Re: DFDSS Restore ADMIN PARM
Couldn't your ESM just be a NOP program, just for such situations? Les Alan Altmark wrote: On Tuesday, 03/30/2010 at 04:57 EDT, Martin, Terry R. (CMS/CTR) (CTR) terry.mar...@cms.hhs.gov wrote: Thanks Alan. BTW, the floor system at our Hot Site does not have RACF nor for that matter any other ESM. You can in fact run z/OS without an ESM. You can run MVS and some of the subsystems, yes. But you cannot, as you discovered, run z/OS and all that implies. Utilities that require specific authorization won't work since they all talk to the ESM via SAF calls (aka RACROUTE Friends). With no ESM, those calls come back as defer and it is then up to the app to decide what to do. Unless it has an alternative source of authorization (99.% don't), the app has no choice but to fail. TSO works as it will, upon a defer from the call to the ESM, interrogate SYS1.UADS, as it does if the ESM is there but doesn't, in RACF terms, have a TSO segment defined for the user. Even JES2/JES3 require an ESM to process USERID=,PASSWORD= on the JOB card. (If you SUBMIT from TSO without them, they run under your TSO id without needing an ESM call.) One of my z/OS Brothers-in-Weaselhood told me ages ago, and confirmed again today, that *z/OS* was not designed to run without an ESM. Without one, you have just enough of a system up so that you can get one installed and then go about your daily chores. Alan Altmark z/VM Development IBM Endicott
Re: DFDSS Restore ADMIN PARM
On Wednesday, 03/31/2010 at 02:22 EDT, Les Koehler vmr...@tampabay.rr.com wrote: Couldn't your ESM just be a NOP program, just for such situations? For various values of NOP, yes. Look at Appendix D of the z/OS RACROUTE Reference. (Works the same way on z/VM.) Alan Altmark z/VM Development IBM Endicott
Re: DFDSS Restore ADMIN PARM
Thanks Alan. BTW, the floor system at our Hot Site does not have RACF nor for that matter any other ESM. You can in fact run z/OS without an ESM. I just waited for our system to be IPLed which does have RACF and the appropriate profiles defined to use the ADMIN keyword. Thanks again for the help. Thank You, Terry Martin Lockheed Martin - Citic z/OS and z/VM Performance Tuning and Operating Systems Support Office - 443 348-2102 Cell - 443 632-4191 -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Alan Altmark Sent: Monday, March 29, 2010 3:25 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: DFDSS Restore ADMIN PARM On Monday, 03/29/2010 at 02:02 EDT, Martin, Terry R. (CMS/CTR) (CTR) terry.mar...@cms.hhs.gov wrote: The problem that I am having is that I am receiving an Authority error on the ADMINSTRATOR keyword. The Hotsite system we are on does not have RACF. I tried removing the keyword but apparently there are other SUB parameters that require the ADMIN keyword. The DFSMSdss manual says that to use the ADMINISTRATOR keyword, all of the following must be true: o FACILITY class is active. o Applicable FACILITY class profile is defined. o You have READ access to that profile. So while the hotsite may not have RACF, it has something else (ACF2, Top Secret, ...), cuz you can't run z/OS without an ESM! The other ESMs manage classes and profiles, just like RACF does. Alan Altmark z/VM Development IBM Endicott
Re: DFDSS Restore ADMIN PARM
On Tuesday, 03/30/2010 at 04:57 EDT, Martin, Terry R. (CMS/CTR) (CTR) terry.mar...@cms.hhs.gov wrote: Thanks Alan. BTW, the floor system at our Hot Site does not have RACF nor for that matter any other ESM. You can in fact run z/OS without an ESM. You can run MVS and some of the subsystems, yes. But you cannot, as you discovered, run z/OS and all that implies. Utilities that require specific authorization won't work since they all talk to the ESM via SAF calls (aka RACROUTE Friends). With no ESM, those calls come back as defer and it is then up to the app to decide what to do. Unless it has an alternative source of authorization (99.