zPDT-vol2-Installation and Basic Use-Sg247722 PDF
zPDT-vol2-Installation and Basic Use-Sg247722 PDF
IBM System z
Personal Development Tool
Volume 2 Installation and Basic Use
Linux base
Bill Ogden
ibm.com/redbooks
.
International Technical Support Organization
July 2011
SG24-7722-03
Note: Before using this information and the product it supports, read the information in “Notices” on page v.
This edition applies to the IBM 1090 system (known as zPDT) that is available at the time of publication.
© Copyright International Business Machines Corporation 2009, 2011. All rights reserved.
Note to U.S. Government Users Restricted Rights -- Use, duplication or disclosure restricted by GSA ADP Schedule
Contract with IBM Corp.
Contents
Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .v
Trademarks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vi
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii
The author . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii
Now you can become a published author, too! . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii
Comments welcome. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii
Stay connected to IBM Redbooks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii
Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
IBM Redbooks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Other publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
How to get Redbooks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Help from IBM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
iv IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
Notices
This information was developed for products and services offered in the U.S.A.
IBM may not offer the products, services, or features discussed in this document in other countries. Consult
your local IBM representative for information on the products and services currently available in your area. Any
reference to an IBM product, program, or service is not intended to state or imply that only that IBM product,
program, or service may be used. Any functionally equivalent product, program, or service that does not
infringe any IBM intellectual property right may be used instead. However, it is the user's responsibility to
evaluate and verify the operation of any non-IBM product, program, or service.
IBM may have patents or pending patent applications covering subject matter described in this document. The
furnishing of this document does not give you any license to these patents. You can send license inquiries, in
writing, to:
IBM Director of Licensing, IBM Corporation, North Castle Drive, Armonk, NY 10504-1785 U.S.A.
The following paragraph does not apply to the United Kingdom or any other country where such
provisions are inconsistent with local law: INTERNATIONAL BUSINESS MACHINES CORPORATION
PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR
IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT,
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of
express or implied warranties in certain transactions, therefore, this statement may not apply to you.
This information could include technical inaccuracies or typographical errors. Changes are periodically made
to the information herein; these changes will be incorporated in new editions of the publication. IBM may make
improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time
without notice.
Any references in this information to non-IBM Web sites are provided for convenience only and do not in any
manner serve as an endorsement of those Web sites. The materials at those Web sites are not part of the
materials for this IBM product and use of those Web sites is at your own risk.
IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring
any obligation to you.
Information concerning non-IBM products was obtained from the suppliers of those products, their published
announcements or other publicly available sources. IBM has not tested those products and cannot confirm the
accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the
capabilities of non-IBM products should be addressed to the suppliers of those products.
This information contains examples of data and reports used in daily business operations. To illustrate them
as completely as possible, the examples include the names of individuals, companies, brands, and products.
All of these names are fictitious and any similarity to the names and addresses used by an actual business
enterprise is entirely coincidental.
COPYRIGHT LICENSE:
This information contains sample application programs in source language, which illustrate programming
techniques on various operating platforms. You may copy, modify, and distribute these sample programs in
any form without payment to IBM, for the purposes of developing, using, marketing or distributing application
programs conforming to the application programming interface for the operating platform for which the sample
programs are written. These examples have not been thoroughly tested under all conditions. IBM, therefore,
cannot guarantee or imply reliability, serviceability, or function of these programs.
The following terms are trademarks of the International Business Machines Corporation in the United States,
other countries, or both:
CICS® Redbooks (logo) ® z/Architecture®
DB2® Resource Link™ z/OS®
IBM® S/390® z/VM®
MVS™ System z® z/VSE™
PartnerWorld® VTAM® zSeries®
Redbooks® WebSphere®
Intel, Intel logo, Intel Inside logo, and Intel Centrino logo are trademarks or registered trademarks of Intel
Corporation or its subsidiaries in the United States and other countries.
Microsoft, Windows, and the Windows logo are trademarks of Microsoft Corporation in the United States,
other countries, or both.
UNIX is a registered trademark of The Open Group in the United States and other countries.
SUSE, the Novell logo, and the N logo are registered trademarks of Novell, Inc. in the United States and other
countries.
Red Hat, and the Shadowman logo are trademarks or registered trademarks of Red Hat, Inc. in the U.S. and
other countries.
Linux is a trademark of Linus Torvalds in the United States, other countries, or both.
Other company, product, or service names may be trademarks or service marks of others.
vi IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
Preface
This IBM® Redbooks® publication introduces the IBM System z® Personal Development
Tool (zPDT), which runs on an underlying Linux system based on an Intel processor. zPDT
provides a System z system on a PC capable of running current System z operating systems,
including emulation of selected System z I/O devices and control units. It is intended as a
development, demonstration, and learning platform and is not designed as a production
system.
This book, providing specific installation instructions, is the second of three volumes. The first
volume describes the general concepts of zPDT and a syntax reference for zPDT commands
and device managers. The third volume discusses more advanced topics that may not
interest all zPDT users. The OBM order numbers for the three volumes are SG24-7721,
SG24-7722, and SG24-7723.
The systems discussed in these volumes are complex, with elements of Linux (for the
underlying PC machine), z/Architecture® (for the core zPDT elements), System z I/O
functions (for emulated I/O devices), and z/OS® (providing the System z application
interface), and possibly with other System z operating systems. We assume the reader is
familiar with the general concepts and terminology of System z hardware and software
elements and with basic PC Linux characteristics.
The author
This series of IBM Redbook publications was produced by the zPDT development team, with
assistance from many other people.
Bill Ogden is a retired Senior Technical Staff Member at the International Technical Support
Organization, Poughkeepsie. He enjoys working with new mainframe users and entry-level
systems.
Keith VanBenschoten, IBM Poughkeepsie, was very helpful in establishing installation and
startup processes for the 1090 and in providing test systems.
Richard Brandle, IBM Dallas, helped with much of the practical usage information
incorporated in this redbook.
Find out more about the residency program, browse the residency index, and apply online at:
ibm.com/redbooks/residencies.html
Comments welcome
Your comments are important to us!
We want our books to be as helpful as possible. Send us your comments about this book or
other IBM Redbooks publications in one of the following ways:
Use the online Contact us review Redbooks form found at:
ibm.com/redbooks
Send your comments in an e-mail to:
[email protected]
Mail your comments to:
IBM Corporation, International Technical Support Organization
Dept. HYTD Mail Station P099
2455 South Road
Poughkeepsie, NY 12601-5400
viii IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
1
We strongly recommend that the general procedures described here be followed for initial
1090 usage. After you have gained some experience with the 1090, you can explore other
installation and usage arrangements. Many of our choices are arbitrary and simply reflect our
preference for a simple Linux.
Note: This document mentions both 32-bit and 64-bit versions of zPDT. The 32-bit
versions are for IBM internal use only. The 32-bit version is “stabilized” and support will be
dropped in late 2011.
We assume the PC is dedicated to Linux, with the 1090 application used when wanted. If this
is not the case, we suggest obtaining a separate hard disk for the Linux disk if this is possible.
The original hard disk can then be used for its original purpose. If this is not appropriate, then
a dual boot environment might be created. There are so many variations possible that we do
not attempt to provide specific instructions for creating dual boot installations. You should
ensure that sufficient free disk space is available for Linux and your emulated System z
volumes. For Linux and a very small z/OS you should have at least 40 GB of free disk space.
Virtual environments, such as with VMware, Xen, or KVM or similar product environments,
are not supported. Informal attempts to use these environments have not always been
satisfactory. The fundamental issue is that zPDT, with z/OS running under it for example, is a
large, heavy, complex environment that pretty much consumes the PC running it. It also
introduces timing constraints (for the many timers that z/OS has running internally) that do not
fit well in an extended virtual environment. Successful users of these virtual environments
have ample hardware resources, especially memory.
For some examples, we elected to install Linux with fixed IP addresses, with firewalls and
other security elements disabled. This was to ease communication in a private LAN
environment (connected to a small, personal router). Your needs may be different. The 1090
functions are not related to these controls, except that you may need to open firewall access
Ordering requirements
This document does not provide detailed ordering information for zPDT. The ordering process
may differ for various categories of users and for different countries. Whatever ordering
process is used should result in the following:
One of the 1090-supported Linux distributions (current versions of Red Hat Enterprise
Linux (RHEL) or Fedora, or Novell SUSE Linux Enterprise Server (SLES) or openSUSE.
This may need to be ordered, or it might be downloaded from a website. It is not supplied
by IBM.
A 1090 token (which may need to be activated via an IBM business partner, 1090 supplier,
or through IBM ResourceLink).
The 1090 software, which must be installed before the token can be activated (if it is not
supplied already activated). The 1090 software does not include any System z operating
systems.
Whatever System z software you plan to use, in a format usable with the 1090. This may
require a different ordering process than ordering the 1090 itself. The remainder of this
document assumes you have acquired the z/OS AD-CD package to use with your 1090.
Much of the material in this document assumes that you will install the z/OS AD-CD system. If
you are installing different System z software, you need to obtain specific instructions for the
1090 from the supplier of that software.
Installation overview
A summary of the usual installation sequence is this:
1. Read this series of books. You may not remember all the details at this stage, but you
should skim through most of the material before starting. Remember to work as root when
indicated and as another userid (ibmsys1 in all our examples) when indicated. If you are
new to Linux or the 1090, install a simple system first, before attempting something more
complex. Do not use root for installation and operation actions.
2. Think about your disk partitioning, especially if you plan to install major applications in
addition to the 1090 package.
3. Gather the required software packages:
– Linux for your base PC. Be certain that you have the correct Linux (32- or 64-bit
version). zPDT checks for Red Hat or SUSE indicators and will not install with other
Linux distributions.1
– The 1090 software (which might be obtained on a CD or DVD, or by a download).
• Two prerequisite modules, the 1090 modules, and the license agreement are all in a
single (non-rpm) file. There are two of these files, one for 32-bit environments and
one for 64-bit environments. Each of these files contains both the Red Hat and
SUSE versions of the 1090 code. The proper version is automatically installed on
your system.
• Your System z software (z/OS, z/VM®, or z/VSE™) in a format usable with the
1090.
4. Follow the installation steps described later in this chapter:
a. Install Linux. See the notes below << what notes??>>for suggestions.
1
The 1090 installation program checks the base Linux system for Red Hat or SUSE indicators. It is possible that
other distributions may have one of these indicators, allowing 1090 installation to proceed.
2 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
b. Install x3270 (or another 3270 emulator) if it is not included in your base Linux
distribution. Optionally, customize the x3270 keyboard.
c. Create group zpdt and userid ibmsys1.2
d. Install the 1090 package.
e. Customize several Linux files (sysctl.conf, /etc/profile.local, /etc/profile, and
.bashrc).
f. Copy or create a devmap.
5. Activate your 1090 token if necessary, as described in 1.5, “1090 hardware key activation”
on page 14. You cannot do this until the 1090 package is installed. (This step may be done
by a business partner or 1090 service provider.)
6. Generally following Chapter 3, “LANs and TCP/IP” on page 27, install z/OS or other
System z software:
a. Select the AD-CD distribution (or another System z operating system)
b. Unzip the volumes.
c. Customize or create a devmap.
d. Start the 1090 and IPL your operating system.
7. After you have run a basic system, you might consider LAN configurations.
As is often true with new hardware and software combinations, remember that a given Linux
level may not support the newest PC hardware. This is most often seen with new LAN adapter
chips and with new graphics chips and/or display panels. Support for these may require
additional Linux drivers or upgrades. If you have a very new PC model, or an unusual
configuration, you may need to verify that your Linux version is completely operational on your
hardware.
If you create a separate /home file system, it should be large enough for several sizeable core
image files. At least several gigabytes are suggested.
2
This is not required. However, all our examples assume that the 1090 is operated through Linux userid ibmsys1.
Whatever userid is used must be no longer than eight characters. Do not attempt to operate the 1090 while working
as root.
3
A machine with larger memory will typically have a larger Linux file system. Among other things, it should be able to
hold one or more core image files that may be created in unusual situations. A core image file created under zPDT
might be somewhat larger than the System z size defined in the devmap.
If you plan a dual boot system, then you will have at least one more partition (probably for
Windows). You will probably need to shrink the existing Windows partition to make room for
the new partitions. The various ways to do this are not covered in this document.
4 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
The X Software Development package, or something similar, may be needed if x3270 is
not included in the initial installation and is to be installed later.
We have sometimes found it advisable to perform an online update for the Linux
distribution. If this is available for your Linux, we suggest you perform the update.
Determine if additional drivers or driver updates are needed for your PC.
You must manage whatever firewall and other security functions that you install with your
Linux. We suggest disabling any firewall when first working with the 1090 if you plan to
make external 3270 connections to it. Once you are familiar with 1090 operation, you can
reestablish the firewall functions. If you have external TCP/IP connections (for local 3270
connections, for OSA connections, or for CTC connections) you must provide appropriate
port holes in any firewall you use.
