Use of JWT

Is the use of JWT into subsystems on z/OS recommended? As I see it you can create a string with generation date, expiry date, and userid name. This is signed by someone's private key. In simple terms this is a JWT. The recipient can validate the signature by using the public certificate. How does

Re: SYSLOG or OPERLOG scanning tools

ion Security Continuous Monitoring for Z/OS, zLinux > and IBM I **| * > > *|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 986404 **|* > *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* > > > > > > On Wed, Jul 23, 2025 at 10:10 AM Colin Paice < > 00

Re: SYSLOG or OPERLOG scanning tools

I used to have some rexx which processed syslog/joblogs. One of the key bits was to work from the bottom towards the top. I think I did this because you do not know how many parts of multi line WTOS there are. I used to count the unique message instances and flag important messages "Although this

Re: [EXT] Dataset Alias - determine if used

Put a racf profile on it, no access, but with warn instead of fail. Colin On Fri, 11 Jul 2025 at 00:10, Rebecca Martin < 050348c1817e-dmarc-requ...@listserv.ua.edu> wrote: > I have done that. That is how I found out about the aliases. Tomorrow I am > going to test on our lpar and see if SMF 1

Re: Saving/Restoring the linkage-stack ptr (CR15)

If you are into clean ups etc a good practice is. Main line code Do something set Bit0 Do somethingelse set bit1 ... In the recovery code you do the opposite order (this is important) if bit1 then undo something else if bit0 then undo something. Where something could be a database call, set an

Re: setting up user and operator commands.

My question about consoles came up because I was following some documentation on using a "console" request to z/OSMF from Linux. My initial view is, it seems very open and not well documented. Are there any best practices on setting this up? Some of the things I've learned are 1. Grant acces

Re: setting up user and operator commands.

3:41:54 +0100, Colin Paice > wrote: > > > COLINX 0290 CANCEL > > TSU03273 0090 IEE341I NOT ACTIVE > >There is no * on the front of my console-name > > An * (asterisk) in the first byte of syslog lines (in this case before > conso

Re: setting up user and operator commands.

hink it wise to create MVS.MCSOPER.mcs/smcs-console-name > profiles with no permissions so they can't be specified as their use may > cause confusion. > > Regards, Bob > > Robert S. Hansel > Lead RACF Specialist > RSH Consulting, Inc. > 617-969-8211 > www.linkedin.

Re: setting up user and operator commands.

ing, Inc. > 617-969-8211 > www.linkedin.com/in/roberthansel > www.rshconsulting.com > > -Original Message- > Date:Sun, 29 Jun 2025 17:29:25 +0100 > From:Colin Paice > Subject: setting up user and operator commands. > > I'm struggling to understand th

Re: Assembler reading RMF data

If you just want to look at the data ... have a look at https://github.com/colinpaicemq/SMFFormatter Colin On Mon, 30 Jun 2025 at 16:14, Mark Pace < 077be5349510-dmarc-requ...@listserv.ua.edu> wrote: > That did it. > > Thank you so much. > > On Mon, Jun 30, 2025 at 11:06 AM Ituriel do Neto <

setting up user and operator commands.

I'm struggling to understand the set up for userid and console permissions, I can specify a console-name for example z/OSMF https://10.1.1.2:10443/zosmf/restconsoles/consoles/*EMCS003*, or the TSO command CONSOLE NAME(*EMCS003*). My userid needs read access to the profile MVS.MCSOPER.EMCS003. As I

Re: Instruction trace

In the past I've used a SLIP GTF instruction trace. Not for the faint hearted On Tue, 24 Jun 2025 at 19:02, Joseph Reichman < 05812645a43c-dmarc-requ...@listserv.ua.edu> wrote: > Hi > > I’m looking to do an instruction trace of a complicated assembler program > > I know I have to watch out

MFA and scripting

MFA is getting to be more of a requirement. How do people handle MFA when scripting from Windows and Linux? The basic rules are something you know, and something you have - which makes it hard for scripts as there is no person to type things in. We can do certificate logon which avoids a passwo

Re: REXX say & OOREXX was: In IBM-land, AFP means...

