14
*
** SUBROUTINE - OUT OF CROSS MEMORY MODE
*
@OUTXMEM L 2,OURASN OUT OF XMEM MODE
SSAR 2
XR2,2 REG 2 = 0
AXSET AX=(2) AUTH INDEX = 0
@OUTXEND BR14
This rexx assembler is defined in IKJTSO00 in AUTHPGM.
BTW, I
-that's most of the group.
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
I started on the 7094 and finishing on the z/10 this June.
http://archive.computerhistory.org/resources/Donations_in_Process/X5331.2009_Ehrman/zhistory.pdf
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access
SOUT=*,DCB=(LRECL=256)
>
>
> BTW: How is it possible to not have CK panel? What z/OS version do you
> use? Or it is matter of authorities?
> --
If you have READ access to the profile ISFCMD.ODSP.HCHECKER.* in the SDSF
cl
7;S ACEE
BZGFEXIT D'OH! NO ACEE AND WE'RE IN TROUBLE
GF0200 DS0H
USING ACEE,R1 RACF ANCHOR BLOCK
. . . . . . . . . . . . . . . . . . . .
George Fogg
-Original Message-
From: IBM Mainframe Dis
> Only the TCBSENV for the current TCB is used if non-zero. If the current
> TCBSENV is zero, then ACEESENV is used.
>
Never heard of a ACEESENV. I think you mean ASXBSENV.
George Fogg
--
For IBM-MAIN subscribe
However, I do see them in both formats
> on the internet library so I know they exist.
>
This site didn't work for you for 1.10?
http://www-03.ibm.com/systems/z/os/zos/bkserv/r10pdf/#mvs
or for 1.11
http://www-03.ibm.com/systems/z/os
> http://www.phoenixsoftware.com/newlocation.htm
>
Nice digs, you get that nice corner office?
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the m
hing wrong about MIM
http://www.share.org/Portals/0/archives/proceedings/SF_Feb99/DATA/S2819A.PDF
for SHARE presentation from Deb Carnes
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to
I believe the OP mentioned GRS in shared dasd environment and having
problems with PDSEs. I for one would like to know what the problems were.
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf
Of Tony B.
Sent: Thursday, December 03
> commands to setup the tool as I am pretty dummy to ACF2.. Any direction is
> welcome!
>
Why don't you go to the CA SUPPORT site and open a case number to get your
questions answered?
George Fogg
--
For IBM-MAI
column is from the JSABUSID field in JSAB that is a JES CB. You
won't see a OWNER userid for jobs not started by JES like SUB=MSTR.
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email
at's weird if they,
IBM is only presenting their side of the story and not us. We were invited
to talk about HCD, console consolidation, RACF, GRS, and such as far as
Boeing experience goes implementing these functions and features in the
past.
What a shame if that is true.
George Fogg
-
orph over time! .
>
> Bob
Hi Bob. See http://en.wikipedia.org/wiki/The_Soup_Nazi
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: G
The last time I looked at SDSF code, the OWNER comes from JSABUSID and
that's from a JES CB so you never see a OWNER in SDSF if the task was
started with SUB=MSTR.
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf
Of Chase,
tates "...This table resides in SYS1.LINKLIB or any other
APF-authorized linklist library. It must be linked with RMODE(24)."
Anyway, I would also check any library defined in the PROGxx SYSLIB statements
for ICHRDSNT. In our case we have the ICHR
s to any APF library greater
than READ then use the console command:
f hzsproc,update,check=(ibmracf,RACF_SENSITIVE_RESOURCES),parm(USR001)
If the user USR001 has > READ in any standard access list in any APF library
profile then it will show ">READ" in the USER column of the report.
name, etc. You may want
to create your own RACF class and specify the requirements you need for
resource names as long as its less than 247 characters in length.
There's a lot more to this RACF stuff but I hope this helps.
George Fogg
-Original Message-
From: IBM Mainframe Discussio
Make a RACF request for what?
RACF data can exist in lots of areas. Real or virtual storage, in a VLF
object, dataspace, a CF structure. If not found in any of those areas then
RACF I/O to its database. So again, what RACF request are you after?
George Fogg
-Original Message-
From: IBM
bsystem must be up and running. OR, if already logged on to the MCS
console then you don't have permission in the OPERCMDS class.
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to li
> George Fogg pisze:
>>> Jump from 2.10 to 1.4 was supported one. Jump from 1.7 to 1.10 is not
>>> supported. That's the difference.
