ibmvsm/ZOSMIGV2R3_NEXT_VSM_USERKEYCOMM

2019-04-15 Thread Barbara Nitz
I know we've been through a few iterations of this, and I still have questions: We had one offender that was using a key=8 CADS. They have since provided a release where they use a system key for their CADS, and that release has been installed on all sysplexes/systems. I was really astonished w

Re: In-rack FICON DASD

2019-04-15 Thread Timothy Sipples
Christian, Visara's Vi-8810L and IBM's DS8882F are, to my knowledge, the two currently available choices that fit your parameters (FICON-attached storage that mounts/fits within the 16U Reserved feature on the IBM z14 ZR1 or LinuxONE Rockhopper II). The Vi-8810L could win your affections if physic

Re: OpenSSH upgrade option

2019-04-15 Thread Allan Staller
"The ssh command performs ASCII<->EBCDIC conversion (for pedants, 1047<->819). I'd expect that to be IBM-specific. Probably not relevant to security, but additional code that must be supported in an IBM instance, or conditionally bypassed if the sources are merged." SSH defaults to binary tra

Re: Incoming | Computerworld SHARK TANK

2019-04-15 Thread Jeffrey Holst
Back in the mid-70s, had something similar happen at a company I have long since departed. Some idiot operator decided to put a sticky label on the spindle of a 2314 stack. Needless to say, the glue on the label was no match for the forces on it when the stack was spun up. Pieces of the label we

Re: In-rack FICON DASD

2019-04-15 Thread Michael Pantoja
There is also Luminex T2S: starting at 2U, FICON ECKD. Great option for a development environment. More info: https://www.luminex.com/download.php?prod=Luminex_T2S_Mainframe_DASD Michael Pantoja Luminex Software 951.781.4100 x122 -

Re: OpenSSH upgrade option

2019-04-15 Thread Paul Gilmartin
On Mon, 15 Apr 2019 12:37:53 +, Allan Staller wrote: > >SSH defaults to binary transfer. For the issue below (1047-819 translation) a >text mode transfer would have to be specifically requested. >It is presumed that someone that knows enough to request a text mode transfer >would be aware of

Re: OpenSSH upgrade option

2019-04-15 Thread Kirk Wolf
The standard SSH and SFTP protocols (and most implementations) *only* do binary. z/OS OpenSSH is extended to do limited ASCII<->EBCDIC translation. - it automatically translates "shell" sessions, remote command execution, scp (client and server), and adds "ascii" and "binary" commands to "sftp

Re: ibmvsm/ZOSMIGV2R3_NEXT_VSM_USERKEYCOMM

2019-04-15 Thread David Hom
Hello Barbara, Q1) The supporting code for APAR OA53355 turns on the audit flag. The audit flag is used to indicate that the supporting code to detect user key common usage is installed and that the other bits are meaningful. There was an issue where some SMF type 30 records did not have the

Re: Incoming | Computerworld SHARK TANK

2019-04-15 Thread Pommier, Rex
Similar situation. True story from the early 80s and I'm being purposely vague as to who/where to protect the victims. Non-IBM datacenter (one of the bunch for those who remember) removable disk drives in a computer room that had normal ceiling tile - you know the ones that are always flaking

Re: OpenSSH upgrade option

2019-04-15 Thread John McKown
On Mon, Apr 15, 2019 at 11:12 AM Kirk Wolf wrote: > The standard SSH and SFTP protocols (and most implementations) *only* do > binary. > > z/OS OpenSSH is extended to do limited ASCII<->EBCDIC translation. >- it automatically translates "shell" sessions, remote command > execution, scp (clien

Re: OpenSSH upgrade option

2019-04-15 Thread Matt Hogstrom
https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.foto100/fotz112.htm SSH on z/OS for USS assumes text and does conversion. If your transferring files you have to use s

