We do. Roscoe is so deeply embedded here, but as a shop we are also
functionally stabilizing it, in that we are not adding anything new to that
environment, and in fact, as we migrate to new products(change management,
etc), they don’t get put back into Roscoe. The handwriting is on the wall,
Hello Group,
Is there an exit which can help me to restrict a group of ID to access
another Volume(Which has list of datasets).
For example : JLAB001 must be restricted to access any dataset sitting on
JPM009.
I am at Z/OS 1.8 level
Peter
-
A few questions
1) Are these SMS or NON-SMS Volumes
2) Are these volumes shared by more than one LPAR?
3) What is your SAF Product? ACF2, TSS, RACF
What problem are you trying to solve?
Thanks
Lizette
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LIS
Peter
In my prior life as a sysprog, I achieved this by writing an ICHRCX02 exit for
RACF.
If you are interested, I still have the source laying around.
Here is the prolog :
ICHRCX02 TITLE 'RACROUTE REQUEST=AUTH POST-PROCESSING EXIT'
*-
Roscoe is no longer in use here but I do have an exit.
It depends on two facility classes being defined in RACF.
ROSCMD to allow access to issuing commands
ROSCON to allow access to viewing the console
This is similar to having tables of users defined in the exit but this way the
RACF admin contr
Thanks for the education.
My doc search started with the JES2 Init and Tuning
Guide "Defining Output Limits" which lists LINES/BYTES
for both JOB and JOBPARM but nary a word on the CANCEL
DUMP WARNING arguments.
And the JCL Manual "Examples of the /* JOBPARM statement"
gives no description of th
We have 4 different non-sysplex LPARs all maintained by a sand box LPAR. We
install on the sand box LPAR and then copy volumes and files to the other
systems to roll out the maintenance. I recently installed a serverpac and
decided to make the /etc and /var filesystems SYS1 residing on the SYSRE
We do NOT put them on the sysres. In my shop, sysres filesystems are only the
SMPE maintained product filesystem and are mounted READ only. The filesystems
at /etc and /var are READ/WRIATE and system specific and are on volumes other
than sysres. I wouldn’t want IBM maintenance to update/o
mf db (Peter) wrote:
>Is there an exit which can help me to restrict a group of ID to access another
>Volume(Which has list of datasets).
>For example : JLAB001 must be restricted to access any dataset sitting on
>JPM009.
Lizette gave you good questions, but I have two more questions:
1. What
On 03/12/2014 06:53 AM, mf db wrote:
> Hello Group,
>
> Is there an exit which can help me to restrict a group of ID to access
> another Volume(Which has list of datasets).
>
>
> For example : JLAB001 must be restricted to access any dataset sitting on
> JPM009.
>
>
> I am at Z/OS 1.8 level
>
> Pet
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Handing /etc and /var
filesystems" sent on 12/03/2014 15:11:32.
This is the only notification you will receive while this person is away.
---
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: Force indivdual
job to ABEND on LINES EXCEEDED" sent on 12/03/2014 15:11:45.
This is the only notification you will receive while this person is away.
--
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: Handing /etc
and /var filesystems" sent on 12/03/2014 15:17:44.
This is the only notification you will receive while this person is away.
---
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: CA-Roscoe shops
around?" sent on 12/03/2014 14:22:49.
This is the only notification you will receive while this person is away.
-
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Volume Restriction
Using an EXIT" sent on 12/03/2014 12:53:21.
This is the only notification you will receive while this person is away.
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: CA-Roscoe shops
around?" sent on 12/03/2014 11:21:54.
This is the only notification you will receive while this person is away.
-
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: Volume
Restriction Using an EXIT" sent on 12/03/2014 13:17:40.
This is the only notification you will receive while this person is away.
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: Volume
Restriction Using an EXIT" sent on 12/03/2014 15:41:48.
This is the only notification you will receive while this person is away.
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: Volume
Restriction Using an EXIT" sent on 12/03/2014 13:30:14.
This is the only notification you will receive while this person is away.
Hello Liz,
Its for SMS managed
This volumes are not shared.
We use RACF
This is our education system and whole idea is to ensure that User should
never try to access any other Dataset lying on different Storage Group. We
tried with RESTRICTED attributes but still we see it as going out of
control
Hey, can you please turn this OFF!1
-Original Message-
From: Umberto Silvestri [mailto:umberto.silves...@it.ibm.com]
Sent: Wednesday, March 12, 2014 11:02 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: AUTO: Umberto Silvestri is prepared for DELETION (FREEZE)
Umb
One more thing
The board is at the end of the month?
Sent from my iPhone
> On Mar 12, 2014, at 11:05 AM, "Joel C. Ewing" wrote:
>
>> On 03/12/2014 06:53 AM, mf db wrote:
>> Hello Group,
>>
>> Is there an exit which can help me to restrict a group of ID to access
>> another Volume(Which has li
"The board is at the end of the month?"
