|
<snip> While installing Client Access Express on new Windows 2000 machines I seem to be getting a consistent error when I close down a 5250 session. The error reads like this "cwblmsrv.exe has generated errors and will be closed by windows. You will need to restart the program". This happens on all the Win2k machines that I am installing the software on. I am presuming that it is something that I am doing wrong with the installation seeing as I am new to CAE... We are on V4R5M0... Anyone got any ideas??? <end snip> This may seem like a silly question. Did you install the latest CA Express service pack? To find out go to the following URL: http://www-1.ibm.com/servers/eserver/iseries/clientaccess/ Then select the Serive Packs link down the left hand menu. Hope this helps. Paul R. Weyer Senior Solutions Architect Computech Resources, Inc. Phone: 262-785-8167 Fax: 262-785-8107 midrange-l-request@mi drange.com To: midrange-l@midrange.com Sent by: cc: midrange-l-admin@midr Fax to: ange.com Subject: MIDRANGE-L digest, Vol 1 #1759 - 13 msgs 04/15/2002 11:46 PM Please respond to midrange-l Send MIDRANGE-L mailing list submissions to midrange-l@midrange.com To subscribe or unsubscribe via the World Wide Web, visit http://lists.midrange.com/cgi-bin/listinfo/midrange-l or, via email, send a message with subject or body 'help' to midrange-l-request@midrange.com You can reach the person managing the list at midrange-l-admin@midrange.com When replying, please edit your Subject line so it is more specific than "Re: Contents of MIDRANGE-L digest..." Today's Topics: 1. RE: CAE Problems (Kirk Goins) 2. CAE Problems (by way of David Gibbs <david@midrange.com>) 3. Re: How can I Print PDF documents from a Netware Server? (Vernon Hamberg) 4. Re: V4R5 and SQL (Pete Hall) 5. Re: FW: running a command on the IFS from batch. (Vernon Hamberg) 6. Re: Data Corruption Troubleshooting FMA (thomas@inorbit.com) 7. RE: Exit Point Question/profile switching... (thomas@inorbit.com) 8. Re: Exit Point Question/profile switching... (thomas@inorbit.com) 9. RE: Firewall in AS400 (thomas@inorbit.com) 10. Re: changing your sign-on screen (thomas@inorbit.com) 11. RE: AS/400 Support for Windows Network Neighborhood problem (thomas@inorbit.com) 12. Re: Exit Point Question/profile switching... (John Earl) 13. Re: Exit Point Question/profile switching... (John Earl) --__--__-- Message: 1 Subject: RE: CAE Problems Date: Mon, 15 Apr 2002 16:34:20 -0700 From: "Kirk Goins" <kirkg@pacinfosys.com> To: <midrange-l@midrange.com> Reply-To: midrange-l@midrange.com I did a quick search of the IBM Knowledge Base, PTF listings and APARs usin = g the program name. I saw some hits in 5.1 and 4.4 but not v4r5. Where are = you installing CA/400 Express from? The 400, CD or ?? Are you putting on th = e latest Service Pack? Can you give us the error# ? __________________________________________________ Kirk Goins IBM Certified iSeries Technical Solutions Design IBM Certified iSeries Technical Solutions Implementation Pacific Information Systems - An IBM Premier Business Partner 503-674-2985 kirkg@pacinfosys.com -----Original Message----- From: by way of David Gibbs <david@midrange.com> [mailto:keith.nolan@dubport.ccs.ie] Sent: Monday, April 15, 2002 4:20 PM To: midrange-l@midrange.com Subject: CAE Problems Hi all, While installing Client Access Express on new Windows 2000 machines I seem to be getting a consistent error when I close down a 5250 session. The error reads like this "cwblmsrv.exe has generated errors and will be closed by windows. You will need to restart the program". This happens on all the Win2k machines that I am installing the software on. I am presuming that it is something that I am doing wrong with the installation seeing as I am new to CAE... We are on V4R5M0... Anyone got any ideas??? Regards & TIA, Keith _______________________________________________ This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@midrange.com To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l or email: MIDRANGE-L-request@midrange.com Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l. --__--__-- Message: 2 Date: Mon, 15 Apr 2002 18:20:28 -0500 To: midrange-l@midrange.com From: keith.nolan@dubport.ccs.ie (by way of David Gibbs <david@midrange.com>) Subject: CAE Problems Reply-To: midrange-l@midrange.com Hi all, While installing Client Access Express on new Windows 2000 machines I seem to be getting a consistent error when I close down a 5250 session. The error reads like this "cwblmsrv.exe has generated errors and will be closed by windows. You will need to restart the program". This happens on all the Win2k machines that I am installing the software on. I am presuming that it is something that I am doing wrong with the installation seeing as I am new to CAE... We are on V4R5M0... Anyone got any ideas??? Regards & TIA, Keith --__--__-- Message: 3 Date: Mon, 15 Apr 2002 19:52:51 -0500 To: midrange-l@midrange.com From: Vernon Hamberg <vhamberg@attbi.com> Subject: Re: How can I Print PDF documents from a Netware Server? Reply-To: midrange-l@midrange.com If you right-click a PDF file, there is a print option. You can see this if you go to View->Folder Options->File Types in Explorer. Find the Acrobat Document and click on edit. The trick here is that Acrobat uses DDE to print. I don't think there is a way to put this on a command line. You COULD try to find a VB developer to write a DDE wrapper for you. At 10:04 AM 4/15/02 -0500, you wrote: >Here is the problem: >We have a requirement to print PDF documents Everytime a Sales order is >processed. >My first thought was to use the STRPCCMD with command line arguments to the >Acrobat reader but apparently Acrobat only supports this on UNIX boxes not >PCs. I then Searched for some software in the 'net and found one that does >support command line paremeters for print and this seems to work fine but >it is shareware and that is not likely to fly because shareware is looked >down on here. Oddly :.> freeware is not. My question is this, is there a >way to bring a document from a netware server as a PDF to the Iseries and >print it using the Print API's or somthing equivalent, with out having to >go out and get third party tools? > >_______________________________________________ >This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list >To post a message email: MIDRANGE-L@midrange.com >To subscribe, unsubscribe, or change list options, >visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l >or email: MIDRANGE-L-request@midrange.com >Before posting, please take a moment to review the archives >at http://archive.midrange.com/midrange-l. --__--__-- Message: 4 Date: Mon, 15 Apr 2002 19:41:04 -0500 To: midrange-l@midrange.com From: Pete Hall <pbhall@ameritech.net> Subject: Re: V4R5 and SQL Reply-To: midrange-l@midrange.com At 10:34 04/15/2002, Jim Rubino wrote: >This message is in MIME format. Since your mail reader does not understand >this format, some or all of this message may not be legible. >-- >We recently upgraded to V4R5, we have JDEdwards world software. When a user >tries to run a program in JDE (World Writer), this program builds an SQL >statement over 3 files. The job seems to be getting hung up and not running. >If we remove some of the data selection needed, it runs fine. This exact >some program ran fine before going to V4R5. Has anyone had similar problems >and are using JDE or had similar problems with other packages and found a >PTF or solution to this. Are you up to date on Cume and DB PTFs? We had problems with QQQOPTIM when we first went to V4R5. Something seems to get hosed whenever a new feature is added to the DB or SQL support. It's apparently just the nature of the beast. Got to be one bugger of a piece of code. No problems after applying PTFs though. If you can paste the query into ISQL, you may get an indication of the problem in the joblog, possibly something about data exceptions or invalid pointers. Pete Hall pbhall@ameritech.net --__--__-- Message: 5 Date: Mon, 15 Apr 2002 20:43:43 -0500 To: midrange-l@midrange.com From: Vernon Hamberg <vhamberg@attbi.com> Subject: Re: FW: running a command on the IFS from batch. Reply-To: midrange-l@midrange.com Do you have Client Access on an NT box? Have you installed the incoming remote command feature? If so, you can do this by putting the address of the NT box in there. I assume qausteel is the DNS name of the 400. Or you could put the numeric IP address in there, but those things change. Be sure to run CWBRXD, which starts an rexecd on NT. Or NT may have its own rexecd - I forget. At 01:45 PM 4/15/02 -0400, you wrote: > > I have been running a program that runs a batch job on the > IFS by using STRPCO. However I just changed this to run the CL from > the night scheduler and it doesn't like STRPCO from batch. So I thought > I could change it to runrmtcmd but it doesn't like this either. Telling > me my command has an invalid name. > > Is it because I am running this from the same IP. The as/400 and IFS > are the same IP > > > > > > ===> RUNRMTCMD CMD('\\qausteel\home\vmi\inv.bat') > RMTLOCNAME('192.168.0.1' *IP) > > RMTUSER(KEYBANK) RMTPWD() > > . *...