Keyboard Shortcuts
Likes
- H390-MVS
- Messages
Search
|
Re: ICSF Hercules
zpmain wrote:
Is it possible to run ICSF in hercules?It is not possible to run ICSF in hercules. It IS possible to run ICSF in z/OS however! :) Unfortunately however, I don't believe it will work using the current 4.7 version of hercules. But I believe it WILL work in the upcoming 4.8 version of Hercules! (still in development). If you can build Hercules for yourself (by using Bill's highly recommended, most excellent "Hercules Helper" script), you could give the 4.8 development version of Hercules a try. (CAVEAT: I know VERY little about (and have VERY little experience with) z/OS! All I know about ICSF is that is has something to do with cryptography on z/OS, and I believe there have been several commits made to Hercules 4.8 related to that. So it wouldn't hurt to give it a try.) p.s. AFAIK no changes to your Hercules configuration file should be necessary to run ICSF in z/OS. Except maybe enabling whatever Facility (or Facilities) might be required for it. But they should be enabled automatically by Hercules. Use the Hercules 'facility' command to be sure. -- "Fish" (David B. Trout) Software Development Laboratories mail: fish@... |
|
Re: Probably a stupid question - concerning Master Catalog Passwords
Hi Dave, If you use X3270 you can activate the trace and in the trace you can analyze what TSO receives when you enter the password. HTH ¸é±ð²Ô¨¦ Le dimanche 12 janvier 2025 ¨¤ 23:48:19 UTC+1, Dave Trainor - N8ZFM <dave@...> a ¨¦crit : You know I found in the message archive this -/g/H390-MVS/topic/hosed_password_for/74966269 From 2020 -? My problem is almost the same as what Doug was experiencing then, and it does not seem to have been answered, the root is the inability to enter the MCAT password from TSO. ? Thank you Marco for prompting me to google search IEC331I 056-012. ? Thanks, ? From:<[email protected]> on behalf of Dave Trainor - N8ZFM <dave@...> ? The message logged on the console at the failure (in TSO) is: ??????????????? IEC331I ???056-012,DAVE????? ,IKJACCNT,RCU ,IGG0CLB6 ? Which I agree means a ¡°a security verification failed¡±.??? So my user account has authority.?? The obvious is that I can¡¯t type SYSPROG correctly, but that is not the case.??? ? Thanks, Dave ¨C N8ZFM ? From:<[email protected]> on behalf of "M Verpelli via groups.io" <marco.verpelli@...> ? No magic secret here, or anywhere else in the universe as far as I know. t would be useful to know what message appears, not by magic, on the console. For example in case of wrong password ? IEC331I 056-002,HMVS01 ,IKJACCNT,RCU ,IGG0CLBM return code 056 = a security verification failed ? In case of other messages, it is necessary to verify which one it is and take the necessary measures reported in the sacred texts a.k.a. IBM manuals ? Marco |
|
Re: Whats the best way to transfer dasd from z/os to Hercules
Definitely one DSN at a time.
Often would XMIT a PDS into a PS file, then each PS file into a PDS member, then XMIT that before transfer. Possibly Terse / UnTerse. Have you tried an EAV volume? On Sun, Jan 12, 2025 at 10:34?PM Brian_Westerman via groups.io <Brian_Westerman@...> wrote:
-- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all? |
|
Re: Multiple OSA define
Brian_Westerman wrote:
[...] So far, the only issue I have is that 4.7 allowed me to haveSounds like a bug in Bill's "Hercules Helper" script. He's passing "8" instead of "64" as the number of desired CPU engines in the 3rd option of the makefile.bat script: makefile.bat {build-type} {makefile-name} {num-cpu-engines} \ [-asm] \ [-title "custom build title"] \ [-hqa {directory}] \ [-extpkg {directory}] \ [-a|clean] \ [{nmake-option}] When I build my Hercules, I always specify 64, the maximum supported on Windows. His script *should* be doing the same. Just report it to him, and I'm sure he'll get it fixed it straightaway. He's a good guy. -- "Fish" (David B. Trout) Software Development Laboratories mail: fish@... |
|
Re: Multiple OSA define
I'm running 4.7? (Hercules-4.7.0.11119-SDL-gf7d2360a-x64) from the pre-built binaries.?
