Has anyone developed any solutions for encrypting DDR DASD dump output
on
tape?
You could use PIPEDDR, but that is not directly compatible with DDR.
There is an open WAVV requirement for a stream option to DDR (and
SPXTAPE) to allow the output to be redirected into a PIPE stream to
implement
I'm not completely sure (offsite w/o manuals), but the CP journaling
facility can at least catch failed links. I don't think it will report
on successful links, or allow you to control who can perform a command -
you need an ESM for that, and all of those are 3rd party (and expensive,
either in
For those of you doing cost justification cases for your existing System
z or planning upgrades, we've just published a number of white papers
that may prove interesting or useful in making the case.
The papers are available at
http://www.sinenomine.net/publications/papers/2007.
Enjoy...
It seems to me that it
should be made an option rather than having someone (me) read and
decipher the note in the program directory and then ignore it.
Leaving
the exit in place rather than using RACF's DES encryption means that
if
you use your existing DES encrypted database, no existing
Detaching a VCTCA destroys the device. Do a CP SEND TCPIP DEFINE CTC 2003, and
then try to couple it from the other virtual machine as Kris describes.
-Original Message-
From: Anne Crabtree [EMAIL PROTECTED]
To: IBMVM@LISTSERV.UARK.EDU IBMVM@LISTSERV.UARK.EDU
Sent: 5/23/07 7:48 AM
Here's a neat twist for a conference. Dunno how well it will work, but it's
innovative and a cool hack.
Subject: Real Life is meeting Second Life at WAVV !!!
Real Life is meeting Second Life at WAVV !!!
We're going to try having a little fun. Want
Wouldn't we all, although I'd rather avoid ISPF in favor of something
more VM friendly like CUA2001 or IOS3270.
Make sure they are using the RACF integration with DIRMAINT, which helps
somewhat. Also check out RLPF from the VM download library
What is wrong with the VM ISPF product.
It's next to impossible to license it on IFLs, and it's very expensive
for just the task of displaying simple. It's also a non-trivial install
if you have few CMS skills.
Thanks all , esp. David for your help! RLPF looks good to me, just hope
it will work with z/VM v5.2 too.
It should, if all the ISPF bits still work properly. RLPF is more
dependent on RACF version than on VM version. ISPF/VM hasn't changed in
a zillion years (at least 10, anyway), but I
What is the TA= parm? TA=0 (the default) only supports 1 stream.
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Schuh, Richard
Sent: Thursday, May 17, 2007 4:58 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Message DMTNTR930E
I
By business as usual, I mean that IBM continually withdraws
products
from the marketplace, even some that people are using.
Granted. IBM has that privilege, no argument. We rarely force you to
change your mind on these issues (at least where it really counted,
somebody took a risk continuing
Has anyone written a third party OS that can easily replace CMS?
None are easy replacements, but IMHO there are several possible
candidates:
MUSIC
Linux
Solaris (coming soon)
Only MUSIC is really CMS-like. The other two are obvious Unix
derivatives, and would require retooling or emulation of
Or just buy PVM and leave the driving to us! :-)
Well, if it didn't take a special bid on IFLs(hint, hint)
On the other hand, the PVM line protocol isn't that complicated if you have
tools to talk to a CTC. It wouldn't be that hard to use a Linux guest to
implement most of what Tom wants.
PVM might be an answer. It had both SNA and scripting capabilities, and its a
pretty decent session manager. NVAS would have been another option, but it
requires VSAM, so prob not viable over the long term.
If you had to roll your own, the IBM CCL code does have API libraries for some
SNA
I never claimed to be a math whiz, but wouldn't ie be impossible to
reach
zero my dividing any number repeately by 50%? Granted, you can end up
with a lot of numbers to the right of the decimal point, and the
result
gets ahrd to understand - worse: is counter-intuitive.
Zeno's Paradox.
All are nice tools, but they don't really address the administrative
complexity of SFS much. Adding a disk to a storage pool is the place
where most newbies screw up and end up losing the pool. Understanding
the difference between control and data pools is also a tough area. And
of course, it's
Observing new shops, J Random VM Newbie *will* screw up
SFS administration and lose data -- the tools aren't there to let
someone with little VM experience successfully manage SFS.
