a few >> Users/Guests >> that have the appropriate access for SysProg support, etc. >> >> Basically, we have the system in and operational, but NOW how should we >> REALLY >> have it setup to run/manage it securely and effectively. Any RedBooks? >> I've looked, but don't see any that fit the bill. >> >> Thx >> - Wally Vogtmann >> - Technical Services >> - wvogt...@tcfbank.com >> Disclaimer >> This email may contain privileged and/or confidential information that >> is intended solely for the use of the addressee. If you are not the >> intended recipient, you are strictly prohibited from disclosing, copying, >> distributing or using any of the information contained in the >> transmission. >> If you received this communication in error, please contact the sender >> (“Company”) immediately and destroy the material in its entirety, >> including all electronic and hard copies. >> >> This communication may contain nonpublic personal information about >> consumers which is subject to restrictions under the Gramm-Leach-Bliley >> Act and the Sarbanes-Oxley Act. You may not directly or indirectly reuse >> or disclose such nonpublic personal information for any purpose other than >> to provide the services for which you are receiving the information. >> >> There are risks associated with the use of electronic transmission. The >> sender of this information does not control the method of transmittal or >> any service providers and the sender assumes no duty, liability, or >> obligation for the security, receipt, or any third party interception of >> this transmission. >> >> The Company reserves the right to amend statements made herein in the >> event >> of a mistake. Unless expressly stated herein to the contrary, only >> agreements >> in writing signed by an authorized officer of the Company may be enforced >> against it. >> > >
Re: zVM User Definitions
My suggestion would be to use RACF SURROGAT ..For example: RAC RDEF SURROGAT LOGONBY.MAINT RAC PERMIT LOGONBY.MAINT CL(SURROGAT) ID(YOURID) ACC(READ). Now, when you login to maint -- they will know who did it. You would login to MAINT using: LOGON MAINT BY YOURID And enter YOURID password.. This should give them the audit trail they need - and keeps passwords private, etc. Scott Rohling On Wed, Mar 9, 2011 at 9:28 AM, Vogtmann, Wallace B wrote: > We're new to zVM. Have the system operational with standard IBM supplied > User/Guest definitions. For example, we've implemented RACF, DIRMAINT, > & PERF TK (soon Omegamon XE). > > Our security folks don't really like us logging in as MAINT, TCPMAINT, > RACMAINT, etc. to do our changes - can't really tell who is doing what. > Plus it's hard to have good/secure passwords when need to have multiple > real users login to multiple guests, etc. > > Is there any examples of what would be good definitions for (1) standard > system programmer guest accounts and (2) standard service machines? What > RIGHTS and ACCESS definitions should be standard. We only plan on running > Linux guests and standard IBM/3rd party tools, so just need a few > Users/Guests > that have the appropriate access for SysProg support, etc. > > Basically, we have the system in and operational, but NOW how should we > REALLY > have it setup to run/manage it securely and effectively. Any RedBooks? > I've looked, but don't see any that fit the bill. > > Thx > - Wally Vogtmann > - Technical Services > - wvogt...@tcfbank.com > Disclaimer > This email may contain privileged and/or confidential information that > is intended solely for the use of the addressee. If you are not the > intended recipient, you are strictly prohibited from disclosing, copying, > distributing or using any of the information contained in the transmission. > If you received this communication in error, please contact the sender > (“Company”) immediately and destroy the material in its entirety, > including all electronic and hard copies. > > This communication may contain nonpublic personal information about > consumers which is subject to restrictions under the Gramm-Leach-Bliley > Act and the Sarbanes-Oxley Act. You may not directly or indirectly reuse > or disclose such nonpublic personal information for