[prev in list] [next in list] [prev in thread] [next in thread] 

List:       racf-l
Subject:    Re: How ZSecure generates commands question
From:       Bogdan Belciu <belciu.bogdan () GMAIL ! COM>
Date:       2017-06-28 9:30:15
Message-ID: CADyF5zOrZKJ97uGVo9Z64DaOdLYDQe6nbSjFkF+sDXi_4=4gdw () mail ! gmail ! com
[Download RAW message or body]

Thanks Ronald,

that's exactly the problem the one described in this APAR. The version of
Zsecure where I have the issue is 2.1.1
For now I will live with the LRECL=255 and I will try to find from MVS team
how to get the fix.


On Wed, Jun 28, 2017 at 10:28 AM, Ronald van der Laan <nl50294@gmail.com>
wrote:

> Hi Bogdan,
>
> Looks like you're missing OA48197.
> http://www-304.ibm.com/support/docview.wss?rs=0&q1=
> 5655t0100&uid=swg1OA48197
>
> On 27 June 2017 at 23:47, Bogdan Belciu <belciu.bogdan@gmail.com> wrote:
>
> > Hi Ronald,
> >  I tested this and the commands are not splitting using -. So all is
> > alright like this.
> > But the setting is in SE.0 - ( run options) and the option is:
> >     Allocate CKRCMD data set with RECFM=FB,LRECL=80    - this has to be
> > deselected - like this the CKRCMD becomes LRECL=255.
> > Thanks!
> >
> > On Tue, Jun 27, 2017 at 7:46 PM, Ronald van der Laan <nl50294@gmail.com>
> > wrote:
> >
> > > Hi Bogdan,
> > >
> > > I can't verify this right now, but the easiest solution would be to go
> to
> > > SE.7 and change the LRECL for the CKRCMD file to for instance 255
> chars.
> > > That should prevent splitting commands, at least when you remain within
> > > that limit.
> > >
> > > Op di 27 jun. 2017 om 17:57 schreef Bogdan Belciu <
> > belciu.bogdan@gmail.com
> > > >
> > >
> > > > Hello,
> > > >
> > > > I am currently encountering the following scenario on one of my
> > > customers:
> > > > Zsecure is configured for each administrator, including me, to use 4
> > > > CKFREEZE files, one for each lpar in the sysplex.
> > > > Based on this, when customer admins are cloning a user who has a
> > catalog
> > > > entry in each lpar, 5 IDCAMS "define alias" commands are generated,
> > which
> > > > is correct.
> > > > Users need an entry in each catalog as there is a master catalog on
> > each
> > > > lpar.
> > > > The problem is that commands are generated like this:
> > > >
> > > > 00001 DEFINE ALIAS (NAME('UUUUUUU') REL('CATALOG.BLABLA1.TSO'))
> > > > 00002 DEFINE ALIAS (NAME('UUUUUUU') REL('CATALOG.BLABLA2.TSO'))
> CAT('-
> > > > 00003   CATALOG.WHAT.EVER2')
> > > > 00004 DEFINE ALIAS (NAME('UUUUUUU') REL('CATALOG.BLABLA3.TSO'))
> CAT('-
> > > > 00005   CATALOG.WHAT.EVER3')
> > > > 00006 DEFINE ALIAS (NAME('UUUUUUU') REL('CATALOG.BLABLA4.TSO'))
> CAT('-
> > > > 00007   CATALOG.WHAT.EVER4')
> > > > 00008 DEFINE ALIAS (NAME('UUUUUUU') REL('CATALOG.BLABLA5.TSO'))
> CAT('-
> > > > 00009   CATALOG.WHAT.EVER5')
> > > >
> > > > the command in line 1 is fine, that's for the current lpar where
> > commands
> > > > are executed, it points to the ucat from local master catalog.
> > > >
> > > > The rest of commands are split exactly where dataset name starts and
> > the
> > > > command continues on the following line with 2 spaces in front (in
> > column
> > > > 3)
> > > > So the lines 2 and 3 will translate in the following command:
> > > > DEFINE ALIAS (NAME('UUUUUUU') REL('CATALOG.BLABLA2.TSO')) CAT('
> > > >  CATALOG.WHAT.EVER2')
> > > >
> > > > When running the commands of course all this 4 split commands will
> > fail,
> > > > because the datasets with 2 spaces in front do not exist.
> > > >
> > > > Yes, of course, when I need to do this (not too often) I can edit the
> > > lines
> > > > and remove the spaces or execute the commands separately, for me
> there
> > is
> > > > no issue,
> > > > but I want to make it correct for other people who have this problem
> > and
> > > > they don't know why they get errors when running the commands.
> > > >
> > > > How can I change how ZSecure generates the DEFINE ALIAS commands? Or
> > > > commands in general?
> > > > I was looking in SE for some hours now, also in the PARM members, in
> > > > manuals, nothing relevant. :(
> > > > If someone with deep ZSECURE/CONSUL knowledge could help..I would be
> > > > forever grateful :D
> > > > Meanwhile I am still digging.
> > > > Thank you in advance.
> > > >
> > > >
> > > >
> > > > --
> > > > Best Regards,
> > > > Bogdan Belciu
> > > >
> > > --
> > > Ronald van der Laan
> > >
> >
> >
> >
> > --
> > Best Regards,
> > Bogdan Belciu
> >
>
>
>
> --
> Ronald van der Laan
>



-- 
Best Regards,
Bogdan Belciu
[prev in list] [next in list] [prev in thread] [next in thread]