Puhleeze.
Um, no, not for the total newbie.
Explain to someone who's barely grasped minidisks how/why
Now you guys cut that out! You know what I meant. Eventually
everything
turns to a value of 1 since you would never willingly round a capacity
number *down*.
Nonsense! You just aren't adjusting the scales of the measurement
correctly.
See How to Lie with Statistics for a lesson in data
David: Life's tough at high altitudes. Newbie learn what you need.
Open a manual. Play in a
2nd level system with SFS. Create your own filepool. I know time is a
precious commodity but
z/VM isn't a toy.
All true at a high level. But, I think we're going to have to struggle
very soon with a
I think that you are talking about something that is either going to
hit
us real hard or IBM is going to come out with something that will
eliminate the need to the CMS based tools old folks such as me and,
having met a lot of you at SHARE conferences, most of the rest of you.
One of the
Since each of the machines is handling only a part of the data, you
could have them use FTP to transfer individual files to a central
collection point, say the big mdisk currently in use.
Or Ken Chamberlain's LIB tool, which is IUCV based and blindingly fast.
It's very good at managing large
Surely you jest!!!
Well, no, actually.
Using Linux to build a TPF system was something IBM 'forced' onto the
TPF
users despite their kicking and screaming to the contrary. Just ask
anyone
of the TPF users how much they like using Linux to build their TPF
systems.
Curious. The TPF people I
In the Service
Guide, it does not address TCPIP.. So you are saying you basically do
the same steps as any other component
Yes. The idea with VMSES was to NOT have a unique process for every
component (God knows, that used to be a *evil* thing -- required keeping
every single scrap of paper
And I extoll the value of going in the opposite direction: reserving SLOTs at
the very top
of the CP_OWNED list for more than enough SPOOL volumes.
It's a viable approach. The only concern I'd raise is that no matter how many
slots you reserve, the probability of hitting the end of that
(OK, this makes almost no sense; the only way I can make it remotely
do so
is if it means that they're using Cell BE as the underlying chip,
microprogrammed to do z/Architecture. Maybe as the zIIP or zAAP or
zOOP*
engines?)
Oh, it makes lots of sense, actually. Many risk analysis algorithms
That was my reading too. AFAIK, the T/R cards in 3174s could only be
used by VTAM, because they required the SNA ucode in the 3174. You
needed a 3172/LCS to use T/R (or other technology) for TCPIP.
The TR 3174 that I remember was VTAM only. Not being channel
attached, it
required a 37x5
I did ask once on this(?) forum if there was interest. No response.
The two ANSI REXX functions that are missing are CHANGESTR and
COUNTSTR.
I
coded up my own versions of both, and you can too.
I think that's the key bit: everyone's written their own widget for
this, so not a big enough
Was a 3174 ever a supported device for TCPIP? I don't think so, so regardless,
he's going to need a different device (OSA, LCS/3172, something else...).
-Original Message-
From: Stracka, James (GTI) [EMAIL PROTECTED]
To: IBMVM@LISTSERV.UARK.EDU IBMVM@LISTSERV.UARK.EDU
Sent: 4/11/07
about this. Maintaining an early version of
MAILBOOK got me my first real VM sysprog job (lo these many years ago)
and letting it pass away with a whimper just didn't feel right.
Thanks to Richard for being open to the idea, and helping it to happen.
-- db
David Boyes
Sine Nomine Associates
Besides unwanted terminal interrupts, the S/A programs didn't used to
be
too awfully discriminating as to what type of device they saw an
interrupt on. I remember, once a long time ago and far far away,
having a hard time getting a S/A program, probably DDR, ipled until I
disabled the
I have found having ICKDSF on the PARM disk to be very helpful when I
suddenly found myself without
a PAGE disk.
Oh, there's always going to be exceptions. It certainly does no harm to
have DSF and DDR on the PARM disks. I don't generally, because I can
easily walk to the tape drives and it
AFAIK, RSCS has not yet implemented the SSL protected TCPNJE - there are
protocol changes to enable the encrypted session setup.
You could use a Linux guest on the VM side to run ssh to redirect a
local port on the linux guest to the ssh daemon on MVS/OE and have the
two sides communicate
We are looking into updating our procedures should a failure requiring
barefoot executions of ICFDSF and DDR occur.
