Re: running NTP with Linux under z/VM

2009-10-28 Thread Adam Thornton

On Oct 28, 2009, at 3:47 PM, Mark Jacobs wrote:

Mark Jacobs
Time Customer Service


Wow.  You're the guy I want to talk to.  Time is going too fast.  Can
you please slow it down a little so I can get a breather?  And really,
REALLY turn down the speed on weekends, please.  A fast-forward-
though-boring-meeting feature would be nice too.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

smime.p7s
Description: S/MIME cryptographic signature


Re: Young Developers Get Old MainframersĀ¹ Job s

2009-10-14 Thread Adam Thornton


On Oct 12, 2009, at 11:23 AM, Jack Woehr wrote:


Howard Rifkind wrote:

There is a whole bunch of highly experienced z/Mainframe systems
and applications people out there without jobs.

It's time, in the immortal words of the Firesign Theatre, to climb a
tree, take off your shoes,
and learn to play the flute!


Defoliating a victory garden sure works up an appetite!

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

smime.p7s
Description: S/MIME cryptographic signature


Re: REXEC / RSH

2009-10-09 Thread Adam Thornton

On Oct 9, 2009, at 10:34 AM, Jones, Russell wrote:


Does anyone have any experience running remote linux commands from
MVS batch? I have found that MVS TSO has REXEC and RSH, but I am
been unsuccessful executing a remote command on linux. I can use
rexec/rsh from one linux system to another, but not from MVS.

Any help on using these commands, or other suggestions on how to
execute remote commands will be much appreciated.


I would guess that your Linux guest doesn't have rexec/rsh installed.
WIth good reason: they're astonishingly insecure.  If they're on the
same physical machine as your MVS machine then you may not care, since
there's no physical wire to be sniffed between them. As far as I know
they do still exist in modern distros and you should be able to
install them.

OTOH, if you have a little budget, you could license NJE for Linux and
have a very easy way to submit remote jobs to Linux.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Novell iPrint Server using SLES on System z?

2009-10-06 Thread Adam Thornton

On Oct 6, 2009, at 11:50 AM, Eugene Carter wrote:



1.  Are other organizations out there using iPrint on SLES (on x86)
who are
also using SLES on System z?
2.  If Novell iPrint were an option for SLES on System z (and you were
using iPrint) would you host it on System z?  If not, can you share
your
rationale/perspective?
3.  Does there appear to be a business case/demand out there for
Novell to
support iPrint under SLES on System z (that Novell is unaware of)?
4.  Is it even worthwhile to explore (like I don't have enough to do
already)?


NDPS is *so* 1998.  Unless you still have actual Netware somewhere
it's just using LPR/LPD and IPP anyway, I think.

The rest of the world is using CUPS these days, as far as I can tell,
which works fine on z.

So, my responses in order would be:
1) dunno
2) no--I'd use CUPS, which is open and well-supported
3) *I* don't see it
4) no

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Adam is moving on...

2009-10-06 Thread Adam Thornton

Some of you know this already, and some of you don't:

Last month, I was offered a great opportunity at another organization
that will allow me to focus my career in a way I have been interested
in for quite a while. I accepted that position, knowing that my
customers at SNA would be in good hands after I left. As a result,
this Friday is my last day with SNA.  Sine Nomine and its owners have
been quite supportive of my move, for which I am very grateful.

I intend to continue reading the Linux on 390 and VM mailing lists,
but I am no longer going to be working with zSeries boxes as part of
my job (I will continue to play with Hercules in my Copious Free
Time), so my advice may grow even less useful than it currently is.
Anyone who wants a non-work email address of mine and doesn't already
have one, please contact me off-list.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Renaming a volume

2009-09-25 Thread Adam Thornton

On Sep 25, 2009, at 1:52 PM, Aria Bamdad wrote:


Is there a reason why you create 3 partitions on one dasd?  I would
define 3
minidisks to VM on that one DASD or different ones and format each
disk
individually with one partition per disk.  These can be freely moved
to
other volumes without any care.


That's the way RH does it by default.  It's not really a good idea
under z/VM.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Installing Redhat 5.3 or 5.4 in Hercules

2009-09-21 Thread Adam Thornton

On Sep 21, 2009, at 4:42 PM, Alan Altmark wrote:


I'm sorry to be the bearer of bad news


Well, then, ask Chucky!  He *LOVES* to do it.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Dasd_diag_mod question

2009-09-11 Thread Adam Thornton

On Sep 11, 2009, at 10:36 AM, Larry Uher wrote:


I guess my question would be why is a complex EXEC needed to do a
normal system administration task?  A second question is why didn't
Novell provide a straightforward method for doing this and document it
in a manual (without using a complex 3rd party EXEC) ?


Complex?

After the description and the license and update comment blocks, it's
about 240 lines.  Of those, about 120 are the various ways the program
can exit (with descriptive text) and the help message.  That leaves
about 120 lines of actual code, and those lines are not dense (e.g.
one line per pipe stage).  That handles both the raw FBA and the DIAG
device cases.

It's not a normal system administration task on any other Linux
architecture.  It's really quite unusual for your swap device to be
destroyed and recreated every time you power on the machine.  In the
normal case the swap signature sits there between power cycles.
That's why Dave and I wrote the thing in the first place--Linux does
not generally consider needing to format the swap device as part of
its normal bootup routine and rather than mess with system startup
scripts and their ordering, we thought it was a lot easier to just
take care of it in CMS before handing control to Linux, so that the
swap device was pre-prepared like it expected.

And that, by the way, is the reason Novell doesn't do it: it's not a
task that's necessary on other architectures, and Novell, not
surprisingly, likes to keep as much the same between platforms as
possible.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Dasd_diag_mod question

2009-09-11 Thread Adam Thornton

On Sep 11, 2009, at 12:02 PM, Hall, Ken (GTS) wrote:


My complaint with SWAPGEN going back to when it was first announced
was
that it needs to know the number of blocks to format.  This means that
if the size or number of the vdisk(s) changes in the directory, the VM
admin also has to go to the target machine's 191 disk and update the
PROFILE EXEC so the right number of blocks get formatted on the right
devices.  Having to change things in multiple places seemed like
something to be avoided.


Hm.

Did you ever send us a requirement for that?  If so, I apologize for
having missed it.

Since we already look for the number of blocks in the reuse code, I
think it should be pretty straightforward to do that check and then
use the number of blocks detected if the user doesn't specify.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Dasd_diag_mod question

2009-09-11 Thread Adam Thornton

So, for those of you playing along at home:

I'll eventually release a new VMARC, but I need to find and update the
help file sources first, and I need to do the whole thing under update
control and build the package, and in the meantime:

I'm using the 0803 SWAPGEN as my starting point.  Lines 243-244 read:

parse var msg . . . . . newblks .
if blks  newblks then signal WrongBlks/* Mismatch, error */

Between these two lines, stick:

if blks = '' then blks = newblks

(that's two single quotes, not one double quote)

And there you go: if you use REUSE (as you would if the VDISK is
specified in your directory entry) then you no longer need to specify
the number of blocks.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Dasd_diag_mod question

2009-09-11 Thread Adam Thornton

On Sep 11, 2009, at 12:59 PM, David Boyes wrote:


It sounds like the issue is more that it's a 3rd party tool than
that it's done the way it's done. If either of the distributors
wants to include SWAPGEN, we're open to discussing the idea. No one
has asked.


They don't even need to ask, actually.  It's under the Artistic
License, which is OSI-approved.  Just saying.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Dasd_diag_mod question

2009-09-11 Thread Adam Thornton

On Sep 11, 2009, at 1:15 PM, David Boyes wrote:


My complaint with SWAPGEN going back to when it was first announced
was
that it needs to know the number of blocks to format.


Actually, it needs to know how many blocks to define if you don't
want to code it in the directory entry -- it always formats
everything. If you put the VDISK in the CP directory entry and use
the REUSE option, SWAPGEN will simply format what's there and write
the signature on the disk.


Well, NOW it will, with the change I just posted.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Cannot Login to zLinux Server

2009-09-09 Thread Adam Thornton

On Sep 9, 2009, at 11:30 AM, West, Judson wrote:


I am running a SLES10 server under z/VM. This server also runs NIS
client. Some of my users cannot login to the server using their NIS
login name, some can. Actually, they do get logged in but the login
does
not complete and ends with a message saying Connection to servername
closed. For those that do complete a login, if they try to su to
any of
the available root user names, it does not change the userid to
root. If
they give the wrong password for the root username, the system
correctly
detects it and denies the switch. There are no error messages to
indicate why this is happening. The contents of the /etc/passwd file
are
similar to /etc/passwd files on other servers in the shop, since they
are basically clones. The server has been rebooted with no effect on
this issue.

Any thoughts on where to go from here?



