1006
Report Indexing / Re: PDF bloating issues with arspdoci
« on: January 29, 2013, 08:49:26 AM »
Pankaj, acknowledging your update. I don't have any other quick or easy answers.
Ed
Ed
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
1007
Report Indexing / Re: AFP structure issue.
« on: January 29, 2013, 08:48:33 AM »
Pankaj - thanks for posting the resolution.
1008
Report Indexing / Re: PDF bloating issues with arspdoci
« on: January 28, 2013, 11:42:05 AM »
Pankaj - what you're describing, having a .res file and not a .res file, sounds like you're using an old level of arspdoci and a newer level of arspdoci.
I forget which release of CMOD made the improvement separate out the resources.
Are you sure you're using the same executable for both?
Ed
I forget which release of CMOD made the improvement separate out the resources.
Are you sure you're using the same executable for both?
Ed
1009
Tips and Tricks / Re: Using ARSDOC to pull multiple documents
« on: January 21, 2013, 08:16:09 AM »
Not an expert, but perhaps something like this:
/usr/lpp/ars/V8R4M0/bin/arsdoc query -Ip -v -h ARCHIVE -G ggggg -o query.results.run.1 -i
"WHERE REPORT_ID='xxxxxxxx' AND DATE BETWEEN low_number AND high_number
/usr/lpp/ars/V8R4M0/bin/arsdoc query -Ip -v -h ARCHIVE -G ggggg -o query.results.run.1 -i
"WHERE REPORT_ID='xxxxxxxx' AND DATE BETWEEN low_number AND high_number
1010
Other / Re: Viewing Number of Users Logged into OnDemand
« on: January 15, 2013, 11:27:22 AM »Hmmm - at least on z/OS this doesn't work as I expected. I've logged on to OnDemand, even ran a load while displaying the process information and I can never get anyone/anything to show up in the "user" column.
Probably something I'm doing but I'm investigating....
Ed
Sure enough, it was something I was doing.
On z/OS at least when a user logs on, it may take a little bit before the Cur(n) field gets updated.
When a user logs off, the logoff is reflected immediately.
The code that updates the Cur(n) field for logons runs on a timer pop, is asynchronous.
Ed
1011
Other / Re: Viewing Number of Users Logged into OnDemand
« on: January 07, 2013, 11:43:12 AM »
Hmmm - at least on z/OS this doesn't work as I expected. I've logged on to OnDemand, even ran a load while displaying the process information and I can never get anyone/anything to show up in the "user" column.
Probably something I'm doing but I'm investigating....
Ed
Probably something I'm doing but I'm investigating....
Ed
1012
Documentation / Re: APS989I error message
« on: January 04, 2013, 01:11:34 PM »
Stephane -
1) please submit a feedback saying that that is a no longer valid publication
2) I found it out here:
http://www.thigpenenterprises.com/coolstuff.htm
Unfortunately, it's in BOOKMGR format and you'll need to download the bookmgr reader if you don't already have a copy.
Instructions on getting the reader are here:
http://www-01.ibm.com/support/docview.wss?uid=swg27018857
Ed
1) please submit a feedback saying that that is a no longer valid publication
2) I found it out here:
http://www.thigpenenterprises.com/coolstuff.htm
Unfortunately, it's in BOOKMGR format and you'll need to download the bookmgr reader if you don't already have a copy.
Instructions on getting the reader are here:
http://www-01.ibm.com/support/docview.wss?uid=swg27018857
Ed
1013
Other / Re: Viewing Number of Users Logged into OnDemand
« on: January 04, 2013, 10:18:39 AM »
To run this command in batch on z/OS this is JCL I use.
I don't know if you need all of the DD defs, it's just canned JCL I use for various batch invocations.
//STEP1 EXEC PGM=BPXBATCH,REGION=0M
//*
//STEPLIB DD DISP=SHR,DSN=ARS.ARSV900.SARSLOAD
// DD DISP=SHR,DSN=DSN.DB2VA10.SDSNEXIT
// DD DISP=SHR,DSN=DSN.DB2VA10.SDSNLOAD
//SYSPRINT DD SYSOUT=*
//SYSOUT DD SYSOUT=*
//STDERR DD SYSOUT=*
//STDOUT DD SYSOUT=*
//STDPARM DD *
PGM /usr/lpp/ars/V9R0M0/bin/arssockd
-h ARCH900 -p
//STDENV DD *
CLASSPATH=/usr/lpp/ars/V9R0M0/bin/xml/ODAdmin.jar:
/usr/lpp/java/J6.0_64/lib/core.jar
LIBPATH=/usr/lpp/ixm1a/IBM/xml4c-5_7/lib/:$LIBPATH
PATH=/usr/lpp/java/J6.0_64/bin:/usr/lpp/ars/V9R0M0/bin:$PATH
/*
I don't know if you need all of the DD defs, it's just canned JCL I use for various batch invocations.
