Re: Weird problem hoping to be saved by SMP/E

ODS could be RESTORed. In this area, VMSES/E has greater function than SMP/E. But it can't recover objects that have truly been deleted. -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email

Re: Weird problem hoping to be saved by SMP/E

-Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Rob Schramm Sent: Wednesday, November 02, 2016 6:42 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: (External):Re: Weird problem hoping to be saved by SMP/E Kurt, Is this really as simple

Re: Weird problem hoping to be saved by SMP/E

Kurt, Is this really as simple as LINK LMODS(module1) CHECK. And it will just relink the load module? Rob Schramm On Wed, Nov 2, 2016 at 9:24 AM Tom Marchant < 000a2a8c2020-dmarc-requ...@listserv.ua.edu> wrote: > On Wed, 2 Nov 2016 05:06:44 +, Rob Schramm wrote: > > >What if I make

Re: Weird problem hoping to be saved by SMP/E

/E > I am looking for ideas on how to get back to the correct versions of > the modules. Check out the SMP/E LINK LMODS command. Assuming you know exactly which load modules you want to rebuild, just specify them by name on the LINK LMODS command and SMP/E will figure out where to g

Re: Weird problem hoping to be saved by SMP/E

On Wed, 2 Nov 2016 05:06:44 +, Rob Schramm wrote: >What if I make a fake USERMOD and then RESTORE it off. I like this idea. A USERMOD to ZAP the affected modules, then RESTORE the USERMOD. RESTORE processing will get the modules from the Distribution zone. Do it on a clone of your target

Re: Weird problem hoping to be saved by SMP/E

I am looking for ideas on how to get back to the correct versions of the modules. Check out the SMP/E LINK LMODS command. Assuming you know exactly which load modules you want to rebuild, just specify them by name on the LINK LMODS command and SMP/E will figure out where to get all

Re: Weird problem hoping to be saved by SMP/E

on an analysis of the target zone. One job is created for each target library. This reduces the number of utility calls for each data set and improves SMP/E performance by allowing the various utilities to run concurrently. Zones for SET BOUNDARY For the GENERATE command, the SET BOUNDARY command must specify

Re: Weird problem hoping to be saved by SMP/E

of the affected modules). Note UMID and RMIDs. If the RMID's and UID's match, then the change was done outside of SMP/E. It they do not match, the change was done within SMP/E and either the RMID or UMID can be restored (It *WILL NOT BE* HDZ1D10). Accept all relevant maintenance *EXCEPT

Re: Weird problem hoping to be saved by SMP/E

SMP/E to the rescue! It goes without saying that you should not be doing this on the active system, and that you should take a backup first, but I'll say it anyway. Back up target libraries and zone, DLIBs and DLIB zone. (DFSMSdss or your favorite alternative is the sysprog's best friend

Re: Weird problem hoping to be saved by SMP/E

Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Gibney, Dave Sent: Wednesday, November 02, 2016 12:26 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: (External):Re: Weird problem hoping to be saved by SMP/E Is the Serverpac still available? Do another install and run it up to the level

Re: Weird problem hoping to be saved by SMP/E

PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Weird problem hoping to be saved by SMP/E > > Dear Listers, > > I am attempting to recover or get back to the proper version of a couple > LPALIB modules. In this case some sysprog decided to copy altered versions > of a couple

Re: Weird problem hoping to be saved by SMP/E

What if I make a fake USERMOD and then RESTORE it off. My understanding is that once a sysmod is ACCEPTed, then I should always be able to undo any change back to the point of the last ACCEPT. Thoughts? Rob Schramm On Wed, Nov 2, 2016 at 12:48 AM Paul Gilmartin <

Re: Weird problem hoping to be saved by SMP/E

On 2016-11-01 22:08, Rob Schramm wrote: > > ... I have not been able to find > a backup of the modules. > Ouch! > fails because HDZ1D10 was ACCEPTed. > I didn't think that was a concern unless you did ACCEPT PURGE. > A RESTORE fails for > > GIM24501E RESTORE PROCESSING FAILED FOR SYSMOD

