Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - Eli

Pages: [1] 2
1
z/OS Server / Re: PTGN exit is not working through ARSLOAD started task
« on: August 30, 2021, 10:01:35 AM »
Hi Ed,

Problem solved ! In fact, the started task user ARSUSER must be defined to CMOD as an ADM user. Here is the answer from Larry F (the IBM support team):

"So we now know the problem is not arsload batch working vs STC arsload not working, but
the problem is related to the userid ARSUSER.   Most likely ARSUSER is not defined to CMOD.
Use the CMOD admin client to add the user ARSUSER to CMOD.  Make the user ARSUSER
a system administrator.  Doesn't matter what you set the password to.  Then retry the
arsload batch job with USER=ARSUSER.  See if that works this time."

I've tested and it is working as designed !

Many thanks,

Eli

2
z/OS Server / Re: PTGN exit is not working through ARSLOAD started task
« on: August 23, 2021, 07:44:41 AM »
Hi Ed,

All checked, and that's all ok:

1. Verify that the PassTicket to RACF for the associated application(task) id is defined.
=> OK

2. Go to RACF Panels (typically ISPF option 13.12)
choose '2' (GENERAL RESOURCE PROFILES) --> choose 'D' (DISPLAY Display profile contents)
=> OK

3. On the 'RACF - GENERAL RESOURCE SERVICES - DISPLAY' screen enter the following:
'PTKTDATA' for the CLASS, and '*' for PROFILE CLASS ===> PTKTDATA PROFILE ===> *
=> OK

4. Press enter --> you should now see the RACF - DISPLAY GENERAL RESOURCE PROFILE screen
=> OK

5. Press hit enter again. Note that the arssockd application should be defined to the PTKTDATA class.
=> OK

6. If exit ARSPTGN is not active, from the MVS system console issue:
SETPROG EXIT,ADD,EXITNAME=ARS.PTGN,MOD=ARSPTGN,DSNAME=
ARS.DATASET.HOLDING.THE.EXIT
=> OK

7. Ensure that /etc/ars/ does not contain an arsload.cfg
=> OK

8. If ARSUSECZ does not exist, from the MVS system console issue:
SETPROG EXIT,ADD,EXITNAME=ARS.SECURITY,MOD=ARSUSECZ,DSNAME=
ARS.DATASET.HOLDING.THE.EXIT
=> OK

9. Recycle the ARSSOCKD started task.
=> OK

====

So, following your recommendation, I'll open a problem ticket with support. Can you please tell me what is the link or procedure to open this ticket ?

Many thanks,

Eli

3
z/OS Server / Re: PTGN exit is not working through ARSLOAD started task
« on: August 20, 2021, 01:29:13 PM »
Hi Ed,

Thanks for returning... I'll check the link you've recommended. Here is the output of the LU command:

USER=ARSUSER                   
                               
OMVS INFORMATION               
----------------               
UID= 0000000127               
HOME= /usr/lpp/ars/V10R1M0/tmp
PROGRAM= /bin/sh               
CPUTIMEMAX= NONE               
ASSIZEMAX= NONE               
FILEPROCMAX= NONE             
PROCUSERMAX= NONE             
THREADSMAX= NONE               
MMAPAREAMAX= NONE             
***                           

Best regards,
Eli

4
z/OS Server / PTGN exit is not working through ARSLOAD started task
« on: August 20, 2021, 05:50:28 AM »
Hi Team,

Please, try to help me on this:

CMOD: V10R5M0
EXIT: ARS.PTGN

The ARS.PTGN was successful implemented and tested in the following situations:

1- Executing ARSIVPJ1 with NO User & NO Pw:

SDSF OUTPUT DISPLAY ARSIVPJ1 JOB24378  DSID     3 LINE 28      COLUMNS 02-
COMMAND INPUT ===>                                            SCROLL ===> C
 J E S 2  J O B  L O G  --  S Y S T E M  L 1 @

