Re: VM/ESA 2.4 under z/VM 5.x

2006-03-14 Thread Adam Thornton

On Mar 14, 2006, at 10:51 PM, Alan Ackerman wrote:


I hope you can find someone who has tried it.

We haven't tried it. It certainly isn't supported. What hardware  
are you

planning to run on? VM
does not virtualize everything (in fact, cannot). z/VM 5.x is  
supported o

nly on zSeries and System
z9. VM/ESA 2.4.0 does not (officially) run on a z9.


You could certainly run it under Hercules under z/Linux, although  
there are probably licensing issues, since presumably VM/ESA 2.4 is  
not licensed to *that* processor.


Adam


Re: Requirements for encrypting tape drives for z/VM

2006-03-10 Thread Adam Thornton

On Mar 10, 2006, at 9:18 AM, Edward M. Martin wrote:


Hello Alan,

You wrote this.

If there is an encryption solution, it should either use the  
hardware

encryption facilities of the z9
hardware, or offboard encryption hardware.

There should also be compression. And please remember that you  
cannot

compress encrypted
data -- compression must come first. Tape-drive compression is

worthless

if the encryption is on
the mainframe.


I think I follow but I want to make sure.  I think you mean you
can compress encrypted data but that the compression ratio would  
not be

lousy.


Would be lousy: in fact, it should be impossible to compress an  
encrypted stream.  Specifically, encryption makes your data stream  
look like random bits, and random bits don't compress at all.  If  
they DO compress, they're not random, since compression is nothing  
but exploiting regularities in the data stream and expressing the  
most common patterns in a coded compact form.



And if you did encrypt the data first, then you would need to reverse
the process in the exact order to be able to use that data.


Well, sure, but that's the case with any encryption and compression  
scheme: encrypting a compressed stream will yield a different answer  
than compressing an encrypted stream. Applying the inverse operations  
in the wrong order will yield gibberish.


Adam


Re: Requirements for encrypting tape drives for z/VM

2006-03-10 Thread Adam Thornton

On Mar 10, 2006, at 9:47 AM, Brian Nielsen wrote:

Actually, it's usually worse than that - putting encrypted/random data

through a compression algorithm usually results in a larger data  
stream


than the original data stream.


Well, yeah.  A compressed text is essentially a codebook defining a  
sequence mapping from the original onto the compressed version, plus  
the compressed version.  If the entropy of the input stream is very  
high, then the overhead of the codebook adds to the size of the  
stream, with no reduction for the sequence remapping.


Smart compression algorithms, however, should be able to say, Wow.   
That didn't help at all!  Never mind! and just give you the original  
stream in that case.


Adam


Re: Installing Debian Linux

2006-03-06 Thread Adam Thornton

On Mar 6, 2006, at 5:28 AM, Shimon Lebowitz wrote:


~ # mkdir cdrom
~ # mount -t nfs 10.1.20.20:/cdrom /cdrom
mount: Mounting 10.1.20.20:/cdrom on /cdrom failed: No such device
~ #

And even if I did the mount, how would I get the
installer to use it?

I asked these questions last week on Debian-390, but that list
seems a bit sleepy, and no one responded.


The S/390 Debian port, to the best of my knowledge, only does http or  
ftp installs, not NFS.


If your machine cannot reach the outside world, you could set up a  
mirror of the Debian pool on an internal machine.


It is our intention to produce a VM installer for Sarge as we did for  
Woody, which turns one of your S/390 guests into the installation  
server; however, this one will come on 2 DVDs instead a whole bunch  
of CDs.


It's not ready yet--I've been very busy with other higher-priority  
projects--but if you'll write me offlist I can see whether a) I can  
just ship you a DVD copy of the installation pool and give you some  
help configuring a machine to serve it up, or b) I can try to help  
you through a regular network install if you can get to the external  
network from your s390.


Adam


Re: ICKDSF R17 CPVOL LIST - R/W DASD Required

2006-02-28 Thread Adam Thornton

On Feb 28, 2006, at 9:53 AM, Chris Langford wrote:


David Boyes wrote:


Hic jacent Priscius.
-- db



Antiqui colant antiquum dierum


Also, shouldn't it be hic jacet, unless Priscius had multiple  
personality disorder or something?


