Re: HTTPD server won't stay up

2002-12-16 Thread Sergey Korzhevsky
If you use SLES7, try to increase timeout in

/etc/rc.config.d/apache.rc.config

HTTPD_START_TIMEOUT=40  (was 10)



WBR, Sergey




Davis, Lawrence [EMAIL PROTECTED]
Sent by: Linux on 390 Port [EMAIL PROTECTED]
13.12.2002 21:53
Please respond to Linux on 390 Port


To: [EMAIL PROTECTED]
cc:
Subject:HTTPD server won't stay up


I am seeing my HTTPD server starting in the console

Starting Name Service Cache Daemon
..done
Starting inetd
..done
Starting httpd [
LDAP PERL ]
..done
Master Resource Control: runlevel 5 has been reached

but when I try to connect I get connection refused as though the server is
not running.
If I manually start the apache web server it comes up fine. before I
started
httpd I did not see anything with netstat -a that showed http anything
listening. After the manual start I saw http-www listening

tcp0  0 *:www-http  *:* LISTEN
550/httpd

Any Suggestions on where I can look to help with more information.

\|/
(. .)
TIA, ___ooO-(_)-Ooo___, Larry Davis



Re: LINUX Security

2002-12-16 Thread Sergey Korzhevsky
Hi

Could you explain me, please, what is the reason to remove 'root' name
from a system?
Local user can read /etc/passwd and find out who is really root, so it is
not save us.
For remote logins we can disable root. Is this not enough?

Thank you.
WBR, Sergey



Re: TCPIP vs. OSA

2002-12-16 Thread Gustavo Niemeyer
Hello Rob!

 If you're talking about OSA with QDIO, then I think there are situations
 where you want to have a virtual router rather than direct access to the
 OSA device. The IP address assignment is done with the qeth driver, so

[... nice explanation ...]

 QDIO devices get more efficient at higher bandwidth (because buffers get
 filled better and less handshaking is done). This works out both in CPU
 time and memory usage. Depending on the shape of network traffic, the
 savings may be more than the cost of the virtual router.

Thank you for explaining that so well. I already had these issues in
mind (not so clearly though). In that customer's case, there will be
just a few web servers being administered by a very limited number of
people.  Given your explanations, I belive there's no real reason for
not using OSA in their case.

Thank you again!

--
Gustavo Niemeyer

[ 2AAC 7928 0FBF 0299 5EB5  60E2 2253 B29A 6664 3A0C ]



Re: LINUX Security

2002-12-16 Thread Alan Cox
On Mon, 2002-12-16 at 11:04, Sergey Korzhevsky wrote:
 Hi

 Could you explain me, please, what is the reason to remove 'root' name
 from a system?

In many languages the letter sequence root is meaningless, or even not
in their default characters.



Re: LINUX Security

2002-12-16 Thread Daniel Jarboe
Alan Cox wrote:
 On Mon, 2002-12-16 at 11:04, Sergey Korzhevsky wrote:
  Could you explain me, please, what is the reason to remove
  'root' name from a system?

 In many languages the letter sequence root is meaningless,
 or even not
 in their default characters.


So what about names like like /etc, /mnt, /var, /bin, /proc, which
probably don't translate well either.  And commands (ls, mv, cp), and
file names (/etc/shadow, /etc/fstab).  Where does one draw the line?

But of course I agree with the UID/GID thing... If something needs
priveledges of UID 0, then the process should check that UID is 0, not
that username is root.  Most any requirement that a username/groupname
be news, ftp, root, nobody, etc is poor design (a bug), but all in all,
standardized system usernames are a good thing, aren't they?

~ Daniel










---

This message is the property of Time Inc. or its affiliates. It may be
legally privileged and/or confidential and is intended only for the use
of the addressee(s). No addressee should forward, print, copy, or
otherwise reproduce this message in any manner that would allow it to be
viewed by any individual not originally listed as a recipient. If the
reader of this message is not the intended recipient, you are hereby
notified that any unauthorized disclosure, dissemination, distribution,
copying or the taking of any action in reliance on the information
herein is strictly prohibited. If you have received this communication
in error, please immediately notify the sender and delete this message.
Thank you.



