Re: Need new 3270 emulator: SSH, inexpensive, reliable

We've got Tectia SSH as a replacement for telnet to login to a z/OS UNIX shell. Unfortunately, Tectia doesn't support the chcp command, which makes it pretty much unusable for me. We've got an elder release (5.3.7.21) so this may well have changed. I tried to find a hint in the doc on their web si

Re: Binder API...broke or working as designed

On Tue, Aug 25, 2009 at 4:01 PM, Tony Harminc wrote: > 2009-08-25 William H. Blair wrote: > > > Until the binder API can function as a full-fledged system > > service, it can't be used by any code that, itself, has to > > adhere to the previously-established and long-recognized > > MVS systems i

Re: How much CPU will mainframe Firewall cost?

- Original Message - From: "John Mattson" Newsgroups: bit.listserv.ibm-main Sent: Tuesday, August 25, 2009 1:52 PM Subject: How much CPU will mainframe Firewall cost? How can I get at SWAG on how much CPU will be taken up by implementing a RACE/SecurityServer Firewall on the ma

Re: Software delivery via internet or tape

- Original Message - From: "Paul Gilmartin" Newsgroups: bit.listserv.ibm-main Sent: Tuesday, August 25, 2009 12:50 PM Subject: Re: Software delivery via internet or tape On Tue, 25 Aug 2009 10:38:39 -0400, Pinnacle wrote: The timeout issues occur because SMP/E spawns (forks?) a Unix

Re: Need new 3270 emulator: SSH, inexpensive, reliable

- Original Message - From: "John Mattson" Newsgroups: bit.listserv.ibm-main Sent: Tuesday, August 25, 2009 4:26 PM Subject: Re: Need new 3270 emulator: SSH, inexpensive, reliable EXCELLENT Question. The kind on insight I need here. We use Rumba, running on a Windows server to

Re: Enterprise Cobol 4.2

Frank Swarbrick wrote: I was pleased to attend the SHARE session for the just announced Enterprise Cobol for z/OS 4.2. I was especially pleased because it has satisfied a marketing requirement that I submitted (really just pushing for a SHARE requirement from some years back). That is (quoti

Re: Enterprise Cobol 4.2

Frank, I didn't know you were here! I am going to have to find you and snub you, and maybe even answer every question you have about Sysplex - that'll larn ya! >>> Frank Swarbrick 08/25/09 9:14 PM >>> I was pleased to attend the SHARE session for the just announced Enterprise Cobol for z/OS 4

Re: SHARE comments

Yes, I snubbed Mark, and Ed Jaffe, and many others to boot (trying to make up for lost time). So far I have snubbed Bob Rodgers at least a dozen times ;-) >>> Mark Zelden 08/25/09 7:02 PM >>> On Tue, 25 Aug 2009 14:35:32 -0700, Edward Jaffe wrote: >Scott Ford wrote: > >I got to snub Scott For

Re: SHARE comments

I agree with you. What I have seen of the Share presentation Hi Linda, I agree with you. What I have seen of the Share presentations are absolutely great. I am in high hopes to go to a share and meet some of the Listserv folks. Unfortuately, I think a lot of folks are stuck the crazy economy and

Enterprise Cobol 4.2

I was pleased to attend the SHARE session for the just announced Enterprise Cobol for z/OS 4.2. I was especially pleased because it has satisfied a marketing requirement that I submitted (really just pushing for a SHARE requirement from some years back). That is (quoting from the official ann

Re: Binder API...broke or working as designed

2009-08-25 William H. Blair wrote: > Until the binder API can function as a full-fledged system > service, it can't be used by any code that, itself, has to > adhere to the previously-established and long-recognized > MVS systems integrity and security guidelines. TSO TEST/TESTAUTH is a (sometim

Re: SHARE comments

On Tue, 25 Aug 2009 14:35:32 -0700, Edward Jaffe wrote: >Scott Ford wrote: > >I got to snub Scott Ford in Denver. It was an honor. :-) > And I got snubbed by Scott Rowe who told me he hadn't been to SHARE in 9 years. I've also run into some first timers (not zNextGeners or people new to the pl

