IBM Mainframe Forum Index
 
Log In
 
IBM Mainframe Forum Index Mainframe: Search IBM Mainframe Forum: FAQ Register
 

Canceling a mainframe ID for a specific IP though JCL


IBM Mainframe Forums -> JCL & VSAM
Post new topic   Reply to topic
View previous topic :: View next topic  
Author Message
bala kalluri
Warnings : 1

New User


Joined: 08 Jan 2009
Posts: 21
Location: INDIA

PostPosted: Mon Jul 06, 2009 5:47 pm
Reply with quote

Hi,
Can I get the job to cancel a mainframe id for a specic IP.I have mentioned the IP as for some mainframes we have sperate IP for separate region.Like for Production, development and Test we have seperate IP.I need to cancel any m/f id for any region submitting the job in Test.

Can anyone please help me on the same.
Back to top
View user's profile Send private message
expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8797
Location: Welsh Wales

PostPosted: Mon Jul 06, 2009 5:53 pm
Reply with quote

The first question would be - do you have the RACF (or whatever) authority to do this

What do you mean by a mainframe ID and IP
Back to top
View user's profile Send private message
bala kalluri
Warnings : 1

New User


Joined: 08 Jan 2009
Posts: 21
Location: INDIA

PostPosted: Mon Jul 06, 2009 5:58 pm
Reply with quote

Yes I do have the authority to do the same.But currently we do the cancelling of the mainframe id by excuting the FTP command in command promot.
I want to do it through a JCL in mainframe.

Thanks,
Bala
Back to top
View user's profile Send private message
expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8797
Location: Welsh Wales

PostPosted: Mon Jul 06, 2009 6:01 pm
Reply with quote

Then I would suggest using SDSF in batch, and a ROUTE XEQ card to execute on the desired LPAR.

SDSF in batch has been discussed to death on the forum, and for the ROUTE XEQ card - the syntax is available from the JCL reference manuals easily reached from the "IBM Manuals" button at the top of each page.
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 8696
Location: Dubuque, Iowa, USA

PostPosted: Mon Jul 06, 2009 6:01 pm
Reply with quote

z/OS commands are not issued by IP address. They are issued for an LPAR. A single LPAR can be associated with several IP addresses.

Assuming you have the authority,
Code:
// COMMAND 'ROUTE <lpar>,C U=???????'
will cancel user id ??????? on the given LPAR. This does assume that there's a link from the current LPAR to the one you're trying to get to.
Back to top
View user's profile Send private message
bala kalluri
Warnings : 1

New User


Joined: 08 Jan 2009
Posts: 21
Location: INDIA

PostPosted: Mon Jul 06, 2009 6:12 pm
Reply with quote

Hi,
I tried the following step in the JCL.

//PS020 EXEC PGM=FTP
//JS001 EXEC PGM=IEFBR14
// COMMAND 'ROUTE xx.xx.xx.xxx,C U=userid'
//SYSIN DD *
userid password
QUIT
//SYSPRINT DD SYSOUT=*
//SYSOUT DD SYSOUT=*
//SYSUDUMP DD SYSOUT=*
/*


But the keeps running.Could you please let me know if the step given above is correct else please provide me the JCL for the same.

Regards,
Bala
Back to top
View user's profile Send private message
expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8797
Location: Welsh Wales

PostPosted: Mon Jul 06, 2009 6:19 pm
Reply with quote

Did you read Roberts previous post regarding using LPAR and NOT IP.
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 8696
Location: Dubuque, Iowa, USA

PostPosted: Mon Jul 06, 2009 6:22 pm
Reply with quote

Your command is not correct. IP address is not allowed in the command.
Back to top
View user's profile Send private message
bala kalluri
Warnings : 1

New User


Joined: 08 Jan 2009
Posts: 21
Location: INDIA

PostPosted: Mon Jul 06, 2009 6:40 pm
Reply with quote

Could you please give me the command for LPAR.
Back to top
View user's profile Send private message
expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8797
Location: Welsh Wales

PostPosted: Mon Jul 06, 2009 6:41 pm
Reply with quote

Sigh ................ He already has 36_2_18.gif
Back to top
View user's profile Send private message
bala kalluri
Warnings : 1

New User


Joined: 08 Jan 2009
Posts: 21
Location: INDIA

PostPosted: Mon Jul 06, 2009 6:59 pm
Reply with quote

We donot have SDSF access.We submit the jobs in IOF.I saw some of the exapmles of LPAR which submits the job in SDSF.