Re: LINUX Security

2002-12-16 Thread Alan Cox
On Mon, 2002-12-16 at 14:53, Daniel Jarboe wrote:
 So what about names like like /etc, /mnt, /var, /bin, /proc, which
 probably don't translate well either.  And commands (ls, mv, cp), and
 file names (/etc/shadow, /etc/fstab).  Where does one draw the line?

Wherever you like. Note that for file naming you want symlinks because
the standards make guarantees. Normally people just translate the gui.
However, when you log in, you do with your username...



Re: LINUX Security

2002-12-16 Thread Sergey Korzhevsky
It is all right, but when i asked this question, i mean for security. Does
it improve security?


WBR, Sergey




Alan Cox [EMAIL PROTECTED]
Sent by: Linux on 390 Port [EMAIL PROTECTED]
16.12.2002 18:12
Please respond to Linux on 390 Port


To: [EMAIL PROTECTED]
cc:
Subject:Re: LINUX  Security


On Mon, 2002-12-16 at 14:53, Daniel Jarboe wrote:
 So what about names like like /etc, /mnt, /var, /bin, /proc, which
 probably don't translate well either.  And commands (ls, mv, cp), and
 file names (/etc/shadow, /etc/fstab).  Where does one draw the line?

Wherever you like. Note that for file naming you want symlinks because
the standards make guarantees. Normally people just translate the gui.
However, when you log in, you do with your username...



Re: LINUX Security

2002-12-16 Thread Susanne Oberhauser
Sergey Korzhevsky [EMAIL PROTECTED] writes:

 Hi
 
 Could you explain me, please, what is the reason to remove 'root'
 name from a system?


there is none --- to the contrary doing so is Evil (tm) for LSB
compliant distributions.

From http://www.linuxbase.org/spec/gLSB/gLSB/usernames.html:

   Linux Standard Base Specification 1.3.pr8   
Prev  Chapter 19. Users  Groups   Next
---

User  Group Names

Below is a table of required mnemonic user and group names. This specification
makes no attempt to numerically assign uid or gid numbers. The exception is the
uid and gid for root which are equal to 0.

Table 19-1. Required User  Group Names

+-+
|User  |Group |Comments   |
|--+--+---|
|root  |root  |Administrative user with no restrictions   |

...

Table 19-2. Optional User  Group Names

+---+
|User|Group   |Comments |
|++-|
|adm |adm |Administrative special privileges|
|lp  |lp  |Printer special privileges   |
|sync|sync|Login to sync the system |
|shutdown|shutdown|Login to shutdown the system |
|halt|halt|Login to halt the system |
|mail|mail|Mail special privileges  |
|news|news|News special privileges  |
|uucp|uucp|UUCP special privileges  |
|operator|root|Operator special privileges  |
|man |man |Man special privileges   |
|nobody  |nobody  |Used by NFS  |
+---+




-- 
Susanne Oberhauser penguins SuSE Linux AG
+49-911-74053-574enjoy  Deutschherrnstr. 15-19
[EMAIL PROTECTED] dinosaurs90429 Nürnberg



Re: Linux/390 and z/VM interactions.

2002-12-16 Thread James Melin
Just so I can wave a  'see, these people say it needs to be done this way'
paper at my head sysprog

I assume to use CDL and back up linux volumes with DFDSS 1) the volumes
need to be 'avaiable' to the OS/390 image doing the backup, and that 2)
Linux needs to be quiesced and halted in order to get a good backup of the
devices?

Lastly, has anoyne gotten Open SSH to work for OS/390? I'd like to use it
to have automation be able to logon to Linux etc, and do stuff but I want
encrypted shell. I've not been able to get the one S/390 port to  work as
we don't have the IBM C compiler. Has anyone ported GCC to  the Unix side
of  OS/390 (Z/OS)? If so can the open SSH be made to work?