??
On Wed, Mar 12, 2014 at 8:55 PM, Micheal Butz wrote:
> One more thing
> The board is at the end of the month?
>
> Sent from my iPhone
>
> > On Mar 12, 2014, at 11:05 AM, "Joel C. Ewing" wrote:
> >
> >> On 03/12/2014 06:53 AM, mf db wrote:
> >> Hello G
This looks to be interesting :
http://pic.dhe.ibm.com/infocenter/zos/v1r12/index.jsp?topic=%2Fcom.ibm.zos.r12.idai600%2Fauthcls.htm
On Wed, Mar 12, 2014 at 8:56 PM, mf db wrote:
> "The board is at the end of the month?"
>
> ??
>
>
> On Wed, Mar 12, 2014 at 8:55 PM, Micheal Butz >wrote:
>
> > O
Maybe we should prepare him for DELETION (FREEZE).
-Original Message-
From: mf db
Sent: Wednesday, March 12, 2014 11:26 AM Newsgroups: bit.listserv.ibm-main
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Volume Restriction Using an EXIT
"The board is at the end of the month?"
??
On Wed,
I am not understanding the requirement.
If you have a user named ECHO and ECHO's TSO Id is ABC123
The files ECHO is to access are only ABC123 and ONLY reside in Pool EDU01?
Or is it ECHO is able to create ABC123.* files in any designated POOL but
can only read data from files on VOLUME V1?
Hi
I am setting a breakpoint at offset +0 in my program and getting a S0C1 at
location +E
The following is my scenario
TESTAUTH ISP.SISPLPA(ISPF) CP
LOAD MYLOAD.LIBRARY(MYMOD)
Q MYMO.MYMOD.+0
AT +0
GO à INTO ispf
Then from the ispf command line I do TSO MYMOD
And
On 12 March 2014 11:54, MichealButz wrote:
[blank lines removed for readability]
> I am setting a breakpoint at offset +0 in my program and getting a S0C1 at
> location +E
>
> The following is my scenario
>
> TESTAUTH 'ISP.SISPLPA(ISPF)' CP
> LOAD 'MYLOAD.LIBRARY(MYMOD)'
> Q MYMO.MYMOD.+0
> AT +0
I did saw nothing mysterious the the 90EC was replaced by 0A61 I say nothing
strange
Sent from my iPhone
> On Mar 12, 2014, at 12:03 PM, Tony Harminc wrote:
>
>> On 12 March 2014 11:54, MichealButz wrote:
>> [blank lines removed for readability]
>> I am setting a breakpoint at offset +0 in m
With a couple of tips from Phl's vbscript I was able to get the
HostIDMappings to work. I was leaving the implicit tags off the
IA5 strings. As Phil indicated, it does work with CICS Web Services
even though no mention of that anywhere. But I could
not get HostIDMapping to work with FTP Server.
On Wed, 12 Mar 2014 10:18:04 -0700, Donald J. wrote:
>even though no mention of that anywhere. But I could
>not get HostIDMapping to work with FTP Server. You would think the RACF
>interface would be the same for all applications.
What setting do you have for SECURE_LOGIN on the ftp server?
-
SECURE_LOGIN REQUIRED
SECURE_PASSWORD OPTIONAL
SECURE_CTRLCONN PRIVATE
SECURE_DATACONN PRIVATE
SECURE_FTP REQUIRED
It works when the certificate is associated to a userid.
--
Donald J.
dona...@4email.net
On Wed, Mar 12, 2014, at 10:53 AM, Phil Sidler wrote:
> On Wed,
You need to be much more specific:
Your response appears inconsistent. First you say don't let the user access
datasets on a different storage group. Then you say to deny the user access
to volumes in a specific group. Which is it? Can user JLAB001 access
datasets only on JPM009 or can he acce
W dniu 2014-03-12 16:21, Lance D. Jackson pisze:
Hey, can you please turn this OFF!1
How do you think: is anybody hearing you?
What did you achieve by sending this mail to the group?
Of course except more "Umberto Silvestri" messages.
Suggestions/solutions for
To remove the CHPID accesses I had to do a FORCE=CANDIDATE.
When trying to rename the LPARs, I received this error:
_ E IOS500I ACTIVATE RESULTS
# ACTIVATE FAILED - ERROR MESSAGE(S) ISSUED
/ EREASON=01A4,CANNOT DELETE LOGICAL PARTITION L2LM FROM
# CSS 0
#
We keep local /etc directories, but most of the entries are either symbolic
links to /SAXX/etc entries (with etc members common across each plex) or
symbolic links to /usr/etc entries (with etc members common across all
systems).
