Rocket Mainframe DevOps

I've been asked by one of my customers, "UNIX System Services is vulnerable to the sudoedit vulnerability?".  I then opened a case with the IBM support center, and they informed me that IBM no longer supports this, and it is supported by Rocket Software.  What "opensource", or purchased product from Rocket has this support?Thanks,------------------------------Steven FrancisSr. z/OS Systems ProgrammerIBM------------------------------

While using bash with the command:  env | sort > env.txtthe env.txt is tagged as ISO8859-1BUT when using the /bin/sh shell with the same command the file is tagged as IBM-1047Pertinent entries from the env results:_BPXK_AUTOCVT=ON _CEE_RUNOPTS=FILETAG(AUTOCVT,AUTOTAG) POSIX(ON)_TAG_REDIR_ERR=txt _TAG_REDIR_IN=txt _TAG_REDIR_OUT=txt On this LPAR a cat of the ISO-8859-1 file while in /bin/sh results in what looks like ascii while under bash it displays fine.On another LPAR - same profile (env) values the files have the same tags but a cat will work with both to display something usable.???------------------------------Lionel Dycklbdyck------------------------------

So this is odd.  I use OMVS as my entry to my z/OS shell.  Curl and bash and bash work fine.  Openssl mostly works fine, with one quirk.  If I try openssl before having executed bash or curl in the same shell session the output from openssl doesn't seem to be converted from ASCII to EBCDIC, and is thus unreadable.  But if, as I said, I have used curl or bash in the same session then openssl now works.Here is an example: IBM Licensed Material - Property of IBM 5650-ZOS Copyright IBM Corp. 1993, 2017 (C) Copyright Mortice Kern Systems, Inc., 1985, 1996. (C) Copyright Software Development Group, University of Waterloo, 1989.U.S. Government Users Restricted Rights - Use,duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. IBM is a registered trademark of the IBM Corp. [-sh]DVFJS:/u/dvfjs:>openssl |øÁ>ëë<-- äáá----ë-èÇÁ-ËÑÅ>/%-ëñåñ+è-Ï/Ë-ÊÁÄÁÑÎÁÀ-- <"Control-C" entered to terminate openssl>[-sh]DVFJS:/u/dvfjs:>[-sh]DVFJS:/u/dvfjs:>curl cur

Announcing Micro Focus Universe 2021 Save the date: Our premier annual customer event, Micro Focus Universe, is all set for March 23 and 24. Customers and partners alike will enjoy the interactive, high-energy Application Modernization & Connectivity track, a showcase for our COBOL, mainframe, and host connectivity solutions. ChangeMan Resources While automating CI/CD supports DevOps in modernizing mainframe development and delivery, automation remains the most challenging piece of the transformation puzzle for enterprises. ChangeMan ZMF automates processes to enhance the DevOps journey, and this webinar explains how to automate your CI/CD pipelines and quickly resolve any issues. Date: February 10, 2021 @ 11 a.m. EST  Register here Did you miss last year’s Change Management Masterclass? We have all the resources right here. Beta Program: Next Gen ACUCOBOL applications The web registration process for the extend 10.4 and AcuToWeb beta program is now live. Join developers sha

Following on from my question around 7zip archive formats, I've downloaded and tried unzip on a sample file I've been provided with. The file ends with .zip, so I figured I'd give it a go.Unfortunately, I get the message: skipping: 20201211001505.dat  need PK compat. v4.6 (can do v2.1) Is telling me that the archive is in a format that's not supported? From what I can see unzip -v gives:UnZip special compilation options:COPYRIGHT_CLEAN (PKZIP 0.9x unreducing method not supported)SET_DIR_ATTRIBSYMLINKS (symbolic links supported, if RTL and file system permit)TIMESTAMPUNIXBACKUPUSE_EF_UT_TIMEUSE_UNSHRINK (PKZIP/Zip 1.x unshrinking method supported)USE_DEFLATE64 (PKZIP 4.x Deflate64(tm) supported)VMS_TEXT_CONVPASSWD_FROM_STDIN[decryption, version 2.11 of 05 Jan 2007]Or am I confusing myself with unrelated version numbers?Thanks, Andy------------------------------Andy Stylesz/Series System ProgrammerLloyds Banking Group------------------------------

I installed the most recent version of the curl tool and all works fine with the exception of using PKCS12 personal certificates. When I specify the parameters --cert /u/johnson/curl/fred.12:secret --cert-type P12 I receive message curl: (58) could not parse PKCS12 file, check password, OpenSSL error error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt.  I know the password is correct because if I move the file to Windows for example, I am am able to successfully import the PKCS12 certificate.with the same password into a trust store. Is there another step I need to do differently to provide the password on z/OS?

