Re: diagnose 8 / interesting dilemma

Thank you for all of the responses and ideas. I guess if your 'guest operating system' is something like 'CMS' then it is quite easy to get consecutive pages of real storage addresses. But not quite so easy with z/os. I guess if you really want to do 'query virtual dasd' under z/os pre z/vm 6.4

AW: Re: AW: Re: Does >4K PGFIX make sure the frames are contiguous?

>On 10/19/2016 7:51 AM, Peter Hunkeler wrote: >> But the net seems to be, my assumption is wrong. If an area >4k is PGFIXed, >> then I need to find the real address of every page and cannot assume the >> real storage is contiguous. > >This is a correct statement. PGFIXing storage guarantees th

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

On Wed, 19 Oct 2016 18:28:23 -0400, Tony Harminc wrote: > >OT, but the "You are now in France" attack, followed by the "You are >still in France" attack, was a hot topic in 1998-1999. > Thanks for the interesting OT info, until now new to me. >http://catless.ncl.ac.uk/Risks/19/74#subj8 You are n

Re: Intrdr (and IEC141I 013-6)

On Mon, 17 Oct 2016 20:10:49 -0500, Paul Gilmartin wrote: >On Mon, 17 Oct 2016 19:10:23 -0400, scott Ford wrote: > >>I am passing sysin data behind the actual JCL , it can be large up to 32k.. >>I wasn't sure about punching the JCL and data to the Intrdr when the >>logical record length us that la

Re: IBM and z/OS OpenSSH

Jack J. Woehr wrote: OpenSSH is used mission-critically on z/OS. OpenSSH comes from the OpenBSD project. My query on this subject has been responded to by responsible parties within IBM. It is clear to me that IBM has supported the OpenBSD project. Thank you, IBM. -- Jack J. Woehr # Sci

Re: AW: Re: Does >4K PGFIX make sure the frames are contiguous?

On 10/19/2016 3:35 PM, Greg Dyck wrote: On 10/19/2016 7:51 AM, Peter Hunkeler wrote: But the net seems to be, my assumption is wrong. If an area >4k is PGFIXed, then I need to find the real address of every page and cannot assume the real storage is contiguous. This is a correct statement. P

Re: AW: Re: Does >4K PGFIX make sure the frames are contiguous?

On 10/19/2016 7:51 AM, Peter Hunkeler wrote: But the net seems to be, my assumption is wrong. If an area >4k is PGFIXed, then I need to find the real address of every page and cannot assume the real storage is contiguous. This is a correct statement. PGFIXing storage guarantees the page is

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

On 19 October 2016 at 12:10, Paul Gilmartin <000433f07816-dmarc-requ...@listserv.ua.edu> wrote: > Ouch! But there's a widespread belief that availability of encryption is a > security threat. > > I used to read that France much restricted use of encryption. Nowadays > that would seem to pro

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Once the ICSF Master Keys are entered into the crypto domain after the first IPL of each system, they'll be there and ready when you IPL your DR system in the future. If you've changed the keys on the production side, you have to keep them in sync with the DR box too. Mark Jacobs Jesse 1 Robi

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Thanks to Stuart for pointing me to his doc. ;-) Radoslaw, you said in one post that the whole thing can be done ahead of time, but your latest post mentions only LPAR Image profile setup on HMC. Mike Ward (and Stuart's doc) refer to ICSF, which requires an OS, that is, IPL. Ours is a push-pull

Questions about Shared Memory Communications (SMC)

1. SMC and OSX chpid. Is it possible to use SMC (ISM or RoCE for multi-CPC) associated with OSX chcpid? Allowed PNET ID value IEDN suggest it should be possible. 2. ISM and Hipersockets Does ISM work with IQD chpid working as External Bridge? If yes, does it mean, only z/OS systems working as

Re: JCL changes in z/OS 2.1

R.S. wrote: I'm looking for a presentation or paper describing changes introduced in z/OS 2.1 For v 2.2 things are simpler - JCL Reference, Summary of Changes. Unfortunately in 2.1 manual it is rather "summary of links to other books". To generic, to be useful. Maybe some SHARE material? BTW:

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

W dniu 2016-10-19 o 20:36, Dazzo, Matt pisze: RS, what do you mean by 'setup lpar in advance?' We will be doing a scheduled IPL this weekend so I have an opportunity should I need to make a config change. Well, Customize Activation Profiles, LPAR profile, Crypto tab. You have to set up some v

JCL changes in z/OS 2.1

I'm looking for a presentation or paper describing changes introduced in z/OS 2.1 For v 2.2 things are simpler - JCL Reference, Summary of Changes. Unfortunately in 2.1 manual it is rather "summary of links to other books". To generic, to be useful. Maybe some SHARE material? BTW: several th

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Master Key set is done through ICSF. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Jesse 1 Robinson Sent: Wednesday, October 19, 2016 10:42 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Re: Randomly disappearing IGD101I messages.

The IGD101I is in IBM code. As long as the output volume is SMS controlled, the IGD101I should appear consistenly. There are some ways that an SMS data set can become non-SMS after the move. This would depend on the ACS rules in place, or whether you are using an Allocation Management produc

Re: [EXTERNAL] Re: IBM PMR Entry requires an OS?

It varies by product. DCF (Document Composition Facility), for example is one product ID across z/VSE, z/VM, and z/OS, while PSF is separate products across the same three mainframe environments. --ROGER On Oct 19, 2016 7:36 AM, "Dyck, Lionel B. (TRA)" wrote: > For products that run on multip

Re: Looking for New Function APARs across the entire z/OS platform?

On Tue, 18 Oct 2016 15:51:39 -0500, Marna WALLE wrote: > >With IBM using continuous delivery across the entire z/OS platform and in many >cases introducing new functions within the service stream, there are now two >ways to quickly learn about those APARs (aka SPEs): > With the two-year release

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

RS, what do you mean by 'setup lpar in advance?' We will be doing a scheduled IPL this weekend so I have an opportunity should I need to make a config change. Thanks Matt -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of R.S. Sent: W

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Skip - Check the web pages I left behind. Instructions for setting the keys through the ICSF panels are in there. On 10/19/2016 08:41 AM, Jesse 1 Robinson wrote: > We are installing a z13s and going through preliminary setup. When selecting > the Crypto tab in an Image profile, I was a bit alar

Re: Looking for New Function APARs across the entire z/OS platform?

Marna, Thanks for the offer, but let me pursue my end first. I did not succeed with FF, IE or Chrome. Bob -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Marna WALLE Sent: Wednesday, October 19, 2016 12:51 PM To: IBM-MAIN@LISTSERV.U

Re: Looking for New Function APARs across the entire z/OS platform?

Hi Bob, Two people here have tried with these browsers, and we were able to get to all 3 files: IE 11, FF ESR 45.4.0, Chrome 53.0.2785.143 m, and Safari. If you want to send me more details, I can forward to one of the web groups to see if they can identify the problem. This new page and files

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Whole ICSF setup, including Master Key introduction can be done without IPL. However you have to set up the LPAR in advance. Those changes can be done dynamically or ...Activate will be required. In the last case IPL is a result. -- Radoslaw Skorupka Lodz, Poland W dniu 2016-10-19 o

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

On Wed, 19 Oct 2016 10:20:16 -0500, Kirk Wolf wrote: >Right. I've never seen this particular error caused by a missing CPACF >feature. >More likely either ICSF is not started or the correct userids do not have >access to the necessary ICSF features via SAF/RACF. > Ouch! But there's a widespread

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

The message you saw: Attention: You must install the 'IBM CP Assist for Cryptographic Functions' (CPACF) feature if a cryptographic candidate is selected from the list box. Otherwise, some functions of Integrated Cryptographic Service Facility (ICSF) may fail. Is really a hint or reminder r

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

If you're not creating any data encryption keys in the CKDS, then a one cylinder database is plenty of sapce. Mark Jacobs Dazzo, Matt October 19, 2016 at 11:46 AM RS, Kirk thanks. I was able to confirm from the SE that CPACF is enabled.