Thanks. Have a happy monday.




|-+
| |   Rob van der Heij |
| |   [EMAIL PROTECTED] |
| |   Sent by: Linux on|
| |   390 Port |
| |   [EMAIL PROTECTED]|
| |   IST.EDU |
| ||
| ||
| |   12/13/2002 01:45 |
| |   PM   |
| |   Please respond to|
| |   Linux on 390 Port|
| ||
|-+
  
--|
  |
  |
  |   To:   [EMAIL PROTECTED]
  |
  |   cc:  
  |
  |   Subject:  Re: Linux/390 and z/VM interactions.   
  |
  
--|




At 15:42 13-12-02, McKown, John wrote:

I know that I should use the code, Luke, but I'm not that familiar with
the kernel et al. Does Linux/390 take advantage of any of the VM
facilities
when running under VM vs. in an LPAR? I'm thinking especially of the
handshaking that is possible with paging. I.e. Linux thinks the page is
in
memory, but VM has it paged out. I think this is done with VSE and I
remember it back in the OS/VS1 days as well. What about other VM-only
facilities?

Yes, pseudo page fault support is there already. When a process gets
blocked because the particular page is paged out by VM, the kernel gets a
chance to run another process. Recent changes to z/VM improved the PFAULT
support. I have not seen numbers about how effective this is for Linux, but
it is enabled by default when you run in a virtual machine.
In fact, virtual memory itself as provided by z/VM is already a benefit
over LPAR since it allows the Linux guests to breathe.

The other thing is the shared kernel support that has been there for some
time now. This allows you to put some 2MB of the kernel in shared pages and
thus reduce the footprint of your penguins.

And the dasd driver can use Diagnose I/O instead of SSCH and exploit MDC
and other z/VM benefits. There have been some problems with that part of
the driver in the past, but it looks like the current code works.

Rob



Re: LINUX Security

2002-12-16 Thread Matt Zimmerman
On Mon, Dec 16, 2002 at 05:08:54PM +0100, Susanne Oberhauser wrote:

 Sergey Korzhevsky [EMAIL PROTECTED] writes:

  Could you explain me, please, what is the reason to remove 'root'
  name from a system?

 there is none --- to the contrary doing so is Evil (tm) for LSB
 compliant distributions.

However, to rely on LSB compliance in portable programs is just as Evil.

10   Thou shalt foreswear, renounce, and abjure the vile heresy which claimeth
that ``All the world's [an LSB-compliant Linux system]'', and have no commerce
with the benighted heathens who cling to this barbarous belief, that the days
of thy program may be long even though the days of thy current machine be
short.


--
 - mdz



Re: Linux/390 and z/VM interactions

2002-12-16 Thread paultz
Jim,

Yes, quiesce your Linux prior to doing your DFDSS backup of your CDL DASD.

As to SSH, I assume you are referencing the SG245944 Redbook, chapter
25?  I know it's out there, I just haven't gotten to it yet.  I'm trying
to find some free time to do similar automated tasks via SSH.  I'll be
interested to hear from you if you beat me to implementing SSH on your
z/OS system (don't have z/VM).

Best regards,
Paul




From: James Melin
Subject:  Re: Linux/390 and z/VM interactions.

Just so I can wave a  'see, these people say it needs to be done this way'
paper at my head sysprog

I assume to use CDL and back up linux volumes with DFDSS 1) the volumes
need to be 'avaiable' to the OS/390 image doing the backup, and that 2)
Linux needs to be quiesced and halted in order to get a good backup of the
devices?

Lastly, has anoyne gotten Open SSH to work for OS/390? I'd like to use it
to have automation be able to logon to Linux etc, and do stuff but I want
encrypted shell. I've not been able to get the one S/390 port to  work as
we don't have the IBM C compiler. Has anyone ported GCC to  the Unix side
of  OS/390 (Z/OS)? If so can the open SSH be made to work?

Thanks. Have a happy monday.



Re: Linux/390 and z/VM interactions

2002-12-16 Thread James Melin
We're in LPAR mode as well with Linux. Trying to cough up the $$$ for Z/VM
also.  The distribution of SSH that I tried was on
http://s390.nichols.de/ssh/index.html.

Page says the archive included binaries compiled under OS/390 2.9, but I
sure as hell couldn't find them or figure out where they were in a
different archive.