Turn on debug in your PAM security stacks and see if you get useful
diagnostic output.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Linux Processor Support

2009-08-28 Thread Adam Thornton

On Aug 28, 2009, at 12:02 PM, Mark Post wrote:


On 8/28/2009 at  8:24 AM, Billy R. Bingham billy.bingham...@suddenlink.net


wrote:

Greetings all,

Is there a central site that lists the different versions/distros
of Linux
for System z and what processors they support or will run on?


SLES9, RHEL 3 and 4, G5 and up to z10.
SLES10, RHEL 5, z/Architecture up to z10.
SLES11, z/Architecture up to z10, but only z9 and z10 are officially
supported.

Slack/390, Debian/390 will run on anything from G5 up to a z10, but
only in 31-bit mode.  Slack/390 will be getting 64-bit as soon as I
can get the time to work on the installer some more.  Everything
else is done.



Next release of Debian may drop 31-bit support, and will offer 64-bit
support.  There seems to be some debate about whether to do a biarch
release or separate s390 and s390x right now, although I haven't been
tracking that discussion as keenly as I used to.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Quest re: Subversion on SLES 11.0

2009-08-27 Thread Adam Thornton

On Aug 27, 2009, at 12:27 PM, Michael Simms wrote:


I have been trying to install a  package called Subversion. Since I
could not find a binary for SuSE SLES 11 on zVM,


It was on the SDK in SLES 10.  Maybe it's there?

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Quest re: Subversion on SLES 11.0

2009-08-27 Thread Adam Thornton

On Aug 27, 2009, at 1:35 PM, Richard Troth wrote:



Please don't lose heart about building it yourself.  If you can find
an RPM, and you trust it, great!  But if you can't find pre-built
packages or you don't trust the builder, or if you need
customization or require some up-to-date release, building your own is
the way to go.  If you are committed to in-house compilation, then you
can justify having and maintaining a suite of requisite packages and
libraries so that next time something like SVN comes along it will
just make and life will be beautiful.


You still should find or build a spec file, and run rpmbuild to do the
actual make.

Going outside the package management system hurts.  Trust me on this.
I realize that this is very different advice than the Adam who worked
in Rick's office a zillion years ago would have given, but from a
maintenance standpoint:

1) Use the distro version if there is one--even if it's on the SDK
2) If you can't do that, at least roll it up into the distro package
management system so you can use your distro tools to query installed
package version level and so forth

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Dynamicallhy Changing Linux Guest Network

2009-08-14 Thread Adam Thornton

On Aug 14, 2009, at 10:01 AM, Lionel Dyck wrote:


Does anyone have a z/vm and/or linux script that they could share
that can
be used to dynamically change the linux servers network when the
server is
brought up at a dr site and/or when the network addressing is changed?

I've tried playing with it without success - keep missing a piece
here or
there.


This is inherently a network-specific question, and I don't think
there is a one-size-fits-all approach.  A DHCP server that, before
starting, does a Q CPUID and swaps the appropriate lease-granting file
in is probably the most straightforward approach, but how to do this
and do it right is going to be extremely dependent on the specifics of
what changes between the DR network and the normal network, or the
original network and the changed network.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Dynamically Changing Linux Guest Network

2009-08-14 Thread Adam Thornton

On Aug 14, 2009, at 10:33 AM, David Boyes wrote:


Actually, you could trivially construct a Linux NAT appliance that
would translate between the DR external addresses and the normal
ones. It would simply substitute for the default route in the normal
network, and NAT appropriately. You just don't bring it up in the
normal configuration.


In fact iptables provides a netmap function so, as long as you keep
the networks the same size and put the guests at the same host-part-of-
the-addresses, you can do it in a single line rather than having to do
a map per host.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: IBM, Novell to slash Linux prices for mainframes

2009-07-29 Thread Adam Thornton

On Jul 29, 2009, at 11:52 AM, Mark Post wrote:


  I actually got a reply from him, but it was rather dismissive,


The Register?  Dismissive?  THAT COULD NEVER HAPPEN.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Adding dasd technique

2009-07-28 Thread Adam Thornton

On Jul 28, 2009, at 9:18 AM, Bauer, Bobby (NIH/CIT) [E] wrote:


We are running Redhat V5 with z/VM V5.4 with all 3390 dasd. I need
to add another volume to one of my servers. I also have 2 swap disk
defined using Sine Nomine's swapgen macro in the profile exec for
the server and the mkswap and swapon commands in rc.local:



If you're running swapgen then you don't need to mkswap or swapon.

You should probably put dasd=200-205,700-701.

But you should also use the by-device-address form of talking about
your dasd (rather than dasda, dasdb, and so on) in /etc/fstab
precisely so you don't have to care as you add and subtract devices,
as long as they stay at the same virtual addresses.

Also don't forget to rebuild your initrd after every time you change
dasd configuration.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Other OSs instead of RHEL/SUSE for LCDS?

2009-07-21 Thread Adam Thornton

On Jul 21, 2009, at 7:54 AM, Shawn Wells wrote:



   What is your end goal?  As there aren't any other Linux
distributions supported by IBM on System z, you may be out of luck
but if you give us details on what you're trying to do, we may be able
to assist.


Note the by IBM bit there.  For instance, Sine Nomine has a service
offering that's kernel-and-architecture agnostic and applies to
anything in Debian stable main (http://packages.debian.org/stable/)
(not all of those packages are applicable to all architectures, but
the great majority are).

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Bridge-utils for SUSE SLES 10 SP2

2009-07-19 Thread Adam Thornton

On Jul 19, 2009, at 7:52 PM, David Boyes wrote:



I've never even heard of it, and I've had no problem with using  
openVPN.  What

does it do, and what commands/programs/libraries does it provide?


ItĀ¹s used with OpenVPN to do transparent layer 2 bridging. Most  
people use

OpenVPN at layer 3 with routed networking.


With OpenVPN you can get bridged layer 2 between the OpenVPN endpoints  
just by using the tap device rather than tun.  Only if you need to  
bridge to machines not in the OpenVPN star (server + multiple clients)  
should you need to get fancy about it.


Adam
--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Opensource DB Firebird

2009-07-16 Thread Adam Thornton

On Jul 15, 2009, at 5:35 PM, Marcy Cortes wrote:


Has anyone here used this?

We have an app considering trying it on zLinux as a new temporary
home.


I've played with it on Intel, but not on z.  I suspect it will build
and run just fine.

The question I had, though, when I played with it on Intel, was why?

That is, between MySQL and PostgreSQL, it seems like the Open Source
RDBMS bases are pretty well covered; I didn't see any really
compelling reason you'd use Firebird instead.  Why *do* you want to
use it?

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: SLES10 SP2 question

2009-07-16 Thread Adam Thornton

On Jul 16, 2009, at 11:45 AM, Ray Mansell wrote:


I need to move a SLES10 SP2 server from one DASD volume to another
(since we just installed a new storage box). However, after the move I
discovered that the server's boot parms included the following:

root=/dev/disk/by-id/ccw-IBMetc

Naturally, the id of the new DASD device is not the same as the
original, and the server refuses to boot. If I boot the server from
its
original home, is there a way to change the root= parm to be something
rather less specific so that it will then boot in its new home?


We wrote a tool to do this:

http://download.sinenomine.net/sane-dasd-update/

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Download directly to z/Linux server ?

2009-07-09 Thread Adam Thornton

On Jul 9, 2009, at 2:55 PM, Lionel Dyck wrote:




In an effort to save time and reduce overall network traffic I would
like
to be able to download SLES ISO files from Novell from my Linux on z
server
rather than downloading them to my pc and then uploading them to z.

I've looked, without success, for information on how to do this (I
may have
not used the right keywords).

My thought is that I need to use a X server on my windows pc to
connect to
the z server and then open a web browser on the z to connect to Novell
where I'd sign in and then download.

Can anyone point me in the right direction?


Wget?  You can pass credentials to wget, I'm pretty sure.  Or use a
text-mode browser like w3m.  As long as the Novell site doesn't
require javascript you should be OK.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Unable to logon to Linux under VM

2009-06-24 Thread Adam Thornton

On Jun 24, 2009, at 6:54 AM, Vincent Getgood wrote:


Hi all

It looks like I have a firewall problem on the linux guest.  I've
checked with my N/W team, who tell me the SSH port is open on all
firewalls between me and the mainframe.

However, when I try to SSH in, I see the following messages on the VM
guest console: -



sfw2-inext-drop-deflt in eth0 out mac ...  etc



Which seems to suggest that suse firewall is blocking SSH.



I can't logon to disable the firewall, so I think I'm stuck.


Can you log in on the console?

Do that and

service SuSEFirewall2 stop

(I may have the name or capitalization of the firewall service wrong,
but it's something close to that)

Then you should be able to ssh in and fix stuff.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Unable to logon to Linux under VM

2009-06-24 Thread Adam Thornton

On Jun 24, 2009, at 9:35 AM, Mauro Souza wrote:


Adam,

In this case he needs to log via ssh to fix a configuration issue
preventing
him from logging from console...


Whoops.  I missed that.

