Mark,
Until this thread, I didn't realize that anyone used ADCD for production
systems. I know
developers / small ISVs used it. I know an ISV's system is production to
then, but
that's not what I am referring to.
For small ISVs it is prohibitively expensive to have their own z/OS.
Scott,
The IP configuration changes and RACF changes to meet operational
environments were the obvious ones to me. Agreed, I would go that route
unless you could find a complete inventory of all the load modules that
shipped with ADCD..see if the module in error shipped worth 1.13
Barbara,
This is in regards to your statement Asking about it here (and eventually
finding where DFSMRCL0 is located) helped me when I had to get RDz running.
Which insisted on a program-controlled environment despite BPX.DAEMON not being
defined. According to the books and your explanation,
Answer to my own query:
Jim Mulder pointed out that the module name had indeed been in Barbara's
initial post; sorry.
DFSMRCL0 which, prior to IMS V9, had to be zapped into IEAVTRML but, as of
IMS V9, should not be.
Peter Relson
z/OS Core Technology Design
RDz.Which insisted on a program-controlled
environment despite BPX.DAEMON not being defined. According to the books
and your explanation, the need for a program-controlled environment
should not have been there. This was true for ftp, but not for RDz.
BPX.DAEMON is for processes changing the
On Mon, 31 Dec 2012 18:14:42 -0500, Scott Ford scott_j_f...@yahoo.com wrote:
Mark,
If Barbara is using RDz, that's more/less a development/test system. For us we
use ADCD for development only because we are a vendor. But we don't use RDz.
Again, Barabara has to answer, but she mentioned a
Mark,
I agree...it's her system . Your comment was for her or who ? It was hard to
tell..
Scott ford
www.identityforge.com
Tell me and I'll forget; show me and I may remember; involve me and I'll
understand. - Chinese Proverb
On Jan 1, 2013, at 9:32 AM, Mark Zelden m...@mzelden.com wrote:
On Tue, 1 Jan 2013 10:48:08 -0500, Scott Ford scott_j_f...@yahoo.com wrote:
Mark,
I agree...it's her system . Your comment was for her or who ? It was hard to
tell..
My comment / statement about not realizing anyone used ADCD systems for
production
systems was based on her statements in this
Mark,
I haven't seen it in production either. But it doesn't surprise nowdays. I
though it odd an inappropriate user mod was in a distribution, haven't seen
that one before. Wasn't trying to give you a hard time..
Scott ford
www.identityforge.com
Tell me and I'll forget; show me and I may
We're talking about an end of task/AS resource manager module. I would have
expected this module to be placed in LPA not LinkLib. After all, it is loaded
for each terminating task.
The ADCD developers in their infinite wisdom decided to put an obsolete usermod
into ADCD.*.linklib.
Without
Barbara,
I use ADCD all time we had 1.10 up through 1.13 on z/Pdt. Ours wasn't
customized per se,we did it ourselves, actually I had to do it. Did you system
come pre-configured ? It sounds like it did.
Sorry your having such problems.
Scott ford
www.identityforge.com
Tell me and I'll
I use ADCD all time we had 1.10 up through 1.13 on z/Pdt. Ours wasn't
customized per se,we did it ourselves, actually I had to do it. Did you
system come pre-configured ? It sounds like it did.
As far as I can tell, the 1.13 system was not changed other than for IP setup.
Any customization
Barbara,
The IP configuration changes and RACF changes to meet operational environments
were the obvious ones to me. Agreed, I would go that route unless you could
find a complete inventory of all the load modules that shipped with ADCD..see
if the module in error shipped worth 1.13 ...compare
On Mon, 31 Dec 2012 19:14:44 +0100, ibmmain nitz-...@gmx.net wrote:
I use ADCD all time we had 1.10 up through 1.13 on z/Pdt. Ours wasn't
customized per se,we did it ourselves, actually I had to do it.
Until this thread, I didn't realize that anyone used ADCD for production
systems. I
Mark,
If Barbara is using RDz, that's more/less a development/test system. For us we
use ADCD for development only because we are a vendor. But we don't use RDz.
Scott ford
www.identityforge.com
Tell me and I'll forget; show me and I may remember; involve me and I'll
understand. - Chinese
Thanks for that list. Problem is, BPX.DAEMON was defined with UACC(READ) and
some userids had ALTER, so explicit READ access doesn't do much. Or does it?
