Topics

1

z/OS Server / Convert from RACF authentication to LDAP authentication

« on: December 20, 2022, 05:58:57 AM »

Hi all,

We are currently running CMOD on z/OS with RACF authentication. The customers are using the fat-client
This is implemented with a slightly modified version of the sample security exit.

However we want to convert to the content Navigator front-end instead of the fat client.
This gives us the opportunity to implement Single Sign-on. Something which is on our wish list for a long time.

A big bang scenario is out of the question. So i was thinking of running two instances for a period of time, one with RACF one with LDAP. Both accessing the same database.
I have done some experiment and i have some questions.

In the INI files i can separate all the setting of the authentication in different INI files. But there is also the "system parameters / Login Information" flag to LDAP authentication.
I found this sets a flag in the ARSSYS DB2 table.  This is common data between the two instances. What is the effect of that? Does this prohibit the RACF option?

Secondly i have tried the ARSLSYNC cmd and got it to work. But it deletes the RACF user entries if they are not in the AD.
So now i have to add them again to enable the RACF authentication to work. Is there a way to prevent ?

The intention is to have a relative short conversion period. So some ad-hoc tinkering during this period is not a problem.

Any comment on the total idea and the specific questions is welcome.
Best Regards, leo de Jong

2

OD/WEK & JAVA API / Implementing RESTful services on z/OS

« on: October 12, 2021, 04:11:17 AM »

Hi
i'm just beginning with reading about REST services. But i'm wondering if it possible to run it all on z/OS.
I mean, install the server in a WAS on z/OS, but calling the REST services from Linux
Or should i use WAS on an other platform?
To begin the ODRESTAdmin.jar is not installed on z/OS.

Does anybody have experimented with this new feature.

Any idea's and tips are welcome.
Leo de Jong

3

z/OS Server / V10.1 and UTS ??

« on: February 12, 2020, 02:49:45 AM »

Hi

I got myself into a bit of trouble and i hope anybody knows a trick to correct things.
A few years ago when we where still at V9.0 i decided in a fit of enthusiasm to convert the index tables to UTS.
All worked great until we had to delete an AG. That fails with:
DSNT408I SQLCODE = -669, ERROR:  THE OBJECT CANNOT BE EXPLICITLY DROPPED.                 REASON 0001
In a UTS you can't drop only the table, you have to drop the TABLESPACE.

I opened a PMR at that time and got the replay that V9 doesn't support UTS, that will be available in V10.
So i accepted that for the time being that whenever an Application Group needs to be deleted i first have to convert it back to Segmented tableSpace. Then the DELETE AG works fine.

But now we run at V10.1 for a while. New tables are created as UTS and i can delete these (newly created) AG without the SQLCODE -669.
However i was surprised that i still get SQLCODE -669 when  i try to delete an old (pre-V10.1)  AG for which i converted the TS to UTS.

On our test system i tried some hacking. I noticed in ARSSEG the MASK column het bit X'80' set for the new UTS tables, so i set this bit for an old table and then tried a DELETE AG again.
Still SQLCODE -669 !!
So i'm wondering how does CMOD knows this is a new UTS table created by V10.1 and uses a DROP TABLESPACE in stead of a DROP TABLE.

I know i'm going into unsupported area's but we are talking about definitions which must be deleted anyway.

Thanks in advance
Leo de Jong

4

Windows Client / Mapping AFP QR-code to Windows font ??

« on: October 20, 2015, 03:25:37 AM »

Hi
We have archived an AFP document with a QR-code box.
Now we get the warning box:
1323: The character set 'C0000001' was not found in the CSDEF.FNT file. ...
and
1322: The code page 'T1GMCT00'was not found in the CPDEF.FNTT file. ...

I know how to change these files, but what Windows font do I use.
Anybody has experience with this.
Leo de Jong

5

z/OS Server / What happened to datatype=Time in V9

« on: July 18, 2014, 01:01:58 AM »

Hi,

We are busy migrating from V8.4 to V9.0 on z/OS. And i having trouble with an AG which has a field type is Time.
When i use XML to define the AG in V9.0 i get
ARS7749E The JOBTIME object cannot be added to the applicationGroup object named 'JOBLOG'.

JOBTIME is defined as:

<field name="JOBTIME" type="Index" dataType="Time" >   
</field >                                             

And on the Admin client:  Time or Time (old style) is not on the Pull-down menu for a field .

however converted repositories do display the type correctly.

Is this datatype depreciated ?? Where is this documented ??

Anybody know

6

z/OS Server / What alternative for ARSMVS_DEBUG_LOAD390 in V9.0

« on: July 18, 2014, 12:51:52 AM »

Hi all,

In previous releases the ARSMVS_DEBUG_LOAD390=1 parameter was sometimes helpfull in debugging indexing problems with the OS/390 indexer.
But in V9.0 it doesn't work anymore. IS there an alternative ??

