zLinux 3270 console and “tab completion”

2022-11-14 Thread Donald Russell
One feature I miss when using the 3215 or 3270 console is tab completion.

Obviously it can’t work the same way as with an xterm type device, but in
the case of 3270 support could we have it use a PF key to simulate pressing
tab and wanting tab completion to kick in? (Just as PF3 switches views, PF6
could have specific a purpose too. )I imagine it working something like…
when processing the PF6 AID key, it parses the input as if “enter” were
pressed, then append a tab character to that string, then click the newly
modified string makes its way to the application.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390


Re: zLinux 3270 console support

2022-11-14 Thread Donald Russell
Yeah, I was wondering about the termcap et al databases too.  So yes it’s
fine that TERM=linux is usable with 3270. It was just an observation

I haven’t tried the dial thing yet, that one’s not as interesting to me as
the console after a logon by… I may tinker with that “just for fun”


On Mon, Nov 14, 2022 at 10:35 Rick Troth  wrote:

> There's a standard for ASCII based screen terminals: *X3.64* developed
> circa 1980.
> TERM values like "vt220" and "xterm" trigger curses/termcap/terminfo
> behaviors which speak that protocol.
> But there are countless (ASCII) terminals, such as the DEC VT52, which
> speak their own protocol and not this standard.
>
> DEC made a good guess when they produced the VT100. It was the first
> widely used physical terminal which spoke ANSI X3.64.
>
> Remember: Linux is an ASCII system, so even when you've got a 3270 (real
> or emulated), Linux thinks it's talking to an ASCII screen. The driver
> nicely maps X3.64 escape sequences, translating them into roughly
> equivalent 3270 data streams. Now ... as I recall, UTS donated their
> 3270 driver to Linux, so we *could* talk direct 3270 data streams. But
> the applications would need to know about the alternate interface. UTS
> *did not* donate their slick 'ned' editor, operationally similar to
> XEDIT and which can drive 3270s directly.
>
> Linux on a PC does the same mapping of X3.64 protocol. In that case, of
> course, the user end is the text mode raster of your hardware. But the
> PC itself doesn't know anything about escape sequences or ASCII (or
> EBCDIC).
>
> "ibm3278" and "ibm3279" don't have meaning in the ASCII/Linux/Unix world.
> It's not some sort of allergy, nor an aversion; it's just that nobody
> ever defined terminfo/termcap/curses database files for those entries.
> But they're not really needed because you get the same effect from
> (e.g.) vt220 and several others.
>
> On z/VM, you can also 'vmcp def graf' and have DIALable 3270 screens.
>
> -- R; <><
>
>
> On 11/14/22 12:44, Donald Russell wrote:
> > That’s great.  I don’t know why the code was written to act differently
> > when running on vm, but it sounds like using the query partition in all
> > cases simplifies the code and makes it more generally useable.
> >
> > The IBM doc that describes this talked about using TERM=linux and you
> just
> > mentioned TERM=ansi.
> >
> > Other common types are vt220 and others, so I was curious why the TERM
> > value wouldn’t be something like ibm3278 or ibm3279.
> >
> > I used “linux” and the colors worked as expected, though I don’t use
> many.
> > I use tput to get the color escape codes to use in the text strings in
> bash
> > strings and the PSx prompts.
> >
> > As for handling geometry changes due to vm cp disconnect/reconnect…
> > Obviously it would be best if the kernel detected that, but if I have to
> do
> > something like echo 1 > /dev3270/tty1/query_partition
> > That would be acceptable because I already have a process in Linux that
> > starts a 3270/tty when reconnecting…. Maybe that’s where the code needs
> to
> > be… when starting the Getty, read partition, that works for me because I
> > also stop the Getty on a CP disconnect event.
> >
> > If you’re open to making changes, I’m open to testing them. (On rhel, I
> > don’t have SUSE or uduntu)
> >
> > I have a couple of other suggestions but this is the most important to
> me.
> >
> > Cheers,
> > Don
> >
> > On Sun, Nov 13, 2022 at 23:21 Sven Schnelle  wrote:
> >
> >> Hi Donald,
> >>
> >> Donald Russell  writes:
> >>
> >>> This Message Is From an Untrusted Sender
> >>> You have not previously corresponded with this sender.
> >>>
> >>> Thanks Sven,
> >>>
> >>> Where do I find the source code? Maybe I can contribute to a
> >>> solution. 
> >> It's in the linux kernel source, file drivers/s390/char/raw3270.c, line
> >> 580:
> >>
> >>
> >>
> https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/drivers/s390/char/raw3270.c?h=v6.1-rc5#n580
> >>
> >> As a quick test i changed:
> >>
> >>  } else if (MACHINE_IS_VM) {
> >>  raw3270_size_device_vm(rp);
> >>  raw3270_size_device_done(rp);
> >>  } else
> >>  raw3270_writesf_readpart(rp);
> >>
> >> to:
> >>  } else if (0 && MACHINE_IS_VM) {
> >>  raw32

Re: zLinux 3270 console support

2022-11-14 Thread Donald Russell
That’s great.  I don’t know why the code was written to act differently
when running on vm, but it sounds like using the query partition in all
cases simplifies the code and makes it more generally useable.

The IBM doc that describes this talked about using TERM=linux and you just
mentioned TERM=ansi.

Other common types are vt220 and others, so I was curious why the TERM
value wouldn’t be something like ibm3278 or ibm3279.

I used “linux” and the colors worked as expected, though I don’t use many.
I use tput to get the color escape codes to use in the text strings in bash
strings and the PSx prompts.

As for handling geometry changes due to vm cp disconnect/reconnect…
Obviously it would be best if the kernel detected that, but if I have to do
something like echo 1 > /dev3270/tty1/query_partition
That would be acceptable because I already have a process in Linux that
starts a 3270/tty when reconnecting…. Maybe that’s where the code needs to
be… when starting the Getty, read partition, that works for me because I
also stop the Getty on a CP disconnect event.

If you’re open to making changes, I’m open to testing them. (On rhel, I
don’t have SUSE or uduntu)

I have a couple of other suggestions but this is the most important to me.

Cheers,
Don

On Sun, Nov 13, 2022 at 23:21 Sven Schnelle  wrote:

> Hi Donald,
>
> Donald Russell  writes:
>
> > This Message Is From an Untrusted Sender
> > You have not previously corresponded with this sender.
> >
> > Thanks Sven,
> >
> > Where do I find the source code? Maybe I can contribute to a
> > solution. 
>
> It's in the linux kernel source, file drivers/s390/char/raw3270.c, line
> 580:
>
>
> https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/drivers/s390/char/raw3270.c?h=v6.1-rc5#n580
>
> As a quick test i changed:
>
> } else if (MACHINE_IS_VM) {
> raw3270_size_device_vm(rp);
> raw3270_size_device_done(rp);
> } else
> raw3270_writesf_readpart(rp);
>
> to:
> } else if (0 && MACHINE_IS_VM) {
> raw3270_size_device_vm(rp);
> raw3270_size_device_done(rp);
> } else
> raw3270_writesf_readpart(rp);
>
> so it always uses WSFQ to get the geometry.
>
> > When you changed to code to use “LPAR mode” instead of diag 120, did
> > the console work properly with different geometries?
>
> It did, but i haven't tested whether dynamic resizing works. And it's
> diag210, the 'diag 120' was a typo from me.
>
> > That’s the first problem, when the system first comes up, if the
> > screen isn’t 24X80 the wheels fall off the wagon.
> >
> > But the other problem occurs when the console is
> > disconnected/reconnected and the geometry is different. (A very likely
> > scenario as everybody has their favorite settings. I generally use 60
> > X 140)
>
> Let me try this here. I'm normally running c3270 in tmux, so i'm not
> disconnecting and reconnecting to my session. But i realize that my
> workflow is likely different compared to running production systems.
>
> > I can detect when a reconnect event happens, but there needs to be a
> > way to tell the kernel/driver “check the geometry
> > and adjust accordingly”.
> >
> > I’d like to use 3270 mode, but this is a showstopper for me. Without
> > it working for any geometry allowed by 3270 data
> > stream specification, it’s not something I want to implement. 
> >
> > Why do I want to to use it? It solves two annoying problems:
> > 1 - it supports “dark” fields so passwords are not visible (ssh to
> > another system etc)
> > 2 - it supports the Linux “progress bars” as created by fsck and
> > others. On the 3215, every update is written to a new
> > line; with the 3270 mode, those lines are just overwritten as
> > intended.
>
> It can even show different foreground colors if you set $TERM to ansi.
>
> Regards
> Sven
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390


Re: zLinux 3270 console support

2022-11-13 Thread Donald Russell
Thanks Sven,

Where do I find the source code? Maybe I can contribute to a solution. 

When you changed to code to use “LPAR mode” instead of diag 120, did the
console work properly with different geometries? That’s the first problem,
when the system first comes up, if the screen isn’t 24X80 the wheels fall
off the wagon.

But the other problem occurs when the console is disconnected/reconnected
and the geometry is different. (A very likely scenario as everybody has
their favorite settings. I generally use 60 X 140)

I can detect when a reconnect event happens, but there needs to be a way to
tell the kernel/driver “check the geometry and adjust accordingly”.

I’d like to use 3270 mode, but this is a showstopper for me. Without it
working for any geometry allowed by 3270 data stream specification, it’s
not something I want to implement. 

Why do I want to to use it? It solves two annoying problems:
1 - it supports “dark” fields so passwords are not visible (ssh to another
system etc)
2 - it supports the Linux “progress bars” as created by fsck and others. On
the 3215, every update is written to a new line; with the 3270 mode, those
lines are just overwritten as intended.

One thing lost by using 3270 support - can’t spool the console. That’s a
different problem for a different thread. 

Cheers

On Sun, Nov 13, 2022 at 10:48 Sven Schnelle  wrote:

> Hi Donald,
>
> Donald Russell  writes:
>
> > I have RHEL 7.9 setup (on zVM) so I can use the 3270 console instead of
> > 3215 and it works quite nicely provided the 3270 geometry is 24 X 80.
> >
> > If the screen geometry is other than that, it’s not usable…. Input
> commands
> > are not parsed properly and fail, and of course the output display is a
> > mess due to the wrong buffer address calculations for sba orders etc.
> >
> > I detect in near real time when the console reconnects … is there a
> (linux)
> > command I can issue that will “shoulder tap” the 3270 device driver to
> > reread the device characteristics, specifically screen geometry?
> Presumably
> > by issuing diagnose 8c or issue the query to the 3270 device “tell me
> about
> > yourself”.
>
> I checked the kernel source, and it looks like Linux has different ways
> of figuring out the geometry:
>
> - on VM, it uses a diag120 call. From the device type, it determines the
>   geometry. So it can only handle the fixed resolution of the -1, -2 and
>   so on models. I haven't found any reference to diag 8c.
>
> - if it's !VM (lpar), it uses a read partition query to figure out the
>   geometry. Interestingly though, this also seems to work on VM when i
>   force the 3270 driver to use the "lpar mode". I have to ask the VM
>   people why that differentiation exists - maybe VM couldn't handle
>   the query in former versions. But maybe it's just my limited knowledge
>   of 3270 support in VM and Linux, i have never seen a real 3270 :-)
>
> > I have a udev rule that is trigggered (indirectly) by a reconnect event
> so
> > that’s the point where I want to tell the driver “check the 3270 device
> > characteristics”.
>
> I haven't checked whether something like 'stty [rows|columns] X <
> /dev/3270/ttyX'
> works. But with the networking 3270 clients we have nowadays,
> resolutions are changing all the time and i guess this wouldn't help
> much even if it works.
>
> > P.S. I’m going to do this on RHEL 8 soon and maybe 9.  I haven’t yet
> > checked to see if the driver has been updated in those versions.
>
> I tested it with upstream 6.1-rc and was able to reproduce the behaviour
> you described. So i don't think you need to test it with RHEL8/9.
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390


zLinux 3270 console support

2022-11-12 Thread Donald Russell
I have RHEL 7.9 setup (on zVM) so I can use the 3270 console instead of
3215 and it works quite nicely provided the 3270 geometry is 24 X 80.

If the screen geometry is other than that, it’s not usable…. Input commands
are not parsed properly and fail, and of course the output display is a
mess due to the wrong buffer address calculations for sba orders etc.

I detect in near real time when the console reconnects … is there a (linux)
command I can issue that will “shoulder tap” the 3270 device driver to
reread the device characteristics, specifically screen geometry? Presumably
by issuing diagnose 8c or issue the query to the 3270 device “tell me about
yourself”.

I have a udev rule that is trigggered (indirectly) by a reconnect event so
that’s the point where I want to tell the driver “check the 3270 device
characteristics”.

Cheers,
Don

P.S. I’m going to do this on RHEL 8 soon and maybe 9.  I haven’t yet
checked to see if the driver has been updated in those versions.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390


Re: Can zLinux detect when files arrive in the virtual reader?

2022-09-03 Thread Donald Russell
I didn’t think I was arguing. Quite the opposite.

We (and others) agree zLinux should create the udev event for “reader
ready” interrupts.

Enjoy the long weekend. 


On Sat, Sep 3, 2022 at 20:21 Alan Altmark  wrote:

> Dunno why you’re arguing with me, Don. I was presenting the hardware-based
> rationale for Linux to generate a UDEV event when it receives a an
> unsolicited DE on RDR or tape devices.
>
> Doing it for DASD would be a discussion for another day, as that’s a zebra
> of another hue.
>
> Regards,
> Alan
>
> Alan Altmark
> Senior Managing z/VM Consultant
> IBM Technology Services
> Endicott, NY USA
>
> > On Sep 3, 2022, at 6:41 PM, Donald Russell 
> wrote:
> >
> > All of that sounds very similar to how WAKEUP works. If the reader isn’t
> > spooled class * then WAKEUP won’t wake up unless the correct class file
> > arrives. I’d hazard a guess that’s a CP thing and not a CMS thing. That
> is,
> > CP won’t present the “ready” interrupt unless the arriving file matches
> the
> > spooled class of the reader. (vs WAKEUP checking then going back to sleep
> > because of the class mismatch)
> >
> > That’s fine, that’s all under user (root user sysadmin) control.
> >
> > I guess this is where you say to be careful. Yes, I’m not interested in
> the
> > arrival of a spool file, I’m interested in the arrival of a spool *I can
> > read.  *
> >
> > My point earlier was that if CP presents the “device ready” interrupt to
> a
> > virtual machine running zLinux, then zLinux ought to do something
> > constructive with it. i.e. create a udev event so an *application* can do
> > something with it.
> >
> > You said “UDEV was meant to reflect physical device events to user
> space.”
> >
> > We’ll, the arrival of a “card deck” is a physical device event.
> >
> > Yes, Linux code could poll the reader every 9 seconds. (An interval meant
> > to be sarcastic) That’s a terrible design for virtual machines.
> >
> >
> >> On Fri, Sep 2, 2022 at 06:50 Alan Altmark 
> wrote:
> >>
> >> I won’t pretend to be an expert in UDEV architecture, but the research
> >> I’ve done showed me that UDEV was meant to reflect physical device
> events
> >> to user space.
> >>
> >> Having refreshed my memory by re-reading “IBM 2821 Control Unit
> Component
> >> Description”,  I think the arrival of a card deck in a card reader is
> >> equivalent to a USB stick appearing in a USB port.
> >>
> >> When you press the START key on a 2540 card reader, the device
> transitions
> >> from NOT-READY to READY, causing an unsolicited interrupt (Alert+Device
> >> End) that tells the OS to start reading.  Once EOF is reached (no more
> >> cards in the hopper and the EOF button was pressed), the 2540 signals a
> >> Unit Exception, failing the outstanding READ operation that’s waiting
> for
> >> next card.  From that the OS knows that the file is complete.  Once,
> the UE
> >> is sent, the 2540 returns to the NOT-READY state.   In VM, the arrival
> of a
> >> RDR file effectively pushes the START button on the virtual RDR.   [I’m
> not
> >> looking to start a retrospective on the 2540 or its modes of operation
> that
> >> differed from the above description.  I’m just trying to make a point.]
> >>
> >> But be careful.  While we think we’re interested in the arrival of spool
> >> files, we’re not.  Rather, we’re interested in knowing that if we start
> >> reading from the card reader, there are cards in the hopper to be read.
> >> I.e. If a spool file arrives with class Q, but your RDR is spooled
> class Z,
> >> you won’t be able to read the spool file.  That’s why seeing the device
> >> transition to READY is so important.   That only happens if an
> *eligible*
> >> file arrives in you RDR.  (Anyone who has written a non-blocking socket
> >> application will appreciate that subtle difference.)
> >>
> >> Cards, tapes, disks.  They all had removeable media and they all
> signaled
> >> the host the same way.  Even a terminal would generate an unsolicited DE
> >> when you turned it on; that’s how the OS knew it was ok to write a logo
> to
> >> it.  (I guess the human was the removable media!)
> >>
> >> This is not to be confused with changes in I/O configuration where
> >> subchannels are added to or deleted from the I/O configuration.  That’s
> a
> >> whole different kettle of fish.
> >>
> >> Regards,
> >> Alan
>

Re: Can zLinux detect when files arrive in the virtual reader?

2022-09-03 Thread Donald Russell
All of that sounds very similar to how WAKEUP works. If the reader isn’t
spooled class * then WAKEUP won’t wake up unless the correct class file
arrives. I’d hazard a guess that’s a CP thing and not a CMS thing. That is,
CP won’t present the “ready” interrupt unless the arriving file matches the
spooled class of the reader. (vs WAKEUP checking then going back to sleep
because of the class mismatch)

That’s fine, that’s all under user (root user sysadmin) control.

I guess this is where you say to be careful. Yes, I’m not interested in the
arrival of a spool file, I’m interested in the arrival of a spool *I can
read.  *

My point earlier was that if CP presents the “device ready” interrupt to a
virtual machine running zLinux, then zLinux ought to do something
constructive with it. i.e. create a udev event so an *application* can do
something with it.

You said “UDEV was meant to reflect physical device events to user space.”

We’ll, the arrival of a “card deck” is a physical device event.

Yes, Linux code could poll the reader every 9 seconds. (An interval meant
to be sarcastic) That’s a terrible design for virtual machines.