Adam


Re: ICKDSF R17 CPVOL LIST - R/W DASD Required

2006-02-28 Thread Adam Thornton

On Feb 28, 2006, at 10:00 AM, Huegel, Thomas wrote:
And a damsel in distress, there must be a damsel in distress.  
(maybe ICKDSF will do)


If you're seeing ICKDSF as a damsel, whether in distress or not,  
you're at least as deluded as those sailors who thought manatees were  
lissome mermaids.  I recommend some serious shore leave.


Adam


Re: ICKDSF R17 CPVOL LIST - R/W DASD Required

2006-02-28 Thread Adam Thornton

On Feb 28, 2006, at 10:06 AM, Daniel P. Martin wrote:

Must be either too much or too little caffeine.  I'm struck by  
visions of David skulking about the battlements, all Gollum-like,  
muttering My Priscius... while Alan is circling the moat on  
horseback, dressed up like Howdy Doody, singing Oh give me a home,  
with a moat of my own...


Or maybe somebody has been slipping Adam's special blend of cough  
syrup into my coffee.


In the immortal words of Wavy Gravy, the brown acid is not,  
specifically, too good.


Adam


Re: I'm Back

2006-02-22 Thread Adam Thornton

On Feb 22, 2006, at 9:32 AM, Edward M. Martin wrote:

Hello Adam,
Just so I have it clear,
I can run Linux for S/390 or zSeries under Hercules without any
licensing issues.


Yep.

You don't need a license to run Linux.

Adam


Re: MCLs for z/VM 5.2

2006-02-08 Thread Adam Thornton

On Feb 8, 2006, at 4:49 PM, Alan Altmark wrote:
As soon as all the world's governments unite under a single  
authority (to

wit, Chuckie)


...we will all have been fed to the lions anyway, and therefore won't  
really care about microcode updates.


Adam


Re: DCSS as SWAP disk for z/Linux

2006-01-20 Thread Adam Thornton

On Jan 20, 2006, at 10:27 AM, James G. Stracka wrote:


Can running from an NSS be done for a few penguins?  Is it then
practical to do it for a penguin farm?


Yes.  You save a few megabytes per image.

It makes maintenance more difficult, though.

Adam


Re: DCSS as SWAP disk for z/Linux

2006-01-19 Thread Adam Thornton

On Jan 19, 2006, at 9:18 AM, James G. Stracka wrote:

I was reading a document that suggested using DCSS as the SWAP disk  
for z/LINUX
guests instead of V-DISK.  This sounded interesting for several  
reasons.

Unfortunately, the document did not describe how to implement this.

Has anyone done this or experimented with it?

My guess would be that this DCSS would have to be defined Exclusive  
Write.


Can the DCSS be inside the guest's Virtual Storage or must it be  
outside?


How would this be formatted?  And, how would it be mounted?


I haven't done it with the newer DCSS stuff, but the old way is  
something like:


Yes, it's EW.  It's inside the guest's storage but outside Linux's  
(like with DCSS filesystems, you IPL the guest with mem=128M or  
whatever to restrict Linux to below where you have the DCSS.  Format  
it with mkswap, and then swapon /dev/cssblk/whatever.


I think.

This is all from hazy memory.  I haven't played with this in a year  
or more.


Adam


Re: {SPAM?} DCSS as SWAP disk for z/Linux

2006-01-19 Thread Adam Thornton

On Jan 19, 2006, at 1:17 PM, Barton Robinson wrote:


Yah, you might save 1% of a processor if you ever swap at
1000 per second or something like that - never bothered
to measure it, just know that the cost of swap to vdisk
is cheap, fast, and easy to set up, and everybody does it
that way for those reasons.


And, ahem, let me plug SWAPGEN, which entirely automates the  
construction of Linux swap prior to IPL from CMS.  Just run SWAPGEN  
in your PROFILE EXEC, stick /dev/dasdb1 (or whatever) in /etc/fstab,  
make sure that the DIAG driver is loaded on IPL, and let 'er rip.   
(Even better: prioritized swap disks.)



Just because you CAN swap to dcss does not mean you should.
The only value to dcss has been conjecture, no proof.


I was under the impression that Rob van der Heij (I think) had in  
fact measured DCSS to be slightly faster.