+....1....+....2....+....3....+....4....+....5....+....6... > > String '\\QAUSTEEL' contains a character that is not valid. > > Error found on *N command. > > >_______________________________________________ >This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list >To post a message email: MIDRANGE-L@midrange.com >To subscribe, unsubscribe, or change list options, >visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l >or email: MIDRANGE-L-request@midrange.com >Before posting, please take a moment to review the archives >at http://archive.midrange.com/midrange-l. --__--__-- Message: 6 To: midrange-l@midrange.com From: thomas@inorbit.com Subject: Re: Data Corruption Troubleshooting FMA Date: Mon, 15 Apr 2002 18:48:13 -0700 (PDT) Reply-To: midrange-l@midrange.com Al Mac: On Sat, 13 April 2002, MacWheel99@aol.com wrote > In theory for each order # there should be sequence # 1 2 3 4 5 etc. for each > of the different sub-component items involved. > but intermittently some orders are getting doubled up 1 1 2 2 3 3 4 4 5 5 > etc. or triple 1 1 1 2 2 2 3 3 3 4 4 4 etc. same item, only some of the item > info duplicated (other fields zero in the duplicate records) > > First, I want to identify which orders are corrupted so that we can kill them > & reissue them, or see if DFU delete excess is enough to uncorrupt them. > Right now the end users stumble over corrupted orders & we never know how > many other ones are out there that way. <snip> > I do not see how to do this with query/400, except I wondering if I created a > logical that says no duplicate keys allowed (in the logical) then attempt > no-match physical file to its new logical to list entries in physical not in > logical. I like to do things in query/400 that non-programmer co-workers can > then use as a guide to creating new stuff based on my showing the way. I'm not sure how much could be done through just Query/400, but SQL provides a couple features that would help. Even if you don't want to use SQL to do any of the work, you could still create a logical file or two (in the form of SQL views) that would give you or your users some information to work with. Quite a while ago, I posted a basic example of how to use SQL to locate and remove duplicate records very much like you describe. Look at the Files section at http://zap.to/tl400 (or http://tl400.tk to avoid any ads) for the "SQL Remove Duplicate Records" directory. There are two sample SQL source members -- FINDDUPES and KILLDUPES -- that are suitable for RUNSQLSTM. The SQL is generic, so you'd need to modify it to match the level breaks you need since there's no way I could know what your key field names nor table names would be. The members can be run separately. KILLDUPES would only be needed if FINDDUPES indicated a problem. If you see how those members do their work, it should be easy for you to figure out how to create a view that could be used by Query/400 or even RPG to do the work you wouldn't want to do with SQL. Tom Liotta -- Tom Liotta The PowerTech Group, Inc. 19426 68th Avenue South Kent, WA 98032 Phone 253-872-7788 Fax 253-872-7904 http://www.400Security.com ___________________________________________________ The ALL NEW CS2000 from CompuServe Better! Faster! More Powerful! 