Weird problem hoping to be saved by SMP/E

is in SMP/E to hopefully save the day. At first I was hoping for something like an APPLY REDO to recover the modules. . APPLY SELECT( HDZ1D10 ) CHECK BYPASS(HOLDSYSTEM) RETRY(YES) fails because HDZ1D10 was ACCEPTed. A RESTORE fails for GIM24501E RESTORE

Re: SMP/E and RFPREFIX

rds, for the 99.9%, I think the existing output data set names will be fine; for the others, they'll have the SMP/E expertise to figure it out on their own! Cheers, ...phsiii -- For IBM-MAIN subscribe / signoff / archive access instru

Re: SMP/E and RFPREFIX

Paul Gilmartin wrote: >Why not? Is it because the substitutions must be made both in >JCL statements and in SYSIN lines? Would SYSIN SYMBOLS= be an >answer? (But can you rely on all users having a suitably recent >z/OS?) Right, no, I can't. >Or supply an Edit macro or a Tailoring script to

Re: SMP/E and RFPREFIX

. They are separate and do not interact. RECEIVE reads relative file from RFPREFIX.RFDSNPFX.FMID.Fn and places it in DSPREFIX.FMID.Fn. Correct. Kurt Quackenbush -- IBM, SMP/E Development -- For IBM-MAIN subscribe / signoff / archive

Re: SMP/E and RFPREFIX

W dniu 2016-10-26 o 15:25, Kurt Quackenbush pisze: On 10/25/2016 7:08 PM, Phil Smith wrote: So if the SMPMCS contains: ++FUNCTION(VVSH710) FILES(2) RFDSNPFX(VSH) REWORK(2016166) Then if RFPREFIX(BANANA) were added to the RECEIVE command in the provided JCL, it would look for

Re: SMP/E and RFPREFIX

of VSH.VVSH710.F1 and VSH.VVSH710.F2 1) Is this correct? Yes that is correct. Kurt Quackenbush -- IBM, SMP/E Development -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu

Re: SMP/E and RFPREFIX

On Tue, 25 Oct 2016 16:08:25 -0700, Phil Smith wrote: > >2) Is there a cleaner way to specify this than just adding >RFPREFIX(whatever) when needed? I had hoped to be able to provide, say, >RFPREFIX() and then use a set symbol, but I know that won't work. > Why not? Is it because the

SMP/E and RFPREFIX

OK, I feel stupid. Not an unfamiliar feeling, especially when SMP/E is involved. But I think I mostly figured this out, and am looking for confirmation. I have a package that installs fine, but recently someone said "You should support using RFPREFIX in your provided JCL". This wa

Re: ISVs, SMP/E, ... (was: Installation Improvements ...)

This is my main difficulty with CA-MSM. It is great for doing the download from CA and the SMP/E tp the point of install and tailoring. But, then, you need to do it CA's way, not our way. I concede that our way may not be the best way, but we have a lot invested in some parts of it. My other

Re: ISVs, SMP/E, ... (was: Installation Improvements ...)

On Tue, 4 Oct 2016 09:15:33 -0700, Charles Mills wrote: > >- we have no one who is a drop-dead SMP/E packaging design expert. >- when we go to people who are SMP/E packaging experts they say "your IEBCOPY >install is a work of art! It is so simple! Why would you want to change? S

Re: ISVs, SMP/E, ... (was: Installation Improvements ...)

I of course do not speak for any software vendor -- not even really the one I work for, much less IBM -- but my impression is that SMP/E will remain the main vehicle for much IBM and big software vendor software. Note what John says: "SMP/E agnostic," NOT "replaces SMP/E."

ISVs, SMP/E, ... (was: Installation Improvements ...)