Me?  I use VDISK and SWAPGEN.  I understand exactly how it works  
(for, er, obvious reasons) and it's always been plenty fast enough  
for me.  I haven't measured it either, but I suspect that Barton's  
right: at the point at which the performance difference becomes  
noticeable, you have much worse problems than which fast memory-based  
virtual device you're swapping to.


Adam


Re: OSA Express GbE performance

2006-01-18 Thread Adam Thornton

On Jan 18, 2006, at 9:15 AM, Aria Bamdad wrote:


Hi,

I was wondering if others have seen the problem I am seeing on a  
OSA Express

Gigabit Ethernet as compared to a regular OSA Express Fast Ethernet.


My first guess would be that your GigE uses jumbo packets and the  
switch is having to chop up and reassemble them to feed them to the  
smaller size the FE is expecting.


Adam


Re: Can Z/VM 4.4 handle IQDIORouting?

2006-01-13 Thread Adam Thornton

On Jan 13, 2006, at 3:19 PM, Alan Altmark wrote:


Ah, pictures.  A crayon is worth a thousand words.  (And its  
easier to

markup a drawing that a configuration file!!)


Tastes better too.

Adam


Re: Can Z/VM 4.4 handle IQDIORouting?

2006-01-11 Thread Adam Thornton

On Jan 11, 2006, at 11:15 AM, Bob Heerdink wrote:


I'm not sure I understand the entire issue, but my MVS sysprog has an
interesting idea.  I showed him VSWITCH article by Mark  Bruce in the
Sept 2004 z/Journan mag but I'm not clear what to do myself.

Right now I have a Z/OS lpar that is managing a OSA express card  
that is

attached to our lan network.
This lpar routes packets to the hipersocket network which z/vm and the
linux systems are a part off.


I would like to eliminate that Z/OS lpar and run the OSA express  
from Z/VM.
I looked at the tcpip manuals for the V4.4 we have and it does not  
mention
the parms required to do the routing. I do not know if a V5 Z/VM  
would be

able to handle it.
It was that IQDIORouting of the IPCONFIG statement I showed you.

I read some of the books on the vswitch you mentioned but I am not  
sure how

it works or if it would be better than the hipersocket approach.


Any suggestions?


If you really mean, get rid of the z/OS LPAR then you just give the  
OSA to z/VM, set up TCPIP as a controller for a VSWITCH that uses the  
OSA, and give every guest a virtual OSA adapter coupled into the  
VSWITCH.


If you need to preserve routing to z/OS, then I'd set up an external  
network route sending traffic to z/OS via z/VM, and use a physical  
HiperSocket with both z/VM and z/OS on it.  This introduces another  
hop to z/OS.


Adam


Re: OT: Cough Syrups Not Effective

2006-01-10 Thread Adam Thornton

On Jan 10, 2006, at 8:52 AM, Dave Jones wrote:


This news doesn't sound too good for our Adam Thornton.;-)


I guess it's back to Hot Toddies, then:

In a tall mug:

1 Tbsp honey
Juice of 1/2 lemon
1.5 oz scotch

Fill with boiling water.  Stir until honey dissolves.  Drink.

Several of these and you'll either stop coughing or stop caring.

Adam


Re: OT: Be nice to your favorite IBMer...

2006-01-06 Thread Adam Thornton

On Jan 6, 2006, at 10:06 AM, David Boyes wrote:


From todays Washington Post…

http://www.washingtonpost.com/wp-dyn/content/article/2006/01/05/ 
AR2006010502329_2.html?referrer=emailreferrer=email


Perhaps we should start a community retirement fund for our  
favorite IBMers. Sounds like they're gonna need it.


I've already put a bottle of cough syrup aside for Chuckie.

Adam

Re: z/VM 5.2 install

2006-01-04 Thread Adam Thornton

On Jan 4, 2006, at 3:08 PM, Mike Walter wrote:



Miguel,

Steve cited the Summary which states: - Your first-level system  
must be running z/VM 5.1.0 or higher.


I specifically searched the full Guide for 5.1.  The step you  
refer to states: o For a second-level installation your first- 
level system must be running z/VM Version 5.


Note the discrepancy, the Summary lists 5.1 while the Guide is  
more general (and upward compatible) with only 5.  Doc error.


