So long, farewell,Auf wiedersehen, goodbye

Tomorrow marks my last day at Time Customer Service as the closing of the division is completed. After 8573 days, what a long strange trip its been. I've close to retirement, but would like a few more years. Looking for remote z/OS System Programmer positions seems to be harder than I initially

Re: The WHY of the POR

This thread brings me way back to the PORs needed for MVS/XA testing on the 3081. Shut down production MVS/SP POR to MVS/XA mode Test MVS/XA Shut down MVS/XA POR back to MVS/370 mode IPL MVS/SP Each POR took about 30-45 minutes from what I recall. Tom Conley wrote on 1/17/19 9:19 AM: There is n

Re: ZFS RECORG=FS

A zFS is a specially formatted VSAM LDS. How are you creating the ZFS? Hervey Martinez wrote on 12/11/18 3:59 PM: Working on HFS to ZFS conversion and the DFSMS manual for zos 2.3 mentions the RECORG=FS to be used for ZFS files. In creating a test case in ISMF, it does not recognize this parm a

Re: LXRES best practices

AFAIK it's not. If so, please educate me. Mark Jacobs Joseph Reichman wrote on 12/6/18 7:48 AM: Wasn’t aware that name/token was valid across an ipl > On Dec 6, 2018, at 1:35 AM, Ed Jaffe > wrote: > >> On 11/29/2018 5:17 AM, Joseph Reichman wrote: >> I am

Re: ECSA tuning clarification

allow for unexpected spikes. YMMV. Mark Jacobs Peter wrote on 11/12/18 1:18 PM: I meant the size On Mon 12 Nov, 2018, 10:08 PM Mark Jacobs - Listserv < mark.jac...@custserv.com<mailto:mark.jac...@custserv.com> wrote: By tuning, do you mean size of, or something else? Peter wrote on 11/

Re: ECSA tuning clarification

By tuning, do you mean size of, or something else? Peter wrote on 11/12/18 12:43 PM: Hi This is just general question and ignorant about this area. So wanted to get some suggestions and pointers about ECSA running. What are the factors that decides the tunning of ECSA value for zOS ? Please sh

Re: Any reason to still use SWA=BELOW?

If something/some program executing in that jobclass (I assume it's a batch initiator) is still running control blocks and not using SWAREQ, then yes it might be needed. Mark Jacobs Tom Conley wrote on 10/8/18 8:37 PM: Just wondering if there is any reason to still use SWA=BELOW. I'm seeing th

Re: ICSF crypto domain sharing

Looks like it; * Greater than 16 Domain support * – Support to allow a cryptographic coprocessor to be shared across more than 16 domains, up to the maximum number of LPARs on the system. * – This support relies on enhanced firmware available with a minimum microcode leve

Re: Help With PENDING OFFLINE Devices

orest Hill Blvd.* *Room B-332* *West Palm Beach, FL. 33406-5869* *Florida's Only A-Rated Urban District* On Mon, Sep 17, 2018 at 1:03 PM Mark Jacobs - Listserv < mark.jac...@custserv.com<mailto:mark.jac...@custserv.com>> wrote: Issue a $DPROCLIB(*) command and see if anything&

Re: Help With PENDING OFFLINE Devices

T Security* *PX - 47652* *(561) 357-7652 (office)* *(954) 415-7586 (mobile)* *School District of Palm Beach County* *3348 Forest Hill Blvd.* *Room B-332* *West Palm Beach, FL. 33406-5869* *Florida's Only A-Rated Urban District* On Mon, Sep 17, 2018 at 12:04 PM Mark Jacobs - Listserv < m

Re: Help With PENDING OFFLINE Devices

Depends what the resources are. If proclibs, and you've implemented dynamic proclibs you can work around it. Mark Jacobs George Rodriguez wrote on 9/17/18 11:58 AM: Mike, You're a lifesaver... Most say they are owned by CATALOG, th2 remainder says either me (GRODRIG) or JES2. I can probably sh

