sday, September 09, 2015 3:56 AM
To: LINUX-390@VM.MARIST.EDU
Subject: Re: Symantec Endpoint Protection (SEP) for installation on zLinux?
On 2015-09-08 19:03, CHAPLIN, JAMES (CTR) wrote:
> Here the sad ending to this problem, our management has decided that
> since Symantec or anyone else actively supp
PLIN,
JAMES (CTR)
Sent: Tuesday, August 18, 2015 5:35 AM
To: LINUX-390@VM.MARIST.EDU
Subject: [LINUX-390] Symantec Endpoint Protection (SEP) for installation on
zLinux?
Fellow Penguin Mainframers,
Has anyone installed Symantec Endpoint Protection (SEP) on Linux (RHEL or SUSE)
on the s390x architec
-390@VM.MARIST.EDU] On Behalf Of CHAPLIN,
JAMES (CTR)
Sent: Tuesday, August 18, 2015 5:35 AM
To: LINUX-390@VM.MARIST.EDU
Subject: [LINUX-390] Symantec Endpoint Protection (SEP) for installation on
zLinux?
Fellow Penguin Mainframers,
Has anyone installed Symantec Endpoint Protection (SEP) on Linux
Fellow Penguin Mainframers,
Has anyone installed Symantec Endpoint Protection (SEP) on Linux (RHEL or SUSE)
on the s390x architecture? We have been given a Security Requirement that
this vendor specific software has to be in place, and we cannot even verify
that they support the s390x
Tom,
Look at RMF XP,
http://pic.dhe.ibm.com/infocenter/zos/v1r13/index.jsp?topic=%2Fcom.ibm.zos.r13.erbb200%2Fgpm4cim1.htm,
you can download the implementation guide at:
ftp://public.dhe.ibm.com/eserver/zseries/zos/rmf/rmf_xp_implementation_guide.pdf
as “rmfpms” replacement.
Quote:
“RMF XP
Interesting because when I ran the same script on a RHEL 5.9 guest (w/ 2
vCPUs), we get:
./gettricks.sh
getting one set of data
sleeping 5 seconds and getting another set of data
statOut1 = cpu 60259 128520 96523 256447792 415684 8000 15453 134955
statOut2 = cpu 60259 128520 96524 256448793
In /proc/sysinfo, there is a value called VM00 Adjustment and LPAR
Adjustment, what is this Adjustment value for and how is it set for each zVM
guest?
James Chaplin
Systems Programmer, MVS, zVM zLinux
Base Technologies, a CA Technologies Company
[cid:image002.jpg@01CDB77D.28669960]
We use Perfkit to capture high CPU usage with individual Linux Guests on zVM,
however is there a way to capture the CPU usage for the entire LPAR and set an
alert to it? With the overcommitted of resources on the zVM LPAR, we had a
situation where we did not have any one Linux Guest using
Hendrik (or anyone),
Can you help us with one small issue I cannot seem to find the answer on
with the install of this neat tool.
I am doing the noarch rpm install and getting:
rpm -ivh lnxhc-1.0-1.noarch.rpm
error: Failed dependencies:
rpmlib(PayloadIsLzma) = 4.4.2-1 is needed by
My manager just came to me with a question that was raised in a
manager's meeting. Our distributive group (Unix/RH/Solaris/AIX) was
complaining about the Tivoli agents on their servers creating problems,
not reporting, etc. The Window's group manager stepped in with the
response of why they don't
I have a REXX script that issues a set of SEND commands to another zVM
guest to log on another guest's Linux session and issue a Linux command
and then exit. The problem with the script is that it is passing the
password to Linux and I would like to change this to using an rsa
public/private key
less
security patching.
Now, some organizations don't seem to care about that. Some others
care
more than one can ever imagine.
Marcy
-Original Message-
From: Linux on 390 Port [mailto:LINUX-390@vm.marist.edu] On Behalf Of
CHAPLIN, JAMES (CTR)
Sent: Thursday, December 15, 2011 3:20
I got into a discussion with a co-worker over packages that are
installed on a zLinux oracle server. We are Running RHEL 5.7 at our
site, and are using Oracle 10g (about to go to 11g). I noticed that our
Oracle servers have an average of 1192 rpm packages installed and 91
define system services
Has anyone moved from Local time (EST) to UTC with zLinux?? Any comments
or experiences to share?