On Fri, Sep 2, 2022 at 06:50 Alan Altmark  wrote:

> I won’t pretend to be an expert in UDEV architecture, but the research
> I’ve done showed me that UDEV was meant to reflect physical device events
> to user space.
>
> Having refreshed my memory by re-reading “IBM 2821 Control Unit Component
> Description”,  I think the arrival of a card deck in a card reader is
> equivalent to a USB stick appearing in a USB port.
>
> When you press the START key on a 2540 card reader, the device transitions
> from NOT-READY to READY, causing an unsolicited interrupt (Alert+Device
> End) that tells the OS to start reading.  Once EOF is reached (no more
> cards in the hopper and the EOF button was pressed), the 2540 signals a
> Unit Exception, failing the outstanding READ operation that’s waiting for
> next card.  From that the OS knows that the file is complete.  Once, the UE
> is sent, the 2540 returns to the NOT-READY state.   In VM, the arrival of a
> RDR file effectively pushes the START button on the virtual RDR.   [I’m not
> looking to start a retrospective on the 2540 or its modes of operation that
> differed from the above description.  I’m just trying to make a point.]
>
> But be careful.  While we think we’re interested in the arrival of spool
> files, we’re not.  Rather, we’re interested in knowing that if we start
> reading from the card reader, there are cards in the hopper to be read.
> I.e. If a spool file arrives with class Q, but your RDR is spooled class Z,
> you won’t be able to read the spool file.  That’s why seeing the device
> transition to READY is so important.   That only happens if an *eligible*
> file arrives in you RDR.  (Anyone who has written a non-blocking socket
> application will appreciate that subtle difference.)
>
> Cards, tapes, disks.  They all had removeable media and they all signaled
> the host the same way.  Even a terminal would generate an unsolicited DE
> when you turned it on; that’s how the OS knew it was ok to write a logo to
> it.  (I guess the human was the removable media!)
>
> This is not to be confused with changes in I/O configuration where
> subchannels are added to or deleted from the I/O configuration.  That’s a
> whole different kettle of fish.
>
> Regards,
> Alan
>
> Alan Altmark
> Senior Managing z/VM Consultant
> IBM Technology Services
> 1 607 321 7556  (Mobile)
> alan_altm...@us.ibm.com
>
> From: WF Konynenberg 
> Sent: Thursday, September 1, 2022 10:10 AM
> To: Linux on 390 Port ; Alan Altmark <
> alan_altm...@us.ibm.com>; LINUX-390@VM.MARIST.EDU
> Subject: [EXTERNAL] Re: Can zLinux detect when files arrive in the virtual
> reader?
>
> I would be inclined to suggest that use of udev for user
> I would be inclined to suggest that use of udev for user functionality
> like this likely constitutes abuse of the udev design. It might be better
> to find an approach that fits in the canonical Unix/Linux model of handling
> various device quirks. Steal ideas from, say, the magnetic tape driver
> interface and tooling, the tty subsystem, etc. Don't go out of your way to
> design something new that is completely unique to zlinux. I wouldn't be
> surprised if the rdr device driver needs a wee bit of fixing to make it
> properly support a classic style Unix/Linux device usage.
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390


Re: Can zLinux detect when files arrive in the virtual reader?

2022-09-01 Thread Donald Russell
Thank you Mark.

VM CP presents the interrupt to Linux, why should Linux then ignore it?

I’m not a kernel internals guy but my view is Linux should propagate any
unsolicited interrupt like this so an application can have the opportunity
to act on it.

If a system wants to use cio_ignore to ignore the reader, that’s a
preference.

Cheers,
Don



On Thu, Sep 1, 2022 at 07:40 Mark Post  wrote:

> On 9/1/22 09:29, Alan Altmark wrote:
> > If folks would like generic "hot reader" support in Linux, the kernel is
> going to have to be modified to generate a UEVENT when an unsolicited
> Device End show up on a device.  Then you could have a UDEV rule that runs
> a script to interrogate the RDR and run vmur as desired.
>
> I'm going to bring this up with the Open Mainframe Project's Linux
> Distribution Working Group as a desired feature. This is the umpteenth
> time something like this has been asked about, so I think it's way past
> time.
>
>
> Mark Post
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390


Re: Can zLinux detect when files arrive in the virtual reader?

2022-09-01 Thread Donald Russell
Thanks David. Where can I find how to set up the “smsg catcher” in Linux?
Is it part of the vm manager suite? Extra cost thingy?

Does it support vmcf send/reply as well?

Cheers,
Don


On Wed, Aug 31, 2022 at 17:39 David Kreuter 
wrote:

> Use a cms wakeup machine running vmutil that receives a reader file. When
> the reader pops wakeup sends a smsg to the Linux machine and transfers the
> file. Linux has a smsg interface to trap the smsg
> Stick the rdr file Information in the smsg
> I have the smsg Linux driver running to receive alerts from perfsvm and
> log them
> A modern shop would look into IBM’s vm manager suite
> David
> 
> From: Linux on 390 Port  on behalf of Alan
> Altmark 
> Sent: Wednesday, August 31, 2022 5:35:19 PM
> To: LINUX-390@VM.MARIST.EDU 
> Subject: Re: Can zLinux detect when files arrive in the virtual reader?
>
> When a traditional channel-attached device transitions from not-ready to
> ready, an unsolicited DEVICE END I/O interrupt is raised. (UE indicates EOF
> on the reader.)  Similar for tape and 3270s.
>
> But I don't think Linux generates a UDEV event for unsolicited DE.
>
> Regards,
> Alan
>
> Alan Altmark
> Senior Managing z/VM Consultant
> IBM Technology Services
> 1 607 321 7556  (Mobile)
> alan_altm...@us.ibm.com
>
> > -Original Message-
> > From: Linux on 390 Port  On Behalf Of Donald
> > Russell
> > Sent: Wednesday, August 31, 2022 4:47 PM
> > To: LINUX-390@VM.MARIST.EDU
> > Subject: [EXTERNAL] [LINUX-390] Can zLinux detect when files arrive in
> the
> > virtual reader?
> >
> > Short of having some Linux script querying the virtual reader, is there
> a way
> > Linux can detect when a file arrives and invoke a script?
> >
> > Sort of like incrond for file system events.
> >
> > The idea is from cms I could send a file to the Linux virtual reader and
> then
> > Linux would process with vmur commands.
> >
> > How does CMS WAKE-UP do it? I assume when a. We file arrives there’s a.
> > Unsolicited DE (Ready) interrupt that Linux currently ignores.
> >
> > Can I configure something with udev rules?
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions, send
> email to
> > lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
> > INVALID URI REMOVED
> > 3A__www2.marist.edu_htbin_wlvindex-3FLINUX-
> > 2D390=DwIFaQ=jf_iaSHvJObTbx-
> > siA1ZOg=XX3LPhXj6Fv4hkzdpbonTd1gcy88ea-
> > vqLQGEWWoD4M=yfZu_IVFpMC3E1syXVH5fyaqAsV_RbjB5FnDqLIpdMKDq
> > _zoqtcxyxvWOOAIZvDS=IYKKf-
> > wBqPmHhPD1mHR26UFjpdbY8ZmSBTKb6A28hvc=
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390


Re: Can zLinux detect when files arrive in the virtual reader?

2022-09-01 Thread Donald Russell
Thanks Jeffery. Yes that would work but I’m trying to avoid polling loops,
or a cron thing that checks every minute or so.

On Wed, Aug 31, 2022 at 14:48 Jeffrey Barnard  wrote:

> Could you use the vm command interface to issue an Q F every x seconds.
>
> q f
> FILES: 109 RDR, 028 PRT,  NO PUN
>
> If there are files in the RDR, time to go to work. Not as nice a catching
> the DE but should work.
>
> Regards,
> Jeff
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390


Can zLinux detect when files arrive in the virtual reader?

2022-08-31 Thread Donald Russell
Short of having some Linux script querying the virtual reader, is there a
way Linux can detect when a file arrives and invoke a script?

Sort of like incrond for file system events.

The idea is from cms I could send a file to the Linux virtual reader and
then Linux would process with vmur commands.

How does CMS WAKE-UP do it? I assume when a. We file arrives there’s a.
Unsolicited DE (Ready) interrupt that Linux currently ignores.

Can I configure something with udev rules?

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390


Re: Detecting RHEL console disconnect/reconnect

2022-02-01 Thread Donald Russell
Thanks Neale, I hadn’t thought of that. I can make that work. Not my
preferred solution but reasonably acceptable to me. :-)

Cheers,
Don

On Tue, Feb 1, 2022 at 19:33 Neale Ferguson  wrote:

> Do you have Broadcom's VM:Operator, Velocity's zVPS, or IBM's VM
> Operations Manager (or even good old PROP)? If so, you could create an
> action routine that would intercept the DISCONNECT/RECONNECT message.
>
> Neale
>
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390


Detecting RHEL console disconnect/reconnect

2022-02-01 Thread Donald Russell
With RHEL running on VM is there an interrupt or something that Linux can
act on when the console reconnects or disconnects?

If there were a vm event for those I could easily handle it outside Linux
and invent my own trigger, but cp doesn’t pass those events to *vmevent :-(

Maybe a udev rule to script something when either of those events happen.

I could do some sort of polling thing that uses vmcp q userid to see if I’m
disconnected or not, but that sucks and if that’s the only solution I think
I’ll have to pass. Or settle for well under real-time action.  Hmmm

Cheers,
Don

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390


Re: udev detaching devices?

2021-10-26 Thread Donald Russell
Thanks Steven,

That did solve the problem. :-)


Cheers,
Don

On Tue, Oct 26, 2021 at 13:42 Steven Imler 
wrote:

> Don,
>
> You likely need the updated RPM that corrects this problem: SO10302 -
> VMTLI:
> MOUNT FAILS, TAPE DRIVE DETACHED AFTER ATTACH
>
> JR (Steven) Imler
> Sr. Software Engineer  |  Mainframe Division
> Broadcom
>
> office: +1 571.401.8685
> 2291 Wood Oak Drive  |  Herndon, Virginia  20171
> steven.im...@broadcom.com   |   broadcom.com
>
> -Original Message-
> From: Linux on 390 Port  On Behalf Of Donald
> Russell
> Sent: Tuesday, October 26, 2021 04:35 PM
> To: LINUX-390@VM.MARIST.EDU
> Subject: Fwd: udev detaching devices?
>
> RHEL7.9 running on zVM 7.1 with VMTAPE.
>
> A vmtape mount command successfully mounts a tape and “gives” the tape
> drive
> to Linux. Linux promptly detaches the drive.
>
> I thought it was due to udev rules, but I don’t see what’s wrong. I thought
> maybe it was related to blacklisted device numbers, but cio_ignore shows
> nothing is blacklisted.
>
> How can I get more information about why the tape drive is detached?
>
> The udev rules look specific to IBM drives, and these are Secure Agent
> drives…maybe no rules covers it so Linux says “oh no you don’t, you’re not
> bringing that in here”? :-)
>
> How can I see the device info in order to make a suitable udev rule?
>
> #udevadm monitor
>
> monitor will print the received events for:
>
> UDEV - the event which udev sends out after rule processing
>
> KERNEL - the kernel uevent
>
>
>
> KERNEL[192616.914861] add  /devices/css0/0.0.0061 (css)
>
> KERNEL[192616.914901] add  /devices/css0/0.0.0061/0.0.0478 (ccw)
>
> UDEV  [192616.955020] add  /devices/css0/0.0.0061 (css)
>
> UDEV  [192616.963492] add  /devices/css0/0.0.0061/0.0.0478 (ccw)
>
> KERNEL[192617.916677] remove   /devices/css0/0.0.0061/0.0.0478 (ccw)
>
> KERNEL[192617.916699] remove   /devices/css0/0.0.0061 (css)
>
> UDEV  [192617.917073] remove   /devices/css0/0.0.0061/0.0.0478 (ccw)
>
> UDEV  [192617.917191] remove   /devices/css0/0.0.0061 (css)
>
>
>
>
>
>
>
> The above kernel/udev events happen when I vmtape mount --vol 
>
> The tape is mounted, attached to linux then immediately removed/detached
>
>
>
> The relevant rules file I have is:
>
> #cat 99-vmt_event.rules
>
> SUBSYSTEM=="ccw", ACTION=="add", RUN+="/usr/bin/vmtuevent attach %k"
>
> #SUBSYSTEM=="ccw", ACTION=="remove", RUN+="/usr/bin/vmtuevent detach %k"
>
> KERNEL=="[nr]tibm[0-9]*", ACTION=="add", KERNELS=="[0-9A-Fa-f.]*",
> RUN+="/usr/bin/vmtuevent mount %b %n"
>
> #KERNEL=="[nr]tibm[0-9]*", ACTION=="remove", RUN+="/usr/bin/vmtuevent
> umount
> %n"
>
> #KERNEL=="btibm[0-9]*", ACTION=="remove", RUN+="/usr/bin/vmtuevent umount
> %n"
>
>
>
> I commented out the remove items and restarted the server…. the remove
> events still happened.
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions, send email
> to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>
> --
> This electronic communication and the information and any files
> transmitted
> with it, or attached to it, are confidential and are intended solely for
> the use of the individual or entity to whom it is addressed and may
> contain
> information that is confidential, legally privileged, protected by privacy
> laws, or otherwise restricted from disclosure to anyone else. If you are
> not the intended recipient or the person responsible for delivering the
> e-mail to the intended recipient, you are hereby notified that any use,
> copying, distributing, dissemination, forwarding, printing, or copying of
> this e-mail is strictly prohibited. If you received this e-mail in error,
> please return the e-mail to the sender, delete it from your computer, and
> destroy any printed copy of it.
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www2.marist.edu/htbin/wlvindex?LINUX-390
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390


Fwd: udev detaching devices?

2021-10-26 Thread Donald Russell
RHEL7.9 running on zVM 7.1 with VMTAPE.

A vmtape mount command successfully mounts a tape and “gives” the tape
drive to Linux. Linux promptly detaches the drive.

I thought it was due to udev rules, but I don’t see what’s wrong. I thought
maybe it was related to blacklisted device numbers, but cio_ignore shows
nothing is blacklisted.

How can I get more information about why the tape drive is detached?

The udev rules look specific to IBM drives, and these are Secure Agent
drives…maybe no rules covers it so Linux says “oh no you don’t, you’re not
bringing that in here”? :-)

How can I see the device info in order to make a suitable udev rule?

#udevadm monitor

monitor will print the received events for:

UDEV - the event which udev sends out after rule processing

KERNEL - the kernel uevent



KERNEL[192616.914861] add  /devices/css0/0.0.0061 (css)

KERNEL[192616.914901] add  /devices/css0/0.0.0061/0.0.0478 (ccw)

UDEV  [192616.955020] add  /devices/css0/0.0.0061 (css)

UDEV  [192616.963492] add  /devices/css0/0.0.0061/0.0.0478 (ccw)

KERNEL[192617.916677] remove   /devices/css0/0.0.0061/0.0.0478 (ccw)

KERNEL[192617.916699] remove   /devices/css0/0.0.0061 (css)

UDEV  [192617.917073] remove   /devices/css0/0.0.0061/0.0.0478 (ccw)

UDEV  [192617.917191] remove   /devices/css0/0.0.0061 (css)







The above kernel/udev events happen when I vmtape mount --vol 

The tape is mounted, attached to linux then immediately removed/detached



The relevant rules file I have is:

#cat 99-vmt_event.rules

SUBSYSTEM=="ccw", ACTION=="add", RUN+="/usr/bin/vmtuevent attach %k"

#SUBSYSTEM=="ccw", ACTION=="remove", RUN+="/usr/bin/vmtuevent detach %k"

KERNEL=="[nr]tibm[0-9]*", ACTION=="add", KERNELS=="[0-9A-Fa-f.]*",
RUN+="/usr/bin/vmtuevent mount %b %n"

#KERNEL=="[nr]tibm[0-9]*", ACTION=="remove", RUN+="/usr/bin/vmtuevent
umount %n"

#KERNEL=="btibm[0-9]*", ACTION=="remove", RUN+="/usr/bin/vmtuevent umount
%n"



I commented out the remove items and restarted the server…. the remove
events still happened.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390


Re: Using diagnose instruction from C on RHEL 7

2018-11-10 Thread Donald Russell
Thanks Alan,

I’m tinkering with diag a0, subcode 60, a non-ibm api.  And yes the virtual
machine needs additional privileges to use it.

Thanks for the tip though. But whether I use diag a0 or 88 or any other
privileged instruction, my problem is getting into supervisor state so it
can do it.

If a kernel extension is the only way, I’ll have to decide how I want to
proceed.  I don’t mind doing it, I just have to find the time and weigh the
benefit vs possible security risk.

Cheers
Don



On Sat, Nov 10, 2018 at 08:31 Alan Altmark  wrote:

>
> A0?  Please make sure that your usage is not outdated.   The most common
> usages of A0 were replaced long ago by DIAG 88.
>
> Regards,
> Alan Altmark
> IBM
>
> > On Nov 10, 2018, at 10:32 AM, Donald Russell 
> wrote:
> >
> > Thanks Neale!
> >
> > In my case I’m using diag a0. Though I may want to do this for other diag
> > instructions too.
> >
> > Getting in/out of supervisor state is my next hurdle. :-)
> >
> > I was going to use stidp to make sure I was actually on VM but that got
> > “Illegal Instruction” when it ran.
> > Maybe there’s a function I can call, or I can read /proc/cpuinfo to
> verify
> > A-it’s IBM/S390 and B-VM is running.  I don’t like the idea of reading a
> > whole “file” to provide what a single instruction can give me.
> >
> > I still have to figure out how to get in and out of supervisor state for
> > the diag though.
> >
> > Thanks for tip on generating the machine code.  That’s great! :-)
> >
> > Cheers,
> > Don
> >
> >
> >
> >
> >> On Sat, Nov 10, 2018 at 03:31 Neale Ferguson 
> wrote:
> >>
> >> .byte 0x83, 0x12, 0x00, 0x08
> >>
> >> == diag 1,2,8 (CP command)
> >>
> >> You can either load r1/r2 in the _asm_ section or tell gcc to bind the
> >> variables to the registers.
> >>
> >> Remember, though, that diag is a privileged instruction and won't work
> in
> >> a userland program.
> >>
> >> In what particular diag are you interested?
> >>
> >>
> >>  Original message 
> >> From: Donald Russell 
> >> Date: 11/10/18 06:00 (GMT-05:00)
> >> To: LINUX-390@VM.MARIST.EDU
> >> Subject: [LINUX-390] Using diagnose instruction from C on RHEL 7
> >>
> >> Hello,
> >>
> >> I want to write a program in C and use a diagnose instruction.
> >>
> >> I thought I could do
> >>
> >> __asm___( “ diag ... “ ...);
> >>
> >> but that fails because diag is not a real instruction mnemonic.  When I
> use
> >> gcc to compile and link I get an error:
> >>
> >> Program.c(.text+0x578): undefined reference to ‘x480a032’
> >> collect2: error: ld returned 1 exit status
> >>
> >> I thought I could code dc x’8312’ and force the use of registers 1
> and
> >> 2 but it complains that dc is not valid. (The doc says instructions
> >> including directives are ok.  But obviously not dc directives. :-)  I
> also
> >> tried upper case just to be thorough)
> >>
> >> How can I coerce C into generating a diagnose instruction?
> >>
> >> Thanks,
> >> Don
> >>
> >> --
> >> For LINUX-390 subscribe / signoff / archive access instructions,
> >> send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or
> >> visit
> >>
> http://www.marist.edu/htbin/wlvindex?LINUX-390
>
> >> --
> >> For more information on Linux on System z, visit
> >>
> http://wiki.linuxvm.org/
>
> >>
> >> --
> >> For LINUX-390 subscribe / signoff / archive access instructions,
> >> send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or
> >> visit
> >>
> http://www.marist.edu/htbin/wlvindex?LINUX-390
>
> >> --
> >> For more information on Linux on System z, visit
> >>
> http://wiki.linuxvm.org/
>
> >>
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions,
> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> >
> http://www.marist.edu/htbin/wlvindex?LINUX-390
>

Re: Using diagnose instruction from C on RHEL 7

2018-11-10 Thread Donald Russell
On Sat, Nov 10, 2018 at 13:24 Binyamin Dissen 
wrote:

> On Sat, 10 Nov 2018 12:59:44 -0800 Donald Russell 
> wrote:
>
> :>Thanks for that info. But thatdoesnt get me to goal of issuing my own
> :>diag.
>
> I would suggest the goal would have a business case. Just issuing a DIAG
> without an end purpose?