At this point we were presented with a “teletype mode” (non-graphic) login. Our W500 mobile
computer high-resolution panel (1920x1200) was not recognized by our new Linux system. If
your system enters a normal graphic mode, the following steps are not needed.
login: root
# init 5 switch to graphics mode
(screen blinks several times)
Failed to start the X server ....
Like to view error details...? <No>
Like to try to configure X server...? <Yes>
(several messages, pauses, blinks)
Display settings Resolution 800x600 (no other useful choices available)
Display Settings changed <OK>
Trying to restart the X Server <OK>
(blinks several times. Should then switch to full resolution)
# gedit /etc/inittab
find line: id:3:initdefault:
change to: id:5:initdefault:
As noted in the script above, we suggest you disable SELinux (“SEL”) for initial 1090 usage, or
set it to permissive. Otherwise, you may have permission problems when starting the 1090,
with messages such as the following:4
/usr/z1090/bin/libhmc_s.so: cannot restore segment prot after reloc: Permission
denied
TN3270e clients
IBM has used these TN3270e clients with the 1090 offering:
x3270 (recent versions)
Recent PCOM releases (running on Windows systems)
PowerTerm with the IBM Open Client system
We most commonly use x3270. Our last step in the Linux installation we are describing was
to install x3270, since it was not included with most current Linux distributions.5 An x3270
package is usually a single rpm, although we needed two packages as part of a particular
4
We experienced this with RHEL 5.2. We did not try running RHEL 5.3 with SELinux enabled.
5 An exception is SLES 11, which includes x3270.
6 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
x3270 we used in one case. (The two rpm packages were obtained by downloading them
from the web.) The two packages, in the order they must be installed, were:
x3270-3.3.4p7-3.e15.1.i386.rpm (not needed with some x3270s)
x3270-x11-3.3.4p7-3.e15.1.i386.rpm6
Other x3270 levels may be used, or another 3270 emulator may be used. In order to install
these two rpms, we found it was necessary to include the X Software Development package
when we installed RHEL 5.3 Linux. Note that this particular x3270 version did not include the
keyboard map file we describe next.
There is no requirement to change the default x3270 keyboard mapping. If you prefer the
more traditional mapping, use the following steps (working as root):7
# cd /usr/share/X11/app-defaults
This directory may contain file X3270 (with an upper case letter X). Use the appropriate path
to app-defaults for your Linux and verify that file X3270 is present. If it is not present, you
could consider using a local x3270 profile, described later.
# gedit X3270 (use your favorite editor)
(scroll to the stanza named X3270.keymap.base.3270: #override)
(scroll to second line in this stanza):
...
Shift<Key>Return: Newline()\n\
:<Key>Return: Enter()\n\ <-- delete this line
:<Key>Linefeed: Newline()\n\ <-- delete this line
:<Key>Backspace: Erase()\n\ <-- delete thisline
<Key>Control_R: Enter()\n\ <-- add these lines
<Key>Control_L: Reset()\n\
<Key>Return: Newline()\n\
<Key>Pause: Clear()\n\
<Key>BackSpace: BackSpace() Delete()\n\
<Key>KP_Enter: Enter()\n\ <---optional
<Key>End: EraseEOF()\n\ <-- optional
<Key>Prior: PF(7)\n\ <-- optional
<Key>Next: PF(8)\n\ <-- optional
Shift<Key>Tab: BackTab()\n\
...
Notice that the 3270 screen defaults to model 4 (with 43 lines). Our ThinkPad keyboard
contained extra keys associated with Microsoft Windows usage, making the left and right Ctrl
keys smaller than they are on some keyboards. We did not attempt to map these Windows
keys to any 3270 function.
As a result of these changes to the keymap, common 3270 functions are as follows:
You can adapt these instructions to other x3270 versions or simply use the default keymap
distributed with x3270.
It seems that x3270 keyboard files are very sensitive to extra spaces and tab characters. Do
not have anything after the \n\ in the text lines. In this file, we spaced the <Key> field starting
in column 4, although this was arbitrary.
x3270 fonts
If x3270 is installed from a separate source, it may not have its normal fonts. In the x3270
fonts menu there may be an option for iso fonts. We selected the following one:
-eti-fixed-bold-r-normal--18-180-72-72-c-90-iso8859-1
The 18 that is embedded in the name is the point size. A similar choice, with 24 in this position
selected a larger font.
8
The Linux userid is used as the LPAR name under zPDT, and LPAR names are limited to eight characters or less.
(Only a subset of LPAR-like functions are provided by zPDT.)
8 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
Other Linux distributions
Linux distributions other than Red Hat and SUSE are not acceptable to the zPDT installation
process. “Force fitting” zPDT to other distributions may create obscure errors.
Many of our examples use path /media/ROM to access the drive. This would be the correct
path for a CD/DVD with the title ROM. A CD/DVD with a different title would have a different
path name.
Linux PATH
We suggest that you do not add other directories before /usr/z1090/bin in the PATH and
LD_LIBRARY_PATH variables. There are many commands and executed modules provided
with the 1090 and these correspond to Linux file names that are accessed through the PATH
variables. For example, the command d is used to display System z memory. If you should
place another directory containing a file named d earlier in the PATH, then the 1090 d function
would not be available in the normal manner. Various internal 1090 functions assume they
can access 1090 modules via PATH and LD_LIBRARY_PATH; you must ensure that this is
possible.
Note that $ prompts (throughout the examples in this document) indicate a non-root userid
and # prompts indicate we are working as root. We recommend that you always log in as
ibmsys110 and then use an su command to switch to root when needed. The following
directions assume that a single 1090 instance will be used. (Multiple 1090 instances require
multiple userids, such as ibmsys2 and ibmsys3.)
If you have not already done so, create group zpdt and user ibmsys1, which should be a
member of group zpdt. (These specific names are not required; however, we use them
consistently in all documentation. Earlier documentation used group ibmsys instead of group
zpdt; the change is arbitrary.)
By default, userid ibmsys1 has /home/ibmsys1 as its home directory and most 1090 control
files appear in subdirectories here. We created file system /z as a separate partition during
our Linux installation.11 We want userid ibmsys1 to own this file system:
(log on as ibmuser1)
# su switch to root
9
The third volume contains a note about limiting access to the only zPDT module that involves running with root
authority.
10 There is nothing special about userid ibmsys1. We consistently use it to illustrate 1090 operation. Any userid with
8 or fewer characters can be substituted for ibmsys1, but that userid should be consistently used for all 1090
installation and operation actions.
11 This may not be the case for the IBM Open Client, but we ignore this exception here.
You need a single executable file to install the 1090 base functions. There are two versions of
this file (for 32 or 64-bit environments) with names such as:
z1090-1-2.41.35.x86_64 (64-bit environments; verify your exact file name)
z1090-1-2.41.35.i586 (32-bit environments; verify your exact file name)
Proceed with 1090 installation as follows. The first goal is to move the installation file to a
convenient directory, such as /tmp. If you obtained the 1090 installation file via ftp or some
other dowload method, you may have already placed it in /tmp.
(log on as ibmsys1)
$ su (change to root)
# cd /media/ROM (if you install from a CD)12
# cp /media/ROM/z1090-1-2-41.35.x86_64 /tmp (use the correct name)
# cd /tmp (the file is in /tmp)
Scroll through the license and reply to the question about the license. The various rpms are
then installed automatically. The z1090 installer program does the following, removing older
versions of these programs as needed:
Two prerequsite rpms are installed.
The 1090 rpm is installed, mostly in /usr/z1090/bin.
A set of man files is loaded into /usr/z1090/man.
A UIMD service is installed.
The installation may be followed with several messages about “missing LSB tags and
overrides.” These messages may be ignored. There should be messages about starting the
UIMD service; see “1090 serial numbers” on page 13 for more details about UIMD.
Installer options
The installer program has three options. Using the file name in the example above:
# ./z1090-1-2.41.35.x86_64 --refresh (reinstall current zPDT level)
# ./z1090-1-2.41.35.x86_64 --refreshall (reinstall zPDT and prerequsites)
# ./z1090-1-2.41.35.x86_64 --remove (remove zPDT and prerequisites)
The prerequsites mentioned here are two rpms that are needed to access the USB token.
12
This example assumes that ROM is the title of the CD. You must determine the title of your CD.
13
If you are coming from an older release of the 1090 you may have multiple copies of sntl-sud or shk-server
installed and the installation step will fail. In this case, do the following:
# rpm -e z1090 (remove the old 1090 programs)
# rpm -e --allmatch sntl-sud (repeat for shk-server if necessary)
14 The “./” characters before the file name tell Linux to execute this file from the current directory.
10 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
1.3.1 Alter Linux files
You must update a few Linux files before you can use the 1090. The following commands add
lines to /etc/sysctl.conf.15 We indicate the use of gedit but you may use any suitable editor
(such as vi) to create these files or add the indicated lines.16 (We suggest that you do not
attempt to use vi unless you have a basic familiarity with it!)
Some Linux distributions already have acceptable values for shmmax, msgmnb, msgmax,
and core_uses_pid, but other distributions may need to have all these values set.
(Unfortunately, some newer Linux versions restrict the gedit editor such that it is not easily
usable when running as root. You may need to overcome this; one way is to change the
permissions or ownership of the target files, using the chmod or chown commands. We ignore
this detail in the following examples.)
# gedit /etc/sysctl.conf (the following lines should begin in column 1)
kernel.shmmax=2415919104 (2.4 GB for 32-bit kernels)
kernel.shmmax=18000000000 (17 GB or more for 64-bit kernels)
(Use only one of these shmmax lines)
kernel.core_pattern=core-%e-%p-%t
kernel.core_uses_pid=1
kernel.msgmni=512
kernel.msgmax=65536
kernel.msgmnb=65536
net.core.rmem_max=1048576 (if needed)
net.core.rmem_default=1048576
# /sbin/sysctl -p /etc/sysctl.conf
This would result in the total amount of shared memory, for all users, to be 300,000,000*4096.
This value should be greater than the number of 1090 instances times the System z memory
size for each instance plus about 10%. A number much larger than needed appears to do no
harm.
If your intended System z memory size is larger than approximately 16 GB, then you need to
make the kernel.shmmax value larger. A reasonable value would be about 10% larger than
the total System z memory that you specify.
15 Some versions of the IBM Open Client reset these values when maintenance is applied. If this happens, you
should again enter the values shown here and run /sbin/sysctl.
16
The 32-bit shmmax value shown should be used for 32-bit Linux systems. The value shown for 64-bit systems (the
value is approximately 17 GB) is suitable for most users. If you have more than, say, 16 GB of real memory and you
intend to define a System z configuration with more than about 16 GB then the shmmax value should be increased.
As a general rule, the shmmax value should be at least 500 MB larger than the total System z memory you define
(for all instances) but your defined System z memory should be about 500 MB less than the real memory in your
machine.
17
The default value on several distributions is 1,152,921,504,606,846,720, which is huge. However, on at least one
IBM internally-distributed Linux the default is much lower and may need to be adjusted.
The net.core parameters may be needed if Ethernet large frames are used. These seem to
do no harm, so you may always include them. In this context, any frame with more than 1500
bytes is considered large. (IBM has not tested large Ethernet frames, sometimes known as
jumbo frames, and does not formally support them for zPDT.)
Profiles
The following lines should be added to /etc/profile.local. If this file does not exist, you
should create it. (Some Linux distributions do not use this file, but its presence should not hurt
anything.)
# gedit /etc/profile.local (the following lines should begin in column 1)
ulimit -c unlimited
ulimit -d unlimited
ulimit -m unlimited (if you have more than 128 emulated I/O devices)
ulimit -v unlimited (if you have more than 128 emulated I/O devices)
# gedit /etc/profile
(Add the following line as the last line if not already present somewhere in the profile. It
is already present in many distributions.)
test -s /etc/profile.local && . /etc/profile.local
The ulimit commands in /etc/profile.local are not effective unless this file is processed
from the /etc/profile reference. The ulimit commands can also be placed in the .bashrc
file (or in both places).
Double-check the entries in all of these Linux files. Errors here may be difficult to detect later.
The ulimit -m and -v statements are not required for most users and should probably be
excluded unless you have more than 128 emulated I/O devices.)
Check your 1090 distribution materials to see if there are sample devmap files that may be
helpful.18 Copy these to /home/ibmsys1, for example:
$ cd /tmp/ROM (or wherever your 1090 source is))
$ cp aprof12 /home/ibmsys1/aprof12 (sample devmap)
$ chmod 664 /home/ibmsys1/aprof12
12 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
Note that any sample devmaps probably must be edited to match your configuration and file
names. If you do not find a sample devmap, you need to create one before you can start
zPDT.
You may also notice a new directory named /etc/z1090.d containing one or two small files.
These are part of the license (token) control process and should require no work.
Reboot Linux
Reboot Linux to pick up all the changes you have made. You should then use the
z1090instcheck command to partly verify your environment for running the 1090. Your new
PATH is needed to find the command:
(log in as ibmsys1)
$ z1090instcheck
If this command is not found, you do not have the PATH variables set or you did not install the
1090 code correctly. Note that this command does not check any devmaps that you may have
defined or copied.