Leo
P.s. we are talking z/OS.

7

z/OS Server / How to fallback from CMOD 9.0 to 8.4.0

« on: July 24, 2013, 07:33:19 AM »

Hi all,

I'm busy with upgrading CMOD for z/OS from 8.4.0 to 9.0.
I have installed it on our sandbox system and seems to work oke.
Now i making plans to move the new release to production and it is good practice, for me to have a tested fallback plan.
So if on the monday after the implementation, thinks are going bad we can go back to the old version.

But in the manuals there is no mention of even the possibility of a fallback.
What about the database changes and the documents which are loaded with 9.0.
I can only think about a complete backup of the whole DB2 subsystem, catalog and tables with ADRDSSU.
But then we have to reload everything which has been loaded during the time we ran 9.0.

Anybody an idea ??
Leo

8

z/OS Server / On demand and DB2 V10 performance

« on: September 05, 2012, 04:10:58 AM »

Hi,

I's like to share some experiences we had with Ondemand since we implemented DB2 V10.
A few months ago we installed V10 on our production system with OnDemand. After a few weeks we noticed a large increase of CPU-usage of the ARSSOCK task. The CPU almost tripled. Soon we found out it was all CPU executing SQL.
We did all of the standard recommendations in the V10 books like RUNSTATS with all the new options. Rebind the ODBC packages and the ARS* packages. But no improvement.

But the solution at the end was to bind the DSNCLINF package with the REOPT(ALWAYS) option. CPU consumption went back to normal.
We also tried REOPT(AUTO). But then we struck an open APAR (which might be solved in the meantime).

I don't know if other sites have the same experience.

Vriendelijke Groeten / Kind Regards,

Leo de Jong

9

z/OS Server / Running multiple ARSSOCK tasks on same LPAR and database

« on: May 03, 2012, 08:24:24 AM »

Hi,
I'm trying to run a second instance of ARSSOCK on the same LPAR and accessing the same database.

I have modified ars.ini:
[@SRV@_ARCHIVE]                             
HOST=                                       
PORT=8021                                   
-  -  -  -  -  -  -  -  -  -  -  -  -  -  -
SRVR_INSTANCE=XODBV71                       
SRVR_INSTANCE_OWNER=XO1XPDB                 
SRVR_OD_CFG=/etc/ars/ars.cfg               
SRVR_SM_CFG=/etc/ars/ars.cache             
[@SRV@_TEST]                               
HOST=                                       
PORT=8024                                   
-  -  -  -  -  -  -  -  -  -  -  -  -  -  -
SRVR_INSTANCE=XODBV71                       
SRVR_INSTANCE_OWNER=XO1XPDB                 
SRVR_OD_CFG=/etc/ars/arst.cfg               
SRVR_SM_CFG=/etc/ars/arst.cache             

So the same INSTANCE and OWNER but different PORT.

When i start ARSSOCK i use the parameter PARM='/TEST'  (where is this documented ?)

That works, i that respect that i can connect with a client.

But i can't get i to work with batch ARSLOAD or ARSDOC get.
ARSLOAD ends with message:
arsload: Could not connect to server to establish log id

And in /var/ars/tmpt/arssock.err i see message:

Thu May  3 17:00:58 2012: JONGDELB asid(003F)(651) -> getaddrinfo errno = 129, errno2 = X'0594003D', rc = 1

This means:
ReasonCode: 0594003D                                       
  Module: Unknown  ErrnoJr: 61 JRDIRNOTFOUND               
  Description: A directory in the pathname was not found   

My questions are:
Is this possible what i'm trying ?
What is the directory that can't found.?
Or any other hints and tips

Leo 

10

z/OS Server / How do i re-archive AFP data (ardoc get,unload and load)

« on: October 28, 2008, 08:16:11 AM »

We are busy converting from OnDemand V2 to V7.
One of the thing we hit is the following: In V2 we occasionally wanted to re-archive data, because of various reasons: (correction of wrong definitions or taking a copy of data for development).
This was done by running three steps
1) IODBPRINT to print the data to an OS dataset
2) IODBSTOR to store the data with the new definitions or at an other system
and optionally:
3) IODBDLET to delete the original SRT entry.

If have tried to do the same thing in V7. I managed to do this with line-data but AFP is given my trouble.
When i do an "ARSDOC GET -X nnnnn -a" i get the data in a unix file.
But to my knowledge it is impossible to run ARSLOAD directly from an USS file.
And when i view the output there is no CR/LF to indicate an end of file. How do copy this output to an OS RECFM=VBS file.
Or is there a more clever way of doing this.

Thanks in advance,
Leo de Jong
Rabobank Netherlands