Re: Getting ftps to work
On the Linux side, using openssl to generate a x509 server certificate in /etc/ssl/private/. On the VM side, I get the certificate section, copy to bfs, and import via the gskkyman utility using an upper-case label for SSLSERV. -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Egnot, Ronald T. (FBI) Sent: Thursday, June 17, 2010 4:59 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Getting ftps to work How are the PKI certificates configured on the z/VM system? Using certificate authority or self-signed certificates? Did you import the public keys for z/VM using the gskkyman utility of the GSKADMIN machine? Ronald Egnot Operating System Support Unit Federal Bureau of Investigation -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Mrohs, Ray Sent: Thursday, June 17, 2010 9:27 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Getting ftps to work Hi, I am trying to get the ftps client to work in z/VM 5.4 going to a SLES11 server. So far, pure-ftpd secures the control channel only. Data channel security isn't supported in the SLES11 distribution version, and due to our site's aggressive scanning policies, I'm not eager to support a separately maintained product. The vsftpd server, which does control and data channel encryption, won't connect to the VM ftps client at all. SSLSERV displays: DTCSSL022E Handshake failed: rc: 410 reason: SSL message format is incorrect Yet I can connect to the vsftpd server via desktop Filezilla using TLS. VM can connect just fine to either server in the clear. Has anyone worked with this before, and is there a config setting that I might have missed? I'd like to get vsftpd to work, as opposed to installing a separate ftp. Ray Mrohs U.S. Department of Justice 202-307-6896
AUTO: Nik Johnston/UK/IBM is away from the office (returning 21/06/2010)
I am out of the office until 21/06/2010. I am currently out of the office. If it is urgent then please contact Andy Rowarth for all ITS DiP questions/activities; Rachel Hill for all ITS Server Managed Services ; Dan Murphy of the ITS SDCoE for related matters. Note: This is an automated response to your message Re: Getting ftps to work sent on 18/6/10 14:50:08. This is the only notification you will receive while this person is away.
Re: Getting ftps to work
On Friday, 06/18/2010 at 09:50 EDT, Mrohs, Ray ray.mr...@usdoj.gov wrote: On the Linux side, using openssl to generate a x509 server certificate in /etc/ssl/private/. On the VM side, I get the certificate section, copy to bfs, and import via the gskkyman utility using an upper-case label for SSLSERV. If the self-signed certificate is not marked as being valid for key signing, then the certificate must be marked as trusted in the VM database. Alan Altmark z/VM Development IBM Endicott
Re: Getting ftps to work
When I Show certificate information it displays Trusted: Yes. The client has been working in TLS mode, at least for the control channel in pure-ftpd 1.0.21. But not at all in vsftpd 2.0.7. They are both on the SuSE distribution. I'm wondering if there is a list of ftp daemons that the VM client has been tested with, since I may have to make a recommendation to our AIX group for a server that can talk ftps to a VM client. Ray Mrohs -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Alan Altmark Sent: Friday, June 18, 2010 12:13 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Getting ftps to work On Friday, 06/18/2010 at 09:50 EDT, Mrohs, Ray ray.mr...@usdoj.gov wrote: On the Linux side, using openssl to generate a x509 server certificate in /etc/ssl/private/. On the VM side, I get the certificate section, copy to bfs, and import via the gskkyman utility using an upper-case label for SSLSERV. If the self-signed certificate is not marked as being valid for key signing, then the certificate must be marked as trusted in the VM database. Alan Altmark z/VM Development IBM Endicott
what is a 'full pack' minidisk?
Are there different terms for a minidisk that is defined from 1-END as opposed to 0-END ?I keep having to clarify which I mean every time I use the phrase 'full pack minidisk'. Is there a more succinct way to refer to them separately so I don't have to parenthetically explain what I mean? (1-END) Thanks from a befuddled old man .. Scott Rohling
Re: what is a 'full pack' minidisk?