I think SAY came about because of history.In the beginning, most people using REX(X) ran it on CMS interactively and it chatted to the end user running the exec. If you wanted to write or print to a file you used execio. Today I still view "Print" as writing to a file/printer rather than a t

Mapping certificates to a userid.

I've found I can map a certificate to any userid eg RACDCERT MAP ID(START1) - WITHLABEL('ZZ') - SDNFILTER('CN=zzcolinpaice.O=cpwebuser.C=GB') Which seems to allow me to do a certificate logon and become any userid. This includes using protected userid. Are there any controls I can use to

Re: STC Userids

Seymour, You said *I would go further and say that most production jobs should run under PROTECTED userids. But then, I'm paranoid and don't even trust myself.* Are you saying most production jobs should be run as started tasks, or there is a clever way of submitting a job which runs under a prote

Re: STC Userids

I've been working with a product on z/OS, and I've got the point where it says "alter the started task userid to give it a password". I'd like to take the comments made, and make a blog post on the STC ID topic- giving credit to contributors. If any one has a problem with this, please contact

Re: STC Userids

Nothing immediately. But people could logon with invalid passwords, revoke the user ID, your stcs won't start until the user ID is reset, so causing an outage On Wed, Jun 11, 2025, 14:06 Roberto Halais < 05a843342c5e-dmarc-requ...@listserv.ua.edu> wrote: > I would like some feedback on what

Re: IBM stock new high today!

I remember when peopled bonus depended on the share price. The board bought back shares, the share price went up, and so executives got a nice bonus. Despite the downward trend in share price On Tue, Jun 10, 2025, 14:25 Phil Smith III wrote: > That's a fun idea, wish I'd done it. Why two? Just

Re: zOSMF Datasets

Enabling Java shared classes ( and saving/restoring) across IPL may speed up the start. On Tue, Jun 10, 2025, 00:49 R Dooley < 0818b6c21e0e-dmarc-requ...@listserv.ua.edu> wrote: > Agree. IBM does need to continue making enhancements/improvements to the > z/OSMF ServerPac process. While wor

Re: Seems like TAR requires AR mode

One of my first jobs was to update the manuals with TNLs. It was great when we got softcopy On Fri, Jun 6, 2025, 15:22 billog...@optonline.net wrote: > * > IBM never changed form numbers for TNLs,... > > This goes back a few years (into the 1960s and 1970s?) but I still have > distinct memori

Re: CSRCMPSC Compression macro; Obtaining page-aligned storage using LE / Cobol

the needed size could be passed > as parameters, > maybe also a subpool number. > > HTH, kind regards > > Bernd > > > Am 29.05.2025 um 19:13 schrieb Colin Paice: > > Allocate a big buffer. Address p > > Calculate p + 4096 > > / 4096 * 4096. Should give you

Re: CSRCMPSC Compression macro; Obtaining page-aligned storage using LE / Cobol

Allocate a big buffer. Address p Calculate p + 4096 / 4096 * 4096. Should give you he page aligned storage On Thu, May 29, 2025, 16:57 Richard Zierdt < richard.zie...@freschesolutions.com> wrote: > From assembly services reference manual for the CSRCMPSC macro: "Note that > the expansion diction

How do I purge spin'd output

I've a long running job, and have put a SPIN.. on the output. I've got lots of spool files... how do I purge old ones, from SDSF? Colin -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@li

Re: Interview questions

A couple of things - do not make the interviewee embarrassed. You want to see if the relationship would work. If they are good.. you want to sell organisation to them and make them join you. "How would you go about doing (something easy) ..." three good answers are a) I don't know or b ) I'd go a

Z/OSMF and ibmzosmf

In the Zowe doc it talks about the z/OSMF service ID ibmzosmf, but I cannot find a reference to it. Is it actually something else? I cannot find where this is defined in z/OSMF. Service id in z/OMSFis used to mean plug in reference . Another question Can z/OSMF be used so it uses a differ

Re: RTFM

One problem with documentation is often it is written by experts for experts "here is all we know about..." rather than task based. "So you want to do ... here is the info you need, with links to the parameters" .The task based also needs "and when it doesn't work ... try the following".

