Messages

1

z/OS Server / Re: Convert from RACF authentication to LDAP authentication

« on: January 19, 2023, 08:49:55 AM »

 rjrussel

Our ultimate goal is to enable Single Signon. No Signon screen for the end-users.
We had enabled this for years, with a home-grown Java front-end before the ARSGUI command. (adding /U & /P parameters)
But auditors has found a huge vulnerability in this code and it must be removed.
So we are looking for a way  to get SSO back in some other form.


We are running version 10.5

2

z/OS Server / Convert from RACF authentication to LDAP authentication

« on: December 20, 2022, 05:58:57 AM »

Hi all,

We are currently running CMOD on z/OS with RACF authentication. The customers are using the fat-client
This is implemented with a slightly modified version of the sample security exit.

However we want to convert to the content Navigator front-end instead of the fat client.
This gives us the opportunity to implement Single Sign-on. Something which is on our wish list for a long time.

A big bang scenario is out of the question. So i was thinking of running two instances for a period of time, one with RACF one with LDAP. Both accessing the same database.
I have done some experiment and i have some questions.

In the INI files i can separate all the setting of the authentication in different INI files. But there is also the "system parameters / Login Information" flag to LDAP authentication.
I found this sets a flag in the ARSSYS DB2 table.  This is common data between the two instances. What is the effect of that? Does this prohibit the RACF option?

Secondly i have tried the ARSLSYNC cmd and got it to work. But it deletes the RACF user entries if they are not in the AD.
So now i have to add them again to enable the RACF authentication to work. Is there a way to prevent ?

The intention is to have a relative short conversion period. So some ad-hoc tinkering during this period is not a problem.

Any comment on the total idea and the specific questions is welcome.
Best Regards, leo de Jong

3

OD/WEK & JAVA API / Implementing RESTful services on z/OS

« on: October 12, 2021, 04:11:17 AM »

Hi
i'm just beginning with reading about REST services. But i'm wondering if it possible to run it all on z/OS.
I mean, install the server in a WAS on z/OS, but calling the REST services from Linux
Or should i use WAS on an other platform?
To begin the ODRESTAdmin.jar is not installed on z/OS.

Does anybody have experimented with this new feature.

Any idea's and tips are welcome.
Leo de Jong

4

z/OS Server / Re: V10.1 and UTS ??

« on: October 27, 2020, 07:41:14 AM »

Hi

I  tried a number of things with bit settings in ARSSEG table. But nothing helped.
The solution was going to DB2 function level V12R1M506.
That function level enables dropping of a table in a UTS. The tablespace is automatically dropped at the same time.

Leo

5

z/OS Server / Re: Moving CMOD to a new DB2 Region

« on: February 13, 2020, 04:07:08 AM »

Hi

Out of head. It depends if you also want to move OAM data to an other DB2.
I think if you just want to move the OD tables, apart from all the obvious DB2 considerations, this should transparant to CMOD.
OAM is much more difficult, it is so involved in z/OS and SMS.
Leo

6

z/OS Server / V10.1 and UTS ??

« on: February 12, 2020, 02:49:45 AM »

Hi

I got myself into a bit of trouble and i hope anybody knows a trick to correct things.
A few years ago when we where still at V9.0 i decided in a fit of enthusiasm to convert the index tables to UTS.
All worked great until we had to delete an AG. That fails with:
DSNT408I SQLCODE = -669, ERROR:  THE OBJECT CANNOT BE EXPLICITLY DROPPED.                 REASON 0001
In a UTS you can't drop only the table, you have to drop the TABLESPACE.

I opened a PMR at that time and got the replay that V9 doesn't support UTS, that will be available in V10.
So i accepted that for the time being that whenever an Application Group needs to be deleted i first have to convert it back to Segmented tableSpace. Then the DELETE AG works fine.

But now we run at V10.1 for a while. New tables are created as UTS and i can delete these (newly created) AG without the SQLCODE -669.
However i was surprised that i still get SQLCODE -669 when  i try to delete an old (pre-V10.1)  AG for which i converted the TS to UTS.

On our test system i tried some hacking. I noticed in ARSSEG the MASK column het bit X'80' set for the new UTS tables, so i set this bit for an old table and then tried a DELETE AG again.
Still SQLCODE -669 !!
So i'm wondering how does CMOD knows this is a new UTS table created by V10.1 and uses a DROP TABLESPACE in stead of a DROP TABLE.

I know i'm going into unsupported area's but we are talking about definitions which must be deleted anyway.

Thanks in advance
Leo de Jong

7

Windows Client / Mapping AFP QR-code to Windows font ??