Set course for … Micro Focus Universe 2021 We are thrilled to announce that Micro Focus’ premier customer and partner event – Micro Focus Universe - is back for 2021! Make time in the week of March 22nd, and join us online at our showcase global event. As you would expect, Micro Focus Universe 2021 is going to be fully virtual, building on the success of our fabulous 2020 edition. In fact, this will be our fourth year running the Micro Focus Universe event format, and we are delighted to see the attendance and feedback just gets better and better. We hope you can join us in March!  All Things Modernization at the AMC track For our COBOL and Mainframe community, we are thrilled to announce the return of our very popular Application Modernization and Connectivity (AMC) Track. We are excited to be able to offer this comprehensive set of sessions for our AMC community.  Prior year AMC tracks were very popular, so be sure to secure your spot soon. We will be exploring the vital r

Conda is a powerful, secure, and easy to use system for downloading and installing software to z/OS Unix System Services and has been chosen as the standard system for Rocket to deliver its z/OS ports of popular open source tools and languages.  Watch this video to learn about conda features and see some short demonstrations of how easy it is to use on z/OS. ------------------------------Peter FandelRocket Software------------------------------

Hi all, We have a internal project proposal that wants to extract 7Zip formatted archives directly on the mainframe. I thought I'd seen somewhere that gzip might support that, but I can't now find any reference to it, so I'm beginning to think I dreamt it. Anyone know if gzip does support 7Zip, and if it doesn't, know of anything that does support it natively under z/OS?Many thanks, Andy.

I downloaded the git 2.26 .bz2 file, used bunzip2 on it and then tried tar -xvf git* and I get this:when under uid(0):tar: FSUM7147 ././@PaxHeader link to : EDC5129I No such file or directory. tar: FSUM7147 ././@PaxHeader link to : EDC5129I No such file or directory. tar: FSUM7147 ././@PaxHeader link to : EDC5129I No such file or directory. when under my uid:tar: FSUM7147 ././@PaxHeader link to : EDC5129I No such file or directory. x libexec/git-core/git-remote-testsvn, 15638528 bytes, 30544 tape blocks tar: FSUM7171 libexec/git-core/git-remote-testsvn: cannot set uid/gid: EDC5139I Operation not permitted. x libexec/git-core/git-mv symbolic link to git tar: FSUM7171 libexec/git-core/git-mv: cannot set uid/gid: EDC5139I Operation not permitted. x libexec/git-core/git-replace symbolic link to git What's the correct way to untar this file?I need to install in it's own filesystem (directory) so miniconda isn't the solution.------------------------------Lionel Dycklbdyck--------------------

Hi all, sorry if I'm asking something that is not directly related to Rocket Software, but I figured this forum could be my best chance to get an answer, as Google let me down this time 🙁 I am trying to check for the existence of a directory and create it if it doesn't exist. I'd like to do it in just one command, so I coded this:cmd = "test | -e '"||ussLibSvil||"/"||_path||"' && mkdir -p "||ussLibSvil||"/"||_pathussrc = bpxwunix(cmd,,stdout.,stderr.,,0) The command contained in the cmd variable works correctly if I enter it directly at the shell pormpt. However, when run from Rexx code I get this error (the output is mangled by my error trap routine): Command: test ! -e '/u/sigdc/sigdc.hna.gitdev/source' && mkdir -p /u/sigdc/sigdc.hna.gitdev/source Error: cannot continue (RC = 127)Error Detail: CMD: FSUM7351 not found *** I think that the problem lies in the concatenation of commands with "&&", but I can't find a way to fix it. Maybe I need to escape those amp

Status: DeliveredThanks for this example of how to overcome this situation Ron.   We don't feel we need to change the product for this at this time but this will be a useful template for others encountering the same situation. We can revisit this if there is further interest in us doing so.CMN$$CHT.SKL.txtNote that this idea could also be useful for automatic source code standards enforcement processes that are set up within ChangeMan ZMF. We are modifying our Pro/JCL syntax scan batch process to also reformat our JCL-related components as well as do JCL-related standards enforcement.  Currently, using the in-house created “JCLSCAN” procedure that creates a batch job submitted during staging, the batch job runs a Pro/JCL syntax scan, prepares JCL runbook(s), and then generates an INFO/X reports.  A requirement has come-up to run a JCL, PROC, etc. reformat and standards enforcement process using Pro/JCL before running the Pro/JCL syntax scan.  This means th

