Re: OpenSSH upgrade option

2019-04-12 Thread Andrew Rowley
On 12/04/2019 5:35 pm, Timothy Sipples wrote: Paul Jodlowski wrote: Currently OpenSSH is at 6.4p1, I have been asked by our Network Security Team to upgrade to OpenSSH 7.4. That's an "amusing" recommendation from your Network Security Team. Unless security patches have been backported and appli

Re: DASD-only logging

2019-04-12 Thread Tom Russell
A Coupling Facility Logical Partition can run on shared CPs. It does not require an ICF engine. Normally I would not recommend the use of a CP, but if you are careful not to use the CF a lot, and use DYNDISP=thin, it can be quite useful. If all the connectors to the CF are in the same CEC, the

SMF Log Blocks

2019-04-12 Thread Stan Weyman
Does anyone have any experience with SMF LOG blocks returned from the IXGBRWSE READCURSOR service. The doc says it returns a block of SMF records . All return codes are good after the IXGCONN and IXGBRWSE START but the returned area does not seem to be SMF data. Am doing a sing

Re: OpenSSH upgrade option

2019-04-12 Thread Kirk Wolf
Right. I was the first to mention "security patches" in this thread, and I was referring to source patches made upstream to he code to fix bugs, CVEs, etc. Also - just because IBM ports a base version (6.4, 7.6), it doesn't mean that they didn't (or won't later) backport bug fixes (security or ot

testing connectivity for send

2019-04-12 Thread Stan Weyman
All apologies. Thanks -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: OpenSSH upgrade option

2019-04-12 Thread Seymour J Metz
> Read Timothy Sipples's ply. That talks about IBM receiving patches, not distributing them. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Paul Gilmartin <000433f07816-dmarc-requ...@listse

Re: Dumps and cancelling jobs

2019-04-12 Thread Frank Swarbrick
I should clarify. If I include a SYSABEND or SYSUDUMP DD in the JCL (which we generally do not do), if I cancel with dump I will get a standard z/OS dump. But the fault analysis tool is still not invoked. From: IBM Mainframe Discussion List on behalf of Frank

Re: OpenSSH upgrade option

2019-04-12 Thread Paul Gilmartin
On Fri, 12 Apr 2019 16:54:08 +, Seymour J Metz wrote: >Who says IBM patches? > Read Timothy Sipples's ply. >How could EBCDIC conceivably be relevant? > The ssh command performs ASCII<->EBCDIC conversion (for pedants, 1047<->819). I'd expect that to be IBM-specific. Probably not relevant t

Re: Dumps and cancelling jobs

2019-04-12 Thread Frank Swarbrick
This didn't help. I see no indication that Fault Analyzer was invoked at all. Usually when its invoked, even if the dump is suppressed, FA will write an informational message to the console. This is not happening in this case. Thanks, Frank From: IBM Mainfram

Re: Lousy error from HLASM in USS

2019-04-12 Thread Paul Gilmartin
On Fri, 12 Apr 2019 09:23:40 -0400, Steve Smith wrote: >I think the grumpiness and sarcasm might be a bit over the top. The error >does have roots going back to the middle ages, > IBM should operate a booth at Renaissance Faire. Or Comic Con. > ... that when combined with >modern functionality

Re: OpenSSH upgrade option

2019-04-12 Thread Seymour J Metz
Who says IBM patches? How could EBCDIC conceivably be relevant? -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 From: IBM Mainframe Discussion List on behalf of Paul Gilmartin <000433f07816-dmarc-requ...@listserv.ua.edu> Sent: Thursday, Ap

Re: Dumps and cancelling jobs

2019-04-12 Thread Charles Mills
Abend-AID has some global configuration options, right? I don't know the product, but I recall seeing "no dump due to installation options" or something like that. (Not to disagree with @Chris who is of course correct.) Charles -Original Message- From: IBM Mainframe Discussion List [mai

Re: OpenSSH upgrade option

2019-04-12 Thread Paul Jodlowski
Gil: I have not found any APARs/PTFs for z/OS. I will probably just stop the OpenSSH services (as I started for a proof of concept with CyberArk) Thanks all for your suggestions -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Pau

