Paul Jodlowski wrote:
>Currently OpenSSH is at 6.4p1, I have been asked by our
>Network Security Team to upgrade to OpenSSH 7.4.
That's an "amusing" recommendation from your Network Security Team. Unless
security patches have been backported and applied to a particular
distribution of OpenSSH, Ope
Paul Jodlowski wrote:
>>Currently OpenSSH is at 6.4p1, I have been asked by our Network Security Team
>>to upgrade to OpenSSH 7.4.
z/OS OpenSSH at 6.4p1 is a fully supported by IBM. Your Network Security Team
is asking you to 'upgrade', but actually they want to have you to upgrade to an
unsupp
https://www.computerworld.com/article/3388298/incoming.html
Regards,
Mark T. Regan, K8MTR
CTO1 USNR-Retired, 1969-1991
Nationwide Insurance, Retired, 1986-2017
--
For IBM-MAIN subscribe / signoff / archive access instru
Paul Gilmartin wote:
" Would IBM do better to apply IBM patches to the newest distribution rather
than trying to upgrade an outdated version with APARs? There's yet no
assurance that IBM's patching won't regress a needed security patch
Is EBCDIC a culprit?"
This has nothing to do w/EBCDIC.
That reminds me another story. ten years ago a client of us installed a new
hitachi disk array. The technician installed and configured the array, but
for some reasons, it was not immediately used by the client. few days
later, the client tried to connect to the array and it was down. it was
repeat
I think the grumpiness and sarcasm might be a bit over the top. The error
does have roots going back to the middle ages, that when combined with
modern functionality, causes some odd results. Anyway it's something that
doesn't happen very often. If IBM thinks it's worthwhile, they'll improve
it.
ITschak Mugzach wrote:
>... investigation showed that the the people who cleans the computer room
>unplugged the power for the vacuum cleaner... The array was using a standard
>power plug.
Hahaha! I heard a similar, but false story. (
https://www.snopes.com/fact-check/polished-off/ )
Apparent
On Fri, 12 Apr 2019 08:35:39 -0400, Mark Regan wrote:
>https://www.computerworld.com/article/3388298/incoming.html
>
Somehow similar, a GPS rollover glitch took down (some) NYC wireless
communications last week:
https://www.nytimes.com/2019/04/10/nyregion/nyc-gps-wireless.html
... happens ev
The discussion about non-recoverable abends and cancelling jobs brings to mind
an "issue" I've had since we migrated from z/VSE to z/OS in 2010. If I recall
correctly, if a job was cancelled in z/VSE the "dump analysis" product
(Abend-Aid, IBM Fault Analyzer, et al) would still get control and
You probably will get what you want with C jobname,DUMP console command, or CD
in a SDSF screen.
Chris Blaicher
Technical Architect
Syncsort, Inc.
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Frank Swarbrick
Sent: Friday, April 1
On Fri, 12 Apr 2019 15:35:55 +0800, Timothy Sipples wrote:
>Paul Jodlowski wrote:
>>Currently OpenSSH is at 6.4p1, I have been asked by our
>>Network Security Team to upgrade to OpenSSH 7.4.
>
>That's an "amusing" recommendation from your Network Security Team. Unless
>security patches have been
WTF? A z/OS PTF *can* include a patch, but it is normally a total replacement.
And it most certainly is a vendor decision how to install upgrades.
That said, IBM normally provides ++ APAR as a temporary expedient, and then
provides a PTF with the appropriate SUP keyword. An RSU will have the PTF
Gil:
I have not found any APARs/PTFs for z/OS.
I will probably just stop the OpenSSH services (as I started for a proof of
concept with CyberArk)
Thanks all for your suggestions
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Pau
Abend-AID has some global configuration options, right? I don't know the
product, but I recall seeing "no dump due to installation options" or
something like that.
(Not to disagree with @Chris who is of course correct.)
Charles
-Original Message-
From: IBM Mainframe Discussion List [mai
Who says IBM patches?
How could EBCDIC conceivably be relevant?
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List on behalf of
Paul Gilmartin <000433f07816-dmarc-requ...@listserv.ua.edu>
Sent: Thursday, Ap
On Fri, 12 Apr 2019 09:23:40 -0400, Steve Smith wrote:
>I think the grumpiness and sarcasm might be a bit over the top. The error
>does have roots going back to the middle ages,
>
IBM should operate a booth at Renaissance Faire. Or Comic Con.
> ... that when combined with
>modern functionality
This didn't help.
I see no indication that Fault Analyzer was invoked at all. Usually when its
invoked, even if the dump is suppressed, FA will write an informational message
to the console. This is not happening in this case.
Thanks,
Frank
From: IBM Mainfram
On Fri, 12 Apr 2019 16:54:08 +, Seymour J Metz wrote:
>Who says IBM patches?
>
Read Timothy Sipples's ply.
>How could EBCDIC conceivably be relevant?
>
The ssh command performs ASCII<->EBCDIC conversion (for pedants,
1047<->819). I'd expect that to be IBM-specific. Probably not relevant
t
I should clarify. If I include a SYSABEND or SYSUDUMP DD in the JCL (which we
generally do not do), if I cancel with dump I will get a standard z/OS dump.
But the fault analysis tool is still not invoked.
From: IBM Mainframe Discussion List on behalf of
Frank
> Read Timothy Sipples's ply.
That talks about IBM receiving patches, not distributing them.
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List on behalf of
Paul Gilmartin <000433f07816-dmarc-requ...@listse
All apologies. Thanks
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Right. I was the first to mention "security patches" in this thread, and I
was referring to source patches made upstream to he code to fix bugs, CVEs,
etc.
Also - just because IBM ports a base version (6.4, 7.6), it doesn't mean
that they didn't (or won't later) backport bug fixes (security or
ot
Does anyone have any experience with SMF LOG blocks returned from the
IXGBRWSE READCURSOR service.
The doc says it returns a block of SMF records . All return codes
are good after the IXGCONN and IXGBRWSE START but the returned area does not
seem to be SMF data. Am doing a sing
A Coupling Facility Logical Partition can run on shared CPs. It does not
require an ICF engine. Normally I would not recommend the use of a CP, but if
you are careful not to use the CF a lot, and use DYNDISP=thin, it can be quite
useful. If all the connectors to the CF are in the same CEC, the
On 12/04/2019 5:35 pm, Timothy Sipples wrote:
Paul Jodlowski wrote:
Currently OpenSSH is at 6.4p1, I have been asked by our
Network Security Team to upgrade to OpenSSH 7.4.
That's an "amusing" recommendation from your Network Security Team. Unless
security patches have been backported and appli
25 matches
Mail list logo