Do you recommend having a single IPL tape with both versions on it?
Do you recommend an IPL tape for each product?
Either will work, but I make separate tapes and put them in
On Thursday, 03/29/2007 at 08:21 MST, Miguel
Delapaz/Endicott/[EMAIL PROTECTED]
wrote:
Is it wrong to relish the fact that Alan gets blamed for stuff
that's
not his
fault? :-)
Only if you don't wash your hands thoroughly afterwards...
Although I do recognize a similiar environment it sounds like a UNIVAC
9200 I worked on eons ago. BUT the 9200 was a 12k machine and came
noplace close to even processing at 1 mip and never was mistaken for a
supercomputer.
Could also be one of the very early CDC machines. The boot from
Is there documentation that discusses this package from the security
perspective? The benefits of having it in place are obvious. What I
require is documentation that says no one can modify the configuration
because it has not been assigned an IP address or something of that
nature.
As far
For example he is asking about what
scanning tree parameters are being set,
spanning tree. No special options are set. As long as he has his core
switches set to always win bridge root elections, he'll never know
you're there. 8-)
encapsulation protocol, dot.q,
802.1q is the standard
I am not having a problem at all with how things are done. I was just
curious about why the original developers made DASD management such
a
burden on the sysprog. Especially in the early days. But performance
could very well be the reason.
1) Back then, there *wasn't* much DASD to manage. VM
How do I start the zAAP?
You don't. z/OS does. z/OS is the only thing that can manipulate a zAAP.
Is anyone running multiple VM SMTP servers to address problems with
mail agents getting timeouts because VM SMTP is busy?
I have in the past. You can run multiple servers listening on the same
port by specifying multiple PORT statements in the TCPIP profile for
port 25 with different userids.
But I don't understand how restoring under VM and then IPLing MVS in
another LPAR or on another nearby CEC is any faster than restoring in
the
LPAR and then IPLing the restored system in an LPAR. They are serial
activities.
Restoring a 1 pack VM system, then doing multiple DFDSS restores
32760 on a mod 27. The 27 is to a 9 as the 9 is to a 3. :)
Now, if the mod 27 left Chicago traveling east at 54 mph for 9 hours,
and the mod 9 left Chicago traveling west at 3 mph for 21 hours, which
fish first needed the bicycle?
(Sorry. Never post on antihistamines. It's all ever so
We've just been honoring the 3390 all these years by trying to do things
they would have done them. Had FBA been more popular at the time of the
real 3390's, we might be seeing 3350 mod 81's instead.
Had MVS been able to cope with FBA, rather. FBA was plenty popular with the
non-MVS crowd.
You've all fallen for it! It is a well known fact that you cannot mix
APPLES and ORANGES. Won't work.
Add a tablespoon of cinnamon, two tablespoons of light brown sugar per apple
and orange, and a jigger of really good brandy, and heat on low. Add
teaspoons of honey slowly until you get a
the 3370 was CKD
the 3375 was FBA
and the 3380 was back to CKD
and the 3390 changed the bytes per track but stayed CKD
You've got the 3375 and 3370 reversed. 3375 was CKD.
I note that the correct way to move the spool and nss/dcss is via
SPXTAPE -- can this be used to write to dasd as I have no tape drives
(or volumes) assigned to the VM LPAR ?
SPXTAPE only understands tapes, AFAIK. It'd be nice if it allowed you to
connect a pipe to a CP system service and
You have clarified your meaning of the word loss and I am a happy
camper
now. :-)
So much for the Predator vs Chuckie movie script...8-)
Yes, you can. The Perfkit performance data can be written to disk (see
monitor data collection, assuming you are using the SVC data collection
capabilities that put the Linux performance data into the VM monitor
stream; RMF-PM data collection is more limited). You then use the same
techniques to
I am wondering if IBM can provide support to older version of z/VM 4.4,
considering the fact that it is another protocol similar to the http.
Both LDAP server and client implementations for VM OpenEdition have
existed for quite some time.
With the loss of the Flex 64-bit capability for general
use
Sorry to nitpick, but I don't believe there has ever been a FLEX
64-bit
capability for general use.