On Tue, 4 Oct 2016 09:08:33 -0400, John Eells wrote: > >*Whoa*! Don't panic. This DOES NOT signal that IBM will move everything >out of SMP/E management. There are no plans to change the packaging for >products that really need SMP/E or something just like it. But, Software >

Re: SMP/E Receive FROMNETWORK

Finally got it to work with the help from my TCP/IP group. Thanks to all. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Kurt Quackenbush Sent: Thursday, September 15, 2016 9:03 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMP/E

Re: SMP/E Receive FROMNETWORK

On 9/14/2016 4:08 PM, Lopez, Sharon wrote: We are trying to SMP/E RECEIVE FROMNETWORK and we are getting the message that SSL is mandatory. Does anyone have any sample JCL they would like to share? Did the entire process change? Read this, and it should answer your questions: http

Re: SMP/E Receive FROMNETWORK

On Wed, 14 Sep 2016 14:49:44 -0700, Lizette Koehler wrote: > >Also HTTPS is much easier than FTPS > Particularly in that firewalls tend to be friendlier to HTTPS. It's cultural. If they block FTPS, a few impacted IT personnel would be voices crying in the wilderness. If they block HTTPS, the

Re: SMP/E Receive FROMNETWORK

M-MAIN@LISTSERV.UA.EDU] On > Behalf Of Lopez, Sharon > Sent: Wednesday, September 14, 2016 1:09 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: SMP/E Receive FROMNETWORK > > We are trying to SMP/E RECEIVE FROMNETWORK and we are getting the message that > SSL is mandatory. Does

Re: SMP/E Receive FROMNETWORK

Subject: Re: SMP/E Receive FROMNETWORK Have you setup ftps or https for SMP/E downloads? > Lopez, Sharon <mailto:sharon.lo...@nc.gov> September 14, 2016 at 4:08 > PM We are trying to SMP/E RECEIVE FROMNETWORK and we are getting the > message that SSL is mandatory. Does anyone have

Re: SMP/E Receive FROMNETWORK

Have you setup ftps or https for SMP/E downloads? Lopez, Sharon <mailto:sharon.lo...@nc.gov> September 14, 2016 at 4:08 PM We are trying to SMP/E RECEIVE FROMNETWORK and we are getting the message that SSL is mandatory. Does anyone have any sample JCL they would like to share? Did the

SMP/E Receive FROMNETWORK

We are trying to SMP/E RECEIVE FROMNETWORK and we are getting the message that SSL is mandatory. Does anyone have any sample JCL they would like to share? Did the entire process change? Thanks in advance. Email correspondence to and from this address may

Re: SMP/E: SMPWRKn and GLOBAL zone

In general, we add a DDDEF for SMPPARM to every SMP/E ZONE we utilize. That DDDEF points to a data set with our customized GIMDDALC member. Then we don't have to worry about SYSUTn, SMPWRKn, SMPTLIB, or any of the DDNAMEs that are used for SYSOUT(*). That way, if one of those DDDEFs

Re: SMP/E: SMPWRKn and GLOBAL zone

SMPJHOME can also be used " To support the HTTPS communications with the IBM Automated Delivery Request server..." ( from SMP/e User's Guide). Al Nims Systems Admin/Programmer 3 UFIT University of Florida (352) 273-1298 -Original Message- From: IBM Mainframe Discussion List [

Re: SMP/E: SMPWRKn and GLOBAL zone

in the global zone will never be referenced, at all, which means SMPWRKn data sets will never be allocated for operations against the global zone. Kurt Quackenbush -- IBM, SMP/E Development -- For IBM-MAIN subscribe / signoff

Re: SMP/E: SMPWRKn and GLOBAL zone

On 8/18/2016 10:57 AM, R.S. wrote: It's worse, when you *sometimes* need a dataset which has no entry. This is the case for SMPJHOME. According to documentation it is used during ACCEPT, but mentioned neither in sample nor in "ServerPac-delivered" CSI. From the SMP/E Commands book,