Re: Why TTLS Error 428 "No private key"?

The server userid needs access to the keyring. If the private key belongs to the server's userid, then the server's userid needs read access to the keyring. If the private key belongs to a different userid, the server's userid needs update access to the keyring. See here

Re: LE routine IGZXLPKA consumes considerable CPU time

Expanding IGZXLPKA may tell you which CSECTS are being heavily used, which may help you dig down. I cannot tell from your text whether the proga and progb are called the same number of times, or if there is logic so one is called many more times. The % time is the number of samples where the progr

Re: CSFKGUP does not feed CSFSTMNT file

I wrote some ICSF utilities to fill the holes in the IBM supplied utilities. See https://github.com/colinpaicemq/EasyICSF Please contact me offline if you need more help Colin On Mon, 19 May 2025 at 20:20, Radoslaw Skorupka < 0471ebeac275-dmarc-requ...@listserv.ua.edu> wrote: > I have found

Re: ZOS/JES2/JES3 Command Quick Reference Guides?

I wrote https://colinpaice.blog/2020/06/24/my-favourite-z-os-commands/ which I would be happy to update it with suggestions. Colin On Mon, 19 May 2025 at 20:15, Paul Gilmartin < 042bfe9c879d-dmarc-requ...@listserv.ua.edu> wrote: > On Mon, 19 May 2025 13:26:01 -0500, Steve Estle wrote: > > >

Re: [EXTERNAL] Re: problems with openssl in USS

Ive got past the original problem of using openssl. I can create a certificate and use it. If I try to display the private key contents using *openssl x509 -in $1.pem -text -noout*, it has problems. I dont think openssl x509 supports private keys - though I think I have done this once on Linux...

Re: problems with openssl in USS

It is on the CBT machine The command gave OpenSSL 3.4.0 22 Oct 2024 (Library: OpenSSL 3.4.0 22 Oct 2024) built on: Thu Jan 23 02:26:02 2025 UTC platform: OS390-ASCII options: bn(32,32) compiler: clang -fzos-le-char-mode=ascii -std=gnu11 -mnocsect -fno-short-enums -fno-builtin-malloc -fno-buil

Re: problems with openssl in USS

No port.. the open ssl commands to create a certificate, and sign it On Mon, May 12, 2025, 18:38 Kirk Wolf wrote: > Which port of openssl? > > Kirk Wolf > Dovetailed Technologies > https://coztoolkit.com > > On Mon, May 12, 2025, at 11:11 AM, Colin Paice wrote: > >

problems with openssl in USS

I've been struggling for a day with a problem with openssl on z/OS It creates the key.pem file - but then cannot use it! With message *Could not find certificate from colinpaice.key.pem * Has anyone seen this before? + openssl genpkey -out colinpaice.key.pem -algorithm RSA -pkeyopt rsa_keygen_b

Re: What has IBM ever done for us? (probably more than I know)

Year 2k problem ? On Fri, Apr 25, 2025, 19:48 Rupert Reynolds wrote: > Yes, true! I had "Winchester" in my mind, but I didn't remember why. > > Roops > > On Fri, 25 Apr 2025, 13:48 Bodra - Pessoal, < > 02eda2bc565a-dmarc-requ...@listserv.ua.edu> wrote: > > > Missing 3340 Winchester Drive (He

Re: WLM

You can do File -> Save as -> XML Colin On Wed, 23 Apr 2025 at 17:00, Steve Beaver < 050e0c375a14-dmarc-requ...@listserv.ua.edu> wrote: > We have a z16 where the WLM was set up 25 years ago. I have extracted the > > WLM. > > > > Does anyone have a REXX that I can feed the extracted file to

