Rocket Mainframe DevOps

The Rocket port of clear fails as does tput clear under TN3270 OMVS yet the IBM provided versions in /bin do work. Am I missing something with the Rocket versions?------------------------------LionelDyck

Several customers have encountered issues where ZMF REST API webhooks are failing to connect to their endpoints, receiving redirect http 3nn response codes. For example, 302, 308, etc. These failures are linked to a known issue in older versions of the Apache HttpClient software and further details, including a potential solution, can be found here.#SupportTips/KnowledgeDocs#ChangeManZMF#SupportTip

Critical CVEs affecting z/OS Curl were published recently (Oct 20th) that may impact customers of Rocket Open AddDev for Z: CVE-2023-38545 , CVE-2023-38546. We have completed new builds of Git and Curl that address these vulnerabilities that affect version 2.0.6 and may affect older versions as well. A new build of Rocket's Open AppDev for Z version 2.0.6.1 has been prepared, tested and is ready now for download from Rocket's secure conda channel server. Other vulnerabilities fixed in this update include: CVE-2023-35945, related to Envoy a cloud service proxy and rated at 7.5 on NIST. CVE-2023-44487, related to HTTP/2 protocol and rated at 7.5 on NIST and, currently undergoing reanalysis.     Optional extended text: CVE-2023-38545 is a high severity issue that affects networking capabilities. It can be exploited by malicious actors if a hostname of a SOCKS5 proxy provided to Git or libcurl or is in control of an HTTPS server that the user is directing Git or libcurl towards. If those c

Customers often ask how they can stop the CMNs381E (where s = ZMF subsystem ID) error messages that can be frequently repeated in the system log (SYSLOG)? For example: CMNT381E Scheduling error detected at CMNSCHED+05FC for SUBMIT DEMO002605 Please refer to KB article KM000009627 for details on analysis and resolution. #SupportTip#SupportTips/KnowledgeDocs#ChangeManZMF

Status: New IdeaI am using both VSC and IDz to do various tasks (create/edit JCL, create/edit REXX, etc.) that are easier in an IDE than just connecting to the green screens via a terminal emulator package. However, I cannot find context menus to perform ADMIN functions (stub submit jobs, check baseline or staging libraries, etc.). Is this something that you can look into? I realize it's probably a limited use case, but it would sure make my life easier...#ZMF#ZMF4ECL

Hi Please, could you clarify me the following doubt(s)? From Product Support Lifecycle for ChangeMan ZMF v8.2 product, the Current Maintenance End Date is now 30 Sep 2025. www.screencast.com/.../mf4fvc6vE7Y On the other hand, in the platform matrix document for each patch release for this version shows Operating system platform supported. For instance, z/OS 2.5 is supported for ChangeMan ZMF v8.2 patch 06 but I am not sure if this Changeman version is/will be supported in z/OS 3.1 Since the Current Maintenance End Date is now 30 Sep 2025, how can I know if I need to upgrade my ChangeMan ZMF v8.2 if the z/OS is upgraded (for instance, from z/OS 2.5 to z/OS 3.1)?. Apparently, now I would not need to upgrade my ChangeMan v8.2 version. isn't like that? (Well, it is always advisable to ask to support before making a change of this caliber).   Thank you Regards Manuel#ChangeManZMF

ZMF 8.3 changed the behaviour of RACF password and password phrase processing for users connecting to a ZMF Server instance from non-mainframe user interfaces (e.g. ZDD, ZMF4ECL, zMobile, the Rest Services API web app, etc.). Specifically, the input password or password phrase is no longer automatically folded to uppercase even if the RACF PASSWORD(NOMIXEDCASE) option is set. Customers should ensure that they test these non-mainframe connections as part of their ZMF 8.3 mainframe software upgrade process to verify that these changes have no adverse impact in their particular environment. Full information on this issue, including details of a hotfix that may potentially be required, can be found here. #SupportTip#SupportTips/KnowledgeDocs#ChangeManZMF

Ive looked at many installing curl threads, but nothing seems to work for me?  I get: <C1:$ conda install -c https://conda.anaconda.org/zoss-appdev curl --override-channels                    Collecting package metadata (repodata.json):   done                                                       Solving environment:   failed with initial frozen solve. Retrying with flexible solve.                                                                                                                              PackagesNotFoundError: The following packages are not available from current channels:                                                                                                                                - curl                                                                                                                                                                                                            Current channels:                                            

I'm sure I am not the first to ask this, but I had no good luck searching the forum for an answer.   New to miniconda, I have it installed, we are behind a proxy http/https proxy server.  I have that configured in .condarc.   When running a conda create, I get SSL error.   Ive set ssl_verify: False        and made no apparent difference. Any answers from the experts? (base) TEC1:$ conda create -p execution                                                                                             WARNING: A directory already exists at the target location '/TEC1/u/MaintMiniconda/execution'                                       but it is not a conda environment.                                                                                                  Continue creating environment (y/[n])? y                                                                                                                                                                                                 