08.36.29 JOB24378  IRR010I  USERID D003548  IS ASSIGNED TO THIS JO 08.36.29 JOB24378  ICH70001I D003548  LAST ACCESS AT 07:41:40 ON T
08.36.29 JOB24378  $HASP373 ARSIVPJ1 STARTED - INIT 5    - CLASS A
08.37.26 JOB24378  $HASP395 ARSIVPJ1 ENDED - RC=0000
         IEFC653I SUBSTITUTION JCL - 10130MVS,'ELIFM',MSGLEVEL=(1,1),MSGCLA
       2 //PROCESS  OUTPUT  DEFAULT=YES,CLASS=*,JESDS=ALL,OUTDISP=HOLD     
       3 //STEP1     EXEC PGM=ARSLOAD,REGION=0M,                           
        //         PARM=('/-h ARCHIVE -n -v -s OBJINPT                   
         //             -Z ivp -g "ARSIVPR1"   tempname')                 
         //** NOTE(ELI): THE USER & PW ARE NOT NEEDED - USING ARS.PTGN EXIT

2- Starting Proc ARSYSPIN as a PROTECTED USER

 J E S 2  J O B  L O G  --  S Y S T E M  L 1 @ @  --  N O D E  S B R Y S L 1   
                                                                               
--- THURSDAY,  19 AUG 2021 ----                                                 
IEF695I START ARSYSPIN WITH JOBNAME ARSYSPIN IS ASSIGNED TO USER ARSUSER , GROUP CMODGRP
$HASP373 ARSYSPIN STARTED                                                       
IEF403I ARSYSPIN - STARTED - TIME=07.53.30                                     
ARS4336I The ARSYSPIN instance ARCHIVE is ready                                 
N JOB MSGLEVEL=1                                               STC24350 ARSY0103I <*NOSPINDELAY=       
ARSY0103I < ODHOST=ARCHIVE     
ARSY0103I < ODINSTANCE=ARCHIVE
ARSY0103I <*ODUSER=ODADMIN     
ARSY0103I <*ODUSERPW=********

=====

The problem is that when starting the ARSLOAD started task Procedure, the job fails with rc=6 and the msg:

IEF695I START ARSLOAD  WITH JOBNAME ARSLOAD  IS ASSIGNED TO USER ARSUSER , GROUP CMODGRP
$HASP373 ARSLOAD  STARTED                                                     
IEF403I ARSLOAD - STARTED - TIME=08.20.11                                     
IEF404I ARSLOAD - ENDED - TIME=08.20.12                                       
$HASP395 ARSLOAD  ENDED - RC=0006
...                                           
ARS1607E The OnDemand stash file >< either does not exist or is not valid. 

The question is: Why the ARSLOAD when executing through a Batch JCL, with no USER and no PASSWORD is exploiting the ARS.PTGN exit and when executing through a Started Task Procudure (/S ARSLOAD) is not exploiting the PTGN exit ?

============   

Here is how the EXIT, the PTKTDATA profile and the ARSLOAD PROC are defined: 

EXIT:

D PROG,EXIT,EXITNAME=ARS.PTGN,DIAG
                           
CSV464I 10.43.08 PROG,EXIT DISPLAY 279                       
EXIT ARS.PTGN                                               
MODULE    STATE EPADDR    LOADPT    LENGTH    JOBNAME   PARAM
ARSPTGN     A   96C96038  16C96038  00000210  *


RACF PTKTDATA Profile:

 ********************************* Top of Data ************
CLASS      NAME                                           
-----      ----                                           
PTKTDATA   ARSSOCKD                                       
                                                         
LEVEL  OWNER      UNIVERSAL ACCESS  YOUR ACCESS  WARNING 
-----  --------   ----------------  -----------  ------- 
 00    MVSPGR3         NONE               NONE    NO     
                                                         
INSTALLATION DATA                                         
-----------------

ARSLOAD PROC:

//ARSLOAD  PROC                                         
//ARSLOAD  EXEC PGM=ARSLOAD,REGION=0M,TIME=NOLIMIT,     
//  PARM=('/-h ARCHIVE -C Q')                           
//* PARM=('/-h ARCHIVE -C Q')                           
//STEPLIB  DD DISP=SHR,DSN=CMOD.IODNNL1.SARSLOAD       
//         DD DISP=SHR,DSN=DBDCSUP.DB2.SL1DSNP.SDSNEXIT
//         DD DISP=SHR,DSN=DBDCMAST.DB2.SL1.SDSNLOAD   
//         DD DISP=SHR,DSN=DBDCSUP.DB2.SL1DSNP.SDSNLOD2
//         DD DISP=SHR,DSN=SYS1.SAPKMOD1               
//SYSPRINT DD SYSOUT=*,RECFM=FBA,LRECL=121,BLKSIZE=6050
//SYSOUT   DD SYSOUT=*                                 

=======

Best regards,
Eli F. Martins

5
z/OS Server / Re: MSG ARS0000E Initialization of ICU for directory >/usr/lpp/ars/V10R5M0/locale/
« on: May 07, 2021, 07:20:35 AM »
Updates:

1- MAXMMAPAREA was Ok

 RESPONSE=PIDD                                                 
  BPXO043I 08.08.43 DISPLAY OMVS 056                           
    MAXMMAPAREA     =     120000    MAXASSIZE       = 2147483647 

2- Fortunately I run the command with no problem using JOB instead OMVS command. (Region=0M).