Re: SMP/E: SMPWRKn and GLOBAL zone

W dniu 2016-08-18 o 19:14, Paul Gilmartin pisze: On 2016-08-18, at 08:57, R.S. wrote: It's worse, when you *sometimes* need a dataset which has no entry. This is the case for SMPJHOME. According to documentation it is used during ACCEPT, but mentioned neither in sample nor in

Re: SMP/E: SMPWRKn and GLOBAL zone

On 2016-08-18, at 08:57, R.S. wrote: > It's worse, when you *sometimes* need a dataset which has no entry. > This is the case for SMPJHOME. According to documentation it is used during > ACCEPT, but mentioned neither in sample nor in "ServerPac-delivered" CSI. > That may depend on whether: o

Re: SMP/E: SMPWRKn and GLOBAL zone

ting lines! :-) Bob -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Kurt Quackenbush Sent: Thursday, August 18, 2016 9:11 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMP/E: SMPWRKn and GLOBAL zone On 8/18/2016 6:59 AM, R.S. wrote: W

Re: SMP/E: SMPWRKn and GLOBAL zone

@LISTSERV.UA.EDU Subject: Re: SMP/E: SMPWRKn and GLOBAL zone On 8/18/2016 6:59 AM, R.S. wrote: > W dniu 2016-08-18 o 12:45, Richards, Robert B. pisze: >> Also, a review of the manuals states that they are only used during >> APPLY and ACCEPT processing. :-) > I also noticed it (yes I di

Re: SMP/E: SMPWRKn and GLOBAL zone

. Well, that is a little embarrassing. The GIMSAMPU sample is incorrect, and SMPWRKn data sets are not used in the global zone. Of course, the presence of DDDEF entries for SMPWRKn in the global zone causes no harm, but they will never be used. Kurt Quackenbush -- IBM, SMP/E Development

Re: SMP/E: SMPWRKn and GLOBAL zone

Perhaps Kurt Q. will chime in as the authoritative source? :-) -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of R.S. Sent: Thursday, August 18, 2016 6:59 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMP/E: SMPWRKn and GLOBAL zone W

Re: SMP/E: SMPWRKn and GLOBAL zone

W dniu 2016-08-18 o 12:45, Richards, Robert B. pisze: Also, a review of the manuals states that they are only used during APPLY and ACCEPT processing. :-) I also noticed it (yes I did RTFM). However SYS1.SAMPLIB(GIMSAMPU) create SMPWRKn entries in GLOBAL. I have also some GLOBAL zone with the

Re: SMP/E: SMPWRKn and GLOBAL zone

@LISTSERV.UA.EDU Subject: Re: SMP/E: SMPWRKn and GLOBAL zone I haven't for several z/OS releases (1.12, 2,1 and 2.2) that I could peruse the global DDDEFs entries. I don't remember ever having them there. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU

Re: SMP/E: SMPWRKn and GLOBAL zone

AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: SMP/E: SMPWRKn and GLOBAL zone SMP/E question: Should I define DDDEF entries for SMPWRKn (1,2,3,4,6) in GLOBAL zone? (I'm aware unnecessary definition doesn't hurt, but...) -- Radoslaw Skorupka Lodz, Poland --- Treść tej wiadomości może zawierać

SMP/E: SMPWRKn and GLOBAL zone

SMP/E question: Should I define DDDEF entries for SMPWRKn (1,2,3,4,6) in GLOBAL zone? (I'm aware unnecessary definition doesn't hurt, but...) -- Radoslaw Skorupka Lodz, Poland --- Treść tej wiadomości może zawierać informacje prawnie chronione Banku przeznaczone wyłącznie do użytku

Re: SMP/E query resolver?

On Mon, 1 Aug 2016 22:14:42 -0500, Paul Gilmartin wrote: >IR46970 That's pretty old. PTF released in 2001, with a correcting PTF in 2002. -- Tom Marchant -- For IBM-MAIN subscribe / signoff / archive access instructions, send

Re: SMP/E query resolver?