Re: Report volumes with IPLText

Before that command was available, I used this process to prevent Operations from IPLing from volumes I didn't want them to; //ASM EXEC HLASMC,PARM='NOGOFF' //SYSIN DD* NOIPLSTART 0 BALR 12,0 USING *,12 LPSW WAITDBF DS0D WAITDBF DCXL8'000A0

Re: Un-Sysplex a zOS System

home for a while after everything else is shutdown, hence research on whether it's feasible to begin a system split prior to everything else being shut down. Mark Jacobs Elardus Engelbrecht wrote on 8/30/18 2:35 AM: Mark Jacobs - Listserv wrote: We're in a parallel sysplex, sha

Un-Sysplex a zOS System

We're in a parallel sysplex, sharing most everything, and need to begin planning activities to remove one system from the sysplex, while continuing to use it to run a subset of our current workload. Some of the things we need to consider are; * PDS/e Sharing * Catalogs (we're ECS shared

Re: 0,clpa

I mandated CLPA for all IPLs around 1996 or 1997 and told everyone that checkpoint restart was going away. No one cared enough to argue with me. Mark Jacobs Seymour J Metz wrote on 8/29/18 11:32 AM: You'd be unable to restart those jobs. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz

Re: Migration from DB2 V10 to V11

Mainframe Discussion List <mailto:IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of Mark Jacobs - Listserv Sent: Tuesday, July 17, 2018 6:21 PM To: IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@LISTSERV.UA.EDU> Subject: Re: Migration from DB2 V10 to V11 Early code mismatch? Chopperla Vrao wrote on 7/1

Re: Migration from DB2 V10 to V11

Early code mismatch? Chopperla Vrao wrote on 7/17/18 7:33 AM: Hello Can someone help me on DB2 V10 to V11 migration related error. So far I have been able to apply fallback PTF's/maintenance and migrate the catalog to V11 CM(DSNTIJTC), till this point things were looking good. When I'm testin

Re: IEC614I Scratch

is this in? zos? Hervey From: IBM Mainframe Discussion List <mailto:IBM-MAIN@LISTSERV.UA.EDU> on behalf of Mark Jacobs - Listserv <mailto:mark.jac...@custserv.com> Sent: Monday, July 9, 2018 3:01 PM To: IBM-MAIN@LISTSERV.UA.EDU<mailto:IBM-MAIN@

Re: IEC614I Scratch

Is it being suppressed either using MPFLSTxx or AutoOps? Either one can prevent the message from being written to the log. Hervey Martinez wrote on 7/9/18 2:39 PM: We have instances where some GDG files don't get deleted while these are in ML1; thus, they end up generating errors during Second

Re: IEFA107I when pointing to dataset alias

I think the alias and the resolved dataset have to be in the same catalog. Mark Jacobs Michael Babcock May 29, 2018 at 5:09 PM Okay, I'm getting myself confused regarding SYMBOLICRELATE. I have a data set, SYS3.LINKLIB which resides in CATALOG.USERSYS. I want to d

Re: SYSPLEX Hung

Without the SAD it's all going to be speculation. Have you setup AUTOIPL in DIAGxx to automatically take the SAD if the system fails? AUTOIPL SADMP(7B97,SYSC) MVS(*964C,79A222 ) as an example Salah Balboul April 19, 2018 at 2:18 PM Yes. Shared DASD within the SY

Re: SYSPLEX Hung

Have you taken a SAD of the failed system? Mark Jacobs Salah Balboul April 19, 2018 at 10:48 AM Hi, For the past week we've had 2 crashes due to one LPAR being hung in a two SYSPLEX LPAR causing sympathy sickness. In both cases the indication is $HASP263 message (Chec