?
I have never even tried to build it myself, but I used the helper script and it seemed to work very well.
?
I was able to successfully send a 10GB file that was failing with OSA at V4.7, so now at 4.8 I get:
?
Sent 10,513,786,880 bytes in 748.69 secs(14042.00 KBps).
?
via LCS it was averaging 3 to 5 MB/sec (4MB/s for this exact file yesterday), via OSA is seems to be quite better at ~14MB/s.
?
So, it's a little slower than before (when at 4.7 OSA was about 17MB/s), but now it works instead of timing out and way faster than LCS, so I'm happy.
?
So far, the only issue I have is that 4.7 allowed me to have 10 CP's defined and this version 4.8.0.11371 only seems to allow 8.? Is that a new restriction?? It may not make a difference, but my 14900K has 24 cores, and I thought I might benefit from allowing 10 of them to be used by Hercules.? I'm not really sure if Hercules makes use of 10, but I didn't expect to get the error in the config file having MAXCPU=10 and NUMCPU=10.? It seems to work at 8 though.?
?
Anyway, than you for the response, I'm really happy with the results of the test.
?
Brian
? |
|
Re: Probably a stupid question - concerning Master Catalog Passwords
¿ªÔÆÌåÓýYou know I found in the message archive this - /g/H390-MVS/topic/hosed_password_for/74966269 From 2020 -? My problem is almost the same as what Doug was experiencing then, and it does not seem to have been answered, the root is the inability to enter the MCAT password from TSO. ? Thank you Marco for prompting me to google search IEC331I 056-012. ? Thanks, ? From:
<[email protected]> on behalf of Dave Trainor - N8ZFM <dave@...> ? The message logged on the console at the failure (in TSO) is: ??????????????? IEC331I ???056-012,DAVE????? ,IKJACCNT,RCU ,IGG0CLB6 ? Which I agree means a ¡°a security verification failed¡±.??? So my user account has authority.?? The obvious is that I can¡¯t type SYSPROG correctly, but that is not the case. ??? ? Thanks, Dave ¨C N8ZFM ? From:
<[email protected]> on behalf of "M Verpelli via groups.io" <marco.verpelli@...> ? No magic secret here, or anywhere else in the universe as far as I know. t would be useful to know what message appears, not by magic, on the console. For example in case of wrong password ? IEC331I 056-002,HMVS01 ,IKJACCNT,RCU ,IGG0CLBM return code 056 = a security verification failed ? In case of other messages, it is necessary to verify which one it is and take the necessary measures reported in the sacred texts a.k.a. IBM manuals ? Marco |
|
Re: Probably a stupid question - concerning Master Catalog Passwords
¿ªÔÆÌåÓýThe message logged on the console at the failure (in TSO) is: ??????????????? IEC331I ???056-012,DAVE????? ,IKJACCNT,RCU ,IGG0CLB6 ? Which I agree means a ¡°a security verification failed¡±.??? So my user account has authority.?? The obvious is that I can¡¯t type SYSPROG correctly, but that is not the case. ??? ? Thanks, Dave ¨C N8ZFM ? From:
<[email protected]> on behalf of "M Verpelli via groups.io" <marco.verpelli@...> ? No magic secret here, or anywhere else in the universe as far as I know. t would be useful to know what message appears, not by magic, on the console. For example in case of wrong password ? IEC331I 056-002,HMVS01 ,IKJACCNT,RCU ,IGG0CLBM return code 056 = a security verification failed ? In case of other messages, it is necessary to verify which one it is and take the necessary measures reported in the sacred texts a.k.a. IBM manuals ? Marco |
|
Re: Probably a stupid question - concerning Master Catalog Passwords