Re: SHARE comments

Hi Scott, Respectfully, I also work for a company that has sometimes been able to send me and often, especially lately, not.  What I have learned at Share and from the folks and contacts made there has been priceless.  I too have learned a great deal of what I know from hard old-fas hioned w

Re: SHARE comments

___ geeez , thx :)   Scott J Ford   From: Edward Jaffe To: IBM-MAIN@bama.ua.edu Sent: Tuesday, August 25, 2009 5:35:32 PM Subject: Re: SHARE comments Scott Ford wrote: I got to snub Scott Ford in Denver. It was an honor. :-) -- Edward E Jaffe

Re: Binder API...broke or working as designed

William Blair wrote: > Until the binder API can function > as a full-fledged system service, it can't be used by any > code that, itself, has to adhere to long-established MVS > integrity and authority guidelines. That could have been better worded, as follows: Until t

Re: SHARE comments

Scott Ford wrote: I got to snub Scott Ford in Denver. It was an honor. :-) -- Edward E Jaffe Phoenix Software International, Inc 5200 W Century Blvd, Suite 800 Los Angeles, CA 90045 310-338-0400 x318 edja...@phoenixsoftware.com http://www.phoenixsoftware.com/ ---

Re: Sysplex dis/advantages

Arthur Gutowski wrote: > Merging existing systems is a necessity, and it needs to be staged in > manageable chunks. I think most of the various groups in IBM understand > that (growing pains and scars). As a sysprog's job goes largely unnoticed > (until something goes wrong), more so goes that

Re: Sysplex dis/advantages

Whew. Barbara, thanks for the subject change; that was getting ornery. Chris, I don't think anyone argues the advantages of horizontal scaling and availability nor Sysplex as "the" means to provide it within System z. My vote is for IBM to continue to develop and support it. I *think* bubblin

Re: Need new 3270 emulator: SSH, inexpensive, reliable

Your management has been misinformed. Many argue that TLS is the more secure. Perhaps that's why you see a lot of free SSH ports, but not many free TLS ports. And yet TLS (certificate based authentication and encryption) is everywhere. Just one issue I've noted is that SSH stows its private/

Re: Need new 3270 emulator: SSH, inexpensive, reliable

l...@garlic.com (Anne & Lynn Wheeler) writes: > we had been called in to consult with a small client/server startup that > wanted to do payment transactions on their server ... and the startup > had invented this technology called SSL that they wanted to use. As part > of that deployment ... now fr

Re: Binder API...broke or working as designed

Leona Baumgart stated: > If LE is not available Uh ... since LE is part of the BCP, how, exactly, would it ever be "not available?" I am not disputing that there is, perhaps, some test that the binder code makes, but I cannot imagine what that test is. > will re-contact both Chris and Willia

WHOIS

Does anyone use the WHOIS proc that you can provides a users name that is associated with a USERID? The command that we use is 'TSO WHOIS userid'. I think that it was written for a 7 character userid, but we have some that are 6 characters. Was wondering if anyone ever fixed this or if anyone

Re: Need new 3270 emulator: SSH, inexpensive, reliable

EXCELLENT Question. The kind on insight I need here. We use Rumba, running on a Windows server to talk allow 3270 type communication from users on Windows boxes who need to access our zOS system, TSO, CICS, and some VTAM apps. Problem is that PCI and JSOX do not think this is sucure.

Re: Need new 3270 emulator: SSH, inexpensive, reliable

John Mattson wrote: > I am learning this as I go. As I understand it, SSH supports > higher security levels (management wants this) than SSL/TLS. And SSL > ??? but SSH uses the very same SSL under the covers ... how does it support higher security levels? > requires Certificate author

Re: How much CPU will mainframe Firewall cost?