any purpose other than > to provide the services for which you are receiving the information. > > There are risks associated with the use of electronic transmission. The > sender of this information does not control the method of transmittal or > any service providers and the sender assumes no duty, liability, or > obligation for the security, receipt, or any third party interception of > this transmission. > > The Company reserves the right to amend statements made herein in the event > of a mistake. Unless expressly stated herein to the contrary, only > agreements > in writing signed by an authorized officer of the Company may be enforced > against it. >
Re: VM Performance Toolkit - Velocity Starter Kit
Just call me the straight man, Barton... still chewing on my foot.;-) Scott Rohling On Wed, Mar 9, 2011 at 8:13 AM, Barton Robinson < bar...@vm1.velocity-software.com> wrote: > I might as well take this opportunity. Velocity Software has a new > offering, for installations just getting started. > > The "Starter Kit" includes zVPS (the FULL Velocity Performance Suite) and > zTUNE for a VERY low (not free) price. > > This provides the ability to completely monitor your z/VM, your Linux, your > MS Servers, your Blade servers, and even your VSE servers. And we put > someone on site for a day at no cost to make sure your "starter kit" gets > started > > Hughes, Jim wrote: > >> Is the VM Performance Toolkit a free product from IBM? >> >> >> Jim Hughes >> Consulting Systems Programmer Mainframe Technical Support Group >> Department of Information Technology >> State of New Hampshire >> 27 Hazen Drive >> Concord, NH 03301 >> 603-271-5586Fax 603.271.1516 >> >> Statement of Confidentiality: The contents of this message are >> confidential. Any unauthorized disclosure, reproduction, use or >> dissemination (either whole or in part) is prohibited. If you are not >> the intended recipient of this message, please notify the sender >> immediately and delete the message from your system. >> >> >>
Re: VM Performance Toolkit
Oops -- I guess this was wishful thinking. There apparently is an additional license fee (nominal).. Sorry to blurt out a wrong answer without checking the facts :-( Scott Rohling On Wed, Mar 9, 2011 at 7:35 AM, Scott Rohling wrote: > It comes with the z/VM license .. yes. No extra money needed if you > enable it and use it. :-)We WANT you to use it - please ? > > Scott Rohling > > > On Wed, Mar 9, 2011 at 7:32 AM, Hughes, Jim wrote: > >> Is the VM Performance Toolkit a free product from IBM? >> >> >> Jim Hughes >> Consulting Systems Programmer >> Mainframe Technical Support Group >> Department of Information Technology >> State of New Hampshire >> 27 Hazen Drive >> Concord, NH 03301 >> 603-271-5586Fax 603.271.1516 >> >> Statement of Confidentiality: The contents of this message are >> confidential. Any unauthorized disclosure, reproduction, use or >> dissemination (either whole or in part) is prohibited. If you are not >> the intended recipient of this message, please notify the sender >> immediately and delete the message from your system. >> > >
Re: VM Performance Toolkit
It comes with the z/VM license .. yes. No extra money needed if you enable it and use it. :-)We WANT you to use it - please ? Scott Rohling On Wed, Mar 9, 2011 at 7:32 AM, Hughes, Jim wrote: > Is the VM Performance Toolkit a free product from IBM? > > > Jim Hughes > Consulting Systems Programmer > Mainframe Technical Support Group > Department of Information Technology > State of New Hampshire > 27 Hazen Drive > Concord, NH 03301 > 603-271-5586Fax 603.271.1516 > > Statement of Confidentiality: The contents of this message are > confidential. Any unauthorized disclosure, reproduction, use or > dissemination (either whole or in part) is prohibited. If you are not > the intended recipient of this message, please notify the sender > immediately and delete the message from your system. >
Re: Capacity Monitoring question
If you want help - you're gonna have to introduce yourself... Scott Rohling On Mar 2, 2011 12:22pm, new zvm wrote: I'm relative new to z/VM. I have a couple of z/VM LPARs runing Linux guests and have more coming. What I'm wondering is this: What z/VM metrics are you monitoring and what thresholds do you use as indicators that more capacity is needed - Specifically CPU and Memory. Thanks in advance New 2 zVM