If anyone is interested in trying to get Open SSH working under OS/390\Z/OS
and unix system services with GCC or some other open source C compiler (if
there is one) I think we could do something very beneficial to the OS/390
AND linux/390 Communities. Why IBM does not include open SSH as part of of
the base is beyond me.




|-+
| |   paultz   |
| |   [EMAIL PROTECTED]|
| |   Sent by: Linux on|
| |   390 Port |
| |   [EMAIL PROTECTED]|
| |   IST.EDU |
| ||
| ||
| |   12/16/2002 11:44 |
| |   AM   |
| |   Please respond to|
| |   Linux on 390 Port|
| ||
|-+
  
--|
  |
  |
  |   To:   [EMAIL PROTECTED]
  |
  |   cc:  
  |
  |   Subject:  Re: Linux/390 and z/VM interactions
  |
  
--|




Jim,

Yes, quiesce your Linux prior to doing your DFDSS backup of your CDL DASD.

As to SSH, I assume you are referencing the SG245944 Redbook, chapter
25?  I know it's out there, I just haven't gotten to it yet.  I'm trying
to find some free time to do similar automated tasks via SSH.  I'll be
interested to hear from you if you beat me to implementing SSH on your
z/OS system (don't have z/VM).

Best regards,
Paul




From: James Melin
Subject:  Re: Linux/390 and z/VM interactions.

Just so I can wave a  'see, these people say it needs to be done this way'
paper at my head sysprog

I assume to use CDL and back up linux volumes with DFDSS 1) the volumes
need to be 'avaiable' to the OS/390 image doing the backup, and that 2)
Linux needs to be quiesced and halted in order to get a good backup of the
devices?

Lastly, has anoyne gotten Open SSH to work for OS/390? I'd like to use it
to have automation be able to logon to Linux etc, and do stuff but I want
encrypted shell. I've not been able to get the one S/390 port to  work as
we don't have the IBM C compiler. Has anyone ported GCC to  the Unix side
of  OS/390 (Z/OS)? If so can the open SSH be made to work?

Thanks. Have a happy monday.



FW: Apache on zSeries with SSL

2002-12-16 Thread Noll, Ralph

 I cannot get SSL (secure sockets layer) working on the z-box.
 I have loaded, reloaded, configured, re-configured, looked on the
 internet, in short tried everything I know to fix the problem.

 The installation of apache from source (and related packages) went
 according to plan. The new apache works fine in normal http mode.
 However, once apache is put in https mode (startssl) - which starts
 apache up just fine with no errors, you then cannot get to any page
 using https://lrnet/;.   The browser just hangs, no
 messages, no errors,
 it just hangs.


we have zvm 4.3
linux 390 zvmlinx1:~ # uname -a
Linux zvmlinx1 2.4.17-SuSE #1 SMP Thu Feb 28 14:28:29 GMT 2002 s390x unknown
zvmlinx1:~

any ideas

thanks

Ralph Noll
Systems Programmer
City of Little Rock
Phone (501) 371-4884
Fax   (501) 371-4712
mailto:[EMAIL PROTECTED]


   \\\|///
 \\\ ~ ~ ///
  (  @ @  )
 ===oOOo=(_)=oOOo===



Re: Updated site....for Ken Dreger

2002-12-16 Thread paultz
LOVE the Help Desk Nightmare!  I hear this same sort of story from
people two or three times a year Don't worry, we'll preserve your hard
drive.   ..  sure.

Paul



Re: FW: Apache on zSeries with SSL

2002-12-16 Thread Carlos Ordonez




Ralph, this is something we put together for a class we are teaching, hope
it helps

(See attached file: Crypto.pdf)

Carlos :-)


Saying goes: Great minds think alike - I say: Great minds think for
themselves!

Carlos A. Ordonez
IBM Corporation
Server Consolidation



|-+--
| |   Noll, Ralph  |
| |   [EMAIL PROTECTED]|
| |   tate.ar.us|
| |   Sent by: Linux on  |
| |   390 Port   |
| |   [EMAIL PROTECTED]|
| |   T.EDU |
| |  |
| |  |
| |   12/16/2002 02:24 PM|
| |   Please respond to  |
| |   Linux on 390 Port  |
| |  |
|-+--
  
---|
  |
   |
  |To:  [EMAIL PROTECTED]
   |
  |cc: 
   |
  | From:  
   |
  |   Subject:  FW: Apache on zSeries with SSL 
   |
  |
   |
  
---|





 I cannot get SSL (secure sockets layer) working on the z-box.
 I have loaded, reloaded, configured, re-configured, looked on the
 internet, in short tried everything I know to fix the problem.