John, I don't have any idea on how much. But to qualify the usage of the firewall on the mainframe, if the business Firewall(s) are still in place and stopping extra erroneous traffic. There should me minimal CPU usage. Corporate Firewalls on PC servers don't consume much CPU. Redbooks: http

Re: Need new 3270 emulator: SSH, inexpensive, reliable

gib...@wsu.edu (Gibney, Dave) writes: > You are not correct. You can make SSL optional and therefore clear if > it is not used, if the connection is secure, all data (including > Userid/password) is encrypted. re: http://www.garlic.com/~lynn/2009m.html#5 Need new 3270 emulator: SSH, inexpensive

Re: Librarian to Endevor Conversion--Need Pull all Archive Levels from Librarian

Build different PDS'se with the date in the PDS name, for the different Librarian Archive levels and then HSM and ENDEVOR can handle it.. VSAM file ? You need to write more code.. and for what.. Anton Hessong, Keith wrote: Greetings: My shop is converting from Librarian to Endevor.

Librarian to Endevor Conversion--Need Pull all Archive Levels from Librarian

Greetings: My shop is converting from Librarian to Endevor. Librarian today has 255 archive levels at my shop. On our initial conversion we need a way to pull off all archive levels for my source programs and store them away some place. We don't have the Librarian piece for Endevor and ca

Re: Need new 3270 emulator: SSH, inexpensive, reliable

On Tue, 25 Aug 2009 10:35:18 -0700, John Mattson wrote: > ... Management ... now wants a SSH based >3270 emulation for accessing mainframe TSO, CICS, and such apps. >... Uh, something I've missed in the thread so far: What are you going to talk to? Does some vendor produce an SSH-base

Re: Software delivery via internet or tape

We in MF tech support agree with you. Our manager is not a MF person. Our security dept. is anal but ONLY handles the MF security. We've been fighting this battle and losing for years. From: Ted MacNEIL To: IBM-MAIN@bama.ua.edu Sent: Tuesday, August 25, 2009

Re: Need new 3270 emulator: SSH, inexpensive, reliable

You are not correct. You can make SSL optional and therefore clear if it is not used, if the connection is secure, all data (including Userid/password) is encrypted. Dave Gibney Information Technology Services Washington State University > -Original Message- > From: IBM Mainframe Discu

Re: Need new 3270 emulator: SSH, inexpensive, reliable

No, because the SSL handhake occurs before the TN3270 session is established. On Tue, Aug 25, 2009 at 3:32 PM, John Mattson wrote: > Am I correct in that SSL sends UID and Passwords in the clear, but SSH > does not? > Do not PCI and JSOX require these to be encrypted? > > > > > "Gibney, Dave" >

Re: Need new 3270 emulator: SSH, inexpensive, reliable

Am I correct in that SSL sends UID and Passwords in the clear, but SSH does not? Do not PCI and JSOX require these to be encrypted? "Gibney, Dave" Sent by: IBM Mainframe Discussion List 08/25/2009 11:29 AM Please respond to IBM Mainframe Discussion List Expire Date: 08/25/2011 To IBM-M

Re: Need new 3270 emulator: SSH, inexpensive, reliable

mp...@novell.com (Mark Post) writes: > SSH depends on SSL to do its encryption. SSH & SSL both do public key operations SSL(/TLS) has bunch of stuff in the protocol with (public key) digital certificates. SSH protocol doesn't require digital certificates for its public key operations. some "ope

Re: SHARE comments

It would be nice to have information shared, i.e.; without a hook...no sales pitch, etc. Some of use work for companies that cant spring for Share... We had to learn z/OS and its components the old fashioned way. hard school of knocks   Scott J Ford  

Re: Need new 3270 emulator: SSH, inexpensive, reliable

>>> On 8/25/2009 at 2:27 PM, "Gibney, Dave" wrote: -snip- > I'm not an encryption expert, but I seriously doubt SSH (which has > always seemed flakey to me) is more secure than SSL. SSH depends on SSL to do its encryption. Mark Post

Re: Need new 3270 emulator: SSH, inexpensive, reliable

> -Original Message- > From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On > Behalf Of John Mattson > Sent: Tuesday, August 25, 2009 10:58 AM > To: IBM-MAIN@bama.ua.edu > Subject: Re: Need new 3270 emulator: SSH, inexpensive, reliable > > > I am learning this as I