>>>
>> Radoslaw, Just curious. Where is it documented that 1.7 to 1.10 is not
>> supported?
>
> I don't kno
> Jump from 2.10 to 1.4 was supported one. Jump from 1.7 to 1.10 is not
> supported. That's the difference.
>
Radoslaw, Just curious. Where is it documented that 1.7 to 1.10 is not
supported?
George Fogg
-
ops.
>
Alan, just for additional information, I used HCM to find out if CPACF was
enabled on our z/10 boxes. See redbook 'IBM System z9 109 Configuration Setup'
and if the status is 'CP Assist for Crypto functions: Installed
A note from IBM LVL II RACF
"believe it or not a few apars (applied below 1.10) HAVE the latest
templates for 1.10."
That means their isn't any template updates from 1.9 to 1.10 if you are
current with the latest RSU 1.9 release.
George Fogg
-Original Message-
From
MY title before Boeing (when I worked for a bank) was " Assistant Vice
President" and before that I was a "Senior Operating System Software
Officer". They gave me the AVP title so I wouln't be part of a union. No
extra pay, just the good-feeling title. BFD.
George Fog
LpmeaxSvcnum.
>
>does its usage prevent any removal, or similar.
>
Not sure what you mean but I think it has to do with the undocumented
facility to add a SVC dynamically.
I did test the ability to add a SVC dynamically with the SETPROG LPA,options
and the SVC was added and invoked.
lly caustic hydrogen hydroxide.
> Each of them a liquid gas (when not a gassified or solidified liquid).
>
Hmmm well if it turns out to be water then will it have a drinking fountain
like the old Cray machines had?
George Fogg
---
ES STATUS=ACTIVE COMMANDS=REJECT
>
>
>
> Thank you,
>
> Luke
>
See SETSSI command
http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/IEA2G181/4.50?SHELF=EZ2ZO10K&DT=20080118081647
George Fogg
--
F
e name and profile that failed for the SR command.
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf
Of Pinnacle
Sent: Tuesday, December 16, 2008 6:07 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: SDSF Security
- Original Message -----
Fro
)
INSUFFICIENT ACCESS AUTHORITY
FROM ISFCMD.ODSP.SR.** (G)
ACCESS INTENT(READ ) ACCESS ALLOWED(NONE )
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:ibm-m
West gave a SHARE presentation on MFM several years ago.
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at h
be improved by LLA. Manuals just talk about
> 'module fetch', does this imply 'LOAD module fetch'?
>
Back in 1999, I converted our shop (about 42 lpars at the time) off of PMO /
QFETCH to LLA/VLF. I also gave a SHARE presentation in 2000 or near that time
on this subject. If you
ountry. Entering commands on the shared console takes a bit of
> verbal coordination, of course.
>
We also use IO Concepts. I like the fact that I'm down on my boat right now
and have access to the consoles.
George Fogg
--
> On Thu, 11 Dec 2008 11:38:00 -0800, George Fogg
> wrote:
>
>>>
>>>
>>> "scott" wrote in message
>>> news:<2gt%k.9190$x%.9...@nlpi070.nbdc.sbc.com>...
>>>> Where in storage are the symbols specified in IEASYMxx s
er.
>>
>> Thanks!
>
> I have no answer to your question, but out of curiosity: why do you want
> to know and can't you use the official interface?
>
System Symbolics in the IPA
CVT X'8C' -> ECVT -> X'188' -> IPA
Try http://www-03.ibm.com/systems/z/os/zos/webqs.html
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of Edward Jaffe
Sent: Tuesday, November 25, 2008 4:52 PM
To: IBM-MAIN@bama.ua.edu
Subject: RCFs are no longer accepted by IBM
URLs not working for me either.
What's the matter with Mark?
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of Reza Heydarpour
Sent: Sunday, November 23, 2008 6:32 PM
To: IBM-MAIN@bama.ua.edu
Subject: Catalog and VSAM Knowledge
It's working now.
Thanks,
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of Roland Schiradin
Sent: Monday, November 17, 2008 9:38 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: Logrec Viewer 1.1
The URL below works for me.
>I G
I GET "PAGE CANNOT BE DISPLAYED" message. How about a real UTL.