3- Also, command run ok after I have increased the 'address space' value, using the 'ulimit -A' shell command:

# ulimit -a
core file   8192b
cpu time             180
data size            unlimited 
file size            unlimited   
stack size           unlimited
file descriptors  64000     
address space    36864k
memory above bar  256m       
# ulimit -A 211800          
# ulimit -a                   
core file            8192b
cpu time             180
data size            unlimited   
file size            unlimited 
stack size           unlimited 
file descriptors  64000   
address space    211800k 
memory above bar  256m         

4- In summary, the cause was really a lack of resource, however, the CMOD message should be more "friendly".

Thanks Ed,

Eli 

6
z/OS Server / Re: How can ARSYSPIN exploit ARS.PTGN exit ?
« on: May 04, 2021, 11:52:47 AM »
Hi Ed,

After a z/OS maintenance, the exit was incorrectly defined. The problem was fixed and the ARS.PTGN exit is working as designed.

Many thanks,

Eli

7
z/OS Server / MSG ARS0000E Initialization of ICU for directory >/usr/lpp/ars/V10R5M0/locale/
« on: May 04, 2021, 10:43:34 AM »
Hi Team,

Please, can you help me on this ?

1- I am just trying to install CMOD V10R5M0.
2- Trying to run the first command to create DB2 Tables, I am receiving:   

ARS0000E Initialization of ICU for directory >/usr/lpp/ars/V10R5M0/locale/< failed - please ensure proper installation

The sequence is:
#                                                                                                                     
# export DSNAOINI=/usr/lpp/ars/V10R5M0/config/cli.ini                                                                 
# export STEPLIB='SDSDB2.IU.SDSNEXIT:SYS1.DB2.SDSNLOAD:SDSDB2.IU.SDSNLOD2:SDSDB2.IU.SDSNMACS'                         
# cd /usr/lpp/ars/V10R5M0/bin                                                                                         
# arsdb -trs                                                                                                             
ARS0000E Initialization of ICU for directory >/usr/lpp/ars/V10R5M0/locale/< failed - please ensure proper installation
# 

More information about the environment follows:

1- Listing Locale directory:

# cd /usr/lpp/ars/V10R5M0/locale                                       
# ls -lia                                                             
total 60624                                                           
 17 drwxrwxr-x  29 ARSUSER  CMODGRP     8192 Jan 22 13:50 .         
   1 drwxrwxr-x  10 ARSUSER  CMODGRP     8192 May  2 08:07 ..         
   44 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Mar 25  2020 IBM       
   18 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 ara       
 108 -rwxrwxr-x   2 ARSUSER  CMODGRP    12890 Jan 22 13:50 arscpcs.cfg
   19 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 chs       
   20 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 cht       
   21 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 cze       
   22 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 dan       
   23 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 deu       
   24 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 ell         
   25 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 enu         
   26 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 esp         
   27 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 fin         
   28 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 fra         
   29 drwxr-xr-x   2 ARSUSER  CMODGRP        0 Mar 25  2020 frc         
   30 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 heb         
   31 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 hrv         
   32 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 hun         
 257 -rwxrwxr-x   2 ARSUSER  CMODGRP  30768032 Mar 25  2020 icudt58e.dat
   33 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 ita         
   34 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 jpn         
   35 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 kor         
   36 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 nld         
   37 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 nor         
   38 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 plk         
   39 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 ptb         
   40 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 rus         
   41 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 sky         
   42 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 slo         
   43 drwxr-xr-x   2 ARSUSER  CMODGRP     8192 Jan 22 13:50 sve         
#                                                                         
2- Listing ARSUSER