I'd say that the unavailability of the 64 bit FLEX *is* the loss I'm
talking about.
On this list (and others), we've been
I believe that you are Preaching to the Choir.
Very possibly. On the other hand, you guys write bigger checks to IBM
than I do. There are also some quiet people lurking on this list that do
have the ear of senior IBMers -- and others -- in ways that I don't.
Don't kid yourself -- HP and Sun
Sure, that's what most of us do for a subset of the syslog traffic.
But the point I raised is that the driver of /dev/console does not
write lines as such but a stream of bytes.
Unfortunately true. Syslog-ng is a little better behaved about that, but
not much.
Let's share the
war stories
I see two problems with this story - one is they
quoted Phil Payne, whose has some kind of vendetta
against IBM going. (I suspect he lost money in an
emulator solution) and two,
His input is pretty small and pretty accurate. Even
for us Mainframe Software costs are hefty...
I think I'd
Has anyone been able to access the Microsoft Active Directory from
CMS?
The open-source LDAP client in OE is capable of browsing the AD tree
(remember, AD is just LDAP and Kerberos 5 with a lot of pretty makeup),
but the CMS Kerberos implementation is Kerberos 4 (and a really antique
version of
I know it requires a (virtual) network connection, but have you
considered to have syslog write the output 'remote' and catch that on
VM ?
Syslog can also log to local files/devices, which doesn't require a
external network connection to work. If you have SCIF active, log to
/dev/console.
Sufficient information, but if you have to kill a connection due to
resource exhaustion, probably the message should be displayed in the
console log without having to turn on tracing to see it. This is the
sort of thing that one would want to catch with automation, eg PROP,
etc.
I have a customer whos is sending files from their VAX system to PSF
on m
y
z/VM system via LPSERVE to the appropriate printer queue.
Separate suggestion from this problem: think about switching to the RSCS
LPD support. It's a lot more stable and useful than LPSERVE, and is part
of the free
Peggy Williams
z/VM - TCP/IP Development
Ooh! A new face!
Welcome aboard! Will we be seeing you at conferences?
-- db
Frances Allen's work on PTRAN also spawned the VM PTOOL work that the
recently deceased Ken Kennedy did at Rice University, which indirectly
funded the creation of a lot of the VM TCP utilities (CMS GOPHER,
WEBSHARE, and dozens more) that launched and maintained a number of
careers of frequent
Paul's experience is more consistent with what we're observing as well.
Following conversations with TSM support, I don't have a lot of hope for
improvement - getting answers like have you considered moving the
server to z/OS? after telling them that the system has only IFLs
available tends to
It all came to light on an IPL. To begin there were no messages on the
hardware console and when we started to IPL we got an error on a CHPID
that belonged to our disk array, it also showed up on the HMC when
displaying the CHPID's. it is now between two vendors that both say it
doesn't
I'd recommend that you look twice at loading things like print servers and
etc. on a zSeries unless you are basically swimming in free MIPS. A lot of
Linux stuff is written with very little, if any, consideration for
efficiency.
I'd modify that statement to be commercial software deployed
Interesting... That hasn't been my experience at all. I recently
migrated
from ADSM/VM to TSM on zLinux and didn't see a significant difference
in
MIPs consumption.
It also seems to be related to the number (and complexity) of the
clients. There is a floor value of resource consumption with
Yes. You can trigger a user defined event in TBSM via SNMP traps and/or
via routing NJE messages through a managed z/OS system if you have the
TBSM agent on z/OS.
Drop me a note offline for more details.
One of our operators has asked if there's a way to send alerts from VM
to Tivoli
So Tivoli Business Systems Manager (TBSM) doesn't have a straight
forward
TCPIP interface like BigBrother and Hobbit?
*Nothing* about TBSM is straightforward. 8-)
Few (if any) of the enterprise management tools like this have simple
interfaces. SNMP tends to be the only supported method for
Webshare is an excellent webserver for a small site.
And positive proof that really useful tools can be written in hours
using REXX and CMS pipelines. Especially when beer is at stake...8-)
-- db
I was being facetious, of course. I just needed to pull Sir Rob's
chain.