I usually use the following terms, but they are by no means standardized. 0-END is full pack. 1-END is Entire usable disk From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Scott Rohling Sent: Friday, June 18, 2010 5:06 PM To: IBMVM@LISTSERV.UARK.EDU Subject: what is a 'full pack' minidisk? Are there different terms for a minidisk that is defined from 1-END as opposed to 0-END ?I keep having to clarify which I mean every time I use the phrase 'full pack minidisk'. Is there a more succinct way to refer to them separately so I don't have to parenthetically explain what I mean? (1-END) Thanks from a befuddled old man .. Scott Rohling
Re: what is a 'full pack' minidisk?
1-end is a minidisk. 0-end is a full pack minidisk. Jim Hughes 603-271-5586 It is fun to do the impossible. From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Scott Rohling Sent: Friday, June 18, 2010 5:06 PM To: IBMVM@LISTSERV.UARK.EDU Subject: what is a 'full pack' minidisk? Are there different terms for a minidisk that is defined from 1-END as opposed to 0-END ?I keep having to clarify which I mean every time I use the phrase 'full pack minidisk'. Is there a more succinct way to refer to them separately so I don't have to parenthetically explain what I mean? (1-END) Thanks from a befuddled old man .. Scott Rohling
Re: what is a 'full pack' minidisk?
On Friday, 06/18/2010 at 05:07 EDT, Scott Rohling scott.rohl...@gmail.com wrote: Are there different terms for a minidisk that is defined from 1-END as opposed to 0-END ?I keep having to clarify which I mean every time I use the phrase 'full pack minidisk'. A fullpack minidisk is define as either 0-END or with DEVNO. Is there a more succinct way to refer to them separately so I don't have to parenthetically explain what I mean? (1-END) There is no official term, but I don't see what's wrong with a 1 to END minidisk. It requires no more explication than fullpack. If there isn't a VMer on the other end of the conversation, you're going to explain it no matter what you say! :-) Alan Altmark z/VM Development IBM Endicott
Re: what is a 'full pack' minidisk?
Ok -- darn it. a 1 to END minidisk just doesn't have the same ring to it as 'full pack'. And it's another syllable to mumble.. ;-) For Linux guests - my typical recommendation is to use '1 to END minidisks' rather than get into dividing things any smaller - unless there is a really compelling reason. And I typically refer to this as a 'full pack' provisioning implementation -- so I think I need to stop doing that. Thanks all -- wanted to make sure I wasn't in the dark on how to refer to these beasties. Scott Rohling On Fri, Jun 18, 2010 at 3:16 PM, Alan Altmark alan_altm...@us.ibm.comwrote: On Friday, 06/18/2010 at 05:07 EDT, Scott Rohling scott.rohl...@gmail.com wrote: Are there different terms for a minidisk that is defined from 1-END as opposed to 0-END ?I keep having to clarify which I mean every time I use the phrase 'full pack minidisk'. A fullpack minidisk is define as either 0-END or with DEVNO. Is there a more succinct way to refer to them separately so I don't have to parenthetically explain what I mean? (1-END) There is no official term, but I don't see what's wrong with a 1 to END minidisk. It requires no more explication than fullpack. If there isn't a VMer on the other end of the conversation, you're going to explain it no matter what you say! :-) Alan Altmark z/VM Development IBM Endicott
Re: Getting ftps to work
On Friday, 06/18/2010 at 03:16 EDT, Mrohs, Ray ray.mr...@usdoj.gov wrote: When I Show certificate information it displays Trusted: Yes. The client has been working in TLS mode, at least for the control channel in pure-ftpd 1.0.21. But not at all in vsftpd 2.0.7. They are both on the SuSE distribution. I'm wondering if there is a list of ftp daemons that the VM client has been tested with, since I may have to make a recommendation to our AIX group for a server that can talk ftps to a VM client. I re-read your original post and you are getting error 410 SSL message format incorrect. That's a protocol error, not an issue with the certificate, per se. Look at the VMSSL GSKTRACE command, as well as Chapter 16 of the LDAP Admin book. If the answer isn't evident in the trace, then get a TCP trace (preferably in pcap format, readable by Wireshark, from the AIX side) and open a PMR. Alan Altmark z/VM Development IBM Endicott
Re: what is a 'full pack' minidisk?