Re: Binder API...broke or working as designed

Bill Klein wrote: *JUST* on the issue of the Binder API requiring the LE run-time, I have a question for you (WB) Were your discussions with "STL" done before or after "Metal-C" became available? It would seem to me (and I certainly could be ENTIRELY wrong on this), that a SHARE requirement to

Re: Need new 3270 emulator: SSH, inexpensive, reliable

I think SSH can do it. They do it using their "SSH Tectia Connector on Windows" product, in conjunction with their SSH product on the mainframe. Reference: https://www.ssh.com/support/documentation/online/ssh/adminguide-zos/54/Tunneling_TN3270.html  Mark T. Regan, K8MTR CTO1 USNR-Retired (1969-19

Re: Need new 3270 emulator: SSH, inexpensive, reliable

You do not *have* to pay for an SSL certificate. You can self-sign a certificate if all you want out of this is encryption. On Tue, Aug 25, 2009 at 1:57 PM, John Mattson wrote: >I am learning this as I go. As I understand it, SSH supports > higher security levels (management wants this)

Re: Need new 3270 emulator: SSH, inexpensive, reliable

wants a SSH based 3270 emulation for accessing mainframe TSO, CICS, and such apps We're getting sent to the SecureAgent 3270 emulator and it's fairly awful, so I'd be interest in any emulators that you find. Jack Kelly 202-502-2390 (Office) ---

Re: Need new 3270 emulator: SSH, inexpensive, reliable

I am learning this as I go. As I understand it, SSH supports higher security levels (management wants this) than SSL/TLS. And SSL requires Certificate authority and such which management does not want to pay for. Attachmate website "says" they can do SSH with their emulator, so at lea

How much CPU will mainframe Firewall cost?

How can I get at SWAG on how much CPU will be taken up by implementing a RACE/SecurityServer Firewall on the mainframe. Currently the mainframe is "inside" the communications firewall, but PCI and JSOX are forcing further considerations. Anyone have personal experiences to relate, or

Re: Software delivery via internet or tape

HI, MFNetDisk emulate now 3490E tape and 3390 disk. Currently the tape format is very the same like AWS but with more data (TM) in the header to enable fast access to any label in any tape size. Yes, I think that if IBM will put in one of their PC, MFNetDisk 3390 disk or MFNetDisk tape with MFNet

Re: Binder API...broke or working as designed

I just want to add a few comments to Peter Relson's post. 1. The binder and LE: The binder uses LE only to produce the C++ demangled name/mangled name cross reference in the listing. If LE is not available, the only consequence is that an informational message is issued and the report is not wr

Re: Need new 3270 emulator: SSH, inexpensive, reliable

I've never seen and SSH based TN3270 client. For secure connections I've seen TLS/SSL clients. On Tue, Aug 25, 2009 at 1:40 PM, Gibney, Dave wrote: > I don't know (never looked) of any SSH TN3270. I would suggest a VPN > tunnel. > > Why SSH, TLS/SSL is almost trivial to implement these days,

Re: Need new 3270 emulator: SSH, inexpensive, reliable

I don't know (never looked) of any SSH TN3270. I would suggest a VPN tunnel. Why SSH, TLS/SSL is almost trivial to implement these days, and the are many SSL TN3280 clients. Dave Gibney Information Technology Services Washington State University > -Original Message- > From: IBM Main

Re: Software delivery via internet or tape

Hum, just thinking out loud, here. Shai has MFNetDisk. I wonder how successful would be a "MFNetTape" which would emulate a 3490E type drive via TCPIP. The PC itself would run software where the tape could be in AWS or HET format (Hercules/P390), FakeTape format (Funsoft - FlexES), or maybe OMA

Re: Software delivery via internet or tape

>Fqirst off, our security group will not allow a direct FTP connection to IBM >for internet delivery. It's time to document why you need it, and have management duke it out. Why are PC's 'safer' than the m/f? Security is only implementing management policy, so if you truly need it, you should be

Need new 3270 emulator: SSH, inexpensive, reliable

Management is jumping for PCI and JSOX, and now wants a SSH based 3270 emulation for accessing mainframe TSO, CICS, and such apps. Please feel free to contact me off-list, or phone 562-290-4163, I am looking for actual user/installer endorsements and experiences, good or bad. Vendors