Hmmm.  Maybe the SuSE installation left VNC open?  I doubt it, but you
could run nmap against it from another host and see what it's
listening on

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: To SHARE or NOT ... that is the question(2)

2009-06-22 Thread Adam Thornton

On Jun 22, 2009, at 9:27 AM, David Boyes wrote:


How about Linux guests that have file systems stored on FCP attached
SCSI devices, can they be shared r/o with other Linux guests? My
understanding is that, no, they can not be shared. Am I mistaken?


I suspect that you would still need some kind of cluster file system
(eg, Lustre, GFS, OCFS, etc) to make that safe.


To amplify David's response: I think it works like other kinds of
DASD: if *everyone* has it read-only, that's OK.  If *anyone* has it
read-write at the same time that anyone else has either a read-only or
read-write link to it, then you need some sort of cluster-aware
filesystem to share it correctly.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Oracle Enterprise Manager

2009-06-17 Thread Adam Thornton

On Jun 17, 2009, at 12:25 PM, Kern, Thomas wrote:

Is it reasonable for a Management agent to use 1.5% (or more) of the
system CPU in each server?


No, it's not reasonable.

But it's also, alas, not uncommon.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: shutdown/reboot question

2009-06-17 Thread Adam Thornton

On Jun 17, 2009, at 2:31 PM, Sue Sivets wrote:


Is there any way to give a user the ability to shutdown and reboot a
Suse z/linux system without giving him the root password?  In simple
terms, one of my users is asking for the root password so he can
reboot
the machine when he needs to because the project he's working on has
crashed and generally caused a lot of problems. I found a couple of
notes from 2007 that were about a shutdown userid on a Redhat system.
Will something like that work on a Suse10 system, or is there a better
way of accomplishing what I need? If it will work, can someone tell me
what I need to do in order to make it work?

I was thinking about using SU, but as far as I know, he would still
need
the root password, and then I'm back where I started. Is there a way
to
give him some kind of alternate root password  that doesn't open up
the
whole  ball of wax?

If anyone has any other ideas, I would really like to hear them. I
really don't want to give out the root password if I can avoid it.


The sudo command is built for situations like yours.  Create an /etc/
sudoers file that allows use of /sbin/reboot and /sbin/shutdown (if
that's where they in fact are) for certain users.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: LCS problem Installing SLES 11 in partition ( more)

2009-06-17 Thread Adam Thornton

On Jun 17, 2009, at 2:10 PM, Mark Post wrote:


Mike,

I just booted up the SLES11 installation stuff on my Hercules
system.  Here's my parmfile and hercules.cnf:
ramdisk_size=65536 root=/dev/ram1 ro init=/linuxrc TERM=dumb
conmode=3270
insmod=fs3270



...


PGMPRDOSLICENSED


Surely this is not required.  Please, tell me it's not required.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: LCS problem Installing SLES 11 in partition ( more)

2009-06-17 Thread Adam Thornton

On Jun 17, 2009, at 3:20 PM, Mark Post wrote:


On 6/17/2009 at  3:55 PM, Adam Thornton
athorn...@sinenomine.net wrote:

-snip-

PGMPRDOSLICENSED


Surely this is not required.  Please, tell me it's not required.


To my knowledge it is not required by anything to do with Linux.


That is what I believed until I saw it in your config.  If it's just
in there because the config started life with it already in place,
then yay.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: To kick or to clone ... that is the question

2009-06-10 Thread Adam Thornton

On Jun 10, 2009, at 1:21 PM, David Boyes wrote:


So you get the 5 minutes down to what?  3-4?


A little under 2, actually. Most of which is spent writing like
crazy to disk.

I've also been tinkering with the idea of creating the disk image in
storage and then writing a utility to write it out using full track
writes. I don't know if it would actually be any better than DDR (or
hey, write the input to the pipeable version of DDR...hmm), but it
seemed like it would be interesting to try.


You could also use the (undocumented, but stable since 5.1 so probably
not going anywhere in the near term) ECKDREST pipe stage used for
installation (there's a corresponding FBA version too).  It's on MAINT
22CC or 2CC; the Install Quick Guide says which.  The format of the
input is pretty trivially determinable by examining the part files on
the z/VM installation DVD.

This is kinda what I wanted to do for NOVSTART at one point, but I
never got around to actually *doing* it.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: line printer question

2009-06-03 Thread Adam Thornton

On Jun 3, 2009, at 12:12 PM, Alan Altmark wrote:

tres fabu


Someone should tell Chucky that the bill is probably not going to pass
the New York Senate.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Linux Boot Verification

2009-06-01 Thread Adam Thornton

On Jun 1, 2009, at 3:07 PM, Lionel B Dyck wrote:



If you don't have anything like that you might check out big brother
from
http://www.bb4.org/ - i've not used it with z/Linux but it should
work. We
used it for monitoring a number of messaging servers running various
flavors of linux and unix.


Nagios also works well, and the plugin scripts are very easy to create.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: DB2 on z/VM SuSE 10.2 box sizing - starter values ?

2009-05-19 Thread Adam Thornton

Way too much V STOR on each of your guests.

Try reducing it substantially and backing with prioritized swap-on-
vdisk after measuring actual memory requirements.

*IF* your migration sources are actually using all that memory for
something other than cache, you're going to have a painful migration.
The good news is, they probably aren't (but of course I can only argue
that historically, as I have no knowledge of your actual workload).

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: DB2 on z/VM SuSE 10.2 box sizing - starter values ?

2009-05-19 Thread Adam Thornton

On May 19, 2009, at 2:11 PM, bruce.light...@its.ms.gov wrote:


Bear with me while I'm learning, please.
you say to reduce the real for my virtual machine from 246900k and
the swap
from 3G ?  My DB2 is already complaining that there is not enough
memory to
allocate any bufferpools - so I would have guessed growing the real
to 1G.

Maybe you were looking at the LPAR allocation for z/VM  where the
sysprog
gave VM 9G of cstor and 3G of estor ?


I was looking at 2 and 3, which are large, and I mentally inserted
another 0 on the main stor of the first one.

250M is probably kind of tight, actually; I was reading as 2.5GB.  My
mistake; thanks for the correction.

256-512MB usually seem like good starting points to me, but some loads
really do require more.  Start #2 at 512MB and see where that takes
you.  If you need more, you need more.

No need to reduce swap, as long as you have page space to cover it.
Although I'd do a smallish higher-priority space for normal heavy
load conditions, and a larger one for extraordinary load conditions.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Stateless Linux for zSeries

2009-05-13 Thread Adam Thornton

On May 13, 2009, at 2:16 PM, Alan Ackerman wrote:


Someone here says we should not do Linux on zSeries because you
cannot do
stateless computing on zSeries. Of course, the first question is

What the heck is stateless computing?

I found some links:

Stateless Linux at http://fedoraproject.org/wiki/StatelessLinux.

Linux on IBM eServer zSeries and S/390: Large Scale Linux Deployment
SG24-6824-00 at http://www.redbooks.ibm.com/abstracts/sg246824.html?Open
.

It is from 2002, though. Is there a more recent version?

Has anyone had any experience with building a stateless Linux on
zSeries?

Any words of wisdom?


Um, yeah.

This is really much easier to do with zLinux than with discrete
versions.  There's been a whole lot done on highly-shared
installations, including things like putting the IPLable kernel in a
shareable saved segment.

No, the Fedora implementation of stateless Linux isn't zSeries, but
it's not like it's either a new idea or a particularly difficult one.
It can be tedious and tricky to get right, but you can realize
significant space and management savings once you've gotten there.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: HCPLNM091

2009-04-30 Thread Adam Thornton

On Apr 30, 2009, at 1:11 PM, James Chappell wrote:


z/VM is at 5.4.


Error 91 from CP DEFINE VFB-512 AS 301 BLK 1048576:
HCPLNM091E DASD 0301 not defined; vdisk space not avilable


You could try tossing a trace i at the top of SWAPGEN and making sure
it's actually failing on the DEFINE, but I sure can't think of
anything else that would be giving you those symptoms.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: VMUR receiving text files

2009-04-30 Thread Adam Thornton

On Apr 30, 2009, at 1:31 PM, Jonathan Bradbury wrote:


Has anyone had any luck being able to read text files from the
reader using
VMUR?  I have sent a F80 text file and am not able to view the
received text
file, there is always some form of header attached either the
NETDATA or the
old style header depending on how I did the sendfile.  Is there a
simpler
solution than writing a perl script to read in the netdata headers
and then
print the file out?
Thanks!


I think PUN (NOH probably will do the trick.

There's a netdata parser in the BSD-licensed ancient NJE code (the
basis for what the NJE IP Bridge is based on, but really really
ancient), and I wrote one in Perl a few years ago for SMTPPLUS, which
is probably still kicking around somewhere, so you don't HAVE to write
your own netdata parser/packer.

It's not very hard to do though.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Dumping Flex disks prior to migration

2009-04-16 Thread Adam Thornton

So, as with many people, my dongle is running out soon.  I have
several VM systems.

