Ted's SHARE 2000 Trip Report

Here are highlights from some of the Share sessions that I attended last week. I provided a summary in italics followed by more detail of the items of interest to me:

Introduction to Enterprise Application Integration (EAI) - Speaker was Rob Lamb of IBM (Lambr@us.ibm.com)

Summary: This session gave me an overview of what EAI is, why we need it, and the forms it can take.

EAI attempts to tie together disparate systems - within and outside the enterprise. The need was apparent when it was discovered that for every $10 companies spend on ERP packages (like Peoplesoft), $9 goes toward integrating these packages with the existing systems. EAI attempts to manage and automate a process from the start of case (piece of business) through to fulfillment. EAI does this by removing the need to worry about writing the basic code to access the data on the various systems/applications, instead you can concentrate on the business rules and code the pieces need to make this happen, then call the EAI tool to acquire the resource and do the application/system calls. This allows you to replace applications and systems without changing your code that supports the business case. The tools on the market that address this need come in 2 flavors of integration - Synchronous, like CORBA, Enterprise Java Beans and Websphere - And Asych products, like MQ Series, and message brokers. Choice of technologies depends on the environment and what you are trying to do. Synchronous tools provide better performance and serialization when needed, but you must have control over all the pieces (applications and systems). Asynch integration is independent of the pieces - you don't need to make sure that a connection is in place - post your message and go on, you will get the data back when it is available - of course, this doesn't allow for real time processing, but you can fake it into acting like real time. The various tools that address these needs have different approaches, for example MQ Series provides an all to all connection and automates and documents the process workflow as part of integration. Products that provide message brokering have a central point where the business rules are known, calls are made to the message broker (server), and it farms out the work to the appropriate application/system server based on the business rules. CORBA was described as RPC for objects. It includes middleware for security, directories, etc. It serializes its calls with transactions that perform a 2-phase commit. The speaker emphasized that it is inappropriate to say that one particular tool is "the way to go". Choose the right tool or tools based on your environment and integration needs.

Java for OS/390 - Speaker Mark Cathcart of IBM - This presentation can be viewed at this link:

www.ibm.com/s390/corner

Summary: This session provided IBM's direction for S/390 Java, and gave some helpful hints on implementing Java apps on S/390.

IBM's direction for OS/390 Java is to establish it as the de-facto programming language for e-business. The current performance of Java is similar to C/C++, IBM is working toward COBOL Like performance, but not there yet.

Hints: The current recommendation is to run CICS and DB2 Java transactions as native compiled for performance reasons - IBM plans to move away from this in the future, but again, not there yet.

The HPJC (Java compiler) has a problem if you run more applets than you have CPs, performance begins to degrade (HPJC is part of Visualage for Java Enterprise edition).

To get good performance with Websphere and CICS servlets) you need CICS CTG 3.1.

Hand coding applications gives slightly better performance than Java generation, but not enough to warrant hand coding as a direction.

 

OS/390 Security Server RACF Update - Robert Hanson of IBM

Summary: I learned about t he digital certificate support in RACF, enhancements provided with OS/390 2.8, and how to use them.

OS/390 2.8 updates to digital certificate support in RACF:

Additions to the RACDCERT command for Key rings, using ICSF (hardware crypto support),

GENCERT to generate certificates.

CERTAUTH to define a certificate authority,

PKCS-12 certs

LABELS on certificates for management.

New resource class DIGTCERT, & the CERTDATA segment used to map a certificate to a RACF userid.

Update to BLKUPD to allow mixed case specification in ENTRY.

IRR.DIGTCERT.<function> used to allow those other than SPECIAL to manage digital certificates

READ allows management on their own certs or keyrings,

UPDATE allows management of another's certs or keyrings

CONTROL allows management of the certificate authority or site cert.

OS/390 2.9 will add certificate name filtering and mapping so that you do not need to predefine all, simply map based on a set of X.500 name rules, and restricted userids that cannot gain access via Global access table,

UACC or ID(*). These features can be enabled on OS/390 2.8 via 2 apars: OW40129 and OW40130.

Big Changes coming to Software Licensing - David Varni of IGN

Summary: Interesting presentation about the problem with software licensing costs for the S/390 platform and the XSLM solution to this problem.

This presentation focused on the problem for S/390 platform in software costs. The S/390 hardware costs have now dropped to the point where is it cost effective to host applications and systems on the S/390 platform, but the software licensing has made it almost impossible for new customers to bring up a start-up S/390 platform. Also, the upgrade fee penalties imposed when jumping in MIPS makes placing growing applications on S/390 a problem. IBM and other vendors have recognized that this will kill off the S/390 platform if they do not take action, so as part of a GUIDE driven project, IBM and others have accepted an Open Group Standard and are moving toward XSLM - cross platform licensing - which makes licensing of software platform independent, and makes the customer the license manager. You get a certificate through e-mail, implement it on whatever CPU you see fit, and send the log to the vendor to show what you did. No more pricing of the CPU and CPU serial number in advance of the change.