Re: Day of week from a program

Except at the end / start of day, because of leap seconds On Thu, Apr 17, 2025, 16:49 salva wrote: > Joseph, if you have (or can get) a TOD/STCK, then: > > mod(stck%(4096e6*3600*24),7) = dow based on monday = 0, sunday = 6. > > Hope that helps. > > > El jue, 17 abr 2025 a las 16:42, Joseph Rei

Re: z17

Our performance guy had his own LPARs with dedicated engines. After a power down his LPARs were always IPLed first, to ensure his CPUs were all in the same book. Once the LPARs were not IPLed in the right order, and one of the CPUs allocated to his LPAR was in a different book. I think this mad

Re: z17

I've been writing up some performance stuff, so this is very topical. An instruction like L 4,=F'99' requires a "lot" of work for the =F'99' eg calculate the virtual address, convert to real page, get the storage. The Load Immediate R4 with =F'99' the value is in the instruction it has to do

Re: z17

It's a few years since I was down in these weeds, but I remember someone saying these days, data access time is more important than CPU speed. I remember working on a product that many TCBs could access concurrently. We had a Compare and Swap on the "next trace entry" field. This was a killer, bec

Use of JZOS batch

Does anyone have any experience of using jzos over Unix Services? I've used it in the past and it worked fine. I wonder why it is not more generally used (eg by Liberty, zOSMF, Zowe etc). Does it have better performance? Colin ---

Re: How do I enable SMF for TCP/IP Record type 119?

Plan b) use https://colinpaice.blog/category/wireshark/zwireshark/ on z/OS You can specify an IP address or port, and it produces a wireshark format file which should have the info you need Colin On Mon, 14 Apr 2025 at 11:53, Lindy Mayfield < 05a2ba9c925b-dmarc-requ...@listserv.ua.edu> wrote:

Re: How do I enable SMF for TCP/IP Record type 119?

be available at cbttape.org? > Where I work, CBT Tape is considered a trusted source. > > Regards, > > Mark Regan > > > On Mon, Apr 14, 2025 at 8:07 AM Colin Paice < > 059d4daca697-dmarc-requ...@listserv.ua.edu> wrote: > > > Plan b) use https://colinpaice.

Re: DOGE wants to modernize Social Security’s legacy tech — what could possibly go wrong? – Computerworld

They may be able to automate changing the code to a fancier language - that's the "easy bit" I can see the problems occurring when they run both systems in parallel for 6 months, and try to find the cause of the two systems giving different results - this is the hard bit. I remember having problem

Re: Fwd: Questionnaire on Rexx Languages and the Community

I remember development did a survey and found they got the "wrong" answers from customers. Q:What is the average size of your data? Answer 5001.25. How do you get a quarter of a byte? Calculate the total size of data, divide by count - simple. One customer had 95% of size under 4KB, 2% at 50KB, a

Re: Reentrant Lite ?

Cics has a mini header and trailer to detect storage overlays so it would be 4k - a few bytes to if you wanted to exploit 4k boundaries without wasting storage On Fri, Mar 28, 2025, 16:57 Mike Schwab < 05962a42dc49-dmarc-requ...@listserv.ua.edu> wrote: > CICS and IMS/TM have transaction defin

Re: Reentrant Lite ?

C has a stack which does this. There are some places where you cannot get storage (some exits) so we had to pass it on as part of the userparm On Fri, Mar 28, 2025, 15:49 Richard Zierdt < richard.zie...@freschesolutions.com> wrote: > When coding reentrant modules, one practice is to Obtain Stor

Re: Subject: IBM z16 VTAM TRLE definition

A run book is fine to a bit like automation, both seem easy. The hard part is when things go wrong. Writing the golden path is 1 per cent of the work. The rest, including when to call for an expert human is the hard part On Fri, Mar 28, 2025, 14:26 z/OS scheduler < 07b0d5270c64-dmarc-requ.

Re: FTPS for IBM download

Can I spell it out a different way. Your client can check the validity of the server's certificate, and make sure it is IBM you are connected to. To do this, you need a CA certificate matching the IBM server's certificate. Most machines have a wide selection, and so this should not be a problem.

