What if someone sends a vicious PROFILE EXEC to your server? you
should check who sent something before blindly receiving it. Or check
what was sent and only receive
The do-loop checking rdr files can be made much simpler too:
Check_Receive:
'EXECIO * CP (STEM AA. Q RDR * ALL NOHOLD'
do i=2 to
Hi: The AE and AF codes indicate to me that likely there is an already in play
flash going on.
Try waiting a while and trying again.
You can have up to 12 targets on a single flashcopy commands.
X'AE' Command cannot complete because the target of the new FLASHCOPY is
already a tar
Leland--No, you don't assign MAINT to the $SYSTEMS group, altho you
could. You DEFINE MAINT and other id's that you might need to have
logonby access to the SURROGAT class as LOGONBY.MAINT and then PERMIT
the id to be logoned by $CLASS. Sorry, my RACF terminology isn't
right. I can never rem
I am trying to flashcopy a single source volume to multiple target volume
s
in an EXEC. The first two FLASHCOPY commands appear to work. However the
volumes following that get the following error message:
>>> "CP FLASHCOPY 7000 0 3338 TO 704B 0 3338"
HCPCMM296E Status is not
Got it. Thanks.
Regards,
Richard Schuh
> -Original Message-
> From: The IBM z/VM Operating System
> [mailto:[EMAIL PROTECTED] On Behalf Of Alan Altmark
> Sent: Tuesday, July 01, 2008 4:13 PM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: RACF and MAINT
>
> On Tuesday, 07/01/2008 at 0
On Tuesday, 07/01/2008 at 06:22 EDT, "Schuh, Richard" <[EMAIL PROTECTED]>
wrote:
> I see. The way we use VM:Secure, nopass is granted through the rules
> facility, so the ESM does handle the requests to XAUTOLOG a user. Since
> the requesting user's logon was authenticated by the ESM and there is
I see. The way we use VM:Secure, nopass is granted through the rules
facility, so the ESM does handle the requests to XAUTOLOG a user. Since
the requesting user's logon was authenticated by the ESM and there is a
permitting rule that is also enforced by the ESM, is that authorization,
authenticatio
Quoting Rob van der Heij <[EMAIL PROTECTED]>:
> On Tue, Jul 1, 2008 at 11:24 PM, Leland <[EMAIL PROTECTED]> wrote:
>
> > Ah, I got it now. I'll pass on your explanation to our RACF goddess.
> She'll
> > probably be wondering why I was asking y'all and not her anyway. :-)
>
> Did you not get a "w
On Wed, Jul 2, 2008 at 12:03 AM, Wakser, David
<[EMAIL PROTECTED]> wrote:
> "WAKEUP +2 (RDR IUCVMSG QUIET" /* Check for files every 2 minutes */
For what I understand of WAKEUP, this is still overkill. If you just
want to wait for RDR files, you don't need to wakeup each time to
check. When a
Thanks, Cal. Others have already suggested that. But it is really overkill. My
entire EXEC consists of the following. And we have tested it thoroughly today,
and it seems to do exactly what we want. The "+2" is only because files will
not be coming in very often, but when they do we want to proc
On Tue, Jul 1, 2008 at 11:24 PM, Leland <[EMAIL PROTECTED]> wrote:
> Ah, I got it now. I'll pass on your explanation to our RACF goddess. She'll
> probably be wondering why I was asking y'all and not her anyway. :-)
Did you not get a "we don't have that on MVS so you don't need it on VM" ;-)
O
On Tuesday, 07/01/2008 at 04:56 EDT, "Schuh, Richard" <[EMAIL PROTECTED]>
wrote:
> "IMO, autologging a user should not reset the password count."
>
> Has your humble opinion changed? Or exactly what did you mean? Perhaps
> that if authentication requires no password, it should not reset the
> cou
Hi David
Go to the VM download site http://www.vm.ibm.com/download/ and get the
vmserve package. It uses wakeup and will do just about anything you will
ever want your service machine to do. I have used this for years and I am
very happy with it.
Cal Fisher
My tour in the Navy
The MVMUA website
Got ya! That's correct.
-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of McBride, Catherine
Sent: Tuesday, July 01, 2008 5:33 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method
Yes, you did (bless you!) I should have said, 'intervened in
Yes, you did (bless you!) I should have said, 'intervened in any official
capacity'.
Kind regards,
McB
-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
Behalf Of Wakser, David
Sent: Tuesday, July 01, 2008 4:30 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: B
Cathy:
I absolutely did say something at the time! I commented that it
was rude to criticize the code of someone who was helpful enough to
present a working example. Perhaps you missed that one!