Re: GDG with timestamp

Unless you're using it for something else, the ACCOUNT-INFO field in the catalog entry can be altered to provide the information you need. Not ideal for sure, but can be used. Mark Jacobs Peter March 12, 2018 at 1:47 PM Ok thanks for confirming on this... Would have

Re: zEDC hardware compression with FTP

If you have ServiceLink QA support, ask IBM directly. PINION, RICHARD W. March 1, 2018 at 10:28 AM Does anybody know if the z/OS FTP client uses zEDC when the FTP command COMPRESS is used? FIRST TENNESSEE Confidentiality notice: This e-mail message, including an

Re: Hardware upgrade z13 to z14....Yikes

If you have CryptoExpress cards on the z13's and will have on the z14's, and using ICSF with protected keys, you'll need to reinstall your current ICSF master keys (and maybe the previous ones too), into the new CryptoExpress cards. Mark Jacobs fred glenlake Fe

Re: TSO temp dataset

I'm assuming you SMS manage temporary datasets. If so, assign them to a data class with enough dasd space. Mark Jacobs Nai, Dean February 15, 2018 at 9:31 AM The problem is it gets submitted by a RACF product called zSECURE so I have no control over it. I just gener

Re: IEA303W ABEND 878 REASON 00000004

Take a look at increasing INITSQA in LOADxx. It's likely you were close to the limit before, and some environmental change pushed it over the limit. You shouldn't need much of an increase from the default, or if you're specifying it now to het you past this problem. Mark Jacobs Jesse Lynch

Re: Best Practices for z/OS Maintenance

Usually when I did a new zOS upgrade I used the /var filesystem that shipped with that release, as well as the /etc file system. Made whatever necessary changes to the new /etc that we needed and moved along. Cloned the new /var and /etc file systems to each system in the sysplex. Mark Jacobs

Re: Insomnia cure

I've always used the RACROUTE Macro Reference manual as a sleep aid. Nightwatch RenBand February 8, 2018 at 11:49 AM > I greatly appreciate all the input I am receiving as I get through the "Insomnia Cure"I mean the > IBM Red Book on Setting up a Sysplex. Than

Re: So long and thanks for all the fish

Yes on the CDS question. Dana Mitchell February 8, 2018 at 8:58 AM Does Meredith use CDS for fulfillment? CDS used to be a mainframe shop here in town, they converted to IBM i years ago. Meredith was also a good sized mainframe shop in the past too, but sadly no more

Re: So long and thanks for all the fish

ntly foolish and willfully ignorant, and I imagine subject to the supposition that they cannot find resources to support it in the future. Good luck to you, Mark. -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Jacobs - Listserv

So long and thanks for all the fish

Sometime this year all existing mainframe processes will be moved to another fulfillment house(non-mainframe) for Time Inc (now Meredith Corporation) and Time Customer Service will be shut down. It's been a great 22.5 years here for me, I might make it to 23 in August before I'm terminated. Afte

Re: Pervasive Dataset Encrypted Question

t OA50569, I would assume it would not recognized that it was > encrypted. It would restore but you could not decrypt it. > > On Wed, Jan 31, 2018 at 12:46 PM, Mark Jacobs - Listserv > <mailto:mark.jac...@custserv.com><mailto:mark.jac...@custserv.com><mailto:mark.jac

Re: Pervasive Dataset Encrypted Question

OA50569, I would assume it would not recognized that it was encrypted. It would restore but you could not decrypt it. On Wed, Jan 31, 2018 at 12:46 PM, Mark Jacobs - Listserv <mailto:mark.jac...@custserv.com> wrote: > I'm not seeing any reason why not, but can a zOS 2.2 system wi

Pervasive Dataset Encrypted Question

I'm not seeing any reason why not, but can a zOS 2.2 system without the required maintenance (OA50569) restore logically dumped volumes using ADRDSSU that contain datasets encrypted by a zOS 2.2 system that has the maintenance applied? There will be no access to this encrypted data on the restoring