Uh, yeah. I have that. It’s just not relevant to the problem at hand.

Cheers,
Don



>
> --
> Binyamin Dissen 
> http://www.dissensoftware.com
>
> Director, Dissen Software, Bar & Grill - Israel
>
>
> Should you use the mailblocks package and expect a response from me,
> you should preauthorize the dissensoftware.com domain.
>
> I very rarely bother responding to challenge/response systems,
> especially those from irresponsible companies.
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Using diagnose instruction from C on RHEL 7

2018-11-10 Thread Donald Russell
Thanks for that info. But thatdoesnt get me to goal of issuing my own
diag.  Sounds like that’s bigger than a breadbox. I’ll have to figure out
to make something that can be mod probe -loaded. Or find another solution
No worries. All good fun and learning.

Cheers,
Don

On Sat, Nov 10, 2018 at 12:27 Mark Post  wrote:

> >>> On 11/10/2018 at 02:08 PM, Mike Walter 
> wrote:
>
> > Wouldn't a CP QUERY CPUID (perhaps CP QUERY VIRTUAL CPUID) via diag08,
> or the
> > Linux command to issue CP commands, work? If the returned value begins
> with
> > FF, you are running in a virtual machine.
>
> If you can issue a CP command at all, and not get an error, you're running
> in a virtual machine.
>
> The "typical" method of figuring out things like this is to look at one or
> more of
> /sys/kernel/debug
> /proc/cpuinfo
> /proc/sysinfo
>
> You'll find such things as
> /sys/kernel/debug/s390/stsi/*
> /sys/kernel/debug/diag_0c
> /sys/kernel/debug/diag_204
> /sys/kernel/debug/diag_2fc
>
> The values in /proc/cpuinfo and /proc/sysinfo will vary, depending on
> whether you're running in an LPAR, z/VM, or KVM for Z.
>
> If you're running on a system with systemd, then the systemd-detect-virt
> command will tell you what hypervisor, if any, is running.
>
>
> Mark Post
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Using diagnose instruction from C on RHEL 7

2018-11-10 Thread Donald Russell
Thanks Rick.

Just when I thought I was almost done.  :-)
I’m used to CMS, zOS and TPF where a properly authorized “problem program”
can switch in and out of supervisor state.

Do you have any reading material you can point me to? I gather this will be
something I have to modprobe-load to make available?

Cheers
Don



On Sat, Nov 10, 2018 at 08:07 Rick Troth  wrote:

> Supervisor state is the domain of the kernel in most contemporary systems,
> including Linux. What you need to do for DIAG A0 is write a kernel module.
>
> Your next hurdle is interfacing kernel modules. There was one guy who
> implemented a generic DIAG interface early in the life of Linux on Z. But
> it was mostly used just for DIAG 08 and so fell out of use when the IBM
> DIAG 08 interface (with no support for other DIAG codes) came on the scene.
>
> -- R; <><
>
>
>
>
> On Sat, Nov 10, 2018, 10:32 Donald Russell 
> > Thanks Neale!
> >
> > In my case I’m using diag a0. Though I may want to do this for other diag
> > instructions too.
> >
> > Getting in/out of supervisor state is my next hurdle. :-)
> >
> > I was going to use stidp to make sure I was actually on VM but that got
> > “Illegal Instruction” when it ran.
> > Maybe there’s a function I can call, or I can read /proc/cpuinfo to
> verify
> > A-it’s IBM/S390 and B-VM is running.  I don’t like the idea of reading a
> > whole “file” to provide what a single instruction can give me.
> >
> > I still have to figure out how to get in and out of supervisor state for
> > the diag though.
> >
> > Thanks for tip on generating the machine code.  That’s great! :-)
> >
> > Cheers,
> > Don
> >
> >
> >
> >
> > On Sat, Nov 10, 2018 at 03:31 Neale Ferguson 
> wrote:
> >
> > >  .byte 0x83, 0x12, 0x00, 0x08
> > >
> > > == diag 1,2,8 (CP command)
> > >
> > > You can either load r1/r2 in the _asm_ section or tell gcc to bind the
> > > variables to the registers.
> > >
> > > Remember, though, that diag is a privileged instruction and won't work
> in
> > > a userland program.
> > >
> > > In what particular diag are you interested?
> > >
> > >
> > >  Original message 
> > > From: Donald Russell 
> > > Date: 11/10/18 06:00 (GMT-05:00)
> > > To: LINUX-390@VM.MARIST.EDU
> > > Subject: [LINUX-390] Using diagnose instruction from C on RHEL 7
> > >
> > > Hello,
> > >
> > > I want to write a program in C and use a diagnose instruction.
> > >
> > > I thought I could do
> > >
> > > __asm___( “ diag ... “ ...);
> > >
> > > but that fails because diag is not a real instruction mnemonic.  When I
> > use
> > > gcc to compile and link I get an error:
> > >
> > > Program.c(.text+0x578): undefined reference to ‘x480a032’
> > > collect2: error: ld returned 1 exit status
> > >
> > > I thought I could code dc x’8312’ and force the use of registers 1
> > and
> > > 2 but it complains that dc is not valid. (The doc says instructions
> > > including directives are ok.  But obviously not dc directives. :-)  I
> > also
> > > tried upper case just to be thorough)
> > >
> > > How can I coerce C into generating a diagnose instruction?
> > >
> > > Thanks,
> > > Don
> > >
> > > --
> > > For LINUX-390 subscribe / signoff / archive access instructions,
> > > send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or
> > > visit
> > > http://www.marist.edu/htbin/wlvindex?LINUX-390
> > > --
> > > For more information on Linux on System z, visit
> > > http://wiki.linuxvm.org/
> > >
> > > --
> > > For LINUX-390 subscribe / signoff / archive access instructions,
> > > send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or
> > > visit
> > > http://www.marist.edu/htbin/wlvindex?LINUX-390
> > > --
> > > For more information on Linux on System z, visit
> > > http://wiki.linuxvm.org/
> > >
> >
> > -

How to get in/out of supervisor state in C program

2018-11-10 Thread Donald Russell
I want to use a privileged instruction (diag, stidp, etc) in __asm__();
statement.

How do I get into supervisor state to run that and then return to problem
state?

The purpose of stidp is to verify I’m running on VM before I go doing “vm
things”. :-)

I’m expecting my program to run setuid as root if need be. But root on its
own isn’t enough. Makes sense, root should not imply supervisor state.

Thanks,
Don

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Using diagnose instruction from C on RHEL 7

2018-11-10 Thread Donald Russell
Thanks Neale!

In my case I’m using diag a0. Though I may want to do this for other diag
instructions too.

Getting in/out of supervisor state is my next hurdle. :-)

I was going to use stidp to make sure I was actually on VM but that got
“Illegal Instruction” when it ran.
Maybe there’s a function I can call, or I can read /proc/cpuinfo to verify
A-it’s IBM/S390 and B-VM is running.  I don’t like the idea of reading a
whole “file” to provide what a single instruction can give me.

I still have to figure out how to get in and out of supervisor state for
the diag though.

Thanks for tip on generating the machine code.  That’s great! :-)

Cheers,
Don




On Sat, Nov 10, 2018 at 03:31 Neale Ferguson  wrote:

>  .byte 0x83, 0x12, 0x00, 0x08
>
> == diag 1,2,8 (CP command)
>
> You can either load r1/r2 in the _asm_ section or tell gcc to bind the
> variables to the registers.
>
> Remember, though, that diag is a privileged instruction and won't work in
> a userland program.
>
> In what particular diag are you interested?
>
>
> ---- Original message 
> From: Donald Russell 
> Date: 11/10/18 06:00 (GMT-05:00)
> To: LINUX-390@VM.MARIST.EDU
> Subject: [LINUX-390] Using diagnose instruction from C on RHEL 7
>
> Hello,
>
> I want to write a program in C and use a diagnose instruction.
>
> I thought I could do
>
> __asm___( “ diag ... “ ...);
>
> but that fails because diag is not a real instruction mnemonic.  When I use
> gcc to compile and link I get an error:
>
> Program.c(.text+0x578): undefined reference to ‘x480a032’
> collect2: error: ld returned 1 exit status
>
> I thought I could code dc x’8312’ and force the use of registers 1 and
> 2 but it complains that dc is not valid. (The doc says instructions
> including directives are ok.  But obviously not dc directives. :-)  I also
> tried upper case just to be thorough)
>
> How can I coerce C into generating a diagnose instruction?
>
> Thanks,
> Don
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Using diagnose instruction from C on RHEL 7

2018-11-10 Thread Donald Russell
Hello,

I want to write a program in C and use a diagnose instruction.

I thought I could do

__asm___( “ diag ... “ ...);

but that fails because diag is not a real instruction mnemonic.  When I use
gcc to compile and link I get an error:

Program.c(.text+0x578): undefined reference to ‘x480a032’
collect2: error: ld returned 1 exit status

I thought I could code dc x’8312’ and force the use of registers 1 and
2 but it complains that dc is not valid. (The doc says instructions
including directives are ok.  But obviously not dc directives. :-)  I also
tried upper case just to be thorough)

How can I coerce C into generating a diagnose instruction?

Thanks,
Don

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Moving zLinux to a bigger disk - solved

2018-06-29 Thread Donald Russell
Peter,
THANK YOU !! Using fdasd option u fixed it up. I was then able to expand
the file system and I now have a happy RHEL system on a mod-27 with lots of
spare space.

Just FYI... I spent many hours tinkering with VM DRR and Linux dd and
different experiments of formatting etc etc. I had a case open with Red
Hat, which they eventually pretty much gave up on and gave me the source
code for fdasd and dasdfmt (which is where I learned of the --mode expand
option in the first place. It’s not in the man pages.)

Like so many things, when you know how, it’s simple. Once again, the
informal, no-charge listserv community out-performs the paid-for official
support. TGFL - Thank God For Listserv.  LOL

Thanks again.
Donald Russell


On Fri, Jun 29, 2018 at 05:01 Peter Oberparleiter 
wrote:

> On 29.06.2018 00:10, Donald Russell wrote:
> > On Thu, Jun 28, 2018 at 14:27 Donald Russell 
> wrote:
> >> The dasdfmt -b 4096 --mode=expand worked great.   Started formatting the
> >> disk at track 150240 as expected.  But then fdasd choked saying only the
> >> first 10016 cylinders are formatted so I can’t create the new larger
> >> partition.
> >>
> >> How can I coerce fdasd into doing the right thing? Whatever fdasd is
> >> looking at for that cylinder count I expected dasdfmt to update.
> >>
> >> Where is that data, maybe I can just zap it with some other tool like
> cms
> >> pipe read/write track.
>
> fdasd is looking at the DASD's VTOC, specifically at the format 5 DSCB
> that is supposed to list free space extents on the volume. The 'dasdfmt
> --mode expand' call doesn't add the newly formatted extent to this DSCB,
> therefore fdasd assumes that that it is not formatted.
>
> This is a bug/limitation in dasdfmt/fdasd and we plan to fix this in a
> future version of s390-tools.
>
> In the meantime, you can try the following:
>
> # fdasd /dev/dasd...
> u ('re-create VTOC re-using existing partition sizes')
> y ('yes')
> w ('write table to disk and exit')
>
> You need to perform these steps TWICE, or fdasd will terminate with a
> "BUG..." statement when you try to create/change partitions afterwards.
>
>
> Regards,
>   Peter Oberparleiter
>
> --
> Peter Oberparleiter
> Linux on Z Development - IBM Germany
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: single user mode under z/VM

2018-06-28 Thread Donald Russell
I use the console for simple command line things like restarting a service
or yum update. If I really need things like vim I go to the iucv method
when ssh isn’t working.



On Wed, May 16, 2018 at 11:26 Terri C. Glowaniak <
terri.glowan...@regions.com> wrote:

> Just wondering what 'console' people use to access their Linux systems
> when using 'single user mode'  ...  3270, IUCV, or  ?
>
>
> Thanks,
> Terri Glowaniak
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Moving zLinux to a bigger disk

2018-06-28 Thread Donald Russell
I forgot to put a subject.  Now there’s one.  :-)
Don

On Thu, Jun 28, 2018 at 14:27 Donald Russell  wrote:

> I have RHEL 7 system on a mod-9 (10016 cup) ECKD DASD and want to move it
> to a mod-27 (32759 cyl).
>
> The disk is not in use, I used zVM/CMS to DDR the disk to the larger one.
> Then I attached it to a zLinux system to format the back end of the disk.
> After that I would remove the last partition and create a new partition
> extending to the end of disk and finally  resize the file system in that
> partition.
>
> The dasdfmt -b 4096 --mode=expand worked great.   Started formatting the
> disk at track 150240 as expected.  But then fdasd choked saying only the
> first 10016 cylinders are formatted so I can’t create the new larger
> partition.
>
> How can I coerce fdasd into doing the right thing? Whatever fdasd is
> looking at for that cylinder count I expected dasdfmt to update.
>
> Where is that data, maybe I can just zap it with some other tool like cms
> pipe read/write track.
>
> I also tried dasdfmt --mode=quick which fixed my fdasd issue.  It now got
> the right size of the disk but that removes the IPL record and who knows
> what else so the disk was no longer bootable.
>
> Any suggestions beyond install from scratch on the larger disk? :-)
>
> Thanks,
> Don
>
> Thu 28 Jun 20:58:17 UTC
> [root@sl55zdump] ~
> #dasdfmt -b 4096 --mode=expand /dev/dasdr
> Expansion mode active. Searching for starting position...
> Done. Unformatted part starts at track 150240.
> Drive Geometry: 32759 Cylinders * 15 Heads =  491385 Tracks
>
> I am going to format the device /dev/dasdr in the following way:
>Device number of device : 0x200
>Labelling device: yes
>Disk label  : VOL1
>Disk identifier : 0X0200
>Extent start (trk no)   : 150240
>Extent end (trk no) : 491384
>Compatible Disk Layout  : yes
>Blocksize   : 4096
>Mode: Expand
>
> Type "yes" to continue, no will leave the disk untouched: yes
> Formatting the device. This may take a while (get yourself a coffee).
>
> Finished formatting the device.
> Rereading the partition table... ok
>
> Thu 28 Jun 21:05:40 UTC
> [root@sl55zdump] ~
> #fdasd /dev/dasdr
> reading volume label ..: VOL1
> reading vtoc ..: ok
> WARNING: This device is not fully formatted! Only 10016 of 32759 cylinders
> are available.
>
>
>
>
>
>
>
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


[no subject]

2018-06-28 Thread Donald Russell
I have RHEL 7 system on a mod-9 (10016 cup) ECKD DASD and want to move it
to a mod-27 (32759 cyl).

The disk is not in use, I used zVM/CMS to DDR the disk to the larger one.
Then I attached it to a zLinux system to format the back end of the disk.
After that I would remove the last partition and create a new partition
extending to the end of disk and finally  resize the file system in that
partition.

The dasdfmt -b 4096 --mode=expand worked great.   Started formatting the
disk at track 150240 as expected.  But then fdasd choked saying only the
first 10016 cylinders are formatted so I can’t create the new larger
partition.

How can I coerce fdasd into doing the right thing? Whatever fdasd is
looking at for that cylinder count I expected dasdfmt to update.

Where is that data, maybe I can just zap it with some other tool like cms
pipe read/write track.

I also tried dasdfmt --mode=quick which fixed my fdasd issue.  It now got
the right size of the disk but that removes the IPL record and who knows
what else so the disk was no longer bootable.

Any suggestions beyond install from scratch on the larger disk? :-)

Thanks,
Don

Thu 28 Jun 20:58:17 UTC
[root@sl55zdump] ~
#dasdfmt -b 4096 --mode=expand /dev/dasdr
Expansion mode active. Searching for starting position...
Done. Unformatted part starts at track 150240.
Drive Geometry: 32759 Cylinders * 15 Heads =  491385 Tracks

I am going to format the device /dev/dasdr in the following way:
   Device number of device : 0x200
   Labelling device: yes
   Disk label  : VOL1
   Disk identifier : 0X0200
   Extent start (trk no)   : 150240
   Extent end (trk no) : 491384
   Compatible Disk Layout  : yes
   Blocksize   : 4096
   Mode: Expand

Type "yes" to continue, no will leave the disk untouched: yes
Formatting the device. This may take a while (get yourself a coffee).

Finished formatting the device.
Rereading the partition table... ok

Thu 28 Jun 21:05:40 UTC
[root@sl55zdump] ~
#fdasd /dev/dasdr
reading volume label ..: VOL1
reading vtoc ..: ok
WARNING: This device is not fully formatted! Only 10016 of 32759 cylinders
are available.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Expanding a zLinux non-LVM disk

2018-04-25 Thread Donald Russell
I take that back something went wrong and the partition wasn’t resized
after all.   No worries.