Re: FTPS for IBM download

Any self signed would also need to be on the keyring - but Self Signed should never be used outside of a sandpit - so ignore this. All CA certificates used to validate certificates need to be on the trust store keyring. The server's certificate needs to be on the private-key keyring. Some people

Re: MapMVS

; Sent from Outlook for Android<https://aka.ms/AAb9ysg> > ____ > From: IBM Mainframe Discussion List on behalf > of Colin Paice <059d4daca697-dmarc-requ...@listserv.ua.edu> > Sent: Sunday, March 16, 2025 5:44:45 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re:

Re: MapMVS

; Rob Scott > Rocket Software > > ____ > From: IBM Mainframe Discussion List on behalf > of Colin Paice <059d4daca697-dmarc-requ...@listserv.ua.edu> > Sent: 12 March 2025 11:20 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: MapMVS >

Re: MapMVS

link pack area > directory. > > Rob Scott > Rocket Software > > ________ > From: IBM Mainframe Discussion List on behalf > of Colin Paice <059d4daca697-dmarc-requ...@listserv.ua.edu> > Sent: 12 March 2025 11:20 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Su

MapMVS

Many moons ago, when doing performance work, I used a program called MAPMVS which would map an address space and give you a report of loadmodule and Csect and it's address in the address space (and LPA), so it was easy for tools to look up a PSW and see which csect it was in. Does this exist anywh

Re: Java shared classes, persistent and mmap

s maxshare storage, or is it better to use the shmat type of shared storage Colin On Tue, 11 Mar 2025 at 11:07, Colin Paice wrote: > Denis, > > That solved it - thank you. I''ll blog it > > Colin > > On Tue, 11 Mar 2025 at 09:06, D Gaebler wrote: > >&g

Java shared classes, persistent and mmap

I'm looking into the new persistent option of Java shared classes, and I'm getting JVMSHRC337E Platform error message: EDC5132I Not enough memory. This may be due to OMVS MAXMMAPAREA. I think it is connected to the mmap() function. If I try to use mmap with a regular file in a zfs, I'm getting

Re: Using CSNBRNGL

Check in Cryptographic Services Integrated Cryptographic Service FacilityApplication Programmer's Guide SC14-7508-09. Ive put icsf C code in https://github.com/colinpaicemq/EasyICSF, so you can get to see what coding "rules" etc looks like It looks pretty easy if you can define character strings

Re: Zowe certificate

I found the Zowe documentation hard to follow, there is no clean golden path, and there are a lot of distractions in the documentation (and some of it doesn't work). I've been working with the team and come up with some doc which one day may get fed into the product. It is still work in progress

Re: Java shared classes, persistent and mmap

Denis, That solved it - thank you. I''ll blog it Colin On Tue, 11 Mar 2025 at 09:06, D Gaebler wrote: > I once had a similar issue, it turned out to be: > MAXSHARE options set for SMFLIMxx? > https://eclipse.dev/openj9/docs/xshareclasses/#persistent > > Unfortunately the z/OS docs say neithe

Re: Java shared classes, persistent and mmap

0f7-dmarc-requ...@listserv.ua.edu> wrote: > What are the RACF OMVS settings for the ID you are using? TSO LU racfid > OMVS NORACF > > > On Mon, Mar 10, 2025 at 12:46 PM Colin Paice < > 059d4daca697-dmarc-requ...@listserv.ua.edu> wrote: > > > I'm looking i

Re: Cost of an outage (was: The mainframe is alive)

One large,online share dealing company I worked with said ( 10 years ago) 1 minute down, costs $1million 1 day down - we are out of business. This was due to fines etc from the stock exchanges, and the cost of having to buy shares at a potentially higher price. Once I went on site - and there w

Re: The mainframe is alive

I think it is horses for courses. If you have mainly read only data, then having thousands of "commodity hardware" etc Linux or Windows is a good solution. If you have a lot of read/write datac which needs to be consistent or where you need a lot(GB/second) of data "close" (sub millisecond) to yo

Java startup performance

One problem with the startup performance of systems like Zowe, is that they cannot exploit shared classes caching, because the classes are loaded from jars within jars. I've raised an "idea" https://ibm-z-software-portal.ideas.ibm.com/ideas/JSDK4Z-I-47 asking for all classes to be loaded into the s

Question about _BPX_SHAREAS=YES.