David Wakser
-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL P
Lambasting another person's code when they were simply trying to help by
sharing it didn't seem too relevant to the stated topic either, yet no one
intervened THEN. This tells me we tolerate blatant rudeness, but not humor
interjected to defuse tension caused by the rudeness. Guess it's all a
Quoting Mike Harding <[EMAIL PROTECTED]>:
> No, that's backwards. You permit the $SYSTEMS group to the logonby.maint
> resource, then users who have a connect to that group automatically have
> the ability to use logonby to the maint id. You would need to define the
> resource and do the permit
On Tuesday, 07/01/2008 at 03:57 EDT, Leland <[EMAIL PROTECTED]> wrote:
> It will only be two of us, but if I'm understanding correctly, assigning
any
> other users besides MAINT to the $SYSTEMS group would automagically give
us two
> LOGONBY auth for those users as well. That sounds keen to me.
No, that's backwards. You permit the $SYSTEMS group to the logonby.maint
resource, then users who have a connect to that group automatically have
the ability to use logonby to the maint id. You would need to define the
resource and do the permit for any other shared id for which you wanted to
> Rob, all my belly button does is collect lintwhat does your's do
for
> you? :-)
That is way, *way* too much information.
"IMO, autologging a user should not reset the password count."
Has your humble opinion changed? Or exactly what did you mean? Perhaps
that if authentication requires no password, it should not reset the
count?
Regards,
Richard Schuh
> -Original Message-
> From: The IBM z/VM Operatin
Franz your procedures worked! We are now IPLed off a different Res pack, spool
and page pack. Thank you very much for your help.
David Juárez
CDC eServer Systems Support (310B)
IT Specialist - Systems Programmer
512-326-6116 Work
-Original Message-
From: The IBM z/VM Operating Syste
On Tuesday, 07/01/2008 at 04:41 EDT, "Schuh, Richard" <[EMAIL PROTECTED]>
wrote:
> What about Class G AUTOLOG that requires a password?
What about it? The autolog is preceded by an authentication. If correct,
the counts would be reset. So it's the authentication that would be
resetting it, n
What about Class G AUTOLOG that requires a password?
Regards,
Richard Schuh
> -Original Message-
> From: The IBM z/VM Operating System
> [mailto:[EMAIL PROTECTED] On Behalf Of Alan Altmark
> Sent: Tuesday, July 01, 2008 1:38 PM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: RACF and M
On Tuesday, 07/01/2008 at 01:59 EDT, Kris Buelens <[EMAIL PROTECTED]>
wrote:
> We never had MAINT being revoked due too invalid logon attempts, maybe
> the nightly XAUTOLOG resets the invalid pswd count too.
IMO, autologging a user should not reset the password count. Inactivity
timer, yes. Ba
It all depends on what you want to do.
In some cases you may not want to wait forever for a file that may never arrive.
So you put the timer in.
If on the other hand the vm is totally driven by the arrival of a RDR file,
then there would be no reason to have a timer value.
-Original Message-
See, folks, this is the part where I come across like I'm all
humor-deficient... I'm pretty sure that piercings and belly-button lint
aren't terribly relevant to the stated topic of the list.
It's all about the signal-to-noise ratio, kids. Please resist the urge
to push this one back up the
And if you leave that RDR file in the queue without holding it, it will
give you another interrupt immediately.
Regards,
Richard Schuh
> -Original Message-
> From: The IBM z/VM Operating System
> [mailto:[EMAIL PROTECTED] On Behalf Of Kris Buelens
> Sent: Tuesday, July 01, 2008 12:4
I know a girl that has a diamond in hers she always shows it at the beach.
-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
Behalf Of Dave Jones
Sent: Tuesday, July 01, 2008 3:18 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method
Absolutely not! My wi
Absolutely not! My wife simply forbids it, even at the beach:-)
Schuh, Richard wrote:
Dave,
Sounds like yours is doing what it is supposed to do. You probably still
do not go around showing it off, do you?
Regards,
Richard Schuh
Rob, all my belly button does is collect lintwhat
Quoting Jim Bohnsack <[EMAIL PROTECTED]>:
> Leland--In addition to the following suggestions to use logonby is that
> some time ago, auditors dinged us (them--it was before I arrived on the
> scene) because the MAINT and other privileged userids had shared
> passwords. Auditors don't like that.