Cheers

On Wed, Apr 25, 2018 at 13:32 Donald Russell <russell@gmail.com> wrote:

> Thanks Stefan,
> That all worked like a charm except I can’t seem to get the file system
> expanded.
>
> I got everything copied, deleted and created a new larger partition with
> the same starting track.
>
> The file system is ccs so I booted up the new disk and thought xfs_growfs
> would do the trick.  I’m almost there, I need to read more about xfs_growfs
> I think.
>
> Cheers,
> Don
>
>
>
> On Wed, Apr 25, 2018 at 07:31 Stefan Haberland <s...@linux.vnet.ibm.com>
> wrote:
>
>> On 25.04.2018 05:48, Donald Russell wrote:
>> > I have a RHEL 7 zLinux on a single Mod-9 ECKD DASD.  there are three
>> > partitions:
>> > 1 - /boot
>> > 2 - swap
>> > 3 - /
>> >
>> >  From one Linux system I tried attaching a not-in-use zLinux Mod-9 and a
>> > Mod-27 and using fdasd and dd to copy the partitions.  That didn’t work,
>> > then I tried a VM DDR of the Mod-9 to  Mod-27. My thinking was I could
>> then
>> > simply expand the the third partition and expand the file system on it.
>> >
>> > When I went to delete/create a new partition fdasd thinks my Mod-27 is
>> > still a Mod-9 (10016 cyls)
>> >
>> > I’m guessing there’s something in cyl 0 that tells zLinux the size of
>> the
>> > disk.   If I can tweak that to show the disk is actually 32759 cylinders
>> > then I may have a shot at success.
>> >
>> > Does anybody have any suggestions for how to move RHEL system from
>> Mod-9 to
>> > Mod-27?
>> >
>> > Thanks,
>> > Donald Russell
>>
>> Hi,
>>
>> Expanding a CDL formatted ECKD DASD is unfortunately not that easy.(I
>> assume it is CDL formatted...)
>>
>> First of all it is important to have the new disk formatted properly in
>> the same way that the old disk is formatted - using dasdfmt.
>> It is recommended to format the new DASD _BEFORE_ you try to copy any
>> data.
>> (Side node: On RHEL7.4 there should be the possibility to format the
>> remaining part of the dasd using dasdfmt's expand mode: "dasdfmt -M
>> expand /dev/dasdX". But not sure if it is available on your system.)
>>
>> Afterwards you should (in theory) use fdasd to re-create the VTOC on the
>> disk with the new size. fdasd command "u - re-create VTOC re-using
>> existing partition sizes". And afterwards you could delete the last
>> partition and re-create it with a bigger size.
>>
>> But unfortunately (as I tried this recently) there seems to be a bug in
>> fdasd leading to a message like "BUG: specified free space extent for
>> deleting not found in FMT5 DSCB!" or something similar with a FMT7 DSCB.
>> This does not allow you to create a new partition.
>>
>> The only way I managed to get around this is the following:
>>
>> - format the new DASD using dasdfmt
>> - dd old DASD to new DASD
>> - run blockdev --flushbufs on new DASD to make sure caches are cleared
>> - write down current partition boundaries
>> - run fdasd -a on new DASD to create one single partition and fix the size
>> - run fdasd on the new DASD to
>>  - delete the one partition
>>  - create the three partitions with their old boundaries except the
>> last one, which can be enhanced to the end of the disk
>> - run tool to resize the filesystem (usually resize2fs)
>>
>> This worked for me but you have to be careful with the partition
>> boundaries as any mistake could lead to a damage of the data.
>>
>> Regards,
>> Stefan
>>
>> --
>> For LINUX-390 subscribe / signoff / archive access instructions,
>> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
>> visit
>> http://www.marist.edu/htbin/wlvindex?LINUX-390
>> --
>> For more information on Linux on System z, visit
>> http://wiki.linuxvm.org/
>>
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Expanding a zLinux non-LVM disk

2018-04-25 Thread Donald Russell
Thanks Stefan,
That all worked like a charm except I can’t seem to get the file system
expanded.

I got everything copied, deleted and created a new larger partition with
the same starting track.

The file system is ccs so I booted up the new disk and thought xfs_growfs
would do the trick.  I’m almost there, I need to read more about xfs_growfs
I think.

Cheers,
Don



On Wed, Apr 25, 2018 at 07:31 Stefan Haberland <s...@linux.vnet.ibm.com>
wrote:

> On 25.04.2018 05:48, Donald Russell wrote:
> > I have a RHEL 7 zLinux on a single Mod-9 ECKD DASD.  there are three
> > partitions:
> > 1 - /boot
> > 2 - swap
> > 3 - /
> >
> >  From one Linux system I tried attaching a not-in-use zLinux Mod-9 and a
> > Mod-27 and using fdasd and dd to copy the partitions.  That didn’t work,
> > then I tried a VM DDR of the Mod-9 to  Mod-27. My thinking was I could
> then
> > simply expand the the third partition and expand the file system on it.
> >
> > When I went to delete/create a new partition fdasd thinks my Mod-27 is
> > still a Mod-9 (10016 cyls)
> >
> > I’m guessing there’s something in cyl 0 that tells zLinux the size of the
> > disk.   If I can tweak that to show the disk is actually 32759 cylinders
> > then I may have a shot at success.
> >
> > Does anybody have any suggestions for how to move RHEL system from Mod-9
> to
> > Mod-27?
> >
> > Thanks,
> > Donald Russell
>
> Hi,
>
> Expanding a CDL formatted ECKD DASD is unfortunately not that easy.(I
> assume it is CDL formatted...)
>
> First of all it is important to have the new disk formatted properly in
> the same way that the old disk is formatted - using dasdfmt.
> It is recommended to format the new DASD _BEFORE_ you try to copy any data.
> (Side node: On RHEL7.4 there should be the possibility to format the
> remaining part of the dasd using dasdfmt's expand mode: "dasdfmt -M
> expand /dev/dasdX". But not sure if it is available on your system.)
>
> Afterwards you should (in theory) use fdasd to re-create the VTOC on the
> disk with the new size. fdasd command "u - re-create VTOC re-using
> existing partition sizes". And afterwards you could delete the last
> partition and re-create it with a bigger size.
>
> But unfortunately (as I tried this recently) there seems to be a bug in
> fdasd leading to a message like "BUG: specified free space extent for
> deleting not found in FMT5 DSCB!" or something similar with a FMT7 DSCB.
> This does not allow you to create a new partition.
>
> The only way I managed to get around this is the following:
>
> - format the new DASD using dasdfmt
> - dd old DASD to new DASD
> - run blockdev --flushbufs on new DASD to make sure caches are cleared
> - write down current partition boundaries
> - run fdasd -a on new DASD to create one single partition and fix the size
> - run fdasd on the new DASD to
>  - delete the one partition
>  - create the three partitions with their old boundaries except the
> last one, which can be enhanced to the end of the disk
> - run tool to resize the filesystem (usually resize2fs)
>
> This worked for me but you have to be careful with the partition
> boundaries as any mistake could lead to a damage of the data.
>
> Regards,
> Stefan
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Expanding a zLinux non-LVM disk

2018-04-24 Thread Donald Russell
I have a RHEL 7 zLinux on a single Mod-9 ECKD DASD.  there are three
partitions:
1 - /boot
2 - swap
3 - /

>From one Linux system I tried attaching a not-in-use zLinux Mod-9 and a
Mod-27 and using fdasd and dd to copy the partitions.  That didn’t work,
then I tried a VM DDR of the Mod-9 to  Mod-27. My thinking was I could then
simply expand the the third partition and expand the file system on it.

When I went to delete/create a new partition fdasd thinks my Mod-27 is
still a Mod-9 (10016 cyls)

I’m guessing there’s something in cyl 0 that tells zLinux the size of the
disk.   If I can tweak that to show the disk is actually 32759 cylinders
then I may have a shot at success.

Does anybody have any suggestions for how to move RHEL system from Mod-9 to
Mod-27?

Thanks,
Donald Russell

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Auto login root on 3270 console ttyS0

2017-08-16 Thread Donald Russell
Thanks Paul,

Our security model does not allow sudo. Instead we use something called
pmrun which requires authentication across a network. (Don't get me started
on the pitfalls of that)

sudo nor pmrun address the issue of the "*Enter root password for
maintenance, or CTL-D to continue*" prompt when the system has problems
starting up.

I've convinced our security people that the zLinux console is acceptably
protected by the "logon by" option, especially after pointing out how the
typed zLinux password is displayed, and the console is spooled.

So, now I just want to get all this auto-login working properly. :-)

Cheers,
Don



On Wed, Aug 16, 2017 at 05:12 Paul Flint <fl...@flint.com> wrote:

> Greetings Donald,
>
> The model that many debian packages has preferred over the years is that
> of a "rootless" security model.  In this configuration you must log in as
> a user and then "sudo" to root.  In order to do this you must be in the
> sudoers group or be explicitly mentioned in /etc/sudoers.  If you are
> explicitly cited in /etc/sudoers, then when you get to the "Enter
> root password or CTL-D to continue" prompt on your way to busy box - not a
> plesant or optimal situation you can enter your password and get buzy
> fixing whatever broke.
>
> I really am very happy with this "rootless" model, it is uncommon in RHEL
> and SuSE.
>
> Sincerely,
>
> Flint
>
> On Tue, 15 Aug 2017, Donald Russell wrote:
>
> > Date: Tue, 15 Aug 2017 22:17:07 +
> > From: Donald Russell <russell@gmail.com>
> > Reply-To: Linux on 390 Port <LINUX-390@VM.MARIST.EDU>
> > To: LINUX-390@VM.MARIST.EDU
> > Subject: Auto login root on 3270 console ttyS0
> >
> > I run a SLES 11 (for emergency recovery) and RHEL 7 system on zVM 6.3/6.4
> >
> > Sysadmins can LOGON BY to get to the zLinux console if necessary.
> >
> > How/what do I have to configure so logging onto the 3270 console gets me
> > logged into root in a bash shell automatically? Similar question for
> > sometimes the system has problems coming up and it's prompting for "Enter
> > root password or CTL-D to continue". How can that be bypassed so it just
> > goes into a bash shell logged in as root?
> >
> > I've searched google and see reams and reams of "autologging root is a
> bad
> > idea"... I say that depends I think the zVM userid/password
> protecting
> > access to the zLinux console is sufficient, the "bad idea" view is based
> on
> > a physical machine that anybody could access, that's not the case for
> > ZLinux on z/VM.
> >
> > Thanks,
> > Donald Russell
> >
> >
> > --
> > Sent from iPhone Gmail Mobile
> >
> > --
> > For LINUX-390 subscribe / signoff / archive access instructions,
> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or visit
> > http://www.marist.edu/htbin/wlvindex?LINUX-390
> > --
> > For more information on Linux on System z, visit
> > http://wiki.linuxvm.org/
> >
>
> Kindest Regards,
>
>
>
> ☮ Paul Flint
> (802) 479-2360 Home
> (802) 595-9365 Cell
>
> /
> Based upon email reliability concerns,
> please send an acknowledgement in response to this note.
>
> Paul Flint
> 17 Averill Street
> Barre, VT
> 05641
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>
-- 
Sent from iPhone Gmail Mobile

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Auto login root on 3270 console ttyS0

2017-08-15 Thread Donald Russell
Thanks Mark, and others for the suggestions.  I'll check those out.

Cheers,
Don




On Tue, Aug 15, 2017 at 15:28 Mark Post <mp...@suse.com> wrote:

> >>> On 8/15/2017 at 06:17 PM, Donald Russell <russell@gmail.com>
> wrote:
> > I run a SLES 11 (for emergency recovery) and RHEL 7 system on zVM 6.3/6.4
> >
> > Sysadmins can LOGON BY to get to the zLinux console if necessary.
> >
> > How/what do I have to configure so logging onto the 3270 console gets me
> > logged into root in a bash shell automatically?
>
> For SLES11, modify /etc/inittab
> # Default HMC/3215/3270 console
> 1:2345:respawn:/sbin/ttyrun ttyS0 /sbin/mingetty --noclear %t dumb
>
> and replace it with something like this:
> 1:012356:respawn:/bin/bash -i
>
>
> Mark Post
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>
--
Sent from iPhone Gmail Mobile

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Auto login root on 3270 console ttyS0

2017-08-15 Thread Donald Russell
I run a SLES 11 (for emergency recovery) and RHEL 7 system on zVM 6.3/6.4

Sysadmins can LOGON BY to get to the zLinux console if necessary.

How/what do I have to configure so logging onto the 3270 console gets me
logged into root in a bash shell automatically? Similar question for
sometimes the system has problems coming up and it's prompting for "Enter
root password or CTL-D to continue". How can that be bypassed so it just
goes into a bash shell logged in as root?

I've searched google and see reams and reams of "autologging root is a bad
idea"... I say that depends I think the zVM userid/password protecting
access to the zLinux console is sufficient, the "bad idea" view is based on
a physical machine that anybody could access, that's not the case for
ZLinux on z/VM.

Thanks,
Donald Russell


--
Sent from iPhone Gmail Mobile

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Radius client for RHEL 7/apache

2016-10-11 Thread Donald Russell
Thanks Neale,

Is this something you will make available soon? Is there a $ cost? How much?

Thanks,
Don




On Friday, October 7, 2016, Neale Ferguson <ne...@sinenomine.net> wrote:

> We have built the client RPMs for 6 & 7 but have not tested them yet.
>
> On 10/7/16, 4:28 PM, "Linux on 390 Port on behalf of Donald Russell"
> <LINUX-390@VM.MARIST.EDU <javascript:;> on behalf of russell@gmail.com
> <javascript:;>> wrote:
>
> >Hi,
> >
> >I want to install a radius client on RHEL 7 so apache can authenticate a
> >userid/one-time-password.
> >
> >Red Hat supplies a radius server package but no client.  :-(
> >
> >Has anybody here installed a a radius client on RHEL?
> >Where did you get the package or did you install from source and compile
> >it
> >yourself etc.?
> >
> >Any help is appreciated.
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu <javascript:;> with the message:
> INFO LINUX-390 or visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>


--
Sent from iPhone Gmail Mobile

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Radius client for RHEL 7/apache

2016-10-07 Thread Donald Russell
Hi,

I want to install a radius client on RHEL 7 so apache can authenticate a
userid/one-time-password.

Red Hat supplies a radius server package but no client.  :-(

Has anybody here installed a a radius client on RHEL?
Where did you get the package or did you install from source and compile it
yourself etc.?

Any help is appreciated.

Cheers,
Don


--
Sent from iPhone Gmail Mobile

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Creating root LVM

2016-08-23 Thread Donald Russell
We have rhel5 with rootvg and rootlv. That caused us some grief when a root
password was lost and we "simply wanted to mount it on another system".
Not so fast there skippy, all the systems have rootvg/lv so we had to work
around that... (Not rocket science, but inconvenient)

Now, (upgrading to rehl7) we put the "basic Linux system" on a
simple-to-use Mod-9 and use LVM for application file systems and a few
others.  Now it's very simple to mount that / file system on another server
if necessary.





On Tuesday, August 23, 2016, Michael Weiner 
wrote:

> Good morning all,
>
> I was having a little debate yesterday and I want to get the experts on
> this list opinions.
>
> What's the best practice when it comes to the root directory?
>
> Is it acceptable and recommend to create an vgroot and lvroot so it is
> expandable?
>
> Or is it recommended to have the root directory as a regular directory and
> not expandable.
>
> Thank you!
>
>
> Sent from my iPhone
>
>
> Sent from my iPhone
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu  with the message:
> INFO LINUX-390 or visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>


--
Sent from iPhone Gmail Mobile

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


RHEL 7.2 trapping signal shutdown (aka ctl-alt-del)

2016-01-15 Thread Donald Russell
In RHEL 5, changing the behavior of signal shutdown was simple: the
shutdown command was in /etc/inittab, change that to shutdown -h ... done.

With RHEL 7, everything is convertd to systemd, and it appears a signal
shutdown performs a shutdown -r  No good.

We already use chshut so halt stops, and poff logs off, and those work
great when the shutdown command is used manually.

But, we're having a heck of time trying to find what to change so
"ctl-alt-del" (signal shutdown) results in shutdown -P +1

Any suggestions/solutions?

Thank you,
Donald Russell

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: RHEL 7.2 trapping signal shutdown (aka ctl-alt-del)

2016-01-15 Thread Donald Russell
Thanks Mark,

I'll check that out.

Whether we use now or +1 doesn't matter too much, I prefer the +1 in case
somebody is logged on, then they have a minute to save their work and log
off.

The signal is being sent with the cp force command, or when VM shuts down.
We found Linux would shutdown, then restart.  Then the cp signal time would
expire and cp forced the Id off. :-(

Cheers
Donald Russell


On Friday, January 15, 2016, Mark Post <mp...@suse.com> wrote:

> >>> On 1/15/2016 at 05:28 PM, Donald Russell <russell@gmail.com
> <javascript:;>> wrote:
> > In RHEL 5, changing the behavior of signal shutdown was simple: the
> > shutdown command was in /etc/inittab, change that to shutdown -h ...
> done.
>
> Actually, that wasn't ever needed.  z/VM would halt the guest, even though
> "shutdown -r" was in inittab.
>
> > With RHEL 7, everything is convertd to systemd, and it appears a signal
> > shutdown performs a shutdown -r  No good.
>
> I don't see that behavior on SLES12 or SLES12 SP1.  Things shut down as
> before.  What is the exact command that is being issued to generate the
> signal.  I sign on to my guest and do
> #cp signal shutdown within 90
>
> I just checked and the symbolic link ctrl-alt-del.target still points to
> reboot.target, so not sure what's going on with your system.
>
> You could try this:
> cd /etc/systemd/system
> ln -s /lib/systemd/system/poweroff.target ctrl-alt-del.target
>
> (I believe /lib is where RHEL has their systemd files.  If not there, then
> perhaps /usr/lib/systemd/system.)
>
> > We already use chshut so halt stops, and poff logs off, and those work
> > great when the shutdown command is used manually.
> >
> > But, we're having a heck of time trying to find what to change so
> > "ctl-alt-del" (signal shutdown) results in shutdown -P +1
>
> My experience has always been that it was the equivalent of a "shutdown
> now" not +1.
>
>
> Mark Post
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu <javascript:;> with the message:
> INFO LINUX-390 or visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>


--
Sent from iPhone Gmail Mobile

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: RHEL 7.2 trapping signal shutdown (aka ctl-alt-del)

2016-01-15 Thread Donald Russell
lsshut displays the expected values, so if I use...
shutdown -h now, the system shuts down and stops in cp read
shutdown -P now, the system shuts down and logs off
shutdown -r now, the system shuts down and restarts

But if, from another ID, I CP FORCE linuxid, the Linux system shuts down
and restarts.  So somewhere ctl-alt-del is leading to a shutdown -r now,
and I want to change that to a shutdown -P now, or +1.