//STEP1 EXEC PGM=BPXBATCH,REGION=0M
//*
//STEPLIB DD DISP=SHR,DSN=ARS.ARSV900.SARSLOAD
// DD DISP=SHR,DSN=DSN.DB2VA10.SDSNEXIT
// DD DISP=SHR,DSN=DSN.DB2VA10.SDSNLOAD
//SYSPRINT DD SYSOUT=*
//SYSOUT DD SYSOUT=*
//STDERR DD SYSOUT=*
//STDOUT DD SYSOUT=*
//STDPARM DD *
PGM /usr/lpp/ars/V9R0M0/bin/arssockd
-h ARCH900 -p
//STDENV DD *
CLASSPATH=/usr/lpp/ars/V9R0M0/bin/xml/ODAdmin.jar:
/usr/lpp/java/J6.0_64/lib/core.jar
LIBPATH=/usr/lpp/ixm1a/IBM/xml4c-5_7/lib/:$LIBPATH
PATH=/usr/lpp/java/J6.0_64/bin:/usr/lpp/ars/V9R0M0/bin:$PATH
/*
1014
Tips and Tricks / LDAP IVP
« on: January 03, 2013, 01:52:10 PM »
| fixed typo
If you run LDAP, the LDAP IVP is documented here:
https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.glpa200/tivstp.htm
Sample JCL to run the LDAP IVP in batch:
//TMP1 EXEC PGM=IKJEFT01,
// DYNAMNBR=200
//SYSPROC DD DSN=SYS1.SBPXEXEC,DISP=SHR
//*
//SYSTSPRT DD SYSOUT=*
//SYSOUT DD SYSOUT=*
//*
//SYSTSIN DD *
oshell /bin/ldapsearch -h ldaphost-p ldapport -D binddn -w passwd -s base -b "" "objectclass=*"
//STDERR DD SYSOUT=*
//STDOUT DD SYSOUT=*
//STDENV DD *
_BPXK_JOBLOG=STDERR
/*
If you run LDAP, the LDAP IVP is documented here:
https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.glpa200/tivstp.htm
Sample JCL to run the LDAP IVP in batch:
//TMP1 EXEC PGM=IKJEFT01,
// DYNAMNBR=200
//SYSPROC DD DSN=SYS1.SBPXEXEC,DISP=SHR
//*
//SYSTSPRT DD SYSOUT=*
//SYSOUT DD SYSOUT=*
//*
//SYSTSIN DD *
oshell /bin/ldapsearch -h ldaphost-p ldapport -D binddn -w passwd -s base -b "" "objectclass=*"
//STDERR DD SYSOUT=*
//STDOUT DD SYSOUT=*
//STDENV DD *
_BPXK_JOBLOG=STDERR
/*
1015
z/OS Server / Re: ARS0113E
« on: November 29, 2012, 09:16:59 AM »
Concurring with what Derek says, especially looking for a ARS0020E message right before the 113E.
And guessing that maybe you're using OAM? Anything on that side?
Ed
And guessing that maybe you're using OAM? Anything on that side?
Ed
1016
z/OS Server / Will You Be Using The Wizard To Help Install V9?
« on: November 27, 2012, 01:55:29 PM »
If so, make sure you have this APAR on when available:
| PTF UK91244 is now available 30 Jan 2013
PM76821 --- MISC UPDATES FOR ONDEMAND V9 INSTALL WIZARD
It'll fix some minor annoyances.
| PTF UK91244 is now available 30 Jan 2013
PM76821 --- MISC UPDATES FOR ONDEMAND V9 INSTALL WIZARD
It'll fix some minor annoyances.
1017
z/OS Server / Re: RACF Stuff I Find Interesting
« on: November 27, 2012, 01:07:23 PM »
Found this in a PMR and thought it was a great write-up. (In other words, don't give me credit for this. 
)
Let me discuss the issue of file ownership in USS.
This is an issue that can be a little confusing as it
has to deal with how ownership information is stored in USS.
.
Ownership in the USS filesystem is stored as the numeric
UID and GID values. When you do an ls command (or view the file
ownership in ISHELL), for each file a SAF EXTRACT is done to
RACF to map the numeric UID (or GID) to a RACF userid or groupname.
.
When the owner UID of a file is 0 (or is a UID that is defined
to more then one userid), this can create some ambiguity in the UID
to userid resolution.
.
What happens when the SAF EXTRACT for UID 0 occurs is that
RACF will search its database for the first UID 0 that maps to a
userid and then returns that userid to USS.