(I feel better now.) :-)
I'm sure that little curl on your head is standing upright again now
:-)
WAY more information than we need8-)
-- db
Sounds like a firewall issue to me. Has anything changed in that arena
since then?
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Brian France
Sent: Monday, February 05, 2007 11:00 AM
To: IBMVM@LISTSERV.UARK.EDU
Subject: FTP,
On Mon, 2007-02-05 at 13:31 -0500, Brian France wrote:
At 11:32 AM 2/5/2007, you wrote:
Sounds like a firewall issue to me. Has anything changed in that
arena since then?
At first yes there where fire wall denials between my laptop and the
vm machine, but by opening up 20 and 21 for
On Mon, 2007-02-05 at 14:15 -0500, Brian France wrote:
Mr. Boyes, Mr. Webb.
THANX to both of you. David, by entering passive, the mode was
turned off and all was well.
Glad it was helpful.
I guess it's time for me to write a requirement to change the default
client setup to passive mode.
Chocolates!! What Chocolates?
Comes with the paid support option.
You have to settle for cinnamon rolls if you just mooch the free
version...
-- db
Only SuSE and RH are officially supported by IBM. Both are not
particularly small. We provide a small appliance configuration that
seems to meet some people's needs.
Did you get chocolates too?
You can also choose the coupon for cinnamon rolls. Personally, I recommend
the rolls. Chocolate is so yesterday. 8-)
-- db
You need to use virtual machines as routers. Essentially you're trying
to establish the following configuration:
Outside world -- OSA on one stack - TCPIP stack - Hipersocket -
TCPIP stack -- CTC -- z800 -- TCP stack on z800
If you do this, the two TCPIP stacks connected to the
My brain has totally lost most of it's SCRIPT content today: does anyone
happen to remember what device type for DCF and/or Bookie will produce
human-readable text files (ie, w/o printer formatting commands)?
On Tuesday, 01/30/2007 at 11:37 EST, David Boyes
[EMAIL PROTECTED]
wrote:
My brain has totally lost most of it?s SCRIPT content today: does
anyone
happen
to remember what device type for DCF and/or Bookie will produce
human-readable
text files (ie, w/o printer formatting commands
I've been searching the web to see what happened with Memorex/Telex. As
in who bought them and especially, what happened with the 1174
controller (IBM 3174 plug compatable).
One of my clients has one of these, and we are trying to figure out
what to do with it.
It's more comparable to the
The manuals there didn't have any pictures of the hardware.
The URL I posted has a picture on the front cover.
The 1174 is a SNA device. 4 PUs, each with 254 LUs defined. But
judging by some 1174 manuals, all devices in this configuration are IP
attached (TELNET, TN3270 and IP Printers).
Don't forget to also update SYSTEM NETID on MAINT 490 and 190 with the
CPUids for all the systems you plan on IPLing that pack.
Ideally what I'm looking for is a command that will retrieve the
system n
ame
(which I can't seem to find) and then I can start different linux
guests
based on that
Sometimes this works and I'm assuming that the LPD running within that
printer is lost in those cases.
Yes. Another common cause is that the printer is servicing a request
from another protocol and just not responding to LPR requests at all,
which causes RSCS to time out and stop printing to
Does anyone know if it is possible to hook an IBM 3490-F01 tape drive
to the new z9 BC series processors? (The F01 has a SCSI attachment).
If you attach it to a FCP adapter and use a fiber to copper SCSI adapter
you can get to it as a SCSI drive. It will not be accessible to the base
OS as a
Thanks for your response. Unfortunately, I do not Linux installed so
this is not an option.
Easily fixed. Send me an address offline and I'll send you a tape.
What I notice is that the status of these stuck printers seem to be
stuck in sending state forever but they do respond to a ping.
I just want to point out that SNA makes available, free of charge, a
little utility I wrote called SYSVINIT, which is designed to a) not
pollute your SYSTEM CONFIG, b) deal with the idempotence issue of
AUTOLOG1, c) let you define individual services, with dependencies,
and base runlevels on
Could this Virtual San be some modification of the Shared/Byte File
System
server?