Perhaps it's time to open a case with red hat support.

Thanks,
Donald Russell


On Friday, January 15, 2016, Marcy Cortes <marcy.d.cor...@wellsfargo.com>
wrote:

> I don't have any RH here, but what does "lsshut" tell you?
>
>
> -Original Message-
> From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU <javascript:;>]
> On Behalf Of Donald Russell
> Sent: Friday, January 15, 2016 2:28 PM
> To: LINUX-390@VM.MARIST.EDU <javascript:;>
> Subject: [LINUX-390] RHEL 7.2 trapping signal shutdown (aka ctl-alt-del)
>
> In RHEL 5, changing the behavior of signal shutdown was simple: the
> shutdown command was in /etc/inittab, change that to shutdown -h ... done.
>
> With RHEL 7, everything is convertd to systemd, and it appears a signal
> shutdown performs a shutdown -r  No good.
>
> We already use chshut so halt stops, and poff logs off, and those work
> great when the shutdown command is used manually.
>
> But, we're having a heck of time trying to find what to change so
> "ctl-alt-del" (signal shutdown) results in shutdown -P +1
>
> Any suggestions/solutions?
>
> Thank you,
> Donald Russell
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions, send
> email to lists...@vm.marist.edu <javascript:;> with the message: INFO
> LINUX-390 or visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit http://wiki.linuxvm.org/
>


--
Sent from iPhone Gmail Mobile

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: file corruption on RHEL 5.8

2013-10-03 Thread Donald Russell
On Thu, Oct 3, 2013 at 2:34 AM, Rob van der Heij rvdh...@gmail.com wrote:

 On Wed, Oct 2, 2013 at 7:17 PM, Donald Russell russell@gmail.com
 wrote:

 
  In the case I'm currently working on, a .so file (binary) has a chunk
 of
  plain text in the middle of it. The chunk is 4K bytes long, and is a
  piece of a program listing. 4K is the block size of the underlying DASD.
 
  I am now in the process of trying to find when this happened by restoring
  backup copies and seeing if I can narrow the time frame down.
 

 Was either or both of these files supposed to be written? The .so file
 would be written only when you install the package. If the .so was not
 written, the origin of the text might point to the cause. And what's
 underneath; is it a plain device or is there LVM or md in between?


​Both files are expected to be written, not necessarily at the same time.
The listing piece is not associated with the .so file.
​


 Since you mention journaling errors, did you have fsck repair things that
 could actually have created this? (we've seen that in the past with fsck on
 ReiserFS disks). The minidisk isn't R/O, is it?  I think that has been
 fixed now, but initially we had problems where Linux eventually would drop
 dirty blocks when it couldn't write them to disk.


​The journaling errors were from a long time ago, and yes, we ran fsck -y
to fix all the errors. Are you saying that fsck -y (or answering y to an
individual prompt) may cause file corruption that looks like this? That
would explain why a single block of data gets replaced in the middle of a
file.
​


 Can you DDR the minidisk to another place and link thata in another Linux
 guest? That way you can run fsck as you like.


​Yes, we take the system down weekly to do a DDR backup to another complete
set of DASD... I can bring that DDR copy up in single user mode. (We also
use a linux backup utility to take daily backups.)

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


file corruption on RHEL 5.8

2013-10-02 Thread Donald Russell
RHEL 5.8 zLinux on zVM 6.1 using ECKD disks

We have a recurring problem where files get corrupted. It always happens in
the same directory, and we always wind up running fsck in single user mode
to get the file system back together.

The file system is EXT-2. (We changed from EXT-3 on this FS due to numerous
journaling errors which caused the FS to go to RO mode)

In the case I'm currently working on, a .so file (binary) has a chunk of
plain text in the middle of it. The chunk is 4K bytes long, and is a
piece of a program listing. 4K is the block size of the underlying DASD.

I am now in the process of trying to find when this happened by restoring
backup copies and seeing if I can narrow the time frame down.

Obviously I don't expect a do this to fix the problem, but what I'm
wondering is, has anybody else encountered this? What could cause a block
in the middle of the file to be overwritten this way? Are there any tools I
can run (preferably while the system is at runlevel 3 or 5) to check if two
(or more) files are using the same block in a file?

I envision a bad block pointer somewhere, but how does that happen?

I'm considering converting the file system to EXT-4... I don't think
there's a conversion per-se, I'd create a new EXT-4 FS then copy all the
files from the EXT2 FS to the EXT-4 one.

Any suggestions/help are greatly appreciated.

Thank you,
Donald Russell

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: file corruption on RHEL 5.8

2013-10-02 Thread Donald Russell
Thanks Mauro,

I've checked for overlaps, and confirmed there are none that could account
for this my next step is to check the swap files as Michael
suggests though if we had those sorts of problems I'd expect to see
much more corruption.

The investigation continues...

Cheers,
Donald Russell



On Wed, Oct 2, 2013 at 10:28 AM, Mauro Souza thoriu...@gmail.com wrote:

 Data corruption should be *very* rare in any working system. The majority
 of the cases occurs when two systems write on the same disk, uncoordinated.
 When you changed from ext3 to ext2, you threw away the only thing
 preventing this to happen. Ext3 detected something amiss, and locked the
 disk to prevent further damage. ext2 don't see anything amiss, write down
 the data, and corrupts everything. Working as designed. You just removed
 the safety pin that blocked your gun to fire when aimed at your foot (or
 your head).

 You should execute DISKMAP or DIRMAP on your system to see if there are
 overlapping minidisks. You should see a overlap. Correcting the overlap
 shall correct the corruption.
 And, please, revert back to ext3. It will save your data, and you can see
 messages on syslog if things go astray...

 Mauro
 http://mauro.limeiratem.com - registered Linux User: 294521
 Scripture is both history, and a love letter from God.


 2013/10/2 Donald Russell russell@gmail.com

  RHEL 5.8 zLinux on zVM 6.1 using ECKD disks
 
  We have a recurring problem where files get corrupted. It always happens
 in
  the same directory, and we always wind up running fsck in single user
 mode
  to get the file system back together.
 
  The file system is EXT-2. (We changed from EXT-3 on this FS due to
 numerous
  journaling errors which caused the FS to go to RO mode)
 
  In the case I'm currently working on, a .so file (binary) has a chunk
 of
  plain text in the middle of it. The chunk is 4K bytes long, and is a
  piece of a program listing. 4K is the block size of the underlying DASD.
 
  I am now in the process of trying to find when this happened by restoring
  backup copies and seeing if I can narrow the time frame down.
 
  Obviously I don't expect a do this to fix the problem, but what I'm
  wondering is, has anybody else encountered this? What could cause a block
  in the middle of the file to be overwritten this way? Are there any
 tools I
  can run (preferably while the system is at runlevel 3 or 5) to check if
 two
  (or more) files are using the same block in a file?
 
  I envision a bad block pointer somewhere, but how does that happen?
 
  I'm considering converting the file system to EXT-4... I don't think
  there's a conversion per-se, I'd create a new EXT-4 FS then copy all the
  files from the EXT2 FS to the EXT-4 one.
 
  Any suggestions/help are greatly appreciated.
 
  Thank you,
  Donald Russell
 
  --
  For LINUX-390 subscribe / signoff / archive access instructions,
  send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
  visit
  http://www.marist.edu/htbin/wlvindex?LINUX-390
  --
  For more information on Linux on System z, visit
  http://wiki.linuxvm.org/
 

 --
 For LINUX-390 subscribe / signoff / archive access instructions,
 send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit
 http://www.marist.edu/htbin/wlvindex?LINUX-390
 --
 For more information on Linux on System z, visit
 http://wiki.linuxvm.org/


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Is MVS TRSMAIN (terse) available for zLinux?

2011-07-30 Thread Donald Russell
Thank you the responses.

I prefer a terse program for Linux because I have geographically diverse MVS
systems sending large plain test files to a single zLinux system. From that
zLinux system, we occasionally need to send the file to a 3rd party that can
cope with terse files, anything else causes them grief. :-(

I would actually like to keep the file on zLinux as .gz file, then only
create a terse file to send to the 3rd party.

So, yes, the my mvs systems could send the file to zLinux in any
compression form zLinux knows, that would be OK... I can update the JCL
there. But, that still leaves creating the terse file to send to a 3rd
party.

I do have an MVS system local to the zLinux system, so maybe I'll write
something to move the file up there, terse it and ftp it to the 3rd party
from mvs instead of zLinux...

Cheers



On Fri, Jul 29, 2011 at 17:41, John McKown john.archie.mck...@gmail.comwrote:

 BZIP2 is available for z/OS on the Tools @ Toys IBM page.
 On Jul 29, 2011 3:58 PM, Donald Russell russell@gmail.com wrote:
  Several MVS systems currently ftps put to zLinux some very large plain
 text
  files Some are several GB in size.
 
  I would like to change the MVS process to terse the file before sending,
 but
  as far as I've been able to find, an unterse is not available on Linux. I
  doubt that's true, I just don't know where to look. :-)
 
  These files are not PDS(E), or other things that linux has no concept of,
  they are just plain, flat files... (They are actually FBM text files, but
  when linux gets it, I know longer care about the M part, these things
 will
  never be printed.
 
  Can somebody suggest where I can get a trsmain equivalent that runs on
  Linux?
 
  Thank you
 
  --
  For LINUX-390 subscribe / signoff / archive access instructions,
  send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit
  http://www.marist.edu/htbin/wlvindex?LINUX-390
  --
  For more information on Linux on System z, visit
  http://wiki.linuxvm.org/

 --
 For LINUX-390 subscribe / signoff / archive access instructions,
 send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit
 http://www.marist.edu/htbin/wlvindex?LINUX-390
 --
 For more information on Linux on System z, visit
 http://wiki.linuxvm.org/


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Is MVS TRSMAIN (terse) available for zLinux?

2011-07-29 Thread Donald Russell
Several MVS systems currently ftps put to zLinux some very large plain text
files Some are several GB in size.

I would like to change the MVS process to terse the file before sending, but
as far as I've been able to find, an unterse is not available on Linux. I
doubt that's true, I just don't know where to look. :-)

These files are not PDS(E), or other things that linux has no concept of,
they are just plain, flat files... (They are actually FBM text files, but
when linux gets it, I know longer care about the M part, these things will
never be printed.

Can somebody suggest where I can get a trsmain equivalent that runs on
Linux?

Thank you

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


RHEL 5.6 adding LUNs and mkinitrd

2011-07-02 Thread Donald Russell
I have RHEL 5.6 running on zVM 6.1. The RHEL userid has several FCP devices
dedicated in the cp directory.

When I add LUNs to the system to create a new file system, or expand an
existing one, I add the fcp/wwpn/lun triplet to /etc/zfcp.conf, run zfcp.sh
which then brings them all online. I then echo reconfigure | multipathd
-r. (I think it's -r, I'm going by memory here)

All seems to be good, and everything survives a reboot... but recently I've
come across something about using mkinitrd and using zipl...

Is that necessary? Where can I read more about mkinitrd and when it is
needed and so on?

Thanks very much

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


is ext4 ready for production use?

2011-06-27 Thread Donald Russell
I'm about to build some new RHEL 5.6 systems on zVM 6.1 the old servers
use ext3 file systems, but I have the option to use ext4.

Is ext4 ready for production use, or is it still rather experimental.

I've ready that ext4 has some advantages over ext3, but I'm not really clear
on what those advantages are. :-(

Any ideas, suggestions? pros/cons?

If it matters, the file systems will be on dedicated FCP scsi disks using 8
paths to each LUN. (Except the /boot partition, RHEL 5.6 can't boot from a
mpath device, so I put /boot on a small ECKD minidisk. :-)

And, while I'm here, I use DEDICATE   NOQIOASSIST

I did read that NOQIOASSIST was necessary, yet in looking at some other
system we have, my predecessor did not use that option, and the systems
appear to work OK... Is NOQIOASSIST no longer needed, and is there really a
benefit to leaving that out?

Thanks very much.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: How to get into single user mode - RHEL 5.6

2011-06-26 Thread Donald Russell
Yes it is... rootvg :-) mounted at /

But, easier than that was CP IPL 100 PARM SINGLE, no messing around with
detaching/linking mdisks and so on.

But I'll look into Scot's advice of creating a single disk rescue system

On Sat, Jun 25, 2011 at 17:59, Richard Troth vmcow...@gmail.com wrote:

 Is the volume group of the damaged system the same as the volume group of
 the repairing system?

 -- R; 




 On Jun 25, 2011 5:49 PM, Donald Russell russell@gmail.com wrote:
  Thanks Scott There are other files systems that also use LVM, but I
 know
  the root file system is all on the 100 disk only.
 
  I can't actually unmount anything... but I can shut the whole server down
  and log it off.
  On my healthy system I can attach (link) the disk, but that's where
 you're
  saying I'll have a name conflict because there will already be rootvg
 volume
  group.
 
  Interrupted ... 
 
  Solved:
  #CP 100 PARM SINGLE
 
  Whuwho! I'm in and problem fixed.
 
 
  On Sat, Jun 25, 2011 at 13:48, Scott Rohling scott.rohl...@gmail.com
 wrote:
 
  If it's really a single disk LVM -- unmount it.. You need to do a
 pvscan,
  vgscan, and then vgchange -ay volume-group.. then mount
  /dev/volume-group/logical-volume. And if your other server already uses
  the same volume-group name - you will have to rename it before you can
  activate the new one. (if the lvm consists of more than the 100 disk -
  you
  need to link and activate those too..)
 
  Sounds like you did a zipl -X at some point, which eliminates the
 startup
  menu..
 
  Good luck!
 
  Scott Rohling
 
  On Sat, Jun 25, 2011 at 2:11 PM, Donald Russell russell@gmail.com
  wrote:
 
   RHEL 5.6 on zVM 6.1
  
   I made a change to /etc/pam.d/system-auth and didn't test it before
  logging
   off again. :-(
  
   Now, nobody can logon because they get an error, Module not found.
 (I
   must
   have fat-fingered the module name I was adding.
  
   OK, no big deal, signal shutdown user x within 300 to bring the server
  down
   and reboot in single user mode
  
   Except the server doesn't stop at the usual prompt asking what to
  boot,
   it just comes up. (Normally that's when I would say #CP VI VMSG 0 1 to
  come
   up in single user mode...
  
   So, I tried shutting it down and logging off, then attach the 100
 mdisk
   (boot and root file systems) to another running zLinux system.
  
   From the running zLinux system I linked to the other 100 disk in write
  mode
   (while its proper owner was logged off) and tried to mount the
 partition
  at
   /mnt... where I thought I could then correct the bad file.
  
   I said mount /dev/dasdm2 /mnt and was told I had to specify the file
  system
   type
   mount -t ext3 /dev/dasdm2 /mnt
   Nope... it says it can't find an ext3 file system there.
  
   I have no reason to think the data is damaged in anyway... but it is
 also
   an
   LVM disk
  
   So, I'm looking for some help in how to recover from this snafu. :-)
  
   Thank you
  
   --
   For LINUX-390 subscribe / signoff / archive access instructions,
   send email to lists...@vm.marist.edu with the message: INFO LINUX-390
 or
   visit
   http://www.marist.edu/htbin/wlvindex?LINUX-390
   --
   For more information on Linux on System z, visit
   http://wiki.linuxvm.org/
  
 
  --
  For LINUX-390 subscribe / signoff / archive access instructions,
  send email to lists...@vm.marist.edu with the message: INFO LINUX-390
 or
  visit
  http://www.marist.edu/htbin/wlvindex?LINUX-390
  --
  For more information on Linux on System z, visit
  http://wiki.linuxvm.org/
 
 
  --
  For LINUX-390 subscribe / signoff / archive access instructions,
  send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit
  http://www.marist.edu/htbin/wlvindex?LINUX-390
  --
  For more information on Linux on System z, visit
  http://wiki.linuxvm.org/

 --
 For LINUX-390 subscribe / signoff / archive access instructions,
 send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit
 http://www.marist.edu/htbin/wlvindex?LINUX-390
 --
 For more information on Linux on System z, visit
 http://wiki.linuxvm.org/


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Re: How to get into single user mode - RHEL 5.6

2011-06-26 Thread Donald Russell
Some good ideas there Scott. :-)

Even though IPL cuu PARM SINGLE is great for getting me into single user
mode, the other nice thing about having the menu reinstated is it lets me
back out a kernel more easily... reboot... choose the older one ... done.
The few second delay in having it time out is not a concern at all.

Cheers,



On Sat, Jun 25, 2011 at 16:08, Scott Rohling scott.rohl...@gmail.comwrote:

 I meant unmount it from the system you were trying to recover it from --
 cuz
 you needed to mount is as an LVM -- not as a filesystem.   But - the
 duplicate vg apparently would have stopped you.  I forgot about the SINGLE
 parm -- nice one.

 Couple recommendations:

 -  ensure /etc/zipl.conf has the correct menu listings - and issue 'zipl'
  without the -X option.. hopefully that gives you the boot menu back -- but
 maybe you don't want it now that you have the magic incantation.
 -  you may want to define yourself a recovery server that doesn't use LVM
 --
 just have a minimal system on a single minidisk.   avoid volume group name
 conflicts completely.  Only bring it up when needed.

 Scott Rohling


 On Sat, Jun 25, 2011 at 3:46 PM, Donald Russell russell@gmail.com
 wrote:

  Thanks Scott There are other files systems that also use LVM, but I
  know
  the root file system is all on the 100 disk only.
 
  I can't actually unmount anything... but I can shut the whole server down
  and log it off.
  On my healthy system I can attach (link) the disk, but that's where
 you're
  saying I'll have a name conflict because there will already be rootvg
  volume
  group.
 
  Interrupted ... 
 
  Solved:
  #CP 100 PARM SINGLE
 
  Whuwho! I'm in and problem fixed.
 