Re: OpenSSH upgrade option

2019-04-12 Thread Seymour J Metz
WTF? A z/OS PTF *can* include a patch, but it is normally a total replacement. And it most certainly is a vendor decision how to install upgrades. That said, IBM normally provides ++ APAR as a temporary expedient, and then provides a PTF with the appropriate SUP keyword. An RSU will have the PTF

Re: OpenSSH upgrade option

2019-04-12 Thread Paul Gilmartin
On Fri, 12 Apr 2019 15:35:55 +0800, Timothy Sipples wrote: >Paul Jodlowski wrote: >>Currently OpenSSH is at 6.4p1, I have been asked by our >>Network Security Team to upgrade to OpenSSH 7.4. > >That's an "amusing" recommendation from your Network Security Team. Unless >security patches have been

Re: Dumps and cancelling jobs

2019-04-12 Thread Christopher Y. Blaicher
You probably will get what you want with C jobname,DUMP console command, or CD in a SDSF screen. Chris Blaicher Technical Architect Syncsort, Inc. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Frank Swarbrick Sent: Friday, April 1

Dumps and cancelling jobs

2019-04-12 Thread Frank Swarbrick
The discussion about non-recoverable abends and cancelling jobs brings to mind an "issue" I've had since we migrated from z/VSE to z/OS in 2010. If I recall correctly, if a job was cancelled in z/VSE the "dump analysis" product (Abend-Aid, IBM Fault Analyzer, et al) would still get control and

Re: Fwd: Incoming | Computerworld SHARK TANK

2019-04-12 Thread Paul Gilmartin
On Fri, 12 Apr 2019 08:35:39 -0400, Mark Regan wrote: >https://www.computerworld.com/article/3388298/incoming.html > Somehow similar, a GPS rollover glitch took down (some) NYC wireless communications last week: https://www.nytimes.com/2019/04/10/nyregion/nyc-gps-wireless.html ... happens ev

Re: Incoming | Computerworld SHARK TANK

2019-04-12 Thread Elardus Engelbrecht
ITschak Mugzach wrote: >... investigation showed that the the people who cleans the computer room >unplugged the power for the vacuum cleaner... The array was using a standard >power plug. Hahaha! I heard a similar, but false story. ( https://www.snopes.com/fact-check/polished-off/ ) Apparent

Re: Lousy error from HLASM in USS

2019-04-12 Thread Steve Smith
I think the grumpiness and sarcasm might be a bit over the top. The error does have roots going back to the middle ages, that when combined with modern functionality, causes some odd results. Anyway it's something that doesn't happen very often. If IBM thinks it's worthwhile, they'll improve it.

Re: Incoming | Computerworld SHARK TANK

2019-04-12 Thread ITschak Mugzach
That reminds me another story. ten years ago a client of us installed a new hitachi disk array. The technician installed and configured the array, but for some reasons, it was not immediately used by the client. few days later, the client tried to connect to the array and it was down. it was repeat

Re: OpenSSH upgrade option

2019-04-12 Thread Allan Staller
Paul Gilmartin wote: " Would IBM do better to apply IBM patches to the newest distribution rather than trying to upgrade an outdated version with APARs? There's yet no assurance that IBM's patching won't regress a needed security patch Is EBCDIC a culprit?" This has nothing to do w/EBCDIC.

Fwd: Incoming | Computerworld SHARK TANK

2019-04-12 Thread Mark Regan
https://www.computerworld.com/article/3388298/incoming.html Regards, Mark T. Regan, K8MTR CTO1 USNR-Retired, 1969-1991 Nationwide Insurance, Retired, 1986-2017 -- For IBM-MAIN subscribe / signoff / archive access instru

Re: OpenSSH upgrade option

2019-04-12 Thread Elardus Engelbrecht
Paul Jodlowski wrote: >>Currently OpenSSH is at 6.4p1, I have been asked by our Network Security Team >>to upgrade to OpenSSH 7.4. z/OS OpenSSH at 6.4p1 is a fully supported by IBM. Your Network Security Team is asking you to 'upgrade', but actually they want to have you to upgrade to an unsupp

Re: OpenSSH upgrade option

2019-04-12 Thread Timothy Sipples
Paul Jodlowski wrote: >Currently OpenSSH is at 6.4p1, I have been asked by our >Network Security Team to upgrade to OpenSSH 7.4. That's an "amusing" recommendation from your Network Security Team. Unless security patches have been backported and applied to a particular distribution of OpenSSH, Ope