So I'm dumping all my disks to AWS-format emulated tape files, in the
hope that someday down the road I will be able to restore them to
something else.  I chose awstape rather than faketape because of its
better interoperability (e.g. PIPE DEBLOCK AWSTAPE).

To do this in an automated fashion, I've written a Rexx script to walk
through my DASD, define spanning MDISKs, and do a DDR dump.  Yes, I'm
going to have to go back with standalone DDR and do my sysresses and
do spxtape to get my spool, but this gives me a decent first cut of
everything else (which is, to be frank, mostly logged-off Linux guests).

The script relies on the fsihost command to send commands to the Linux
host and receive replies, and on a couple helper scripts on the Linux
side.  These enable me to create new awstape volumes as I go, and to
gzip them once done (since I don't have disk for 160 mod-3s unless I
compress them; most of them are compressing pretty well).

If there is interest, I can either email these things out to people,
or (perhaps more usefully) put them up on our website.  As written
it's pretty specific to my system (that is, I assume all the DASD is
in a contiguous range and you can just specify the start and end
volumes, and I assume that tapes are in /faketape, and that you want
them named devno.aws), but it's fairly easy to change if you know
even a little Rexx and shell scripting.

Is there interest?

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Dumping Flex disks prior to migration

2009-04-16 Thread Adam Thornton

Well, I've gotten two responses, so that's a mandate.

http://download.sinenomine.net/flex-dumper/

All files are ASCII text.  This is definitely *not* production-ready
code: it is undocumented, and decidedly not designed for flexibility
or general applicability.  It is a quick and dirty hack that works for
me, and that's all I will claim for it.  Adapt it to your needs.  Test
carefully before deploying.  No warranty expressed or implied.  These
files are in the public domain.  Talk to your Flex-ES reseller to get
a copy of the FSIHOST command, without which this will not work
(although it can easily be adapted to a P/390-or-IS-or-Multiprise-
based system, since that was what I adapted it *from* in the first
place).

Read the README first.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Active Directory Use from MediaWiki

2009-04-13 Thread Adam Thornton

On Apr 13, 2009, at 10:34 AM, Klein, Robert (NIH/CIT) [C] wrote:


We are in the process of setting up a wiki service for our
organization using MediaWiki.  It is important that we be able to
authenticate via Active Directory rather than users have to set up
separate ids on the wikis.  There is a product, Plexcel, which does
this integration for x86 Linux, but it is not available for zLinux.
The company has no plans to port to zLinux unless there is a zLinux
simulator that can run on x86_64 or i386.  My questions are:
*   (1) does anyone know of such a simulator?
*   (2) failing that, does anyone know of a comparable product
to Plexcel that runs on zLinux;
*   (3) failing that, is there a product which provides similar
integration with an LDAP server?
Thanks.


1) Yes, but you don't want to go there
2-3) As long as PHP is built with LDAP support, I think you should be
able to do LDAP auth over TLS/SSL to your AD controller and have it
work fine.

Take a look at: 
http://www.mediawiki.org/wiki/Extension:LDAP_Authentication/AD_Configuration_Examples

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: error IPLing SLES11 instalation image

2009-04-07 Thread Adam Thornton

On Apr 7, 2009, at 12:51 PM, Daniel Vila wrote:



Hi everyone, I'm trying to start the SLES11 instalation under 5.3
ZVM but load process is interrupted after a
panic kernel message (SLES10 worked without problems using the same
ZVM)

Any ideas to find a fix?


Your initramfs is corrupt.

Re-download it; make sure it's BIN FIX 80.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Solaris v. Linux

2009-03-27 Thread Adam Thornton

On Mar 27, 2009, at 9:22 AM, Erik N Johnson wrote:


What's really great about this is that for a z/Linux
farm you can easily use 9p to create a single virtual host whch has a
/mnt all full of:
/mnt
   /host1/proc
   /host2/proc
   ...
   /hostN/proc

then a perl (or shell or python) script ( or ANY filesystem-aware
program, which is pretty open-ended) can easily do:

foreach host in hosts {
   displayRelevantInfo( /mnt/host/proc);
}



That's really cool.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Solaris v. Linux

2009-03-26 Thread Adam Thornton

On Mar 26, 2009, at 1:13 PM, Jeff Savit wrote:


We deliberately don't break compatibility in the
long-term-support version of the OS, as that would be a Bad Thing for
our customers who count on tools to work the way they did even if a
newer and even better (but not strictly compatible) replacement is
available.


Hence Solaris non-POSIX /bin/sh.

Pardon me while I go vomit in this corner here.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Solaris v. Linux

2009-03-25 Thread Adam Thornton

On Mar 25, 2009, at 2:43 PM, Mark Post wrote:



Why?  Almost every Linux distribution has made exceptions to their
own rules.  Just look at Java.  Up until recently, it was not open
source, but it gets included anyway.  As far as Slack/390 goes, that
was my project, and although I didn't like the situation at the
time, I wasn't going to have a philosophical meltdown over it. If it
hadn't been for the cooperation IBM received, the open source
proponents inside of IBM would never have gotten the code released.
Sometimes compromise and patience win in the end.  It certainly did
this time.


Almost.

I find Debian's insistence on license purity admirable from one
standpoint, but irritating from several others.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Solaris v. Linux

2009-03-25 Thread Adam Thornton

I may have been misunderstood.

It peeves me that my web browser has to be called Iceweasel, but
almost all of my internal infrastructure is running Debian.  That's
because maintenance and updates and local configuration-without-having-
it-clobbered-by-an-upgrade all works *so* much more easily there than
under the, ah, more-accepted-as-Enterprise Linuxes.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Windows an linux under z/VM

2009-03-23 Thread Adam Thornton

On Mar 23, 2009, at 2:59 PM, Richard J Moore wrote:


Not a chance unless:

1) there's a Z port of WIndows, which I doubt
2) there's an Intel emulator that runs under Z. Not heard of one.

Richard



Bah.

#2 is old news.

http://www.fsf.net/~adam/NT-on-390-desktop.png

Back in 2002.

You *can* do it.

You just don't want to.

According to Mantissa, #1 is also happening (well, a pretty fast s390x-
based Intel emulator).

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Old IBM Mainframe - Still Useful?

2009-03-23 Thread Adam Thornton

On Mar 23, 2009, at 3:03 PM, Erik N Johnson wrote:

Microsoft doesn't know how to write software for professionals.  Their
best stuff has always been targeted at people who want their computer
as easy to use (and as functional) as a toaster oven.


Unfortunately Mac OS X does the ease of use thing a lot better.  And
it's a nice little BSD Unix under the hood.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Old IBM Mainframe - Still Useful?

2009-03-23 Thread Adam Thornton

On Mar 23, 2009, at 4:58 PM, Andrew Wiley wrote:


Okay, you've given me a lot to consider.
My first question is about Linux/390. I'm an avid linux user and I
assumed
from my experiences that the difference in underlying platforms is
handled
entirely by the kernel; userspace programs, with only a few
exceptions,
compile and operate similarly no matter the platform. The comments I'm
reading here seem to imply that this isn't the case.


They're wrong.

From a non-root-userspace perspective, mainframe Linux is Linux.
Period.


Also, I'm not sure why the Hercules emulator keeps being recommended
as an
alternative to mainframe linux. Do linux installations in LPAR's on
Hercules
perform better than existing linux virtual machines, or am I missing
something else obvious?


No.  If your goal is a Linux machine a virtualized Linux that
doesn't require processor emulation is a better use of your cycles.

If your goal is to play with a mainframe Linux, then maybe not...for
what you want to do, though, it sounds like Linux, rather than
particular-architecture Linux, is what you want.  In which case,
virtualize the native hardware.

If you can get your hands on a mainframe, some disk, a reasonably
decent network interface, and z/VM 4.4, you might find it worthwhile
to run Linux boxes under z/VM.  The last one of those is going to be
the tricky part.  4.3 would be OK, but prior to partway-through-4.2
you couldn't really do guest LANs effectively, which in turn mean that
networking your penguins becomes really much more irritating than you
want.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Access linux files from CMS

2009-03-19 Thread Adam Thornton

On Mar 19, 2009, at 9:15 AM, Dave Jones wrote:


Hi, Bernie.

Snag a copy of the EXT2 tool from here:

http://www.sinenomine.net/products/vm/ext2free

It will do exactly what you want.read *and write* Linux files in
either EXT2 or EXT3
file systems.

Have a good one.

Bernie Wu wrote:

Hi Listers, Is it possible to access linux files before we issue
the ipl 100 command to
bring up the guest ? Let me explain. We have 3 separate
environments, test, dev/qa and
prod.  Each environment uses different device addresses for the
network configuration,
0.0.a04 for test, 0.0.a64 for dev/qa and 0.0.a60 for prod. The
golden master and the
cloning process takes place in our test environment. When we move
the disks to either
dev/qa or prod, the device addresses have to change. Thus the need
to modify the
network configuration files.  Currently, we do this process
manually. I know that the
PROFILE EXEC is executed to allocate the vdisks.  Would it be
possible to execute
another rexx exec to manipulate the linux files before issuing the
ipl ? Any ideas ?