% don't), the app has no choice but to fail. TSO works as it will, upon a defer from the call to the ESM, interrogate SYS1.UADS, as it does if the ESM is there but doesn't, in RACF terms, have a TSO segment defined for the user. Even JES2/JES3 require an ESM to process USERID=,PASSWORD= on the JOB card. (If you SUBMIT from TSO without them, they run under your TSO id without needing an ESM call.) One of my z/OS Brothers-in-Weaselhood told me ages ago, and confirmed again today, that *z/OS* was not designed to run without an ESM. Without one, you have just enough of a system up so that you can get one installed and then go about your daily chores. Alan Altmark z/VM Development IBM Endicott
Re: DFDSS Restore ADMIN PARM
Thanks Alan, Yes you are correct we just need the floor system long enough to restore our environment. Of course wouldn't try running normally without ESM just wanted to point out that it is possible although not recommended if you want to get anything done agreed. Thanks! Thank You, Terry Martin Lockheed Martin - Citic z/OS and z/VM Performance Tuning and Operating Systems Support Office - 443 348-2102 Cell - 443 632-4191 -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Alan Altmark Sent: Tuesday, March 30, 2010 6:46 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: DFDSS Restore ADMIN PARM On Tuesday, 03/30/2010 at 04:57 EDT, Martin, Terry R. (CMS/CTR) (CTR) terry.mar...@cms.hhs.gov wrote: Thanks Alan. BTW, the floor system at our Hot Site does not have RACF nor for that matter any other ESM. You can in fact run z/OS without an ESM. You can run MVS and some of the subsystems, yes. But you cannot, as you discovered, run z/OS and all that implies. Utilities that require specific authorization won't work since they all talk to the ESM via SAF calls (aka RACROUTE Friends). With no ESM, those calls come back as defer and it is then up to the app to decide what to do. Unless it has an alternative source of authorization (99.% don't), the app has no choice but to fail. TSO works as it will, upon a defer from the call to the ESM, interrogate SYS1.UADS, as it does if the ESM is there but doesn't, in RACF terms, have a TSO segment defined for the user. Even JES2/JES3 require an ESM to process USERID=,PASSWORD= on the JOB card. (If you SUBMIT from TSO without them, they run under your TSO id without needing an ESM call.) One of my z/OS Brothers-in-Weaselhood told me ages ago, and confirmed again today, that *z/OS* was not designed to run without an ESM. Without one, you have just enough of a system up so that you can get one installed and then go about your daily chores. Alan Altmark z/VM Development IBM Endicott
Re: DFDSS Restore ADMIN PARM
Terry, I don't think racf has anything to do with the admin keyword, it lets you act as a dfdss storage admin. Dumb question, have you tired without admin?? Worst that can happen is it won't work like it isn't working now. Mace From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Martin, Terry R. (CMS/CTR) (CTR) Sent: Monday, March 29, 2010 2:01 PM To: IBMVM@LISTSERV.UARK.EDU Subject: DFDSS Restore ADMIN PARM HI, I am at the Hotsite and I am trying to restore my VM volumes under DFDSS on z/OS. The input statement for the restore is: RESTORE - ADMINISTRATOR - TRKS(0,0,30050,14) INDD(BKVM170K)- OUTDD(VM170K) - CPVOLUME - The problem that I am having is that I am receiving an Authority error on the ADMINSTRATOR keyword. The Hotsite system we are on does not have RACF. I tried removing the keyword but apparently there are other SUB parameters that require the ADMIN keyword. Any ideas on how to get around this?? Thank You, Terry Martin Lockheed Martin - Citic z/OS and z/VM Performance Tuning and Operating Systems Support Office - 443 348-2102 Cell - 443 632-4191 cid:image001.jpg@01C97FB5.5EAFD6C0 - The information transmitted is intended solely for the individual or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you have received this email in error please contact the sender and delete the material from any computer.