 
  On Sat, Jun 25, 2011 at 13:48, Scott Rohling scott.rohl...@gmail.com
  wrote:
 
   If it's really a single disk LVM -- unmount it..   You need to do a
  pvscan,
   vgscan, and then vgchange -ay volume-group..   then mount
   /dev/volume-group/logical-volume.And if your other server already
  uses
   the same volume-group name - you will have to rename it before you can
   activate the new one.   (if the lvm consists of more than the 100 disk
 -
   you
   need to link and activate those too..)
  
   Sounds like you did a zipl -X at some point, which eliminates the
 startup
   menu..
  
   Good luck!
  
   Scott Rohling
  
   On Sat, Jun 25, 2011 at 2:11 PM, Donald Russell russell@gmail.com
   wrote:
  
RHEL 5.6 on zVM 6.1
   
I made a change to /etc/pam.d/system-auth and didn't test it before
   logging
off again. :-(
   
Now, nobody can logon because they get an error, Module not found.
 (I
must
have fat-fingered the module name I was adding.
   
OK, no big deal, signal shutdown user x within 300 to bring the
 server
   down
and reboot in single user mode
   
Except the server doesn't stop at the usual prompt asking what to
   boot,
it just comes up. (Normally that's when I would say #CP VI VMSG 0 1
 to
   come
up in single user mode...
   
So, I tried shutting it down and logging off, then attach the 100
 mdisk
(boot and root file systems) to another running zLinux system.
   
From the running zLinux system I linked to the other 100 disk in
 write
   mode
(while its proper owner was logged off) and tried to mount the
  partition
   at
/mnt... where I thought I could then correct the bad file.
   
I said mount /dev/dasdm2 /mnt and was told I had to specify the file
   system
type
mount -t ext3 /dev/dasdm2 /mnt
Nope... it says it can't find an ext3 file system there.
   
I have no reason to think the data is damaged in anyway... but it is
  also
an
LVM disk
   
So, I'm looking for some help in how to recover from this snafu. :-)
   
Thank you
   
   
 --
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO
 LINUX-390
  or
visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
   
 --
For more information on Linux on System z, visit
http://wiki.linuxvm.org/
   
  
   --
   For LINUX-390 subscribe / signoff / archive access instructions,
   send email to lists...@vm.marist.edu with the message: INFO LINUX-390
 or
   visit
   http://www.marist.edu/htbin/wlvindex?LINUX-390
   --
   For more information on Linux on System z, visit
   http://wiki.linuxvm.org/
  
 
  --
  For LINUX-390 subscribe / signoff / archive access instructions,
  send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
  visit
  http://www.marist.edu/htbin/wlvindex?LINUX-390

How to get into single user mode - RHEL 5.6

2011-06-25 Thread Donald Russell
RHEL 5.6 on zVM 6.1

I made a change to /etc/pam.d/system-auth and didn't test it before logging
off again. :-(

Now, nobody can logon because they get an error, Module not found. (I must
have fat-fingered the module name I was adding.

OK, no big deal, signal shutdown user x within 300 to bring the server down
and reboot in single user mode

Except the server doesn't stop at the usual prompt asking what to boot,
it just comes up. (Normally that's when I would say #CP VI VMSG 0 1 to come
up in single user mode...

So, I tried shutting it down and logging off, then attach the 100 mdisk
(boot and root file systems) to another running zLinux system.

From the running zLinux system I linked to the other 100 disk in write mode
(while its proper owner was logged off) and tried to mount the partition at
/mnt... where I thought I could then correct the bad file.

I said mount /dev/dasdm2 /mnt and was told I had to specify the file system
type
mount -t ext3 /dev/dasdm2 /mnt
Nope... it says it can't find an ext3 file system there.

I have no reason to think the data is damaged in anyway... but it is also an
LVM disk

So, I'm looking for some help in how to recover from this snafu. :-)

Thank you

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: How to get into single user mode - RHEL 5.6

2011-06-25 Thread Donald Russell
Thanks Scott There are other files systems that also use LVM, but I know
the root file system is all on the 100 disk only.

I can't actually unmount anything... but I can shut the whole server down
and log it off.
On my healthy system I can attach (link) the disk, but that's where you're
saying I'll have a name conflict because there will already be rootvg volume
group.

Interrupted ... 

Solved:
#CP 100 PARM SINGLE

Whuwho! I'm in and problem fixed.


On Sat, Jun 25, 2011 at 13:48, Scott Rohling scott.rohl...@gmail.comwrote:

 If it's really a single disk LVM -- unmount it..   You need to do a pvscan,
 vgscan, and then vgchange -ay volume-group..   then mount
 /dev/volume-group/logical-volume.And if your other server already uses
 the same volume-group name - you will have to rename it before you can
 activate the new one.   (if the lvm consists of more than the 100 disk -
 you
 need to link and activate those too..)

 Sounds like you did a zipl -X at some point, which eliminates the startup
 menu..

 Good luck!

 Scott Rohling

 On Sat, Jun 25, 2011 at 2:11 PM, Donald Russell russell@gmail.com
 wrote:

  RHEL 5.6 on zVM 6.1
 
  I made a change to /etc/pam.d/system-auth and didn't test it before
 logging
  off again. :-(
 
  Now, nobody can logon because they get an error, Module not found. (I
  must
  have fat-fingered the module name I was adding.
 
  OK, no big deal, signal shutdown user x within 300 to bring the server
 down
  and reboot in single user mode
 
  Except the server doesn't stop at the usual prompt asking what to
 boot,
  it just comes up. (Normally that's when I would say #CP VI VMSG 0 1 to
 come
  up in single user mode...
 
  So, I tried shutting it down and logging off, then attach the 100 mdisk
  (boot and root file systems) to another running zLinux system.
 
  From the running zLinux system I linked to the other 100 disk in write
 mode
  (while its proper owner was logged off) and tried to mount the partition
 at
  /mnt... where I thought I could then correct the bad file.
 
  I said mount /dev/dasdm2 /mnt and was told I had to specify the file
 system
  type
  mount -t ext3 /dev/dasdm2 /mnt
  Nope... it says it can't find an ext3 file system there.
 
  I have no reason to think the data is damaged in anyway... but it is also
  an
  LVM disk
 
  So, I'm looking for some help in how to recover from this snafu. :-)
 
  Thank you
 
  --
  For LINUX-390 subscribe / signoff / archive access instructions,
  send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
  visit
  http://www.marist.edu/htbin/wlvindex?LINUX-390
  --
  For more information on Linux on System z, visit
  http://wiki.linuxvm.org/
 

 --
 For LINUX-390 subscribe / signoff / archive access instructions,
 send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit
 http://www.marist.edu/htbin/wlvindex?LINUX-390
 --
 For more information on Linux on System z, visit
 http://wiki.linuxvm.org/


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: How to tell if hardware crypto is used

2011-06-20 Thread Donald Russell
Thanks very much to you and Pedro you provided the missing pieces for
me. :-)

Cheers,



On Mon, Jun 20, 2011 at 05:57, Holger Dengler h...@linux.vnet.ibm.com wrote:

 Hi Donald,


 On 18.06.2011 16:25, Donald Russell wrote:

 cat /dev/driver/z90crypt shows a bunch of numbers, but they're all zero
 and
 don't change when the stunnel apps run. I have engine=auto in the stunnel
 config

 As Pedro already mentioned, please consult the whitepaper how to setup
 openssl. As soon, as the engine is known to openssl, you can reference it in
 the stunnel config using engine = auto or engien = engine_id.

 The usage of the crypto cards can also be checked with the lszcrypt tool:
 lszcrypt -VV shows you (among other information) the request counts per
 crypto card.

 with kind regards,
 Holger Dengler

 Linux on System z Development

 IBM Deutschland Research  Development GmbH
 Vorsitzender des Aufsichtsrats: Martin Jetter
 Geschäftsführung: Dirk Wittkopp
 Sitz der Gesellschaft: Böblingen
 Registergericht: Amtsgericht Stuttgart, HRB 243294


 --**--**--
 For LINUX-390 subscribe / signoff / archive access instructions,
 send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit
 http://www.marist.edu/htbin/**wlvindex?LINUX-390http://www.marist.edu/htbin/wlvindex?LINUX-390
 --**--**--
 For more information on Linux on System z, visit
 http://wiki.linuxvm.org/


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


How to tell if hardware crypto is used

2011-06-18 Thread Donald Russell
I have RHEL 5.6 running on zVM 6.1, there is a real crypto card in the box.

I have  CRYPTO APVIRTUAL in the CP directory of the linux machine and have
loaded the z90crypt driver...

Is there a VM CP command I can use that will actually show the hardware card
is really in use? How do I know Linux is actually using it, and not just
doing everything in software?

cat /dev/driver/z90crypt shows a bunch of numbers, but they're all zero and
don't change when the stunnel apps run. I have engine=auto in the stunnel
config

Thanks :-)

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


RHEL 5.6 hangs, 3270/3215 console is dead.

2011-05-05 Thread Donald Russell
I've recently installed RHEL 5.6 on zVM 6.1

The /boot partition is on 3930 minidisk, and everything else is on FCP/SCSI
using mpath, with 8 paths defined to each LUN.

The interesting thing from a VM point of view is that servers using this SAN
get IO errors on the FCP devices, causing the zLinux system to hang... can't
connect with ssh, any connected sessions stop responding... and worse.. when
I log on to the guest VM ID, after entering the password, the system just
hangs there... no Reconnected at ...  message... and I can't enter any #CP
commands (set run on is in effect)

Now, on MAINT, I issue QUERY SIGNALS.. and the maint ID gets hung,
displaying a partial response.

Then, from another ID, I FORCE the zLinux guest... sure enough, zLinux
catches the signal and runs shutdown -h now and zLinux cycles itself down
and logs off (because I have chshut halt cmd LOGOFF in effect)

So, the IO errors I'm taking to the SAN vendor... but what could cause
zLinux to lock up so hard, and yet still respond to ctl-alt-delete AKA
SIGNAL SHUTDOWN? And why does MAINT hang up trying to display QUERY
SIGNALS... which does complete when I force the zLinux guest off.

Thank you

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: vdisk

2011-04-28 Thread Donald Russell
On Wed, Apr 20, 2011 at 07:38, Scott Rohling scott.rohl...@gmail.comwrote:

 Exactly - vdisk is in memory and will be lost if the guest is logged off --
  so must be formatted for swap and mounted as swap by Linux when the guest
 is started..



I have MDISK statements in the CP directory, and when the machine is
autologged it runs CMS. The PROFILE EXEC then formats any attached vdisks as
linux swap space, then IPLs/boots zLinux

I have the swap drives defined in /etc/fstab as swap disks and they get
brought in at boot time, long before /etc/rc.local runs.

No need for a mkswap anywhere in linux.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Using FCP for RHEL 5.6 kickstart install (solved/work around)

2011-04-26 Thread Donald Russell
On Mon, Apr 25, 2011 at 22:17, Donald Russell russell@gmail.com wrote:

 When I install RHEL on FCP/SCSI if I specify only FCP_1 in the CMS file
 parm file everything goes fine. When I specify a second (or more) path
 (FCP_2 etc) everything goes fine right up until the reboot after installing
 everything.

 At that point I get CP Interrupt loop detected, and it goes to CP READ.


snip

The Reader's Digest version of this is I put /boot on a 3390 minidisk, and /
on mapper/mpath0 and specified all the paths on the FCP_n= statements in the
parm file.

Kickstart was happy, and the firstboot worked correctly.

/boot cannot be on an mpath device. This changes in RHEL 6 apparently, but
I've not had the opportunity to try that yet.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Using FCP for RHEL 5.6 kickstart install

2011-04-25 Thread Donald Russell
When I install RHEL on FCP/SCSI if I specify only FCP_1 in the CMS file parm
file everything goes fine. When I specify a second (or more) path (FCP_2
etc) everything goes fine right up until the reboot after installing
everything.

At that point I get CP Interrupt loop detected, and it goes to CP READ.

What I'm hearing now is that zipl does not support having the boot partition
on an mpath device... is that true? If so, I think I'll just create an
EDEVICE for than LUN and define all the paths in VM.

But, can anybody point me to some (current) doc that describes how to
setup/perform a kickstart install on FCP using multiple paths, and have a
working system at the end. ;-)

Sorry if I sound a little terse, I've just lost a lot of time due to
out-of-date and/or incorrect documentation. (Yes, I have cases open with Red
Hat and they are in the process of updating/correcting the doc)

So, I'm hoping somebody has blazed this trail before me and can share some
insight. :-)

Cheers

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


FBA/SCSI vs ECKD zLinux on VM

2011-03-11 Thread Donald Russell
I currently have a dozen or so RHEL 5.6 zLinux running on multiple VM 6.1
(well, 5, but 6.1 RSN), on z10 processors.

The largest (disk space) is about 3TB and is currently FBA/SCSI

We're thinking of changing this to ECKD to take advantage of the SAP to do
the real IO, instead of IO being handled within zLinux itself.

(We have other zLinux system using ECKD)

On one hand using ECKD will get us some CPU cycles back due to more work
being done by the SAP, but just recenly I heard that IO can be faster
(higher throughput) with FBA/SCSI.

I'm assuming there's no clear answer as to which is best, because like so
many performance tuning things, the answer is always it depends.

But, what are other people doing? My experience so far seems to be that the
choice of SCSI or ECKD depends on the background of the people making the
decision people with a s390 background are familiar with ECKD, people
coming from a unix/linux background are familiar with SCSI..

Thank you

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: PAM to authenticate using zVM userid/password

2011-02-23 Thread Donald Russell
Thanks to all who replied with suggestions.


Yes, it's not about being cool, or going boldly where others fear to tread,
but rather making people less cranky about password maintenance.

In my environment, all zLinux users are also VM/CMS users. They have a
userid on VM and the same userid on zLinux. The password complaint I hear
most often is... Why can't they be the same? Why do I have to change it in
both places?

Seems like a CMS LDAP solution for zLinux to use fits the bill nicely. Users
may continue to change their VM password in the ol' familiar ways, and that
immediately affects the zLinux password. zLinux password maintenance goes
away. Users less cranky, me more happy. :-)

In many cases, zLinux access is via the IBM Toolkit from a Windows desktop,
so users are pretty sheltered from zLinux.

And no, in our case we don't have a single, central respository of
userid/password for all systems different departments have and manage
their own. Separation of duties, or unnecessary duplicated effort? You
decide. :-)

Cheers,
Donald Russell




On Wed, Feb 16, 2011 at 13:52, Marcy Cortes
marcy.d.cor...@wellsfargo.comwrote:

 Well, being devil's advocate here...
 Why is it a cool thing to do?  Doesn't it make more sense to use whatever
 every other Linux/unix box in your shop is using?All those other people
 may get cranky if you make them get a CMS id to login to Linux or to use a
 web app.

 Unless you have no Linux or Unix in your shop and only CMS and no other
 centralized directory...

 Marcy

 -Original Message-
 From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of Dave
 Jones
 Sent: Wednesday, February 16, 2011 1:38 PM
 To: LINUX-390@vm.marist.edu
 Subject: Re: [LINUX-390] PAM to authenticate using zVM userid/password

 Hi, Donald.

 Yeah, it's a cool thing to do, alright. Go with the LDAP-RACF approach
 Alan and others have mentioned already, if you're already running RACF.
 If you're not, there are other ways to get PAM on zLinux to authenticate
 against CMS user ids, and passwords. I can send you more information on
 how to do that, if you need it.

 Have a good one.

 DJ

 On 02/16/2011 02:53 PM, Donald Russell wrote:
  Before I go off to investigate what it would take to write one... is
 there
  already a PAM module for zLinux that will accept a userid/password and
  authenticate it against the VM host it's running on?
 
  For example...
  I have zLinux (RHEL) running on lpar VMA.
  I also have a bunch of CMS users on VMA.
 
  I would like users to be defined on the zLinux system but let them use
 their
  current VMA/CMS userid/password to logon to zLinux.
 
  Seems like a cool thing to do. :-)
 
  Thanks,
 
  --
  For LINUX-390 subscribe / signoff / archive access instructions,
  send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit
  http://www.marist.edu/htbin/wlvindex?LINUX-390
  --
  For more information on Linux on System z, visit
  http://wiki.linuxvm.org/
 

 --
 Dave Jones
 V/Soft Software
 www.vsoft-software.com
 Houston, TX
 281.578.7544

 --
 For LINUX-390 subscribe / signoff / archive access instructions,
 send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit
 http://www.marist.edu/htbin/wlvindex?LINUX-390
 --
 For more information on Linux on System z, visit
 http://wiki.linuxvm.org/


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


PAM to authenticate using zVM userid/password

2011-02-16 Thread Donald Russell
Before I go off to investigate what it would take to write one... is there
already a PAM module for zLinux that will accept a userid/password and
authenticate it against the VM host it's running on?

For example...
I have zLinux (RHEL) running on lpar VMA.
I also have a bunch of CMS users on VMA.

I would like users to be defined on the zLinux system but let them use their
current VMA/CMS userid/password to logon to zLinux.

Seems like a cool thing to do. :-)

Thanks,

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


signal shutdown user xx within yy

2011-02-09 Thread Donald Russell
RHEL 5

I use the following chshut commands (in /etc/rc.local)
chshut halt vmcmd LOGOFF
chshut poff vmcmd LOGOFF

They shudown and logoff properly when I use shutdown -h or -P options from
zLinux,

From another ID, when I use CP SIGNAL SHUTDOWN zLinux machine id WITHIN
x
zLinux also shuts down and logs off, but it goes to runlevel 6 (reboot)
instead of a more expected runlevel 0 (halt).

The net effect is the same, it shuts down clean and logs off, but is there
something I can change so a SIGNAL SHUTDOWN will cause it to go to runlevel
0?

I prefer that because I have an automated email that goes out when the
system shuts down, and if the new runlevel is 6 the email suggests the
outage will be short as it is just a reboot.

Thanks

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: signal shutdown user xx within yy

2011-02-09 Thread Donald Russell
Perfect... thank you. I'll tweak /etc/inittab




2011/2/9 van Sleeuwen, Berry berry.vansleeu...@atosorigin.com

 Hello Donald,

 The SIGNAL SHUTDOWN acts like a CTRL-ALT-DEL. So in your /etc/inittab
 you should change the CTRL-ALT-DEL behaviour to switch to runlevel 0
 instead of 6.

 Regards, Berry.