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of David Alcock
Sent: Monday, November 17, 2008 7:24 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: Logrec Viewer
SYSTEMNO PURGE
> + NETVIEW SYSTEMNO PURGE
>
Barbara, I'm not talking about HSAMs (whatever they are) and our own
Netview does have a prefix shown in "D OPDATA". Our automations system
uses a &q
>
> How about "D OPDATA"
>
The "D OPDATA" will show SS prefixes that have registered them using the CPF
macro call. Not all subsystems do this. For example, we have one SS from IBM
called SA/390 that does not use the CPF and its SS prefix d
opment tool in the sandbox
> it might be invaluable. After development is complete, the more
> conventional, and supported, mechanisms should be used. Those who don't
> follow these simple rules deserve all the grief they get.
>
I would be happy with some doc about the syn
nager. For example, MCS console services routes
commands from other systems with ENVRIN data.
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message:
it tomorrow on
the test system and see. We have a tool to tell if the user SVC is for APF
callers, allows AR mode and requires locks or not.
I don't think IBM will tells us anything.
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
hat no one knew what type of SVC and
authorization it would create like TYPE(?) and APF(?) mainly because the
SVCNUMDEC parameter is undocumented and not supported.
George Fogg
--
For IBM-MAIN subscribe / signoff / archive ac
ry. Sessions
> for the day include:
>
HEY!!! You East Coasters get all the neat stuff from IBM RACF.
Seattle happens to have a very nice IBM building downtown too, just waiting
for your IBM presentations. :-)
George Fogg
-
r_token where
the user_token is the address of the submitter's RACF token to see if they
have CONTROL access to the OPERCMDS profile "JESx.VS" for the $VS JES2
command.
Then JES2 does a second party REQUEST=AUTH ACEE=user_acee_addres
Has anyone written a HC routine (hopefully in SYSREXX) to monitor a
specific job/stc CPU percentage use. Perhaps set a threshold and send a
message to the console when the threshold is met?
George Fogg
--
For IBM-MAIN
s on RACF status then use the RACROUTE REQUEST=STAT macro
call.
I believe that other security products have the same macro call that give
you details like it does for RACF. I will soon find out since we will have
ACF2 in our shop next year.
George Fogg
---
Chapter 6.
If SAF is active, password protection is bypassed for all data sets. The
system performs password validation only if SAF is inactive and the data set
being accessed is not SMS-managed. The system provides SMS-managed data set
and catalog protection through the system authorization facility
o a catalog lookup to
> find the volser. I'd use the newest IGGCSI00 interface to do that instead
> of the old way (which I can't even remember what it is called - LOCATE?)
>
LOCATE and it still works fine.
George Fogg
Yes, and see
http://www-03.ibm.com/systems/z/os/zos/support/zos_eos_dates.html
For releases that are no loner suport or close to being non-supported.
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of Timothy Sipples
Sent: Tuesday
> For 1.9 what is it? Do I need it? Where is it documented? What does the
> RACF definition look like?
> Its redundant and copius S053 abends took over my console.
>
You mean this?
http://tinyurl.com/65u5bd
Has the RACF requirements for CEA.
not
true. Only the dataset class and STGADMIN checks in the FACILITY class If
NOPASS is indicated.
Some folks might think its RACF doing the bypass and its actually
OPEN/CLOSE/EOV, DADSM and other DFSMS code. RACF doesn't look at the
JSCBPASS bit that
My embarresing response is that the NODES class won't help him. I seem not
to see those characters "MAS" in his post.
>Mark said:
>John says he has a JES2 MAS. How will NODES help him - it's all one node?
--
For IBM-MAIN subscr
> bigger and hairier?
>
John
If I remember correctly, you have a RACF shop so use the NODES class to stop
inbound jobs and sysout from SY2 on the SY1 node.
For example:
RDEF SY2.USERJ.* UACC(NONE) This will stop jobs from entering SY1 from SY2
RDEF SY2.USERS.* UACC(NONE) This will stop sys
> The online books show V1R10 manuals now.
> http://www-03.ibm.com/systems/z/os/zos/bkserv/
>
Woops, the online manual site lets you click on V1R10 but no manuals available.
You get the message "Shelves were not located in the specified path."
Sorry for the ba
> tinyurl http://preview.tinyurl.com/6464u8
>
The online books show V1R10 manuals now.
http://www-03.ibm.com/systems/z/os/zos/bkserv/
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send em
t.
>>>
>>
>>It is a locally defined symbol. Only you can figure out what it means. Look
>>at IEASYMxx.
>
> You might want to scan PARMLIB, PROCLIB, TCP/IP parms, CList libraries etc.
>
Use the "D SYMBOLS" operator command to display static symbols. You can
>> 0A24615
>
> Try OA24615 instead (with a letter "O" instead of the leading zero ...