There are some people who use full-pack to refer to either, which is not really correct or good. (I have been trying for 12+ years to convince the people here that what they are running is not VPARS. but TPF. It is difficult to change a culture.) If there is some ingrained term at your site, you may be better off using it. Since there is no official term for the mdisk defined from 1-end in the lexicon, you are pretty much free to call it what you want. Just don't make it George. Regards, Richard Schuh From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Scott Rohling Sent: Friday, June 18, 2010 2:06 PM To: IBMVM@LISTSERV.UARK.EDU Subject: what is a 'full pack' minidisk? Are there different terms for a minidisk that is defined from 1-END as opposed to 0-END ?I keep having to clarify which I mean every time I use the phrase 'full pack minidisk'. Is there a more succinct way to refer to them separately so I don't have to parenthetically explain what I mean? (1-END) Thanks from a befuddled old man .. Scott Rohling
Re: what is a 'full pack' minidisk?
Your original question included the phrase: every time I use the phrase 'full pack minidisk'. Now you're whining that: 1 to END minidisk just doesn't have the same ring to it as 'full pack'. And it's another syllable to mumble.. ;-) Granted, it does take one whole extra syllable, but : 1 to end minidisk vs full pack minidisk saves a whole BYTE! Maybe it depends on your elocution skills vs your typing speed and quality (both frequent challenges for me). But syllable itself uses a the same number of syllables as bytes as 1 to end! ;-) Oh look... it's: FRIDAY!! BYTE me! ;-) Mike Walter Hewitt Associates The opinions expressed herein are mine alone, not my employer's. Scott Rohling scott.rohl...@gmail.com Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 06/18/2010 04:26 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: what is a 'full pack' minidisk? Ok -- darn it. a 1 to END minidisk just doesn't have the same ring to it as 'full pack'. And it's another syllable to mumble.. ;-) For Linux guests - my typical recommendation is to use '1 to END minidisks' rather than get into dividing things any smaller - unless there is a really compelling reason. And I typically refer to this as a 'full pack' provisioning implementation -- so I think I need to stop doing that. Thanks all -- wanted to make sure I wasn't in the dark on how to refer to these beasties. Scott Rohling On Fri, Jun 18, 2010 at 3:16 PM, Alan Altmark alan_altm...@us.ibm.com wrote: On Friday, 06/18/2010 at 05:07 EDT, Scott Rohling scott.rohl...@gmail.com wrote: Are there different terms for a minidisk that is defined from 1-END as opposed to 0-END ?I keep having to clarify which I mean every time I use the phrase 'full pack minidisk'. A fullpack minidisk is define as either 0-END or with DEVNO. Is there a more succinct way to refer to them separately so I don't have to parenthetically explain what I mean? (1-END) There is no official term, but I don't see what's wrong with a 1 to END minidisk. It requires no more explication than fullpack. If there isn't a VMer on the other end of the conversation, you're going to explain it no matter what you say! :-) Alan Altmark z/VM Development IBM Endicott The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited. All messages sent to and from this e-mail address may be monitored as permitted by applicable law and regulations to ensure compliance with our internal policies and to protect our business. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, lost or destroyed, or contain viruses. You are deemed to have accepted these risks if you communicate with us by e-mail.