Re: IPL the new z/VM 5.4 System
That's what you want to see -- the others are minidisks on volumes attached to the 1st level system. This one (FEA) is attached to 'you'. You want to attach all the others the same way. You will either need to ATTACH them - or use a DEDICATE FEA FEA in the directory entry for your 2nd level guest so it happens when your guest is logged in. Scott Rohling On Fri, Feb 25, 2011 at 8:35 AM, Sherry Everhart wrote: > #CP Q V DASD > DASD 0190 3390 520RES R/O107 CYL ON DASD 0F00 SUBCHANNEL = 0008 > DASD 0191 3390 EM0F05 R/W 10 CYL ON DASD 0F05 SUBCHANNEL = > DASD 0192 3390 EM0F05 R/O 50 CYL ON DASD 0F05 SUBCHANNEL = 000B > DASD 019D 3390 520W01 R/O146 CYL ON DASD 0F03 SUBCHANNEL = 0009 > DASD 019E 3390 520W01 R/O250 CYL ON DASD 0F03 SUBCHANNEL = 000A > DASD 3390 EM0F05 R/W 5 CYL ON DASD 0F05 SUBCHANNEL = 0001 > DASD 22CC 3390 EM0F05 R/W 5 CYL ON DASD 0F05 SUBCHANNEL = 0002 > DASD 2CF1 3390 EM0F05 R/W120 CYL ON DASD 0F05 SUBCHANNEL = 0003 > > The addresses are not there. If I do the attach command: > > attach FEA * > > and issue the #CP Q V DASD, I see: > > DASD 0FEA ON DASD 0FEA R/W 540RES SUBCHANNEL = 000C > > is this correct? It doesn't look like the others... >
Re: 2nd level z/VM 5.4 installation
one thought - does the password (-p) end with ! by any chance? Scott Rohling On Tue, Feb 22, 2011 at 3:23 PM, Scott Rohling wrote: > It looks like there must be a stage separator before -d - even though you > aren't showing one. Or maybe it's not being typed as one long command? In > any case - PIPE thinks that -d is the start of a stage and there is no -d > pipe stage. Make sure you are entering the entire command on the command > line. > > Scott Rohling > > > On Tue, Feb 22, 2011 at 2:48 PM, Sherry Everhart wrote: > >> I have copied all of the dvd files to a subdirectory on the the FTP server >> as recommended in "From an FTP Server Directory" (p 98 of the Guide for >> Automated Installation and Service). >> >> So can anyone clarify the -D parameter of the FTPGET command? >> >> pipe (stagesep !) ftpget -h xxx.xx.x.xx -u -p xxx >> -d /upload/cpdvd -v BEF -DVDEOF -f CKD222* !UNPACK! ECKDREST >> >> How do I tell VM to go to that directory ? >> >> I keep getting the error: >> >> FPLSCB027E Entry point -D not found >> FPLSCA003I ... Issued from stage 2 of pipeline 1 >> FPLSCA001I ... Running "-d /upload/cpdvd -v BEF -DVDEOF -f CKD222*" >> Ready(-0027); >> >> Many thanks for your continued advice... >> >> Sherry E. >> > >
Re: 2nd level z/VM 5.4 installation
It looks like there must be a stage separator before -d - even though you aren't showing one. Or maybe it's not being typed as one long command? In any case - PIPE thinks that -d is the start of a stage and there is no -d pipe stage. Make sure you are entering the entire command on the command line. Scott Rohling On Tue, Feb 22, 2011 at 2:48 PM, Sherry Everhart wrote: > I have copied all of the dvd files to a subdirectory on the the FTP server > as recommended in "From an FTP Server Directory" (p 98 of the Guide for > Automated Installation and Service). > > So can anyone clarify the -D parameter of the FTPGET command? > > pipe (stagesep !) ftpget -h xxx.xx.x.xx -u -p xxx > -d /upload/cpdvd -v BEF -DVDEOF -f CKD222* !UNPACK! ECKDREST > > How do I tell VM to go to that directory ? > > I keep getting the error: > > FPLSCB027E Entry point -D not found > FPLSCA003I ... Issued from stage 2 of pipeline 1 > FPLSCA001I ... Running "-d /upload/cpdvd -v BEF -DVDEOF -f CKD222*" > Ready(-0027); > > Many thanks for your continued advice... > > Sherry E. >
Re: 2nd level z/VM 5.4 installation
