View previous topic :: View next topic
|
Author |
Message |
kish
New User
Joined: 17 Nov 2007 Posts: 20
|
|
|
|
hi sir/madam
in our Mainframe s/390 g6 the tcpip status report inactive in MSC console via using D MVS Command
D TCPIP
EZAOP50I TCPIP STATUS REPORT
TCPIP INACTIVE
when we issue the another TCPIP start the task add the end of active task
P TCPIP
Nothing happend..!!
and system display no TCPIP profile in RACF start class...
how can reconfigure the tcpip and it's profile... i have not any information about configuring the tcpip, please give the checking procedure for test tcpip, step by step
and hometest command in tso shell give error for tcpip service not available, but home name displayed and says the check configuration...
i thing may setting was corrupt...
how can find my error location in tcpip datasets ..
best Regards... |
|
Back to top |
|
|
enrico-sorichetti
Superior Member
Joined: 14 Mar 2007 Posts: 10886 Location: italy
|
|
|
|
Quote: |
please give the checking procedure for test tcpip, step by step |
A mainframe with an inactive TCPIP should NOT have it' s support people
rely on forum answers for troubleshooting and setup... |
|
Back to top |
|
|
dick scherrer
Moderator Emeritus
Joined: 23 Nov 2006 Posts: 19243 Location: Inside the Matrix
|
|
|
|
Hello Kish and welcome to the forums,
Are you a mainframe network person? If not, i'd suggest you talk with the person/group responsible for network activity on your mainframe.
Most mainframes use tcp/ip for their 3270 connections to the mainframe and if your tcp environment was "down", no one (developer or user) could connect. . .
If you are the network person, i agree with Enrico - the forums is not a good place to learn how to configure/support your network environment - some reasons are that you will get multiple incompatible answers and some people will post suggestions that simply cannot work. |
|
Back to top |
|
|
kish
New User
Joined: 17 Nov 2007 Posts: 20
|
|
|
|
tnx for all ur replies
i should confess that i am not so much into MainFrames , but i work in a laboratory and an experimental environment. i m quite professional in unix based systems , my new career is to administrate a MainFrame 9672 G6 S/390 machine.
i know how people post in forums , i mean i know the answers may not be correct , but as i know u r professionals in OS/390 and i thought u may have
some good resources like howto`s (like unix ) or some step by step guide lines.totally i am quite a newbie that have to administrate a new machine.
so please help me.if u know any other forumes to help newbies please let me know.
tnx |
|
Back to top |
|
|
dick scherrer
Moderator Emeritus
Joined: 23 Nov 2006 Posts: 19243 Location: Inside the Matrix
|
|
|
|
Hello,
Quote: |
my new career is to administrate a MainFrame 9672 G6 S/390 machine. |
Are you the only "sysadmin" for the mainframe? Is there anyone who is experienced on the mainframe?
Which tcp/ip product(s) are you using? One approach would be to contact the support people for the product(s) you are using and explain the problem. They have most likely seen this before.
Tell them up front that you have been given this opportunity and that you are introducing yourself to the various organizations that you will contact as questions arise.
You might also find out if any of your unix contacts have co-workers that are mainframe experienced.
Good luck and maybe someone will have a suggestion on how you can get around your current situation. |
|
Back to top |
|
|
kish
New User
Joined: 17 Nov 2007 Posts: 20
|
|
|
|
believe me or not i am the only "sysadmin",i only need help , and i think
forums are a good place to exchange problems and solutions.
is my question abnormal ? isnt it right to be questioned ? i mean my question
dosent meet forum rules ?
i think the basic duty of forum members ;morally of course;is to HELP.this helps them to develope their experience and compare their knowledge to others and etc....
but here u r sentencing me to not knowing ! if i knew the answers i wouldnt be a member here .i thought u may ask me the details to help , but here u are showing me the general answers that every body knows.
any way thanks alot for ur help! |
|
Back to top |
|
|
enrico-sorichetti
Superior Member
Joined: 14 Mar 2007 Posts: 10886 Location: italy
|
|
|
|
What to ask on a forum, and what to reply has always been
a debatable/debated issue, sometimes with lots of flames,
each one of us has his' s ethics in what to / how to reply to forum questions.
/personal opinions ON
Forum like these at ibmmainframes.com should NOT be a substitute
for proper training,
POOR ORGANIZATION
correct approach to the job
reading the documentation
and ....
These forums should be something that can be lived without :-)
A forum should be place for an exchange of experiences,
even if there is the the right expectation for the more experts to give better answers
a forum question posed in the right way and with the proper attitude should
only shorten the time to get a solution, not a substitute for an institutional approach
furthermore there should always be be on the poster' s side a personal follow on
Unfortunately there are too many messages of the type..