On a test lpar i've got git (2.14) installed and it is failing.  Here is an example: /u/lbdyck>ssh git@github.com git-receive-pack lbdyck/racfadm.git FOTS2273 Warning: Permanently added the RSA host key for IP address '140.82.112.3' to the list of known hosts. --Â--Ä-Á--/ÀÁÄ-ÃÀ--À---Ã--/-À-Á-Ã-Â---À------ÊÁÃËÇÁ/ÀË_/ËÈÁÊÊÁø?ÊÈ-ËÈ/ÈÍË-ÀÁ%ÁÈÁ-ÊÁÃË-ËÑÀÁ-Â/>À---,-ÉÍÑÁÈ-/È?_ÑÄÊ_/È-ËÇ/--/ÅÁ>È-ÅÑÈÅÑÈÇÍÂ-ÅÂ--ÄÄ-Ä-/-ÂÀ----ÄÃÃ-À-Â---Â/--ÁÃÁÀ-/ÁÂ--Á-Â-/Á---ÃÀÀ--Â---ÊÁÃËÈ/ÅË--------Ä-ÄÄ---ÄÄ-- And another example: /u/lbdyck>git clone git@github.com:lbdyck/pdsegen.git Cloning into 'pdsegen'... fatal: protocol error: bad line length character: ---Á Can anyone point me to where to fix this? I'm sure this is something trivial but I can't find the problem.

I get this message when using openssl.  We did not install openssl in /rsusr/rocket, but instead used a different path.  Shouldn't openssl base the location of the openssl.cnf file on the location of the openssl binary?  Should we just "bite the bullet" and install it (or set a symbolic link from) /rsusr/rocket?

Hello, I am looking to install python 3.7 on maninframe. Currently, I have installed version 3.6 but I can’t find the port for 3.7 neither find miniconda port. Any suggestion? Thanks

Hi, On ChangeMan, we can do =1.B, VS - View Stack in order to decompress an SRD entry and get something like this: //BKP#ChangeManZMF

Hi Everyone !Can I use the GZIP version for z/OS at my Production environment?Is there any cost involved?Thanks !------------------------------Thiago de DeusIBM------------------------------

Hi, I'm wondering where I can download the changeMan ZMF Client Pack... Best regards, Bernd.#ChangeManZMF

Hi there,I have a file X which is untagged.Now running a Perl script like follows #! /bin/env perluse strict;use warnings;use 5.010;my $f = 'X';-T $f && say "$f"; and the file is tagged as IBM-1047. I think the Perl text file test operator -T shouldn't change tagging in any way.Do you agree or do I just overlook anything?-- Thanks,Manfred------------------------------Manfred LotzIBM------------------------------

Status: DeliveredDeliveredIt is really annoying we can't open a INC member with the correct language and procedure set like a program. 

Status: DeliveredDeliveredStoring content of an audit report within ChangeMan accelerates development because no tool-change (e.g. to SDSF) and additional time for searching has to be performed. During our last internal ChangeMan -training some developers asked, if it wouldn't be a good idea to store content of an Audit Report (Package and Release) within ChangeMan.The advantage would be that in doing that, audit-information is directly accessible within ChangeMan (without changing to SDSF or what ever) and that the last audit-report for a package or a release could also be baselined (like program-listings). This also may be obtained as a unchangeable proof with which audit-result the package (or release) went to production.We think there are much more arguments to find when dealing with this idea in deepth.

I am using the cURL line command with the insecure option and would like to remove this option. What do I have to do to install a certificate and is there any way to use CA’s Top Secret for this authentication? Thanks

Status: DeliveredPreviously delivered in 8.2 Patch 2. Octane numbers 22006 and 19446. When doing a browse baseline (=1.b) for a set of components, the CREATED and CHANGED dates for the stacked reverse deltas (minus library level) all show a date/time that matches the last baseline process.But here should be the real CREATED and CHANGED dates !This problem was reported on June 1st, 2000 andApplies To ChangeMan ZMF 4.1.6.See link: knowledgebase.serena.com An enhancement (ENH17188) should already exists, although no documentation can be viewed Please support us with your vote so that this error is finally fixed.#correctedition

#GITGit 2.14.4 does not seem to support the submodule functionality Will 2.26.2 support submodule functionality? Where can i find the documentation of features supported in the respected versions of Git? ​​​

I don't think this specifically has anything to do with the actual Rocket Open Source Tool (curl), but I was hoping someone here might be of assistance anyway.Any thoughts on this? I can execute this job and have no issue. I'm trying to let another developer run it. He's able to run /u/dvfjs/rocket/bin/curl directly (in STDPARM, following "SH ".) But if he executes my shell script (/u/dvfjs/jira_test) he gets "/u/dvfjs/rocket/bin/curl: /u/dvfjs/jira_test 4: FSUM7351 not found".I've set the read and execution bits for user, group and other for both curl and the jira_test shell script. Since the "echo" commands are working for him, he's obviously able to execute my shell script itself. What else might I be missing? The other developer has an OMVS segment, but he doesn't have an initial working directory or default shell configured yet. Could that be the issue? If so, what specifically is causing this particular issue?JCL://DVRJZTST JOB ,'Test',CLASS=C,REGION=0M,NOTIFY=&SYSUID//*//UNI