Leland--In addition to the following suggestions to use logonby is that
some time ago, auditors dinged us (them--it was before I arrived on the
scene) because the MAINT and other privileged userids had shared
passwords. Auditors don't like that. Connect your system programmer
type people to a
2008/7/1 Huegel, Thomas <[EMAIL PROTECTED]>:
> That's one reason why we put a timer in WAKEUP so we can go recheck the RDR
> every so often.
>
With WAKEUP (RDR, there is no need to add a timer interrupt too.
WAKEUP will present RC=4 when a RDR file is available.
--
Kris Buelens,
IBM Belgium, VM
This was all good stuff and to summarize...
We remove the password from MAINT using NOPASSWORD and we give us special
people LOGONBY. Don't know if we'll worry about the inactivity issue jus
t
yet, but we'll see.
Thanks a heap all,
Leland
Dave,
Sounds like yours is doing what it is supposed to do. You probably still
do not go around showing it off, do you?
Regards,
Richard Schuh
>
>
> Rob, all my belly button does is collect lintwhat does
> your's do for you? :-)
>
> Happy Forth of July, too, and Canada Day as well.
And to further muddy the waters here a bit, there is the RXWAIT package,
available here:
http://uvvm.uvic.ca/~freeware/
can do what WAKEUP does and much more as well. Both excellent documentation and the source
code is provided. I can, however, understand David's desire to use only plain vanilla
That's one reason why we put a timer in WAKEUP so we can go recheck the RDR
every so often.
-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
Behalf Of Rob van der Heij
Sent: Tuesday, July 01, 2008 12:31 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best metho
We never had MAINT being revoked due too invalid logon attempts, maybe
the nightly XAUTOLOG resets the invalid pswd count too.
2008/7/1 Alan Altmark <[EMAIL PROTECTED]>:
>
> On Tuesday, 07/01/2008 at 12:29 EDT, Kris Buelens <[EMAIL PROTECTED]>
> wrote:
> > Use'd define MAINT as a logonby user
> >
And definitely not at SHARE! :)
Rob van der Heij wrote:
My belly button does what I need it to do, but I don't show it to others ;-)
--
Rich Smrcina
VM Assist, Inc.
Phone: 414-491-6001
Ans Service: 360-715-2467
rich.smrcina at vmassist.com
http://www.linkedin.com/in/richsmrcina
Catch the
On Tue, Jul 1, 2008 at 7:07 PM, Huegel, Thomas <[EMAIL PROTECTED]> wrote:
> Not pretty, but it has worked for a very long time. Sort of like an old
> horse she may not look like much, but she still plows the field.
My belly button does what I need it to do, but I don't show it to others ;-)
I wo
Looks okay to me. I have a lot of stuff like that. It's a tool, not a
piece of art!
On Tue, Jul 1, 2008 at 1:07 PM, Huegel, Thomas <[EMAIL PROTECTED]> wrote:
> Not pretty, but it has worked for a very long time. Sort of like an old
> horse she may not look like much, but she still plows the fi
On Tuesday, 07/01/2008 at 12:29 EDT, Kris Buelens <[EMAIL PROTECTED]>
wrote:
> Use'd define MAINT as a logonby user
> RAC RDEFINE SURROGAT LOGONBY.MAINT
> RAC PERMIT MAINT.LOGONBY CLASS(SURROGAT) ID(
> to define which users/groups can issue
>LOGON MAINT BY xxx and give the pwsd of xx
Not pretty, but it has worked for a very long time. Sort of like an old horse
she may not look like much, but she still plows the field.
-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] Behalf Of Kris
Buelens
Sent: Tuesday, July 01, 2008 11:59 AM
To: IBMVM
Kris:
Be nice, please - he was kind enough to send me the code to see a
"living" example! :)
David Wakser
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Kris Buelens
Sent: Tuesday, July 01, 2008 12:57 PM
To: IBMVM@LISTSERV.UARK.
Ugh, such ugly code. Have a look at the TCVM1 package to learn some REXX
coding techniques. It is an HTML selfstudy.
2008/7/1 Huegel, Thomas <[EMAIL PROTECTED]>:
> Not many comments to explain the code but here is an example.
>
> WAKEUP RESET
> CP SET IMSG IUCV
> CP SET MSG IUCV
>
To all readers thinking they'd nee to intercept the message of an arriving
spool file: it leaves a hole: reader files sitting there before
WAKEUP/PIPE/xxx were active remain in the reader until another RDR file
arrives. WAKEUP hasn't that problem.
And, you can save yourself a lot a work by lookin
Jim Hughes asked:
> How would the STARMSG pipeline detect someone
> typing a message at the console and hitting the ENTER key?
> Would it require another concurrent pipe running?
