Portal | Manuals | References | Downloads | Info | Programs | JCLs | Master the Mainframes
IBM Mainframe Computers Forums Index
 
Register
 
IBM Mainframe Computers Forums Index Mainframe: Search IBM Mainframe Forum: FAQ Memberlist Usergroups Profile Log in to check your private messages Log in
 

 

Canceling a mainframe ID for a specific IP though JCL

 
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> JCL & VSAM
View previous topic :: :: View next topic  
Author Message
bala kalluri
Warnings : 1

New User


Joined: 08 Jan 2009
Posts: 21
Location: INDIA

PostPosted: Mon Jul 06, 2009 5:47 pm    Post subject: Canceling a mainframe ID for a specific IP though JCL
Reply with quote

Hi,
Can I get the job to cancel a mainframe id for a specic IP.I have mentioned the IP as for some mainframes we have sperate IP for separate region.Like for Production, development and Test we have seperate IP.I need to cancel any m/f id for any region submitting the job in Test.

Can anyone please help me on the same.
Back to top
View user's profile Send private message

expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8593
Location: Back in jolly old England

PostPosted: Mon Jul 06, 2009 5:53 pm    Post subject:
Reply with quote

The first question would be - do you have the RACF (or whatever) authority to do this

What do you mean by a mainframe ID and IP
Back to top
View user's profile Send private message
bala kalluri
Warnings : 1

New User


Joined: 08 Jan 2009
Posts: 21
Location: INDIA

PostPosted: Mon Jul 06, 2009 5:58 pm    Post subject: Canceling a mainframe ID for a specific IP though JCL
Reply with quote

Yes I do have the authority to do the same.But currently we do the cancelling of the mainframe id by excuting the FTP command in command promot.
I want to do it through a JCL in mainframe.

Thanks,
Bala
Back to top
View user's profile Send private message
expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8593
Location: Back in jolly old England

PostPosted: Mon Jul 06, 2009 6:01 pm    Post subject:
Reply with quote

Then I would suggest using SDSF in batch, and a ROUTE XEQ card to execute on the desired LPAR.

SDSF in batch has been discussed to death on the forum, and for the ROUTE XEQ card - the syntax is available from the JCL reference manuals easily reached from the "IBM Manuals" button at the top of each page.
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 7905
Location: Bellevue, IA

PostPosted: Mon Jul 06, 2009 6:01 pm    Post subject:
Reply with quote

z/OS commands are not issued by IP address. They are issued for an LPAR. A single LPAR can be associated with several IP addresses.

Assuming you have the authority,
Code:
// COMMAND 'ROUTE <lpar>,C U=???????'
will cancel user id ??????? on the given LPAR. This does assume that there's a link from the current LPAR to the one you're trying to get to.
Back to top
View user's profile Send private message
bala kalluri
Warnings : 1

New User


Joined: 08 Jan 2009
Posts: 21
Location: INDIA

PostPosted: Mon Jul 06, 2009 6:12 pm    Post subject:
Reply with quote

Hi,
I tried the following step in the JCL.

//PS020 EXEC PGM=FTP
//JS001 EXEC PGM=IEFBR14
// COMMAND 'ROUTE xx.xx.xx.xxx,C U=userid'
//SYSIN DD *
userid password
QUIT
//SYSPRINT DD SYSOUT=*
//SYSOUT DD SYSOUT=*
//SYSUDUMP DD SYSOUT=*
/*


But the keeps running.Could you please let me know if the step given above is correct else please provide me the JCL for the same.

Regards,
Bala
Back to top
View user's profile Send private message
expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8593
Location: Back in jolly old England

PostPosted: Mon Jul 06, 2009 6:19 pm    Post subject:
Reply with quote

Did you read Roberts previous post regarding using LPAR and NOT IP.
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 7905
Location: Bellevue, IA

PostPosted: Mon Jul 06, 2009 6:22 pm    Post subject:
Reply with quote

Your command is not correct. IP address is not allowed in the command.
Back to top
View user's profile Send private message
bala kalluri
Warnings : 1

New User


Joined: 08 Jan 2009
Posts: 21
Location: INDIA

PostPosted: Mon Jul 06, 2009 6:40 pm    Post subject:
Reply with quote

Could you please give me the command for LPAR.
Back to top
View user's profile Send private message
expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8593
Location: Back in jolly old England

PostPosted: Mon Jul 06, 2009 6:41 pm    Post subject:
Reply with quote

Sigh ................ He already has 36_2_18.gif
Back to top
View user's profile Send private message
bala kalluri
Warnings : 1

New User


Joined: 08 Jan 2009
Posts: 21
Location: INDIA

PostPosted: Mon Jul 06, 2009 6:59 pm    Post subject:
Reply with quote

We donot have SDSF access.We submit the jobs in IOF.I saw some of the exapmles of LPAR which submits the job in SDSF.