Re: Intel Chip flaw

The IBM Security/Integrity portal has the information you're seeking. Mark Jacobs > David Crayford > January 5, 2018 at 7:09 AM > > > Indeed. And there are Linux patches for AMD WRT RDSTC speculation > exploits > https://github.com/openSUSE/kernel/commit/6a334d96b8c89

Re: Security PTFS

The Security and Integrity Portal on ResourceLink should have what you're looking for. > גדי בן אבי > January 3, 2018 at 7:18 AM > Hi, > > Does IBM publish a list of PTF’s that are related to security, > especially preventing unauthorized access from outside the mainframe

Re: Can anyone remember "drum" storage?

When I started working in the field, 1979, they had a couple of 2305 devices attached to a 3033 processor. They used it for PLPA and COMMON paging devices if I remember correctly. Mark Jacobs > Joel C. Ewing > December 20, 2017 at 10:05 AM > No, not the same. > > From t

Re: Fire-call, emergency RACF userid

the pin and the new pin and token go back > into the safe. > > Tom Chicklon > > -Original Message----- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] > On Behalf Of Mark Jacobs - Listserv > Sent: Thursday, December 07, 2017 3:12 PM > To:

Re: Fire-call, emergency RACF userid

envelope on a lock box > in the computer room, this was before MFA, only MFA experience we have > is windows, LAN ID's > I suspect with MFA, you don't need to suspend the ID, since you'd need > a password and a PIN to be valid? > > > > > > > Carmen Vi

Fire-call, emergency RACF userid

We have an emergency use userid with it's password "locked in a safe", which can be used by authorized people when/if needed. How do other organizations better control something like this? I'm asking since we're implementing MFA for "special" userids, and I don't know how to fit this shared userid

Re: NFS on Mainframe

Last time I looked (about 15 years ago), zOS has both an NFS client and server available. > Timothy Sipples > December 4, 2017 at 4:01 AM > To clarify, z/OS is the NFS client, and something else is the NFS server, > correct? > > It'd be helpful to know exactly what is t

Re: Are JZOS JVM loader excutables installed in PDSE libraries?

tly did not. Peter -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Jacobs - Listserv Sent: Tuesday, November 07, 2017 4:10 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Are JZOS JVM loader excutables installed in PDSE libraries? Are

Re: Are JZOS JVM loader excutables installed in PDSE libraries?

Are you talking about these? BROWSESYS1.SIEALNKE Command ===> Name Prompt _ JVMLDM60 _ JVMLDM61 _ JVMLDM66 _ JVMLDM67 _ JVMLDM70 _ JVMLDM71 _ JVMLDM76 _ JVMLDM77 _ JVMLDM80 _ JVMLDM86 Farl

Re: Standalone IPL ADRDSSU and Operating Systems Messages z14

Have you recreated the iplable tape with the latest level of standalone ADRDSSU? Is there anything in the z14 PSP bucket? I'd start with those items. Crispin Hugo November 3, 2017 at 5:55 PM I have used the tape many times on zBC12 but when I use it on Z14 , w

Re: IKJEFTxx should fail if not JobStep Task

Yes I did. Gave them the same treatment as the French Soldier in Monty Python and the Holy Grail when he taunted King Arthur. Mark Jacobs Edward Gould October 30, 2017 at 2:26 PM Semi on topic. Have any of you seen the “video” that claims that they can bypass

Re: Question on some z/OS Tuning Parms USEZOSV1R9RULES and MEMDSENQMGT

I enabled MEMDSENQMGT with zOS 1.12. Also started to use it in our sysres build program; IEFDDSRV MODIFY,TYPE=FEATURE,DSENQMGMT=MEMORY USE MEMORY-BASED * DATA SET ENQ * MANAGEMENT F

Re: AEHTRIBMKC?