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Unless you have a TKE, you will have to use the ICSF panels to enter the master keys. So yes, you'll need to IPL each image to do so. Just a heads up that if you perform ICSF Master Key changes (recommended), you might have to first enter the previous set of keys, then the current set. I can el

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

RS, Kirk thanks. I was able to confirm from the SE that CPACF is enabled. I have started configuring ICSF and trying to determine the size of the CKDS. For now ICSF will be used for SSH-ftp, I am not sure if a lot of keys are dynamically created or is just the master key going to be in there

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

We are installing a z13s and going through preliminary setup. When selecting the Crypto tab in an Image profile, I was a bit alarmed by this message: Attention: You must install the 'IBM CP Assist for Cryptographic Functions' (CPACF) feature if a cryptographic candidate is selected from the list

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Thanks - I think I need to read that! One client I work with has CPACF installed with no crypto cards, but no ICSF running. They run SSH uploads hundreds or maybe thousands of times per day, and every day there are a few timeout failures (on their pretty slow z114) while initializing the SSH

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

When IBM or a business partner orders a new mainframe, CPACF is enabled by default only if the machine has Crypto cards. Otherwise, it's a no-charge feature code so it would make sense to be sure the person ordering the mainframe knows to enable it, even if you don't need it right away. R.S.

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Right. I've never seen this particular error caused by a missing CPACF feature. More likely either ICSF is not started or the correct userids do not have access to the necessary ICSF features via SAF/RACF. Kirk Wolf Dovetailed Technologies http://dovetail.com On Wed, Oct 19, 2016 at 10:13 AM, R.

Re: HMC CPC Image

If you have a new image in the IOCDS, then you have two ways to create a matching image profile. You could open up the DEFAULT image profile and basically save it under a new name, with your appropriate changes. Or, if you target the CPC (not the image) on the SE or HMC and run the Customize/D

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

W dniu 2016-10-19 o 17:05, John Eells pisze: R.S. wrote: Double click on CPC icon. Instance Information tab, bottom right corner "CP Assist for Crypto functions: Installed". Note also that CPACF is a feature, so if it's not installed (enabled), you need to order the feature to get it install

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

R.S. wrote: Double click on CPC icon. Instance Information tab, bottom right corner "CP Assist for Crypto functions: Installed". Note also that CPACF is a feature, so if it's not installed (enabled), you need to order the feature to get it installed. (Whether its enablement or lack thereof

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

W dniu 2016-10-19 o 16:19, Dazzo, Matt pisze: This is totally new world for me so bear with me. Been reading for several hours on trying to determine what I need to satisfy the support of 'OpenSSH requires that a working /dev/random device' as I got the error 'FOTS1949 PRNG is not seeded' wh

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Have you looked at our Quick Start guide for installing and tuning z/OS 2.2 OpenSSH? https://dovetail.com/docs/pt-quick-inst/index.html your question I believe is covered in section "1.6 Using ICSF and /dev/random" Kirk Wolf Dovetailed Technologies http://dovetail.com On Wed, Oct 19, 2016 at 9

Re: Looking for New Function APARs across the entire z/OS platform?

I *was* using Firefox :-( -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Farley, Peter x23353 Sent: Wednesday, October 19, 2016 10:30 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Looking for New Function APARs across the entire z/OS

Re: Randomly disappearing IGD101I messages.

In my case we have automation suppressing the messages. However, I will see them occasionally when it is preceded by an IEF196I message IEF196I IGD101I Our scheduling software reads the SMF Records as they are created. It does not require the IGD101I messages to trigger the next job whe

Re: Looking for New Function APARs across the entire z/OS platform?

Try Firefox. With IE11 it doesn't respond for me either, but Firefox gets it. Peter -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Richards, Robert B. Sent: Wednesday, October 19, 2016 9:59 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: R

Implementing ICSF - FOTS1949 PRNG is not seeded

This is totally new world for me so bear with me. Been reading for several hours on trying to determine what I need to satisfy the support of 'OpenSSH requires that a working /dev/random device' as I got the error 'FOTS1949 PRNG is not seeded' when testing SSH-FTP on my newly installed zos2.2

Re: Looking for New Function APARs across the entire z/OS platform?