But I need for canceling the m/f id by submittig the job in IOF.

Please help.
Back to top
View user's profile Send private message
expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8593
Location: Back in jolly old England

PostPosted: Mon Jul 06, 2009 7:05 pm    Post subject:
Reply with quote

Robert Sample wrote:
z/OS commands are not issued by IP address. They are issued for an LPAR. A single LPAR can be associated with several IP addresses.

Assuming you have the authority,
Code:
// COMMAND 'ROUTE <lpar>,C U=???????'
will cancel user id ??????? on the given LPAR. This does assume that there's a link from the current LPAR to the one you're trying to get to.
Back to top
View user's profile Send private message
expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8593
Location: Back in jolly old England

PostPosted: Mon Jul 06, 2009 7:10 pm    Post subject:
Reply with quote

Quote:
We do not have SDSF access

If that is the case, how is it that your previous question on the forum was resolved by using an SDSF solution.
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 7905
Location: Bellevue, IA

PostPosted: Mon Jul 06, 2009 7:14 pm    Post subject:
Reply with quote

Be aware that putting a command in JCL in this way causes it to be executed as soon as the JES converter / interpreter finishes processing the job. The command is not executed during the normal job processing as a step. Putting the command after an FTP step has no impact -- the FTP will be done after the command was submitted. Also note that I am not aware of any way to get back status information as to the success or failure of the command.

If your LPAR name is SYSP and the user id is USERID1, the command would be
Code:
// COMMAND ROUTE SYSP,C U=USERID1
. If you do not know the LPAR name, you cannot accomplish your task. Period.

This is JCL -- it has absolutely nothing to do with SDSF, IOF, or (E)JES or any other spool management tool. Also, being able to issue this command in a batch job does require you to have security access to do so -- a normal application programmer would not normally have such access.
Back to top
View user's profile Send private message
dick scherrer

Site Director


Joined: 23 Nov 2006
Posts: 19270
Location: Inside the Matrix

PostPosted: Mon Jul 06, 2009 8:53 pm    Post subject: Reply to: Canceling a mainframe ID for a specific IP though
Reply with quote

Somewhat scary who has "clearance" to cancel users at will. . .

d
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 7905
Location: Bellevue, IA

PostPosted: Mon Jul 06, 2009 8:55 pm    Post subject:
Reply with quote

Very scary indeed, dick -- when capacity to cause damage exceeds understanding of the system, it is a very dangerous and unstable environment (IMHO).
Back to top
View user's profile Send private message
expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8593
Location: Back in jolly old England

PostPosted: Tue Jul 07, 2009 11:40 am    Post subject:
Reply with quote

Robert Sample wrote:
Very scary indeed, dick -- when capacity to cause damage exceeds understanding of the system, it is a very dangerous and unstable environment (IMHO).

But every country has a government icon_lol.gif
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 7905
Location: Bellevue, IA

PostPosted: Tue Jul 07, 2009 4:15 pm    Post subject:
Reply with quote

ROFL expat -- you've got a good point there!
Back to top
View user's profile Send private message
MBabu

Active User


Joined: 03 Aug 2008
Posts: 401
Location: Mumbai

PostPosted: Tue Jul 07, 2009 11:09 pm    Post subject:
Reply with quote

I'll play devil's advocate here... I never found it too worrisome to let people cancel other TSO ids on many systems since the worst that can happen in a development system is some editing gets lost or a build gets interrupted. In a more locked down system, or one that has actual production data on it which is processed in TSO you are correct that it can be scary.

What I found interesting is the statement "currently we do the canceling of the mainframe id by executing the FTP command in command prompt". What command? If it is submitting a job via JES, then the OP has the answer and JCL already.
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> JCL & VSAM All times are GMT + 6 Hours
Page 1 of 1

 

Search our Forum:

Similar Topics
Topic Author Forum Replies Posted
This topic is locked: you cannot edit posts or make replies. Urgent Mainframe Requirments (2-10 yr... Shankar779 Mainframe Jobs 0 Sun Nov 27, 2016 1:48 pm
This topic is locked: you cannot edit posts or make replies. Mainframe Developer requirement in Ku... capricorn Mainframe Jobs 0 Sun Oct 23, 2016 3:49 pm
No new posts how to split records based on specifi... Venkata Ramayya DFSORT/ICETOOL 6 Wed Sep 28, 2016 3:20 am
No new posts Interface from Mainframe to Confluenc... hblun CLIST & REXX 4 Tue Sep 20, 2016 5:47 pm
No new posts How to calculate an specific transact... lind sh CICS 2 Tue Sep 13, 2016 9:20 pm


Facebook
Back to Top
 
Mainframe Wiki | Forum Rules | Bookmarks | Subscriptions | FAQ | Tutorials | Contact Us