Re: performance problems db2 after moving from AIX

[Eric Covener]

> Where  can I look for potential relief? Everyone was hoping for a better
> performance not worse.I am hoping that there is something we can tweak to
> make this better.

Only because I didn't see it specifically in the thread yet, do you have
similar large page size support/tuning in both environments?

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www2.marist.edu/htbin/wlvindex?LINUX-390

Re: z14 software warnings for GSKIT things

[Eric Covener]

On Sat, May 26, 2018 at 12:23 AM, marcy cortes  wrote:
> If you are putting in a z14 and are running Connect:Direct under Linux you
> need to get a yet unreleased fixpack or all of your secure+ will fail.
>
>
> Spectrum Scale also requires 4.2.3.6 and WAS IHS requires 8.5.5.13.
>
> Anything that uses GSKIT needs examination.  MQ and DB2 also use it.  We
> haven’t seen problems there but we also are very current on all software
> these days.

For other GSKit-consuming software, you really want to see a GSKit
maintenance level of 8.0.50.86 or higher.
This is roughly from the end of 2017 upstream but it can be a long runway.

The symptoms I've seen most are super acute startup hangs, but
products that use GSKit differently could see more nefarious symptoms.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: HTTPS, Apache and crypto hardware

[Eric Covener]

On Fri, Sep 1, 2017 at 12:48 PM, Michael MacIsaac  wrote:
> Hi,
>
> If I believe the marketing, I should get crypto magically when switching
> from HTTP to HTTPS using Apache under zLinux, just by buying a z14.
>
> Well we don't have any z14s and I'm not sure I believe the hype.  Does
> anyone know of a HOWTO on this?
>
> I did write up a "recipe" (26.4 Hardware cryptographic support for OpenSSH)
> in a Cookbook years ago on using the library openssl/engines/libibmca.so -
> but I am under the impression this process is for OpenSSH, not Apache HTTPS.
>

There are a few good slides here:

https://www-01.ibm.com/common/ssi/cgi-bin/ssialias?htmlfid=ZSP04731USEN

> Focus on Transparent Enablement:
> Transparently accelerate TLS & IPSec using CPACF & SIMD to leverage hardware 
> performance gains

But it's unclear to me if this means "without configuration [of
PKCS11]" in things like Apache+mod_ssl+openssl.  I don't get the
impression that the new SIMD instructions they talk about are crypto
related, those kinds of instructions are usually the only
"configuration-free" crypto acceleration that I've seen on Linux.

In addition, the deck talks about LUKS-like encrypted block devices
backed by CPACF in the same way that datasets can now be encrypted at
rest by policy in the Z14.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Bash loop failing

[Eric Covener]

On Thu, May 4, 2017 at 7:32 AM, Michael MacIsaac <mike99...@gmail.com> wrote:
>
> When I trace it, the 'read nextLine' fails.  I print out 'expList' after
> the loop and all records are still in place. How can a sub-process affect
> the parent this way? I've narrowed it down to two resulting bash script
> calls nested deeper in zSetOneSystem(). If I comment out those two, the
> loop succeeds.  If I un-comment either of the two bash scripts, the loop
> fails as described.  Strange.


Is $IFS changed and not restored?

--
Eric Covener
cove...@gmail.com

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: _rebind_proc

[Eric Covener]

On Wed, Feb 24, 2016 at 9:52 AM,  <karlkings...@ongov.net> wrote:
> Feb 24 09:36:31 db2tst1 db2ckpwd 0[21316]: _rebind_proc


I know from another context that a "rebind proc" is related to LDAP
referral processing.  If you can configure
slightly differently and avoid referrals in responses to your password
checking queries, you might
also suppress these messages.   For example with MSAD, you can point
to the "global catalog port" or
an MSAD frontend called "ADAM" to suppress some referrals specific to
the MS env.

To me it looks like some debug to stderr was left.

Hope it helps in your searching.


--
Eric Covener
cove...@gmail.com

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Compression - Offloading

[Eric Covener]

On Thu, Sep 17, 2015 at 9:15 AM, Jorge Fábregas
 wrote:
> Is there some specialty processor in the mainframe implementing either
> gzip, bzip2 or lzma that one could offload compression tasks to?  If so,
> which Linux utility or configuration do I need for that?

