OnDemand User Group
Support Forums => z/OS Server => Topic started by: Manoj Jadwani on April 29, 2020, 12:40:38 PM
-
Hi ,
Here is the scenario , project which I support got mix of CMOD 8.5 and CMOD 9.5 .
CMOD V8.5 running as production .
CMOD V9.5 running as test instance .
Now people who were originally supporting and performed upgrade from CMOD V8.5 to CMOD V9.5 are no more with the project.
Customer ask is to upgrade CMOD to V9.5 on production and ultimately to 10.1 .
In order to play safe what we are doing is we are trying to install V8.5 on our sandbox , upgrade to V9.5 and perform fallback to V8.5 and re-upgrade to V9.5 just to be sure and practice before actually doing it on production.
1) Phase 1 - Install V8.5
So far we are successful in setting up V8.5 . Security Exits used were same as they are currently in production V8.5 region. Validations were successful and were able to load sample IVP report without any issue.
2) Phase 2 - Upgrade to V9.5
z/OS team mounted V9.5 product hfs.
Db2 team successfully created V9.5 objects as documented.
Now when we tried to bring up up ARS* started tasks we were able to bring up ARSSOCKD ,ARSMSVR but ARSLOAD is failing. It is looking for stash file.
Error : ARS1607E The OnDemand stash file >< either does not exist or is not valid.
This is jcl EXEC PGM step for arsload.
XXARSLOAD EXEC PGM=ARSLOAD,REGION=0M,TIME=NOLIMIT,ACCT=PEOIP,
XX PARM=('/ -E -h ARCHIVE -C 3 -f -A WRITER -G FORMS')
We are not passing -u - p . We have ARS.PTGN enabled and expecting RACF passticket to be used for login.
on checking the exit status
CSV460I 14.27.03 PROG,EXIT DISPLAY 707
EXIT DEF EXIT DEF EXIT DEF
ARS.SECURITY I ARS.RSADUPDT E ARS.PTGN E
ARSLOG E
Difference we notice :
ARS.SECURITY STATUS was E when installed in V8.5 but now it status is I . (Comparing what is already out there in V9.5 its status is 'E' )
ARS.PTGN status is E but still seems like it is not being used by ARSLOAD. While starting RSLOAD is not able to invoke RACF pass ticket. already defined in RACF and hence looking for stash file.
After discussing with Host Support Team we came to know source code for exits are missing. We used vanilla version of ARS.SECURITY compiled/linkedited (as mentioned in Upgrade doc) and added to EXIT parmlib member and activated it . Still the status shows ARS.SECURITY as I.
Could this be a issue why ARS.PTGN is not being called while starting ARSLOAD.
Any suggestion what to do in case if source exits are lost is the upgrade not possible ?
Regards,
Manoj K Jadwani
-
Manoj - you're in a tough spot.
First thing I would do is inventory what exits you have. See this thread about finding which exits you're using in which applications.
http://www.odusergroup.org/forums/index.php?topic=1059
________________
On the security exit, perhaps you need to run separate copies of the same exit as described here?
http://www.odusergroup.org/forums/index.php?topic=692
________________
You might want to go as simple as possible on everything until you get to 10.1 (really, as long as you're going to 10.1, you might as well go to 10.5).
You might want to use -u userid -p /path/to/stash/file for now just to eliminate the concern of one exit.
Ed
-
Thanks Ed !
I may be oversimplifying .
Today's finding .
I brought down all ARS* STC and did display of exit status
D PROG,EXIT,EXITNAME=ARS.*,DIAG
CSV460I 09.08.02 PROG,EXIT DISPLAY 314
EXIT DEF EXIT DEF EXIT DEF
ARS.SECURITY I
I started ARS* STC - ARSSOCKD, ARSMSVR and did display of exit status . ARSLOAD Still failed.
ARS.SECURITY I
I logged on client then status of ARS.SECURITY changed to E
ARS.SECURITY E
Seems like ARS.SECURITY is fine as being invoked .one you logon to CMOD and racf authentication is performed.
Not sure about ARS.PTGN though it status is E but still ARSLOAD task is looking for stash file .
Same JCL header without -u -p was used in V8.5 no issues observed .
Is there a way to generate some logs to point the issue with ARSLOAD ?
I already tried with stash file ARSLOAD comes up fine .
I want to understand we have RACF passticket assigned and ARS.PTGN security exit active why still we need stash file .
Regards,
Manoj K Jadwani
-
Manoj -
Not sure this answers the question but if you go to SDSF and type in DYNX to get the dynamic exits display what do you see?
This is on my test system:
EXITNAME Seq ModName Active FastPath
ARS.PTGN 1 ARSPTGN YES NO
ARS.RSADUPDT NO NO
ARS.SECURITY 1 ARSUSEZ2 YES NO
ARS.SECURITY 2 ARSUSECZ YES NO
ARS.SECURITY 3 ARS4SECZ YES NO
ARS.SECURITY 4 ARS10ECZ YES NO
Yes, we have separate ARS.SECURITY's for different ARSSOCKD's that we run.
Ed
-
Let me also add this checklist:
ARS.PTGN not active for ARSLOAD
https://www.ibm.com/support/pages/arsptgn-not-active-arsload
Ed