Re: Software delivery via internet or tape

>Since some installations discourage REGION=0M (and NOLIMIT?) specific values >might be more useful. The only way to get around coding NOLIMIT to avoid S522 abends is to code an SMF exit. - Too busy driving to stop for gas! --

Re: Software delivery via internet or tape

A couple of comments based upon what I have heard at Share. The reason for the discontinuation of 34XX tapes is because they are no longer being manufactured. IBM has a stock of them, but when they are gone, there is no more. Somebody mentioned using the HMC to load from a DVD. According to one

Re: how-to Sysplex? - the LOGR and exploiters part

On Tue, 25 Aug 2009 00:38:48 -0500, Barbara Nitz wrote: >Don, >[...] >>OFFLOAD_SYSTEMS( >> [INCLUDE(sysname1 [,sysname2]...)] >> [EXCLUDE(sysname1 [,sysname2]...)] >>) > >This was written so nicely :-), I went and checked the books if it's a function >in 1.11. Pity it isn't. I like the

Re: Software delivery via internet or tape

First off, our security group will not allow a direct FTP connection to IBM for internet delivery. So we have to perform the download to the PC and upload to the mainframe. Even that sometimes is blocked via the firewall. But the thing that bothers us is that every vendor now has a different pro

Re: Software delivery via internet or tape

On Tue, 25 Aug 2009 10:38:39 -0400, Pinnacle wrote: > >The timeout issues occur because SMP/E spawns (forks?) a Unix process to >unspin the tarball. For humongous tarballs, you can get S522 waiting for >the process to get back to the SMP/E batch job. You can also run into >storage issues as well,

Re: SHARE comments

Looks like the ultimate snub of those of us IBM-MAINers unable to attend SHARE. :) > -Original Message- > From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On > Behalf Of Richards, Robert B. > Sent: Tuesday, August 25, 2009 3:30 AM > To: IBM-MAIN@bama.ua.edu > Subject:

Re: Software delivery via internet or tape

Rather than dance around and come up with some expensive, fragile kludge, why not just document the business / technical requirement and let management duke it out. This is, after all, a political issue. I would expect some push pack from the PC folks and the more clueless auditors, but your b

Re: Software delivery via internet or tape

- Original Message - From: "Mark Pace" Newsgroups: bit.listserv.ibm-main Sent: Tuesday, August 25, 2009 8:20 AM Subject: Re: Software delivery via internet or tape The timeouts are the exact reason I swtiched to downloading to an NFS server and then doing RECEIVE FROM NTS. An FTP or

Re: SMP/E RECEIVE ORDER & REPORT ERRSYSMODS for HIPERs

Thanks Kurt Is there any likelihood of a change in this area? Am I correct in thinking that the BEGIN/ENDATE operands are unusable with REPORT ERRSYSMODS if I am using RECEIVE ORDER processing? Thanks Andrew Metcalfe Global z/OS Systems Programming Team Barclays Bank Plc Ground Floor, Block 1

Re: SMP/E RECEIVE ORDER & REPORT ERRSYSMODS for HIPERs

... to compare against "last week's" data and produce a report of "this week's" HIPERs. ... I thought I could do this employing the BEGINDATE/ENDDATE operands of REPORT ERRSYSMODS command. However, as RECEIVE ORDER automatically grabs the last two year's HOLDDATA (every night), it doesn't appe

Re: Software delivery via internet or tape

On Tue, 25 Aug 2009 08:31:53 -0500, Mark Zelden wrote: >On Tue, 25 Aug 2009 08:19:33 -0400, Mark Pace wrote: > >>The timeouts are the exact reason I swtiched to downloading to an NFS server >>and then doing RECEIVE FROM NTS. An FTP or Download-Director download is >>much faster and reliable tha

Re: Who has z/Linux, z/VM and Oracle

We have z/vm 5.4, SUSE 9.3 & 10.2 with Oracle 10g running as a DB server for a data warehouse on a 2096 with two IFLs. Shoot me an email sometime to this address craig.ot...@region10.org . -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Ri