250 FREE hours! Sign-on Now! http://www.compuserve.com/trycsrv/cs2000/webmail/ --__--__-- Message: 7 To: midrange-l@midrange.com From: thomas@inorbit.com Subject: RE: Exit Point Question/profile switching... Date: Mon, 15 Apr 2002 18:56:02 -0700 (PDT) Reply-To: midrange-l@midrange.com On Fri, 12 April 2002, "Hatzenbeler, Tim" wrote > I didn't want to scan through a possible 32k sql string looking for > libraries I didn't want to allow, so I figured switching the authority would > be better and faster.... And more secure... And scanning SQL statements requires _parsing_ the SQL. Embedded comments, quoted literals, sub-selects... any of these could contain character strings that matched a restricted library or object name. The pitfalls are many and performance can drop significantly. This is an area that requires great care. Tom Liotta -- Tom Liotta The PowerTech Group, Inc. 19426 68th Avenue South Kent, WA 98032 Phone 253-872-7788 Fax 253-872-7904 http://www.400Security.com ___________________________________________________ The ALL NEW CS2000 from CompuServe Better! Faster! More Powerful! 250 FREE hours! Sign-on Now! http://www.compuserve.com/trycsrv/cs2000/webmail/ --__--__-- Message: 8 To: midrange-l@midrange.com From: thomas@inorbit.com Subject: Re: Exit Point Question/profile switching... Date: Mon, 15 Apr 2002 19:30:47 -0700 (PDT) Reply-To: midrange-l@midrange.com Tim: On Fri, 12 April 2002, "Hatzenbeler, Tim" wrote > Is this possible and if so is there a simple CL command to do it? > I would like to add a exit point program to QIBM_QZDA_INIT to switch the > userprofile to a less powerful profile (for users not found in a control > table). Profile swapping in exit programs is certainly possible through the use of various Security APIs, but there are numerous difficulties. Example -- It's generally trivial to determine at what moment to swap the chosen profile _IN_ because most exit points are structured to call the associated exit program just before the given transaction is executed. Unfortunately, it can be much more difficult to swap the profile back _OUT_. Perhaps this won't be a problem for you depending on exactly how you'll use the APIs, but it can really be trouble at some points in some exits. Also, you may need to take care how your exit program is secured. You'll essentially be creating a program that all of your users (plus perhaps the QTCP, QUSER and a few other system profiles) will have authority to call and the program will perform a profile swap. I suspect this won't be a program that you'll want anyone ever calling from a command line or via means other than through the server that you register it against. I can't do much more than point out _some_ problem areas because this is a feature (switch profiles) included in the PowerLock NetworkSecurity product sold by my employer. (I'm not even sure if I'm allowed to say as much as I already have.) Just be aware that this is definitely _NOT_ a small, easy project. Tweaking security values within exit programs can be a tough item to hang your job on. Tom Liotta -- Tom Liotta The PowerTech Group, Inc. 19426 68th Avenue South Kent, WA 98032 Phone 253-872-7788 Fax 253-872-7904 http://www.400Security.com ___________________________________________________ The ALL NEW CS2000 from CompuServe Better! Faster! More Powerful! 250 FREE hours! Sign-on Now! http://www.compuserve.com/trycsrv/cs2000/webmail/ --__--__-- Message: 9 To: midrange-l@midrange.com From: thomas@inorbit.com Subject: RE: Firewall in AS400 Date: Mon, 15 Apr 2002 19:39:39 -0700 (PDT) Reply-To: midrange-l@midrange.com Fery: Just to be complete, there is the OpsNav IP Packet Security facility which can act as a simple firewall for the AS/400 or iSeries system itself. This is separate from and unrelated to the Firewall for AS/400 product (whatever that was named). Tom Liotta On Fri, 12 April 2002, Fery@mik.co.id wrote > Wow ... I just want to ask you about the name of the Product (Firewall) .. > h eh ehhe , but all of you guys tell me and give me an advice to use > another solution for this issue .. :) > > Fery Gideon -- Tom Liotta The PowerTech Group, Inc. 19426 68th Avenue South Kent, WA 98032 Phone 253-872-7788 Fax 253-872-7904 http://www.400Security.com ___________________________________________________ The ALL NEW CS2000 from CompuServe Better! Faster! More Powerful! 