What Dave suggests will work.

What I generally do is to put a control file on a minidisk (191, if
you're using 191 A-disks instead of SFS), and have a Perl program
early in the Linux boot that uses Rick Troth's cms filesystem
utilities to read that file and rewrite the files on the Linux guest.
Then--depending on where in the boot process you are--you can either
continue or reboot to pick up the new info.

I do it this way, though, because I'm a little more comfortable doing
that sort of control-file rewriting in Perl than in Rexx.  YMMV.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: SUSE 9 on Mupltiprise 3000

2009-03-13 Thread Adam Thornton

On Mar 13, 2009, at 12:48 PM, Fridrich, John wrote:


Hey out there...

Has anyone installed SUSE 9 under z/VM 4.4 on a Multiprise 3000
(7060)???
I have the boot-strap installed and working up to the network
part... Can't ping outside the machine so I can't FTP the install
back in.
Not sure how to configure... or what network interface to use... The
7060 is an odd machine...
I've tried the emulated ethernet cards, CTC to VM's IP stack, and
directly to the BUSTECH MAN (ESCON attached LCS device) that I run
all of my IP traffic through (3270 sessions and VSE's IP stack)...
All with no luck... $...@...


I've done that many times.

Your best bet will be to define a guest LAN inside VM, tell the rest
of your network to route to the guest LAN via the VM stack, give VM an
interface on that guest LAN, and use VM's interface on the guest LAN
as your router for your Linux guests.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: SLES11

2009-02-27 Thread Adam Thornton

On Feb 27, 2009, at 2:02 PM, Ivan Warren wrote:


What does Novell have to gain by restricting which z machine SLES 11
may
run on ?

Restricting to z/Arch (no 31 bit) was already, IMHO, a bad enough
restriction.. But cutting itself from its z800/z900/z890/z990 customer
base ?

And personally, in those trouble days where a lot of businesses have
indefinitely postponed hardware upgrades, I find imposing such
arbitrary
restriction to be very counter-productive.


And although David has outlined the reasons that vendors may drop
support for backlevel hardware (or software), there are *other*
vendors from whom you can buy support for those things, if it's
important that you have commercial support.  Feel free to contact me
off-list.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: SLES11

2009-02-27 Thread Adam Thornton

On Feb 27, 2009, at 3:14 PM, Aria Bamdad wrote:


On Fri, 27 Feb 2009 15:04:55 -0600 Adam Thornton said:


And although David has outlined the reasons that vendors may drop
support for backlevel hardware (or software), there are *other*
vendors from whom you can buy support for those things, if it's
important that you have commercial support.  Feel free to contact me
off-list.

Adam


I don't think the problem here is support.  I think the release notes
say that SLES 11 does not even run on non z9/z10 machines.


Fair enough.  I was reading it as I want to stay current, but I can't
afford new hardware.

There are vendors who *will* work with you to, say, leave the original
vendor support behind, but move to a more modern codebase, on older
hardware, is the position I was trying to get across.

Which is to say, SLES 11 doesn't run on z800, but almost all of the
software that goes into SLES 11 does.


I fully understand that it is difficult an expensive to hang on to
older processors and keep on supporting them but you don't have to
keep them on maintenance agreements either.  If the z800 that you
do testing on died, you go out and get a new one for less than the
cost of a
PC.


I think you buy expensive PCs.  Either that or the used market in
z800s is REALLY cold.  What does a used z800 cost these days?

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: automatic email?

2009-02-24 Thread Adam Thornton

On Feb 24, 2009, at 8:31 AM, Eddie Chen wrote:


Adam,

 I am writing  FTP and SSH-FTP in PERL to send data out
automatic
as well... I'm  interested of take a look at your script... Thanks



Well, wrote doesn't actually mean still have access to it.  It was
at a customer site for internal data movement, and I (contractually)
couldn't keep a copy.

But the idea is just construct a new connector with Net::SMTP-new(),
set the from and to parameters appropriately, and then

smtp-data();
while () {
smtp-datasend($_);
}

smtp-dataend();

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: automatic email?

2009-02-23 Thread Adam Thornton

On Feb 23, 2009, at 8:13 PM, John McKown wrote:



Many thanks for any ideas.


I wrote a very simple MTA based on Net::SMTP in perl to do this.  It's
straightforward.  Net::SMTP makes it very, very easy, assuming you
already speak Perl.  However:

Most Linux distros let you configure an MTA to use a remote host as
its smarthost with a couple of clicks.  I would not recommend sendmail
for anything other than an emetic in this day and age, but certainly
Debian's packaging of Exim lets you set up a mailserver pointing to a
smarthost trivially, and I believe I remember that it's a single line
in postfix as well.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Size of Linux DASD under Z/VM?

2009-02-18 Thread Adam Thornton

On Feb 18, 2009, at 9:34 AM, O'Brien, David W. (NIH/CIT) [C] wrote:


Hi,

 We're new to the Linux world. Currently we have 3390 Mod-3 (2.8G)
and Mod-9s (8.4 G) defined to our Linux guests under Z/VM.

 I'm starting to get complaints that these 'partitions' are too
small and do not compare favorably with the dasd sizes available on
PC desktops. (Apples and Oranges, in my opinion.)

 What I'd like to know from the group is - What are your DASD sizes?
Are the complaints about partition sizes valid?

We have a segment of 1.8TB that could be re-configured. I've
suggested 50Gig Mod-54s but have been told that's too small.


As with everything else, it depends.

If they have applications that have large data storage requirements,
then, yes, building LVMs from many small partitions can get annoying
fast.  In that case you may want to look at FCP-attached SCSI, either
presented directly to the guest (which makes management a pain) or
given to VM and then shared to the guests as EDEV FBA (which would be
my inclination).

On the other hand, if they just want that space for their pornography
archives, then that's less urgent.  And if they just want them because
their PC has 2TB, then that's also less urgent.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Size of Linux DASD under Z/VM?

2009-02-18 Thread Adam Thornton

On Feb 18, 2009, at 10:02 AM, Stewart Thomas J wrote:


We had an IBM consultant come in and told us to never use EDEV for
Linux guests.


That's fascinating.

What were the reasons given?

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Size of Linux DASD under Z/VM?

2009-02-18 Thread Adam Thornton

On Feb 18, 2009, at 12:52 PM, Stewart Thomas J wrote:



I also had a link to the following IBM report:
http://www.vm.ibm.com/perf/reports/zvm/html/520lxd.html

Absent from this study is an evaluation of Diagnose X'250' with
emulated FBA DASD. - that was another question IBM could never
answer at the time we consulted them, basically how that might speed
up the overhead of using an EDEV. Or even what versions of z/VM and
Linux would support that.


All of them *should* support that.  Diag250 doesn't care if it's FBA
or ECKD.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Why does one need to mkinitrd/zipl ? (WAS : Broken logical volume group)

2009-02-18 Thread Adam Thornton

On Feb 18, 2009, at 4:30 PM, Ivan Warren wrote:


Basically, the requirement for an initrd was generated by
'distributed'
systems.. Where you can stick in brand XXX variant ZZZ HBA.. but on
IBM
System z.. you can't do that ! And even more... Even if you were
allowed
to, it would have to follow either the Principle of Operations/OEMI
channel specs/3990 CU specs or QDIO SCSI.. basically.. you have 3
drivers ! (ok.. FBA, CKD, ECKD, and FCP SCSI.. But that's still 3
since
basic CKD isn't even supported!)


Or diag250.

Sure, doesn't work on the metal.  Nevertheless.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Why does one need to mkinitrd/zipl ? (WAS : Broken logical volume group)

2009-02-18 Thread Adam Thornton

On Feb 18, 2009, at 9:36 PM, Ivan Warren wrote:


Now about Diag 250.. What's the gain ?


a) tons easier for the device driver writers.  Take a look at the disk
driver in OpenSolaris/z to see why I care.


Now.. Simplicity ? Device independence ? well, to support LPAR, you're
going to have to deal with CCWs and device geometry anyway.


Yeah, but from my (non-Hercules, anyway) perspective, I don't really
care about LPAR.  The business case for running z/Linux in an LPAR is
a very hard one to make.

Now, it *is* nice if it works under Hercules because that opens up the
development community to an order of magnitude more people.  This is
the cause of my apparent schizophrenia whereby I'm strongly suggesting
that it would be neat if Hercules learned to do the (now fully
documented) DIAGs that OpenSolaris requires and exploits.


The *only* gain I see is being able to leverage CP I/O Error Recovery
Procedures - and logging (which you get on minidisks.. anyway ! even
if
issuing I/O to Minidisks with SSCH).


But, again, it makes writing the device driver a LOT easier.  No need
to screw around with error recovery in the driver--if it came back
bad, you know the IO isn't going to succeed.