>Are you confusing an APAR fix ( a ++APAR) with a PTF >that fixes an APAR? Quite possibly. I was likely thinking "PTF" even though the word "APAR" was used. You're right: we don't (as far as I recall seeing) PRE an APAR fix. Peter Relson z/OS Core Technology Design

Re: SMP/E query resolver?

On Mon, 1 Aug 2016 21:03:50 -0500, Tom Marchant wrote: >... >Agreed. If an APAR fix needed a second APAR fix to correct the problem, >the second can PRE or SUP the first. > ... Provided that the conditions in IR46970 are met. -- gil

Re: SMP/E query resolver?

On Mon, 1 Aug 2016 17:20:23 -0400, Peter Relson wrote: >The supersede that you see in a PTF for the "A" has a >largely historical basis. Perhaps, but it is also necessary in the case of a PTF that resolves an Error Hold. The ++HOLD specifies REASON(Axx) and if the PTF with the error is a

Re: SMP/E query resolver?

atment of a SUP. Turned out to be user (me) error. IBM support patiently (exasperatedly?) explained that I would do better never to SUP but always PRE and let SMP/E decide what to do. My chief objection was that would often require customers' fetching needless PTFs. With bandwidth nowadays it hardly matt

Re: SMP/E query resolver?

>>When an APAR fix is created for the APAR problem description, it starts with "A". If a >>second APAR fix is created, perhaps for another release, it starts with "B". A third >>APAR fix would start with "C", and so on. I don't have one to look at, but I'm pretty >>sure that the "B", "C",

Re: SMP/E query resolver?

On Sat, 30 Jul 2016 15:32:41 -0500, Paul Gilmartin wrote: >On Fri, 29 Jul 2016 23:28:27 -0500, Tom Marchant wrote: >> >>When an APAR fix is created for the APAR problem description, it starts with >>"A". If a >>second APAR fix is created, perhaps for another release, it starts with "B". >>A

Re: SMP/E query resolver?

On Fri, 29 Jul 2016 23:28:27 -0500, Tom Marchant wrote: > >IIRC, IBM's convention is for the APAR number, such as you might look up using >the >SIS function of IBMLINK starts with an "O" (for MVS APARs) and the reason-ID >used >in a ++HOLD starts with an "A". Program products use different

Re: SMP/E query resolver?

On Fri, 29 Jul 2016 18:16:50 -0500, Paul Gilmartin wrote: >On Fri, 29 Jul 2016 16:22:08 -0500, Tom Marchant wrote: >> >>>SMP/E for z/OS Commands >>>The ACCEPT command >>>o The SYSMOD named as the reason ID for the exception ... >>>

Re: SMP/E query resolver?

On Fri, 29 Jul 2016 16:22:08 -0500, Tom Marchant wrote: > >>SMP/E for z/OS Commands >>The ACCEPT command >>o The SYSMOD named as the reason ID for the exception ... >> That might merit a RCF. By IBM's convention, the reason ID names not an

Re: SMP/E query resolver?

s that IBM's practice is (was?) that the reason ID >is the ID of an APAR which may be resolved by one or more PTFs which >SUPersede the reason ID which is not itself a delivered SYSMOD. This >is hinted at by: >z/OS >z/OS 2.1.0 >SMP/E Version 3 >SMP/E for z/O

SMP/E panel wishes

panel unscrolled, with the cursor in the prefix area of the line from which I entered the child panel. I can easily select nearby, probably related, lines or reposition as I will with Up Cursor or Down Cursor. (I have those on PF7 and PF8.) SMP/E panels should do likewise. As above, the only sel

Re: SMP/E query resolver?

de the reason ID which is not itself a delivered SYSMOD. This is hinted at by: z/OS z/OS 2.1.0 SMP/E Version 3 SMP/E for z/OS Commands The ACCEPT command Processing SYSMOD selection Applicability checking Exception SYSMODs (HOLD) Exception data is consider

Re: SMP/E query resolver?