If I had time and enough interest, I'd submit an RFC for the  
Summary to match the 5 in the Guide.  Then when 5.3 hits the  
streets there would be one less point of confusion for upgrading  
customers.  Thanks for pointing out the vagaries of character  
searches.  (Damned computers!  Do what I want not what I ask!)  :-)


Aren't z/VM Version 5 and z/VM 5.1.0 or higher strict synonyms  
anyway?


Adam


Re: OS/2 RIP

2005-12-28 Thread Adam Thornton

On Dec 27, 2005, at 12:29 PM, David Boyes wrote:



There are only three products on Windows that I cannot easily  
replace.

One is Intuit's Quicken (GNUCash is just too difficult). The
second is Intuit's TurboTax with eFiling. The last is Visio
(which is now owned by MS blech).


It's interesting that these three products are exactly the ones I  
can't

live without. I wonder if Intuit ever hears about that, or can free
themselves from MS enough to do so.

It would seem that writing a good object-oriented drawing tool to
replace Visio shouldn't be *that* hard. The trick would be being  
able to

read the symbol libraries that exist for Visio...


Dia already is a reasonable Visio replacement.  The trick is being  
able to import Visio files.  *NOTHING* can do that, and there's a  
large bounty out for whomever manages to handle the file format.   
Even the converter for the Mac product ConceptDraw requires a running  
Windows box and uses Windows DLLs and the Visio player to do some  
semigluteal magic that actually doesn't work well either.


Adam


Re: Just a stupid question

2005-12-15 Thread Adam Thornton

On Dec 15, 2005, at 12:47 PM, Víctor wrote:


Hi all!
I'm new in z/VM, and I must try to install it. My question is:
I was reading documentation and you should use the same tape in 2  
IPLs for

doing different things. How do they do that? Do they check for the res
volume to be initializated?


No, you just don't rewind it between ipls.

And the other (and most important question): Could I copy the tapes  
on disk

and do IPL from these disks?


Not easily, no.

I have problems for reading 3480s in the machine where I'm trying  
to install VM.


Maybe the CD or DVD IPL-from-HMC would work better for you?

Adam

Re: 2nd-Level VM Install Question - Side question

2005-12-09 Thread Adam Thornton

On Dec 9, 2005, at 11:56 AM, Wolfe, Gordon W wrote:
In actual fact, I met Terry Pratchett at a book signing two months  
ago for his latest novel, Thud!, and I asked him if scrumpy was  
the inspiration for scumble.  he said, Oh, of course!.   Mr.  
Pratchett lives in Somerset, by the way.


I see.

As I recall from the books, it's essentially an icewine made from  
cider, innit?  That is, you ferment the cider, then you let the water  
freeze out leaving behind a more-alcoholic residue?


That'd be one of those drinks of which Nanny Ogg is not averse to the  
odd pint, those drinks being, again, IIRC, the same drinks that most  
people drink out of very small glasses.


Adam


Re: Network Problems?

2005-12-08 Thread Adam Thornton
http://www.sinenomine.net looks fine from io.com (as an arbitrarily- 
chosen remote host where I happen to have a shell account).


Adam


Re: [Bulk] Re: Dirmaint newbie question - 3390 default size

2005-11-21 Thread Adam Thornton

On Nov 20, 2005, at 10:42 PM, Tom Cluster wrote:

  And if I don't have DIRME, which minidisk's version of EXTENT  
CONTROL am I supposed to change?   Am I supposed to change 1DF?  Is  
the one on 1DB simply a copy of the one on 1DF?  When is it  
copied?  When a backup is done?


I don't know, but it's never mattered:

Use the DIRMAINT commands SEND and FILE: SEND can send EXTENT CONTROL  
to your reader, and FILE sends it back to DIRMAINT, who figures out  
where it goes.  Don't try to directly manage any of DIRMAINT'S files  
after the initial setup, but rely on the DIRM commands instead.


Adam


Re: SSL connection to VM

2005-11-10 Thread Adam Thornton

On Nov 10, 2005, at 1:28 PM, Duane Weaver wrote:


Does TCPIP on VM support SLL connection to port 992?


Yes, if you're running SSLSERV.

Adam


Re: SSL connection to VM

2005-11-10 Thread Adam Thornton

On Nov 10, 2005, at 1:55 PM, Duane Weaver wrote:


Is that part of TCPIP on VM?