> somebody made a typo)
Now why didn't I think of that...
It works and thanks.
--
For IBM-MAIN subscribe / signoff / archive access instructions
will give me hope it will be
> fixed sooner.
You sure about that APAR number? I can't find in IBMLink.
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the m
> I use some of these undocumented commands but in a EMCS session where I can
> control, via the OPERPARMS segment, that I don't want the output to be
> supressed to syslog.
> George Fogg
Brain dead. I meant to say "that I want the output to be suppressed"
t to the console log and you (IBM) are not
responsible of their usage.
I suppose if you document the commands then users expect it to work in any
conditions--oh well...
I use some of these undocumented commands but in a EMCS session where I can
control, via the OPERPARMS segment, that I don't want th
I'm confused. Is this an advertisement on IBM-MAIN?
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of Timothy Sipples
Sent: Monday, June 02, 2008 5:34 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: IBM PR: PCI Security Compliance Worksh
a REXX exec or a CLIST.
Basically you need a REXX environment first before calling IKJCT441.
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET I
or TSO user. Is batch
> OK? Is there a better way?
>
Use TPUT for TSO foreground.
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN
I'm waiing for SHARE to be a the Bora-Bora Yacht Club--yes, there is a
Bora-Bora yacht club in Tahiti since I was there back in 1998 sailing a
chartered Benti-toe 40.
Georege Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of Michael Cleary
What was SYSVIEWs name before CA bought it?
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of Norman Hollander on h-WiZ.biz
Sent: Monday, April 21, 2008 4:34 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: switch from CA-SYSVIEW to SDSF
a enabled device. Even pics of your friends in the parking lot.
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives
>I wonder how many such devices are still in use. We have some coax-attached
Visara NCTs in our computer room. They run >>.Linux.
I'm using one for a backup boat anchor :-)
George Fogg
--
For IBM-MAIN subsc
> Or modularize the design so that no one part is known by everyone. I
> think that's why Windows works so well.
>
LOL! :-)
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
VC using normal conventional
service calls supported by IBM and to make our auditors happy and satisified
that we meet all SOX/auditing requirements on production systems.
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of George Fog
few in my shop that can
code at that level.
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of Craddock, Chris
Sent: Tuesday, April 15, 2008 4:16 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: Authorized Rexx Assembler Function
Binyamin said
for logon and password. If not then I can send a
PDF file.
See:
http://www.share.org/member_center/open_document.cfm?document=proceedings/Dallas_Conference/s2820.pdf
(Watch the line fold)
PS: I have written assembler functions that set the JSCBAUTH bit on via a SVC
call but that's not the nor
system "A" up on a good RNL.
IPLed system "B" with one that didn't match and BOOM! Wait state on system
"B".
We have our DASD configured so all I have to do is VARY ONLINE system "B" from
system "A" , make the necessary change, VARY OFFLINE a
tem-identifier)) on the PERMIT command:
PERMIT profile-name CLASS(PROGRAM) ID(user or group) ACCESS(READ)
WHEN(SYSID(system-identifier))
This conditional access list entry is only valid for the
More SDSF tutorial information at
http://www-03.ibm.com/servers/eserver/zseries/zos/sdsf/pdf/sdsf_overview.pdf
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with
> On Tue, 26 Feb 2008 16:08:17 -0800, George Fogg <[EMAIL PROTECTED]> wrote:
>
>>I wrote a REXX interface to our JCL scan product so it can check a
>>production userid access to a dataset resource. I told the folks that use it
>>that they must understand the fac
YES in the
RACROUTE=AUTH call and you can supress the message and SMF logging with
LOG=NONE.
My .02 cents worth.
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with
USERID=user_id (for third party checking)
STATUS=ACCESS (send back the access code (NONE, READ, UPDATE, CONTROL,
ALTER)
LOG=NONE (do not cut SMF audit records)
And a few other necessary parameters. USERID and LOG require APF.
I also check if the caller has the authority to use t
t you need to parse to
find the access level message.
See http://tinyurl.com/29f4x9 for the manual, and if you wish, I can send
you an assembler example on how to do this to get you started.
George Fogg
PS: IBM states that command output is not a programming interface.
-Original Message-
> Ya just never know who is (still) lurking ...
> Ron, you should pick a better climate for year-round sailing. Say the
> Whitsundays ...