On Fri, 29 Jul 2016 12:03:24 -0500, Paul Gilmartin wrote: >On Fri, 29 Jul 2016 08:57:50 -0500, Tom Marchant wrote: >> >>If a superseding PTF was applied, you can go into SMP 3.2 and query SYSMOD >>RRR. You will find that it has a status of SUP in your target and/or >>distribution zones.

Re: SMP/E query resolver?

On Fri, 29 Jul 2016 08:57:50 -0500, Tom Marchant wrote: > >If a superseding PTF was applied, you can go into SMP 3.2 and query SYSMOD >RRR. You will find that it has a status of SUP in your target and/or >distribution zones. Select the zone you are interested in and it will show the

Re: SMP/E query resolver?

been superseded after HHH was applied. My point is, its not so easy to determine if the ERROR HOLD was bypassed when HHH was applied. Kurt Quackenbush -- IBM, SMP/E Development -- For IBM-MAIN subscribe / signoff

Re: SMP/E query resolver?

On Thu, 28 Jul 2016 19:10:09 -0500, Paul Gilmartin wrote: >I have in a CSI: > > Entry Type: SYSMOD Zone Name: GLOBAL > Entry Name: HHH Zone Type: GLOBAL > HOLD DATA >

SMP/E query resolver?

I have in a CSI: Entry Type: SYSMOD Zone Name: GLOBAL Entry Name: HHH Zone Type: GLOBAL HOLD DATA ++ HOLD ( HHH ) ERROR

Re: SMP/E packaging question

Sorry, I am doing a terrible job explaining this. The "outside of SMP/E" link job doesn't do the link directly by invoking HEWL, but rather by invoking SMP/E with SET BOUNDARY(TARGET) . LINK LMODS CALLLIBS . So it's "outside of SMP/E" in the sense of being *submitted* o

Re: SMP/E packaging question

> >Rich Way > >-Original Message- >From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On >Behalf Of Way, Richard >Sent: Thursday, July 28, 2016 11:05 AM >To: IBM-MAIN@LISTSERV.UA.EDU >Subject: Re: SMP/E packaging question > >Sorry for the l

Re: SMP/E packaging question

ist [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Way, Richard Sent: Thursday, July 28, 2016 11:05 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMP/E packaging question Sorry for the lack of response - I was out of the office for a couple of days. Apparently it's a long story, predating my

Re: SMP/E packaging question

: Re: SMP/E packaging question Subject: SMP/E packaging question From: "Way, Richard" <richard@hpe.com> Reply-To: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> eply I need to provide SMP service to an existing released pro

Re: SMP/E packaging question

. "Sub-optimal", I know. Thanks -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Tom Marchant Sent: Monday, July 25, 2016 12:32 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMP/E packaging question On Mon, 25 Jul 2016 13:5

Re: SMP/E packaging question

Subject: SMP/E packaging question From: "Way, Richard" <richard@hpe.com> Reply-To: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> eply I need to provide SMP service to an existing released product to fix the binder control ca

Re: SMP/E packaging question

What is the format of your JCLIN? Binder or IEBCOPY? The answer to that will determine the need for a relfile to contain the module you have to provide to get the new JCLIN to take effect. FILES(n) on the ++PTF statement means how many external files that SMP/E will need. For PTFs

Re: SMP/E packaging question

On Mon, 25 Jul 2016 18:38:37 +, Way, Richard wrote: >Or am I misunderstanding it even more basically, and my example will work, but >with FILES(1)? In other words, does the file count specifically exclude the >JCLIN? Or does it only exclude the JCLIN when the JCLIN is inline as opposed >to

Re: SMP/E packaging question

y? What I mean is, do you run an SMP/E LINK LMODS or LINK MODULE command? Or do you link edit the modules outside of SMP/E? And in either case, why do you do that? -- Tom Marchant -- For IBM-MAIN subscribe / signoff / archive a