¿ªÔÆÌåÓýI truly do understand why I would want to protect the master catalog, I just do not understand and need to correct the fact that the MCAT password would fine with a batch mode job that does an update to the MCAT, prompts me and accepts the password, but in an interactive TSO session, I get prompted for the MCAT password but it will not accept it.?? ? There is some difference on my system as built, that is causing this issue, but there are no logs that I can find or a specific error message to provide additional info (that I know of), TSO simply won¡¯t accept the password, while batch job processing does, the only difference is that batch is on the local console session instead of a VTAM user session, but that should not make a difference. ? It for sure would be easier for me to use a TK system rather than my ¡°do it yourself¡± version.??? Jay Mosley has spent considerable errort on his excellent instructions and I think him very much.?? I do not believe I would be able to learn as much without building this as I have. ? I do not really require security at all, as I am the only user but it still should work.? And an unresolved error, regardless if I need that function or not, is kinda unacceptable to me and will bother me until I know how to resolve it. ? Thanks, Dave ? From:
<[email protected]> on behalf of "andersedlund via groups.io" <andersedlund@...> ? I think you have misunderstood the value of password protecting the MASTER CATALOG. It is there to prevent you from 'accidentally' updating it. Let me give you some background. Before VSAM, the master catalog had to be on the IPL volume and also with the VSAM MCAT, you do not want to have individual non-system datasets cataloged in the MCAT. The reason is that you wish to have a simple way to upgrade your MVS or try a new version of the system by just IPLing a different pack. By having the datasets belonging to batch application systems or individual TSO users catloged in a user catalog you eliminate a lot of catalog synchronization by re-connecting your existing user catalogs to the new MCAT (when you have to build a new one). The turnkey MVS systems are already set up with usercatalogs connections for the already existing TSO users and there are probably procedures/JOBs for creating new TSO users which include setting up connections to usercatlogs. By convention, TSO users use there userid as the high-level-qualifyer and batch applications have individual HLQs. Thus you have a relatively stable set of catalog connectors to add to a recreated MCAt. This scheme also fits well with SMS ACS routines (on more recent MVS levels) and RACF protection. Thus normal use of the MVS system will not update the MASTER CATALOG! Anders Edlund |
|
Re: Multiple OSA define
I mean connecting it with lan cable. On Sun, 12 Jan 2025, 22:42 Jake Anderson, <justmainframes@...> wrote:
|
|
Re: Multiple OSA define
After installing win ctci and connecting the LAPTOP if it doesn't connect with IP. I believe there is some testing exec which can help to troubleshoot So here should I choose tun ? And first IP address of Laptop then next the IP address of zos ? On Sun, 12 Jan 2025, 20:50 Fish Fish via , <david.b.trout=[email protected]> wrote: Ian Shorter wrote: |
|
Re: Multiple OSA define
Ian Shorter wrote:
Brian, what version of Hercules are you using? There wasGood catch, Ian! I had forgotten about that fix. So yeah: Brian? What version of Hercules are you using? Official 4.7? Or development 4.8? You might want to try your large (ftp?) using QETH/OSA again, but using Herc 4.8 Development instead. It might work better due to the EQBS and SQBS instruction fixes. (And it would be a good confirmation test for us too!) If you've never built Hercules for yourself before, use Bill Lewis's excellent Hercules Helper script. It makes building Hercules a breeze on both Linux or Windows. -- "Fish" (David B. Trout) Software Development Laboratories mail: fish@... |
|
Re: Probably a stupid question - concerning Master Catalog Passwords
I think you have misunderstood the value of password protecting the MASTER CATALOG.
It is there to prevent you from 'accidentally' updating it. Let me give you some background.
Before VSAM, the master catalog had to be on the IPL volume and also with the VSAM MCAT,
you do not want to have individual non-system datasets cataloged in the MCAT.