To see if you have TCPIP running - try: VMLINK TCPMAINT 592 IFCONFIG If you get a response showing an IP address, etc -- then TCPIP is probably running -- Try PING xx.xx.xx.xx(where xx.xx.xx.xx is the IP address IFCONFIG gave you). If you really don't have TCPIP -- then you will have to create an SFS filepool (which will consist of at least 2 3390-3) - and then upload the dvd contents to it using terminal emulation file xfer. Having TCPIP and using FTP is by far the simplest way to go if all you have is 3390-3 - setting up SFS isn't trivial for a beginner. Scott Rohling On Thu, Feb 17, 2011 at 2:12 PM, Sherry Everhart wrote: > Frank, no, we don't have TCP/IP running on 1st level VM. (At least I > don't think so!) > > And I don't understand the Filepool method that Alan spoke of either. > Sorry, Alan, but mostly when you tell me things it all sounds a bit like > when Charlie Brown's teacher talks (Good grief... :)) > > And Dennis, I don't know how to get 4500 cylinders from a 3390-3 disk, so > that I can copy all the files on the dvds to a VM minidisk, which leads me > back to my first posting. > > Truly Humbled, > Sherry E. >
Re: DEVICES stmt in SYSTEM CONFIG
CP VARY ON address ?? Scott Rohling On Thu, Feb 17, 2011 at 12:45 PM, Steve Perez wrote: > Hello Listers, > > If I have DEVICE addresses in the SYSTEM CONFIG file to be OFFLINE_AT_IPL, > is there to dynamically have those devices varied online or override at > IPL of a zVM 5.4 ? > > > > Thanks, > Steve. >
Re: 2nd level z/VM 5.4 installation
I should clarify and say that to install from 'DVD' - .. you can have the DVD mounted under any workstation/server (including the HMC) that is accessible to z/VM via the network so FTP can be used to do the install and retrieve the zVM parts.I myself typically just use a .iso file mounted under a Linux workstation -- and ftp to that. I've never actually tried a minidisk install myself Scott Rohling On Thu, Feb 17, 2011 at 12:41 PM, Scott Rohling wrote: > You're not installing from a VM minidisk - you're installing from a DVD .. > no? So you can ignore this part... > > There are some other disks that you need defined (a 22CC and others as I > recall) -- and I always just defined them using temp space to do the > install: > > DEF T3390 22CC 5 > FORMAT 22CC B > > They aren't needed after the install - so I never saw the point of setting > them up in the directory unless you don't use TDISK space... also as I > recall - none are bigger than a few hundred cylinders.. > > Scott Rohling > > > On Thu, Feb 17, 2011 at 12:36 PM, Sherry Everhart > wrote: > >> Hello Everyone, >> I need some clarification. I'm trying to figure out how to use DVDs to >> install z/VM 5.4 under z/VM 5.2. In Chapter 4, Plan Your DVD >> Installation, in the "Guide for Automated Installation and Service," under >> Installation methods, Second-level Installation, one of the User ID >> requirements is: >> >> "If installing from a VM minidisk, access to a CMS-formatted minidisk that >> is the equivalent of at least 4500 3390 cylinders." >> >> Our 3390-3 volumes have only 3,339 cylinders on them. What am I missing >> here? >> >> Please go easy on me I'm VERY nervous about this upgrade. >> >> Thanks, >> Sherry >> >> P.S. Stephen, I'm willing to learn... :) >> > >
Re: 2nd level z/VM 5.4 installation
You're not installing from a VM minidisk - you're installing from a DVD .. no? So you can ignore this part... There are some other disks that you need defined (a 22CC and others as I recall) -- and I always just defined them using temp space to do the install: DEF T3390 22CC 5 FORMAT 22CC B They aren't needed after the install - so I never saw the point of setting them up in the directory unless you don't use TDISK space... also as I recall - none are bigger than a few hundred cylinders.. Scott Rohling On Thu, Feb 17, 2011 at 12:36 PM, Sherry Everhart wrote: > Hello Everyone, > I need some clarification. I'm trying to figure out how to use DVDs to > install z/VM 5.4 under z/VM 5.2. In Chapter 4, Plan Your DVD > Installation, in the "Guide for Automated Installation and Service," under > Installation methods, Second-level Installation, one of the User ID > requirements is: > > "If installing from a VM minidisk, access to a CMS-formatted minidisk that > is the equivalent of at least 4500 3390 cylinders." > > Our 3390-3 volumes have only 3,339 cylinders on them. What am I missing > here? > > Please go easy on me I'm VERY nervous about this upgrade. > > Thanks, > Sherry > > P.S. Stephen, I'm willing to learn... :) >
Re: Closing console (and other o/p UR devices) at midnight or other times.