Of course, Adam (or anyone else), you are welcome (and encouraged) to
prove me wrong :P


Plus, it provides orthogonality between ECKD and FBA: you don't have
to care which you're dealing with.  Just pick the right blocksize and
away you go.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Migration Off Reiser

2009-02-12 Thread Adam Thornton

On Feb 12, 2009, at 9:26 AM, Jack Woehr wrote:


Scully, William P wrote:

Does anyone
know of a document which describes a well-accepted technique for
migrating a server's file systems from one format to another?


The classic one is to boot off cd and move stuff.

If you are booted to a ramdisk and have one file system (e.g., the
real
hardddrive root file system) mounted as /old and the new
filesystem mounted as /new then in the Bourne shell or bash you can do
something like:

$ cd /old; tar cf - . | (cd /new; tar xf -)


If you're on a Linux box, though, cp -a does a fine job of
preserving file permissions and symlinks and so forth and you don't
need the tar.

In general, you can just mount the new filesystem, and then do cp -ax
(stay on the same filesystem) for each one you want to copy.

The tricky part is, things like databases need to be quiesced first,
so you don't end up with inconsistent files, and you don't get a point
in time copy.  Hence the recommendation for booting from CD/to single-
user mode and doing it that way.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Nawk for SLES10 ???

2009-02-10 Thread Adam Thornton

On Feb 10, 2009, at 1:39 PM, Smith, Ann (ISD, IT) wrote:


We have customers in the process of porting an application from
Solaris
to SLES10 on zseries.
They have a korn shell script which includes the following:
export DOMAIN_NAME=`echo $1 | nawk '{print tolower($1)}'`

Is there a 'nawk' for linux ?
I see that nawk means 'new awk' but I am not familiar with the history
of awk, nawk, gawk.
Is there any compatible command for SLES10?



gawk will probably work OK.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Nawk for SLES10 ???

2009-02-10 Thread Adam Thornton

On Feb 10, 2009, at 1:58 PM, Andrej wrote:


2009/2/11 Smith, Ann (ISD, IT) ann.sm...@thehartford.com:

We have customers in the process of porting an application from
Solaris
to SLES10 on zseries.
They have a korn shell script which includes the following:
export DOMAIN_NAME=`echo $1 | nawk '{print tolower($1)}'`


The command is tolower is supported by gawk - if they just modify
the script to say awk instead of nawk it will work just fine.



Or symlink gawk to nawk.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Good editor for under the 3270 console interface

2009-01-28 Thread Adam Thornton

On Jan 28, 2009, at 2:03 PM, Tom Duerbusch wrote:


However, it is not on the rescue system.



Well, then, submit that to the vendor as a requirement.

After all, ed is the standard text editor.

http://www.gnu.org/fun/jokes/ed.msg.html

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Security question and using scp

2009-01-22 Thread Adam Thornton

On Jan 22, 2009, at 10:49 AM, Jack Woehr wrote:



The normal practice is the Unix world is to disallow ssh logins to
root ...
root users must log in under a user account and su or sudo to root.


I'd be leery of saying that is necessarily normal practice.

There's a lot of variation in the Unix world.

For instance, a lot of machines I've seen don't do this precisely
because there are no user accounts.  Just system accounts used to run
various services.  Granted, in those cases, it would probably be
better to add a support account everywhere, allow ssh to a support
account and force support to sudo, but in this day and age, you really
can't count on user accounts anymore, since almost all interaction
with systems is via network-exposed services rather than an actual
login shell.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Disable makewhatis ?

2009-01-22 Thread Adam Thornton

On Jan 22, 2009, at 11:50 AM, Bhemidhi, Ashwin wrote:


We have noticed on our 2 z/VM Linux instances makewhatis is
scheduled to run daily and weekly via CRON. Since this program is re-
building whatis database, I am guessing its ok turn it off to save
some CPU utilizations. Does anyone see a reason to keep makewhatis
running?


If you want indexed man pages, and you ever add commands, you're going
to want it.

Does makewhatis rebuild the index from scratch each time?  If not,
then there's no real harm in leaving it enabled.  If it does then you
might want to run it by hand when you add commands.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Installing a new Guest from the Starter System Closed

2009-01-22 Thread Adam Thornton

On Jan 22, 2009, at 12:00 PM, Ray Waters wrote:


Mark,

No I can't. I tried to connect to LINUXEKM (172.16.28.63) with PUTTY
and could not connect. I received connection timed out.

I could only get the LOGIN screen when I used PUTTY to 172.16.28.62
(NOVSTART). Then use SSH -X r...@172.16.28.63.

Is this a routing problem in our network?


Probably.

Specifically, you probably don't have the default route set on
LINUXEKM.  So other things on its subnet can get to it, but nothing
outside the subnet.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Security question and using scp

2009-01-22 Thread Adam Thornton

On Jan 22, 2009, at 6:38 PM, John Summerfield wrote:


Larry Ploetz wrote:

Scott Rohling wrote:


If I must configure bind, maybe I need a text editor. If I can use a
text editor maybe I can edit /etc/sudoers

I said that


That's what sudoedit (not visudoers!) is for.


The point is that I can actually use any editor I like, so long as I
get
it right. I have actually used at least one of ed, ex and sed, I
edit it
in my kickstart %post section.


Well, yeah, but you should do that by setting your EDITOR environment
variable and running visudo (or, I guess, sudoedit), which, despite
the name, does respect the value of $EDITOR.  It also does all the
appropriate locking and atomic updating to ensure that the file is
safely editing, which just smacking a text editor onto /etc/sudoers
doesn't.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Installing a new Guest from the Starter System

2009-01-21 Thread Adam Thornton

On Jan 21, 2009, at 9:27 AM, Ray Waters wrote:


I have the Starter System built (NOVSTART) and can logon to it via
putty @ 172.16.28.62.

Yesterday I brought up NOVSTART(172.16.28.62) and my new LINUX guest
named LINUXEKM (172.16.28.63), ran SLES exec, and was able to
connect via ssh -X r...@172.16.28.63mailto:r...@172.16.28.63 from
NOVSTART. It was too late in the day to start the configuration via
Yast, so I logged out of LINUXEKM then logged out of NOVSTART.

Today I tried to start again and brought up NOVSTART, brought up
LINUXEKM, ran thru SLES exec as before with no problems. But when I
try to connect to the new guest via ssh -X 
r...@172.16.28.63mailto:r...@172.16.28.63
 so I can configure, I get errors today. Yesterday it worked fine.
How do I fix this? There is no attack.


novstart:~ # ssh -X r...@172.16.28.63
@@@
@WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle
attack)!
It is also possible that the DSA host key has just been changed.
The fingerprint for the DSA key sent by the remote host is
18:0d:e9:12:5b:f7:85:30:28:6c:f5:60:ab:b6:05:92.
Please contact your system administrator.
Add correct host key in /root/.ssh/known_hosts to get rid of this
message.
Offending key in /root/.ssh/known_hosts:4
DSA host key for 172.16.28.63 has changed and you have requested
strict checking.
Host key verification failed.
novstart:~ #


If all you want to do is log in, delete line 4 of /root/.ssh/
known_hosts.

But it would probably be good to know WHY the host key changed.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Installing a new Guest from the Starter System

2009-01-21 Thread Adam Thornton

On Jan 21, 2009, at 9:54 AM, Ray Waters wrote:


Dave,

How do I delete Line 4 in known_hosts?


Dave's not here, man.

sed -i -e '4d' /root/.ssh/known_hosts

would do the trick.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Installing a new Guest from the Starter System

2009-01-21 Thread Adam Thornton

On Jan 21, 2009, at 10:26 AM, Mark Post wrote:


On 1/21/2009 at 11:05 AM, Adam Thornton
athorn...@sinenomine.net wrote:

-snip-

sed -i -e '4d' /root/.ssh/known_hosts

would do the trick.


I don't think that's going to work very well with PuTTY on a Windows
desktop.


Wasn't he sshing from novstart?

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Security question and using scp

2009-01-19 Thread Adam Thornton

On Jan 19, 2009, at 4:05 PM, Rob van der Heij wrote:


I have heard that suggestion before, and it appears to come from those
who never tried it. I recall that several things get messy when you
don't maintain a 1-to-1 mapping of names and uid 0. IIRC the reverse
mapping goes through the nscd cache and the result will change color
depending on who is looking. The most scary one is seeing yourself as
the owner of the file although you never created it. It also breaks
stuff that tests for root, and deity knows what.


Well, one obvious lesson here is: Don't ever use nscd because it is
malicious and evil and sucks and lurks under your chair at the movies
and steals your popcorn and gets it all slimy.  Oooh, we hates it.
We hates it forever.  I remember hearing that in some LDAP
environments, nscd really *does* help, but it's caused me much more
harm than it's ever done good.  YMMV.

I have never tried giving out multiple uid 0 users, and the idea makes
me twitchy.  But on the other hand, on many occasions I've had a
second uid 0 user, named toor, who had a SANE login shell.