If multiple tokens are used (at the same time), a specific System z serial number is assigned
and will be used consistently. (In earlier releases, the serial numbers from the multiple tokens
were used somewhat randomly.) The specific serial number is stored in the Linux file for reuse
on subsequent 1090 startups. This number (and other identifying numbers) are managed by
a 1090 service known as Unique Identifier Manager (UIMD).
When this 1090 release is installed, a new directory (/etc/z1090.d) is created. After the 1090
is started the first time, it will contain a file named uimd.db. The effective 1090 serial number
is contained in this file, along with some binary information. You should not edit this file, but
you may delete it. If you delete it then any previous serial number assignments are removed.
The file will be automatically created the next time you start a 1090 instance and the serial
number will be assigned from the token you use at that time. If multiple tokens are used, a
serial number is generated and saved for future use. (This avoids any randomness of serial
numbers when multiple tokens are used.)
The UIMD service may place a small log entry in /var/logs when Linux is booted. Such log
entries may be deleted if they become a problem. The UIMD service is started automatically
when Linux is booted and the operation should be automatic. In unusual situations, the
following Linux commands may be used to control it:
# service uimd start
# service uimd stop
# service uimd status
# service uimd restart
Note: At the time of writing, the material in this section (about token renewals) applies only
to tokens obtained through the early IBM PartnerWorld® channels or the IBM internal RPQ
process. It does not apply to tokens obtained through other channels.
A USB hardware key (token) is valid for a year from the time it was last activated.19 Activation
(and lease renewal) may be handled by your zPDT service provider (such as an IBM
Business Partner) or by using IBM Resource Link™ in some cases. IBM Resource Link
usage for token activation requires an IBM employee userid or a userid that has been added
to a list of certain zPDT token users. Your 1090 provider should have information about this.
If your 1090 Linux system is connected to the Internet you can perform the whole process
from there. In practice, we find many 1090 systems are not connected to the Internet. In this
case, you can copy the request file and the update file between your 1090 machine and your
Internet machine (possibly running Microsoft Windows) by using a memory stick, a diskette,
FTP, or any other convenient method. These two files are small.
An update file functions only with the specific token that you identified in the request file, and
can be used only once.
19 This was true at the time of writing. Future availability plans may manage this in a different way.
20
Also known as an IBM Registration ID. If there is a problem send a note to [email protected] to request help
with Resource Link registration.
21 For IBM internal use, this Resource Link userid must be an IBM employee userid. For certain other users, it must
14 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
Preliminary work
Copy the information that is printed on the token tag (illustrated in Figure 1-1) attached to the
USB hardware key. Save this information in a safe place.
Type 1090-L01
S/N 02-1180C
The data in the 11S and MTSN fields on the tag is required to:
Activate the USB hardware key for the first time.
Extend the lease for one year.
Activate and use a replacement USB hardware key.
A Resource Link profile (userid) is needed. This may be an IBM employee profile or a
PWD-approved profile for other users. If you do not have one, go to
http://www.ibm.com/servers/resourcelink
and follow the Register for an IBM ID link (in the upper right part of the panel). After
establishing a userid and password, follow the Sign in link to create your Resource Link
profile. Wait two hours after creating the profile before signing back in. The profile information
must be replicated among several servers, which can take some time.
PWD members must validate this userid with the IBM PWD office. If you do not have an IBM
employee Resource Link userid, or if your PWD Resource Link userid has not been validated
by the IBM PWD office, you will not see the appropriate menu items in Resource Link.
16 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
2
For software licensing purposes, a 1090 system is a System z and all software licensing
requirements that apply to a larger System z installation also apply to a 1090 installation. This
statement applies to all System z software from IBM and, we assume, applies to all System z
software available from other vendors.1
The discussions in this chapter (and elsewhere in this series) assume that proper licenses
have been obtained for the System z software. Licensing arrangements (and associated
costs) can be complex topics and are not further addressed in this document.
Important: The discussions in the remainder of this document and in the third volume in
this series assume the reader has a general familiarity with z/OS systems programming
and understands how to access various control data sets. We highlight specific details that
may be relevant to 1090 usage and the current AD-CD releases. This is not intended as an
introduction to z/OS administration.
Furthermore, we assume basic familiarity with the AD-CD z/OS package. Update
information about the AD-CD packages may be found on:
http://dtsc.dfw.ibm.com
1
In this discussion we include software for zSeries®, S/390s, and so forth, in the general category of System z
software.
Software installation methods may be different for 1090 systems than for traditional System z
installations. This difference is due to the differences in I/O devices available on 1090
systems and on larger System z machines.
The most common limitation is for software that is distributed on tape. To install this software,
your 1090 must have a tape drive and these are not commonly available for PC machines.
Another limitation is related to any System z software that is packaged in such a way that
installation requires specific System z HMC functions.
Other considerations may be important for specific middleware or applications. For example,
the largest System z memory that can be emulated with a 32-bit version of the 1090 is
approximately 2 GB. That is, the System z operating system thinks it has up to 2 GB of real
memory. Software requiring more than this may not be practical. Some software requires
hardware adapters that are not available with the 1090.
2.2.1 Media
In most cases (when a tape drive is not available) installation media is limited to CD, DVD, and
LAN connections. (We can consider FTP as “media” in this context.) CD or DVD files must be
in formats that can be processed for the 1090. There are two meaningful formats:
A Linux image of an emulated 3390 drive2 that can be restored in the 3390 format used by
the 1090; the image might be compressed (using gzip, for example) and would need to be
uncompressed before use by the 1090. Likewise, the image might be in tar files and would
need to be untarred (and possibly uncompressed) before being used by the 1090.
The 3390 drive image format must be produced by another 1090 system, because no
other product uses the same 3390 image format that is used by the 1090. Whatever
preliminary unpacking/uncompression is needed must be done by Linux utilities before the
3390 image can be used by a System z operating system.
A tape image in awstape format; such images appear as “real” tape volumes to System z
operating systems, and can be processed as such by using emulated tape drives. The
tape might contain product installation material (in SMP/E format, for example), an
ADRDSSU dump of a disk volume, or any other tape data usable by System z programs.
18 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
The same files, in the formats described, could be exchanged by FTP (to the base Linux of
the 1090 system) instead of using CD or DVDs. This would not affect the processing
requirements.
Another media option is to FTP a product (or other data) directly to z/OS. Some System z
software is distributed in this format. Of course, the 1090 must have a running z/OS and LAN
connection in order to use this method. (Most of our discussion is for z/OS but z/VM, z/VSE,
or Linux for System z might be used in the same way. The point is that a working System z
operating system must be installed before additional software can be sent directly to it via
FTP.)
This package is not part of the IBM System z Personal Development Tool. It is a convenience
package for users of this tool. It is a z/OS system, with additional System z software products,
and requires appropriate System z software licenses for use. The AD-CD system is intended
for use by members of the IBM PartnerWorld for Developers, among other users.
An informal package for z/VM may be available. One of the standard z/VSE formats (based
on awstape files on a DVD) may be used. Brief descriptions of z/VM and z/VSE installation
processes are in Volume 3 of this series.
3 This is also known as the AD-CD system, where CD means Controlled Distribution.
The distributed emulated volumes are all in gzipped format. The z/OS 1.12 AD-CD system
uses DVD titles such as DVD1 ADCD1; again, we stress that you must determine the volume
title on your DVDs. (Some CD titles containing multiple blanks are difficult to use with a cd
command. We used the Linux automatic command completion function with these.) For
example:
(mount the first AD-CD DVD)
$ cd /media (DVDs are mounted as /media/xxxx)
$ cd ADCD_DVD1
AD-CD system installation might be as follows, assuming our target directory for emulated
3390 volumes is /z:
(work as userid ibmsys1)
$ cd /media/ADCD_DVD1
$ gunzip -c zcres1.gz > /z/ZCRES1 unzip volumes
$ gunzip -c zcres2.gz > /z/ZCRES2
$ gunzip -c zcsys1.gz > /z/ZCSYS1
And so forth for all the volumes to be installed.
We elected to use the volser of the 3390 volume as the Linux file name that holds the volume.
We use upper case letters simply to make these emulated volume file names more distinctive.
There is no requirement to use the volser as the Linux file name, and there is no requirement
to use upper case names.
The files containing emulated volumes (and the directory containing these files) must have
read and write permissions for the userid running the 1090 function. Assuming use of the
ibmsys1 userid, we suggest that all such files and their directories (/z in our examples)
should be owned by ibmsys1.
20 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
E40-E43 CTC Typically for 3172s that appear as CTC devices
These addresses are all three hex digits. This is due to historical reasons. Both the AD-CD
system and the 1090 system can work with four-digit addresses.
In principle the 3390 IPL volume, for example, could be mounted at any address in the
300-318 or A80-AEF range. In practice, the following addresses are typical:
VOLSER ADDRESS Purpose
ZCRES1 A80 IPL volume and key z/OS libraries
ZCRES2 A81 More z/OS libraries
ZCSYS1 A82 Paging, spool space, LOGGER data sets, VSAM, etc
ZCUSS1 A83 Data sets of UNIX System Services
ZCPRD1 A84 Additional program products
ZCPRD2 A85 Additional program products
ZCPRD3 A86 Additional program products
ZCDIS1 A87 Distribution libraries (optional)
ZCDIS2 A88 Distribution libraries (optional)
ZCDIS3 A89 Distribution libraries (optional)
ZCDIS4 A8A Distribution libraries (optional)
ZCDIS5 A8B Distribution libraries (optional)
ZCDIS6 A8C Distribution libraries (optional)
ZCDB91 A8D DB2 operational libraries
(And so forth, for whatever AD-CD volumes you want to use. The addresses need not be
sequential but must be in the 3390 ranges as defined in the IODF.)
SARES1 AA0 Single-volume z/OS (can be any 3390 address)
These addresses and volsers may change in future AD-CD systems but the general pattern is
likely to remain the same. Additional 3390 volumes (for WebSphere Application Server or
local data, for example) are typically started at address A9x. These addresses are in the
ranges defined for 3390 volumes in the default IODF. Other than that, there is nothing special
about these addresses. For example, if you elect not to install the DLIB volumes, you might
assign a ZCDB91 volume to address A87; or you could leave it at a higher address and have
a gap in your addresses.
[manager]
name aws3274 0002 # define a few 3270 terminals
device 0700 3279 3274 mstcon
device 0701 3279 3274 tso
[manager]
name awsckd 0001
device 0a80 3390 3990 /z/ZCRES1
device 0a81 3390 3990 /z/ZCRES2
device 0a82 3390 3990 /z/ZCSYS1
device 0a83 3390 3990 /z/ZCUSS1
device 0a84 3390 3990 /z/ZCPRD1
device 0a85 3390 3990 /z/ZCPRD2
device 0a86 3390 3990 /z/ZCPRD3
#(continue with whatever additional volumes you installed.)
Only the first four volumes of the AD z/OS 1.12 system are needed to IPL. However, the next
three volumes in the above list (ZCPRDx) are needed for common purposes and we suggest
that they always be installed. Gaps in the assigned address numbers do not create a
problem. The devmap can have any name and be placed in any directory. It is best if it is in
the directory you will use when starting the 1090 so that you do not need to enter a full path
name when using it.
The processors statement determines how many System z CPs are started for this 1090
instance.
We suggest you do not define OSA devices for your initial z/OS startup. The OSA definitions
can be a little more complex and we suggest you verify that your basic z/OS system is
operational first.
Using the same Linux window (or a different window, if you prefer) start at least two local 3270
sessions:
$ x3270 -port 3270 mstcon@localhost &
$ x3270 -port 3270 localhost &
$ x3270 localhost:3270 & (another way to specify a port number)
x3270 is the name of the program
We assigned Linux TCP/IP port 3270 for this function. This is specified in the devmap. The
port number is arbitrary, but should not be used for any other purpose in your system. Port
3270 is usually a good choice and is easy to remember.
22 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
We want to connect to our own Linux system; this is indicated by the localhost operand.
The mstcon and TSO operands are the LUnames of the sessions and must match names in
the 3270 device statements in the devmap. These names are case sensitive. If no
LUname is specified, the next unused device for the aws3270 device manager is taken.
The ampersand (&) causes the x3270 program to execute in the background, leaving the
Linux window free for additional commands. We can recall and execute the x3270
command repeatedly to create multiple 3270 sessions.
The 3270 window will display identification lines if there has been no data sent to it by the
System z software. These lines indicate the terminal identity by address and LUname or IP
address. A number of options are available for working with these LUnames and these are
discussed in volume 1 of this series. The File and Options menus at the top of the x3270
window can be used for a variety of functions. Changing the font size (using the Options
menu) has the effect of changing the 3270 window size.