 The installation of apache from source (and related packages) went
 according to plan. The new apache works fine in normal http mode.
 However, once apache is put in https mode (startssl) - which starts
 apache up just fine with no errors, you then cannot get to any page
 using https://lrnet/;.   The browser just hangs, no
 messages, no errors,
 it just hangs.


we have zvm 4.3
linux 390 zvmlinx1:~ # uname -a
Linux zvmlinx1 2.4.17-SuSE #1 SMP Thu Feb 28 14:28:29 GMT 2002 s390x
unknown
zvmlinx1:~

any ideas

thanks

Ralph Noll
Systems Programmer
City of Little Rock
Phone (501) 371-4884
Fax   (501) 371-4712
mailto:[EMAIL PROTECTED]


   \\\|///
 \\\ ~ ~ ///
  (  @ @  )
  ===oOOo=(_)=oOOo===



Crypto.pdf
Description: Adobe PDF document


Re: LINUX Security

2002-12-16 Thread John Summerfield
On Mon, 16 Dec 2002, Sergey Korzhevsky wrote:

 It is all right, but when i asked this question, i mean for security. Does
 it improve security?

Not nearly as much as having a decent password.



--


Cheers
John.

Join the Linux Support by Small Businesses list at
http://mail.computerdatasafe.com.au/mailman/listinfo/lssb



Re: Linux/390 and z/VM interactions

2002-12-16 Thread Mark Post
Steve,

I just downloaded the openssh.os390.gz file.  The binary code is in there:
-rwxr-xr-x 0/5000 5598 2001-08-28 14:16:23 testopenssh/install-sh
-rw-r--r-- 0/5000 11422828 2001-08-28 15:42:50 testopenssh/libcrypto.a
-rw-r--r-- 0/5000   736948 2001-08-28 14:21:56 testopenssh/libssh.a
-rw-r--r-- 0/5000  3668080 2001-08-28 15:42:52 testopenssh/libssl.a
-rw-r--r-- 0/500041446 2001-08-28 15:42:46 testopenssh/libRSAglue.a
-rwxr-xr-x 0/5000  2437120 2001-08-28 14:36:45 testopenssh/ssh
-rwxr-xr-x 0/5000  1642496 2001-08-28 14:47:03 testopenssh/ssh-add
-rwxr-xr-x 0/5000  1409024 2001-08-28 14:47:21 testopenssh/ssh-agent
-rwxr-xr-x 0/5000 1052 2001-08-28 14:16:28 testopenssh/ssh-askpass
-rwxr-xr-x 0/5000  1638400 2001-08-28 14:47:12 testopenssh/ssh-keygen

I would say give it a try.

Mark Post

-Original Message-
From: Linux on 390 Port [mailto:[EMAIL PROTECTED]]On Behalf Of
James Melin
Sent: Monday, December 16, 2002 1:06 PM
To: [EMAIL PROTECTED]
Subject: Re: Linux/390 and z/VM interactions


We're in LPAR mode as well with Linux. Trying to cough up the $$$ for Z/VM
also.  The distribution of SSH that I tried was on
http://s390.nichols.de/ssh/index.html.

Page says the archive included binaries compiled under OS/390 2.9, but I
sure as hell couldn't find them or figure out where they were in a
different archive.

If anyone is interested in trying to get Open SSH working under OS/390\Z/OS
and unix system services with GCC or some other open source C compiler (if
there is one) I think we could do something very beneficial to the OS/390
AND linux/390 Communities. Why IBM does not include open SSH as part of of
the base is beyond me.




|-+
| |   paultz   |
| |   [EMAIL PROTECTED]|
| |   Sent by: Linux on|
| |   390 Port |
| |   [EMAIL PROTECTED]|
| |   IST.EDU |
| ||
| ||
| |   12/16/2002 11:44 |
| |   AM   |
| |   Please respond to|
| |   Linux on 390 Port|
| ||
|-+

---
---|
  |
|
  |   To:   [EMAIL PROTECTED]
|
  |   cc:
|
  |   Subject:  Re: Linux/390 and z/VM interactions
|

---
---|




Jim,

Yes, quiesce your Linux prior to doing your DFDSS backup of your CDL DASD.