Re: Software delivery via internet or tape

On Tue, 25 Aug 2009 08:19:33 -0400, Mark Pace wrote: >The timeouts are the exact reason I swtiched to downloading to an NFS server >and then doing RECEIVE FROM NTS. An FTP or Download-Director download is >much faster and reliable than RECEIVE ORDER. I had a couple of orders that >had to be res

Re: Binder API...broke or working as designed

Given the rather violent discussion on this topic, I urge folks to step back. Especially given that the thread now is going down a path that is based on incorrect assertions, namely that the binder uses LE even if no C/C++ code is involved. I asked, and they said that it does not, except to resolve

Re: IBM-MAIN Digest - 23 Aug 2009 to 24 Aug 2009 (#2009-236)

On Monday, August 24, 2009 6:55 AM Barbara Nitz wrote: >Let's restate the question: >How many of you can use RECEIVE FROMNETWORK directly, without starting >other supporting programs? We do all IBM maintenence downloads via network receive excluding our annual Serverpac install, the download for

Re: Software delivery via internet or tape

The timeouts are the exact reason I swtiched to downloading to an NFS server and then doing RECEIVE FROM NTS. An FTP or Download-Director download is much faster and reliable than RECEIVE ORDER. I had a couple of orders that had to be restarted after it had almost completed, wasting a vast amount

Re: Sysplex dis/advantages, was: Re: how-to Sysplex? - the LOGR and exploiters part

- Original Message From: Barbara Nitz nitz-...@gmx.net > Isn't this a very human trait: Don't change the way I have always done this, > I > am used to it, I am getting older and it is harder to learn new things? Indeed is human. But this way of thinking can literally kill a company.

Re: Who has z/Linux, z/VM and Oracle

Lizette, Based on prior posts, David Kreuter can probably answer a lot of your questions based on his engagement with the Quebec government. First, Google his name and Quebec. Bob - -Original Message- From: IBM Mainframe Discussio

Re: Software delivery via internet or tape

On Tue, 25 Aug 2009 06:22:25 -0500, Barbara Nitz wrote: > >Sounds like this is where I stopped when I had to install a 1.4 refresh. >Admittedly, there wasn't a receive fromnts back then. But I fought hard to >mount my hard drive as an NTS to z/OS - the OMVS part. I still had a lot of >problems with

Who has z/Linux, z/VM and Oracle

My management has asked me to see if anyone is using this configuration, Oracle running under z/Linux with z/VM. If so, would you be willing to talk to me offlist about it? Thanks Lizette lizette.koeh...@mindspring.com -- For IB

Re: Software delivery via internet or tape

>The DVD would go in your PC / workstation. Other vendors have been >delivering z/OS software this way for a long time. I don't know the details, >but I would guess you would either FTP to your HFS or zFS in place of >RECEIVE FROMNETWORK or perhaps you could NFS mount the DVD >on your workstatio

Sysplex dis/advantages, was: Re: how-to Sysplex? - the LOGR and exploiters part

Chris, >it doesn't really alter the point I was making >that sysplex design is predicated on sharing resources everywhere. That >design philosophy is what removes single points of failure and enables the >sysplex' marquee features of high availability and in theory, horizontal >scaling. It is equ

SHARE comments

For those at SHARE who wish to share with the rest of us, Timothy Sipples posted this on the MAINFRAME site: Share Your Comments on SHARE SHARE holds its big conference this week in beautiful Denver, Colorado. It's one of the biggest mainframe-focused conferences in the

Reminder: Deadline to Order z/OS 1.10

With the announcement of z/OS 1.11 and its scheduled general availability next month, the date rapidly approaches when z/OS 1.10 will no longer be available for ordering. If you would like to place an order for z/OS 1.10, IBM recommends submitting your ServerPac or CBPDO order no later than Octobe

Re: Software delivery via internet or tape

- Original Message From: Barbara Nitz nitz-...@gmx.net > Let's restate the question: > How many of you can use RECEIVE FROMNETWORK directly, without starting > other supporting programs? to download PTFs we use Internet Service Delivery, that is, RECEIVE ORDER. Simply great, no manual