I got this message "xyz12345" what does it mean
and the only ethically correct answer is READ THE F*****G MANUAL
we are not here to do the reading for you ( impersonal pronoun )
forum should be used for short time question and answers
even if I might be sympathetic to Your problems
I would put them in the box marked "POOR ORGANIZATION"
ask Your organization to give You the tools/training/documentation
in order to anble You to do Your job !
what You are asking is not a point and shoot question/answer
but full training/guidance in doing Your work,
in an already preset environment of which we do not know anything about
in this case my feeling is that we would be giving FREE CONSULTANCY services to Your organization...
( possibly having given You a task for which You were not adequately trained )
configuring TCP/IP is a standard ( NOT AN EXCEPTIONAL ) task well documented in the manuals,
and in the documentation Your company should have received with the MRM ( machine readable material)
/personal opinions OFF
for mainframe administration a good starting point would be the
two versions of "ABC of system programming"
search for them starting from
http://www-03.ibm.com/servers/eserver/zseries/zos/bkserv/
in the section REDBOOKS
also navigating from the bookshelf for You OS release You will find all
the documentation fro setting up the TCPIP subsystem
GOOD LUCK and I mean it :-) |
|
Back to top |
|
|
dick scherrer
Moderator Emeritus
Joined: 23 Nov 2006 Posts: 19243 Location: Inside the Matrix
|
|
|
|
Hello,
Quote: |
but here u r sentencing me to not knowing ! if i knew the answers i wouldnt be a member here |
My apologies, but i disagree. If you have been sentenced to "not knowing" it has been by your management, not the people here who are here to help. Also, many of the members here "know answers" - often topics are to confirm what someone "knows" and often the request is to seek an alternative to the answer they already have.
I completely appreciate your frustration. I've been a "mainframer" for a very long time, but about 15 years ago (before the internet was so useful), my client asked me to become the unix sysadmin - they had no prior experience with unix, but wanted to migrate some things from the mainframe to unix. When the hardware was delivered, i found myself on the loading dock with a manual fork-lift and 2 skids of hardware. The only "help" available was the phone number of the hardware and software vendors whose products were being used - and they made it quite clear that they were not able to "teach" someone over the phone. If something "broke" (i.e. i broke it thru ignorance), they would help fix it.
The reason i mention this, is that it is not all that difficult for a person to become productive with a unix system and if the person has some persistence, they can become quite adept. On the other hand, it is extremely rare for one person to be tasked with the "sysadmin" responsibilities for an entire MVS-style mainframe (unless it is a system that is already configured, including all programs and data and is run turn-key).
We do wish you well and will surely help where we can |
|
Back to top |
|
|
kish
New User
Joined: 17 Nov 2007 Posts: 20
|
|
|
|
Dear dick scherrer thanks for your sympathies
Yes , I know that you are right , and I know that I am asking too much ,
but if you show me the way I would go along , for example
I checked my TCP/IP profile and datasets every thing seemed OK to me.
however I couldn’t read some of datasets because I think there are In binary format and I don’t know the editor or program to open them.
While system boots and the IPL stage is finished and I want to start TCP/IP job I get theses messages on my MVS console :
S TCPIP
$HASP373 TCPIP STARTED
IEF403I TCPIP - STARTED - TIME=11.32.13
IEE252I MEMBER CTIEZB00 FOUND IN SYS1.IBM.PARMLIB
ICH408I JOB ( TCPIP ) STEP(TCPIP) CL(PROCESS) 628
OMVS SEGMENT NOT DEFINED
EZZ4215 TCP/IP ABEND - DUMPING
IEA794I SVC DUMP HAS CAPTURED: 630
DUMPINGID=002 REQUESTED BY JOB(TCPIP)
DUMP TITLE=TCPIP V2R10:JOB(TCPIP) (
)+?????? SEC6/0F1C008 TCB P=0021,S=0021,H=0021
IEF196I IGD100I 05FA ALLOCATED TO DDNAME SYS00006 DATACLASS(
EPW0250I EPWPITSK:FFST INITIALIZATION FOR TCP COMPLETED
IEF 196I IEF258I SYS1.DMP00010
IEF 196I IEF258I VOL SER NOS=010DL2
IEA611I COMPLETE DUMP ON ..
.
.
.
ERRORID = SEQ00018 CPU00 ASID0021 TIME 11.32.13.8
ID = TCPIP DUMP COMPLETED FOR JOB TCPIP
and when i get tcpip status on mvs console by issuing the D command following message displayed :
D TCPIP
EZOP50I TCPIP STATUS REPORTED 638
COUNT TCPIP NAME VERSION STATUS
------------ ---------------- -------------- -------------
1 TCPIP CS V2R10 INACTIVE
***END TCPIP STATUS REPORT****
EZAP41I 'DISPLAY TCPIP' COMMAND COMPLETED SUCCESSFULLY
and when i start for second time after this message i get this reason :
IRR813I NO PROFILE WAS FOUND IN THE STARTED CALSS FOR 591 TCPIP WITH JOBNAME TCPIP. RACF WILL USE ICHRIN03
$HASP100 TCPIP ON STCINRDR
IEF695I STARTED TCPIP WITH JOB NAME TCPIP IS ASSIGNED TO USE
++++
$HASP373 TCPIP STARTED TIME .....