Re: what is a 'full pack' minidisk?
right - or late for dinner ;-) On Fri, Jun 18, 2010 at 4:04 PM, Schuh, Richard rsc...@visa.com wrote: There are some people who use full-pack to refer to either, which is not really correct or good. (I have been trying for 12+ years to convince the people here that what they are running is not VPARS. but TPF. It is difficult to change a culture.) If there is some ingrained term at your site, you may be better off using it. Since there is no official term for the mdisk defined from 1-end in the lexicon, you are pretty much free to call it what you want. Just don't make it George. Regards, Richard Schuh -- *From:* The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] *On Behalf Of *Scott Rohling *Sent:* Friday, June 18, 2010 2:06 PM *To:* IBMVM@LISTSERV.UARK.EDU *Subject:* what is a 'full pack' minidisk? Are there different terms for a minidisk that is defined from 1-END as opposed to 0-END ?I keep having to clarify which I mean every time I use the phrase 'full pack minidisk'. Is there a more succinct way to refer to them separately so I don't have to parenthetically explain what I mean? (1-END) Thanks from a befuddled old man .. Scott Rohling
Re: what is a 'full pack' minidisk?
Sense of humors are fussy things, aren't they? ;-)This would be better with a beer in hand and some peanuts in the shell.. I officially dub it: 12end minidisk and save a few more bytes. Those non-mainframe muggles will pronounce it 'twelve end minidisk' and we can all smirk. Have a good weekend, Richard, and all! (I never whine, I only grumble and mumble - like a true curmudgeon) Scott Rohling On Fri, Jun 18, 2010 at 4:19 PM, Mike Walter mike.wal...@hewitt.com wrote: Your original question included the phrase: every time I use the phrase 'full pack minidisk'. Now you're whining that: 1 to END minidisk just doesn't have the same ring to it as 'full pack'. And it's another syllable to mumble.. ;-) Granted, it does take one *whole extra syllable*, but : 1 to end minidisk vs full pack minidisk *saves a whole BYTE!* Maybe it depends on your elocution skills vs your typing speed and quality (both frequent challenges for me). But syllable itself uses a the same number of syllables as bytes as 1 to end! ;-) Oh look... it's: FRIDAY!! BYTE me! ;-) Mike Walter Hewitt Associates The opinions expressed herein are mine alone, not my employer's. *Scott Rohling scott.rohl...@gmail.com* Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU 06/18/2010 04:26 PM Please respond to The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU To IBMVM@LISTSERV.UARK.EDU cc Subject Re: what is a 'full pack' minidisk? Ok -- darn it. a 1 to END minidisk just doesn't have the same ring to it as 'full pack'. And it's another syllable to mumble.. ;-) For Linux guests - my typical recommendation is to use '1 to END minidisks' rather than get into dividing things any smaller - unless there is a really compelling reason. And I typically refer to this as a 'full pack' provisioning implementation -- so I think I need to stop doing that. Thanks all -- wanted to make sure I wasn't in the dark on how to refer to these beasties. Scott Rohling On Fri, Jun 18, 2010 at 3:16 PM, Alan Altmark *alan_altm...@us.ibm.com*alan_altm...@us.ibm.com wrote: On Friday, 06/18/2010 at 05:07 EDT, Scott Rohling *scott.rohl...@gmail.com* scott.rohl...@gmail.com wrote: Are there different terms for a minidisk that is defined from 1-END as opposed to 0-END ?I keep having to clarify which I mean every time I use the phrase 'full pack minidisk'. A fullpack minidisk is define as either 0-END or with DEVNO. Is there a more succinct way to refer to them separately so I don't have to parenthetically explain what I mean? (1-END) There is no official term, but I don't see what's wrong with a 1 to END minidisk. It requires no more explication than fullpack. If there isn't a VMer on the other end of the conversation, you're going to explain it no matter what you say! :-) Alan Altmark z/VM Development IBM Endicott -- The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited. All messages sent to and from this e-mail address may be monitored as permitted by applicable law and regulations to ensure compliance with our internal policies and to protect our business. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, lost or destroyed, or contain viruses. You are deemed to have accepted these risks if you communicate with us by e-mail.
Re: what is a 'full pack' minidisk?