Concurrent, yes.
For console input, I would simply fan-in a CONSOLE stage.
You can even fan-in TCP connections, if yo
We do LOGONBY but some people forget and try to logon directly to MAINT,
enter their own logon password (an incorrect pw for MAINT), RACF
dutifully counts these consecutive wrong logon pw's and after 1 attempt
in Jan, 1 attempt in July and the 3rd consecutive one in say May of the
following year RA
How would the STARMSG pipeline detect someone typing a message at the
console and hitting the ENTER key? Would it require another concurrent
pipe running?
I like WAKEUP because I can set timer interrupts, reader interrupts,
message interrupts, and console interrupts.
___
Jim:
Thanks. Yes, I am somewhat comfortable with PIPES. Perhaps I'll
just revert back to how I did it 20 years ago - except I'll spruce it up
with PIPES!
David Wakser
-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Hughes, Jim
Sent:
Use'd define MAINT as a logonby user
RAC RDEFINE SURROGAT LOGONBY.MAINT
RAC PERMIT MAINT.LOGONBY CLASS(SURROGAT) ID(
to define which users/groups can issue
LOGON MAINT BY xxx and give the pwsd of xxx
As to avoid RACF revoking users due to inactivity: XAUTOLOG them every now
and then.
I think you have a valid concern. The 'Security on z/VM' redbook
suggests to use 'logon by' for MAINT to avoid a) giving out it's
password and 2) the possibility of it's password being revoked due to
people possibly forgetting it. A sensible solution.
Leland Lucius wrote:
Being new to this R
Querying the rdr and processing the responses is a better approach than
asking WAKEUP to stack the reader arrived messages.
As long as reader files exist in your reader, WAKEUP gets a single
interrupt, not an interrupt for each file.
I pipe the query rdr responses into a pipeline and hit the gro
>Is there a method of also trapping the "message"
> that shows when a file is sent to the VM reader?
> I need it to issue the RECEIVE properly. In the HELP WAKEUP
> it seems that setting the various message
> types to IUCV should work, but it doesn't seem to do that,
Well ... everyone wa
You did tell WAKEUP to trigger on IUCV messages, I presume. That has to
be explicitly specified.
Regards,
Richard Schuh
> -Original Message-
> From: The IBM z/VM Operating System
> [mailto:[EMAIL PROTECTED] On Behalf Of Wakser, David
> Sent: Tuesday, July 01, 2008 9:11 AM
> To: IBMV
Yes, I can try that - it just seemed that WAKEUP would handle the
message also. The SET IMSG didn't help.
David Wakser
-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Bob Bates
Sent: Tuesday, July 01, 2008 12:14 PM
To: IBMVM@LISTSERV.UARK.EDU
Being new to this RACF on VM thing, I'm a little paranoid about how the
MAINT user should be handled in relation to things like password policies.
Mind you, we don't use MAINT all that often, but I'd hate to get myself
in a position where I needed it and was unable to use it because the
passwo
Not many comments to explain the code but here is an example.
WAKEUP RESET
CP SET IMSG IUCV
CP SET MSG IUCV
.
.
.
.
.
DATEOK:
FLDATE = RIGHT(DATE(S,TDATE,U),6)
SET CMSTYPE HT
I believe you could do a 'CP SET IMSG IUCV' and trap that message as
well off the WAKEUP. Could Piping a CP Q R or CP Q RDR ALL into a
variable get you the information you need so you don't have to handle
both interupts?
Bob Bates
Enterprise Hosting Services - Enterprise Virtualization - z/VM a
Did that - it didn't help.
-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Schuh, Richard
Sent: Tuesday, July 01, 2008 12:09 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method
You would probably need to SET CPCONIO IUCV.
Regards,
Rich
I don't have access to that product, and I prefer to remain "plain
vanilla" with this. But it's good to know, and thanks for the
information.
David Wakser
-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Schuh, Richard
Sent: Tuesday, July 01, 2
Just issue a PIPE CP Q RDR * ALL to get all the reader files sitting in
your reader queue. This way you can also check for "HELD" files, prt/pun
files, form, etc...
I've never used the "file in reader" message for anything.
There is a "XRDR" command to help as well. Issue HELP XRDR
Good Luck.
You would probably need to SET CPCONIO IUCV.
Regards,
Richard Schuh
> -Original Message-
> From: The IBM z/VM Operating System
> [mailto:[EMAIL PROTECTED] On Behalf Of Wakser, David
> Sent: Tuesday, July 01, 2008 9:04 AM
> To: IBMVM@LISTSERV.UARK.EDU
> Subject: Re: Best method
>
>
If you have CA products available, check out KWAKEUP. It handles
everything that WAKEUP does and does it better. For example, it gives
you an option to put the information about the event causing the
interrupt into REXX variables. There is no need to clear the stack of
wakeup entries that did not c
Bob:
Is there a method of also trapping the "message" that shows when
a file is sent to the VM reader? I need it to issue the RECEIVE
properly. In the HELP WAKEUP it seems that setting the various message
types to IUCV should work, but it doesn't seem to do that,
Thanks, in advanc
David,
it's easier than you might think.
I have done it several times with this procedure in user maint
1. attach new volumes to maint
2. copy all 530res, (if mod 3 530w01,530w02), 530pag and 530spl to new
volumes with DDR. You can of course also restore them from a backup.
3. CPFMTXA device-o
It was not changing the h/w configuration, the devices have been in the
IOCP and actually installed for months. They were in a
Devices_NotAccpted list because our storage management group is MVS
based and does not want us to have any devices not specified as VM
devices available to the system. They
On Tue, Jul 1, 2008 at 3:06 PM, Juarez, David T. <[EMAIL PROTECTED]> wrote:
> We just unloaded z/VM 5.3 and would like to create an alternate RES and
> spool pack. Current names are 530RES and 530SPL. Does someone have simple
> procedures to create alternate res and alternate spool volumes so we c
No need to vary them off.
The 530res pack in Maint's 123 mdisk and the 530spl is Maint's 122 mdisk.
DDR the 123 and 122 to another volume.
Here are the steps I suggested to one of my customers recently:
*1. Duplicate the current z/VM system volumes* :
1. DDR 530RES(maint's 123), 530W01 (Maint
Thanks, Bob. I haven't used WAKEUP for many years, so I'll try it.
David Wakser
-Original Message-
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Bob Bates
Sent: Tuesday, July 01, 2008 10:21 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: Best method
Absolutely,
On Monday, 06/30/2008 at 03:26 EDT, "Gentry, Stephen"
<[EMAIL PROTECTED]> wrote:
> I have set up a bfs and am trying to ftp to it from a linux guest in an
IFL.
>
> I get the following message from Linux
> 450 Directory if temporarily unavailable, Access failure, RC=24
>
> And from the FTPSERV
Absolutely,
Use the WAKEUP module.
I have a program that waits for reader files and messages. The
waiting part looks like:
do forever
'WAKEUP +30 (RDR IUCVMSG'
saverc = rc
select
when saverc = 4 then
Checkout WAKEUP. It does that and more.
Jim Hughes
603-271-5586
"Its kind of fun to do the impossible." (Walt Disney)
=>-Original Message-
=>From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
On
=>Behalf Of Wakser, David
=>Sent: Tuesday, July 01,
This might work for you.
Being that everything is new and nothing has changed, create a second
system (first level) and some how vary off line the volumes from the
first system so the new system doesn't see them.
After you have two z/VM system loaded then zap the volume id's stand
alone to any
All:
What is the best method to code, for a SVM, a wait for a file to
arrive in its reader?
I have a (very old) EXEC that has a "do forever" loop with a
"EXECIO * CP (STEM" aa. "STRING CP Q RDR * ALL" command followed by a
SLEEP when no files are found. Is there a better method of
Alan, thanks for the reply.
My FTPSERVE was already setup with the correct posix params. I am
trying to FTP to FTPSERVE (on VM) from a Linux guest on an IFL. I would
be issuing a PUT filename.filetype from the Linux guest.
Sorry if I didn't make that clear in the first posting.
All that being sa
We just unloaded z/VM 5.3 and would like to create an alternate RES and spool
pack. Current names are 530RES and 530SPL. Does someone have simple procedures
to create alternate res and alternate spool volumes so we can IPL off the
alternates and leave the original res and spool untouched. The Gu
Friends,
The next meeting of the Metropolitan VM and linux Users Association
will be held on Wednesday July 16, 2008 at MARIST College in Poughkeepsie
New York
the directions to Marist are posted on our WEB site
http://www2.marist.edu/~mvmua/
Please let me know if you are planning on attendin
DEFINE DEVICE/CNTLUNIT/CHPID are the commands to dynamically change HW the
IO-config (i.e. the IOCP so to speak). SET RDEVICE is normally required
only when the device doesn't answer to a SENSID (kind of dynamic HCPRIO)
2008/7/1 Schuh, Richard <[EMAIL PROTECTED]>:
> We have some DASD devices th
80 matches
Mail list logo