The 3270 session for the z/OS console (address 700 for the AD-CD system) should be ready
before IPLing z/OS. Next issue the appropriate IPL command in the Linux window:
$ ipl a80 parm 0a82cs
After a few seconds, the initial z/OS messages should appear on the 3270 session at address
700. During the first IPL of the AD-CD system (or an IPL after a long period of non-usage) you
may see messages similar to the following:
IXC420D REPLY I TO INITIALIZE SYSPLEX ADCDPL, OR R TO REINITIALIZE XCF
If this message occurs, go to the 3270 session displaying the message and enter:
r 00,i
After VTAM® is started, the VTAM logo should appear on the other 3270 session.4
There is usually a writeup for each AD-CD release that provides details about different IPL
parameters and TSO logon procedures. A very brief summary for the z/OS 1.11 AD-CD
system is as follows:
IPLparm LogonProcedure Purpose
0A82CS ISPFPROC Basic IPL without DB2, etc. Cold start JES, CLPA
0A8200 ISPFPROC Subsequent basic IPLs. Warm start.
0A829C DBSPROC9 Initial IPL for DB2 V9, etc
0A829W DBSPROC9 Subsequent IPLs for DB2 V9, etc
Userid IBMUSER is always present on z/OS and is typically used for initial TSO logons. The
password for IBMUSER should be published with any AD-CD documentation. It is typically
SYS1 or IBMUSER. If there are security concerns about your system, this initial password
should be changed as soon as possible.
4
If the 3270 session displays an “Unsupported Function” message, simply use the 3270 Clear key to obtain the
initial VTAM display. Some TN3270e emulators encounter this initial message and others do not.
are produced by the awsstart command. You should glance at these messages. Snapdump
incidents are indications of an internal 1090 error. If you want to work with IBM 1090 support
you will need this data. The number of bytes used for various logs and dumps is usually not
significant unless it becomes too large. To a great extent, the 1090 manages these files
automatically. However, if the numbers displayed become too large (many megabytes) and if
you are not actively working on a problem with IBM 1090 support, you may want to clean up
these files. This can be done by adding the --clean option the next time you issue an
awsstart command:
$ awsstart aprof11 --clean
You can get the --clean behavior every time by setting a Linux shell environment variable
Z1090_CLEAN=YES; however, we do not recommend doing this because it could easily
result in the removal of important debugging information in the event of a 1090 failure.
24 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
2.5 z/OS parameters
We5 recommend that you make sure that the MIH6 values for both GRAF and COMM devices
are set to 3 minutes in the IECIOSxx member in your PARMLIB. Three minutes is the default
value, but we have seen some installations with a lower value specified. For example, you
could have a PARMLIB member named IECIOS00, as follows:
MIH GRAF=3:00
MIH COMM=3:00
To use the IECIOS00 member, your IEASYSxx PARMLIB member should contain the
following line:
IOS=00,
5
The 1090 developers have recommended this parameter set. However, we very seldom see the need for it and
suggest that you might skip it unless you encounter 3270 connection timeouts.
6 This is the Missing Interrupt Handler function.
7
This statement ignores the possibility of running multiple z/OS guests under z/VM.
8
This is not completely true. We can change the volume mounted on an emulated disk drive or tape drive with the
awsmount command.
We can run multiple System z operating systems at the same time by starting multiple zPDT
instances, but this requires more resources (especially PC memory). Details about using
multiple instances are in Volume 3 of this documentation series.
26 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
3
This chapter does not address more complex LAN usage, such as might be used for multiple
guests under z/VM. Some elements of z/VM usage are addressed by examples in the third
book in this series, but there are many combinations and permutations that we cannot
address. Again, we strongly suggest you start with the basic scenarios described in this
chapter. After working through these you should then be familiar with the elements of LAN
usage that are unique to zPDT.
We also strongly suggest that you take time to study this chapter before starting your LAN
setup. We assume you have some familiarity with z/OS system programming tasks. The
following discussions are in terms of z/OS, but most of the concepts also apply to z/VM and
z/VSE.
Important: LAN setup is not part of the zPDT product. The examples in this chapter may
help you decide how to configure your TCP/IP set up, but you must provide the networking
skills to verify and implement your own design.
1 If you follow the installation instructions in the first two chapters, you will be close to this environment.
At the time of writing, Linux bonding of several LAN adapters to create a single virtual adapter
is not usable with zPDT.
The same Ethernet adapter can be used for Linux functions, such as telnet, aws3274, ftp, and
so forth, and also for OSA connections. Important concepts include the following:
An emulated OSA-Express interface requires a hardware Ethernet adapter port on the
underlying Linux system (or a tunnel interface, as described later). A mobile computer
normally has one integrated Ethernet port. (It may also have integrated wireless
functions.) Additional Ethernet ports may be added by using PC (PCMCIA-type) cards,
although very few zPDT users are expected to need more than one Ethernet adapter.
An emulated OSA-Express interface operating in QDIO mode is used only for z/OS
TCP/IP (or z/VM TCP/IP, and so forth).
2 In strict Linux terminology we do not have a tunnel interface; we use a tap interface rather than a tun interface. We
use the word tunnel in a more generic sense.
3
A TN3270 connection (as opposed to a TN3270e connection) will be accepted, but extended data stream
capabilities are not present and some z/OS functions may not work correctly.
4
We describe this as an OSA-Express2 device manager, but this description is only approximate. This device
manager has attributes of both the original OSA, OSA-Express, and OSA-Express2 channels available on larger
System z machines.
28 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
An emulated OSA-Express interface operating in non-QDIO mode can be used by z/OS
TCP/IP or SNA (although SNA is not supported at this time). Non-QDIO mode is
sometimes known as LCS mode.
If you want to communicate between Linux TCP/IP and OSA TCP/IP on the same PC, a
tunnel environment must be established.5
The awsosa definitions must include path numbers and path types for OSA devices. The path
type is OSD (for QDIO). The path is determined with the find_io command on your system.
We cannot predict exactly what that path might be.
Recent z/OS AD-CD systems include OSA devices starting at device number 400. When
using the QDIO interface to the emulated OSA-Express2 function, the key parameters might
look like the following:6
Devmap
[manager]
name awsosa 22 --path=F0 --pathtype=OSD
device 400 osa osa
device 401 osa osa
device 402 osa osa
[manager]
name awsosa 22 --path=A0 --pathtype=OSD --tunnel_intf=y
device 400 osa osa
device 401 osa osa
device 402 osa osa
z/OS VTAMLST
5
Another method would use two Ethernet adapters connected to the same network, one for the base Linux and one
for z/OS. We do not recommend this method.
6 This example might be appropriate for an OSA LAN connection via an Ethernet adapter.
The presence of the --tunnel_intf parameter in the devmap indicates that a tunnel (tap device)
connection will be created. The default address for the Linux side of a tunnel is 10.1.1.1. The
--path value is the CHPID number returned by the find_io command. The CHPID value is
usually A0 for a tunnel connection, F0 for a direct Ethernet LAN connection, or F8 for a
wireless connection.
A VTAM major node known as a TRL is required in VTAMLST for QDIO operation. This VTAM
node must be active before TCP/IP can be started. The VTAMLST ATCCON00 member must
point to the TRL entry in VTAMLST.
The MIH value set for the write interface (401 in the example) should be set to at least 30
seconds.7 (The default value is usually sufficient.)
The PORTNAME (in the TRLE), the DEVICE name (second field), the LINK parameter (fourth
field), and the START name must match. The name is arbitrary, but it must be the same in all
four places.
30 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
an external LAN, but this is transparent to z/OS and external LAN connections cannot be
made to z/OS.
3. The same basic setup as scenario 2, but with additional customization to enable a simple
NAT function in the base Linux. This permits TCP/IP connections from z/OS to the
external LAN, but not from the external LAN to z/OS. (That is, only outgoing TCP/IP
sessions may be initiated. With additional NAT/iptables customization, incoming TCP/IP
connections from the external LAN to z/OS could be handled. This additional
customization may involve non-standard port numbers for either Linux or z/OS.)
4. Instead of the NAT functions used in option 3, an additional OSA interface is used by z/OS
to connect to the LAN. A fixed IP address is needed for z/OS. TCP/IP communication
between z/OS and the base Linux is via the tunnel.
5. A different NAT function is used that allows incoming and outgoing connections to z/OS. In
this scenario, only the tunnel OSA is used by z/OS and both tunnel and external LAN
traffic flow through it. The z/OS setup is the same as for scenario three, but the base Linux
setup is different. A fixed IP address is needed for z/OS.
In these examples, the names assigned to the OSA interfaces for z/OS are eth1 and eth2 (if
needed). These examples use eth1 for the tunnel connection to the base Linux. These names
are completely arbitrary.
OSA definitions for zPDT require the use of a CHPID number for the path parameter. The
CHPID path for the tunnel is assumed to be A0 and the path for the external LAN is assumed
to be F0. These paths should be verified with the zPDT find_io command. This command
might not display information for tap devices until after zPDT has been started at least once
with a tunnel definition included in the devmap.
Scenarios 3 and 5 require running a Linux script file before starting zPDT
Scenarios 3 and 5 produce similar results in different ways. Scenario 3 requires more
customization in z/OS TCP/IP and scenario 5 requires more customization in the base Linux.
PCOM, IOS
x3270 aws3274
VTAM
x3270
(No TCP/IP)
network
TCP/IP
LAN adapter
With this option, no z/OS TCP/IP setup is required and z/OS TCP/IP need not be active. (The
AD-CD z/OS system starts TCPIP by default; you could remove the associated start
statement.) You can use up to 31 TN3270 sessions for connections to TSO or other VTAM
functions. (One TN3270 session is needed for the MVS™ console.) A variety of TN3270
emulators can be used, including x3270 and PCOMM. These 3270 emulator sessions might
be in the base Linux or via a LAN connection to the base Linux, if this exists. (The LAN
connection to an external network is optional.) The only upload/download method between
the base Linux and z/OS is by using the IND$FILE functions.10
No OSA definitions are needed in the devmap. The relevant devmap definitions are for the
3270 port and for several local 3270 devices.
[system]
....
3270port 3270 #the port number is arbitrary. 3270 is easy to remember.
[manager]
name aws3274 0001
device 0700 3279 3274 #Address 0700 is the MVS console in the AD-CD systems
device 0701 3279 3274 #Other systems may want different addresses
device 0702 3270 3274
...
Based on this example, connections from the base Linux might start as follows:
$ x3270 -port 3270 localhost &
assuming the DHCP address assigned to the local Linux is 9.111.222.123. You can find the
assigned DHCP address for your Linux with the /sbin/ifconfig command.
10 These are often known as file transfer functions in the 3270 emulators.
32 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
Making a TN3270 connection to aws3274 on the base Linux (or any other service on the base
Linux) from an external LAN, may present routing difficulties. The LAN must have route
definitions that allow both the external TN3270 system and the base Linux to find routes to
each other. This routing requirement is not unique to zPDT, of course. If you have a firewall
running in the base Linux, you may need to create a “hole” in it for the connection to port 3270
(or whatever port you defined for aws3274 connections). If your firewall is based on iptables
(as is common for most current Linux releases), commands such as:
$ su (switch to root)
# iptables -I INPUT -p tcp --dport 3270 -j ACCEPT
# exit (leave root)
might be used. These commands would be entered through a Linux terminal window. In
general, managing your Linux firewall and your external routing controls is beyond the scope
of this document.
3.3.2 Scenario 2
The second scenario builds on the first one and adds a direct TCP/IP connection between
z/OS and the base Linux, as shown in Figure 3-3.
PCOM IOS
x3270 aws3274
one OSA
port for z/OS VTAM
x3270
eth1 TCP/IP
network tap0 10.1.1.2
TCP/IP 10.1.1.1
LAN adapter
DHCP or fixed IP
Scenario 2
Figure 3-3 Scenario 2 connectivity
This TCP/IP connection is through a “tunnel” interface between z/OS and the base Linux. The
physical LAN adapter is not involved.11 The IP addresses shown are arbitrary, but we
recommend using non-routable addresses on an isolated subnet. The tap interface (and
associated IP address) are created automatically when zPDT is first started (assuming the
correct OSA definitions are in the devmap). No additional Linux setup is needed. z/OS
TCP/IP must include an OSA definition for its interface.
Recent AD systems include OSA devices starting at device number 400. When using the
QDIO interface to the emulated OSA-Express2 function, the key parameters might look like
the following:
Devmap
(The 3270 port and aws3274 device manager definitions used in the
previous example should be included here.)
[manager]
11 This connection cannot use a physical LAN adapter on current Linux systems.
z/OS VTAMLST
...
DEVICE PORTA MPCIPA
LINK ETH1 IPAQENET PORTA
HOME 10.1.1.2 ETH1
...
BEGINRoutes
; Destination Subnet Mask FirstHop Link Size
ROUTE 10.0.0.0 255.0.0.0 = ETH2 MTU 1492
ROUTE DEFAULT 10.1.1.1 ETH2 MTU 1492
ENDRoutes
...