250 FREE hours! Sign-on Now! http://www.compuserve.com/trycsrv/cs2000/webmail/ --__--__-- Message: 10 To: midrange-l@midrange.com From: thomas@inorbit.com Subject: Re: changing your sign-on screen Date: Mon, 15 Apr 2002 20:04:41 -0700 (PDT) Reply-To: midrange-l@midrange.com rob@dekko.com wrote > And on my signon screens I've added a msg field. Displays the data > contained in a specific message description. Then after every downtime we > do a CHGMSGD to inform the users when the next downtime is. Source > available upon request. For a useful variation, create a message description that has 1st-level text consisting of nothing but the seven-character message ID. E.g.: ===> addmsgd msgid(ABC1001) msgf(myLib/myMsgF) + msg(ABC1001) + seclvl('The real text is here...') When such a message is used in a message field, the 2nd-level text is used automatically. The advantage is that the 2nd-level text can be much longer than 1st-level text and the message field on the screen can be much longer than a single display line. I.e., rather than having four 80-character message fields on consecutive lines, you could have a single 320-character message field that spans four lines. Only one message ID needs to be maintained. Tom Liotta -- Tom Liotta The PowerTech Group, Inc. 19426 68th Avenue South Kent, WA 98032 Phone 253-872-7788 Fax 253-872-7904 http://www.400Security.com ___________________________________________________ The ALL NEW CS2000 from CompuServe Better! Faster! More Powerful! 250 FREE hours! Sign-on Now! http://www.compuserve.com/trycsrv/cs2000/webmail/ --__--__-- Message: 11 To: midrange-l@midrange.com From: thomas@inorbit.com Subject: RE: AS/400 Support for Windows Network Neighborhood problem Date: Mon, 15 Apr 2002 20:15:10 -0700 (PDT) Reply-To: midrange-l@midrange.com Eric: Eric Sundell PMI wrote > IPL the system and then restart TCP, this happed to us just the other week > when someone did a port scan on our system and it left the port open. I've been trying to understand what this means... "someone did a port scan" and "it left the port open"... Biggest question is simply "it"?? What is the "it" that "left the port open"? Were you saying that a port scan through your network somehow _opened_ your AS/400's NetServer port? Beyond that, was the "someone" intended to mean that you didn't know who it was? If so, how did you know what happened and how did you determine it was related to the problem at all? Tom Liotta -- Tom Liotta The PowerTech Group, Inc. 19426 68th Avenue South Kent, WA 98032 Phone 253-872-7788 Fax 253-872-7904 http://www.400Security.com ___________________________________________________ The ALL NEW CS2000 from CompuServe Better! Faster! More Powerful! 250 FREE hours! Sign-on Now! http://www.compuserve.com/trycsrv/cs2000/webmail/ --__--__-- Message: 12 From: "John Earl" <john.earl@powertechgroup.com> To: <midrange-l@midrange.com> Subject: Re: Exit Point Question/profile switching... Date: Sat, 13 Apr 2002 18:25:27 -0700 Organization: PowerTech Group Reply-To: midrange-l@midrange.com Tim, > [ Picked text/plain from multipart/alternative ] > Is this possible and if so is there a simple CL command to do it? > I would like to add a exit point program to QIBM_QZDA_INIT to switch the > userprofile to a less powerful profile (for users not found in a control > table). What command would I use? And if so, would the profile switch > exist when they make the QIBM_QZDA_SQL1 call, or would I need to switch the > profile here also? > Or am I doing this all wrong? > My goal is this, to create a user profile that excludes our payroll library, > and give the odbc requests this profile... Yes it is possible. This is a cornerstone feature of our PowerLock NetworkSecurity software, for all of the reasons that you mention in your follow-on posting. This feature allows you to change the personality of a user going through the ODBC, (or FTP or DDM, etc) without re-arranging the application security that the application vendor has stuck you with. I'd have to argue with Evan's points (Sorry Evan, you're normally so right!) about simplicity of security design, given the lack of network security in many application packages, lots of folks have found that using our Switch Profile capability to be the simplest way to manage ODBC and FTP. So without giving away all of our trade secrets, here are some technical tips for doing this sort of thing.... - No, there is not a command, you have to write to the Swap profile API's (QWTSETP, QSYGETPH) - Many of these servers are re-entrant - meaning that they are used 200 times by potentially 200 different users before your program ends and restarts. You have to manage the security each time you go through an exit program because there is