« on: October 20, 2015, 03:25:37 AM »

Hi
We have archived an AFP document with a QR-code box.
Now we get the warning box:
1323: The character set 'C0000001' was not found in the CSDEF.FNT file. ...
and
1322: The code page 'T1GMCT00'was not found in the CPDEF.FNTT file. ...

I know how to change these files, but what Windows font do I use.
Anybody has experience with this.
Leo de Jong

8

z/OS Server / Re: What is the best way to change retetion for Appgrp on OAM storage set

« on: September 08, 2015, 08:39:59 AM »

Hi
What we have done is write a little Rexx to generate a buch of OSREQ TSO commands.
The format is.
OSREQ CHANGE collection objectname RETENTIONPERIOD(rp)
In the Rexx you have to generate the objectnames from the directory tables and to get the retention period you have to do a lot calculation with the date.
No need to unload/ reload
Leo

9

z/OS Server / Re: What happened to datatype=Time in V9

« on: December 03, 2014, 08:07:30 AM »

Thanks for the info.

10

z/OS Server / What happened to datatype=Time in V9

« on: July 18, 2014, 01:01:58 AM »

Hi,

We are busy migrating from V8.4 to V9.0 on z/OS. And i having trouble with an AG which has a field type is Time.
When i use XML to define the AG in V9.0 i get
ARS7749E The JOBTIME object cannot be added to the applicationGroup object named 'JOBLOG'.

JOBTIME is defined as:

<field name="JOBTIME" type="Index" dataType="Time" >   
</field >                                             

And on the Admin client:  Time or Time (old style) is not on the Pull-down menu for a field .

however converted repositories do display the type correctly.

Is this datatype depreciated ?? Where is this documented ??

Anybody know

11

z/OS Server / What alternative for ARSMVS_DEBUG_LOAD390 in V9.0

« on: July 18, 2014, 12:51:52 AM »

Hi all,

In previous releases the ARSMVS_DEBUG_LOAD390=1 parameter was sometimes helpfull in debugging indexing problems with the OS/390 indexer.
But in V9.0 it doesn't work anymore. IS there an alternative ??

Leo
P.s. we are talking z/OS.

12

z/OS Server / Re: Why am I getting this error? I cannot find any documentation anywhere!

« on: September 04, 2013, 07:52:27 AM »

I got this message too.
Solved by adding REGION=0M in the jobcard.
Apparantly there is not enough storage for the program.

13

z/OS Server / How to fallback from CMOD 9.0 to 8.4.0

« on: July 24, 2013, 07:33:19 AM »

Hi all,

I'm busy with upgrading CMOD for z/OS from 8.4.0 to 9.0.
I have installed it on our sandbox system and seems to work oke.
Now i making plans to move the new release to production and it is good practice, for me to have a tested fallback plan.
So if on the monday after the implementation, thinks are going bad we can go back to the old version.

But in the manuals there is no mention of even the possibility of a fallback.
What about the database changes and the documents which are loaded with 9.0.
I can only think about a complete backup of the whole DB2 subsystem, catalog and tables with ADRDSSU.
But then we have to reload everything which has been loaded during the time we ran 9.0.

Anybody an idea ??
Leo

14

z/OS Server / Re: On demand and DB2 V10 performance

« on: February 20, 2013, 02:53:47 AM »

Hi,
Sorry for late reply:

Ed_arnold: Thanks for the tip. We are going to migrate to 9.0 from 8.4

cmodpuser: I did not open a PMR with IBM. I just rebound the package.
Found the tip in a presentattion about DB2 V10 installation experiences.
But they had the same increase with a LDAP server they ran on z/OS.
The thing which is common with CMOD is the use of ODBC on  z/OS.

jeffs42885:
I don't think it has anything to do with the release of CMOD. Just the way DB2 handles ODBC type work. And in most cases CMOD is the user of ODBC interface to DB2 on the z/OS system.  So you will only notice the increase there.

Leo

15

z/OS Server / On demand and DB2 V10 performance

« on: September 05, 2012, 04:10:58 AM »

Hi,

I's like to share some experiences we had with Ondemand since we implemented DB2 V10.
A few months ago we installed V10 on our production system with OnDemand. After a few weeks we noticed a large increase of CPU-usage of the ARSSOCK task. The CPU almost tripled. Soon we found out it was all CPU executing SQL.
We did all of the standard recommendations in the V10 books like RUNSTATS with all the new options. Rebind the ODBC packages and the ARS* packages. But no improvement.

But the solution at the end was to bind the DSNCLINF package with the REOPT(ALWAYS) option. CPU consumption went back to normal.
We also tried REOPT(AUTO). But then we struck an open APAR (which might be solved in the meantime).

I don't know if other sites have the same experience.

Vriendelijke Groeten / Kind Regards,

Leo de Jong