I'm a it fuzzy about _BPX_SHAREAS=YES and if it is working (or not) I have a shell script(s2) which prints out the pid, and parent pid. I call this from another script s1. The output from _BPX_SHAREAS=YES sh s1 _BPX_SHAREAS=NO sh s1 Both print the same parent, so it looks like it is having no eff

Re: Idea received: Provide a negative exclude command for EDIT and VIEW

I haven't been following too closely but I find x all; F ABC flip shows me all rows without ABC On Fri, 7 Feb 2025 at 21:46, Seymour J Metz wrote: > No, the intent is that it not show lines initially excluded. > > -- > Shmuel (Seymour J.) Metz > http://mason.gmu.edu/~smetz3 > עַם יִשְׂרָאֵל חַי

SMF 92-11 records

Does anyone have any experience with the SMF92-11 record? There is a field SMF92CFG and bit 3 is File was cached. This is always off - even though the file was used a few seconds ago. This looks a useful field to see if the file had I/O or was in memory. Colin -

Re: Use of ZIIPS

he x86 cache. > > On Wed, Jan 29, 2025 at 12:31 AM Colin Paice < > 059d4daca697-dmarc-requ...@listserv.ua.edu> wrote: > > > I am running Zowe on my zPDT system. > > > > The ZIIPS are running flat out ( with waits for ZIIPS) but the GCPs are > > pretty id

Strange file behaviour in Unix

Looking at the SMF START 92-11 for individual Unix files, I'm seeing 100s of records like pathname /tmp/shbdFEgaeEA reads=0 write=0 directory reads 8. What is going on ? what does dir reads> 0 but no reads act mean? what is using this file - and can we stop it(grin) Colin ---

Use of ZIIPS

I am running Zowe on my zPDT system. The ZIIPS are running flat out ( with waits for ZIIPS) but the GCPs are pretty idle. Ive IIPHONORPRIORITY=YES which says use GCP if shortage of ZIIP. Is there anything else I should be looking at? Colin -

Java Usage

I'm running Zowe on my zPDT system. The two ZIIP engines are running flat out, but the GCPs are ticking over. I thought work would use GCP if the ZIIPS were busy. I have explicity set IIPHONORPRIORITY=YES ( *Specifies that general purpose processors run both zIIP processor eligible and non-zIIP

Re: Two related C macro questions

You might try DEF (Y2038_LEV2R3) or DEF (Y2038_LEV2R3=1)instead of DEF (Y2038_LEV2R3=).DEF (Y2038_LEV2R3=) is correct syntax, but maybe there is a bug. Colin On Sat, 25 Jan 2025 at 19:44, Charles Mills wrote: > IBM "Classic" XLC C++ V2R5 > > The fundamental problem I am trying to s

Re: AT-TLS FTP to RedHat 9 wsftp server

The client usually sends up a list of acceptable cipher specs, and the server picks one. Perhaps you need to change the client to add more. For example from my definitions TTLSCipherParms AZFCipherParms { V3CipherSuites TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 V3CipherSuites TLS_ECDHE_ECDSA_WIT

Re: REXX Outtrap Secret

I tend to take a PDF and extract "chapters", so from TCPIP config reference. I use pdftk on Linux to extract the section(s) on AT-TLS and make one PDF. This makes it easier to search. If you search for PORT in the online, or full pdf TCPIP docs you can't find the one you need. Having pdf chapte

Re: EZD1286I ATTLS

If you contact me offline,I'll see if I can help. Please send me (offline) the other trace entries you got Colin On Sun, 19 Jan 2025 at 11:20, Peter < 05e4a8a0a03d-dmarc-requ...@listserv.ua.edu> wrote: > Hello > > I received a rc 5006 initial handshake error while Ftping over tls. > > Is it

Re: Does this make any sense?