I do not think turning the virtualization engine (CP) into a scheduler (I'm talking command/job scheduler here folks) is a good idea. CMS was designed specifically to be able to 'automate' and issue CP commands as well as CMS ones (which includes a filesystem, commands to read/write files, access disks, (rdr,prt,pun too) a scripting language, plumbing etc). IMHO - CMS guest(s) are the place to do automation and things like manage console logs. OM, et al, run in CMS guests. If you're a small to medium size shop - then spend a few hours coding up something built around WAKEUP that closes all consoles - and maybe even receives them to disk - packs them - and cleans up old ones. And there are various solutions (VMSERVE, PIPESERV) out on the z/VM download library that make it very simple to use a TIMES files to schedule events - and react to things in the reader, etc.A little code will do ya.. If you want a supported product that provides a framework for automation, notification, scheduling, etc - then you buy OM or the other vendors flavors. To me it's a design issue - and I disagree that CP should be attempting scheduling. OTOH -- there is that 'midnight message' that all guests receive -- and I suppose if a message can be issued at midnight - then so can other things. I still think it belongs in a CMS guest.. so there. :-) Scott Rohling p.s. You can certainly use a Linux guest for automation and scheduling as well -- I don't mean to exclude it.. it might even be the next up and coming way to do things. With vmcp and vmur and iucv drivers and things like cron -- you have the basic tools needed. On Fri, Feb 11, 2011 at 6:09 PM, George Henke/NYLIC < george_he...@newyorklife.com> wrote: > Actually, you are both right. > > There is a need for both. > > If I am a large mainframe shop, who cares, of course I'll buy the OM or > whatever, get the timer pop and all the other goodies as well, its all chump > change anyway. > > But what if I am a small to medium size shop with a limited budget? > > Must I purchase a whole product like OM or CA VM: Operator just to get a > convenient timer pop for my console logs? > > One size does not fit all. > > "Small beginnings often have big endings" (Mary Baker Eddy) > > Features like this, bundled with existing software, will often lead a > customer down a path to where he will eventually see the value of a product > like OM which he would not have otherwise. > > Customers often have to grow into products like OM, not just make a quantum > leap. > > "Money, money money makes the world go round" as the song says, but only > facetiously. Money is never the reason for doing anything. > > First ask, "Is this a good idea, a right idea, an intelligent idea, does it > make sense technically"? If it does, then the money will be there. > > But putting the almighty(?) dollar first on technical issues like these is > like the "tail wagging the dog". > > > > > > *Alan Altmark * > Sent by: The IBM z/VM Operating System > > 02/11/2011 07:27 PM > Please respond to > The IBM z/VM Operating System > > To > IBMVM@LISTSERV.UARK.EDU > cc > Subject > Re: Closing console (and other o/p UR devices) at midnight or other times. > > > > > On Friday, 02/11/2011 at 04:24 EST, Mike Walter > wrote: > > See? Alan's reply is precisely why I thought "it seemed prudent to run > it > > past others for wider consideration." > > > > I suspect that there will be many new LoZ (a new "Linux on System Z" > > acronym seen recently, and MUCH less to type) customers who will not > > purchase IBM OM, or CA VM:Operator, but whom would benefit from this > > capability right out of the box (i.e. sample directory entries). > > Automation products can't be justified for something this small - for > many > > other reasons, absolutely YES -- but not this. > > Think about that some more, Mike. Few clients have a single point of > interest in automation. They want: > - Monitoring and Alerting > - Recovery > - Provisioning > - Remote operations > - Housekeeping > - Archiving / Backups > - Compliance checking > > They may only implement them one at a time, but they want it all. > > It is the new LoZ customers who are most likely to buy complete solutions. > After all, they are not steeped in the arcana and lore of z/VM, and they > aren't particularly interested in delaying deployment while they learn it. > Too, if they build it themselves, they have to support it themselves. The > only "throat to choke" is their own. > > > > potentially decrease the revenue from OM &g