 -Original Message-
 From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of
 Donald Russell
 Sent: donderdag 10 februari 2011 4:12
 To: LINUX-390@VM.MARIST.EDU
 Subject: signal shutdown user xx within yy

 RHEL 5

 I use the following chshut commands (in /etc/rc.local) chshut halt vmcmd
 LOGOFF chshut poff vmcmd LOGOFF

 They shudown and logoff properly when I use shutdown -h or -P options
 from zLinux,

 From another ID, when I use CP SIGNAL SHUTDOWN zLinux machine id
 WITHIN x zLinux also shuts down and logs off, but it goes to runlevel
 6 (reboot) instead of a more expected runlevel 0 (halt).

 The net effect is the same, it shuts down clean and logs off, but is
 there something I can change so a SIGNAL SHUTDOWN will cause it to go to
 runlevel 0?

 I prefer that because I have an automated email that goes out when the
 system shuts down, and if the new runlevel is 6 the email suggests the
 outage will be short as it is just a reboot.

 Thanks

 --
 For LINUX-390 subscribe / signoff / archive access instructions, send
 email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit http://www.marist.edu/htbin/wlvindex?LINUX-390
 --
 For more information on Linux on System z, visit
 http://wiki.linuxvm.org/


 --
 For LINUX-390 subscribe / signoff / archive access instructions,
 send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit
 http://www.marist.edu/htbin/wlvindex?LINUX-390
 --
 For more information on Linux on System z, visit
 http://wiki.linuxvm.org/


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: How to use FSCK_FORCE_ALL_PARALLEL at boot time

2011-01-05 Thread Donald Russell
[ snip ]


  Hi,

 Unfortunately /etc/sysconfig/init isn't the right place for that
 environment variable.  It's really only for the variables listed here:


 http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/ch-The_sysconfig_Directory.html#s2-sysconfig-init

 FSCK_FORCE_ALL_PARALLEL really needs to be set in /etc/rc.sysinit,
 before fsck is run.  So there are a couple of options.

 1) Manually edit /etc/rc.sysinit, and change the lines that run fsck
 (around line 640, search for Checking filesystems).  Change:

 fsck -T -t ...

 to

 FSCK_FORCE_ALL_PARALLEL=1 fsck -T -t ...

 Pros/Cons of this approach:  It'll definitely work, but mucking with
 startup files causes update issues (/etc/rc.sysinit could get
 overwritten when the initscripts package is updated), and could also
 cause issues if you call into Red Hat support one day.


 2) You can open a support ticket with Red Hat support and request this
 change.  The fix would be to either change /etc/rc.sysinit to support
 fsck-related environment variables, or edit fsck itself to take this
 variable as a commandline option instead (probably the better fix, since
 it's already possible to pass fsck commandline options through a config
 file -- /fsckoptions).  This is the best long-term approach, but doesn't
 give you a fix today.


 3) Okay first off this is an ugly hack I admit.  But there are some
 config files that get read before the fsck in rc.sysinit.  One of these
 is /etc/sysconfig/clock.  You could add FSCK_FORCE_ALL_PARALLEL=1 to the
 bottom of /etc/sysconfig/clock, and theoretically it will be set by the
 time the fsck runs.  The Pro is you'll be fully supported by Red Hat
 because you're just editing a config file, as opposed to option 1.  The
 Con, well, see the first sentence :)

 -Brad


Brad,

Thanks for that great explanation! I don't know why I didn't see rc.sysinit
in the first place... but, there it is.

I chose door number 3, The Ugly Hack, with a twist... I added these lines to
/etc/sysconfig/network
# fsck values are provided here so they are picked up by /etc/rc.sysinit
# when the system boots up.
# This way I don't have to modify the rc.sysinit script to get fsck
# to use parallelism.
FSCK_FORCE_ALL_PARALLEL=1
FSCK_MAX_INST=0


I chose network over clock because, well, no real compelling reason
other than I'm more apt to remember network. ;-)

Just for fun I added these lines in rc.sysinit
STRING=$Checking filesystems
echo $STRING
my additions
if [ $FSCK_FORCE_ALL_PARALLEL ]; then
  echo fsck parallel: MAX INST=$FSCK_MAX_INST
else
  echo 'fsck serial'
fi
/my additions
if [ ${RHGB_STARTED} != 0 -a -w /etc/rhgb/temp/rhgb-console ];
then
fsck -T -t noopts=_netdev -A $fsckoptions 
/etc/rhgb/temp/rhgb-console
else
fsck -T -t noopts=_netdev -A $fsckoptions
fi


I liked the results... the extra notice in the bootup messages telling me
what fsck was doing... :-)
(

Rather than adding a new command line option to fsck and then using
/fsckoptions
perhaps something like:

[ -f /etc/sysconfig/fsck.env ]  . /etc/sysconfig/fsck.env

Similar to setting values used by snmpd.

That way the env variables can be set with a simple config file without
making any changes to fsck itself.
I agree it's bit messy though because then we have command line options in
/fsckoptions and fsck-related env vars somewhere else.

of course the fsck env file could be /fsckenv. At least that would look
reasonable when compared to setting options in /fsckoptions

Not my call :-) I have it working in a reasonable way, I'll open a ticket
with RH and see what happens. :-)

Thanks again,
Cheers

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


How to use FSCK_FORCE_ALL_PARALLEL at boot time

2011-01-04 Thread Donald Russell
RHEL 5

The man pages for fsck say the FSCK_FORCE_ALL_PARALLEL environment variable
controls fsck behavior so filesystems residing on the same physical device
can actually be checked in parallel as per the /etc/fstab settings.

i.e. I have the root file system with fsck pass 1 and all other filesystems
as pass 2. The idea being that all pass 2 file systems may be checked
simultaneously, though fsck will do them serially if they are on the same
devices.

The man page doesn't say if a particular value needs to be set, so I assume
just the fact the environment variable being defined is enough, so I set it
to 1. I also explicitly set FSCK_MAX_INST=0. (Which I may change later if I
get this working)

But, I don't see all these fscks going in parallel when I boot. I use
shutdown -F -r now to force an fsck but they still seem to run serially.

I put the values in /etc/sysconfig/init but either that's not the right
place, or 1 is not a value fsck deems appropriate. :-)

So, where is the correct place and what is the correct value to set these if
I want them to take effect when the system is coming up?

Thanks very much


---
Hey! Hey! You! You! Get off of my cloud!
http://news.cnet.com/8301-13578_3-20002423-38.html

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Using DB2 from PHP

2010-10-11 Thread Donald Russell
I'll check out those links... Thanks for the pointers.


On Sat, Oct 9, 2010 at 01:59, Joachim Schmidt 
joachim.schm...@oberquembach.de wrote:

  hi,

 I've missed, that DB2 is on a different machine. How to get the
 ODBC-driver see
 
 http://publib.boulder.ibm.com/infocenter/db2luw/v9/index.jsp?topic=/com.ibm.db2.udb.apdv.cli.doc/doc/t0023867.htm
 .
 How to install PDO_ODBC (ibm-db2) have a look at
 http://www.phpbuilder.com/manual/ref.pdo-odbc.php;.

 greetings,
 Joachim Schmidt


 Am 08.10.2010 20:17, schrieb Donald Russell:

  I did install php-odbc... because calls to odbc_connect failed with an
 error like call to nonexistent function

 When I tried your sample code, after a few syntax corrections, I got this
 error:
 Connection to database failed.SQLSTATE[IM002] SQLConnect: 0
 [unixODBC][Driver Manager]Data source name not found, and no default
 driver specified

 Since DB2 is actually on a different machine, were do I find the
 syntax definitions for that?

 I didn't expect it to work because DB2 is on a different machine...
 but that does show I have PDO. :-) How do I tell if I have ODBC
 ibm-db2 driver/thingy?

 I did find the PECL file ibm-db2-1.9.0 but when I do the ./configure
 command, I get an error :

 checking for egrep... grep -E
 checking for a sed that does not truncate output... /bin/sed
 checking for gcc... gcc
 checking for C compiler default output file name... a.out
 checking whether the C compiler works... yes
 checking whether we are cross compiling... no
 checking for suffix of executables...
 checking for suffix of object files... o
 checking whether we are using the GNU C compiler... yes
 checking whether gcc accepts -g... yes
 checking for gcc option to accept ANSI C... none needed
 checking whether gcc and cc understand -c and -o together... yes
 checking if compiler supports -R... no
 checking if compiler supports -Wl,-rpath,... yes
 checking build system type... s390x-redhat-linux-gnu
 checking host system type... s390x-redhat-linux-gnu
 checking target system type... s390x-redhat-linux-gnu
 checking for PHP prefix... /usr
 checking for PHP includes... -I/usr/include/php
 -I/usr/include/php/main -I/usr/include/php/TSRM
 -I/usr/include/php/Zend -I/usr/include/php/ext
 checking for PHP extension directory... /usr/lib64/php/modules
 checking for PHP installed headers prefix... /usr/include/php
 checking for re2c... no
 configure: WARNING: You will need re2c 0.9.11 or later if you want to
 regenerate PHP parsers.
 checking for gawk... gawk
 checking for IBM_DB2 support... yes, shared
 checking Looking for DB2 CLI libraries... checking  in yes...
 checking  in yes/lib64...
 checking  in yes/lib32...
 checking  in yes/lib...
 not found
 configure: error: Please reinstall the DB2 CLI distribution


 Reinstall DB2 CLI? I think I need something else... DB2 is on a
 different machine... but I understand I need to install some sort of
 client on this machine that has the PHP scripts on it.

 So, I'm getting there, albeit slowly. :-)
 My next challenge? Where to find, and how to install that piece

 Cheers



 On Fri, Oct 8, 2010 at 01:06, Joachim Schmidt
 joachim.schm...@oberquembach.de  wrote:

  hi,
 have you checked, e.g. with phpinfo() , wether PDO (odbc) and  PDO
 Driver for ODBC (ibm-db2)  is enabled?
 if it is, try this:
 ...
 ...
 $database= your-DB;
 $username=your_dbuser;
 $password=your_DB2pw;

 try {
 $dsn=odbc:$database;
 $conn = new PDO($dsn, $username, $password);
 $conn-setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
} catch(Exception $e) {
   $sqlerror = $e-getMessage();
   $SQLState = strstr($sqlerror, SQLSTATE);
   $SQLState = substr($SQLState, 9, 5);
   $conn = NULL;
  }
  }
  else {
  }

  if ($conn == 0) {
   echo(Connection to database failed.);
   printf(%s\n, $sqlerror);
  }
  else {
   echo(Connection to Database Server $database established.);
  }

  return $conn;
  }
 .

 have fun!
 Joachim Schmidt
 Am 07.10.2010 18:24, schrieb Donald Russell:

 I'm running RHEL 5.5 on zVM and DB2 running on a different host system
 (also zLinux, but that doesn't matter)

  From the first system, I want to access DB2 using PHP. (Not via

 Apache, I'm using PHP for some scripting)

 Seems straightforward enough but I need the IBM Data Server Driver
 for ODBC and CLI (CLI Driver) installed on the same machine PHP is
 running on.. makes sense.

 OK, so I downloaded it from IBM but I don't know how to install
 it. :-( It's a tar.gz file, which I un-tarred, expecting to find a
 make file or some instructions... I didn't find any. :-(

 Can somebody point me to, or explain how to install this Driver... and
 then how to actually use it?
 i.e. I know I'll need to code the driver name or something in the
 odbc_connect statement like Driverr={IBM DB2 ODBC Driver}

 Thank you

 --
 For LINUX-390 subscribe / signoff / archive access

Re: Using DB2 from PHP

2010-10-08 Thread Donald Russell
I did install php-odbc... because calls to odbc_connect failed with an
error like call to nonexistent function

When I tried your sample code, after a few syntax corrections, I got this error:
Connection to database failed.SQLSTATE[IM002] SQLConnect: 0
[unixODBC][Driver Manager]Data source name not found, and no default
driver specified

Since DB2 is actually on a different machine, were do I find the
syntax definitions for that?

I didn't expect it to work because DB2 is on a different machine...
but that does show I have PDO. :-) How do I tell if I have ODBC
ibm-db2 driver/thingy?

I did find the PECL file ibm-db2-1.9.0 but when I do the ./configure
command, I get an error :

checking for egrep... grep -E
checking for a sed that does not truncate output... /bin/sed
checking for gcc... gcc
checking for C compiler default output file name... a.out
checking whether the C compiler works... yes
checking whether we are cross compiling... no
checking for suffix of executables...
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ANSI C... none needed
checking whether gcc and cc understand -c and -o together... yes
checking if compiler supports -R... no
checking if compiler supports -Wl,-rpath,... yes
checking build system type... s390x-redhat-linux-gnu
checking host system type... s390x-redhat-linux-gnu
checking target system type... s390x-redhat-linux-gnu
checking for PHP prefix... /usr
checking for PHP includes... -I/usr/include/php
-I/usr/include/php/main -I/usr/include/php/TSRM
-I/usr/include/php/Zend -I/usr/include/php/ext
checking for PHP extension directory... /usr/lib64/php/modules
checking for PHP installed headers prefix... /usr/include/php
checking for re2c... no
configure: WARNING: You will need re2c 0.9.11 or later if you want to
regenerate PHP parsers.
checking for gawk... gawk
checking for IBM_DB2 support... yes, shared
checking Looking for DB2 CLI libraries... checking  in yes...
checking  in yes/lib64...
checking  in yes/lib32...
checking  in yes/lib...
not found
configure: error: Please reinstall the DB2 CLI distribution


Reinstall DB2 CLI? I think I need something else... DB2 is on a
different machine... but I understand I need to install some sort of
client on this machine that has the PHP scripts on it.

So, I'm getting there, albeit slowly. :-)
My next challenge? Where to find, and how to install that piece

Cheers



On Fri, Oct 8, 2010 at 01:06, Joachim Schmidt
joachim.schm...@oberquembach.de wrote:
  hi,
 have you checked, e.g. with phpinfo() , wether PDO (odbc) and  PDO
 Driver for ODBC (ibm-db2)  is enabled?
 if it is, try this:
 ...
 ...
 $database= your-DB;
 $username=your_dbuser;
 $password=your_DB2pw;

 try {
     $dsn=odbc:$database;
     $conn = new PDO($dsn, $username, $password);
     $conn-setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
    } catch(Exception $e) {
       $sqlerror = $e-getMessage();
       $SQLState = strstr($sqlerror, SQLSTATE);
       $SQLState = substr($SQLState, 9, 5);
       $conn = NULL;
      }
  }
  else {
  }

  if ($conn == 0) {
   echo(Connection to database failed.);
   printf(%s\n, $sqlerror);
  }
  else {
   echo(Connection to Database Server $database established.);
  }

  return $conn;
  }
 .

 have fun!
 Joachim Schmidt
 Am 07.10.2010 18:24, schrieb Donald Russell:

 I'm running RHEL 5.5 on zVM and DB2 running on a different host system
 (also zLinux, but that doesn't matter)
  From the first system, I want to access DB2 using PHP. (Not via
 Apache, I'm using PHP for some scripting)

 Seems straightforward enough but I need the IBM Data Server Driver
 for ODBC and CLI (CLI Driver) installed on the same machine PHP is
 running on.. makes sense.

 OK, so I downloaded it from IBM but I don't know how to install
 it. :-( It's a tar.gz file, which I un-tarred, expecting to find a
 make file or some instructions... I didn't find any. :-(

 Can somebody point me to, or explain how to install this Driver... and
 then how to actually use it?
 i.e. I know I'll need to code the driver name or something in the
 odbc_connect statement like Driverr={IBM DB2 ODBC Driver}

 Thank you

 --
 For LINUX-390 subscribe / signoff / archive access instructions,
 send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit
 http://www.marist.edu/htbin/wlvindex?LINUX-390
 --
 For more information on Linux on System z, visit
 http://wiki.linuxvm.org/


 --
 For LINUX-390 subscribe / signoff / archive access instructions,
 send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit
 http://www.marist.edu/htbin/wlvindex?LINUX-390

Using DB2 from PHP

2010-10-07 Thread Donald Russell
I'm running RHEL 5.5 on zVM and DB2 running on a different host system
(also zLinux, but that doesn't matter)
From the first system, I want to access DB2 using PHP. (Not via
Apache, I'm using PHP for some scripting)

Seems straightforward enough but I need the IBM Data Server Driver
for ODBC and CLI (CLI Driver) installed on the same machine PHP is
running on.. makes sense.

OK, so I downloaded it from IBM but I don't know how to install
it. :-( It's a tar.gz file, which I un-tarred, expecting to find a
make file or some instructions... I didn't find any. :-(

Can somebody point me to, or explain how to install this Driver... and
then how to actually use it?
i.e. I know I'll need to code the driver name or something in the
odbc_connect statement like Driverr={IBM DB2 ODBC Driver}

Thank you

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Which directories on which device?

2010-08-11 Thread Donald Russell
If I have a device, /dev/sda or /dev/hda how do I determine which filesystem
or directories are on that disk?

Thanks

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Which directories on which device?

2010-08-11 Thread Donald Russell
df seems to work for devices that aren't part of a logical volume group.

df shows me that /dev/dasda1 is /boot
but all the others are showing me things like:
/dev/mapper/log--vg-log
 211585400 117381016  83456480  59% /db2log

I've been trying lvdisplay, pvdisplay, vgdisplay etc, but I'm not finding
how to map that back to the /dev/sd?? disk...

I think once I get this, I'll write a script to answer the eternal
questions?
Which disk is file/directory x on? and Which real disk is /dev/x?

Thanks



On Wed, Aug 11, 2010 at 09:00, Mark Pace pacemainl...@gmail.com wrote:

 df   should be what you are looking for.

 On Wed, Aug 11, 2010 at 11:49 AM, Donald Russell russell@gmail.com
 wrote:

  If I have a device, /dev/sda or /dev/hda how do I determine which
  filesystem
  or directories are on that disk?


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


mapping zLinux scsi disks to real devices

2010-08-10 Thread Donald Russell
I'm running zLinux on zVM and an lsscsi command tells me that /dev/sda is at
[0:0:0:1]

How do I use that to map it back to a CP directory entry (or whatever) to
find what the real device is I could have somebody look at?

If this were ECKD dasd I'd be a little more familiar... lsdasd shows the
virtual address, a vmcp query tells me the rest of what I need to know...

Thanks,
Don

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: mapping zLinux scsi disks to real devices

2010-08-10 Thread Donald Russell
 On Tue, Aug 10, 2010 at 10:41, Sterling James ssja...@dstsystems.comwrote:

 I'm running zLinux on zVM and an lsscsi command tells me that /dev/sda is
 at
 [0:0:0:1]
 Try  lszfcp -D


Thank you,

That was the missing link :-)

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


How to get Red Hat zLinux into single user mode?