Re: SMP/E packaging question

) >++JCLIN RELFILE(1) Why do you want to package your PTF in RELFILE format? There are examples of how to package a PTF with JCLIN in the SMP/E Reference under JCLIN. Have you looked at them? -- Tom Marchant -- F

Re: SMP/E packaging question

Way -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Way, Richard Sent: Monday, July 25, 2016 11:36 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMP/E packaging question Thanks, Bob. I should have mentioned that we have customers run

Re: SMP/E packaging question

Way -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Longabaugh, Robert E Sent: Monday, July 25, 2016 11:27 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: SMP/E packaging question To get SMP/E to relink the load module, which would

Re: SMP/E packaging question

To get SMP/E to relink the load module, which would be the trigger for adding the alias, you would have to provide one or more of the modules (defined by ++MOD) that are contained in the load module. If you update the JCLIN without providing any elements, SMP/E does not relink the module

SMP/E packaging question

, but I am not versed in SMP/E (obviously). I believe we'd just need to update the JCLIN and get them to RECEIVE/APPLY/ACCEPT the resultant PTF, but I am unclear on the details. Thanks! Rich Way HPE Security - Data Security

Re: Privileged Users (was: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support?)

On 05/18/2016 05:16 AM, Elardus Engelbrecht wrote: > Robert S. Hansel (RSH) wrote: > >> OPERATIONS users actually can grant privileges because they can create >> dataset profiles for any group. And if they own a profile they create, they >> can permit access to it. > RACF by default will allow

Re: Privileged Users (was: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support?)

: Privileged Users (was: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support?) Hi Skip, OPERATIONS users actually can grant privileges because they can create dataset profiles for any group. And if they own a profile they create, they can permit access to it. In z/OS 2.2, you will be able

Re: Privileged Users (was: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support?)

Robert S. Hansel (RSH) wrote: >OPERATIONS users actually can grant privileges because they can create dataset >profiles for any group. And if they own a profile they create, they can permit >access to it. RACF by default will allow that OPERATIONS stunt. IRREVX01 can be used to block those

Re: Privileged Users (was: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support?)

50 + From:Jesse 1 Robinson <jesse1.robin...@sce.com> Subject: Re: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support? An interesting take on ADDSD. We produce a periodic report here on userids with 'elevated access', which includes SPECIAL, OPERATIONS, and AUDITOR (the benign type). OPE

Re: [EXTERNAL] Re: smp/e sha-2 support?

Yes. When I go to port 443 I also see the correct chain: openssl s_client -debug -connect dispby-117.boulder.ibm.com:443 -state SSL_connect:SSLv3 read finished A --- Certificate chain 0 s:/C=US/ST=New York/L=Armonk/O=INTERNATIONAL BUSINESS MACHINES CORPORATION/CN=deliverycb-bld.dhe.ibm.com

Re: [EXTERNAL] Re: smp/e sha-2 support?

On 18/05/2016 0:53, John Eells wrote: - Added support for both SHA-2 (SHA-256) and 2048-bit RSA certificates.** - Put the package signing verification certificate where "anyone could get it" - Made the signing (certificate-based) check optional. - Continued to keep the integrity checking

Re: [EXTERNAL] Re: smp/e sha-2 support?

various implementations, > > > e.g. Windows exe signing and Java jar signing. I'm pretty sure z/OS can > > > verify signatures on jars at least. Some thought would have to go into > > > how you attach a signature to a package and what you attach it to. > > > > > &g

Re: [EXTERNAL] Re: smp/e sha-2 support?

lmost > > certainly has a certificate already. There are various implementations, > > e.g. Windows exe signing and Java jar signing. I'm pretty sure z/OS can > > verify signatures on jars at least. Some thought would have to go into > > how you attach a signature to a package a

Re: smp/e sha-2 support?

Create a profile or group named ADMIN, add some users to it, and list that out for the auditors whenever they ask. Best case, they will fall for it and you're done. Worst case, you have a spot (like a paper list but in RACF where it looks more legitimate) where you at least have a chance of

Re: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support?