I don't know about using it from Linux, but EDC/zEDC are some terms
related to this that might help your search.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: 2015-08-28 Linux on z Systems - qclib 1.0.0 package drop on developerWorks

[Eric Covener]

On Fri, Aug 28, 2015 at 7:10 PM, Gregg Levine gregg.drw...@gmail.com wrote:
 Is it possible Neale that the browser you used, tried to be helpful
 and decompressed it? I had that problem early on using what was
 delivered with earlier releases of Slackware Linux. I needed to
 configure the browser to stop doing that.

That is what's happening, but IMO it's an error in the server
configuration if it's meant for software distribution.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: XRDP

[Eric Covener]

On Sat, Jul 4, 2015 at 12:56 AM, Cameron Seay cws...@gmail.com wrote:
 So, I took a step back and decided to try and get vnc working with a basic
 x desktop and server (I can live with vnc if all else fails).



 This is where I am now.  I have installed xfce.  I like that one because it
 is basic and minimal.  Anyway, when I run startx or startxfce4 the server
 will not start and complains of having no display available.  I think I
 need to install some drivers but I have no idea which ones to install.


I don't think you want either of those, you just want to run vncserver
and choose what starts via ~/.vnc/xstartup (from memory)

--
Eric Covener
cove...@gmail.com

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Silly question about SLES

[Eric Covener]

On Tue, Apr 28, 2015 at 12:35 PM, Gerard Howells
ghowe...@americafirst.com wrote:
 Systemd slams aside, there are so many changes in SLES 12 that I think 
 sticking with the current generation for a while is useful for those of us 
 who want to steadily migrate away and let some of the bugs be flushed out 
 before we start putting it in place to run critical business applications.

Specifics aside, it's just business as usual for software to have
multiple versions in service at the same time.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Where can I locate Apache Web server for zLinux?

[Eric Covener]

On Thu, Mar 19, 2015 at 12:53 PM, Vitale, Joseph
joseph.vit...@bnymellon.com wrote:
 You hit it on the head. Much appreciated.  I understand Web server 
 should not run as root.  Not sure I can change that now w/out breaking it.


Apache httpd is designed to be started as root and drop to an
unprivileged userid for request processing.  You can start as non-root
and stay there, but it can surprisingly complicate some things.  In a
lot of ways, now you've created a midway-priveleged userid.

--
Eric Covener
cove...@gmail.com

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: Eclipse crashes under zLinux Exit Code 1

[Eric Covener]

On Fri, Nov 21, 2014 at 12:29 PM, Vitale, Joseph
joseph.vit...@bnymellon.com wrote:
 I am not an Eclipse guy but we have a user on Redhat 6.5  using Eclipse SDK 
 4.3.1  and  Java 6.0  JRE(not sdk ), 64 Bit

I have seen a few recent references to some mismatch between
gtk/swt/eclipse, resolved by
-Dorg.eclipse.swt.internal.gtk.cairoGraphics=false in eclipse.ini.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: node.js on zLinux?

[Eric Covener]

On Tue, Sep 2, 2014 at 8:17 AM, Dave Jones d...@vsoft-software.com wrote:
 The IBM SDK for Node.js ™ is based on the Node.js ™ open source project.
 It provides a compatible solution for IBM POWER ™ and Intel ® products
 that require Node.js ™ functionality and package management. 

Seems to be an important architecture missing in that list.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: node.js on zLinux?

[Eric Covener]

On Tue, Sep 2, 2014 at 8:34 AM, Eric Covener cove...@gmail.com wrote:
 The IBM SDK for Node.js ™ is based on the Node.js ™ open source project.
 It provides a compatible solution for IBM POWER ™ and Intel ® products
 that require Node.js ™ functionality and package management. 

 Seems to be an important architecture missing in that list.

Or I'm an idiot for not clicking-through to the downloads which include z/Linux!

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: node.js on zLinux?

[Eric Covener]

On Tue, Sep 2, 2014 at 1:20 PM, Michael MacIsaac mike99...@gmail.com wrote:
 Hmm ... Does the IBM SDK *not *contain node.js and the license is for the
 SDK only?  Otherwise it would seem IBM is violating the node.js license.