  USER=ARSUSER  NAME=FERNANDES MARTINS, E  OWNER=CLASGEN   CREATED=21.089       
 DEFAULT-GROUP=USERS    PASSDATE=N/A    PASS-INTERVAL= 90 PHRASEDATE=21.089   
 ATTRIBUTES=NOPASSWORD PASSPHRASE                                             
 REVOKE DATE=NONE   RESUME DATE=NONE                                         
 LAST-ACCESS=21.124/07:06:41                                                 
 CLASS AUTHORIZATIONS=NONE                                                   
 INSTALLATION-DATA=003548 631                                                 
 NO-MODEL-NAME                                                               
 LOGON ALLOWED   (DAYS)          (TIME)                                       
 ---------------------------------------------                               
 ANYDAY                          ANYTIME                                     
  GROUP=USERS     AUTH=USE      CONNECT-OWNER=CLASGEN   CONNECT-DATE=21.089   
    CONNECTS=    04  UACC=NONE     LAST-CONNECT=21.124/07:06:41               
    CONNECT ATTRIBUTES=NONE                                                   
    REVOKE DATE=NONE   RESUME DATE=NONE                                       
  GROUP=CMOD      AUTH=USE      CONNECT-OWNER=CLASGEN   CONNECT-DATE=21.089   
    CONNECTS=    00  UACC=NONE     LAST-CONNECT=UNKNOWN                       
    CONNECT ATTRIBUTES=SPECIAL                                               
    REVOKE DATE=NONE   RESUME DATE=NONE                                       
  GROUP=CMODGRP   AUTH=USE      CONNECT-OWNER=CLASGEN   CONNECT-DATE=21.089   
    CONNECTS=    00  UACC=NONE     LAST-CONNECT=UNKNOWN                       
    CONNECT ATTRIBUTES=SPECIAL OPERATIONS                                     
    REVOKE DATE=NONE   RESUME DATE=NONE                                       
SECURITY-LEVEL=IBM_CONFIDENTIAL                                               
CATEGORY-AUTHORIZATION                                                       
 NONE SPECIFIED 
                                 
OMVS INFORMATION                 
----------------                 
UID= 0000010204                 
HOME= /usr/lpp/ars/V10R5M0/tmp   
PROGRAM= /bin/sh                 
CPUTIMEMAX= NONE                 
ASSIZEMAX= NONE                 
FILEPROCMAX= NONE               
PROCUSERMAX= NONE               
THREADSMAX= NONE                 
MMAPAREAMAX= NONE               
***                             

3- ARS.INI

Ý@SRV@_ARCHIVE¨                                   
HOST=BLDISDMD                                     
PROTOCOL=2                                       
PORT=1445                                         
SRVR_INSTANCE=CMODDB                             
SRVR_INSTANCE_OWNER=ARSUSER                       
SRVR_OD_CFG=/usr/lpp/ars/V10R5M0/config/ars.cfg   
SRVR_SM_CFG=/usr/lpp/ars/V10R5M0/config/ars.cache
SRVR_FLAGS_DOCUMENT_EXIT=0                       
SRVR_FLAGS_FORCE_SECURITY=0                       
SRVR_FLAGS_FOLDER_APPLGRP_EXIT=0                 
SRVR_FLAGS_SECURITY_EXIT=0                       
SRVR_FLAGS_SQL_QUERY_EXIT=0                       
#SSL_KEYRING_STASH=/etc/ars/ars.sth               
#DIRECTORY=/ars               

4- ARS.CFG

ARS_ORIGINAL_CODEPAGE=0                     
ARS_LANGUAGE=ENU   
ARS_NUM_DBSRVR=4   
ARS_TMP=/usr/lpp/ars/V10R5M0/tmp                   
ARS_PRINT_PATH=/usr/lpp/ars/V10R5M0/tmp             
DB_ENGINE=DB2         

5- CLI.INI 

ÝCOMMON¨         
MVSDEFAULTSSID=DB2
ÝDB2¨             
PLANNAME=DSNACLI   

==========

Best regards,
Eli                         
                                                                                                                                                                                                             

8
z/OS Server / Re: How can ARSYSPIN exploit ARS.PTGN exit ?
« on: April 13, 2021, 12:25:46 PM »
Yes, sounds something is wrong with ars.ptgn exit too:

D PROG,EXIT,EXITNAME=ARS.PTGN,DIAG
CSV463I NO MODULES ARE ASSOCIATED WITH EXIT ARS.PTGN

I will check this firstly and see if that was causing our problem.

I will let you know. Thanks.