START PORTA
The external LAN connected to Linux and the “tunnel LAN” between Linux and z/OS are
completely separate in this example, and there is no communication between them. There is
no connection from z/OS to the outside world, but all normal TCP/IP functions between the
base Linux and z/OS may be used. Examples (from the Linux side) include:
$ x3270 -port 3270 localhost & (connect via “local 3270” channel)
$ x3270 10.1.1.2 & (connect to z/OS TCP/IP)
$ ftp 10.1.1.2 (connect to z/OS FTP)
$ telnet 10.1.1.2 102312 (connect to z/OS UNIX System Services)
From the z/OS TSO side, we might use a command such as:
ftp 10.1.1.1 (entered in ISPF option 6, for example)
to connect to ftp on the base Linux. (This assumes you have ftp installed and available on the
base Linux.)
Tunnel IP addresses
The IP addresses used for the tunnel (10.1.1.1 and 10.1.1.2 in the examples) are not related
to any other IP addresses you might use. They are not related to any external IP addresses.
They should not be on the same subnet as any external IP addresses you might use. These
tunnel addresses are solely for use between the base Linux and TCP/IP stacks running within
the zPDT environment.
The IP address for the base Linux side of the tunnel defaults to 10.1.1.1 (for the first tunnel
OSA). The address at the other end (z/OS or z/VM) must be different but should be on the
same subnet as determined by the netmask.
12 The AD-CD z/OS system uses port 1023 for a simple telnet connection to UNIX System Services.
34 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
The 10.x.x.x addresses (and 192.168.x.x addresses) are not routable. You should not attempt
to make them visible to your network users. (In our examples, the 192.168.x.x addresses are
assumed to be on the “local side” of a router (which is probably a NAT router). As used in our
examples, the 192.168.x.x addresses are visible and usable by other systems connected to
the local side of this router.
3.3.3 Scenario 3
Scenario 3 is depicted in Figure 3-4.
PCOM IOS
x3270 aws3274
VTAM
one OSA
port for z/OS
x3270
eth1 TCP/IP
network tap0
TCP/IP 10.1.1.1 10.1.1.2
DHCP or fixed IP
iptables used default route to
to create NAT 10.1.1.1
Scenario 3 environment
Figure 3-4 Scenario 3 connectivity
We can take the scenario 2 setup and extend it to connect z/OS to the external LAN by using
a NAT13 function in the base Linux. This requires a more complex setup. However, it has the
major advantage that an assigned, fixed IP address is not needed for z/OS. With this setup,
z/OS has the fixed address 10.1.1.2 (in our examples), but this is not an externally assigned
address; it is visible only internally in our local Linux system.
The following text describes how to do this dynamically (via commands each time the system
is started). This example is based on openSUSE 11.0; there may be minor differences for
other Linux distributions.
The first step is to create a Linux file in the zPDT home directory. We named this file masq.
$ cd ~
$ touch masq
$ gedit masq (the following lines start in column 1 in the file)
if [[ $EUID -ne 0 ]]; then
echo ‘You must su to root to run this command’ 1>&2
exit 1
fi
echo ‘Your firewall must be enabled for this command to be meaningful’
echo 1 > /proc/sys/net/ipv4/ip_forward
iptables -F FORWARD
iptables -P FORWARD ACCEPT
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -I INPUT -p tcp --dport 3270 -j ACCEPT
Use the same devmap and z/OS PROFILE parameters shown for scenario 2. Assuming your
base Linux is connected to an external LAN (either with a fixed IP address or a DHCP
address), activate your Linux firewall (if not already done) and activate the iptable changes:
$ cd ~
$ su (switch to root)
# ./masq (execute the command script we just created)
# exit (exit from root)
You should be able to access external network sites from z/OS. For example, at the time of
writing the www.redbooks.ibm.com site is IP address 170.225.15.45. From a TSO command
line you can try the following command:
ftp 170.225.15.45
You need an appropriate userid and password to use this site, but you should see the ftp
connection. You should be able to ping any Internet sites that are known to respond to
pings,14 provided you can find their numeric IP address.
You may need to use the passive option with ftp connections. Complex applications that, once
initiated from z/OS, might trigger incoming connections on other ports may not work.
Incoming connections to port 3270 on the base Linux are allowed by our script; this provides
a hole in the standard Linux firewall for using the local 3270 connections.
Incoming connections
This setup has complications for incoming (from the external LAN) connections. Remember
that external systems see only the IP address of the base Linux. (This is probably a
DHCP-assigned address, and must be communicated to external users in some manner.) If
an external user attempts to connect to port 23, for example, should he connect to Linux port
23 or z/OS port 23? (This assumes he can get through the Linux firewall, which is another
complication.) Port 23 is a well-known (default) port number for telnet connections (including
TN3270e telnet).15
One way around this problem is to use a non-standard port number for telnet on either Linux
or z/OS. Another way around the problem is to simply disallow port 23 connections to either
Linux or z/OS. (The issue applies to all port numbers; we are using port 23 as an example.)
As an example, adding the following line to the script would route external connections for
port 23 to z/OS:
iptables -t nat -A PREROUTING -p tcp -i eth0 --dport 23 -j DNAT --to 10.1.1.2
If we add this command to our script, then an external user would have two paths for a
TN3270e connection (assuming the Linux IP address is 192.168.0.2):
$ x3270 192.168.0.2 & Connect directly to z/OS TCP/IP port 23
$ x3270 192.168.0.2:3270 & Connect to Linux port 3270 (aws3274)
Of course, once this iptables command is issued, we no longer have a way to connect to
Linux port 23.
14 It appears that most common Internet sites no longer respond to pings. You can verify your results by issuing
pings from the base Linux system.
15
Some Linux systems have completely dropped telnet service (that listens on port 23); our comments apply to all
ports.
36 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
Extending this example to other ports, and determining what services might be wanted on
both Linux and z/OS becomes more complex and depends on the exact base Linux
configuration for firewalls and available services.
3.3.4 Scenario 4
This setup provides a direct connection from z/OS to the external LAN. A NAT function is not
used. Only a single physical LAN adapter is needed and is used by both Linux and z/OS.
z/OS must have an external assigned, fixed IP address for this to work. Our example uses
address 192.168.0.61, but this is not a real assigned IP address16; you must have a proper
assigned IP address for this option to work. Please remember that assigned, fixed IP
addresses are not very portable; they must be used on a physical LAN segment that is the
router target for the associated subnet.
Figure 3-5 illustrates this configuration. The figure shows two logical connections to the
external network, but this is accomplished by a single physical cable connection.
PCOM IOS
x3270 aws3274
VTAM
10.1.1.2 TCP/IP
x3270 eth1
tap0
10.1.1.1
network
TCP/IP
eth2
192.168.0.61
two OSA
DHCP or fixed IP for Linux fixed IP address for z/OS ports for z/OS
(still one physical LAN adapter)
Scenario 4 the “fixed” address
With this configuration the IP functions of z/OS and the base Linux are quite separate. The
tunnel addresses (10.1.1.x) are not visible from the external network.
(The 3270 port and aws3274 device manager definitions used in the
previous examples should be included here.)
[manager]
name awsosa 0024 --path=A0 --pathtype=OSD --tunnel_intf=y
device 400 osa osa
device 401 osa osa
device 402 osa osa
[manager]
16
IP addresses 192.168.0.0 are “nonroutable” addresses that can be used on a local network that is not connected
to external networks.
z/OS VTAMLST
...
BEGINRoutes
; Destination Subnet Mask FirstHop Link Size
ROUTE 10.0.0.0 255.0.0.0 = ETH1 MTU 1492
ROUTE 192.168.0.0 255.255.255.0 = ETH2 MTU 1492
ROUTE DEFAULT 192.168.0.1 ETH2 MTU DEFAULTSIZE
ENDRoutes
...
START PORTA
START PORTB
Again, remember that the 192.168.x.x addresses cannot be used for “real” Internet
connections. You must supply your assigned, fixed IP address and also supply a default
address for your network connection.
With this scenario, connections to/from z/OS and the external network are independent from
base Linux connections. However, you must still use the 10.1.1.x addresses for TCP/IP
communication between the base Linux and z/OS. That is why we show two OSA definitions
and connections in this example.
38 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
3.3.5 Scenario 5
PCOM IOS
x3270 aws3274
VTAM
one OSA
port for z/OS
x3270
eth1 TCP/IP
network tap0
TCP/IP 10.1.1.1 10.1.1.2
We can take the scenario 2 setup and extend it to connect z/OS to the external LAN by using
a NAT function in the base Linux in a different way. This method requires an assigned, fixed IP
address for z/OS. A single OSA interface in z/OS handles both tunnel traffic (to the base
Linux) and external IP traffic. Incoming connections to z/OS are handled, as well as outgoing
connections.
The following text describes how to do this dynamically (via commands each time the system
is started). Note that this method uses an IP alias address in the base Linux. This was not
supported by zPDT until release 39.16 (February 2010).
The first step is to create a Linux file in the zPDT home directory. We use a more elaborate
script file here to better allow it to be expanded in the future. We named this file nat2.
$ cd ~
$ touch nat2
$ gedit nat2 (the following lines start in column 1 in the file17)
if [[ $EUID -ne 0 ]]; then
echo ‘You must be root to run this command’ 1>&2
exit 1
fi
echo ‘Your firewall must be enabled for this command to be meaningful’
CHPID_A0_INTERFACE=eth0
CHPID_A0_EXTERNAL_IP=192.168.0.70 (your assigned IP address)
CHPID_A0_EXTERNAL_BC=192.168.0.255 (brodcast address for it)
CHPID_A0_EXTERNAL_NM=255.255.255.0 (net mask for it)
CHPID_A0_VIRTUAL_IP=10.1.1.2
17
Four lines in this file end with a “back slash” to indicate that the logical line is continued on the next printed line.
You could enter each of these lines as a single long line (without the back slash).
Use the same devmap and z/OS PROFILE parameters shown for scenario 2. Assuming your
base Linux is connected to an external LAN (either with a fixed IP address or a DHCP
address), activate your Linux firewall (if not already done) and activate the iptable changes:
$ cd ~
$ su (switch to root)
# ./nat2 (execute the command script we just created)
# exit (leave root)
You should be able to access external sites from z/OS. External LAN users can connect to
your base Linux by using its DHCP address18 and connect to z/OS by using its assigned fixed
address.
If you use LCS mode connections (non-QDIO, OSE) for some reason, this scenario has an
additional advantage. Unwanted packets are filtered out at the base Linux level instead of
being forwarded to z/OS, where many cycles may be required to filter out unwanted packets.
40 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
RESOLVEVIA UDP
RESOLVERTIMEOUT 10
RESOLVERUDPRETRIES 1
LOOKUP DNS
You need a nameserver that is available to you. You might find one by issuing a Linux
command such as nslookup www.ibm.com and noting what server was used to resolve the
name.
The AD-CD system (at the time of writing) starts the resolver using the default name
RESOLVER. Assuming this situation, issue the following commands at the MVS console:
F RESOLVER,DISPLAY (verify that the resolver is running)
F RESOLVER,REFRESH,SETUP=ADCD.Z112.TCPPARMS(RSSETUP)
where the specified setup file is the one created earlier. When this is working correctly, you
should be able to use the following commands from TSO:
NSLOOKUP WWW.REDBOOKS.IBM.COM
PING WWW.REDBOOKS.IBM.COM
FTP WWW.REDBOOKS.IBM.COM
The use of an Internet name server can be more complex than indicated here. If you fully
connect to a name server you should take care to specify an appropriate domain and host
name for your own system that does not duplicate any existing name that might be resolved
by an Internet name server.
Permanent changes
The resolver changes can be made permanent (automatically used by z/OS TCP/IP) by
changing the BPXPRMxx members in your PARMLIB. To do this, first create the following
procedure in SYS1.PROCLIB(RESOLVAD):19
//RESOLVAD PROC PARMS='CTRACE(CTIRES00)'
//EXBREINI EXEC PGM=EZBREINI,REGION=0M,TIME=1440,PARM=&PARMS
//SETUP DD DSN=ADCD.Z112.TCPPARMS(RSSETUP),DISP=SHR,FREE=CLOSE
Next, identify the BPXPRMxx member(s) in ADCD.Z112.PARMLIB that are used by your IPL
parameters. This is likely to include BPXPRMCS for recent AD-CD releases. You can change
all the BPXPRMxx members that you might use. Edit these members and add the following
line as the last line in each member (after a blank line):
RESOLVER_PROC(RESOLVAD)
19
Member name RESOLVAD is arbitrary. The procedure should be in SYS1.PROCLIB because it is started under
MSTR, the master scheduler.
20 These scripts are in the AD-CD PARMLIB data set, with names such as SHUTDOWN, SHUTALL, and so forth.
See the following document for more resolver setup information: Communications Server for
z/OS V1R9 TCP/IP Implementation Volume1: Base Functions, Connectivity, and Routing,
SG24-7532.
optional wireless
connection to Linux
and your other local
connect to PCs
external
LAN “local connections”
(optional) Linux and
zPDT
small
personal another
router Linux
(probably
with x3270
Windows
192.168.1.x (and PCOMM)
The advantage of using this test setup is that there are no unknown external LAN
complications. The “local connections” to the router can be served DHCP addresses by the
router, or they can be assigned fixed addresses on the router subnet. These routers typically
use IP addresses of 192.168.0.x or 192.168.1.x. Many such routers also provide wireless
connections and you can also explore these. (We suggest initial use with a wired connection
to Linux, just to simplify the first setup.)