Re: Who is accessing DASD
oops -- :-)Q SYS 6F8 Scott Rohling On Thu, Feb 10, 2011 at 1:11 PM, Scott Rohling wrote: > Q SYS 104 > > Scott Rohling > > > On Thu, Feb 10, 2011 at 1:03 PM, Frank M. Ramaekers > wrote: > >> Isn’t there a command that will tell me who (what) are the following 104 >> ? >> >> >> >> Q 6F8 >> >> DASD 06F8 CP OWNED 540RES 104 >> >> >> >> Frank M. Ramaekers Jr. >> >> >> >> Systems Programmer >> >> MCP, MCP+I, MCSE & RHCE >> >> >> >> American Income Life Insurance Co. >> >> Phone: (254)761-6649 >> >> >> >> 1200 Wooded Acres Dr. >> >> Fax: (254)741-5777 >> >> >> >> Waco, Texas 76701 >> >> >> >> >> >> >> _ This message >> contains information which is privileged and confidential and is solely for >> the use of the intended recipient. If you are not the intended recipient, be >> aware that any review, disclosure, copying, distribution, or use of the >> contents of this message is strictly prohibited. If you have received this >> in error, please destroy it immediately and notify us at >> privacy...@ailife.com. >> > >
Re: Who is accessing DASD
Q SYS 104 Scott Rohling On Thu, Feb 10, 2011 at 1:03 PM, Frank M. Ramaekers wrote: > Isn’t there a command that will tell me who (what) are the following 104? > > > > Q 6F8 > > DASD 06F8 CP OWNED 540RES 104 > > > > Frank M. Ramaekers Jr. > > > > Systems Programmer > > MCP, MCP+I, MCSE & RHCE > > > > American Income Life Insurance Co. > > Phone: (254)761-6649 > > > > 1200 Wooded Acres Dr. > > Fax: (254)741-5777 > > > > Waco, Texas 76701 > > > > > > > _ This message > contains information which is privileged and confidential and is solely for > the use of the intended recipient. If you are not the intended recipient, be > aware that any review, disclosure, copying, distribution, or use of the > contents of this message is strictly prohibited. If you have received this > in error, please destroy it immediately and notify us at > privacy...@ailife.com. >
Re: z/VM 5.4; 6.1
I don't understand why you say the install can't be done on something greater than a mod 9 ... I'm pretty sure it can - if you don't mind empty space. Cylinder 0 is sufficient.. maybe you are thinking of XLINK bit maps? Scott Rohling On Wed, Feb 9, 2011 at 8:32 AM, Tom Duerbusch wrote: > The question comes back to what sized volumes can be CPOWNED? > A CPOWNED volume has a bit map that defines the CP areas. > > The install of VM is really just a DDR restore and the bit maps are defined > by IBM. > On the smaller volumes, wasn't it one track for the bit maps? And for the > larger volumes you needed a second track? I'm fuzzy on if it was a MOD-9 > required a second track or it was the largest that used a single track. > > Anyway, on a MOD-27 or MOD-54, what is on the additional tracks? Did IBM > leave them (and tested the fact) that they are binary zeros which is PERM > space? Or is there some other stuff out there that might say some cylinders > are TEMP, PAGE or other CP space? And was that extra space formatted by > CPFMTXA to be CP space? > > So, in my book, the install can't be done on something greater than a > MOD-9. You may be able to build a VM system on any size volume however. > > Tom Duerbusch > THD Consulting > > >>> Jakub x 2/9/2011 2:10 AM >>> > Hello, > Can I install z/VM (5.4 or 6.1) on dasd 9 model 27 ? > > I found in documentation "Only 3390 Model 3 or 9 is supported for > installation of z/VM. " but in another part of documentation I saw that > "DASD 9 including large Model 9s known as Model 27 and Model 54". > > Best regards, > Jakub Szefler >
Re: Product Enabled in System Config File
For DIRMAINT no -- for RACF - you 'will' have to IPL to at some point for RACF to act as an ESM -- but not to enable and install the code. The program directory for these products is the best place to see the steps necessary for installation. Scott Rohling On Tue, Feb 8, 2011 at 11:00 AM, Billy Bingham < billy.bingham...@suddenlink.net> wrote: > If I need to enable a product such as RACF or DIRMAINT that is DISABLED > in the System Config file do I need to re-ipl z/VM with the product enabled > or is there another way to ENABLE a product without an IPL? > > > Thanks, > > Billy >
Re: z196 lb4ul