>
Sailing? What about sailing--expecially in the Whitsundays? Too far from
Seattle but love to charter a boat there someday...
macro. You can also use the
default attribute definitions defined for the CONSOLE statement in the
CONSOLxx parmlib member.
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of Edward Jaffe
Sent: Tuesday, February 12, 2008 6:28 PM
To: IBM-MAIN@B
segment or OPERPARM data area or CONTROL access to MVC.VERYLOGON.CN
isn't necessary. Not sure why I mentioned this outside of giving some
auditors a heartburn :-).
SOME Auto operations package would be a way to stop this VARY command from
being issued as Walt Farrell and Ted MacNeil menti
will basically bypass OPERCMDS
checking just like the MCS console EDJADM.
OPERCMDS checking is only comes into play if a user has logged onto a MCS or
SMCS console, just like any EMCS console.
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
> What are the entries in your VLF that give your system a big performance
> boost?
>
Class names CSVLLA, IKJEXEC, IGGCAS, and for RACF, IRRGTS, IRRACEE, IRRGMAP,
IRRUMAP and IRRSMAP.
George Fogg
--
For IBM-MAIN
fter 10 or 11 times.
>
> I have heard this but where? I do *NOT* know if this is true or not.
>
> Ed
I have worked at several top secret installations in the past and I was told
that they take the old DASD and drop them in a acid bath then cut them up.
Never saw it happened so not totally su
gt; E MOUNTED
>
> How do I verify the MOUNT authority you are all talking about. Is that a
> facility profile in RACF? I'm looking, but I can't find it
>
In the TSOAUTH class, use the profile MOUNT.
RL TSOAUTH MOUNT all
PE MOUNT CLASS(TSOAUTH
> Zeldon said:
> BTDTGTTT. PCOMM release 5.8 added support for Contention Resolution.
> This needs to be turned off. To turn it off, add the following to the
> Telnet3270 section of the WS file using notepad:
OK, I give, what's BTDT
Good questions. Let me run a trace tomorrow (it's 10:25 PM is Seattle) and
I'll get back to you. Perhaps Russ or Walt will get the answer before
me--who knows, the race is on.
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
ACEE(s) up
when the job was canceled.
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of Thompson, Steve
Sent: Tuesday, January 08, 2008 3:04 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: LSQA orphan storage
I have come upon an intere
I think we still have one of those on display in our computer building.
George Fogg
-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of Ed Gould
Sent: Sunday, January 06, 2008 9:08 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: OT For you old CRAY lovers
Scott. I hope you don't lose any sleep over this and I'm somewhat sorry that
I stirred up the mud on this "out-of_the_closet" bit even though it's
documented enough to describe what it does. But overall, I'm glad I know
about it.
Owe you a beer at SHARE if I ever a
> On Mon, 10 Dec 2007 15:38:58 -0800 George Fogg <[EMAIL PROTECTED]> wrote:
>
> :>OK, MGCEFAST has a purpose in certain conditions but I could set this bit on
> :>in a simple MGCRE call to issue a command without using CPF and CMDSYS
> :>processing and it will bypass
ppy to learn where I'm wrong and how it really works.
>
The only place I've seen MGCEFAST documented is at:
http://tinyurl.com/2bn87q
George Fogg
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send ema
> Edward Jaffe wrote:
>
>>George Fogg wrote:
>>> Seems like MGCEFAST is kind of like RACF truested where authority exits are
>>> bypassed and 99% of authority checks are passed just for issuing commands
> from
>>> MGCRE.
>>>
>>> MGCEFAST
OLxx
parmlib member and the AUTH() setting in the user's OPERPARM segment plus
bypass command exits and SSI--whatever that means.
Seems like MGCEFAST is kind of like RACF truested where authority exits are
bypassed and 99% of authority checks are passed just for issuing commands from
MGCRE.
MGCE
get ICSF up and running. This is a presentation
based on V1R2 and some of the ICSF panels have changed but the basic stuff
is there.
Also, you should ask the RACF-L list for crypto questions. There are more
user experenced folks there (plus some IBMers) that can answer your
questions.
George Fogg
E=SYSA
IEE174I 14.22.25 DISPLAY M 054
PROCESSOR STATUS
ID CPU CR SERIAL
00 + + 01
01 + + 11
George Fogg
> HITACHI
> DATA SYSTEMS
> Raymond E. Noal
> Senior Technical Engineer
> Office: (408) 970 - 7978
ovided. It doesn't show all the data that we wish but it works OK for
us.
George Fogg.
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN
1 - 100 of 114 matches
Mail list logo