The reason is that you wish to have a simple way to upgrade your MVS or try a new version of
the system by just IPLing a different pack.
By having the datasets belonging to batch application systems or individual TSO users catloged
in a user catalog you eliminate a lot of catalog synchronization by re-connecting your existing
user catalogs to the new MCAT (when you have to build a new one).
The turnkey MVS systems are already set up with usercatalogs connections for the already
existing TSO users and there are probably procedures/JOBs for creating new TSO users which
include setting up connections to usercatlogs.
By convention, TSO users use there userid as the high-level-qualifyer and batch applications have
individual HLQs. Thus you have a relatively stable set of catalog connectors to add to a recreated MCAt.
This scheme also fits well with SMS ACS routines (on more recent MVS levels) and RACF protection.
Thus normal use of the MVS system will not update the MASTER CATALOG!
Anders Edlund |
|
Re: Multiple OSA define
Brian, what version of Hercules are you using? There was a fix to the develop branch at the end of August 2024 that corrected a problem in Hercules' QDIO code, see . The issue was raised relating to a zLinux guest, but a z/OS guest would presumably also be affected. The effect on zLinux was an abend, perhaps the effect on z/OS is confusion and giving up? |
|
Re: Multiple OSA define
¿ªÔÆÌåÓýOn 12/01/2025 05:40, zpmain via
groups.io wrote:
Not enough info given. Not sure about MVS et al but normally the hosts file over-rides the DNS so by manipulating the hosts file you can connect. If the system you are trying to connect to has an externally visible IP address, so not one of the reserved non-routable range, and you own a domain, you can create an entry pointing to it. So I own g4ugm.me.uk. So I can create an "A" record mvs.g4ugm.me.uk that points to the MVS system. When I send my DNS query to 8.8.8.8 it the DNS query could be sent to the root DNS, to the DNS for .uk, to the DNS for me.uk, then finally to the DNS for g4ugm.me.uk which would respond with the answer.?
Which direction?? Sounds like it could be a filestore overflowing.. Dave G4UGM |
|
Re: Probably a stupid question - concerning Master Catalog Passwords
No magic secret here, or anywhere else in the universe as far as I know.
I t would be useful to know what message appears, not by magic, on the console. For example in case of wrong password
?
IEC331I 056-002,HMVS01 ,IKJACCNT,RCU ,IGG0CLBM
return code 056 = a security verification failed
reason code 002 = the user did not have the required authority ?
In case of other messages, it is necessary to verify which one it is and take the necessary measures reported in the sacred texts a.k.a. IBM manuals
?
Marco
|
|
Re: Whats the best way to transfer dasd from z/os to Hercules
Most of the CBTTape software is in XMIT format.
On Sat, Jan 11, 2025 at 10:52?PM Brian_Westerman via groups.io <Brian_Westerman@...> wrote:
-- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all? |
|
Re: Multiple OSA define
¿ªÔÆÌåÓýMost likely not, unless you have publicly registered your internal IP address on the Internet, which I guess is possible of course but very unlikely.??? You would want to use either a internal DNS server or a hosts list, or simply specify the IP directly and not use DNS for a lookup. ? Personally I would just specify a IP directly and not attempt to use DNS until you get it working and then use an internal to your private network DNS but that is once you have it operational. ? Thanks, Dave ¨C N8ZFM ? From:
<[email protected]> on behalf of "zpmain via groups.io" <justmainframes@...> ? So intrtnally to connect the zos running on hercules cannot be achieved with this DNS then? ? On Sun, 12 Jan 2025, 09:46 Dave Trainor - N8ZFM via , <dave=[email protected]> wrote:
|
|
Re: Multiple OSA define
So intrtnally to connect the zos running on hercules cannot be achieved with this DNS then? On Sun, 12 Jan 2025, 09:46 Dave Trainor - N8ZFM via , <dave=[email protected]> wrote:
|
M Verpelli