One of our upper level managers want us to look at what it will take to
move everything that is on Local time (Linux zOS) to UTC. From a
systems point of view I cannot think of an impact, just on
and The MEGA Life and Health Insurance
Company.SM
-Original Message-
From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On
Behalf Of CHAPLIN, JAMES (CTR)
Sent: Tuesday, November 29, 2011 11:38 AM
To: LINUX-390@VM.MARIST.EDU
Subject: Question of UTC vs Local Time
Has anyone
We have several Red Hat servers that were set up by our Unix group when
we started into the zLinux world. All these servers are running in 64
bit architecture. As I am getting to know they systems better, I did a
search on the packages we have installed and found about 71 packages
that have both a
Small note to add value to Dave's excellent response in relation to
updating the /etc/sudoers file, use visudo to update the /etc/sudoers
file. It is clean and simple with error checking.
James Chaplin
Systems Programmer, MVS, zVM zLinux
Base Technologies, a CA Technologies Company
Supporting
Thanks Martin,
I almost gave up hope on HughPages due to all our zLinux Guests run
under zVM, and we like using zVM to control the swapping as best as
possible. I do have two follow-up questions:
1) Can you point me to any reference material dealing with HugePages
with zVM (v6.1) where I can
I am currently looking at the HugePage support feature and whether it
can help us at our site. But I hit a roadblock that someone out there
may be able to help me with.
In the doc I have found (both from RH and a collection of other
presentations on the web), I have found how to set the
We also use FDR Upstream to do the backups of Linux zVM volumes to
Virtual Tape located o z/OS LPAR. The tape management is handled by z/OS
with the data moved to z/OS first then to tape. We only have one tape
drive defined to VM for zVM Maintenance. There is no management of tapes
on this single
Does anyone have SELinux up and running as their RBAC security on a
zLinux server? I am also curious to know how the have user
authentication set up, are they using files (/etc/passwd) LDAP, NIS, PAM
or other methods. I am on the learning curve here and would like to hear
user experiences as I
.
Kevin George
Compuware / U.S. Office of Personnel Management
-Original Message-
From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of
CHAPLIN, JAMES (CTR)
Sent: Friday, July 15, 2011 9:39 AM
To: LINUX-390@VM.MARIST.EDU
Subject: Does anyone use
.
Kevin George
Compuware / U.S. Office of Personnel Management
-Original Message-
From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of
CHAPLIN, JAMES (CTR)
Sent: Friday, July 15, 2011 10:53 AM
To: LINUX-390@VM.MARIST.EDU
Subject: Re: Does anyone use SELinux
We deployed RMF on our zLinux guests (currently using RHEL 5.4) back
around 2007, is there a command or a way to display the version of RMF
on our Linux guests to determine the version we are currently using? I
have been searching the doc and the web with no luck. Does anyone have
any suggestions
RHEL 5.6
James Chaplin
Systems Programmer, MVS, zVM zLinux
Base Technologies, Inc
-Original Message-
From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of
Hughes, Jim
Sent: Thursday, June 02, 2011 1:04 PM
To: LINUX-390@VM.MARIST.EDU
Subject: Re: Oracle on RedHat 6 beta
We are using CA ESM with TSS for many years and love it. We are years
ahead of the Unix guys down the hall, who key in each user one server at
a time. I do little to no work on setting up users, as our mainframe
security department now does all that work for us (where it belongs).
However, we also
Linux has an endless source of free games and applications you can
install on the servers, but that would be a waste of good resources. For
working tools, look at Perfkit for zVM as a starter on performance. Play
and learn Linux, use http://www.google.com/linux for all your questions,
it's great,
I am not an Oracle DBA, and I am not getting an answer from our Oracle
DBAs on site with this problem. I would like to know if anyone has had a
similar problem with Oracle on zLinux multiple authentications to
itself?
We have several servers using oracle, however two of the dozen plus
servers
for.
I recommend to have RUN OFF and be aware of the CP READ when you have to
reconnect.