.
Where the ambiguity in the UID 0 to userid resolution comes in
is the RACF cache. RACF will check its cache first to see if it can
satisfy the request. Because cache contents are always in a state
of flux, the outcome of the UID 0 to userid request might not produce
the same match each time the lookup is done.
.
To be clear, the file is owned by UID 0 and security checks are
based on the file's owning UID value. The displayed userid values in
ls or in ISHELL are for DISPLAY PURPOSES ONLY.
.
I hope that helps. It can be a little confusing, but the
bottom line is the the numeric UID or GID is what is used for
access checking in USS. The displayed userid/group is just done
for our benefit (as us humans like names instead of numbers),
but is not used for access checking.
.
This is really only an issue for UIDs that have been assigned
to more then one userid.
)Let me discuss the issue of file ownership in USS.
This is an issue that can be a little confusing as it
has to deal with how ownership information is stored in USS.
.
Ownership in the USS filesystem is stored as the numeric
UID and GID values. When you do an ls command (or view the file
ownership in ISHELL), for each file a SAF EXTRACT is done to
RACF to map the numeric UID (or GID) to a RACF userid or groupname.
.
When the owner UID of a file is 0 (or is a UID that is defined
to more then one userid), this can create some ambiguity in the UID
to userid resolution.
.
What happens when the SAF EXTRACT for UID 0 occurs is that
RACF will search its database for the first UID 0 that maps to a
userid and then returns that userid to USS.
.
Where the ambiguity in the UID 0 to userid resolution comes in
is the RACF cache. RACF will check its cache first to see if it can
satisfy the request. Because cache contents are always in a state
of flux, the outcome of the UID 0 to userid request might not produce
the same match each time the lookup is done.
.
To be clear, the file is owned by UID 0 and security checks are
based on the file's owning UID value. The displayed userid values in
ls or in ISHELL are for DISPLAY PURPOSES ONLY.
.
I hope that helps. It can be a little confusing, but the
bottom line is the the numeric UID or GID is what is used for
access checking in USS. The displayed userid/group is just done
for our benefit (as us humans like names instead of numbers),
but is not used for access checking.
.
This is really only an issue for UIDs that have been assigned
to more then one userid.
1018
z/OS Server / RACF Stuff I Find Interesting
« on: November 27, 2012, 01:06:07 PM »
Recently I was asked if I knew anything about AIM (Application Identity Mapping), specifically if CMOD was affected by converting to the current level.
A group I worked with was involved in an AIM migration project many moons ago and dug up the following:
http://publib.boulder.ibm.com/infocenter/zos/v1r12/index.jsp?topic=%2Fcom.ibm.zos.r12.icha200%2Fichza2b095.htm
Any database created earlier than OS/390? Release 10 exists in stage 0 automatically until you convert it with IRRIRA00.
A database created in OS/390 Release 10 or later is automatically set to stage 3.
Stick a jobcard on these two lines of JCL and it'll tell you what AIM level your RACF database is in the SYSOUT.
//STEP EXEC PGM=IRRIRA00
//SYSPRINT DD SYSOUT=*
That job when run on our current systems displays this:
IRR66017I The system is currently operating in stage 3.
If you get that RACF is at a level lower than stage 3, you'll probably want to investigate.
A group I worked with was involved in an AIM migration project many moons ago and dug up the following:
http://publib.boulder.ibm.com/infocenter/zos/v1r12/index.jsp?topic=%2Fcom.ibm.zos.r12.icha200%2Fichza2b095.htm
Any database created earlier than OS/390? Release 10 exists in stage 0 automatically until you convert it with IRRIRA00.
A database created in OS/390 Release 10 or later is automatically set to stage 3.
Stick a jobcard on these two lines of JCL and it'll tell you what AIM level your RACF database is in the SYSOUT.
//STEP EXEC PGM=IRRIRA00
//SYSPRINT DD SYSOUT=*
That job when run on our current systems displays this:
IRR66017I The system is currently operating in stage 3.
If you get that RACF is at a level lower than stage 3, you'll probably want to investigate.
1019
Report Indexing / Re: No Documents Found bogus message???
« on: November 19, 2012, 08:19:47 AM »
By any chance, do all of the "good" files have carriage control in them and the "bad" file not have carriage control?
Ed
Ed
1020
Report Indexing / Re: No Documents Found bogus message???
« on: November 16, 2012, 08:48:22 AM »
DDP - the OS/390 Indexer had a major rewrite between CMOD V7 and CMOD V8.4.0.
There have been several PTFs against it since then.
What's the highest PTF level on your system?
Ed
There have been several PTFs against it since then.
What's the highest PTF level on your system?
Ed