As to SSH, I assume you are referencing the SG245944 Redbook, chapter
25?  I know it's out there, I just haven't gotten to it yet.  I'm trying
to find some free time to do similar automated tasks via SSH.  I'll be
interested to hear from you if you beat me to implementing SSH on your
z/OS system (don't have z/VM).

Best regards,
Paul




From: James Melin
Subject:  Re: Linux/390 and z/VM interactions.

Just so I can wave a  'see, these people say it needs to be done this way'
paper at my head sysprog

I assume to use CDL and back up linux volumes with DFDSS 1) the volumes
need to be 'avaiable' to the OS/390 image doing the backup, and that 2)
Linux needs to be quiesced and halted in order to get a good backup of the
devices?

Lastly, has anoyne gotten Open SSH to work for OS/390? I'd like to use it
to have automation be able to logon to Linux etc, and do stuff but I want
encrypted shell. I've not been able to get the one S/390 port to  work as
we don't have the IBM C compiler. Has anyone ported GCC to  the Unix side
of  OS/390 (Z/OS)? If so can the open SSH be made to work?

Thanks. Have a happy monday.



Re: Linux/390 and z/VM interactions

2002-12-16 Thread Wolfe, Gordon W
This is for USS under OS/390, not USS(OE) under z/VM.  If the z/OS people are 
interested, more power to them.

If the source code is in this, it might be we could get it to work under USS(OE) on 
z/VM.

You don't need a parachute to skydive.  You need a parachute to skydive twice. - 
motto of the Darwin Society.
Gordon W.Wolfe, Ph.D. The Boeing Company (425)865-5940


-Original Message-
From: Mark Post [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 16, 2002 2:11 PM
To: [EMAIL PROTECTED]
Subject: Re: Linux/390 and z/VM interactions


Steve,

I just downloaded the openssh.os390.gz file.  The binary code is in there:
-rwxr-xr-x 0/5000 5598 2001-08-28 14:16:23 testopenssh/install-sh
-rw-r--r-- 0/5000 11422828 2001-08-28 15:42:50 testopenssh/libcrypto.a
-rw-r--r-- 0/5000   736948 2001-08-28 14:21:56 testopenssh/libssh.a
-rw-r--r-- 0/5000  3668080 2001-08-28 15:42:52 testopenssh/libssl.a
-rw-r--r-- 0/500041446 2001-08-28 15:42:46 testopenssh/libRSAglue.a
-rwxr-xr-x 0/5000  2437120 2001-08-28 14:36:45 testopenssh/ssh
-rwxr-xr-x 0/5000  1642496 2001-08-28 14:47:03 testopenssh/ssh-add
-rwxr-xr-x 0/5000  1409024 2001-08-28 14:47:21 testopenssh/ssh-agent
-rwxr-xr-x 0/5000 1052 2001-08-28 14:16:28 testopenssh/ssh-askpass
-rwxr-xr-x 0/5000  1638400 2001-08-28 14:47:12 testopenssh/ssh-keygen

I would say give it a try.

Mark Post

-Original Message-
From: Linux on 390 Port [mailto:[EMAIL PROTECTED]]On Behalf Of
James Melin
Sent: Monday, December 16, 2002 1:06 PM
To: [EMAIL PROTECTED]
Subject: Re: Linux/390 and z/VM interactions


We're in LPAR mode as well with Linux. Trying to cough up the $$$ for Z/VM
also.  The distribution of SSH that I tried was on
http://s390.nichols.de/ssh/index.html.

Page says the archive included binaries compiled under OS/390 2.9, but I
sure as hell couldn't find them or figure out where they were in a
different archive.