-Original Message-
From: Linux on 390 Port [mailto:LINUX-390@VM.MARIST.EDU] On Behalf Of
CHAPLIN, JAMES (CTR)
Sent: Friday, March 18, 2011 5:07 PM
To: LINUX-390@VM.MARIST.EDU
Subject: Server rebooting
Yes I understand Alan is right on, and that vmcp protect's itself with a
limited buffer. But when I did the same command from the console instead
of using the vmcp command on the guest, it brought the entire server
down. VMCP limits the amount of output through buffers, how does VM
limit output
We just had a surprise announcement by one of the Oracle DBAs during a
zLinux Application group planning meeting at our worksite. The DBA
advised us that they (Database group) were going to move/migrate all the
Oracle databases that we have on zLinux boxes off to an intel/unix
platform. He did
Found a problem today with CP QUERY command that caused our Linux Server
to reboot.
Using vmcp from a zLinux server, I issued the following command:
vmcp q dasd | less
Binary file (standard input) matches
Error: output (21282 bytes) was truncated, try --buffer to increase size
the field?
wow, your DBAs have the authority to spend that kind of money and make
that kind of change without management signature? So no financial
analysis, no technical reason, sounds religious.
CHAPLIN, JAMES (CTR) wrote:
We just had a surprise announcement by one of the Oracle DBAs during
Of
Alan Altmark
Sent: Friday, March 18, 2011 5:54 PM
To: LINUX-390@VM.MARIST.EDU
Subject: Re: Server rebooting after doing a CP Q DA from the console
On Friday, 03/18/2011 at 05:07 EDT, CHAPLIN, JAMES (CTR)
james.chap...@associates.dhs.gov wrote:
But I thought I would try the same command from
The big question will be after RHEL 6 goes GA, how long will it take
Oracle to catch up and certify their DB on this platform for the z390x
Architecture? It took to this year, that we are able to move our Oracle
DBs to RHEL 5 servers.
James Chaplin
Systems Programmer, MVS, zVM zLinux
Base
[mailto:linux-...@vm.marist.edu] On Behalf Of
Bruce Furber
Sent: Wednesday, March 10, 2010 1:56 PM
To: LINUX-390@VM.MARIST.EDU
Subject: Re: problem deinstalling an rpm
Try --force
May the force be with you
CHAPLIN, JAMES (CTR) james.chap...@associates.dhs.gov wrote:
I am having a problem
I am having a problem with a possible corrupted rpm. I tried to
uninsta;; and rpm, and it tells be it is not installed to begin with, go
to install, message is that is it installed.
r...@zn001:(/root)#rpm -i Some_modulefiles.s390x.rpm
package Some_modulefiles.s390x is already
Mike,
Will you be coming out with a Red Hat version of this same cookbook
(RHEL 5.4 zVM 6.4)?
James Chaplin
Systems Programmer, MVS, zVM zLinux
Base Technologies, Inc
-Original Message-
From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of
Michael MacIsaac
Sent: Friday,
This is a great place to start as you start working with Linux. Also keep
www.google.com/linux as quick starting point to finding answers.
Do you have an open systems group in your shop? Buy a large box of donuts and
pay them a visit. Many quick answers can be found just down the hall in many
We want to create a central location for all zLinux server's user home
directory located on a common server (using NFS?) with some method of
failover if that server is down. Is there a file system that crosses
different servers that can be mounted by one system as the user home
file system, and
I have been banging my head (and the keyboard with google.com/linux)
trying to come up with an answer/solution.
When setting up a new user, I want to be able to expire the user's
temporary password, allowing the user to login with the temporary
password, but force him/her to create his own
[mailto:linux-...@vm.marist.edu] On Behalf Of
Dominic Coulombe
Sent: Tuesday, October 13, 2009 11:39 AM
To: LINUX-390@VM.MARIST.EDU
Subject: Re: How do you . . . . setting up a user to force him to change
his password?
Hi,
On Tue, Oct 13, 2009 at 11:31, CHAPLIN, JAMES (CTR)
james.chap
I know how to add a user to a second group, for example to give su
authority (using wheel)to a user, we issue the following command:
usermod -G wheel testur4
But how can I remove him in a single command without directly editing
the /etc/group /etc/gshadow files (vigr). Is there a single command?