There are two kinds of fools. One says, “This is old, therefore it is good”; the other says, “This is new, therefore it is better.” -- William Ralph Inge John McKown October 12, 2017 at 2:27 PM On Thu, Oct 12, 2017 at 1:16 PM, Allan Staller ​ But they ar

Space Allocation Products

Outside of these four, are there any other products on the market? CA Allocate DASD Space and Placement -- CA Technologies Space Recovery System -- DTS Software MAINVIEW SRM StopX37/II -- BMC Tivoli Advanced Allocation Management -- IBM -- Mark Jacobs Time Customer Service Global Technolo

PROCUSERMAX in OMVS Segment

This question might be better asked in the RACF or OMVS mailing lists, but I'm starting here. Does a value set in the OMVS segment for PROCUSERMAX override the setting of MAXPROCUSER in BPXPRMxx? It's documented that way for THREADSMAX, but not for PROCUSERMAX. -- Mark Jacobs Time Customer S

Re: DLIB volume for SAD

hat may ask you for login information or directs you to login via a link. If you believe this message is a phish or aren't sure whether this message is trustworthy, please send the original message as an attachment to 'phish...@timeinc.com'. Mark Jacobs - Listserv <ma

Re: DLIB volume for SAD

Mr. Murphy taught me a very long time ago that I should always ensure I have a working SADUMP that matches the OS level requiring it. Agree. That's why I always rebuilt it after every zOS maintenance cycle, cause' ya never know. Mark Jacobs Mark Zelden September

Re: DLIB volume for SAD

When I was doing zOS work, sigh, I always rebuilt the SAD environment on &SYSR2 every time I rebuilt my sysres set after maintenance activities. Mark Jacobs Jesse 1 Robinson September 27, 2017 at 2:13 PM As a practical matter, the SAD IPL volume needs enough sp

Re: Keeping SSN init modules current

Here's a wild thought. Create your own dummy subsystem with its own initialization routine that gets executed before any of the subsystems you're concerned about. This initialization routine can load the other modules into CSA, or even copy from one library to a linklist library. We have an ins

Re: zOS Encryption Services and ICSF

27;t be able to read any encrypted zOS dataset. Mark Jacobs Rob Schramm <mailto:rob.schr...@gmail.com> September 20, 2017 at 1:34 PM Well that is either a good thing or a bad thing. What kind of keys are you storing? On Wed, Sep 20, 2017, 12:11 PM Mark Jacobs - Listserv <

Re: zOS Encryption Services and ICSF

No. Don't have, not likely to get one. Mark Jacobs Rob Schramm <mailto:rob.schr...@gmail.com> September 20, 2017 at 12:09 PM 1st Question Do you have/need a TKE? Rob On Wed, Sep 20, 2017, 10:31 AM Mark Jacobs - Listserv < -

zOS Encryption Services and ICSF

Is there anything like a best practices document available from IBM or Share on setting this up? I just started thinking about all the bits and pieces and was concerned about how having this enabled affects the timeline/method of entering the ICSF Master Keys during a DR situation or processor

Re: OA49446 changed RACF behavior for ALIAS, PATH, and AIX

YMMV, but we've been running with that APAR applied for well over a year without any fallout and didn't define that RACF profile. Pinnacle September 18, 2017 at 2:04 PM I'm looking at the HOLDDATA for OA49446. RACF was changed to do authorization checks again

Re: Reload nucleus module dynamically

irects you to login via a link. If you believe this message is a phish or aren't sure whether this message is trustworthy, please send the original message as an attachment to 'phish...@timeinc.com'. Mark Jacobs - Listserv <mailto:mark.jac...@custserv.com> September 13,

Re: Reload nucleus module dynamically

University Computing Company (UCC), later known as UCCel. I think that DUO was UCC-2, TMS was UCC-1. Mark Jacobs Edward Gould September 13, 2017 at 3:41 PM On Sep 13, 2017, at 12:11 PM, Peter Hunkeler wrote: What modules do you want to reload? If that is in

Re: GIM69209S ** RECEIVE PROCESSING HAS FAILED BECAUSE PROGRAM GIMJVCLT COULD NOT BE Started.