I have seen horrifically written software that checks to see if it's
being run by root rather than by uid 0.  But then, I've seen things
you people wouldn't believe.  Attack ships on fire off the shoulder of
Orion.  C-beams glittering in the dark near the Tannhauser gate.

Um.

It's really, really not Friday yet, is it?

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: HiperSocket Performance

2009-01-15 Thread Adam Thornton

On Jan 15, 2009, at 8:40 AM, Rakoczy, Dave wrote:


I've spent the past few days scouring these archives looking for what
others have done.  I found a few threads that addressed HiperSocket
throughput speeds between zOS and zLinux, but were using FTP as the
benchmark utility.  I have a window this weekend where I can put in a
I/O Gen change for the Maximum Frame Size on the HiperSocket channel
define (hopefully I'm on the right track here).

So, the question I'm posing is : If you are using HiperSockets to
support FDR/Upstream, in your experience where did you find the
performance throughput sweet spot?


What does FDR/Upstream use as a tape block size?  Most of the backup
software I'm familiar with uses 32k or 64k chunks, so if you can set
your frame size to match, that's probably ideal (assuming that much or
most of your Hipersocket traffic *is* backup blocks).

If your traffic is dominated by bulk transfers (like backup blocks)
rather than interactive traffic, then the larger frame and larger MTU
the better (unless you're in a *really* memory starved environment,
but if you are this probably isn't going to be your first
bottleneck).  How long till the next-but-one window?  Try something
different this weekend, and measure it, would be my advice.  Go back
to the other one if it's worse, or try a third one, at your next
opportunity (it is unlikely, I think, to get enormously faster or
slower, presuming you're not doing silly things with MTU or frame
size; 576 byte MTUs, for instance, did make sense for interactive
traffic in the days of 2400 baud modems, but not so much now).

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: HiperSocket Performance

2009-01-15 Thread Adam Thornton

On Jan 15, 2009, at 9:35 AM, Rakoczy, Dave wrote:


zLinux assigns the MTU size according to the IQD CHPID definition.

For sake of discussion lets say I set the CHPID to a Max Frame Size of
64K, that would give me an MTU size of 56K according to the Doc.

Where can I control the size of the packets I'll send across the
interface?  In the Tape Blocksize / Record length as alluded to in the
Adam's previous note?



You can set the MTU manually with, say,

ifconfig hsi0 mtu 56000

If the guest is smart enough to set it to a reasonable default based
on the frame size that's probably what you want to do.

There are sysctl parameters you can tune to choose maximum packet read/
write sizes.  See Mark Perry's note.  If you are not memory
constrained, giving QDIO big buffers will also likely help speed
transfer speeds.

You can use the tracepath command to determine the maximum MTU size
across the whole path (which *should* be a direct-connection to your
zOS side, but probably worth verifying).

For your application, since you're using 256k tape blocks and 32k max
recls as your basic data chunk size, as large as possible is
probably the right answer for frame/MTU size...but by all means,
*measure performance* to see.  We're also making the assumption that
the backup application just constructs network transactions in whole-
block or at least whole-record sizes.  Without knowledge of the wire
protocol (which is likely not published) or tcpdumping what it's
doing, we don't really know that, and it is certainly not unheard of
for applications to try to be clever about network traffic on their
own (especially apps whose primary function is moving data across a
network quickly, like a backup client).  So it may well end up being
the case that the app is performing a misguided optimization (for your
case--that is, FDR/Upstream may use behavior that is in fact the right
behavior for the majority of their customers but is wrong for your
situation) that nullifies the effects of moving the frame size up, and
you won't see a benefit.

We really don't know what relation the tape block and record size has
to the wire protocol.  I, at least, am just guessing based on how I'd
design it: I've never looked that deeply into exactly HOW FDR/Upstream
moves its data around.

I feel like Bill Bitner: I must say, it depends.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Encryption on a 7060

2009-01-13 Thread Adam Thornton

On Jan 13, 2009, at 12:16 PM, Mark Post wrote:


On 1/13/2009 at  1:00 PM, David L. Craig d...@radix.net wrote:

I curate a museum which includes a uni-CP Multiprise 3000

-snip-

Do current distros still support this
platform or will I need something older, and if so, will
current encryption software work on the older distro?


SLES10 and RHEL5 are 64-bit only.  Previous versions are 31-bit or
64-bit.  The non-commercial distributions, Debian/390, Slack/390,
CentOS are mostly 31-bit.  So far as I know, they all include GPG
and OpenSSL.


Yeah.  How acceptable this will be depends, really, on the bandwidth
you need encrypted, because doing crypto on a multiprise is pretty
slow.  Something that we've had success with (depending on your
requirements) is to use an outboard x86 box, a private network, and
some iptables magic to make it transparent to everything else on the
network but do your crypto where it's cheap.

There are, of course, organizations that will provide support for non-
major distributions, and at least one that really, really likes
Debian.  Ask me offline.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Porting Cobol to Linux/390

2009-01-09 Thread Adam Thornton

On Jan 9, 2009, at 10:39 AM, David Boyes wrote:


Emacs has a nice COBOL editing mode


Happy Friday!

Open COBOL 1.0 builds fine on Debian Etch on s390.  The only
dependencies I hadn't already fetched were gmp (GNU Multiprecision
math stuff) and libdb4.4 (Berkely db stuff).

## - ##
## Test results. ##
## - ##

All 161 tests were successful.


Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Basic question

2008-12-31 Thread Adam Thornton

On Dec 31, 2008, at 11:28 AM, Smith, Ann (ISD, IT) wrote:


I need to update sudoers and don't know proper procedure.
Figured I'd ask before I mess it up. I did at least create a backup of
/etc/sudoers


visudo, usually.

Set your EDITOR environment variable (or VISUAL) to the editor you
prefer.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Updating 'by-id'

2008-12-10 Thread Adam Thornton

On Dec 10, 2008, at 2:37 PM, Tom Duerbusch wrote:


I'm trying to update a test system from using the 'by-id' to by-
path method.
Adam has an exec that nicely automates the process but I like to see
how the more legit way of doing it goes.

When I go into the partitioner and update the FSTAB Options, it
does update the /etc/fstab file.  However, it doesn't update the /
etc/zipl.conf file.

The /etc/zipl.conf file doesn't get updated with the new 'by-path'
method when I do a zipl or mkinitrd either.

So, what forces the zipl.conf file to be updated with the new access
method?  That is, without editing the file directly?


It *should* be doing itwell, a file should be created next to the
current zipl.conf that does it.  Send me the contents of your
zipl.conf and I'll take a look.  I've had a problem with my regexp not
matching all the reasonable parmlines before; this might be the same.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Updating 'by-id'

2008-12-10 Thread Adam Thornton

On Dec 10, 2008, at 4:32 PM, Tom Duerbusch wrote:


Hi Adam

I wasn't using you script, but rather Yast with mkinitrd and zipl.


Oh.

Dunno if YaST changes it.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Boot after cloning: SLES10

2008-12-09 Thread Adam Thornton

On Dec 9, 2008, at 3:21 PM, Tom Duerbusch wrote:


Adam

After reading thru the script, I'm wondering

And now I know that I shouldn't be taking the by-id as defaulted and
I should be using by-path when I setup the disk in yast

What is the difference between using the script and going back into
yast,
Expert Partitioner
Editing each logical device
select fstab options
and select device path instead of device id?

Is either method going to force a Boot, or something else different
between the two methods?


No, I think that should do just about the same thingalthough I
don't know whether YaST will also change your zipl configuration.


Or is it that the script can do all disks, which in a large Linux
image, can be quite a few and time consuming if using yast?


Well, that's pretty much why I wrote it: converting a customer each of
whose guests had like twenty disks.

Plus, I just don't like yast.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Boot after cloning: SLES10

2008-12-09 Thread Adam Thornton

On Dec 9, 2008, at 3:45 PM, Adam Thornton wrote:


Plus, I just don't like yast.


I guess I'd better explain lest I ruffle too many feathers.

YaST is fine if you're administering one guest.

It becomes less useful in an environment where you have lots of
penguins, because it is not trivially scriptable.  I like CLIs.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Boot after cloning: SLES10

2008-12-08 Thread Adam Thornton

On Dec 8, 2008, at 4:17 PM, Tom Duerbusch wrote:


I hit the same problem as others (reference back in November), but I
knew that a solution already exists..

OK, so where is it?  As in on your website?


http://download.sinenomine.net/sane-dasd-update/

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Oracle, zlinux, and virtualization

2008-12-02 Thread Adam Thornton

On Dec 2, 2008, at 3:46 PM, Pat Carroll wrote:


Call me.



You don't *look* like Debbie Harry.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: SLES 10 SP 2 - Starter Vswitch

2008-11-25 Thread Adam Thornton

On Nov 25, 2008, at 7:52 AM, Shedlock, George wrote:


Gentle Listers,

I have the SLES 10 SP2 starter system build and am attempting to
create my first guest from the starter system. I start the install
process, console log follows:



[...snip...]


Any suggestions?


How very strange.