Will you check this out and let me know what’s going wrong ?
THANKS... |
|
Back to top |
|
|
enrico-sorichetti
Superior Member
Joined: 14 Mar 2007 Posts: 10886 Location: italy
|
|
|
|
we need to know how Your organization got the system installed,
You should start asking a little bit about the setup to the person who
made the first installation
looks like You are facing two problems...
a tcpip startup..
looks like that TCPIP to start needs the OVMVS address spce
( the openedition component )
a RACF/TCPIP mismatch..
I might guess that the authorities granted to tcpip are not adequate
ps..
Quote: |
but here u r sentencing me to not knowing |
/disagreement on
it is not our problem nor moral/ethic nor legal to provide you with knowledge,
remember.... answering is on voluntary bases
... it is strictly Your own problem
/disagreement off
|
|
Back to top |
|
|
kish
New User
Joined: 17 Nov 2007 Posts: 20
|
|
|
|
thanks alot for your answer , i really appreciate your patience
enrico tell me what details do you need ? as far as i know i didnt have TCP/IP
connection problem , i mean it was ok.
i remember changing some RACF values and datasets which i think it made
the problem.do you need any config file or any structure or any thing which
your experience say ?
i am really frustrated
do you think i should check permissions ? what permission do i need to
grant to TCP/IP ?
do you need any other command output that you may want me to execute
on TSO or MVS ?
i know that i dont know
thanks every body.... |
|
Back to top |
|
|
enrico-sorichetti
Superior Member
Joined: 14 Mar 2007 Posts: 10886 Location: italy
|
|
|
|
Thats the point ....
Quote: |
i remember changing some RACF values and datasets which i think it made
the problem.do you need any config file or any structure or any thing which
your experience say ? |
It is very difficult to debug without seeing the console...
using SDSF check the jes log for the TCPIP task,
check the ICH... messages to see if they report any security violation
as an alternative run everithing in WARN mode to see what resources are being
accessed and in what mode
and reset the racf status to the good one...
and remember next time write down the status of the resources You are modifying
as an emergency give uacc alter to everybody for everything |
|
Back to top |
|
|
nevilh
Active User
Joined: 01 Sep 2006 Posts: 262
|
|
|
|
Your problem is that TCPIP is being assigned a default userid (++++++++) at start up time. Depending on what you have defined in RACF exit ICHRIN03 depends on what you must now do. I think the default action would be to define a userid with the name TCPIP making sure that it has an OMVS segment. This user must then be given access to the RACF class STARTED |
|
Back to top |
|
|
dick scherrer
Moderator Emeritus
Joined: 23 Nov 2006 Posts: 19243 Location: Inside the Matrix
|
|
|
|
Hello Kish,
Is this "your" system or will others be using it?
If you are both the admin and the only user, you can give all RACF permissions and you won't have "security" problems.
If other than you is to use the system, this could be a disaster. You might very easily get into the situation where one of the "users" has more mainframe experience and does "bad things". |
|
Back to top |
|
|
kish
New User
Joined: 17 Nov 2007 Posts: 20
|
|
|
|
Dear enrico-sorichetti, dick scherrer, nevilh
I want to mention my gratitude for your honest helps...
My system TCPIP is active and running suitably.
I am still hoping to have your help on My questions in further...
Best Regards. |
|
Back to top |
|
|
dick scherrer
Moderator Emeritus
Joined: 23 Nov 2006 Posts: 19243 Location: Inside the Matrix
|
|
|
|
Hello Kish,
You're welcome and we'll be here when there are new questions
How was the tcp/ip problem corrected? If you post how you corrected it, the answer may help someone else one day. |
|
Back to top |
|
|
kish
New User
Joined: 17 Nov 2007 Posts: 20
|
|
|
|
hello
I add the profile with name TCPIP in started Class at RACF
CLASS NAME
----- ----
STARTED TCPIP
LEVEL OWNER UNIVERSAL ACCESS YOUR ACCESS WARNING
----- -------- ---------------- ----------- -------
00 SYS1 EXECUTE EXECUTE YES
INSTALLATION DATA
-----------------
NONE
APPLICATION DATA
----------------
NONE
then grant the UACC execute "permission" to this profile and change the setting of stdata like following :
STDATA INFORMATION
------------------
USER=
GROUP= SYS1
TRUSTED= YES
PRIVILEGED= YES
TRACE= NO
and working... it's all...
Regards[/img] |
|
Back to top |
|
|
dick scherrer
Moderator Emeritus
Joined: 23 Nov 2006 Posts: 19243 Location: Inside the Matrix
|
|
|
|
Thank you for letting us know
d |
|
Back to top |
|
|
kish
New User
Joined: 17 Nov 2007 Posts: 20
|
|
|
|
Your welcome...your guides helped me do it...
Thank You...
Regards |
|
Back to top |
|
|
|