Try using the 31 bit version of Java 8. See if that makes a difference. Mark Jacobs גדי בן אבי August 24, 2017 at 9:14 AM This is what SYSPRINT says: -- DATE 08/24/17 TIME 16:08:40 SERVER Data

Re: CONSOLE command failing - what else to check?

Does the falling user have an OPERPARM segment in their RACF profile? Todd Burrell August 16, 2017 at 11:52 AM I have 2 users and one can successfully execute the CONSOLE command while running it in a started task and in batch, but the other user cannot. From what

Re: Application Performance Tuning Products

analysis tool? Peter -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of John McKown Sent: Tuesday, August 15, 2017 10:12 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Application Performance Tuning Products On Tue, Aug 15, 2017 at 9:01

Application Performance Tuning Products

Does anyone know of additional products for application performance tuning activities other than Strobe, TriTune, and IBM's Application Performance Analyzer. Just started looking today myself. -- Mark Jacobs Time Customer Service Global Technology Services The standard you walk past is the sta

Re: Security, Other Risks When Unsupported (Was: z14 and z/OS 2.3 Blog Post)

Been there too. Got the t-shirt and everything myself several times over a 38 year career. Mark Jacobs John McKown August 2, 2017 at 8:42 AM ​Hum, around here when I "poke my nose in where it doesn't belong", it tends to get whacked. My immediate manager

Re: Customer is Using CPACF (Crypto) purchased Crypto Express

d email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Mark Jacobs - Listserv <mailto:mark.jac...@custserv.com> June 12, 2017 at 8:01 AM Encryption/decryption without a CryptoExpress only supports clear keys, not protected or secured encryption keys. Might be enough for the OP, but wouldn&#

Re: Customer is Using CPACF (Crypto) purchased Crypto Express

Encryption/decryption without a CryptoExpress only supports clear keys, not protected or secured encryption keys. Might be enough for the OP, but wouldn't fly in my environment. Tony Thigpen June 12, 2017 at 7:22 AM For encrypting "data at rest", the CPACF is really

Re: curious: Anybody still use ADDRSPC=REAL ?

Over 20 years ago for me. Never looked back. Greg Dyck June 9, 2017 at 12:43 PM It has been 30 years since I saw a program that actually required V=R to run successfully, and that was only for specific OLTEP test programs that dynamically modified CCW chains. beli

Re: Eliminating CA-Optimizer

There's a file on cbttape.org, File841, that allows programs compiled with CA-Optimizer to continue to execute without recompiling and without needing the Optimizer run time libraries. Mark Jacobs Charles Mills June 2, 2017 at 6:15 PM The real question is "do they ha

Re: The Mainframe vs. the Server Farm: A Comparison

That's so cool. I'm a Facebook friend of the author. Mark Jacobs Mark Post May 19, 2017 at 12:27 PM On 5/19/2017 at 11:39 AM, Lizette Koehler wrote: -snip- I noticed this: Original Article was at SUSE -snip- https://www.suse.com/communities/blog/mainframe-versus-se

Re: SoftAudit ?

I think it was rebranded as Tivoli Asset Manager. Dyck, Lionel B. (TRA) May 10, 2017 at 10:20 AM Whatever happened to SoftAudit from Isogon? Did IBM pick it up and rename it or did it die with the IBM acquisition? Are there any other products that will detect the r

Re: Activating CFRM policy

You're updating the CFRM dataset on volume PLY001, but the active CFRM dataset is on volume PLY003. Mark Jacobs Jorge Garcia May 4, 2017 at 7:16 AM Hi all, We are activating a new CFRM policy. The build of new policy finishs succesfully and it's build in the righ