/usr/etc is on our sysres. The contents is not IBM or SMP maintai
Handled.
Darren
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
On 2014-03-12 08:17, Jousma, David wrote:
> We do NOT put them on the sysres. In my shop, sysres filesystems are only
> the SMPE maintained product filesystem and are mounted READ only. The
> filesystems at /etc and /var are READ/WRIATE and system specific and are on
> volumes other than sys
I do 3 LPARs much as you describe.
Currently, I don't believe IBM maintenance will target /var. There should be
HOLDDATA when /etc is targeted because you need to change the links before and
after.
I usually keep the /etc from release to release and update it if a change
requires it. It Is mostl
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "AUTO: Umberto
Silvestri is prepared for DELETION (FREEZE)" sent on 12/03/2014 16:02:34.
This is the only notification you will receive while this person is away.
---
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: Volume
Restriction Using an EXIT" sent on 12/03/2014 16:05:35.
This is the only notification you will receive while this person is away.
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: HCD Question
regarding the "deletion" of LPARs" sent on 12/03/2014 19:37:39.
This is the only notification you will receive while this person is away.
--
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: Volume
Restriction Using an EXIT" sent on 12/03/2014 16:26:32.
This is the only notification you will receive while this person is away.
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: z/OS PKI Services
HostIDMapping format" sent on 12/03/2014 18:18:04.
This is the only notification you will receive while this person is away.
--
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: z/OS PKI Services
HostIDMapping format" sent on 12/03/2014 18:55:35.
This is the only notification you will receive while this person is away.
--
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: Volume
Restriction Using an EXIT" sent on 12/03/2014 16:31:56.
This is the only notification you will receive while this person is away.
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: AUTO: Umberto
Silvestri is prepared for DELETION (FREEZE)" sent on 12/03/2014 16:21:18.
This is the only notification you will receive while this person is away.
---
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: Volume
Restriction Using an EXIT" sent on 12/03/2014 16:25:20.
This is the only notification you will receive while this person is away.
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: Volume
Restriction Using an EXIT" sent on 12/03/2014 16:19:01.
This is the only notification you will receive while this person is away.
Umberto Silvestri is prepared for DELETION (FREEZE)
Note: This is an automated response to your message "Re: AUTO: Umberto
Silvestri is prepared for DELETION (FREEZE)" sent on 12/03/2014 19:37:44.
This is the only notification you will receive while this person is away.
---
Jay Campbell
IBM OS Support Section
Phone 304-264-7409
Cell304-676-6546
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@listserv.ua.edu] On Behalf
Of Umberto Silvestri
Sent: Wednesday, March 12, 2014 5:03 PM
To: IBM-MAIN@listserv.ua.edu
Subject: AUTO: Umberto Si
On 13/03/2014 1:11, Donald Likens wrote:
We have 4 different non-sysplex LPARs all maintained by a sand box LPAR. We
install on the sand box LPAR and then copy volumes and files to the other
systems to roll out the maintenance. I recently installed a serverpac and
decided to make the /etc and
In , on 03/12/2014
at 03:21 PM, "Lance D. Jackson"
said:
>Hey, can you please turn this OFF!1
There's no point in asking on the list: ask postmas...@it.ibm.com or
postmas...@uk.ibm.com.
Darren: do you know anybody that can get them to fix their
autoresponder?
On Wed, 12 Mar 2014 18:15:22 -0400, Shmuel Metz (Seymour J.) wrote:
>In , on 03/12/2014
> at 03:21 PM, "Lance D. Jackson" said:
>
>>Hey, can you please turn this OFF!1
>
>There's no point in asking on the list: ask postmas...@it.ibm.com or
>postmas...@uk.ibm.com.
He should be BOUNCED from the group...
-Original Message-
From: Campbell Jay [mailto:james.l.campb...@irs.gov]
Sent: Wednesday, March 12, 2014 05:15 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: AUTO: Can someone turn Umberto off ?
Jay CampbellIBM OS Support SectionPhone 304-264-7409Cell
304-
Haven't got the latest, may not be a person. Pretty clever malware out and
about...
In a message dated 3/12/2014 8:21:41 P.M. Central Daylight Time,
ljack...@pandrueassociates.com writes:
He should be BOUNCED from the group...
---
Hello Group,
I am trying to use DAF to track the creation of dataset using a specific
HLQ. Unfortunately I have not set AUDIT logging using our security software.
Let me be very precise, I am trying to exploit the potentiality of DAF to
check if i can track the USERID who has a created a set of d
DAF processes many different SMF records, not just the ones RACF creates.
If your SMF is recording the necessary record types, DAF should be able to
tell you when and by whom any dataset was created, opened, or deleted. But
you need to be recording type 14, 15, 17, 18, 60, 61, 62, 65, 66, and 69 i
58 matches
Mail list logo