But I need for canceling the m/f id by submittig the job in IOF.

Please help.
Back to top
View user's profile Send private message
expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8797
Location: Welsh Wales

PostPosted: Mon Jul 06, 2009 7:05 pm
Reply with quote

Robert Sample wrote:
z/OS commands are not issued by IP address. They are issued for an LPAR. A single LPAR can be associated with several IP addresses.

Assuming you have the authority,
Code:
// COMMAND 'ROUTE <lpar>,C U=???????'
will cancel user id ??????? on the given LPAR. This does assume that there's a link from the current LPAR to the one you're trying to get to.
Back to top
View user's profile Send private message
expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8797
Location: Welsh Wales

PostPosted: Mon Jul 06, 2009 7:10 pm
Reply with quote

Quote:
We do not have SDSF access

If that is the case, how is it that your previous question on the forum was resolved by using an SDSF solution.
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 8696
Location: Dubuque, Iowa, USA

PostPosted: Mon Jul 06, 2009 7:14 pm
Reply with quote

Be aware that putting a command in JCL in this way causes it to be executed as soon as the JES converter / interpreter finishes processing the job. The command is not executed during the normal job processing as a step. Putting the command after an FTP step has no impact -- the FTP will be done after the command was submitted. Also note that I am not aware of any way to get back status information as to the success or failure of the command.

If your LPAR name is SYSP and the user id is USERID1, the command would be
Code:
// COMMAND ROUTE SYSP,C U=USERID1
. If you do not know the LPAR name, you cannot accomplish your task. Period.

This is JCL -- it has absolutely nothing to do with SDSF, IOF, or (E)JES or any other spool management tool. Also, being able to issue this command in a batch job does require you to have security access to do so -- a normal application programmer would not normally have such access.
Back to top
View user's profile Send private message
dick scherrer

Moderator Emeritus


Joined: 23 Nov 2006
Posts: 19244
Location: Inside the Matrix

PostPosted: Mon Jul 06, 2009 8:53 pm
Reply with quote

Somewhat scary who has "clearance" to cancel users at will. . .

d
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 8696
Location: Dubuque, Iowa, USA

PostPosted: Mon Jul 06, 2009 8:55 pm
Reply with quote

Very scary indeed, dick -- when capacity to cause damage exceeds understanding of the system, it is a very dangerous and unstable environment (IMHO).
Back to top
View user's profile Send private message
expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8797
Location: Welsh Wales

PostPosted: Tue Jul 07, 2009 11:40 am
Reply with quote

Robert Sample wrote:
Very scary indeed, dick -- when capacity to cause damage exceeds understanding of the system, it is a very dangerous and unstable environment (IMHO).

But every country has a government icon_lol.gif
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 8696
Location: Dubuque, Iowa, USA

PostPosted: Tue Jul 07, 2009 4:15 pm
Reply with quote

ROFL expat -- you've got a good point there!
Back to top
View user's profile Send private message
MBabu

Active User


Joined: 03 Aug 2008
Posts: 400
Location: Mumbai

PostPosted: Tue Jul 07, 2009 11:09 pm
Reply with quote

I'll play devil's advocate here... I never found it too worrisome to let people cancel other TSO ids on many systems since the worst that can happen in a development system is some editing gets lost or a build gets interrupted. In a more locked down system, or one that has actual production data on it which is processed in TSO you are correct that it can be scary.

What I found interesting is the statement "currently we do the canceling of the mainframe id by executing the FTP command in command prompt". What command? If it is submitting a job via JES, then the OP has the answer and JCL already.
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic View Bookmarks
All times are GMT + 6 Hours
Forum Index -> JCL & VSAM

 


Similar Topics
Topic Forum Replies
No new posts FTP VB File from Mainframe retaining ... JCL & VSAM 1
No new posts Mainframe openings in Techmahnidra fo... Mainframe Jobs 0
No new posts Mainframe Programmer with CICS Skill... Mainframe Jobs 0
No new posts How to Reformat a file using File Man... All Other Mainframe Topics 14
No new posts NDM getting stuck - mainframe/JCL All Other Mainframe Topics 13
Search our Forums:

Back to Top