Re: Where is the VM/CMS timeout value set

2009-09-24 Thread Kris Buelens
SYSTEM CONFIG, Features, DISCONNECT_TIMEout And, it is not only for CMS, but for any CP or VM Read, and forced Disconnect. 2009/9/24 Martin, Terry R. (CMS/CTR) (CTR) terry.mar...@cms.hhs.gov Hi Where do you set the timeout value for an idle VM/CMS user for automatic logoff? *Thank

Re: Where is the VM/CMS timeout value set

2009-09-24 Thread Martin, Terry R. (CMS/CTR) (CTR)
Thanks I will check it out! Thank You, Terry Martin Lockheed Martin - Information Technology z/OS z/VM Systems - Performance and Tuning Cell - 443 632-4191 Work - 410 786-0386 terry.mar...@cms.hhs.gov mailto:terry.mar...@cms.hhs.gov WFH Tuesdays and Fridays

Re: Date/Time functions for REXX program?

2009-09-24 Thread dave
Michael, take a look at the dateget and datesubtract CSL functions (usable from Rexx as well). You should be able to do what you want with the functions they provide. They're documented in the CMS Application Multitasking document. HTH DJ - Original Message - From: Horlick, Michael

Re: Date/Time functions for REXX program?

2009-09-24 Thread Horlick, Michael
Ok, will do. Thanks. Mike -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of dave Sent: September 23, 2009 9:11 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Date/Time functions for REXX program? Michael, take a look at the dateget and

Re: Date/Time functions for REXX program?

2009-09-24 Thread Michael Harding
Oops, the conversion in the last spec stage should be x2t, not c2t. Also, it will have to be adjusted to local time. -- Mike Harding z/VM System Support mhard...@us.ibm.com mike.b.hard...@kp.org mikehard...@mindless.com (925) 926-3179 (w) (925) 457-9183 (c) IM: VMBearDad (AIM), mbhcpcvt (Y!)

Re: Date/Time functions for REXX program?

2009-09-24 Thread Michael Harding
Pipe literal LOC OPERATOR|CP|Spec /D H/ n substr 1;-4 of w3 n /230.8/ n|CP| Spec w2 n w3 n|Spec w1 c2t n|Cons -- Mike Harding z/VM System Support mhard...@us.ibm.com mike.b.hard...@kp.org mikehard...@mindless.com (925) 926-3179 (w) (925) 457-9183 (c) IM: VMBearDad (AIM), mbhcpcvt (Y!) The IBM

Re: Date/Time functions for REXX program?

2009-09-24 Thread Mike Walter
The CSL routines for date/time conversions can be a bit... uh, how do I say this kindly... unintuitive - and complex. Perhaps the TIMEDIFF EXEC pasted below might help out in an easier fashion. I'd have been utterly lost writing it without the help of Doug Breneman. Mike /* Prolog; See

Re: Errors executing simple commands

2009-09-24 Thread Martin, Terry R. (CMS/CTR) (CTR)
Thanks Neale I will research that! Thank You, Terry Martin Lockheed Martin - Information Technology z/OS z/VM Systems - Performance and Tuning Cell - 443 632-4191 Work - 410 786-0386 terry.mar...@cms.hhs.gov WFH Tuesdays and Fridays -Original Message- From: The IBM z/VM Operating

Re: Where is the VM/CMS timeout value set

2009-09-24 Thread Mike Walter
To be a little more specific, z/VM does not provide such a service. But at least one performance monitor provides exits to do what you wish. We use Velocity Software's ESAMON product to do exactly this, the TUNEFRC EXEC provides the proper call. We've modified that a lot to manage forcing

Re: Where is the VM/CMS timeout value set

2009-09-24 Thread Martin, Terry R. (CMS/CTR) (CTR)
Thanks Mike. I have Velocity so I will look into using that. I just have not taken the time to write anything yet because it never came up until now with the security audit. Thank You, Terry Martin Lockheed Martin - Information Technology z/OS z/VM Systems - Performance and Tuning Cell - 443

some RACF and CP questions

2009-09-24 Thread Martin, Terry R. (CMS/CTR) (CTR)
Hi I have been given some question by security auditors and I am having trouble tracking the answers down. I was wondering if anyone could help me with the answers to the following. This is what they are asking for: (5) Please print the configuration of the CP (zVM OS) to indicate the

Re: Date/Time functions for REXX program?

2009-09-24 Thread Horlick, Michael
Mike, Thanks for the routine. Will give it a try. Mike -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Mike Walter Sent: September 24, 2009 12:31 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Date/Time functions for REXX program? The

LDAP + RACF

2009-09-24 Thread Dave Keeton
I have z/VM 5.4 with the native CMS LDAP server and RACF. I'm trying to get it configured so my Linux guests can authenticate via LDAP. I have been through the following documents: Security on z/VM TCP/IP LDAP Administration Guide TCP/IP Planning and Customization Rich Smrcina's Configuring LDAP

Re: some RACF and CP questions

2009-09-24 Thread O'Brien, Dennis L
5-1. The ESM hook into CP is configured by replacing the HCPRPx stubs in CP. It's not in a configuration file. There might be a Product record in your SYSTEM CONFIG file to enable RACF, like there is for RSCS, but that doesn't prove that RACF is active. 5-2. The Journaling statement in

Re: HCPCQU361E LOGOFF/FORCE pending for user OPERATR4

2009-09-24 Thread Suleiman Shahin
X-OriginalArrivalTime: 24 Sep 2009 19:31:50.0031 (UTC) FILETIME=[A99411F0:01CA3D4D] X-PMX-Version: 5.5.7.378829, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2009.9.24.192116 X-PerlMx-Spam: Gauge=, Probability=8%, Report=' BODY_SIZE_1000_1099 0, BODY_SIZE_2000_LESS 0,

Re: HCPCQU361E LOGOFF/FORCE pending for user OPERATR4

2009-09-24 Thread Wandschneider, Scott
I feel your pain. Once I had to do something like that for a SET SHARE command. Thank you, Scott -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Suleiman Shahin Sent: Thursday, September 24, 2009 2:32 PM To: IBMVM@LISTSERV.UARK.EDU

Re: LDAP + RACF

2009-09-24 Thread Patrick Spinler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dave: Just a thought, do you need to do simple binding (ldapsearch -x ...) instead of the default sasl binding? - -- Pat Dave Keeton wrote: I have z/VM 5.4 with the native CMS LDAP server and RACF. I'm trying to get it configured so my Linux

Re: The line (unemployment) forms at the rear.

2009-09-24 Thread Howard Rifkind
Well, not really. I have both skills, like 20+ years of each, and it's really been tough to find something in the Metro NYC area. There openings on various other locations all over the U.S. --- On Wed, 9/23/09, Schuh, Richard rsc...@visa.com wrote: From: Schuh, Richard rsc...@visa.com

Re: LDAP + RACF

2009-09-24 Thread Dave Keeton
Pat, when searching from Linux, yes, I used -x for simple binding. When searching from z/VM, I did not. Dave Just a thought, do you need to do simple binding (ldapsearch -x ...) instead of the default sasl binding?

Re: some RACF and CP questions

2009-09-24 Thread Alan Altmark
On Thursday, 09/24/2009 at 01:13 EDT, Martin, Terry R. (CMS/CTR) (CTR) terry.mar...@cms.hhs.gov wrote: 5-1. RACF is configured to be the external security manager (ESM) of zVM. As Bruce says, you see RACF messages on OPERATOR's console. 5-2. Configuration of zVM internal auditing: if RACF

Re: Where is the VM/CMS timeout value set

2009-09-24 Thread Les Koehler
In the 'old old days', I was once told that a long-time idle CMS user only occupied one 4k page of storage, so it was pointless to risk the damage to them from forcing them off. Have things changed? Or does your site have a very unusual workload? Les Mike Walter wrote: To be a little more

Tom Burgess/Comag/HearstUK is out of the office.

2009-09-24 Thread Tom Burgess
I will be out of the office starting 25/09/2009 and will not return until 05/10/2009. I will respond to your message when I return. Please consider the environment before deciding to print this email. This email and any attachments are confidential and may be legally privileged or protected

Re: Where is the VM/CMS timeout value set

2009-09-24 Thread Les Koehler
Security wasn't the primary concern. We had a severely constrained VM system during the early days of VM at RTP and someone had the bright idea of forcing users that were idle for more than 60 (iirc) minutes so that other users could get more resources (they thought). When a high level

Re: Where is the VM/CMS timeout value set

2009-09-24 Thread Les Koehler
BTW: The 'old old days' I'm talking about is when we had terminal rooms full of 2741's and they were just starting to install 3270's. CP was so primitive back then that I wrote IAMA3270 EXEC and IAMA2741 EXEC for users to run when they reconnected to a different device, as there was always

Re: Where is the VM/CMS timeout value set

2009-09-24 Thread Les Koehler
Correction: It was IAMA EXEC and you could pass it 2741 or 3270. Guess that shows my age :-) Les Les Koehler wrote: BTW: The 'old old days' I'm talking about is when we had terminal rooms full of 2741's and they were just starting to install 3270's. CP was so primitive back then that I wrote

Re: Where is the VM/CMS timeout value set

2009-09-24 Thread Thomas Kern
At least they are beginning to ask better questions. Now we have to get them a Volume 2, 'The Right Questions To Ask When Auditing a VM System' Alan, would IBM be interested in promoting a better list of auditing questions/checklists? /Tom Kern Rich Greenberg wrote: On: Thu, Sep 24, 2009 at

Re: Where is the VM/CMS timeout value set

2009-09-24 Thread Alan Altmark
On Friday, 09/25/2009 at 01:19 EDT, Thomas Kern tlk_sysp...@yahoo.com wrote: Alan, would IBM be interested in promoting a better list of auditing questions/checklists? If you follow the guidelines in the Secure Configuration Guide (sans mandatory access controls, if desired) you have a pretty