Once you have an environment like this working you can then transfer operation to a larger
network. While this suggested environment is almost trivial, we have found it very useful
many times.
Remember that the Linux firewall (if enabled) may affect any external connections. For initial
debugging (especially in a private environment, as shown here) we suggest that the firewall
be disabled until you verify that your basic LAN setup is working. We have observed that the
SEL21 protection may need to be disabled or modified for some functions, such as ftp.
42 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
3.3.8 Performance problems
At the time of writing we were aware of two particular problems that impact OSA performance.
If frames larger than expected are used, there may be an excessive number of frames
dropped (causing a retransmission). This might not be noticed unless careful
measurements or comparisons are made. We believe this problem is resolved by including
the systcl parameter:
net.core.rmem_max=4194304
that is now recommended in the first chapter of this document.
If advanced Linux kernels are installed there might be a drastic slow-down of OSA
performance that would be immediately obvious. This is due to Linux attempting to offload
checksum functions into the adapter, which is not acceptable to the current awsOSA
implementation. One solution is to use a Linux command:
# ethtool -K eth0 rx off
Unfortunately, this command must be entered after each Linux boot. The problem was first
noticed with a build of Linux kernel 2.6.36.2; the ethtool must be at least at level 2.6.33.
We have not seen this problem with any of the “standard” Linux distributions that we have
referenced in these documents.
IBM has not published any performance specifications for OSA. Informal observation
indicates that ftp throughput may be in the 5-8 megabytes/second range, assuming an
unconstrained network in a dedicated environment. If your performance is much worse than
this, the two problems mentioned here might be reviewed.
TN3270, ftp, telnet from local Linux to no yes yes yes yes
z/OS TCP/IP. ftp from z/OS to local
Linux
telnet connection to UNIX System no yes, only from yes, only from yes yes
Services base Linux base Linux
Browser or ftp connection from external yes yes yes yes yes
LAN to base Linux
a. The local 3270 sessions are based on LAN connections to Linux (to the aws3270 device
manager). The LAN connection is not to z/OS.
b. Only outgoing connections from z/OS to the external LAN may be used unless additional
iptables commands are used. The additional command functions are likely to require the use
of non-standard port numbers.
c. This would be an incoming connection and is not possible in the most basic iptables example.
Incoming connections may be accepted when an additional iptables setup is used.
d. This is an outgoing connection and may be used. A passive ftp connection may be needed.
e. The “locally fixed” IP address (10.1.1.2 in the examples) is not an assigned IP address.
The fundamental difference between scenario 3 and scenarios 4 and 5 is that the latter
require an assigned, fixed address for z/OS. Scenario 3 has complications for incoming
connections (from the external LAN) to z/OS, while 4 and 5 do not have this restriction. The
primary difference between 4 and 5 is where the external LAN interface appears; with
scenario 4 it is defined to z/OS; with scenario 5 it is defined in the base Linux.
44 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
The 1023 parameter in the telnet command specifies the port number that the AD-CD
TCP/IP and UNIX System Services profile use for Telnet connections. This port number
(1023) is not standard, and probably applies only to the AD-CD z/OS system.
3.6 Choices
Which 3270 connection mode is better? If only simple 3270 connections are needed (and not
more than 32 sessions are needed), then the use of basic aws3274 connections (shown in
scenario 1) is better. This is simpler to set up and does not require OSA or z/OS TCP/IP to be
configured or started.
Which CHPID mode should you use for OSA connectivity? QDIO mode has many
advantages for TCP/IP usage on a larger System z; it reduces the System z workload and
provides automatic sharing of the adapter across multiple LPARs. These considerations do
not fully apply to a 1090 system. The following points are relevant:
QDIO operation offloads some processing from the 1090 CP to the Linux processor. The
offloading is not as much as on a larger machine, but it helps. It also reduces the number
of System z instructions needed to maintain LAN I/O operation. In informal operation we
noticed that ftp performance was about 20% faster with QDIO than with LCS.
QDIO operation is only for TCP/IP; it does not handle SNA.
QDIO can provide VSWITCH, IPv6, and Enterprise Extension connections.
QDIO operation requires that OSA devices be defined in z/OS. These were not present in
AD systems prior to z/OS 1.8. The devices could be added to earlier AD systems, using
HCD to create a new IODF, or might be present in z/OS systems not derived from the AD
packages.
Non-QDIO operation can mix TCP/IP and SNA (or handle just SNA or just TCP/IP).
However, SNA operation of the 1090 is not supported at this time.
Suitable non-QDIO (LCS) devices have been defined in all the earlier z/OS AD systems.
(These are the CTCs starting at address E20.)
The required OAT table is automatically updated when QDIO is used. The default OAT
table is probably satisfactory for non-QDIO TCP/IP usage and may be satisfactory for SNA
usage (although SNA is not supported at this time). The OSA/SF utility functions are used
(if needed) to manipulate the OATs.
Other than these points, there is no practical difference between using QDIO or non-QDIO on
a 1090 system. In particular, the user at a TN3270 TSO session cannot detect the difference.
Normal TCP/IP functions, such as ftp and Telnet, do not detect any differences. If you are
using recent AD systems (or another z/OS package with OSA devices defined) we suggest
you use QDIO mode because this represents the future direction for z/OS LAN operations.
It is important to note that the name LCL701 in the sample V NET command is the VTAM
name of the terminal. This name is not related to the LUname specified in the 1090 devmap.
A 3270 session has both an aws3274 LUname (specified in the 1090 devmap) and a VTAM
name (specified in VTAMLST). Basic MVS operator consoles are not specified in VTAM and
have no VTAM name. This terminology is unfortunate because the aws3274 LUname (used to
link a TN3270e session to an aws3274 definition) is not necessarily the same LUname
associated with a VTAM operation.
Note that zPDT does not support the VMAC function from z/OS. The only virtual mac
supported is generated on z/VM with the layer-2 vswitch.
46 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
4
All of these commands are Linux executable files. The operational commands must be used
under the same Linux userid that started 1090 operation. Only one 1090 instance may be
started by a given userid and the commands assume they are to work with that instance. (The
setup commands are not directly related to a running 1090 and can be used by any Linux
userid that can access them.)
An emulated disk volume must be created before it can be used by the 1090. The alcckd
command creates 3380 or 3390 volumes. There are four standard-size 3390 volumes
(3390-1, -2, -3, -9) that can be created by specifying the full model type. Otherwise the -s
parameter may be used to specify the number of cylinders to create.1 The emulated volume
contains only the effective cylinders; diagnostic and alternate cylinders are not emulated.
$ alcckd /z/WORK01 -d3390-3 create emulated 3390-3 volume
$ alcckd /z/WORK02 -s9000 -d3390 create volume with 9000 cylinders
$ alcckd /z/WORK03 -d3390-1 -z create and zero the volume
The alcckd command does not place any software blocks (label, VTOC) on the volume. The
user must do this later, using operating system utilities.
The find_io command (which has no operands) is used to list Ethernet interfaces and their
associated CHPID number (relevant only for interfaces used for OSA Express emulation).
The z1090ver command may be used to determine the version of the 1090 that is being used.
The z1090instcheck command may be used to partly verify that the Linux environment is
correct for the 1090.
The awsstop command instantly ends System z operation. No warning is sent to the System z
operating system. We recommend that the System z operating system be stopped normally
(whatever this may mean for various operating systems) before issuing awsstop.
The token command may be used to verify that the hardware key is available to the 1090.
This command works only when the 1090 is running.
The ipl command performs the architected System z IPL operation. It must point to a device
that has a suitable IPL program installed. This is normally the operating system residence
device but could be a disk or tape that contains a stand-alone System z program. The use of
an IPL parameter is completely dependent on the operating system involved and how the
1
Specifying more than 65520 cylinders creates an EAV volume. You should verify that your System z operating
system supports these before creating one.
2 The earlier versions of awsstart required the characters “--map” before the devmap name. This is now optional.
48 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
parameter is configured for that instance of the operating system. The 1090 environment
must be initialized (via awsstart) prior to issuing the IPL command.
$ ipl 560 simple IPL
$ ipl A80 parm 0A82CS IPL with parameter
The awsmount command is used while the 1090 is running. It displays or changes the
emulated device file associated with an emulated device. The first example is equivalent to
mounting a tape on the device at address (device number) 560. This function makes the
device ready and sends the appropriate attention interrupt to the operating system. This
command is not limited to emulated tape drives, although that is the most common use. It can
also be used for emulated disk drives or an emulated printer.
$ awsmount 560 -m /z/mytape mount volume when none is mounted
$ awsmount 560 -o /z/tape05 mount another volume, replacing old
$ awsmount 560 -q query device file status
$ awsmount 560 -s rewind emulated tape
$ awsmount 560 -x rewind and unload emulated tape
If a file name is mounted as an emulated tape and that file does not already exist, it is
automatically created by the awsmount command. You must be careful when typing the file
name in an awsmount command to ensure that you specify the correct name and directory. For
example, suppose you intended to mount and write to an existing emulated tape,
/tape/oldtape1, but instead typed:
$ awsmount 560 -m oldtape1
This would allocate a new awstape file named oldtape1 in your current directory. If you then
write a large amount of data to this file, it can fill your /home file system and possibly cause
problems. z/OS’s label processing routines will catch some of these problems, but not all, so
you should always be careful to use the correct names.
Files mounted with awsmount must be appropriate for the device, of course. A file mounted on
an emulated tape drive must be in awstape format. (For an emulated tape drive opened for
output, a new awstape file is automatically created if necessary.) A file mounted on an
emulated 3390 disk drive must be in awsckd format. None of these formats are standard
Linux formats; the emulated disk device files must be created with 1090 utilities. Emulated
tape files (awstape) are created by writing to an emulated tape drive, mounted with the
awsmount command.
The awsstat command provides the status of emulated I/O devices, including the Linux file
name mounted on the device and (for disks) the last track used.
$ awsstat query status of all emulated devices
$ awsstat 0A80 0A82 query status of specified devices
$ awsstat -i2 0a82 display status every 2 seconds
The display output from awsstat is wide; it is best to widen the Linux window to almost full
width before using awsstat. An example of the command is as follows:
$ awsstat A82
Config file: /ibmsys1/aprof1
DevAdr Subch ---Mgr-- Actv Busy --PID-- -----Device Information----------
0A82 15 AWSCKD Yes No 4329 Cyl-368, Head-10 /z/S7SYS1
Most of the output has obvious meanings. The Subch (subchannel) is an internal detail and
the PID (Linux process id) is not normally needed. The DevInfo field shows the current logical
position in the device.
The oprmsg command sends input to the “hardware console” or “HMC console”, or “SCLP
operator message interface.” This is the interface used by z/OS, for example, when all the
normal z/OS consoles have been lost. There is no device address associated with this
interface.
$ oprmsg 'V CN(*),ACTIVATE' send message to z/OS
1090 commands function as Linux commands, and are entered through a shell prompt. The
operands must conform to Linux shell rules. Some characters, such as dollar sign ($), right
parenthesis), and left parenthesis (, have special meanings when entered as part of a
command through a shell. It is necessary to escape these characters. This can be done by
placing single quotes (' ‘) around the whole operand or by placing a backslash (\) before
each special character.
The ready command generates an asynchronous device end for the indicated emulated
device. This is typically associated with mounting a new volume on the device.
$ ready 590
The ipl_dvd command emulates the operation of using an IPLable DVD in an HMC. Some
software, such as z/VM, is distributed in this way.
$ ipl_dvd /media/530_GA_3390_DASD_DVD/cpdvd/530vm.ins
The file name used with ipl_dvd must be in the correct .ins format, which is similar to an OMA
control format. Our particular example involves VM and this may not work without the HMC
function because this mode of VM installation uses unique HMC 3270 functions. Some Linux
distributions may be packaged for DVD installation.
Search paths
Our examples use a parameter on the awsstart command to specify the devmap. There are
other ways to find these files. The complete search algorithms, in the order used, are as
follows:
4.3 CP commands
The following commands control operation of the 1090 System z processors, known as CPs.
The first (or only) processor is CP number 0. A second processor (if it exists) is CP number 1,
and so forth. By default, these commands are sent to CP 0. The cpu command may be used
50 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
to specify a different default processor. These commands can also be directed to zIIPs,
zAAPs, and IFLs which are assigned cpu numbers as though they were CPs.
$ cpu 1 specify default processor
$ stop stop indicated (or default) processor
$ start 1 start indicated (or default) processor
$ restart 0 perform CP restart function
$ query 0 query indicated processor
$ interrupt 0 send external interrupt
$ storestatus
$ sys_reset perform System z reset
$ storestop 1AC0 stop on store in absolute address
The following display and change commands are best used when the CP is stopped.
Addresses specified for the adstop, d, and st commands are real addresses or virtual
addresses, depending on how the address is written:
address 1AC0 real memory address3
address v1AC0 virtual memory address (primary AS)
address vh1AC0 virtual memory address (home AS)
address vs1AC0 virtual memory address (secondary AS)
3
By “real memory address” we mean an address in System z memory. The “real address” is not translated through
the System z virtual memory process.