2010-07-12 Thread Donald Russell
I've inherited a nice little problem

a Red Hat RHEL 5.4 zLinux system fails on boot requiring me to run fsck
manually , and it then prompts for the root password.

The problem? Nobody knows what the root password is. :-(

I believe we have the system configured so if it comes up in single user
mode, no password is required. (of course we already logged on to the vm
3270/3215 console with a password...)

But... how do I get redhat zLinux to come up in single user mode? Is there a
loadparm I can specify on the #CP IPL xxx command?

I've also tried #CP VI VMSG 0 1 and get this response:
00: HCPPCX6531E The operating system will not accept commands from the
service
processor.


Thank you


---
Hey! Hey! You! You! Get off of my cloud!
http://news.cnet.com/8301-13578_3-20002423-38.html

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: How to get Red Hat zLinux into single user mode?

2010-07-12 Thread Donald Russell
I really didn't like the idea of trying to link the disks from another
zLinux ID... that seems very error-prone.  But, if that's the only choice,
it would have to do.

Fortunately, we tracked down why the root password wasn't what we
expected so we've recovered the password and fsck is underway.

The reason I wanted to get into single user mode was just to reset the root
password.

Cheers

---
Hey! Hey! You! You! Get off of my cloud!
http://news.cnet.com/8301-13578_3-20002423-38.html


On Mon, Jul 12, 2010 at 10:12, Christian Paro christian.p...@gmail.comwrote:

 I'm not sure single-user mode will help you here. According to RedHat,
 single-user mode isn't appropriate for situations where you aren't able to
 successfully mount your file systems:


 http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.5/html/Installation_Guide/s1-rescuemode-booting-single.html

 (That said, once you're past this broken-file-system issue, it *is* still
 one way to reset your root password to something known in case further
 problems arise in the future.)

 You might want to try logging off the guest you're having trouble with,
 linking the disk(s) containing the file systems for the server that's
 failed
 to boot to another guest on the same VM, bringing them online, and running
 fsck against the broken file system on this other server.

 To play it extra safe, you could try this on a clone of the disk first so
 you'll still have the original in case running fsck from another guest does
 more harm than good.

 As for your original question, this seems like it'd be relevant:

 http://www.mail-archive.com/linux-390@vm.marist.edu/msg37191.html

 On Mon, Jul 12, 2010 at 12:46 PM, Donald Russell russell@gmail.com
 wrote:

  I've inherited a nice little problem
 
  a Red Hat RHEL 5.4 zLinux system fails on boot requiring me to run fsck
  manually , and it then prompts for the root password.
 
  The problem? Nobody knows what the root password is. :-(
 
  I believe we have the system configured so if it comes up in single user
  mode, no password is required. (of course we already logged on to the vm
  3270/3215 console with a password...)
 
  But... how do I get redhat zLinux to come up in single user mode? Is
 there
  a
  loadparm I can specify on the #CP IPL xxx command?
 
  I've also tried #CP VI VMSG 0 1 and get this response:
  00: HCPPCX6531E The operating system will not accept commands from the
  service
  processor.
 
 
  Thank you
 
 
  ---
  Hey! Hey! You! You! Get off of my cloud!
  http://news.cnet.com/8301-13578_3-20002423-38.html
 
  --
  For LINUX-390 subscribe / signoff / archive access instructions,
  send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
  visit
  http://www.marist.edu/htbin/wlvindex?LINUX-390
  --
  For more information on Linux on System z, visit
  http://wiki.linuxvm.org/
 

 --
 For LINUX-390 subscribe / signoff / archive access instructions,
 send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit
 http://www.marist.edu/htbin/wlvindex?LINUX-390
 --
 For more information on Linux on System z, visit
 http://wiki.linuxvm.org/


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


How to determine who or what changed directory ownership

2010-06-10 Thread Donald Russell
I've recently inherited a Redhat 5.4 system and am not terribly familiar
with the application running on it. :-(

A directory ownership changes periodically from aa:bb to cc:cc

That causes grief because process that try to write to that directory fail
due to permission problems.

Am I correct that the culprit must be running as root in order to change the
ownership that way, or could user aa or a member of group bb: change the
ownership to cc:cc?
The permissions on the directory are 755 (drwxr_xr_x) sub-directories/files
are not altered.

Next question... and this is the fun one... is there a way to log who/what
changes the file ownership... those events don't get logged in
/var/log/messages

Any suggestions are greatly appreciated.


---
Hey! Hey! You! You! Get off of my cloud!
http://news.cnet.com/8301-13578_3-20002423-38.html

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: How to determine who or what changed directory ownership

2010-06-10 Thread Donald Russell
Thank you... that looks like a good starting point. :-)



On Thu, Jun 10, 2010 at 14:36, Marcy Cortes
marcy.d.cor...@wellsfargo.comwrote:

 You could run the audit facility.

 http://shareew.prod.web.sba.com/client_files/callpapers/attach/SHARE_in_Denver/S9203SW163007.pdf


 Marcy
 This message may contain confidential and/or privileged information. If
 you are not the addressee or authorized to receive this for the addressee,
 you must not use, copy, disclose, or take any action based on this message
 or any information herein. If you have received this message in error,
 please advise the sender immediately by reply e-mail and delete this
 message. Thank you for your cooperation.


 -Original Message-
 From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of
 Donald Russell
 Sent: Thursday, June 10, 2010 2:15 PM
 To: LINUX-390@vm.marist.edu
 Subject: [LINUX-390] How to determine who or what changed directory
 ownership

 I've recently inherited a Redhat 5.4 system and am not terribly familiar
 with the application running on it. :-(

 A directory ownership changes periodically from aa:bb to cc:cc

 That causes grief because process that try to write to that directory fail
 due to permission problems.

 Am I correct that the culprit must be running as root in order to change
 the
 ownership that way, or could user aa or a member of group bb: change the
 ownership to cc:cc?
 The permissions on the directory are 755 (drwxr_xr_x) sub-directories/files
 are not altered.

 Next question... and this is the fun one... is there a way to log who/what
 changes the file ownership... those events don't get logged in
 /var/log/messages

 Any suggestions are greatly appreciated.


 ---
 Hey! Hey! You! You! Get off of my cloud!
 http://news.cnet.com/8301-13578_3-20002423-38.html

 --
 For LINUX-390 subscribe / signoff / archive access instructions,
 send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit
 http://www.marist.edu/htbin/wlvindex?LINUX-390
 --
 For more information on Linux on System z, visit
 http://wiki.linuxvm.org/

 --
 For LINUX-390 subscribe / signoff / archive access instructions,
 send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
 visit
 http://www.marist.edu/htbin/wlvindex?LINUX-390
 --
 For more information on Linux on System z, visit
 http://wiki.linuxvm.org/


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


FTP/TLS from zOS problems

2009-12-23 Thread Donald Russell
When I try to use FTPS from zOS to RHEL zLinux I get these messages
after connecting:

220 (vsFTPd 2.0.5)
 AUTH TLS
234 Proceed with negotiation.
Authentication negotiation failed
Unable to successfully negotiate required authentication
Std Return Code = 10234, Error Code = 00017
FTP Complete: RC = 10234


Where can I find the meanings of these error codes?

The puzzling thing for me right now is this USED to work... I'd get
Authentication successful, and the transfer would continue with no
problems.

Anyway, tracking down the root cause of the failure will probably help. :-)

Thanks

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: FTP/TLS from zOS problems

2009-12-23 Thread Donald Russell
Well, the 234 is just the response after the client sent AUTH TLS
instead of a userid. But, a search for ftp auth tls error codes lead
me to this IBM manual... Communications Server IP User's Guide and
Commands

which listed the error codes...
17  FTP_AUTHENTICATION  Security authentication or negotiation
failure, incorrect specification of security keywords.

Sounds interesting, but doesn't offer many clues... sounds like the
problem could be in the SYSFTPD DD statements...
Is something misconfigured? On the client? On the server? Is the
certificate bad? (Same cert is acceptable to a web browser for https
connections, though I do have to click past a warning when using IE)

I'm leaning toward MVS no longer trusts my cert, or doesn't trust who
signed the cert...

That lead me to adding CLIENTERRCODES EXTENDED to those control
statements. FTP now exits with an RC of 1710 instead of 10234... Much
better :-)

17 means the same as above, 10 means OPEN... hmmm

Well, I'll keep digging.

Cheers


On Wed, Dec 23, 2009 at 09:08, Stewart Thomas J
stewartthom...@johndeere.com wrote:
 If I remember correctly, what you want to do is search for FTP client reply 
 code 234 on a web search engine. I think you need to break this into mmnnn, 
 where mm is a command code and nnn is the FTP client reply code. Most of 
 these are standard codes, so 234 is documented in the RFC for the AUTH TLS 
 FTP subcommand.

 Tom Stewart
 Mainframe OS, Networking  Security
 www.johndeere.com


 -Original Message-
 From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Donald 
 Russell
 Sent: Wednesday, December 23, 2009 10:57 AM
 To: LINUX-390@VM.MARIST.EDU
 Subject: FTP/TLS from zOS problems

 When I try to use FTPS from zOS to RHEL zLinux I get these messages after 
 connecting:

 220 (vsFTPd 2.0.5)
 AUTH TLS
 234 Proceed with negotiation.
 Authentication negotiation failed
 Unable to successfully negotiate required authentication Std Return Code = 
 10234, Error Code = 00017 FTP Complete: RC = 10234


 Where can I find the meanings of these error codes?

 The puzzling thing for me right now is this USED to work... I'd get 
 Authentication successful, and the transfer would continue with no problems.

 Anyway, tracking down the root cause of the failure will probably help. :-)

 Thanks

 --
 For LINUX-390 subscribe / signoff / archive access instructions, send email 
 to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit 
 http://www.marist.edu/htbin/wlvindex?LINUX-390

 --
 For LINUX-390 subscribe / signoff / archive access instructions,
 send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
 http://www.marist.edu/htbin/wlvindex?LINUX-390


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: z/VM terminal server

2009-10-21 Thread Donald Russell
On Wed, Oct 21, 2009 at 05:10, Hendrik Brueckner
brueck...@linux.vnet.ibm.com wrote:

 On Tue, Oct 20, 2009 at 04:56:50PM -0700, Donald Russell wrote:

  Is this stuff open source? Or how/where do I make suggestions?

 You can send your feedback and suggestions to linux-...@de.ibm.com or
 directly to me.

 Thanks a lot for your feedback about the iucv terminals!


Thanks Hendrik,

First, let me say I think this whole terminal server thing is
fantastic. I would like to offer some suggestions...

I'm posting them here so perhaps other people can add ideas or comment
on mine, rather than sending you a list offline.

Some features/enhancements I'd like to see...

1-
My number one suggestion:
Assuming the Terminal Server VM ID is LXTS and my linux userid is
authorized (ts-authorization.conf) to connect to LX*...
Current behaviour: connect LXTS - connection rejected (or gets me
into a new ts-shell) No good. Expected, but not what I want. ;-)

Suggestion: before attempting to start an IUCV connection, check if
the destination (target) is myself (LXTS in this case). If so, start a
new shell. (shell=... defined in ts-shell.conf)
Reason: Right now I need two linux IDs: 1 to *use* the TS to get to
other systems, and a second to logon to LXTS to do maintenance, etc.
Basically LXTS should be treated like any other target and access to
it controlled in the same way as access to other targets.

1a - for bonus points... add a shell command (similar to terminal)
to allow the user to specify which shell they want, that would be kept
in $HOME/.ts-shellrc (but it would only be useful for people
authorized to connect lxts.
(When setting the shell, check it against /etc/shells, and don't let
them choose ts-shell. :-) )

2-
ts-shell.conf (needs more cowbell) ... enhance the connect command behaviour

2a -
provide a mapping of IP hostname to VM ID so the ts-shell connect
command may specify the host name instead of the USER ID. Reason:
The people supporting the zLinux systems may not readily know the VM
USERID of the target system, they usually connect to it directly via
SSH using a host name. The idea here is to hide some of the VM
specific things from people that may primarily be Linux people.


2b -
Regarding terminal IDs
I don't know enough about IUCV, but...
Why can't I just connect via IUCV and have the target system assign
some dynamic terminal ID.
Comparing this to a normal SSH connection... I don't have n entries
in /etc/inittab for n simultaneous users, all users just connect and a
new instance is created.
Couldn't iucvtty do something similar?
i.e. iucvtty listens for an IUCV connection it spawns a process
to accept the connection and goes back to listening for the next
one... (iucvtty should not spawn/listen if the runlevel is single
user)

If the above can be done, then the terminal id on the connect
command becomes much simpler: iucv or hvc
(Or whatever names we want to put in /etc/inittab) and can default very nicely.

Otherwise
specify the terminal identifiers in ts-shell, perhaps using brace
expansion, example:
termid=iucvtty{1..10}
termid=hvc{0..7} (Could be implied since there is a restriction of
having a max of 8)
default-termid=iucv (actually a prefix of term-id defined above)
Then, change the connect command behaviour: Use the specified (or
default) terminal ID on the connect command to find the first
connection accepted using a terminal id from the list defined in the
termid statements in the conf file.
For example connect MYLNX iucv would first try iucv1... iucv2... iucv10
but connect MYLNX iucv1 would only try iucv1 and iucv10
Of course the identifiers don't have to be called iucv... and
hvc... they just have to match ts-shell.conf to /etc/inittab on the
targets.
Reason:
Allows automatic selection of a correct and functioning terminal ID. I
have to do that manually... connect... rejected. (First reaction: Oh
great! It's busted! Oh yeah, try something else...)

2c -
add an option in ts-shell to turn the pager off for the list command.
list-pager=no
list-pager=path to pager program
Reason:
It's just wrong(TM) :-) Though because ts-shell has such limited
access to the rest of the system I understand it may be more difficult
to allow the user to do their own piping 
But in our (and probably lots) of situations, the list isn't really
that long, especially when using regex.

3-
The terminal command may display or set the current default terminal
identifier to use.
But it is not kept from one ts-shell to another... I have to set the
default each time.
keep that user preference in $HOME/.ts-shellrc (similar to .bashrc)

Perhaps John always uses hvc, so he sets his default to hvc, but Bob
always uses iucv (he sets his default)

Well, that's a good start... sorry if it took up a lot of bandwidth
here I'd be happy to discuss this more off-list...

Cheers,
Don

PS... I hope I'm not coming across as being too critical I REALLY
REALLY Like this... I just see a few things I'd like to improve

Re: z/VM terminal server

2009-10-20 Thread Donald Russell
On Tue, Oct 20, 2009 at 16:26, Mark Ver mark...@us.ibm.com wrote:

 I apologize for mucking up the subject line in my previous post (total
 newbie mistake).

 Anyway,  the man pages hint that lnxhvc0 might be reserved for the HVC IUCV
 driver that's built in to the kernel.  So it's probably best not to use it
 as a terminal id for the iucvtty entries in /etc/inittab.

 If you really, really, really have a requirement for not putting in the
 terminal id on the connect statement, you can find more info on configuring
 the hvc iucv driver with man hvc_iucv.


I'm using the iucvtty method, and the reason I chose to specify lnxhvc0 as
the terminal ID there is because that is the default when using the connect
command from ts-shell.

It works fine... those terminal identifiers don't mean anything, they're
just a way of identifying what to run. I admit it's a bit misleading, which
is why I commented it in /etc/inittab. :-)

I've only just got this all working in the last few days, and there are a
number of changes/enhancements I'd like to see. :-)

Is this stuff open source? Or how/where do I make suggestions?

Cheers,
Donald Russell

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: z/VM terminal server

2009-10-19 Thread Donald Russell
On Mon, Oct 19, 2009 at 14:25, Thang Pham thang.p...@us.ibm.com wrote:


 r...@ts-shell connect LINUX149
 ts-shell: Connecting to LINUX149 (terminal identifier: lnxhvc0)...
 iucvconn: Connecting to the z/VM guest virtual machine failed: Connection
 refused
 ts-shell: Connection ended

 What could be wrong?



When you use connect, you didn't specify the terminal Identifier. So it
defaults to lnxhvc0

If you don't have an iucvtty lnxhvc0 instance started on you target system,
there's nothing there to accept the connection.

in inittab on the target system add...
i1:2345:respawn:/usr/bin/iucvtty lnxhvc0

or specify the terminal ID on your connect command from ts-shell.

Donald Russell

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Terminal server

2009-10-15 Thread Donald Russell
On Tue, Oct 13, 2009 at 08:32, Mark Post mp...@novell.com wrote:

  On 10/13/2009 at  8:45 AM, Thang Pham thang.p...@us.ibm.com wrote:
  I understand that RHEL 5.4 has a terminal server, is there any
  documentation about how to install and use it?

 https://www.ibm.com/developerworks/linux/linux390/documentation_dev.html
 which points to
 How to Set up a Terminal Server Environment - SC34-2596-00

 http://download.boulder.ibm.com/ibmdl/pub/software/dw/linux390/docu/l26dht00.pdf



I've just set this up on a RHEL 5.4 system and it works quite nicely.

I'd have done it much sooner, but the doc says kernel 2.6.29 + maint, or
2.6.30 is required. (RHEL is at 2.6.18, so I wasn't in a hurry to
investigate further.)

Is there a way to globally/persistently change the default terminal
identifier when using the ts-shell connect command?
I'd have expected to do that in ts-shell.conf

I don't use hvc, so to work around this, on the target machines I coded a
second iucvtty instance with lnxhvc0 as the expected terminal id. That works
fine, but it's a bit misleading and just seems wrong. :-)

I'd also like to turn the pager off when using the list command...
Perhaps another option in ts-shell.conf? pager=no, or pager=path to pager

I miss the command history... it's OK (even desirable) to have that kept for
the current ts-shell session only. (Similar to how terminal works)

How to grant access to the LXTS machine itself?
For fun I started iucvtty instances on LXTS and authorized myself to connect
to LXTS... it worked... but, as expected, I got a new ts-shell session...
Perhaps, ts-shell could check the destination machine, and if it is itself
start a shell [1] instead of continuing with an IUCV connection. Securing
that becomes the same as securing access to target machines.
That way I don't have to create a separate userid on LXTS for the people
that support LXTS and target machines, or put another way, LXTS can be
treated similarly to other target machines.

Overall... very nice. :-)

Cheers,
Donald Russell


[1] Which shell to start? Configured in ts-shell.conf of course. :-)
shell=...

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390