On Fri, Jun 18, 2010 at 11:26 PM, Scott Rohling scott.rohl...@gmail.com wrote: Ok -- darn it. a 1 to END minidisk just doesn't have the same ring to it as 'full pack'. And it's another syllable to mumble.. ;-) Care for my pseudo full-pack terminology maybe? (sounds more official than almost full-pack)
Re: what is a 'full pack' minidisk?
I like that - it does imply 'almost'.. but now I'm going for '12end'. We'll see if it lasts through the weekend ;-) Tot ziens! Scott Rohling On Fri, Jun 18, 2010 at 4:33 PM, Rob van der Heij rvdh...@gmail.com wrote: On Fri, Jun 18, 2010 at 11:26 PM, Scott Rohling scott.rohl...@gmail.com wrote: Ok -- darn it. a 1 to END minidisk just doesn't have the same ring to it as 'full pack'. And it's another syllable to mumble.. ;-) Care for my pseudo full-pack terminology maybe? (sounds more official than almost full-pack)
Re: what is a 'full pack' minidisk?
How about: virtual full-pack Les Rob van der Heij wrote: On Fri, Jun 18, 2010 at 11:26 PM, Scott Rohling scott.rohl...@gmail.com wrote: Ok -- darn it. a 1 to END minidisk just doesn't have the same ring to it as 'full pack'. And it's another syllable to mumble.. ;-) Care for my pseudo full-pack terminology maybe? (sounds more official than almost full-pack)
Re: what is a 'full pack' minidisk?
Others great big big honking near full pack not full pack well-nigh full pack shaved full pack Regards, Richard Schuh -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Les Koehler Sent: Friday, June 18, 2010 4:03 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: what is a 'full pack' minidisk? How about: virtual full-pack Les Rob van der Heij wrote: On Fri, Jun 18, 2010 at 11:26 PM, Scott Rohling scott.rohl...@gmail.com wrote: Ok -- darn it. a 1 to END minidisk just doesn't have the same ring to it as 'full pack'. And it's another syllable to mumble.. ;-) Care for my pseudo full-pack terminology maybe? (sounds more official than almost full-pack)
Re: what is a 'full pack' minidisk?
one off full pack ? Scott Rohling On Fri, Jun 18, 2010 at 5:17 PM, Schuh, Richard rsc...@visa.com wrote: Others great big big honking near full pack not full pack well-nigh full pack shaved full pack Regards, Richard Schuh -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Les Koehler Sent: Friday, June 18, 2010 4:03 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: what is a 'full pack' minidisk? How about: virtual full-pack Les Rob van der Heij wrote: On Fri, Jun 18, 2010 at 11:26 PM, Scott Rohling scott.rohl...@gmail.com wrote: Ok -- darn it. a 1 to END minidisk just doesn't have the same ring to it as 'full pack'. And it's another syllable to mumble.. ;-) Care for my pseudo full-pack terminology maybe? (sounds more official than almost full-pack)
Re: what is a 'full pack' minidisk?
Most-pack. On Fri, Jun 18, 2010 at 7:20 PM, Scott Rohling scott.rohl...@gmail.comwrote: one off full pack ? Scott Rohling On Fri, Jun 18, 2010 at 5:17 PM, Schuh, Richard rsc...@visa.com wrote: Others great big big honking near full pack not full pack well-nigh full pack shaved full pack Regards, Richard Schuh -Original Message- From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Les Koehler Sent: Friday, June 18, 2010 4:03 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: what is a 'full pack' minidisk? How about: virtual full-pack Les Rob van der Heij wrote: On Fri, Jun 18, 2010 at 11:26 PM, Scott Rohling scott.rohl...@gmail.com wrote: Ok -- darn it. a 1 to END minidisk just doesn't have the same ring to it as 'full pack'. And it's another syllable to mumble.. ;-) Care for my pseudo full-pack terminology maybe? (sounds more official than almost full-pack) -- zMan -- I've got a mainframe and I'm not afraid to use it