The license permits you to create a derivative and provide it under
whatever license you like. That's the big contrast between most
licenses an the GPL.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: zLinux Question

[Eric Covener]

 It takes quite some good skills on both Linux and System Z to properly
 understand and manage such an environment, IMHO.

+1, this is a 2-beard problem!

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: SLES 11 SP3 problems

[Eric Covener]

On Mon, Nov 4, 2013 at 1:44 PM, Marcy Cortes
marcy.d.cor...@wellsfargo.com wrote:
 We've been in the land of WAS since WAS 5!

 Everything was just peachy until this kernel.

 One server was 1500M with 2 apps each with a heap size of 1024 and a dmgr and 
 a node agent.
 He was even ok until this!I'm surprised it ran at all.(Note, 
 dev/test, not prod.   We wouldn't do that to prod :).

This is a bit of a longshot, but can you try setting
MALLOC_ARENA_MAX_=1 in the native environment before starting WAS or
your other recreate?

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: TLS 1.2 in WAS8 and SLES11.2

[Eric Covener]

On Tue, Apr 30, 2013 at 6:25 PM, Srivastava, Sagar ssrivast...@iso.com wrote:
 Hi All,

 Does anyone know how  SLES11 SP2 zLinux servers with WAS8-iHS support
 TLS 1.2.


 One problem I see is that openSSL on SLES is 0.9.8 which does NOT
 support TLS1.2. I don't know how WAS8 will support it though.


Neither WAS nor IHS use openssl. Both support TLS1.2.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: RHEL6 SSH key

[Eric Covener]

On Wed, Jan 5, 2011 at 11:00 AM, Thang Pham thang.p...@us.ibm.com wrote:
 I found the problem, it was SELinux that was causing the password prompt.
 If I disabled SELinux, it works and there are no password prompts.


What you really want in this case is restorecon
~/.ssh/authorized_keys to allow sshd to read it.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Re: 32-bit Application with 64-bit WAS Linux z-Series(64-bit platform)

[Eric Covener]

On Tue, Jul 1, 2008 at 1:39 AM, Nidhi Behl [EMAIL PROTECTED] wrote:

 Caused by: java.lang.UnsatisfiedLinkError:
 /space2/ruchi/bin/myerrlog.so: /space2/ruchi/bin/libmyerrlog.so: wrong
 ELF class: ELFCLASS32
at java.lang.ClassLoader$NativeLibrary.load(Native Method)

When using JNI, you'll need to make your own 64-bit shared objects
available in your shared library path when running under a 64-bit
java.

--
Eric Covener
[EMAIL PROTECTED]

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Re: IHS and SSI

[Eric Covener]

On Mon, Jun 30, 2008 at 2:51 PM, Mauro Souza [EMAIL PROTECTED] wrote:
 [/home/index.shtm]
 htmlbody
 !-- #include ../inc/header.htm --
 /body/html


http://httpd.apache.org/docs/2.0/mod/mod_include.html

The vanilla form of #include cannot contain relative links that go
up a directory.

the #include virtual= seems to allow this, but the doc is a little ambiguous.

--
Eric Covener
[EMAIL PROTECTED]

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Re: Apache URL next question

[Eric Covener]

On 4/2/07, Stephen Frazier [EMAIL PROTECTED] wrote:

On my browser I type in the URL. The first page comes up. I click on a link on 
that page the page
come up. However, the browser shows the IP address and not the URL.
http://###.##.##.###/login/index.php and not 
http://doctrgtest.doc.state.ok.us/login/index.php as I
expected.


See the ServerName and UseCanonicalName directives

--
Eric Covener
[EMAIL PROTECTED]

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Re: gnupg 2.0.1

[Eric Covener]

On 1/5/07, Tom Duerbusch [EMAIL PROTECTED] wrote:

compress.o(.text+0x238): In function `compress_filter':
/home/gpg20/gnupg-2.0.1/g10/compress.c:222: undefined reference to
`inflateInit2_'
compress.o(.text+0x23c):/home/gpg20/gnupg-2.0.1/g10/compress.c:222:
undefined reference to `inflateInit_'


These are zlib symbols, try linking with -lz if the gnupg source
doesn't have some bundled implementation it's supposed to pick up.
(make LDFLAGS=-lz)

--
Eric Covener
[EMAIL PROTECTED]

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390