ChangeMan ZMF submits many jobs potentially running across multiple LPARs within any given environment. As such it is liable to submit jobs that encounter S047 abends which indicate that “…An unauthorized program issued a restricted Supervisor Call (SVC) instruction…”. Several years ago we put together this S047 abend diagnosis article to assist customers in investigating/resolving such problems and which some customers may still find useful.#SupportTip#SupportTips/KnowledgeDocs#ChangeManZMF

There are several third party/independent software vendor (ISV) products that are known to potentially impact ChangeMan ZMF processing. For example, both Broadcom’s PDSMAN and Seasoft’s PDSFAST products have been known to interfere with the successful completion of various functions within ZMF. The ChangeMan ZMF Installation Guide (the 8.3 version of which can be found here) contains a list of several products known to cause such issues. Customers should ensure that they are aware of this documentation and take the appropriate action to avoid any software conflicts causing problems in their ZMF environment. #SupportTip#ChangeManZMF#SupportTips/KnowledgeDocs

I am wondering if there are others managing these component types and have any useful information to share.#Webservices

When executing XMLSERV, SERXMLS returns a RC=8 but nothing else indicating why.#ChangeManZMF

It is often tempting to assume that because a specific ZMF module writes output stating that it is running at a certain version, that must be the definitive version of the product that is in use. For example, module CMNBATCH writes the following: ChangeMan(R) ZMF CMNBATCH - 8.2 Patch 6 2023/10/18 03:23:16 Or the CMNLNKDT report generated at ZMF Server started task start-up time writes the following to the task's SYSPRINT output file: ChangeMan(R) ZMF CMNLNKDT - 8.2 Patch 6 Link Date Report WEDNESDAY OCTOBER 18, 2023 @ 03:11:49 Page 1 So, we must be running ZMF 8.2 Patch 6, yes? Well, no. Both of the above messages are taken from a subsystem running the original GA version of ZMF 8.2 Patch 7. Whilst all modules will be typically rebuilt for any new, major release (e.g. 8.2, 8.3, etc.), this is not true for interim patch releases. Only those modules that actually change in the associated patch levels will be rebuilt. As neither the CMNBATCH or CMNLNKDT modules changed in the original 8.2

Using Putty to access 2 different z/OS 2.4 images; Putty settings are same for each session save for the target IP address. On system with bash 4.2.53(2) backspace behavior works normally - content is deleted and cursor key backs up on screen to reflect that.  On system with bash 5.1.0(1) backspace deletes content from the buffer (but not the screen) and the cursor moves forward (sometimes more than a single character's worth).  On both systems using the native IBM supplied shell backspace works fine both before entering  bash and after exiting so the unexpected behavior seems to be pointing to bash 5.1.0(1).  Any pointers on where to look or what to change appreciated.  ------------------------------Karl HufSenior Vice President, Mainframe SupportNorthern Trust CompanyChicago IL US------------------------------

Since the release of ChangeMan ZMF 6.1.2 in November 2010, CMN30, CMN37, CMN55 and CMN57 package install or backout job updates to the active Impact Analysis (IA) table applied by program CMNDSPTM have been serialized/single-threaded. This change was implemented to avoid potential corruption of the IA table that could occur whilst simultaneous updates were applied by more than one requestor. This serialization may result in the appearance of any of the jobs  listed above hanging in the DSPTM step, especially when a large number of package installs or backouts are in progress. Before assuming that a CMN30, CMN37, CMN55 or CMN57 job is hanging in the DSPTM step and cancelling or commencing other investigative techniques, users should check the JESMSGLG for the following type of messages: CMN4535I - CMNDSPTM is waiting for jobname DEMO3024 (asid 04F2) to end.CMN4535I - CMNDSPTM is waiting for jobname DEMO3724 (asid 02A1) to end. When these messages are seen execution of the waiting j

Securing Client Pack and ChangeMan ZMF with TLS.  Has any one gotten this to work.We have 2 separate rules. One to cover port  ZMF port and one to cover port  Client Port. Other than the port, the rules are identical:They use the same cert/keyring.They are for inbound traffic (so it's a "server" rule).TLSv1.2 only.No client authentication (except by user id/pass from client pack and TSO logon).When Application Controlled is OFF client pack works but TSO doesn't. When it's ON client pack doesn't work but TSO does.The error we are getting when TSO access doesn't work is 5003 Data Decryption.We tried adding a third rule to cover the TSO connection. This was a client rule/outbound traffic. Application Controlled on and off had the same effect: 5003 Data Decryption. We did NOT have a client cert/keyring specified for this rule.#ChangeManZMF