The following conventions are used for the display and store commands:
The display storage commands take the specified address and round it downward to the
nearest 32-byte (hex 20) boundary.
Memory display commands display 32 bytes (in hex) per line. If the t parameter is used,
EBCDIC is also displayed at the end of each line. In either case, the lines are long and the
Linux window used should be wide.
Store commands for memory work in bytes, starting at the address specified in the st
command.
Registers are displayed as 64-bit registers when in z/Architecture mode and 32-bit values
when not in z/Architecture mode.
Store commands (memory and registers) assume data is in hex.
Store commands for registers work in 32-bit words (st g commands) or 64-bit words (st
gx commands). Data is padded on the left with zeros.
Memory displays include the storage protection key (displayed after the hex data).
PSW values (st psw xxx) are entered as 32-bit words. Changing a 128-bit PSW means
that four operands are needed. The command st psw 123 456 789 ABC places
x’00000123’ in the first word of the PSW, x’00000456’ is intended for the second word (but
the second word is forced to zeros), x’00000789’ is placed in the third word, and
x’00000ABC’ is placed in the last word.
If a storage word operand overflows (for a register or segment of the PSW) the value is set
to x’FFFFFFFF’.
Floating point registers are always treated as 64-bit words.
This would read the contents of the indicated Linux file into the System z memory, starting at
real address (hexadecimal) 800000.
4.4 Devmaps
A devmap must exist when starting 1090 operation. The devmap defines the size of System z
memory and several other parameters. It also specifies which device managers to start and
what emulated devices are connected to each device manager. Many devmaps may exist;
they are simple Linux text files. Only one devmap can be used when starting a 1090 instance
and it cannot be dynamically changed while the 1090 is running.
Typically, zPDT users have a number of devmaps for a variety of purposes. For example:
A devmap for the current z/OS release, with only the basic IPL volumes and no OSA
A devmap for the current z/OS release, with all the volumes that have been installed and
with one or two OSAs (depending on the LAN and tunnel environment desired)
A devmap for a previous z/OS release (using the normal AD-CD device numbers)
A devmap contains both the current AD-CD release (using the normal device numbers)
and a previous release (using other device numbers)
A devmap for basic z/VM
52 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
A devmap for z/VM and one (or two) z/OS releases
Q: You say that Ethernet SNA operation is not supported. Might it work?
A: Yes, it might. It has not been tested and IBM will not respond to problems using it.
Q: The 1090 token does not work on my new laptop. What might be the problem?
A: At the time of writing (February, 2011) the current Linux releases used with zPDT
apparently did not fully support USB3 ports. Some laptops have both USB2 and USB3 ports;
try using the USB2 port.
Q: Is the floating point hardware of the base machine used when executing System z floating
point operations?
A: Sometimes. This is a complex area when floating point exception conditions are
considered and IBM has not disclosed the 1090 design for this area.
Q: Why do you not provide a definite MIPS value? This would help us determine how to best
use the 1090.
Q: Can I have multiple tap (tunnel) interfaces, such as tap0, tap1, and so forth?
A: Yes, starting with the zPDT release in spring 2010. A total of four OSA devices of any type
may be defined. The tunnel interfaces will typically have CHIPD numbers A0, A1, A2, and A3.
The tap devices may be defined (as seen by the find_io command), but they are not used
unless a corresponding OSA device exists in the devmap.
Q: Can I share emulated volumes on an NFS server with several 1090 machines?
A: No. This would almost certainly result in corrupted data unless the NFS files are read-only
files. Such usage might be practical for awstape files.
Q: My OSA interfaces do not start and I receive error messages that SIOCGIFINDEX failed.
What is this?
A: This seems to occur mostly with openSUSE 10.3. If you run the find_io command, you
will probably see that the LAN interfaces do not have MAC addresses. We do not know
exactly what triggers this problem, but we find that updating openSUSE 10.3 (using the online
update function that is part of the Linux system) often resolves the problem. We suspect that
the support levels for particular models of Ethernet adapters may be the cause.
Q: Why might I need to specify a unit address in the device statements for OSA? I do not
understand these.
A: A full discussion is beyond the scope of this document. For TCP/IP, you need to ensure
that the unit addresses associated with non-QDIO TCP/IP usage are 0 and 1. (This is
required by the default OAT used by OSA.) You need to ensure that unit address FE is used
only for OSA/SF when using the default OAT. You need to remember that the default unit
address is the same as the low-order two digits of the device number (“address”). Provided
you meet these requirements there is no need to specify a unit address in the device
statements for OSA. For QDIO operations you should not need the unit address operands.
Q: Can I filter IP traffic before it is sent to my emulated OSA-Express interface? This reduces
the overhead involved in rejecting packets not addressed to my system.
A: In OSD (QDIO) mode there is some automatic filtering. In OSE (non-QDIO) mode you can
customize the OAT with your IP address. If this is done, the OSA interface will pass only
packets intended for this IP address. If this customization is not done (and it is not done in the
56 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
default OAT) then all packets are sent to the host TCP/IP and unwanted packets are rejected
at that level. If you use NAT functions on the base Linux, then most of the filtering is done at
that level.
Q: Does OSA-Express2 emulation support jumbo frames? With QDIO? With non-QDIO?
A: Jumbo frames are not supported by zPDT with QDIO, although some users have been
successful using them. Appropriate kernel parameters are needed as specified in “Notes for
sysctl values” on page 11.
Q: Should I use 1492 or 1500 as the maximum packet size (MTU) when using awsosa?
A: Use a maximum of 1492. The details are beyond the scope of this document. (As best we
can tell, the System z communication routines automatically adjust this number down if
necessary. Thus it probably does not matter whether you specify 1492 or 1500.)
Q: I want to use the OSA Express function with QDIO, but my z/OS does not have any OSA
devices defined. How do I add them to z/OS?
A: This is done with the HCD utility under z/OS, creating a new IODF. Extensive IBM
documentation exists for HCD. An example is included in the third book in this series
(GA24-7723).
Q: Can I use a continuing range of addresses (device numbers) when I have multiple OSA
QDIO interfaces? For example, 400-402 for TCPIP1, 403-405 for TCPIP2, and so forth.
A: No. For z/OS we believe the first OSA address (for a TCP/IP stack, in this example) must
be an even number. You would need to use 400-402, skip 403, then use 404-406, skip 407,
and so forth. (This statement may not be correct for z/VM.)
Q: What PC Card (PCMCIA-type card) should I use for additional Ethernet ports on a
ThinkPad?
A. Use any card that the base Linux system accepts. We tested with an Xterasys Gigabit PC
Card (98-012084-585). We also informally tried several older IBM 10/100 Etherjet <<
Ethernet? >>cards.
Q: The find_io command indicates a MAC address of 0:0:0:0:0:0 for the tap0 interface. Can
a MAC address be zeros?
A: This is normal for the tap interfaces. A “real” LAN adapter should not have a zero MAC
address.
Q: I have an error message about GVRP when I try to use a VLAN/VSWITCH in z/VM. Is this
supported:
A: No, GVRP is not supported. You should specify NOGVRP for your VSWITCH.
Q: Why do some AD-CD releases pause for many seconds while shutting down?
A: You can edit the SHUTDOWN entries in PARMLIB to remove or change any pause
statements.
Q: I am using z/VM and have a problem with MONITOR. Does the 1090 support this usage?
A: An APAR fix for z/VM 5.2 and 5.3 is available to resolve this problem. It is APAR VM64385.
Q: You are inconsistent with the addresses for the AD-CD volumes. For example, sometimes
volume SARES1 is at address A91 and sometimes at address AA0. Which is correct?
A: Both are correct. Any 3390 volume can be at any address that is defined as a 3390 in the
IODF for that z/OS system. For ease of documentation we always show the IPL volume at
A80 and the SYS1 volume (which contains the IODF and IPLPARM datasets) at A82, but
these addresses are not required. The IPL address and parameter much match the
addresses you use, of course.
Q: You use userid ibmsys1 throughout all the examples. Is there something special about this
userid?
A: No.
Q: Can I use an alternate translation table to convert EBCDIC to ASCII for awsprt output?
A: No.
Q: I have several Linux windows open while running the 1090. I can enter 1090 commands in
any window, which is convenient. However, I also sometimes get output messages in a
different window from where I entered a command. Is this normal?
A: Yes. 1090 output messages (but not command output messages) are sent to the console
session that issued the awsstart command.
Q: My z1090 rpm installation failed with an error message about db_recovery. What now?
A: Try the command rpm --rebuilddb and then install z1090 again (using the z1090 installer
program, of course, and not trying to directly install the z1090 rpm).
Q: Can I routinely migrate to the next Linux releases when they become available?
A: Maybe. There is no unique 1090 tie to a particular release. However, it is possible that the
1090 installation steps might not work for a new release (due to different library paths) or that
the new release might not support the particular hardware in your base machine. IBM support
exists only for the recommended release(s).
58 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
Q: I am using an emulated printer and this sends output to a Linux file. Does this file remain
open for output by the 1090 all the while the 1090 is running?
A: Yes. It is closed if you use awsmount to assign a new output file for the printer.
Q: Is there an easy way to delete all the existing disk partitions when installing openSUSE?
A: Yes, delete the /dev/sda entry. This does not really delete the hard disk, but it does delete
all partitions on it.
Q: I installed a different HDD in my T60 ThinkPad and now I cannot boot from CD or HDD.
A: You may have installed the new HDD upside down. It is easy to do.
Q: You provide very explicit Linux component lists in your examples. Can I include more
packages?
A: Yes. We routinely include the C/C++ compiler, for example, although it is not needed for
the 1090.
Q: How do I add more SUSE components after I have completed the basic installation?
A: Application System Yast Software Management Filter: Package Groups
and then follow the installation prompts. The exact navigation changes with new distributions,
but the general idea remains the same.
Q: You specified that userid ibmsys1 should be a member of group zpdt. Is this needed?
A: No. However, it is useful for additional Linux security measures as described in the third
book in this series (SG24-7723).
Q: The z1090instcheck command does not work or gives the wrong results. Why?
A: You may need the full path name for the z1090instcheck command in some cases. Your
PATH may be pointing to a down-level version at the time you issue the command. Also, you
must have installed the 1090 code before you can use this command.
Q: I have a SCSI tape drive. I want to use it directly for Linux functions (not directly connected
with 1090 operation) but I cannot find the mt command (a “standard” Linux command for
manipulating tape devices).
A: We noticed that mt is not always installed with some Linux distributions. In some cases it
appears to be part of the cpio rpm. For 64-bit RHEL 5.2, we needed to install
mt-st-0.9b-2.2.2.x86_64.rpm to obtain the mt command.
Q: I want to use PCOM instead of x3270. Is this acceptable? Can you include it with the 1090
package?
A: Yes. However, you should use a release later than PCOM 5.5. We have verified that
version 5.5 is not suitable for the 1090. PCOM is part of a separate IBM product. We cannot
include it as part of the 1090 package.
Q: I installed the recommend Linux on my T61p ThinkPad, but I cannot access the token (or a
USB disk drive).
A: It appears that USB usage may be sensitive to BIOS levels. In at least one case, updating
the T61p to the current BIOS level (which was 2.09, at the time this was noticed) solved the
problem.
A: The AD-CD system always starts TCP/IP and associated jobs. How can I delete them?
Q: You can edit the VTAMAPPL types of entries in PARMLIB and remove the associated
commands. While running z/OS you can issue P TCPIP, wait a few seconds, and then issue
C INETD4.
Q: I have volumes at addresses A80 through A8F. Do I need to define a new awsckd unit in
order to add more disk volumes?
A: No, you can have up to 256 volumes in one instance of awsckd.
Q: Can I make the kernel.shmmax value very large to avoid worrying about it?
A: As far as zPDT is concerned, you could do this. However, it is possible that other Linux
applications might accept the very large value and attempt to use unreasonable amounts of
shared virtual memory, resulting in excessive paging.
60 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
A
The examples we use assume a machine with modest memory (4 to 8 GB). A machine with
larger memory would probably have larger root and swap partitions.
Our Linux base was installed in a single 12-GB partition, and we created a 4-GB Linux swap
partition.