@VM.MARIST.EDU
Subject: Re: Remove a user from a secondary group
On 10/6/2009 at 12:06 PM, CHAPLIN, JAMES (CTR)
james.chap...@associates.dhs.gov wrote:
I know how to add a user to a second group, for example to give su
authority (using wheel)to a user, we issue the following command:
usermod
Is there a host based intrusion detection agent like Symantec's CSP for
the s390x platform? We have hit a road block in that Symantec does not
support the mainframe Linux. Right now they want us to route our syslogs
to a windows box or Blade server($$$) to capture any data, and we do not
like it.
Good afternoon Jan,
We use Tivoli monitor which works good (but not great), and we also
wanted to have a second method, so I looked at PROPs with much
disappointment. However we did come up with capturing exception messages
from Perfkit and send the information to our operational center.
You need
Has anyone run nmap on zLinux, know where I may find any rpm or binaries
for the s390x platform? Comments and insight?
James Chaplin
Systems Programmer, MVS, zVM zLinux
Base Technologies, Inc
Supporting the zSeries Platform Team
Platform Team
-Original Message-
From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of
Mark Post
Sent: Friday, June 19, 2009 4:41 PM
To: LINUX-390@VM.MARIST.EDU
Subject: Re: Anyone use nmap on s390x?
On 6/19/2009 at 4:11 PM, CHAPLIN, JAMES (CTR)
james.chap
I have a user who deploys an application using a common user ID and
script. For security reasons, we are trying to get them off this common
ID. However their deployment scripts fail to remove files other than the
ones they themselves (user) deploy. Thus the team resorts to a common
ID.
My
We are a big Innovation FDR shop, and FDR Upstream
(http://www.fdr.com/products/upstream/zlinuxups.cfm ) has been our
zLinux backup tool with good success so far.
James Chaplin
Systems Programmer, MVS, zVM zLinux
Base Technologies, Inc
-Original Message-
From: Linux on 390 Port
Our programmers have been creating java based applications that they
start and stop using simple scripts. The start script call java to start
the program; however the stop script issues a simple kill command
against the PID.
Our problem if User A start the program, only User A can kill it (except
CHAPLIN, JAMES (CTR) wrote:
We want anyone in the group level to be able to also issue
the kill command (in the script). Is there a way to allow users in a
group to kill each other's started processes.
You can have a script or program
* with the setuid bit set
* with the write
We are trying to allow users to change their mainframe password through
LDAP via ldappasswd command:
home/user1)#ldappasswd -A -S -H ldap://hostname:port# user1
Old password:
Re-enter old password:
New password:
Re-enter new password:
SASL/EXTERNAL authentication started
/ldap.conf and
/etc/openldap/ldap.conf (you can cheat and make them symlinks to each
other) so that you don't have to enter -H options, and suchlike.
- -- Pat
CHAPLIN, JAMES (CTR) wrote:
We are trying to allow users to change their mainframe password
through
LDAP via ldappasswd command:
home/user1
And that coming from a person working at a bank in this economic climate
;-)
Personally, job offering and searching is for a different format, this
should be a technical forum, not a job search tool. Go to Monster.com or
Dice.com for a job search. That's my two cents.
James Chaplin
Systems
Okay, this is not real work, been working on my RHCT, and decided to
test what I can do on a PC to the zLinux platform.
I am trying to create a RAID-1 Array (two disks mirroring each other) in
a zVM environment. I created two minidisks in zVM and am trying to
format them on the zLinux side, using
What are you doing March 1st - 6th? Start by going to SHARE in Austin
TX. Go to
http://www.share.org/Events/UpcomingConference/tabid/349/Default.aspx
and look at the zVM and zLinux sessions. Tell the Boss that he will get
a get return on his investment of sending you to SHARE.
Also look at
We have a security requirement (which is common with Linux) to prevent
ssh login for root (setting PermitRootLogin to no). One problem we
find, as system administrators, we like to use secure copy (remote file
copy program, scp) files between systems. However this will not work for
any root level
files from one guest to
another on the same VM system
-Original Message-
From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of
CHAPLIN, JAMES (CTR)
Sent: Friday, January 16, 2009 11:20 AM
To: LINUX-390@VM.MARIST.EDU
Subject: Security question and using scp
We have
Every few years, people predict that the mainframe is on its last legs
and will be taken over by the technology du jour.