If an XML Service call fails for any reason the calling routine will generally receive both a return code and a reason code to indicate the cause of the failure. The common ones are documented in the ChangeMan ZMF XML Services User’s Guide, the 8.3 version of which can be found here. However, sometimes an unexpected reason code may be returned. For example, a PARMS.APL.LIST service call may receive return code 4 with a <statusReasonCode/> value of 6504. Or the same call could also receive a return code 8 with a 6105 <statusReasonCode/>. In this type of situation it is worth checking the ChangeMan ZMF Messages Guide to see if a matching CMNnnnnl or SERnnnnl (where nnnn = reason code and l = severity level (I -Information, E – Error, etc.)) message can be found. Although the full message will often be returned in the <statusMessage/> field, it can sometimes be overwritten or custom-written routines may not always display this field. Hence the frequent confusion around t

New versions of :ZMF Explorer for ChangeMan ZMF V2.0.4 is now available on the VSCode MarketPlace.This version should be installed before the end of September 2023 due to a breaking change that is being introduced by Microsoft in their October release. A new version of ChangeMan ZMF plugin for zowe cli V2.0.4 is also available on the OpenText MarketPlaceBoth the above new versions will require Rest Services to be at a minimum level of ZMF 8.2 Patch 7.#Announcement#ChangeManZMF

Back in June 2023 we published the following Support Tip that contained maintenance which we recommend customers install prior to upgrading to the ZMF 8.3 release:  Support Tip: Recommended maintenance for customers running or upgrading to ChangeMan ZMF 8.3   Since then a couple of further, potentially troublesome issues have also been identified for which hotfixes have been produced. The first is: ZMF8.3.0.022/OCTCR46A325001 ‘CMN8856I - Package is promote locked.’ approving unplanned package  For customers that use ZMF instances configured with an ALL environment type, i.e. those with ‘ChangeMan ZMF environment’ = ‘A’ specified in A.G.1 Part 1 of 8/ISPF panel CMNGGP01, we also recommend installing the fix for the following issue: ZMF8.3.0.021/OCTCR46A325003 Variable &PRSNOD is blank in ChangeMan ZMF 8.3 'ALL' task  The same notes, caveats, etc., as last time apply to the above recommendations. Namely: a. All of the issues listed above, and their associated

Some older versions of the ZMF REST API documentation, and the associated videos, ask customers to download separate files that contain the software needed to run the mainframe Apache Tomcat environment required to host zmfrest.war, zmobile.war, etc. However, since the release of ZMF 8.2 Patch 3 these files have been shipped within the CMNZMF CNTL file. No separate downloads are now required to obtain the Tomcat software and further information related to these components can be found in the CMNZMF CNTL $INDEX member.  #s/s/SupportTips/KnowledgeDocs#s/SupportTips/KnowledgeDocs#ChangeManZMF#SupportTips/KnowledgeDocs#s/

Hello, we're looking for a version of GnuPG running on z/OS. Is there a version available from Rocket or does anyone know a version somewhere available?  Furthermore can I find a list of all available ported tools from Rocket? Thanks for any help. Kind regards Juergen

Hi Everyone, We are planning to install curl on z/OS 2.2 I have a question related to curl for z/OS Is curl compatible for z/OS 2.2 , if yes, can you please let me know which version of curl is compatible to install on z/OS 2.2 ThanksSrinivas

OCTCR46A204001/KM000007410 documented a ZMF4ECL problem that was liable to occur when a user’s TSO password contained a special character. For example, a user whose password contained an ampersand (‘&’) character receives an 'ICH408I...INVALID PASSWORD GIVEN' response at logon time with a SER8210E message visible either alongside the ICH408I or in the ZMF Server started task output. As stated in the above KB article, this problem was resolved in the ZMF4ECL 8.3 release and affected customers should upgrade to the latest available hotfix version of the ZMF4ECL 8.3 client software, which is compatible for use with all currently supported lower versions of the Server (i.e. mainframe) software.#SupportTips/KnowledgeDocs#ChangeManZMF#SupportTip

Just a reminder, that if you are using the ChangeMan ZMF plugin for zowe cli and/or the VSCode Explorer for ChangeMan ZMF, that you should regularly check for and upgrade to the latest version of node.js and also the latest LTS version of zowe cli. it is easy to forget that these need to be kept current.You can check your node version by issuing the command: node -v and the latest version of zowe cli by issuing:zowe -V  You can find the current version of node.js at - Download | Node.js (nodejs.org)and you can upgrade your zowe cli base by issuing the following command: npm install -g @zowe/cli@zowe-v2-lts #SupportTips/KnowledgeDocs#ChangeManZMF#SupportTip