I just stumbled over this one when reading the whole thread once more trying to
find answers for Barbara.
The profile should be defined with
Barbara will have to answer, but I suspect this was the only
difference and the root cause. She didn't realize that module
was in the LPA and even if her previous system was
ADCD it either wasn't included or was removed from
the default system.
No, it wasn't. In the old system that usermod
Thanks Peter. My suspicion is that it has something to do with one of
-AUTOUID/AUTOGID being activated
-BPX.SHARED getting defined
-UNIXPRIV being activated (otherwise AUTOUID wouldn't work, with me
having alter to SUPERUSER.** and the rest of the world just read to
SUPERUSER.FILESYS).
I assume
On Thu, 27 Dec 2012 15:47:52 +0100, Hunkeler Peter (KIUP 4)
peter.hunke...@credit-suisse.com wrote:
In what respect did it behave differently (except form the DFSMRCL0
problem you described)?
Barbara will have to answer, but I suspect this was the only
difference and the root cause. She
Neither FTP, nor HTTPD (IMWEBSRV), nor LDAP, nor all other STC's need it.
I'm not the RACF admin, but I'm sure some of those permissions in the list
I provided came from vendor documentation.
I know that, unfortunately, many products document they need BPX.DAEMON despite
the fact they
- Neither FTP, nor HTTPD (IMWEBSRV), nor LDAP, nor all other STC's
need it.
I beg to differ. FTP most certainly did not run until I had deleted the
bpx.daemon profile from facility. The reason was the unclean environment
(pads)
I didn't doubt what you wrote. I just didn't understand why it
On Fri, 21 Dec 2012 18:04:21 +0100, Hunkeler Peter (KIUP 4)
peter.hunke...@credit-suisse.com wrote:
sigh I am having the same problem replying to your posts via the web
interface
that I have with R.S. and several others. That is why I quoted very little
text in
my last response. sigh
I
I didn't doubt what you wrote. I just didn't understand why it happened
the way you told us because I know FTPD does not need BPX.DAEMON access.
I'm still trying to find a plausible answer, I'm not in the lab (nor
with IBM anymore), so I don't have access to internals.
Thanks Peter. My
Besides fixing up pads, here are some of the permissions on my system
to BPX.DAEMON I see that should apply to your system when you try to add
it back, there are others here that wouldn't apply to a generic system.
USER ACCESS
--
FTP READ
IMWEBSRV READ
OMVSKERN
On Thu, 20 Dec 2012 17:27:31 +0100, Hunkeler Peter (KIUP 4)
peter.hunke...@credit-suisse.com wrote:
There really are only a few processes that need READ access to BPX.DAEMON:
- cron
- rlogind
- rshd
- uucpd
Neither FTP, nor HTTPD (IMWEBSRV), nor LDAP, nor all other STC's need it.
I'm
- Neither FTP, nor HTTPD (IMWEBSRV), nor LDAP, nor all other STC's need it.
I beg to differ. FTP most certainly did not run until I had deleted the
bpx.daemon profile from facility. The reason was the unclean environment (pads)
In my case, OMVS is running under OMVSUS1, which is trusted with
Sorry, I assumed you knew how to use it and didn't give the details.
I assumed the same :-(
No. I guess security isn't much of a concern for ADCD. I wouldn't have
expected UACC(READ). No clue why alter would be given to some
userids, AFAIK READ is good enough and there are no higher
On Fri, 14 Dec 2012 11:52:58 +0100, nitz-...@gmx.net nitz-...@gmx.net wrote:
No. I guess security isn't much of a concern for ADCD. I wouldn't have
expected UACC(READ). No clue why alter would be given to some
userids, AFAIK READ is good enough and there are no higher
authorities granted
On 12/13/2012 11:51 PM, nitz-...@gmx.net wrote:
Yes, in the meantime I found the module. And I still wonder why ftp works with
the old definitions when there is quite obviously a missing definition in
*/PROGRAM.
Just a guess, but could it be because the environment stays clean until
Ah, you don't refresh the PROGRAM class by doing a refresh of the PROGRAM
class. You do it with
SETROPTS WHEN(PROGRAM) REFRESH
I did. That is what I meant when I said I refreshed 'PROGRAM'.