That replacement technology has ranged over the years from client-server
computing to Web-based computing, and, now, it's cheap, commodity
x86-based servers. Don't believe
We have several RHEL 4.5 servers running Oracle. Each is a clone of the
original. However I discovered that we can only send email from two
(using the mailx command). I am not an expert on sendmail, however I
have looked at every configuration file I can find to see if I can
locate a difference
Did you try a vgscan?
James Chaplin
Systems Programmer, MVS, zVM zLinux
Base Technologies, Inc
(703) 921-6220
-Original Message-
From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of
Walters, Gene P
Sent: Tuesday, June 17, 2008 8:58 AM
To: LINUX-390@VM.MARIST.EDU
Subject: LVM
Were you able to verify that the device is online?
If lscss is unavailable, go to the dev directory:
Determine the device number (say 204) either from an lsdasd or
cat /proc/dasd/devices
cd /sys/bus/ccw/drivers/dasd-eckd/0.0.0204
cat online . . . .if value zero (offline), then
echo 1 online
On the zLinux guest (ZP013), using sar I get a CPU usage of about 15%:
11:00:01 AM CPU %user %nice %system %iowait%steal
%idle
11:50:01 AM all 14.78 0.00 0.70 0.53
0.1583.84
But under Perfkit (zVM) we get the following
performance? Which is right?
On Thu, Jun 12, 2008 at 12:31 PM, in message
[EMAIL PROTECTED],
CHAPLIN, JAMES (CTR) [EMAIL PROTECTED] wrote:
-snip-
Why are the numbers from PERFKIT different from the zLinux
environment?
Which numbers should we be monitoring from?
You didn't say which version
Sent: Thursday, June 12, 2008 3:19 PM
To: LINUX-390@VM.MARIST.EDU
Subject: Re: Measuring CPU performance? Which is right?
Malcolm Beattie wrote:
CHAPLIN, JAMES (CTR) writes:
On the zLinux guest (ZP013), using sar I get a CPU usage of about
15%:
[...]
But under Perfkit (zVM) we get
I am trying to find a way to take a PERKIT message, capture it and email
or move the information out.
We have PERFKIT set up with FC LIMIT set to capture CPU (NORMCPU 90) and
FC PROCESS CPMsg in FCONX $PROFILE. When we get a situation of high CPU,
a message does display in the zVM console. I
Has anyone used the vmcp command? And reference on how to set it up on
our zLinux systems. We are using RHEL 4.5 5 on zVM 5.3 LPARs.
We have the man pages in place:
vmcp - send commands to the z/VM control program
but I get command not found when working with it.
Can anyone point me to a good
James Chaplin
Systems Programmer, MVS, zVM zLinux
Base Technologies, Inc
(703) 921-6220
We had a situation in our shop were CPU in the zVM topped at 100% while
the CPU usage in the zLinux Guests remained at their low levels. We use
Tivoli ITM to monitor (automated) the CPU on our zLinux guests,
, in message
[EMAIL PROTECTED],
CHAPLIN, JAMES (CTR) [EMAIL PROTECTED] wrote:
Under Linux we have the command vmstat (and others) that display the
CPU
usage.
What version of what distribution do you have? Anything prior to SLES10
and RHEL5, the data from inside the guest is pretty much meaningless
Under Linux we have the command vmstat (and others) that display the CPU
usage. CPU Usage is broken into four groupings totaling 100%. I
understand System and User CPU usage, and Idle is available CPU. But
wa: Time waiting for IO, is this available CPU or unusable CPU? If
this number is high on a
In the /etc/passwd group is a uid/gid of nobody.
Why is nobody there and what does he do?
Also in his (and others) shadow file he has * as his encrypted password,
does this have special value?
nobody:*:13725:0:9:7:::
New to linux, inquisitive mind ;-)
James Chaplin
Systems Programmer,
Running zLinux as Guests on zVM is fantastic until it comes time to
reset your password across multiple servers. The guest servers are
multiply like rabbits. We are a shop new to Linux on the mainframe and
have a question.
Is there a way to apply without using LDAP, or to issue a series of
rpm -q for software installed using rpms
or for kernel info you can use:
uname -v
-Original Message-
From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of LJ
Mace
Sent: Friday, October 26, 2007 12:15 PM
To: LINUX-390@VM.MARIST.EDU
Subject: brain cramp on versioning info
What the
74 matches
Mail list logo