Re: DFDSS Restore ADMIN PARM
Well in further reading I have stuck my foot, or should I say my fingers in my mouth. It talks of creating discrete profiles But I would still try w/o and see what happens Mace From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Martin, Terry R. (CMS/CTR) (CTR) Sent: Monday, March 29, 2010 2:01 PM To: IBMVM@LISTSERV.UARK.EDU Subject: DFDSS Restore ADMIN PARM HI, I am at the Hotsite and I am trying to restore my VM volumes under DFDSS on z/OS. The input statement for the restore is: RESTORE - ADMINISTRATOR - TRKS(0,0,30050,14) INDD(BKVM170K)- OUTDD(VM170K) - CPVOLUME - The problem that I am having is that I am receiving an Authority error on the ADMINSTRATOR keyword. The Hotsite system we are on does not have RACF. I tried removing the keyword but apparently there are other SUB parameters that require the ADMIN keyword. Any ideas on how to get around this?? Thank You, Terry Martin Lockheed Martin - Citic z/OS and z/VM Performance Tuning and Operating Systems Support Office - 443 348-2102 Cell - 443 632-4191 cid:image001.jpg@01C97FB5.5EAFD6C0 - The information transmitted is intended solely for the individual or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you have received this email in error please contact the sender and delete the material from any computer.
Re: DFDSS Restore ADMIN PARM
I tried it without ADMIN but there are other SUB parameters on the Restore statement that require ADMIN. Thank You, Terry Martin Lockheed Martin - Citic z/OS and z/VM Performance Tuning and Operating Systems Support Office - 443 348-2102 Cell - 443 632-4191 From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Macioce, Larry Sent: Monday, March 29, 2010 2:21 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: DFDSS Restore ADMIN PARM Well in further reading I have stuck my foot, or should I say my fingers in my mouth. It talks of creating discrete profiles But I would still try w/o and see what happens Mace From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Martin, Terry R. (CMS/CTR) (CTR) Sent: Monday, March 29, 2010 2:01 PM To: IBMVM@LISTSERV.UARK.EDU Subject: DFDSS Restore ADMIN PARM HI, I am at the Hotsite and I am trying to restore my VM volumes under DFDSS on z/OS. The input statement for the restore is: RESTORE - ADMINISTRATOR - TRKS(0,0,30050,14) INDD(BKVM170K)- OUTDD(VM170K) - CPVOLUME - The problem that I am having is that I am receiving an Authority error on the ADMINSTRATOR keyword. The Hotsite system we are on does not have RACF. I tried removing the keyword but apparently there are other SUB parameters that require the ADMIN keyword. Any ideas on how to get around this?? Thank You, Terry Martin Lockheed Martin - Citic z/OS and z/VM Performance Tuning and Operating Systems Support Office - 443 348-2102 Cell - 443 632-4191 cid:image001.jpg@01C97FB5.5EAFD6C0 The information transmitted is intended solely for the individual or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of or taking action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you have received this email in error please contact the sender and delete the material from any computer.
Re: DFDSS Restore ADMIN PARM
On Monday, 03/29/2010 at 02:02 EDT, Martin, Terry R. (CMS/CTR) (CTR) terry.mar...@cms.hhs.gov wrote: The problem that I am having is that I am receiving an Authority error on the ADMINSTRATOR keyword. The Hotsite system we are on does not have RACF. I tried removing the keyword but apparently there are other SUB parameters that require the ADMIN keyword. The DFSMSdss manual says that to use the ADMINISTRATOR keyword, all of the following must be true: o FACILITY class is active. o Applicable FACILITY class profile is defined. o You have READ access to that profile. So while the hotsite may not have RACF, it has something else (ACF2, Top Secret, ...), cuz you can't run z/OS without an ESM! The other ESMs manage classes and profiles, just like RACF does. Alan Altmark z/VM Development IBM Endicott