(ref: License Use Management - LUM -  http://www-4.ibm.com/software/is/lum/)

The technical standard can be found at: http://www.opengroup.org/publications/catalog/c806.htm

The speaker's premise is that if IBM makes this form of licensing available, other vendors will get onboard and use IBM's licensing services on S/390 to license their own products using this model.

 

OS/390 R8 User Experience - Greg Thompson of PNW

Summary: The installation process / problems / gotcha's that one user experienced when installing OS/390 2.8

This was mainly server pack installation related experiences - they are not yet in production with R8. An interesting comment made was that Java was supposed to be included, but was not there - I will look into this further.

LDAP Implementation and Customization - Karen Gdaniec of IBM

Summary: I learned about LDAP on S/390, the 2 flavors - DB2 and RACF, and how they are implemented.

The 2 flavors for S/390 - DB2 directories and RACF for userid/group directories. It also provided an overview of the items that you must do to configure and start the LDAP server for DB2 and/or for RACF.

OS/390 UNIX System Services & DGW Security Diagnostics - Jack Jones of IBM

Summary: This session gave me a list of places I can look for diagnostics for S/390 UNIX (FSUM), HTTP Webserver (IMW),

Storage Subsystem Division Networking Segment Strategy for 2000 - Shelly Howrigon of IBM

Summary: This session described the IBM / CISCO agreement for selling of networking equipment and the IBM strategy for e-business connectivity - Emulated I/O over PCI cards was not a listed strategy.

Discussed the IBM and CISCO agreement. That IBM will be out of the switches and router business due to this. They will not be able to sell equipment like the 2216 after 12/4/2000. IBM will continue to work on the SNA (3745/46, NCP, 3174), Token Ring hubs and switches (8226, 8228, 8239, 8270), Ethernet hubs (8237,8242,8245), and S/390 adapters (token, Ethernet, OSA). IBM e-business strategy for SNA - SNA & IP coexistence is OS/390 2.8, TN3270 server hosted on OS/390 (IBM now states that with OS/390 2.8 this is preferable to a front end TN3270 server), OSA-Express, 3745/46 with NCP. The most important information that I got from this is that Emulated I/O with PCI cards is not an IBM strategy!

Using UNIX System Services - A user experience

Summary: Several customer examples of S/390 UNIX apps, the most interesting was a SAR server based on the CA-View product with the http server. It allows access to production reports over the Internet.

OS/390 R7 R8 and R9 goody bag

Summary: Review of some little enhancements in new releases that solve or help with OS/390 support issues.

Found that after R8 I will be able to get around a problem I have with installing in SMPE items that use HFS. I must alter my RACF userid because the HFS items are all distributed as owner UID=0. After R7, having access to the RACF class for superuser will be enough to install HFS updates. Also the chroot utility will be provided to allow temporary change of the root to allow testing of maintenance before copying to prod libs.

Bit Bucket X'13'

Summary: Similar to above session, but not limited to new releases - reviews some little known tools for techsupport use.

Planning assistant for e-business - www.ibm.com/os390/ - recommends a set of products and features that will provide your e-business requirement.

Unix config assistance (2.8) - www.ibm.com/os390/ - builds you BPXPARMxx parmlib member

OS/390 Wizards - can be accessed from www.ibm.com/s390/pso/ then click on wizards

PMA - Planning and migration assistant wizard - SMPE dialog to show current installed fmids related to real names and updates needed for new releases of the os.

Enhancements to SMPE:

Allow global zone merge,

Compact SMPPTS (run GIMCPTS to compact entire PTS, all new PTFs will be auto compact) -this is at OS/390 2.5

Enhanced holddata report - hiper resolvers - see (obsolete reference: "http://service.boulder.ibm.com/390holddata/") service.boulder.ibm.com still exists, though, so go there, and follow links.

HFS Redbook avail 12/99 - SC24-5482

Softcopy librarian: ftp://ftp.software.ibm.com/ps/products/ibmreader/tools

techsupport.services.ibm.com/support/s390

-redalerts

-ptfs

-orders

-etc

The New pause/release/transfer callable services and how to use them

Commands to diagnose and handle PDS/E latch problems

Symbolic aliases in SMS 1.5

F CATALOG,REPORT,VLF command change to F CATALOG,REPORT,CACHE in SMS 1.5

VTAM message flooding table use SYS1.SAMPLIB(ISTMSFLD)

In OS/390 R2.8 the sample SMF exits in IPO.SAMPLIB will disappear, save them before upgrading if you need them.