Yes - it is assumed that 3 devices are used.. so 9404-9406 will be used, with the definitions you show. Scott Rohling On Mon, Feb 7, 2011 at 4:02 PM, George Henke/NYLIC < george_he...@newyorklife.com> wrote: > tyvm, Paul and Marcy > > In my VSWITCH definition, rdev is changing from 9004 to 9404 when we go to > the z196. > > define vswitch lnxvsw1 rdev *9004*.p00 9004.p01 > > Does that mean that after I change my VSWITCH definition to 9404, the next > 2 addresses: 9005, 9006, will also automatically change from 9005, 9006 to > 9405, 9406? > > define vswitch lnxvsw1 rdev *9404*.p00 9004.p01 > > > Current OSA: > > q osa > OSA 9000 ATTACHED TO TCPIP9000 DEVTYPE OSA CHPID D4 OSD > OSA 9001 ATTACHED TO TCPIP9001 DEVTYPE OSA CHPID D4 OSD > OSA 9002 ATTACHED TO TCPIP9002 DEVTYPE OSA CHPID D4 OSD > *OSA 9004 ATTACHED TO DTCVSW1 9004 DEVTYPE OSA CHPID D4 OSD* > *OSA 9005 ATTACHED TO DTCVSW1 9005 DEVTYPE OSA CHPID D4 OSD* > *OSA 9006 ATTACHED TO DTCVSW1 9006 DEVTYPE OSA CHPID D4 OSD* > > > > *"Feller, Paul" * > Sent by: The IBM z/VM Operating System > > 02/04/2011 05:18 PM > Please respond to > The IBM z/VM Operating System > > To > IBMVM@LISTSERV.UARK.EDU > cc > Subject > Re: z196 lb4ul > > > > > Yes Marcy is correct about adding P01 to your VSWITCH address. I will > have to do something similar on February 13th when we move from a z10 to > z196. My plan is to have two SYSTEM CONFIG members. One will be called > SYS2817 CONFIG and I will use it to do the first IPL on the new box. That > one will have my changes in it. If all goes well I will change SYSTEM > CONFIG before the next IPL. > > Paul Feller > AIT Mainframe Technical Support > pfel...@aegonusa.com > (319)-355-7824 > > > -Original Message- > From: The IBM z/VM Operating System > [mailto:IBMVM@LISTSERV.UARK.EDU] > On Behalf Of Marcy Cortes > Sent: Friday, February 04, 2011 3:57 PM > To: IBMVM@LISTSERV.UARK.EDU > Subject: Re: z196 lb4ul > > Right, > You would redefine it like this > >define vswitch lnxvsw1 rdev 9004.p01 > > Or play it safe and put both in there ☺ > >define vswitch lnxvsw1 rdev 9004.p00 9004.p01 > > > > Marcy > > > This message may contain confidential and/or privileged information. If you > are not the addressee or authorized to receive this for the addressee, you > must not use, copy, disclose, or take any action based on this message or > any information herein. If you have received this message in error, please > advise the sender immediately by reply e-mail and delete this message. Thank > you for your cooperation. > > From: The IBM z/VM Operating System > [mailto:IBMVM@LISTSERV.UARK.EDU] > On Behalf Of George Henke/NYLIC > Sent: Friday, February 04, 2011 1:53 PM > To: IBMVM@LISTSERV.UARK.EDU > Subject: Re: [IBMVM] z196 lb4ul > > Paul, Marcy, et al: > > I just came from a z196 pre-install planning meeting (by phone) in which it > was said that the OSA on the z/196 will be using PORT 1. > > We are currently using PORT 0 on our Z9. > > Does this mean our VSWITCH definition (below) in SYSTEM CONFIG which > defaults to PORT 0 will not work on the z196 unless we code PORT 1? > > define vswitch lnxvsw1 rdev 9004 > > > > George Henke/NYLIC > 02/01/2011 03:40 PM > To > The IBM z/VM Operating System > cc > > Subject > Re: z196 lb4ulLink > > > > > > > ty all very much. > > > > > "Feller, Paul" > Sent by: The IBM z/VM Operating System > 02/01/2011 03:24 PM > Please respond to > The IBM z/VM Operating System > > To > IBMVM@LISTSERV.UARK.EDU > cc > > Subject > Re: z196 lb4ul > > > > > > > > You would be using the default which is port 0 (zero). The port number > really only comes into play if you have an OSA Express3 card and are > connecting to the second port or what is called the A1 port on the card > layout. > > Paul Feller > AIT Mainframe Technical Support > > From: The IBM z/VM Operating System > [mailto:IBMVM@LISTSERV.UARK.EDU] > On Behalf Of George Henke/NYLIC > Sent: Tuesday, February 01, 2011 2:05 PM > To: IBMVM@LISTSERV.UARK.EDU > Subject: Re: z196 lb4ul > > What is the default PORT number? > > We do not specify PORT number in our VSWITCH definition below (from SYSTEM > CONFIG): > > define vswitch lnxvsw1 rdev 9004 > > Sorry to ask: > > But does this mean we do not use an OSA.? > > Or does it mean we use a default? > > I think it may mean the former. > > Mark Post > Sent by: The IBM z/VM Operating System > 02/01/2011 02:50 PM > > Please respond to > The IBM z/VM Operating System > > > To > IBMVM@LISTSERV.UARK.EDU > cc > > Subject > Re: z196 lb4ul > > > > > > > > > > > >>> On 2/1/2011 at 02:45 PM, George Henke/NYLIC < > george_he...@newyorklife.com> > wrote: > > How did you change your vswitch definition for PO1? > > > > Chuckie has deigned use of PORTNAME in VSWITCH taboo. > > Port number is not the same as port name. Two different parameters > entirely. > > > Mark Post > >