I'm going to guess that the answer is in the MAC address
specification.  You gave it 101095.  Is it perhaps expecting colons
between the bytes?  Does it want you to specify all six bytes, even
though the first three are defined by CP?

I don't remember, and I don't have a Layer 2 guest LAN/VSWITCH handy
to test on right now.  Does anyone remember off-hand?

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Some observations regarding admining rhel v. sles on Z

2008-11-24 Thread Adam Thornton

On Nov 24, 2008, at 10:53 AM, Patrick Spinler wrote:



 +) It automagically pulls the current list of activated DASD channel
numbers, and includes those in the ramdisk image it builds for
activation at next IPL.  No forgetting to edit /etc/modules.conf when
extending a machine with more DASD.

 +) It automagically builds a initrd for every installed kernel in
/boot, unless given just a specific kernel by command line options.
Not
having mandatory options for mkinitrd is sweet.


This is also a PITA if you're, for instance, attempting to add diag
support to an existing disk.  I find its helpfulness pretty irritating
as soon as I want to do anything more complicated than adding or
removing disks.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Cannot IPL zVM

2008-11-12 Thread Adam Thornton

If z/VM doesn't IPL, you don't waste your time on the Linux/390 list.
You call IBM support with a Sev 1 and get your machine breathing again.

Once you have z/VM running, *then* you come to the list for help
getting your penguins back safe and sound.

At least, that's my advice.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: How to virtualize Windows under SLES Linux on zSeries - PJBR

2008-11-11 Thread Adam Thornton

On Nov 11, 2008, at 11:15 AM, David Boyes wrote:


On 11/11/08 11:57 AM, Alan Altmark [EMAIL PROTECTED] wrote:


I keep
waiting for an operating system written in Java with a
byte-code-interpreting CPU!


Well, there is the p-system OS. Not the IBM P, and not written in
Java, but
very platform independent, and there were systems manufactured that
ran
P-code natively (LSI11, etc). A Java-based pcode interpreter does
exist,
which would get you a pretty decent system fairly quickly.

Now, there is a company that makes a system with Java enabled
coprocessing
facilities that *might* be made to do this with a little thought,
but... 8-)


http://www.jnode.org/ for the Java OS.

Combine with JOP:

http://www.jopdesign.com/

(not currently responding, but the Google Cache is there)

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: mail attachment problems to Outlook

2008-11-10 Thread Adam Thornton

On Nov 10, 2008, at 3:43 PM, Bernard Wu wrote:


Hi List,

From a Linux guest, when I send an email and a file as an
attachment to MS

Outlook, the attachment is displayed as part of the message body.
How can I send it so that Outlook receives it as an attached file
and not
embedded as part of the message body ?
The syntax that I use is :

uuencode filename.rpt filename.csv | mail -s Test  [EMAIL PROTECTED]

TIA
Bernie Wu


I'd use Perl and MIME::Lite.

http://www.akadia.com/services/email_attachments_using_perl.html

Has a tutorial.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: OpenSolaris for System z IPL

2008-11-04 Thread Adam Thornton

On Nov 4, 2008, at 2:53 PM, Livio Sousa wrote:



The RSU level is not uptodate, do you believe that this can be the
problem?
Any another idea?


This is a z9 or z10?  If not, you're going to have the same result.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: SSH on SuSE 10 SP1 problem

2008-10-31 Thread Adam Thornton

On Oct 31, 2008, at 8:40 AM, Stahr, Lea wrote:


I cannot start SSH on my cloned SuSE 10 SP1 system under zVM.  It does
not start at boot time, but gives the error



cipher_encrypt: bad plaintext length 337



brksvl01:/usr/bin # ssh-keygen -t rsa -N  -q -f ssh_host_rsa_key


That's probably supposed to be dash-capital-N-singlequote-singlequote

and you're typing a doublequote.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: problems when running mksles9root.sh for SP4

2008-10-28 Thread Adam Thornton

On Oct 28, 2008, at 10:07 AM, Bernard Wu wrote:


OK.  Looks like something is wrong with the devices.  I tried it
manually
and this is what I got :

# mount -o loop,ro SLES-9-SP4-CD-s390x-RC7-CD3.iso sles9xsp4root/sp4/
CD3
mount: could not find any free loop device


Maximum of 8 loop devices.

Easy to fix.

Add options loop max_loop=64 (or up to 255, I think) in /etc/
modules.conf.

You will need to rmmod and then modprobe loop again, so it may be
simpler just to reboot.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Crytographic processors

2008-10-24 Thread Adam Thornton

On Oct 24, 2008, at 11:51 AM, Mark Post wrote:


On 10/23/2008 at  4:01 PM, in message

[EMAIL PROTECTED], Bjoern A. Zeeb
[EMAIL PROTECTED] wrote:
-snip-

I remember that the linux support once came as an object file and not
in source code. I guess that is still true?


No, it is open source.  I'm not aware of any hardware support that
is otherwise.


It was the case for QDIO for a while.  Not anymore, though.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: DIRMAINT necessary with RACFVM?

2008-10-13 Thread Adam Thornton

On Oct 13, 2008, at 9:10 AM, Dave Jones wrote:


Hi, John...

While DIRMAINT does provide some features of an ESM (expiring
passwords, password
checking, etc.), being a security manager is not its main reason for
being. In the z/VM
environment, RACF (and other 3rd party vendor products like ACF2)
provide the ESM
functionality needed, while DIRMAINT concentrates on directory
management.

I would recommend that any site that is planning on deploying z/VM
in anything other than
a trivial configuration install and use a directory management
product of some sort, like
DIRMAINT. Attempting to manage the CP user directory 'by hand' can
lead to the sort of
directory errors that can be difficult to overcome (overlapping
minidisk definitions being
a prime example) Plus, DIRMAINT now has capabilities to quickly
create and clone user
ids, ideal for working with colonies of penguins.



Seconded.

DIRMAINT is easy to use for basic functionality, and it pays for
itself the first time you *don't* overwrite your guests' DASD because
you typoed the volume name or you made an arithmetic error.

But, as Dave just said: it doesn't have to be DIRMAINT per se.  It
just needs to be SOMETHING that keeps you from doing stupid things to
your directory inadvertently.  There are other ways to manage
directories, both up and down the price and ease of use scales from
DIRMAINT.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: ZFS or LVM2 on Debian?

2008-10-06 Thread Adam Thornton

ZFS is really neat, but because of its license, a kernel-mode ZFS
driver is unlikely ever to be included in a Linux distribution.  One
might make the case that the license was chosen specifically for this
reason.   FUSE (Filesystems in User Space) makes LVM quite possible on
Linux, but it does come at a speed penalty.

LVM2 is certainly well-understood and very stable.  *I* would do LVM2,
myself, at this point.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Early draft of architecture and porting guide for OpenSolaris on Z available

2008-10-01 Thread Adam Thornton

On Oct 1, 2008, at 8:59 AM, John Campbell wrote:


I dipt my fingers into the flow...

However, one jarring note:  Sirius?


Neale answered that.


I wonder if anyone will bundle it with Hercules?  Or is openSolaris
unable to run on the bare metal as yet?


It will not run on bare metal.

Hercules would need to implement DIAGS 24, 64, 210, 250, and 2A8 in
order for OpenSolaris to run.

Of those, all but 2A8 are documented.  I do not know whether IBM plans
to document 2A8, although it is available now for z/VM 5.3 as a PTF
and will be available for z/VM 5.4 later this year.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Early draft of architecture and porting guide for OpenSolaris on Z available

2008-10-01 Thread Adam Thornton

On Oct 1, 2008, at 11:10 AM, John McKown wrote:


Of those, all but 2A8 are documented.  I do not know whether IBM
plans
to document 2A8, although it is available now for z/VM 5.3 as a PTF
and will be available for z/VM 5.4 later this year.

Adam


Wouldn't the use of 2A8 in OpenSolaris implicitly document what it
does?


Once the source is released, it will be evident on a close reading how
it is used in the OpenSolaris environment, yes.

However, no one has done QDIO for Hercules either, although the QDIO
Linux network drivers have been open-sourced for quite some time now.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Sharing data between z/OS and Linux on z/Series

2008-09-26 Thread Adam Thornton

On Sep 26, 2008, at 4:53 PM, Alan Altmark wrote:

No security, no auditability, no accountability.  (shudder)


Sounds just perfect for today's financial industry.

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Sharing data between z/OS and Linux on z/Series

2008-09-26 Thread Adam Thornton

On Sep 26, 2008, at 4:57 PM, Adam Thornton wrote:


On Sep 26, 2008, at 4:53 PM, Alan Altmark wrote:

No security, no auditability, no accountability.  (shudder)


Sounds just perfect for today's financial industry.


Fun Friday fact!

The Dept of the Treasury says that a dollar bill is .0043 inches thick.

So if you made a stack of 700 billion of them, you'd have a belt
47,506 miles long, which would wrap around the earth at its equator
almost twice!

Adam

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


  1   2   3   4   5   6   7   8   9   10   >