I saw a similar effect, but with DB2. The customer was a highly regarded bank, and had some very clever application programming techniques. For example EXEC SQL QUERY Select version from application.table where application = "PAYROLL" If version > ... { new function } So by setting a flag in a t

Re: REXX Outtrap Secret

For some of my "books" I had little coloured tabs/labels on pages... I knew the red one half way down was the ... command. The red one at the top was for ... The book opened at the frequently used pages. I use a highlighter on important phrases. A month after I joined IBM, I took the CMS co

Re: Device/link and interface statement

I think IPV6 only had interfaces. I would guess that having one code base of just interfaces would save development and test cost. Any enhancements would only need to be done once. Colin On Thu, 16 Jan 2025 at 11:33, Jake Anderson < 0655e880aa7d-dmarc-requ...@listserv.ua.edu> wrote: > Hello

Re: Save CPU in z/OSMF and reduce its startup time

< 07116c5c4437-dmarc-requ...@listserv.ua.edu> wrote: > On Wed, 15 Jan 2025 09:48:33 +0000, Colin Paice > wrote: > > > >I'm hoping to look into this... but I cannot get z/OSMF started with an > >NISTECC certificate (problems loading keyring) - it only seems to work > wi

Re: Save CPU in z/OSMF and reduce its startup time

I've got all the tuning things enabled I suspect the performance report does not match reality. I expect most people start z/OSMF once per IPL. If so, the implemented shared classes give no benefit, because it is the initial start up - which creates the shared in memory cache that costs CPU.

Re: Save CPU in z/OSMF and reduce its startup time

available with shared classes - but having one level for the JVM, and another level for z/OSMF etc might help. Colin On Tue, 14 Jan 2025 at 03:17, Andrew Rowley wrote: > On 11/01/2025 7:33 pm, Colin Paice wrote: > > The idea says use the existing Java support to harden the shared >

Re: z/OS cipher suites for TLS

Most of them. See. https://www.ibm.com/docs/en/zos/2.4.0?topic=parameters-v3cipher. You can specify multiple v3cipher. Are you asking which ones cannot be used if ICSF is not active? Colin On Mon, 13 Jan 2025 at 08:01, Jake Anderson < 0655e880aa7d-dmarc-requ...@listserv.ua.edu> wrote: > Hel

Capturing CPU used

I'm running ZOWE. The started task kicks off various SH commands. In SDSF I see these address spaces start, use lots of CPU and end. The CPU used by the original started task does not include the CPU from the threads it kicks off. Is there any way of configuring it, so the original task get

Save CPU in z/OSMF and reduce its startup time

Ive created idea https://ibm-z-hardware-and-operating-systems.ideas.ibm.com/ideas/ZOS-I-4378 z/OSMF enables Java shared library support, (it saves a copy of libraries in memory), but does not exploit it. It is exploited if you restart z/OSMF a second (or more) times within IPL. I reckon it save

Re: REXX and RESTAPI calls

Another example is REST using MQSeries in a stateless flow. 1. The content format is a black block, often a terse/Cobol/C structure, not XML or HTML 2. It is self contained, so if there is a business transaction in several parts( eg signon, query, take action) the request parts can go

Re: Assembler vs. assembly vs. machine code

Assembler vs machine code. I remember being at a meeting with some of the Pok hardware people, and was told the people responsible for coding the microcode for the Load instructions, sit right across the hall from the people who code the Store instructions. Quote*: Great fleas have little fleas* up

Tracing encrypted data into z/OS

I had blogged Collecting a wire-shark trace with TLS active for a browser where you could specify an environment variable *export SSLKEYLOGFILE=$HOME/sslkeylog.log*. OpenSSL would write the key to this file, and Wir