9
z/OS Server / Re: How can ARSYSPIN exploit ARS.PTGN exit ?
« on: April 13, 2021, 12:20:26 PM »
Ed,

It sound some problem with CMOD security exit, after some changes in z/OS. I am just checking this. Here is why I am suspecting that something is wrong with z/OS definitions:

D PROG,EXIT,EXITNAME=ARS.SECURITY,DIAG
CSV463I NO MODULES ARE ASSOCIATED WITH EXIT ARS.SECURITY

I will also check PTGN and try to see if something is affecting the Passticket process. I'll let you know. 

10
z/OS Server / Re: How can ARSYSPIN exploit ARS.PTGN exit ?
« on: April 13, 2021, 12:07:28 PM »
Hello Ed,

Following answer:

IEF695I START ARSYSPIN WITH JOBNAME ARSYSPIN IS ASSIGNED TO USER ARSUSER , GROUP CMODGRP

=====
ARSUSER is the same user of ARSSOCKD started task.

11
z/OS Server / Re: How can ARSYSPIN exploit ARS.PTGN exit ?
« on: April 12, 2021, 10:45:27 AM »
Hello Ed,

Tks for returning...

I've tried without the parameters too, however, the same problem has occurred. That was my first try, and after I leave the parameters, without the values. All resulted the same msg indicating incorrect user/pw.

Regards, Eli.

 

12
z/OS Server / How can ARSYSPIN exploit ARS.PTGN exit ?
« on: April 12, 2021, 05:55:42 AM »
Hello CMOD team,

I was defining ARS.PTGN exit to exploit RACF Passticket feature for CMOD environemnt.

The configuration was done and it is working with no problem when I submit a JOB directly calling ARSLOAD application.

For example, using the sample ARSIVPJ1, excluding the User and Password:

//STEP1     EXEC PGM=ARSLOAD,REGION=0M,         
//         PARM=('/-h ARCHIVE -n -v -s OBJINPT   
//             -Z ivp -g "ARSIVPR1"   tempname')

The profile defined in the RACF PTKTDATA is:

RDEFINE PTKTDATA ARSSOCKD SSIGNON(KEYMASKED(415253534f434b44)) UACC(NONE)

However, when I try to exploit the passticket from the ARSYSPING (that should call the ARSLOAD to complete this Job), excluding the value of the parms ODUSER= and ODUSERPW= , in the //ARSYPARM card, the passticket does not work as expected and receive the message " ARS1105E Userid or password is invalid".

Following is how is defined the ODUSER= and ODUSERPW= in the //ARSPARM:
ARSY0103I <*NOSPINDELAY=     
ARSY0103I < ODHOST=ARCHIVE   
ARSY0103I < ODINSTANCE=ARCHIVE
ARSY0103I < ODUSER=           
ARSY0103I < ODUSERPW=         
ARSY0103I <*OUTCC=           

The question is: How can the ARSYSPIN exploit the ARS.PTRN exit ?

Thanks,

Eli
eli@ibm.com

13
z/OS Server / Re: Job and/or Started Task ARSYSPIN CMOD z/OS V10R1
« on: March 19, 2021, 04:53:03 AM »
Good morning, Ed,

Thanks for information.

Eli

14
z/OS Server / Job and/or Started Task ARSYSPIN CMOD z/OS V10R1
« on: March 12, 2021, 06:56:39 AM »
Hello CMOD z/OS Team,

I'm not finding any JCL/JOB/Started-Task member for ARSYSPIN in the SARSINST library.

Also, I'm not finding any reference to include ARSYSPIN as a STARTED TASK in the CONFIGURATION GUIDE for V10R1M0.

The questions are:

1- If ARSYSPIN should be run as a Started Task, why it is not documented in the CONFIG GUIDE (that specify just two started task for CMOD: ARSSOCKD and ARSLOAD) ?
2- Why there is no entry in the SARSINST library for ARSYSPIN ?       

Although the in the ADM guide have a chapter for ARSYSPIN, it should be a good practice to include a sample JOB/PROC JCL in the SARSINST Library, and also, if it to be run as a started task, it should ne documented in the CONFIG guide too.

I'll appreciate your considerations about.

Thanks and regards,

Eli       

15
z/OS Server / Re: CMOD z/OS V10R1M0 - AbendU4080 running IVPs ARSIVPJ1 or ARSIVPJ2
« on: February 18, 2021, 07:51:43 AM »
Hi Mr. God Ed !

Yes, I was using <> .... (sorry !).

Withount them, the IVP runs OK !

Many thanks and best regards,

Eli F. M.

Pages: [1] 2