Re: z196 lb4ul
Should have explained, if it wasn't clear: .Pn Where is the OSA address and Pn is the port number (P0 or P1).. On Tue, Feb 1, 2011 at 12:54 PM, Scott Rohling wrote: > You use the format of '.Pn'to define the port.. for example: > A00.P1.. > > The default is port 0 (A00.P0)... > > Scott Rohling > > > On Tue, Feb 1, 2011 at 12:45 PM, George Henke/NYLIC < > george_he...@newyorklife.com> wrote: > >> Marcy: >> >> How did you change your vswitch definition for PO1? >> >> Chuckie has deigned use of PORTNAME in VSWITCH taboo. >> >> >> >> >> *Marcy Cortes * >> Sent by: The IBM z/VM Operating System >> >> 02/01/2011 10:16 AM >> Please respond to >> The IBM z/VM Operating System >> >> To >> IBMVM@LISTSERV.UARK.EDU >> cc >> Subject >> Re: z196 lb4ul >> >> >> >> >> Paul wrote: >> > Look out for PORT number depending on the type of OSA cards you have >> access to. >> >> Good point! >> We had one that was inadvertently cabled to P01 too. >> We changed the vswitch def rather than move the cable. >> >> Good luck George! >> >> >> Marcy >> >> >
Re: z196 lb4ul
You use the format of '.Pn'to define the port.. for example: A00.P1.. The default is port 0 (A00.P0)... Scott Rohling On Tue, Feb 1, 2011 at 12:45 PM, George Henke/NYLIC < george_he...@newyorklife.com> wrote: > Marcy: > > How did you change your vswitch definition for PO1? > > Chuckie has deigned use of PORTNAME in VSWITCH taboo. > > > > > *Marcy Cortes * > Sent by: The IBM z/VM Operating System > > 02/01/2011 10:16 AM > Please respond to > The IBM z/VM Operating System > > To > IBMVM@LISTSERV.UARK.EDU > cc > Subject > Re: z196 lb4ul > > > > > Paul wrote: > > Look out for PORT number depending on the type of OSA cards you have > access to. > > Good point! > We had one that was inadvertently cabled to P01 too. > We changed the vswitch def rather than move the cable. > > Good luck George! > > > Marcy > >
Re: z196 lb4ul
I would be concerned about things like real addresses -- if any of them are changing -- you'll want to update SYSTEM CONFIG RDEVs, online/offline devices, etc - also console definitions if they'll change. You may do some of these things in AUTOLOG1 too... Scott Rohling On Mon, Jan 31, 2011 at 3:38 PM, George Henke/NYLIC < george_he...@newyorklife.com> wrote: > Are there any other special considerations, other than the compatibility > maintenance, to cutover from a z9 to a z196. > > We are cutting over to the z196 in a couple of weeks. > > It is already in house. > > I have upgraded the z9 to 5407RSU (1002) and applied all the necessary > compatibility PTFs for the z196 and been running it since November. > > But I am just checking if there are any other special operational or > software configuration procedures, tasks, anomalies, or idiosyncrasies, that > need to be considered, in going to this new hardware. > > ty > > Look before you leap
Re: portgroup with vswitch IP routing
You should have gotten another message (HCP2830I) to explain what the state of the virtual switch is .. the message you got indicates the command couldn't complete because of the current state of the vswitch. HELP HCP2830I will show several different variations of the possible states and explanations.. Scott Rohling 2011/1/31 Rogério Soares > > > guys, i have tryed set up a vswitch on ip routing mode to use port group, > but i can't i get "group" paramenter invalid... > > when i set up vswtich to ETHERNET, and make "SET VSWITCH VSWSVC01 GROUP > GRPSRV01 ", i receive the error: HCPSWS2799E VSWITCH change is not allowed > > but after some seconds, the vswitch appears up and running using port > group > > Q VSWITCH ALL > VSWITCH SYSTEM VSWSVC01 Type: QDIOConnected: 0Maxconn: INFINITE > PERSISTENT RESTRICTEDETHERNET Accounting: OFF > VLAN Unaware > MAC address: 02-61-01-00-00-1EMAC Protection: Unspecified > State: Ready > IPTimeout: 5 QueueStorage: 8 > Isolation Status: OFF > Uplink Port: > Group: GRPSRV01 Active LACP Mode: Active > RDEV: 1D00.P00 VDEV: 1D00 Controller: DTCVSW2 > RDEV: 1E00.P00 VDEV: 1E00 Controller: DTCVSW1 > Backup Devices: > RDEV: 0800.P00 VDEV: 0800 Controller: DTCVSW2 BACKUP > Ready; T=0.01/0.01 15:31:18 > > I do something wrong? to use port group the vswitch must be ETHERNET ? > > Thanks again :) > > > >