On 16 May 2016 at 15:47, Jerry Whitteridge wrote: > I'd reply to the Auditor "Please define Admin access as there is no one > privilege that grants all access" But there are several -- perhaps many -- privileges that grant access to grant all access. For

Re: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support?

@LISTSERV.UA.EDU] On Behalf Of John McKown Sent: Tuesday, May 17, 2016 8:57 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: (External):Re: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support? On Tue, May 17, 2016 at 9:41 AM, Mike Schwab <mike.a.sch...@gmail.com> wrote: > Any ID that can grant p

Re: [EXTERNAL] Re: smp/e sha-2 support?

On 5/17/2016 10:55 AM, John Eells wrote: So...suppose we were to do something like this*: - Added support for both SHA-2 (SHA-256) and 2048-bit RSA certificates.** - Put the package signing verification certificate where "anyone could get it" - Made the signing (certificate-based) check

Re: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support?

On Tue, May 17, 2016 at 9:41 AM, Mike Schwab wrote: > Any ID that can grant privileges to another ID. > ​By the above definition, _every_ id in RACF which has TSO capability is an administrator. How? Suppose that I am BUBBA. I log into TSO. I issue the commands: ADDSD

Re: [EXTERNAL] Re: smp/e sha-2 support?

) (005OP6.3.10) VA OI Service Delivery & Engineering -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of John Eells Sent: Tuesday, May 17, 2016 9:54 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: [EXTERNAL] Re: smp/e sha-2 support? So...suppos

Re: [EXTERNAL] Re: smp/e sha-2 support?

tions, e.g. Windows exe signing and Java jar signing. I'm pretty sure z/OS can verify signatures on jars at least. Some thought would have to go into how you attach a signature to a package and what you attach it to. - Would you want signature verification to be optional? Yes. For SMP/E it should be t

Re: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support?

to:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of Lester, Bob > Sent: Monday, May 16, 2016 12:40 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support? > > Hi All, > > What would you make of this request: "Show me all the

Re: [EXTERNAL] Re: smp/e sha-2 support?

May 16, 2016 3:22 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: [EXTERNAL] Re: smp/e sha-2 support? Without promising anything at all, please don't be too hasty to prejudge the outcome of this dicussion. What I tried to ask is what the actual requirement is. The consensus seems to be that the ac

Re: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support?

On Mon, 16 May 2016 19:47:43 +, Jerry Whitteridge wrote: >I'd reply to the Auditor "Please define Admin access as there is no one >privilege that grants all access" > "If there's more than one, then, all of them!" (The Wookie wins.) -- gil

Re: [EXTERNAL] Re: smp/e sha-2 support?

On Mon, 16 May 2016 14:25:38 -0500, Dyck, Lionel B. (TRA) wrote: >What's going to happen is that IBM will not support SHA-2 (or -3) and every >shop with any degree of security (hipaa, sox, dod, ...) will cease to be able >to use the internet delivery option. Being told to create an RFE for

Re: EXTERNAL: Re: smp/e sha-2 support?

rame Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Jesse 1 Robinson Sent: Monday, May 16, 2016 1:44 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: EXTERNAL: Re: smp/e sha-2 support? I guess I'm getting ornery in my old age. I would reply, 'No users have Admin access on the mainframe.' S

Re: [EXTERNAL] Re: smp/e sha-2 support?

-MAIN@LISTSERV.UA.EDU] On Behalf Of John Eells Sent: Monday, May 16, 2016 1:22 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: [EXTERNAL] Re: smp/e sha-2 support? Without promising anything at all, please don't be too hasty to prejudge the outcome of this dicussion. What I tried to ask is what the actual

Re: smp/e sha-2 support?

Office robin...@sce.com -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Jerry Whitteridge Sent: Monday, May 16, 2016 12:48 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: (External):Re: EXTERNAL: Re: [EXTERNAL] Re: smp/e sha-2 support? I'd reply

<    3   4   5   6   7   8   9   10   11   12   >