What? You wanted consistency?
yes. How strange of me. Mostly, I want to understand what I did wrong so
As has been mentioned, this module should not be in IEAVTRML. In fact
*nothing* should be in IEAVTRML. This has been true for quite a while.
I know Barbara does not like the IBM HC for z/OS, but it has a check
specifically to point out things that are in IEAVTRML since it should be
empty.
We
On Thu, 13 Dec 2012 13:13:18 +0100, nitz-...@gmx.net nitz-...@gmx.net wrote:
ISRDDN didn't find it, neither in LPA nor in linklist when I tried it
yesterday. I must be too stupid to use isrddn, though. I went through all LPA
and linklist libraries manually today and eventually found where they
As has been mentioned, this module should not be in IEAVTRML. In fact
*nothing* should be in IEAVTRML. This has been true for quite a while.
I know Barbara does not like the IBM HC for z/OS, but it has a check
specifically to point out things that are in IEAVTRML since it should be
empty.
I managed to break it. :-(
Whenever someone tries to ftp into our 1.13 adcd system, we get (after typing
in the password):
ICH422I THE ENVIRONMENT CANNOT BECOME UNCONTROLLED.
BPXP014I ENVIRONMENT MUST REMAIN CONTROLLED FOR DAEMON (BPX.DAEMON)
PROCESSING.
Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] Im Auftrag
von ibmmain
Gesendet: Mittwoch, 12. Dezember 2012 12:01
An: IBM-MAIN@LISTSERV.UA.EDU
Betreff: I broke it - programcontrolled programs
I managed to break it. :-(
Whenever someone tries to ftp into our 1.13 adcd system, we get (after typing
And now I have managed to make it work again: I deleted the BPX.DAEMON profile,
which makes the need for a program controlled environment go away. I think. Did
I mention that I hate USS?
Now, if anyone has any insight what I missed defining while still having the
bpx.daemon profile - I would
]
On Behalf Of ibmmain
Sent: Wednesday, December 12, 2012 5:01 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: I broke it - programcontrolled programs
I managed to break it. :-(
Whenever someone tries to ftp into our 1.13 adcd system, we get (after
typing in the password):
ICH422I THE ENVIRONMENT
What is the DSN containing DFSMRCL0?
IMS1110.SDFSRESL or something.
RALTER PROGRAM * ADDMEM('ims-loadlib'//NOPADCHK)
I did. I also refreshed PROGRAM. Same error. Besides, that IMS library is not
anywhere in LPA or linklist. As far as I can see, the usermod that puts it into
ieavtrml does not
Of ibmmain
Sent: Wednesday, December 12, 2012 4:01 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: I broke it - programcontrolled programs
I managed to break it. :-(
Whenever someone tries to ftp into our 1.13 adcd system, we get (after
typing in the
password):
ICH422I THE ENVIRONMENT CANNOT BECOME
Company.SM
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
On Behalf Of nitz-...@gmx.net
Sent: Wednesday, December 12, 2012 8:26 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: I broke it - programcontrolled programs
What is the DSN containing
On Wed, 12 Dec 2012 15:26:08 +0100, nitz-...@gmx.net nitz-...@gmx.net wrote:
What is the DSN containing DFSMRCL0?
IMS1110.SDFSRESL or something.
RALTER PROGRAM * ADDMEM('ims-loadlib'//NOPADCHK)
I did. I also refreshed PROGRAM. Same error. Besides, that IMS library is not
anywhere in LPA or
Lizette,
What version of IMS are you running? AFAIK DFSMRCL0 is not used by IMS
Version 9 or later.
Well, then someone should have told that to the people who deliver the ADCD
system. We are NOT running any IMS version, and that module name most probably
comes from IEAVTRML, that the ADCD
Lizette is correct. The module affectionately known as Mr. Clean, is no longer
needed after V9.
MA
http://publib.boulder.ibm.com/infocenter/eiic/v1r1/index.jsp?topic=%2Fcom.ibm.ims9.doc.iiv%2Fip0i13901003254.htm
Uninstalling DFSMRCL0
When you have completely migrated to IMS™ Version 9 or
On Wed, 12 Dec 2012 13:41:19 -0600, Mary Anne Matyaz maryanne4...@gmail.com
wrote:
Lizette is correct. The module affectionately known as Mr. Clean, is no longer
needed after V9.
(nit pick at V9, not after V9 or after migration to V9)
MA
44 matches
Mail list logo