Yes and no.

What level of VM do you have?  After 3.1, yes it is.

Also, you can either implement SSLSERV on your own Linux server, or  
you could download the pre-built one from Sine Nomine.  I, as the  
person mostly responsible for putting together the SSLSERV appliance,  
think that's the easiest way to do it.


Adam


Re: VM SSL support

2005-11-10 Thread Adam Thornton

On Nov 10, 2005, at 6:26 PM, David Boyes wrote:




Just copy the Linux files from the old level to the new
level; there's no need to regenerate the database.  No, you
can't import a certificate.  The export function is included
so you can look at the requests and certificates.


Except with all the built-in networking brain-damaged by the SSL  
IUCV stack,
it's kinda hard to copy things to safe places that don't get nuked  
during an
upgrade. We should really have a long discussion on how  
configuration data
is managed in the SSL code at some point...the current method has a  
few

challenges to overcome.

Adam, we should probably look into a way to copy the certificate  
file to a

temp VDISK, or move where the certificate file is stored to a separate
minidisk in the appliance. That would be more consistent with the  
appliance

toolkit conf dir setup anyway.



E2.

If this is an upgrade, then you should link your old SSL 201 disk at  
address 1201, and the new one at 2201, and run the following script.


Should work fine.  Just gotta find time to do it.

Adam


Re: VM SSL support

2005-11-03 Thread Adam Thornton

On Nov 3, 2005, at 2:28 PM, Jim Bohnsack wrote:

I am trying to install the new Sine Nomine SSLSERV code on a test  
system but I can't figure out how, with the existing SSLADMIN  
commands, to move the existing and unexpired certificate from the  
old SSLSERV database to the new one.  I can export the certificate  
from the old database and do the SSLADMIN STORE fn CA label, but  
when I do a SSLADMIN STORE fn SERVER, I get the 'DTCSSL403E No  
certificate request is found for the certificate.' message.  Since  
I was able to do the SSLADMIN STORE fn CD label, I thought that it  
might be all that was needed, but when I try, unsuccessfully, to  
connect, I can't and see a msg in the SSLSERV log saying  
'DTCSSL501E  No SERVER certificate was found with this label.'


Hm.  Obviously you could generate a new certificate request and then  
sign it with the CA you've importedbut I think you should be able  
to do the STORE of the existing cert too, once you have the CA that  
signed it in place.  I'll take a look and see what I can figure out,  
but if someone knows the answer offhand.


Adam


Re: Time Change Help.

2005-10-31 Thread Adam Thornton

On Oct 31, 2005, at 1:24 PM, Schuh, Richard wrote:

And while we are at it, it would also be simpler if every clock in  
the world were set to the same time. Only problem is, who would get  
to determine the correct setting? :-)


Chucky.

Adam


Re: Edgar Beargen's heritage (was: Edgar and Tux)

2005-10-26 Thread Adam Thornton

On Oct 26, 2005, at 1:00 PM, Mike Walter wrote:


One of Tux's cousins, Tucks, has
formed an especially close relationship with Edgar.  If you dare,  
you

may search for Tucks at the next SCIDS via careful observation in the
vicinity of where the copper pipe stand is inserted into Edgar.


TMI.

Way, way, way, WAY TMI.

Adam


Re: Filemode 7-9?

2005-10-24 Thread Adam Thornton

On Oct 22, 2005, at 9:21 AM, [EMAIL PROTECTED] wrote:

New Operating System --
Operating System / Virtual Universe (OS/VU)


...


This will give us
a base to develop an even more powerful operating system,
targeted for availability in the 4th quarter of year 2010, and
designated Virtual Reality.  OS/VR is planned to enable the user
to migrate to totally unreal universes.


Chuckie?  Are we still on target for this one?

Adam


Re: Filemode 7-9?

2005-10-24 Thread Adam Thornton

On Oct 24, 2005, at 11:49 AM, Dennis Wicks wrote:

The problem surfaced when it was first installed, on the hush-hush,
at a customer site. The test began, and as soon as the first
initiator was started OS/VU attemted to allocate an infinite number
of buffers of infinite size so it could quickly cache all available
data.


At least then it'd be easy to calculate the Ackerman function A(5,5).

Adam