A.3 Listings
We used the find_io command to determine that our Ethernet adapter was eth0, and that it
was assigned as CHPID F0. (As a practical matter, the integrated Ethernet adapter is always
assigned to CHPID F0.) The tunnel interface is always CHPID A0. We elected to use the
QDIO mode for both OSA interfaces., We used the following devmap:
[system]
memory 3000m
3270port 3270
processors 2
[manager]
name aws3274 0002
device 0700 3279 3274 mstcon
device 0701 3279 3274 tso
device 0702 3279 3274 tso
device 0703 3279 3274 tso
[manager]
name awsckd 0001
device 0A80 3390 3990 /z/ZCRES1
device 0A81 3390 3990 /z/ZCRES2
device 0A82 3390 3990 /z/ZCSYS1
62 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
device 0A83 3390 3990 /z/ZCUSS1
device 0A84 3390 3990 /z/ZCPRD1
device 0A85 3390 3990 /z/ZCPRD2
device 0A86 3390 3990 /z/ZCPRD3
device 0A87 3390 3990 /z/ZCDIS1
device 0A88 3390 3990 /z/ZCDIS2
device 0A89 3390 3990 /z/ZCDIS3
device 0A8A 3390 3990 /z/ZCDIS4
device 0A8B 3390 3990 /z/ZCDIS5
device 0A8C 3390 3990 /z/ZCDIS6
device 0A8D 3390 3990 /z/ZCDB91
device 0A8E 3390 3990 /z/ZCDB92
device 0A8F 3390 3990 /z/ZCDB93
device 0A90 3390 3990 /z/ZCDB81
device 0A91 3390 3990 /z/ZCDB82
device 0A92 3390 3990 /z/ZCDB83
device 0A93 3390 3990 /z/ZCDB84
device 0A94 3390 3990 /z/ZCCI31
device 0A95 3390 3990 /z/ZCCI41
device 0A96 3390 3990 /z/ZCWAS1
device 0A97 3390 3990 /z/ZCWAS2
device 0A98 3390 3990 /z/ZCWAS3
device 0A99 3390 3990 /z/ZCIMS1
device 0A9A 3390 3990 /z/ZCIMS2
device 0A9B 3390 3990 /z/ZCIMS3
device 0A9C 3390 3990 /z/ZCBBN1
device 0A9D 3390 3990 /z/ZCBBN2
device 0A9E 3390 3990 /z/SARES1
device 0AA0 3390 3990 /z/WORK01 #local volumes, not part of AD-CD
device 0AA1 3390 3990 /z/WORK02
[manager]
name awsosa 0019 --path=A0 --pathtype=OSD --tunnel_intf=y
device 400 osa osa
device 401 osa osa
device 402 osa osa
[manager]
name awsosa 0009 --path=F0 --pathtype=OSD
device 404 osa osa
device 405 osa
device 406 osa osa
[manager]
name awstape 004
device 581 3490 3490
[manager]
name awscmd 1000
device 580 3490 3490
No modifications or definitions are needed in Linux to define the tunnel interface. This
interface (and associated IP address) does not exist until awsstart is issued, using a devmap
that contains the tunnel_intf operand in an awsosa definition.
We need both TRLEs only when using two OSA definitions, of course.
We used the following TCP/IP profile in z/OS. (If using the z/OS AD-CD system, be certain to
update the correct PROFILE. In the z/OS 1.12 AD system this is member PROF1.)
ARPAGE 5
DATASETPREFIX TCPIP
AUTOLOG 5
FTPD JOBNAME FTPD1 ; FTP Server
PORTMAP ; Portmap Server
ENDAUTOLOG
PORT
7 UDP MISCSERV ; Miscellaneous Server
7 TCP MISCSERV
9 UDP MISCSERV
9 TCP MISCSERV
19 UDP MISCSERV
19 TCP MISCSERV
20 TCP OMVS NOAUTOLOG ; FTP Server
21 TCP OMVS ; FTP Server
23 TCP TN3270 ; Telnet Server
25 TCP SMTP ; SMTP Server
53 TCP NAMESRV ; Domain Name Server
53 UDP NAMESRV ; Domain Name Server
69 UDP OMVS ; OE TFTP SERVER
80 TCP OMVS ; OE WEB SERVER
111 TCP PORTMAP ; Portmap Server
111 UDP PORTMAP ; Portmap Server
135 UDP LLBD ; NCS Location Broker
161 UDP OSNMPD ; SNMP Agent
162 UDP SNMPQE ; SNMP Query Engine
433 TCP OMVS ; OE WEB Server
443 TCP OMVS ; Secure Server
512 TCP RXSERVE ; Remote Execution Server
513 UDP OMVS ; OE RLOGIN SERVER
514 UDP OMVS ; OE syslog server
514 TCP RXSERVE ; Remote Execution Server
515 TCP LPSERVE ; LPD Server
520 UDP OROUTED ; RouteD Server
580 UDP NCPROUT ; NCPROUTE Server
750 TCP MVSKERB ; Kerberos
750 UDP MVSKERB ; Kerberos
64 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
751 TCP ADM@SRV ; Kerberos Admin Server
751 UDP ADM@SRV ; Kerberos Admin Server
; 1021 TCP OMVS ; OE FTP SERVER
1023 TCP OMVS ; OE TELNET SERVER
1023 UDP OMVS ; OE TELNET SERVER
1024 TCP OMVS ; OE SERVICES
1415 TCP CSQ1CHIN ; CSQ1 MQ TCP Listener
3000 TCP CICSTCP ; CICS Socket
32200 TCP BBN7ACRS ; Daemon IP port
32201 TCP BBN7ACRS NODELAYACKS ; Daemon SSL port
32202 TCP BBNS001 ; SOAP JMX Connector port
32203 TCP BBNS001 ; ORB port
32204 TCP BBNS001 NODELAYACKS ; ORB SSL port
32205 TCP BBNS001 ; Administrative console port
32206 TCP BBNS001 NODELAYACKS ; Administrative console secure port
32207 TCP BBNS001 ; HTTP transport port
32208 TCP BBNS001 NODELAYACKS ; HTTPS transport port
32209 TCP BBNS001 ; Administrative Local Port
32210 TCP BBNS001 ; High availability manager comm port
32211 TCP BBNS001 ; Service Integration port
32212 TCP BBNS001 NODELAYACKS ; Service Integration secure port
32213 TCP BBNS001S ; Service Integration MQ interoper
32214 TCP BBNS001S NODELAYACKS ; Service Integration MQ inter secure
32215 TCP BBNS001 ; Session Initiation Protocol (SIP)
32216 TCP BBNS001 NODELAYACKS ; Session Init Protocol (SIP) secure
8879 TCP BBODMGR ; SOAP JMX Connector port
7277 TCP BBODMGR ; Cell Discovery port
9809 TCP BBODMGR ; ORB port
9090 TCP BBODMGR ; HTTP port
9043 TCP BBODMGR ; HTTPS port
5755 TCP BBODMNC ; Daemon port
5756 TCP BBODMNC ; Daemon SSL port
SACONFIG DISABLED
BEGINRoutes
; Destination SubnetMask FirstHop LinkName Size
ROUTE 192.168.0.0 255.255.255.0 = ETH2 MTU 1492
ROUTE 10.0.0.0 255.0.0.0 = ETH1 MTU 1492
ROUTE DEFAULT 192.168.0.1 ETH2 MTU 1492
ENDRoutes
ITRACE OFF
IPCONFIG NODATAGRAMFWD
UDPCONFIG RESTRICTLOWPORTS
TCPCONFIG RESTRICTLOWPORTS
START PORTA
START PORTB
66 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
Related publications
The publications listed in this section are considered particularly suitable for a more detailed
discussion of the topics covered in this book.
IBM Redbooks
For information about ordering these publications, see “How to get Redbooks” on page 67.
Note that some of the documents referenced here may be available in softcopy only.
IBM System z Personal Development Tool Volume 1 Introduction and Reference,
SG24-7721
IBM System z Personal Development Tool Volume 3 Additional Topics, SG24-7723
IBM System z Personal Development Tool Volume 4 Coupling and Parallel Sysplex,
SG24-7859
Communications Server for z/OS V1R9 TCP/IP Implementation Volume 1: Base
Functions, Connectivity, and Routing, SG24-7532
Other publications
These publications are also relevant as further information sources:
z/Architecture Principles of Operation, SA22-7832
System z Personal Development Tool User’s Guide and Reference, G229-1101
C E
CD/DVD drive access 9 Ethernet adapters, multiple 58
F M
find_io command 29, 44, 48, 62 man files, installation 10
firewall functions 5 media, software 18
firewall, Linux 42 memld command 51–52
floating point hardware 55 MIH value, OSA 30
MIH values 25
MIPS 55
G MONITOR, z/VM 58
gnome, selection 4 msgmax and msgmnb settings 12
gunzip utility 20 mt command 59
GVRP, for OSA 58 MTU size 57
gzip, compression 18
N
H national language support 58
hardware key 58 net.core.rmem_max parameter 43
HCD utility 57 new release 16
HDD, changing 59 NFS server 56
hyperthreading 4 NFS server, usage 56
NOGVRP parameter 58
I non-QDIO mode 29
ibmsys1 userid 20, 58
ibmsys1, userid 9 O
IBMUSER password 23 OAT table 45
ICKDSF job 24 OAT, default 56
IECIOSxx member 25 OAT, filtering 56
ifconfig command 8 OMA format 60
installation, rpm problem 58 openSUSE 10.3 56
Installer options 10 operating systems, multiple 25
installer program 10 oprmsg command 50
interrupt command 51 ordering information 2
IP traffic, filtering 56 OSA devices 57
ipcs command 8 OSA interfaces 56
ipl command 23, 48 OSA performance 43
IPL operation 22 OSA QDIO, multiple 57
ipl_dvd command 50 OSA/SF 56
iptables 35, 40 OSA/SF utility function 45
iso fonts 8 OSA-Express 28
istep command 51 OSA-Express emulation 57
OSA-Express interface, filtering 56
J OSA-Express2 offload functions 57
jumbo frames 57 OSN operation 57
K P
k3b package 4 packet size, TCP/IP 57
kernel mode 59 password, IBMUSER 23
kernel.shmmax 60 PATH 9
KVM 1 PC Card 57
PCMCIA card, Ethernet 57
PCOM 60
L PCOM, 3270 emulator 6
LAN setup 42 PING command 46
LCS mode 29 pmtools rpm 4
LD_LIBRARY_PATH 9 PORTNAME (in the TRLE) 30
lease extension, token 15 PowerTerm 6
70 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
printer output 59 sys_reset command 51
PROFILE, z/OS TCP/IP 64 sysctl command 8
PSW values 52 systcl parameter 43
SYSTCPT DD statement 46
System z software 17
Q
QDIO interface, multiple 57
QDIO mode 28 T
QDIO operation, advantages 45 tap (tunnel) interfaces 56
QDIO setup 29 TCP/IP stacks, multiple 56
query command 51 TCP/IP, starting z/OS 60
telnet session 44
telnet-server, selection 4
R thin interrupts 56
RDzUT 58 TN3270E clients 6
ready command 50 TN3270e clients 6
Redbooks Web site 67 TN3270e connections 28
Contact us viii token 48
releases, new 16 token serial number 13
resolver, z/OS 40 TRACERTE command 46
Resource Link 16 TRL entry 30
Resource Link, activation 14 TRL major node 64
restart command 51 TSO commands, NETSTAT 46
RMF 60 tunnel connection 30
root partition 3 tunnel connection, usage 44
root userid 59
router personal 42
U
UIMD (for Unique Identifier) 13
S UIMD service 10
Scenario 2 33 ulimit command 8, 12
Scenario 3 35 ulimit commands 12
Scenario 4 37 unit address, OSA 56
Scenario 5 39 Universal Time 4
SCSI DLT tape drive 55 Unsupported Function, 3270 23
SCSI tape 59 upddecode tool 4
search paths 50 USB3 port 55
Secure Update Utility 15
SecureUpdateUtility program 14
SEL protection 42 V
SELinux 6 VIPA functions 57
serial numbers, 1090 13 VLAN, usage 58
service uimd commands 13 VLAN/VSWITCH in z/VM 58
shk-server 10 VMAC support 46
shmall value 11 VMWare 1
shmmax value 11 vsftp, selection 4
shutdown, z/OS and 1090 23 vswitch support 46
SIOCGIFINDEX failed 56 VTAM commands 46
SNA 29 VTAMLST ATCCON00 30
SNA 3270 28
SNA operation 28, 45
sntl-sud 10 W
software media 18 WebSphere Application Server 21
st command 51 wireless connection 30
start command 51 wireless usage 44
START name 30
stop command 51 X
storestatus command 51 X Software Development package 5
storestop command 51 x3270 fonts 8
SUSE components, adding 59 x3270 installation 6
swap partition 3 x3270, obtaining 6
Index 71
x3270, startup 22
x3270, to z/OS TCP/IP 44
Xen 1
Z
z/OS 18
z/OS TCP/IP 28–29
z/VM 18
z/VM installation 19
z/VSE 18
z/VSE installation 19
z1090 rpm 10
z1090instcheck command 13, 48, 59
z1090ver command 48
zIIP or zAAP, performance 55
72 IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
IBM System z Personal
Development Tool: Volume 2
Installation and Basic Use
IBM System z Personal Development
Tool: Volume 2 Installation and Basic
IBM System z Personal Development Tool: Volume 2 Installation and
IBM System z Personal Development Tool: Volume 2 Installation and Basic Use
(0.2”spine)
0.17”<->0.473”
90<->249 pages
IBM System z Personal
Development Tool: Volume 2
Installation and Basic Use
IBM System z Personal
Development Tool: Volume 2
Installation and Basic Use
Back cover ®
IBM System z
Personal Development Tool
Volume 2 Installation and Basic Use ®
SG24-7722-03 ISBN0738435775