Re: OpenSSH upgrade option

2019-04-15 Thread Paul Gilmartin
On 2019-04-15, at 10:40:11, Matt Hogstrom wrote: > https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.foto100/fotz112.htm > > > > SSH on z/OS for USS assumes text and doe

Re: S/360

2019-04-15 Thread Anne & Lynn Wheeler
t...@tombrennansoftware.com (Tom Brennan) writes: > This reminds me of my first (junk pile) floppy disk drive back in the > 1970's for my home-made computer. I had little money so I made my own > controller out of a dozen chips and wrote some 8080 code to handle the > I/O. So the format of the di

Re: SMF Log Blocks

2019-04-15 Thread Bonnie Ordonez
You can use either of the following interfaces to extract data from the SMF log stream: IFASMFDL, which is the SMF dump utility IFASEXIT, which is the SMF Logstream Subsystem Exit These are the intended interfaces. They return SMF data in the form of SMF records rather than the entire

Re: Incoming | Computerworld SHARK TANK

2019-04-15 Thread Gabe Goldberg
No kidding. Long ago, monitor on a friend's PS/2 failed. Being a mainframer she was accustomed to calling IBM for software/hardware support -- so she called Support Center. They scheduled a visit. I was home, fellow showed up in unmarked white van, swapped monitors, cleaned up minimal packing m

Re: OpenSSH upgrade option

2019-04-15 Thread Kirk Wolf
Gil, You've mentioned this before, where you are essentially are doing back-to-back translations in order to get binary command redirection over z/OS ssh. Again, I'll mention that you can also use the "ChannelConvert" option to get binary command channels: pax -wvXzE -pe -x pax * | \ ssh -p

Re: Incoming | Computerworld SHARK TANK

2019-04-15 Thread Schuffenhauer, Mark
When I was first working we had IBM folks in our building, every day, with their own desks. Opening a ticket involved talking to their desk and explaining. Amazingly someone would often call as soon as I got back to my desk, sometimes even before. The PMR's often were already opened. I reme

Re: Incoming | Computerworld SHARK TANK [SEC=UNOFFICIAL]

2019-04-15 Thread Jones, Phil
Snap: Except my painful memory is of being a new shift leader at an IBM data center in the mid 1970s (no names, no pack drill). Junior ops were 'managing' the 158 because they knew how to work on VS/1; I had to run the 'other' systems: Call/360 and DataText (I think it was). I could see the juni

Re: ibmvsm/ZOSMIGV2R3_NEXT_VSM_USERKEYCOMM

2019-04-15 Thread Barbara Nitz
Hello David, parm(new) did the trick! This bit of information must have been buried in all the RUCSA stuff that I skipped over because it doesn't apply to us. We don't have oa56180 applied yet, so that explains why the audit bit wasn't on in some cases. I feel much more confident now to impleme

Re: ibmvsm/ZOSMIGV2R3_NEXT_VSM_USERKEYCOMM

2019-04-15 Thread Bruce Hewson
Hi Barbara/David, I have the same query open with IBM at the moment. On one system the HealthCheck triggered, saying event started in middle of March. review of all SMF data through March found no culprits. IBM support suggested to find the first IGVH114E in OPERLOG for the system. I found one

Re: ibmvsm/ZOSMIGV2R3_NEXT_VSM_USERKEYCOMM

2019-04-15 Thread Bruce Hewson
Hello Babara/David, hints enough in your 2 posts to locate the manual:- PARM('NEW(text value)') Exceptions should only be issued for user key common storage usage attempts that are detected after this parameter is set. The 'text value' is free-form and is not used by health check processing. It

Re: ibmvsm/ZOSMIGV2R3_NEXT_VSM_USERKEYCOMM

2019-04-15 Thread Barbara Nitz
Hi Bruce, >I have the same query open with IBM at the moment. Well, it helps that I am not alone with that question. :-) >If you could provide an example of a RESET command I would most appreciate. I didn't use it. All I did was go into sdsf and then scroll to the extreme right of the health ch