Biggest gotcha there is that the IUCV protocol that drives those SFS/BFS
servers isn't published anywhere, which would make it hard to implement
for
non-IBM systems or mostly OCO systems, eg Linux or z/OS.
We are in receipt of a z9, the mainframe has been placed over
1.5miles
away from the data center where the printer, etc is. We have single
mode
fiber between the two sites. Has anyone used any conversion equipment
utilizing the ESCON multimode channels to single mode and back
to multimode?
I understand the proprietary nature of IUCV and therefore would expect
IB
M
to write the OCO device drivers
IUCV isn't hard -- that's been done. It's the dataflow verbs and
responses that make up the conversation between a SFS/BFS client and the
SFS/BFS server that are the undocumented bit.
Maybe migrating the entire VM system would be neat, but I don't think
it would be my top priority. With current technology (CSE, shared
IUCV, shared DASD, etc) you can already build a set of VM systems that
look similar enough that you don't care where the virtual machine is
running.
I would
that forcing the entire virtual machine to page out and let it page
back in on the other side sounds logical and maybe not the most
complicated part. But remember it would be to DASD unless we also
architect shared XSTORE while we're at it.
Another approach would be to implement NUMA in CP.
I would suggest that eligibility for migration would require that the
user
have an identical directory on the target system. This ensures that
disk
geometries, network connections, memory size, CPUs, etc. are
unchanged.
While you might be able to construct scenarios where this is not
Historically, what I had (VCTCA and IUCV connections), was P2P. With
P2P
you don't have a router address nor do you have a broadcast address.
Just
wasn't needed.
Well, you do have a router address; it's just the other end of the link.
The presence of broadcast depends on the type of media.
At the time, I sat down and wrote a sort of 'cookbook'
approach to what I wanted, and how I got it, and David Boyes
generously volunteered to set ut up as a pdf document
on SNA's website.
I'll be happy to provide similar service for this document as well.
Anything that gives me an opportunity
In this I would agree, except to say watch out if you get into
OSPF/RIP,
because (according to our z/OS brethren) the OSPF protocol doesn't
recognize non-subnetted networks and subnets are required (RFC 3021's
31-bit masks notwithstanding, I guess).
Hmph. Class D routes and non-subnetted
Well, that's kind of what the ACIGROUP functionality is for, but it
really requires an ESM. The other problem is that you can be in only one
ACIGROUP at a time, so if you need combinations of privileges, you end
up defining n**2 possible groups.
If you have RACF or VM:Secure or some such,
Bug, IMHO. Valid route, should be valid syntax. The fact you *can*
shoot
yourself in the head is not the tool's problem. Your gun, your foot.
[snip]
I agree, allowing customers to shoot them selves in various parts of
their
anatomy is *not* the tool's problem. However, it does become our
OK, I appended my original post so the picture would be available.
To
answer several responders: convincing my network people is no
problem,
the
problem is they don't know any more than I do because I'm the network
peo
ple
;-(
Any ideas?
On the device that is the default route for
But, SNA is
more of a Linux oriented company.
Definitely *not* the case. That's just a small part of what we do.
Part of my question to all, is there a VM oriented site for
documentation and other practices? VSE has one. Linux has many. VM
has a download area for tools, but I don't see
As RTM doesn't work at all on 5.2, if you want the replacement to work,
then yes, you need to apply it (and license PerfKit).
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Austin, Alyce (CIV)
Sent: Thursday, January 18, 2007 5:31
Tom,
See the attached PDF diagram -- it might help you to understand the
overall approach. All the white circles in the diagram need to have
unique IP addresses, and the ones on the ends of the CTC/IUCV links need
addresses in the same subnet.
1. I do need a HOME statement for each
See the attached PDF diagram -- it might help you to understand the
overall approach. All the white circles in the diagram need to have
unique IP addresses, and the ones on the ends of the CTC/IUCV links
need
addresses in the same subnet.
Blech. The attachment got stripped by the mailing
I have done that with a few apps, but we generate a ton of VSE JCL
using
ISPF file tailoring. I've never really found a way to get away from
it
that is as simple and easy as file tailoring. Any thoughts there?
CUA2001 does a lot with XEDIT, and you get the full power of XEDIT in
the process.
1001 - 1100 of 1311 matches
Mail list logo