Re: SFTP From Linux to z/OS

That's a command when you're using the Co:Z Toolkit's sftp server. No zOS shop should be without it. Mark Jacobs Roach, Dennis May 2, 2017 at 2:32 PM This makes no sense. ls lists the directory at the remote end. The ls command you provided looks like it should be

Re: Storage Creep

Would a Getmain/Freemain/Storage Trace on the STC help find the problem? Mark Jacobs scott Ford May 2, 2017 at 9:41 AM All: I have a STC written in Cobol V4.1 calling Assembler routines to perform various RACF functions. I have a customer who is reporting seeing a s

CSVAPF Facility Class Profiles

I asked this on the RACF mailing list yesterday, didn't get a response, so I'm trying here next. I'm 99.9% confident that CSVAPF.dataset profiles aren't used during system IPL when datasets in the PROGxx member are added to the active APF list. Can someone confirm? -- *One grows tired of jell

Re: z/OS V2R2 ZFS file system question

The numeric values in the owner and group fields of the directory entry are resolved into text from your security system. The UID value resolves back to IBMUSER and the GID to OMVSGRP. You can list the actual numeric values by using the ls command with the -n option. The #1 indicates that there

Re: ICSF Question

The key labels are readable, so you know what keys are there. The field that describes what the key is used for, DATA, EXPORTER,... is also readable. What information are you looking to ascertain? Mark Jacobs Steely.Mark February 16, 2017 at 6:20 PM Is there

Re: Job Loyalty

Almost 22 for me, 16 at my previous position. Mark Jacobs Frank Swarbrick February 10, 2017 at 6:53 PM I've been with my current employer for 25 years. But I will admit we're rather an anomaly these days! From: IBM Mainfram

MFA/2FA for RACF

We're looking at implementing MFA/2FA sometime in 2017. I know about IBM's product, found something from CA, and some references for Rocket Strong Authentication Expert for z/OS, but it's not on their web site any longer. Are there any other products out there? Not finding much on Google. --

Re: CPACF DES/TDES enablement feature 3863 with no Co Processors/Express Cards

There should be no differences in ICSF setup in a CPACF only environment. ICSF will query the system at startup for available hardware support. Anything that can't be done either by CPACF machine instructions or via software emulation will fail. These failures mostly relate to secure/protected

Re: SFTP on z/OS

If you don't have CryptoExpress processors, but do have CPAF enabled on your processor/LPAR, you still might need ICSF active. I don't know off hand if ssh will directly use the CPAF facilities without ICSF being available. Mark Jacobs scott Ford February 4, 2017

Re: Load Module Trace, anyone?

I think that's been repacked as Tivoli Asset Manager. Mark Jacobs Lizette Koehler January 13, 2017 at 8:02 AM There is or used to be a product called SoftAudit by Isogon. I think IBM acquired it. It is able to provide module auditing functions. SoftAudit for

Re: IBM Java 8 SR2

They are yes. Mark Jacobs Vince Coen November 23, 2016 at 11:28 AM Are not the service pack cumulative ? E.g., SP3 has SP2 within. -- - IMPORTANT – This email and the information in it may be confidential, legally privileged and/or protected by law. It is int

Re: z/OS 2.2 and z9

I'd expect a wait state. Mark Jacobs R.S. November 18, 2016 at 10:43 AM 1. As far as I know z/OS 2.2 will not run on z9 machine - is it true? 2. What message one can expect when trying to IPL the z/OS 2.2 on the z9? -- Radoslaw Skorupka Lodz, Poland

Re: ADMF?