Marna, This link never responds back: New function APARs for the past 12 months (HTML) Bob -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Marna WALLE Sent: Tuesday, October 18, 2016 4:52 PM To: IBM-MAIN@LISTSERV.UA.EDU Subjec

Re: [EXTERNAL] Re: IBM PMR Entry requires an OS?

For products that run on multiple platforms the product selection accounts for that - for ISPF I can select ISPF for z/OS or z/VM - I would imagine (could be wrong) that other multi-platform products have similar options (or should) -

Re: IBM PMR Entry requires an OS?

I have no idea but what about products that run on more than one OS? Maybe this is just one of those "it's an imperfect world" things? Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Dyck, Lionel B. (TRA) Sent: Wednesday, Octo

IBM PMR Entry requires an OS?

Am I missing something in the IBM Service Request (PMR) entry. The user is required to enter a product, which implies an OS, but then is forced to select an OS from a dropdown list. Shouldn't this be intuitive? If I select z/OS ISPF then the entry system should 'know' that the OS is z/OS. --

Re: Looking for New Function APARs across the entire z/OS platform?

Bill, Let me explain this in a different way, which is how you might be affected by it... You might be seeing more New Function APARs (which Ed explained, is what many know as Small Programming Enhancements, or SPEs) in the service stream across the entire z/OS platform from many IBM products t

AW: Re: Does >4K PGFIX make sure the frames are contiguous? (was: diagnose 8 / interesting dilemma)

> Data chaining was the original solution to this problem. It was probably a bad idea to mention I/O in my post (I know about data chainging and IDAW). I was thinking more about the possible need to have more than 4k of contiguous real storage. Like Tony mentioned, new interfaces such as SMC-R

Re: DSS RESTORE with SMS Managed 3584 Library - How??

On Wed, Oct 19, 2016 at 6:41 AM, Roger Lowe wrote: > Hi, >We have an SMS Managed 3584 Tape Library and would now like to use > DFDSS RESTORE on our One Pack system to restore some dasd volumes from our > weekly backup tapes as a recovery exercise. > I have managed to vary online one of the dr

Re: Randomly disappearing IGD101I messages.

I am not looking for a workaround, we already have one. I am looking for the mysterious algorithm that decided to produce or not produce IGD101I. This is what makes Control-M trigger a job. Kees. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On

Re: diagnose 8 / interesting dilemma

> What happens if AMODE 31 code issues LRA and the real address > is above the bar? Program check? yes. The ramifications of using the mod-2G part of the real address were quite obvious. The architecture reflected that understanding by making this case program check. >Or does LRA simply (alway

DSS RESTORE with SMS Managed 3584 Library - How??

Hi, We have an SMS Managed 3584 Tape Library and would now like to use DFDSS RESTORE on our One Pack system to restore some dasd volumes from our weekly backup tapes as a recovery exercise. I have managed to vary online one of the drives to our one pack system and then used the web gui on the

Re: Randomly disappearing IGD101I messages.

Vernooij, Kees (ITOPT1) - KLM wrote: >Well, the situation is becoming more and more curious: - I checked 400 runs of the job in the last year and IGD101I appears in 2/3 of the jobs and does not appear in 1/3 of the jobs, without an indication of why Ok, try this temporary workaround: In Contro

Re: ABO Automatic Binary Optimizer

Agreed apart from "the means". The original topic: "Does anyone know if this product, Automatic Binary Optimizer, will actually migrate Cobol V4 to V6 for you? Our IBM reps are telling us that it will actually do the migration for you." 100 different people contacting the "ABO Team" is also an

Re: Randomly disappearing IGD101I messages.

Bob, Well, the situation is becoming more and more curious: - I checked 400 runs of the job in the last year and IGD101I appears in 2/3 of the jobs and does not appear in 1/3 of the jobs, without an indication of why. - We changed the copy step to FDR (PGM=FDRCOPY, statement: COPY TYPE=DSF) and

Re: Shopz issues?

Duly noted. I was just surprised by the sudden failure of RFC4217. Especially since I had just returned from a CS Security class! Bob -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Kurt Quackenbush Sent: Tuesday, October 18, 2016 6: