-chpid basis.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM Endicott
.
Is this an academic question as a result of late-night studying of
responses to CCWs? Or is there an issue? :-)
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm
us more about what you're trying to do.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM Endicott
and several
tpf
functions are then not available.
Please contact the Support Center. CP may need to be sensitive to the TPF
Mode state before choosing the CU type.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
and
the instructions they are running take longer. So everyone else is
penalized. The bottom line is that the CPU timer does not stop ticking
just because the TLB has been purged.
Instructions running in other LPARs are not affected since they don't
access the same blocks of memory.
Alan Altmark
z/VM
DATA?
And its been running that way for a couple of years.
I do use the TCP TCPIP2 option on NETSTAT commands.
The TCP operand overrides what is found in TCPIP DATA.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
the group.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM Endicott
. Change RACIPLXI EXEC to autolog AUTOLOG1.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM Endicott
1. You are wise in your fear.
2. You are correct in all your suppositions.
When I set up an alternate stack, I use TCPRUNXT or the :exit. tag to copy
TCPIP DATA from 198 to the 191 with appropriate changes.
Regards,
Alan Altmark
IBM Lab Services
-
Sent from my BlackBerry
marketing in 1994. No, you cannot share it
unless you receive written permission from IBM.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM Endicott
HYPERSWAP commands. Humans or other solutions are expected to do the
same.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM Endicott
the companion set of OS/2 Developer's
Connection CDs - to see if the source is there.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM Endicott
to the machine you're
running on (e.g. number of virt. CPUs)
It's mechanically simple, but it may be tedious depending on how far away
from home the guest is moving and whether there is some sort of congruent
system configuration at the destination.
Alan Altmark
z/VM and Linux on System z
console
2. Put FN=filename on the SAPL screen.
See Chapter 4 of the CP Planning book for examples.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM
or by using the DFSMSRM commands. See
Chapters 6 and 7 of the DFSMS Removable Media Services book.
Also, make sure you are up to date on service. DFSMS hasn't been
refreshed in a looong time, so all newer device support has been
delivered via PTF.
Alan Altmark
z/VM and Linux on System z
the list of SERVICE
LEVELs contained within that RSU. If you instead click on one of the
items in the RSU content column, you will find out what PTFs are on that
RSU.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
/TCPIP.html
historically useful.
But since you have EBCDIC 0x20, you didn't use STANDARD. You used
00371252. The euro is not defined in code page 37, so that translation
table stores the euro as 0x20.
Alan Altmark
z/VM and Linux on System z Consultant and Code Page Guy
IBM System Lab Services
FAILED WITH RC=-101
Ready(-0101);
FTPGET sees -d directoryname, so -v is the directory name.
What am I doing wrong??
Specify the -debug option to see what's happening in more detail.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems
absence isn't an issue.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM Endicott
On Wednesday, 02/23/2011 at 11:09 EST, George Henke/NYLIC
george_he...@newyorklife.com wrote:
Alan:
I have moved the COMMAND statements to the top before the INCLUDE
TCPCMSU which
has DEV type statements like SPOOL, CONSOLE, LINK and it IPLs CMS.
Hopefully
this is correct now.
can still do the ATTACHes yourself in an exec. Just don't use
PROFILE EXEC; use the :Exit tag or TCPRUNXT EXEC instead.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm
. Similar rules apply to CP and 3215 I/O. (Ha! You didn't know
NONDISP was a verb, did you?)
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM
investigation did
not reveal any requirement.
If you haven't already done so, you need to open a PMR.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM
, possibly based on other
criteria.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM Endicott
, as evidenced by
stage 2 of pipeline 1. Perhaps as part of user ID or password?
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM Endicott
using a linemode editor.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM Endicott
! :-)
Reader's Comment Forms are always welcomed. (E-mail your comments to
mhvr...@us.ibm.com)
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM Endicott
, mount an .iso image as a
directory or a drive, or access the DVD directly.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM Endicott
On Thursday, 02/17/2011 at 03:18 EST, Schuh, Richard rsc...@visa.com
wrote:
You specify the filename of the desired CONFIG file in a provided space.
On SAPL: fn=filename
On the LOADPARM: FNxx (yep, limited to 6 chars in filename)
Alan Altmark
z/VM and Linux on System z Consultant
IBM
paranoid keep a .iso copy of the DVD in each location (or burn
extra physical copies and keep it with your emergency ops manual). The
ramdisk-based installation system can be used to repair other systems. It
will run even if nothing else will.
Alan Altmark
z/VM and Linux on System z Consultant
IBM
stuff. BTW, Jeopardy! (with exclamation point, please) is a
syndicated program that is purchased by your local station and then aired
whenever they like. As they say, check your local listings.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com
sticks. See if he'll squeal. ;-)
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
suppose)
as the contestants see it.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
. And THAT isn't going to be done inside CP.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
time. The entire volume is formatted, but only the first 10
016 cylinders are allocated as SPOL or PAGE. That means the rest is PERM.
I recommend that when you're done with installation, go back and
reallocate those volumes so that they are entirely SPOL or PAGE.
Alan Altmark
z/VM and Linux
On Wednesday, 02/09/2011 at 01:52 EST, Rob van der Heij
rvdh...@gmail.com wrote:
On Wed, Feb 9, 2011 at 6:56 PM, Alan Altmark alan_altm...@us.ibm.com
wrote:
I recommend that when you're done with installation, go back and
reallocate those volumes so that they are entirely SPOL or PAGE
record received -- link NPOLAR
is
being deactivated
DMTNET143I Link NPOLAR line AA20 disabled
DMTMAN002I Link NPOLAR deactivated
Is the remote system called NPOLAR? If not, then you need to specify
the NODE parameter on the LINKDEFINE.
Alan Altmark
z/VM and Linux on System z Consultant
IBM
is at
the other end
- The signon record is too long (unusual)
- There is a feature mismatch (unusual)
- syntax errors in the signon protocol (unusual)
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm
layout.
Actually, (An) and (Bn) are LEDs. :-)
The port number (Pn) is a logical number associated with a chpid.
The jack number (Jn) is the physical connector number associated with the
feature (FRU, card).
Look in Appendix B of the OSA-Express Customer's Guide and Reference.
Alan Altmark
z
applications, you will have to work it out with the sw vendor, since I
doubt you want to pay full model capacity charges for each guest!
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm
on a piece of paper and label them with
IP addresses and subnet masks. It will quickly become apparent if you've
got your virtual wires crossed.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
, link
aggregation (GROUP) is available only in ETHERNET (layer 2) mode.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
. Upload to VM in binary
5. PIPE BARCODES VMARC A | fblock 80 00 | BARCODES VMARC A F 80
6. VMARC UNPK BARCODES VMARC A
7. Run AFRREBLK against each of the unpacked FONTxxx files
It might be simpler just to FTP MPUT all the files from your workstation
to VM without creating the VMARC.
Alan
On Thursday, 01/27/2011 at 10:01 EST, Bob Bates
robert.ba...@wellsfargo.com wrote:
Well that was easy. Thanks, everything is off now.
No problem. We'll update the books (DRAIN, SET ABEND, SET DUMP, and
anywhere else we talk about the dump files).
Alan Altmark
z/VM and Linux on System z
. Each cable
represents a unique set of addresses/subchannels. If one of the CTCs
fails, it will be noticed by the OS. It is up to the OS to manage the
grouping.
No: Dedicated OSAs. Failover is the guest's responsibility.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab
.)
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
of it.
HCPDUMP holds soft abend dumps. SET ABEND HARD to get rid of it.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
VLAN id on the GRANT. A
very nice audit tool.
Just so folks are aware, if I ever show up at your company to perform a
z/VM system management health check, I will be looking at your VSWITCH
administration practices very closely. :-)
Alan Altmark
z/VM and Linux on System z Consultant
IBM System
.
And I personally think the CP READ v. VM READ issue is a bug. Until the
introduction of class C SEND (no SECUSER), there was no hope to answer the
VM READ, and so making it a CP READ didn't hurt. Now it does.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
are also giving the person access to all DASDVOLs.
If I were to audit your system and find OPERATIONS authority assigned in
lieu of access to a generic profile (say), I would rap your knuckles, once
for each violation. (Plus an extra one just because I enjoy it.
Bwaahahah!)
Alan Altmark
to talk via RRSF, you need to
tell BOTH groups. For z/VM to cradle z/OS RRSF, it has to be built in a
way that is cradle friendly, so there's work to be done on both sides.
Did I say expensive already?
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
. At least
then you have time to do something about it or let someone know.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
a layout for parsing the TRGCLS, but not the data. Is it literally
userid,code or...?
I suggest a PMR to discuss with Development and to get the book fixed.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office
loader).
If the physical IPL had failed, you would have gotten an error during
activation/load.
Wait state 0x0F would not be a valid CP wait state unless it were
documented in the Messages and Codes book (it isn't). The only exception
would be someone issuing CP SHUTDOWN WAIT F.
Alan Altmark
.
Follow the instructions in the HMC Broadband RSF guide located in
ResourceLink. The HMC will use NAT to proxy the SEs onto your networks.
Whatever you do, don't connect the SEs directly to your network!
The z196 installation guide also has a chapter on planning for your RSF
connection.
Alan Altmark
is not followed, then you may have database
corruption since the database will not have been protected by
RESERVE/RELEASE.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
need to second-guess them here. But,
yes, it appears that you're sharing the db correctly. (Good job - some
people don't read the directions!)
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
(and destroy
the
database).
Indeed! I didn't even notice that! (Too many zeros for my feeble eyes!)
I hereby rescind the attaboy in my previous post.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office
and
for RACF to ask CP whether or not the proper sacrifices have been made on
behalf of the volumes containing the databases.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM
be disassembled.
Has any-one done this before and is willing to share code ?
Have you talked to the Support Center?
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
REXECD and the 2nd user. RC=36 is the initial return
code set by REXEC internally before it starts running and (in theory)
means that the remote side (where 3rd user is located) did a TCP RESET.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com
the two commands.
Since you don't have OPTION D8ONECMD, you can actually do the TERMINAL
CONMODE 3270 and IPL in the same CP command:
CP TERMINAL CONMODE 3270 || x2c(15) || IPL whatever
This tends to help avoid accidents.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services
since anyone can DIAL MVSGUEST.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
addresses is overkill, since I don't think you want to share the
OSA with anything else, but you could put 6 addresses, e.g.
RDEV E000.P00 E003.P01
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
hardware installed and running, we normally never
touch the
IOCP.
This kind of thing is rather esoteric, even for those who do IOCP all the
time. Of course, one wonders WHY you're using different ranges!
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
of RACF instances.
A single point of management for RACF (VM+MVS) is a desirable thing - I
get it. But sharing the database is a case of the tail wagging the dog.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
suggested counting the number of records in the primary
output stream.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
option. (Though I would
think that ALL would work since each user ID is only authorized for one
type of record.)
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
to look at at your $15 Mickey Mouse watch and tell it what time it is
when you IPL it.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
, and that could come from the
sheer volume of clients asking for the same thing. But if you don't ask
for a change, changes will certainly never be made.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
On Tuesday, 01/04/2011 at 10:58 EST, Malcolm Beattie beatt...@uk.ibm.com
wrote:
Alan Altmark writes:
As others have said, the problem is in the logmode associated with the
non-SNA 3270 LU. For some reason, VTAM sysprogs keep using ancient
logmodes for reasons they can't actually
on a JOB card. Also, your
z/VM external security manager product can control who can SPOOL to a
particular id.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
been D4A3290 (local SNA) or D4B3290 (non-SNA).
The 3290 logmodes are simple, removing all screen size and capability
information from the PSERVIC field, and causing VTAM to query the terminal
to determine its configuration and capabilities.
Alan Altmark
z/VM and Linux on System z Consultant
John was right, you can't cancel an SFS command
John was right, you can't cause an sfs command to time out.
- Original Message -
From: Alan Ackerman [alan.acker...@bankofamerica.com]
Sent: 12/23/2010 06:09 PM CST
To: IBMVM@LISTSERV.UARK.EDU
Subject: [IBMVM] Time out an SFS command
Moving this question from CMS-PIPELINES to IBMVM,
going on, you may have grounds for a PMR.
Alan Altmark
IBM Lab Services
Merry Christmas, everyone!
.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
or was used incorrectly.
Why is fName being interpreted as a namedef rather than a
filename/filetype
combination?
I think you're missing the filemode. Without it, it's being interpreted
as 'namedef1 namedef2'.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services
Au contraire. It was necessary for MVS development.
then will you be able to take corrective action. Prior to that,
you're just guessing, flailing at the problem in the hope you will
accidentally fix it.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
enough with MVS.
z/VM doesn't support LU names for TN3270E display sessions. They are used
only with TN3270E printer sessions, and then only to allow you to figure
out what RSCS link to assign it to.
Unlike z/OS, TN3270 sesions on z/VM use CP's native non-SNA 3270 support,
not VTAM.
Alan
that is
configured with the same IP address as VM TCP/IP. It didn't used to warn
you; now it does.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
.
That's just The Way Things Are.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
operating system; it's single
userness eliminating huge amounts of complexity. Of course, we make up
for that by having invented SFS and BFS, reintroducing some of that
complexity. :-) It is a two-edged sword!
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services
,
hardware, and environmentals.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
to deactivate RACF, CP prompts the operator to concur or deny.
(A minor inconvenience and easily overcome [for the moment].)
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM
.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
running alongside, the Secure Everything policy looks
even more reasonable to CEOs, CIOs, CFOs, and their lawyers.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM
attorney who specializes in such matters in the
relevant jurisdictions.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
in SYSTEM CONFIG.
I've been saying for several years, You need an ESM. More and more
z/VM security management will be focused on ESMs, not native CP. If your
fave ESM doesn't simplify things for you, gripe to the vendor.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services
/VM systems WITHOUT an ESM will fail a modern security audit.
The primary example is the presence of unencrypted passwords in USER
DIRECT.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
and exam rooms.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
hate Grants
Then don't use them. Let your ESM handle it and you never need worry
about the authorization again, regardless of the existence of the VSWITCH.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office
provide
protection for VSWITCHes and Guest LANs, since otherwise you have to turn
off the ability for lowly class G users to create Guest LANs.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm
to be able to negotiate TLS on the same port as the
unsecured version.)
Further, UFT(D) in VM is not written to the VMCF/Pascal interface and so
couldn't support it until CMS supports dynamic TLS for IUCV sockets.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services
.
There are large corporations who are finally starting to look at z/VM
management policies (incl. security) to ensure that they are mitigating
the risks inherent in any virtualization strategy. It's easy to say,
We'll deal with that later. Tick, tock, tick, tock.
Alan Altmark
z/VM and Linux
to file for any exception.
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
, loopback connections for static SSL
connections would be superfluous since the traffic never leaves the stack
and the secured apps can't tell the difference. SecureLocal overrides
that decision in case you have a stack that you want to use for testing
the management and use of SSL.
Alan Altmark
z
defined to VTAM (LBUILD).
Alan Altmark
z/VM and Linux on System z Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
alan_altm...@us.ibm.com
IBM Endicott
201 - 300 of 2361 matches
Mail list logo