If anyone is interested in trying to get Open SSH working under OS/390\Z/OS
and unix system services with GCC or some other open source C compiler (if
there is one) I think we could do something very beneficial to the OS/390
AND linux/390 Communities. Why IBM does not include open SSH as part of of
the base is beyond me.




|-+
| |   paultz   |
| |   [EMAIL PROTECTED]|
| |   Sent by: Linux on|
| |   390 Port |
| |   [EMAIL PROTECTED]|
| |   IST.EDU |
| ||
| ||
| |   12/16/2002 11:44 |
| |   AM   |
| |   Please respond to|
| |   Linux on 390 Port|
| ||
|-+

---
---|
  |
|
  |   To:   [EMAIL PROTECTED]
|
  |   cc:
|
  |   Subject:  Re: Linux/390 and z/VM interactions
|

---
---|




Jim,

Yes, quiesce your Linux prior to doing your DFDSS backup of your CDL DASD.

As to SSH, I assume you are referencing the SG245944 Redbook, chapter
25?  I know it's out there, I just haven't gotten to it yet.  I'm trying
to find some free time to do similar automated tasks via SSH.  I'll be
interested to hear from you if you beat me to implementing SSH on your
z/OS system (don't have z/VM).

Best regards,
Paul




From: James Melin
Subject:  Re: Linux/390 and z/VM interactions.

Just so I can wave a  'see, these people say it needs to be done this way'
paper at my head sysprog

I assume to use CDL and back up linux volumes with DFDSS 1) the volumes
need to be 'avaiable' to the OS/390 image doing the backup, and that 2)
Linux needs to be quiesced and halted in order to get a good backup of the
devices?

Lastly, has anoyne gotten Open SSH to work for OS/390? I'd like to use it
to have automation be able to logon to Linux etc, and do stuff but I want
encrypted shell. I've not been able to get the one S/390 port to  work as
we don't have the IBM C compiler. Has anyone ported GCC to  the Unix side
of  OS/390 (Z/OS)? If so can the open SSH be made to work?

Thanks. Have a happy monday.



FW: Linux/390 and z/VM interactions

2002-12-16 Thread Wolfe, Gordon W
Sorry for the unintended post to the list.  I was responding to a co-worker who 
forwarded this to me and hit reply all by mistake.

You don't need a parachute to skydive.  You need a parachute to skydive twice. - 
motto of the Darwin Society.
Gordon W.Wolfe, Ph.D. The Boeing Company (425)865-5940


-Original Message-
From: Wolfe, Gordon W 
Sent: Monday, December 16, 2002 2:49 PM
To: 'Linux on 390 Port'
Subject: RE: Linux/390 and z/VM interactions


This is for USS under OS/390, not USS(OE) under z/VM.  If the z/OS people are 
interested, more power to them.

If the source code is in this, it might be we could get it to work under USS(OE) on 
z/VM.

You don't need a parachute to skydive.  You need a parachute to skydive twice. - 
motto of the Darwin Society.
Gordon W.Wolfe, Ph.D. The Boeing Company (425)865-5940


-Original Message-
From: Mark Post [mailto:[EMAIL PROTECTED]]
Sent: Monday, December 16, 2002 2:11 PM
To: [EMAIL PROTECTED]
Subject: Re: Linux/390 and z/VM interactions


Steve,

I just downloaded the openssh.os390.gz file.  The binary code is in there:
-rwxr-xr-x 0/5000 5598 2001-08-28 14:16:23 testopenssh/install-sh
-rw-r--r-- 0/5000 11422828 2001-08-28 15:42:50 testopenssh/libcrypto.a
-rw-r--r-- 0/5000   736948 2001-08-28 14:21:56 testopenssh/libssh.a
-rw-r--r-- 0/5000  3668080 2001-08-28 15:42:52 testopenssh/libssl.a
-rw-r--r-- 0/500041446 2001-08-28 15:42:46 testopenssh/libRSAglue.a
-rwxr-xr-x 0/5000  2437120 2001-08-28 14:36:45 testopenssh/ssh
-rwxr-xr-x 0/5000  1642496 2001-08-28 14:47:03 testopenssh/ssh-add
-rwxr-xr-x 0/5000  1409024 2001-08-28 14:47:21 testopenssh/ssh-agent
-rwxr-xr-x 0/5000 1052 2001-08-28 14:16:28 testopenssh/ssh-askpass
-rwxr-xr-x 0/5000  1638400 2001-08-28 14:47:12 testopenssh/ssh-keygen

I would say give it a try.