ADMF was used to accelerate the movement of pages from expanded storage to real storage. With the demise of expanded storage, it's useless now. Here's the patent information. https://www.google.ch/patents/US5377337 Jesse 1 Robinson November 15, 2016 at 11:42 A

Re: Problem with startup DB2

Restore the file system from the last good backup would be a good idea. Hilario Garcia November 10, 2016 at 5:53 AM Hello, After a hard stop of the partition, DB2 does not start and produces the following messages; -DB9G START DB2 S DB9GMSTR $HASP100 DB9GMSTR ON ST

Re: DB2 Shutdown Problem

Check your SMF options, If DDCONS(NO) is not set, that may be your problem. Steve Carlson (Contractor) November 3, 2016 at 9:00 AM When trying to shut down the DB2 regions on our Development LPAR the DB2M1 regions are taking over 1 hour to shut down. I have also

IBM Software Support Services - Service Extension Question

Is IBM still building security and integrity fixes for out of support releases of zOS? If so, does having BM Software Support Services - Service Extension, aka IBM Lifecycle Extension for z/OS give you access rights to those PTFs? Mark Jacobs Time Customer Service Global Technology Services T

Re: Xposted from TCP/IP list SSL Problems, please help

WAG, Does TCP/IP have read access to the private key in the PKDS? CSFKEYS resource. Mark Jacobs Ward, Mike S October 27, 2016 at 12:33 PM Hello list I have a small problem that I was hoping I could get some help with. System is z/OS V1.13 running on a Z13s W01 soon

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Once the ICSF Master Keys are entered into the crypto domain after the first IPL of each system, they'll be there and ready when you IPL your DR system in the future. If you've changed the keys on the production side, you have to keep them in sync with the DR box too. Mark Jacobs Jesse 1 Robi

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

If you're not creating any data encryption keys in the CKDS, then a one cylinder database is plenty of sapce. Mark Jacobs Dazzo, Matt October 19, 2016 at 11:46 AM RS, Kirk thanks. I was able to confirm from the SE that CPACF is enabled.

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Unless you have a TKE, you will have to use the ICSF panels to enter the master keys. So yes, you'll need to IPL each image to do so. Just a heads up that if you perform ICSF Master Key changes (recommended), you might have to first enter the previous set of keys, then the current set. I can el

ICETOOL Question

Before I dig into the books, does anyone have an ICETOOL example that does this; Copy all records in a file has these fields B CCC D to a different file in this field order -- Mark Jacobs Time Customer Service Global Tec

Re: DFHSM query command from Console

F HSM,Q CDS Peter October 14, 2016 at 11:14 AM Hi Is it possible to query MCDS dataset usage from master console ? I apologize as I am new to DFHSM. Peter -- For IBM-MAIN subscribe / signoff / a

Re: How set CVTLSO?

October 11, 2016 at 12:00 PM *Somebody* sets it ... who and how? Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Jacobs - Listserv Sent: Tuesday, October 11, 2016 8:48 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: How set

Re: How set CVTLSO?

l...@mcn.org> October 11, 2016 at 10:00 AM So could in fact change without an IPL? That is really the core of my curiosity. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Jacobs - Listserv Sent: Tuesday, October 11,

Re: How set CVTLSO?

uld in fact change without an IPL? That is really the core of my curiosity. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Jacobs - Listserv Sent: Tuesday, October 11, 2016 6:45 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject:

Re: How set CVTLSO?

I believe that if you're using STP to control system time, it all happens automagically. Charles Mills October 11, 2016 at 9:42 AM Mostly a curiosity and "long-term" question: where do you set the leap second offset? Can it be set without an IPL? I searched System Com

Re: Can Someone Check Redbooks?

Looks like it for me too. George Rodriguez September 29, 2016 at 7:49 AM Is the http://www.redbooks.ibm.com/ site down? *George Rodriguez* *Specialist II - IT Solutions* *IT Enterprise Applications* *PX - 47652* *(561) 357-7652 (office)* *(954) 415

Re: Strange syslogd file name in name/token pair ezbsyslog

Just like when you notice a horrific spelling or grammatical error in a email right after you hit send. Been there, done that too. Mark Jacobs John McKown September 27, 2016 at 8:00 AM Damn, I hate it when I do this. I then found: http://www-01.ibm.com/su

  1   2   >