no guarantee that the same user will use the same server job twice in a row. You don't want to be handing out authority carte blanche. - There are a limited number of times that you are allowed to swap within a job. You should go back and clean up after yourself each time. - Once You swap from "Fred" to "Fred2" Expect "Fred2" to have no access to any of "Fred's" stuff (That's the whole purpose of the exercise) - When your exit program returns an "OK" to the server, your program is finished. You don't get an opportunity to swap back after the ODBC transaction is done. You have to clean up on your next trip back into the server. Don't foul this part up, or you'll leave inappropriate authority laying around. - The original users library list, Outqueue, accounting code, etc are still attached to the job. The only thing you are changing is the authority landscape - As Syd mentioned, there are lots and lots of servers. You'll want to do this for more than just the 4 ODBC servers. Or, of course, you could save your self a bunch of time, aggravation, and money and purchase a product like ours. We've been doing exit points for more than six years now. We already know where the land mines are. :) jte John Earl www.powertechgroup.com john.earl@powertechgroup.com The Powertech Group Inc. Seattle, Washington Where the Security Experts Live! Phone: +1-253-872-7788 Fax: +1-253-872-7904 -- --__--__-- Message: 13 From: "John Earl" <john.earl@powertechgroup.com> To: <midrange-l@midrange.com> Subject: Re: Exit Point Question/profile switching... Date: Sat, 13 Apr 2002 18:27:14 -0700 Organization: PowerTech Group Reply-To: midrange-l@midrange.com Vernon, Changing library list also does not secure the objects in the payroll (or any other ) library. It simply makes it less obvious to the user that the data is available. A user can navigate around ht library list pretty easily. jte -- John Earl www.powertechgroup.com john.earl@powertechgroup.com The Powertech Group Inc. Seattle, Washington Where the Security Experts Live! Phone: +1-253-872-7788 Fax: +1-253-872-7904 -- ----- Original Message ----- From: "Vernon Hamberg" <vhamberg@attbi.com> To: <midrange-l@midrange.com> Sent: Friday, April 12, 2002 2:59 PM Subject: Re: Exit Point Question/profile switching... > 'Nutha thought - if you change to a single profile, you lose some tracking > ability. Changing library list preserves history. > > At 12:10 AM 4/13/02 +0100, you wrote: > >Instead of trying to switch user profiles, perhaps you could use the > >exit point to restrict access to the appropriate libraries. This would > >be easier I think. > > > >Syd Nicholson > > > >Hatzenbeler, Tim wrote: > > > >>This message is in MIME format. Since your mail reader does not understand > >>this format, some or all of this message may not be legible. > >>-- > >>[ Picked text/plain from multipart/alternative ] > >> Is this possible and if so is there a simple CL command to do it? > >>I would like to add a exit point program to QIBM_QZDA_INIT to switch the > >>userprofile to a less powerful profile (for users not found in a control > >>table). What command would I use? And if so, would the profile switch > >>exist when they make the QIBM_QZDA_SQL1 call, or would I need to switch the > >>profile here also? > >>Or am I doing this all wrong? > >>My goal is this, to create a user profile that excludes our payroll library, > >>and give the odbc requests this profile... > >>Thanks, tim > > _______________________________________________ > This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list > To post a message email: MIDRANGE-L@midrange.com > To subscribe, unsubscribe, or change list options, > visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l > or email: MIDRANGE-L-request@midrange.com > Before posting, please take a moment to review the archives > at http://archive.midrange.com/midrange-l. > --__--__-- _______________________________________________ This is the Midrange Systems Technical Discussion (MIDRANGE-L) digest list To post a message email: MIDRANGE-L@midrange.com To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l or email: MIDRANGE-L-request@midrange.com Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l. End of MIDRANGE-L Digest
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.
midrange.com