Does anyone use the RMF GPMSERVE

I'm writing a blog post on how to use and protect GPMSERVE, when using a REST API to get data. The doc says you can create a profile CLASS(APPL) GPMSERVE to control access. I've created this profile and it does not seem to be used. It looks like anyone can get data ! I've done a RACF trace, a

Re: z/OS MF abend

Hi, There are several possible causes 1. everything just takes a little bit more storage than it used to 2. You have a storage leak 3. You have fragmentation How to report storage usage 1. SDSF real storage gives a bit of an indicator... it should increase then level out.i

Easy AT-TLS configuration and reporting

For those wanting to get into AT-TLS, I've written a blog post https://colinpaice.blog/?p=27069, and put some python code in https://github.com/colinpaicemq/EasyAT-TLS. It summarises the pasearch report (by a factor of 10!) and allow you to define AT-TLS rules easily! I would welcome any comment

Re: z/OS message code length

I thought there was a standard... (perhaps 40 years ago) First 3 letters = allocated to the product. Starting with A to H is for IBM products 4th letter component within product 5...n-1 message number Last message type I,W,E,A,T Colin On Thu, 19 Dec 2024 at 15:22, Phil Smith III wrote: > Thanks

Does anyone have problems with AT-TLS configurations?

I found it hard to understand the output of the AT-TLS command pasearch, and I find it hard to configure AT-TLS manually ( and worse with z/OSMF). I was wondering if this is a common problem. I've written a small amount of python which takes the output of pasearch and produces a summary for examp

Re: c89 syntax errors despite using the SSCOMM compiler option

Could be a code page issue. USS users guide says The LC_SYNTAX environment variable The POSIX portable character set has 13 characters whose encoding might vary on different EBCDIC code pages: Right brace (}) Left brace ({) Backslash (\) Right bracket (]) Left bracket ([) Circumflex (^) Tilde (~)

Re: Old ISPF application scripting from batch?

Do you get a "reconnected message" ? If so, lots of PF3s and logoff ... then start again On Fri, 8 Nov 2024 at 17:53, Farley, Peter < 031df298a9da-dmarc-requ...@listserv.ua.edu> wrote: > I am asking this question here because the ISPF-L list has been pretty > dormant for a while now. > > We h

Are there header files for IPCS macros

Has anyone got C header files for IPCS? I wrote a verbexit many years ago - but that was in PLX. Has anyone done it in C? Would header files for IPCS be generally useful? Colin -- For IBM-MAIN subscribe / signoff / archive a

Re: How do I raise an idea on Security server?

Thank you - it worked Colin On Wed, 6 Nov 2024 at 21:13, David Geib wrote: > https://ibm-z-hardware-and-operating-systems.ideas.ibm.com/ > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to li

How do I raise an idea on Security server?

I would like a RACF set trace option to say trace only non zero return codes. How do I do this? I tried using https://ibm-z-software-portal.ideas.ibm.com/ideas although this has entries for CICS etc. It has no entries for Security Server, or z/OS. How do I specify Security Server? BTW: It looks

Re: Bounded string move?

I think this used to be hardware dependant and amount of data moved. Mvcl is interruptible. One product used to use a macro which checked a flag to decide whether to use mvcl or mvc loop. On Thu, Oct 31, 2024, 20:28 Charles Mills wrote: > @Kirk: +1 > > @Shmuel: you know that an MVC loop is dram

Re: How to FTP a Variable-Length File to the Mainframe

As far as I remember, you need to use the site command from Linux to z/os. Something like site recfm vb lrecl 20 blksize 200 pri... Because there are default attributes you can setup Colin On Thu, Oct 24, 2024, 08:43 Jason Cai wrote: > Hi all > > I followed these procedures: > > 1. Created a

Re: File Manager and viewing tracks

l Message- > From: IBM Mainframe Discussion List On Behalf > Of Colin Paice > Sent: 18 October 2024 17:06 > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: File Manager and viewing tracks > > Did you check out the return code ? > > Were there any other messages on t

  1   2   3   4   5   >