Mark Post

-Original Message-
From: Linux on 390 Port [mailto:[EMAIL PROTECTED]]On Behalf Of
James Melin
Sent: Monday, December 16, 2002 1:06 PM
To: [EMAIL PROTECTED]
Subject: Re: Linux/390 and z/VM interactions


We're in LPAR mode as well with Linux. Trying to cough up the $$$ for Z/VM
also.  The distribution of SSH that I tried was on
http://s390.nichols.de/ssh/index.html.

Page says the archive included binaries compiled under OS/390 2.9, but I
sure as hell couldn't find them or figure out where they were in a
different archive.

If anyone is interested in trying to get Open SSH working under OS/390\Z/OS
and unix system services with GCC or some other open source C compiler (if
there is one) I think we could do something very beneficial to the OS/390
AND linux/390 Communities. Why IBM does not include open SSH as part of of
the base is beyond me.




|-+
| |   paultz   |
| |   [EMAIL PROTECTED]|
| |   Sent by: Linux on|
| |   390 Port |
| |   [EMAIL PROTECTED]|
| |   IST.EDU |
| ||
| ||
| |   12/16/2002 11:44 |
| |   AM   |
| |   Please respond to|
| |   Linux on 390 Port|
| ||
|-+

---
---|
  |
|
  |   To:   [EMAIL PROTECTED]
|
  |   cc:
|
  |   Subject:  Re: Linux/390 and z/VM interactions
|

---
---|




Jim,

Yes, quiesce your Linux prior to doing your DFDSS backup of your CDL DASD.

As to SSH, I assume you are referencing the SG245944 Redbook, chapter
25?  I know it's out there, I just haven't gotten to it yet.  I'm trying
to find some free time to do similar automated tasks via SSH.  I'll be
interested to hear from you if you beat me to implementing SSH on your
z/OS system (don't have z/VM).

Best regards,
Paul




From: James Melin
Subject:  Re: Linux/390 and z/VM interactions.

Just so I can wave a  'see, these people say it needs to be done this way'
paper at my head sysprog

I assume to use CDL and back up linux volumes with DFDSS 1) the volumes
need to be 'avaiable' to the OS/390 image doing the backup, and that 2)
Linux needs to be quiesced and halted in order to get a good backup of the
devices?

Lastly, has anoyne gotten Open SSH to work for OS/390? I'd like to use it
to have automation be able to logon to Linux etc, and do stuff but I want
encrypted shell. I've not been able to get the one S/390 port to  work as
we don't have the IBM C compiler. Has anyone ported GCC to  the Unix side
of  OS/390 (Z/OS)? If so can the open SSH be made to work?

Thanks. Have a 

sna-linux

2002-12-16 Thread Mitchell McKenna
sna-linux - where art thou ?

thanks

Mitch McKenna


_
MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*.
http://join.msn.com/?page=features/virus



(please) Tell IBM about your VM Linux on VM Education needs

2002-12-16 Thread Pamela Christina (IBM z/VM)
(cross-posted to vmesa-l, ibm-main, linux-390)

Hello,

Please help us to understand your education needs (and those of your
staff) by providing your input and guidance.

For starters, these are the newly-updated VM course offerings from IBM.
- Installing, Configuring and Servicing z/VM for Linux Guests (ZV060)
- z/VM  Linux Connectivity  Management (ZV100)


1) Do these courses combined with either a zSeries Tech conference or
   SHARE or GSE meet your VM education needs?
   What about the VM needs of your staff members?

2) Please tell us the additional z/VM and Linux on VM related
   topics for which you need in-depth  education?

3) Any comments on the delivery method (formal classes, online),
   location, and cost?

4) Do you have (or plan to have) new-to VM staff who will need
   the CP/CMS basics?


Please respond via way that is most comfortable for you.
 -  directly to me
 -  or VM web feedback: http://www.vm.ibm.com/forms/feedback.html
 -  or here on the listserv if you don't mind sharing the information
 and/or encouraging discussion on this topic.


 I will share your responses with my colleagues in IBM Learning Services
 for consideration in educational offerings and course development, and
 also I will keep them in mind when assembling the agenda
 for the 2003 zSeries Technical Conferences.

We look forward to hearing from you. Thank you.

Regards,
Pam C