Re: Hipersockets and DB/2
I'm not very exert, but error seems that z/OS tries to resolve the host name of 192.168.1.68 machine but faild. What do you mean for refuses remote connections? Can you ping, if echo replay is enabled, z/OS machine from zlinux using ip address? Thursday 14 April 2005 06:14, You wrote: After, I configured hipersockets for Linux; my DB/2 (under z/OS v1r4) systems now fails refuses remote connections. Here is the log from DB/2 on the mainframe (running in an LPAR no VM). Everything else works fine. I know that this is not a Linux question exactly, but I want hipersockets and so it becomes my issue to resolve. Does anyone have an idea where I should look or where a more appropriate forum would be to ask this question? 20.51.26 STC05183 DSNL512I @ DSNLILNR TCP/IP 766 766 GETHOSTBYADDR(192.168.1.68) FAILED WITH 766RETURN CODE=1 AND REASON CODE= 20.54.40 STC05183 DSNL512I @ DSNLILNR TCP/IP 767 767 GETHOSTBYADDR(192.168.1.68) FAILED WITH 767RETURN CODE=1 AND REASON CODE= 20.57.54 STC05183 DSNL512I @ DSNLILNR TCP/IP 768 Thanks, Doug -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
VM VSE linux/390 Employment Web Page
Greetings; (Posted to VMESA-L and VSE-L and LINUX-390) - - Now in its seventh year! - - Includes VSE and linux/390! I have set up a public service web page at http://www.eskimo.com/~wix/vm/ for posting positions available and wanted for VM, VSE and linux/390. Please visit the web page for more information and feel free to send me any info you would like to have posted. Please make VM or VSE or linux/390 the first word in the subject. Questions and comments welcome! (Text or html OK. No java, gifs, .DOC, etc. NO RESUMES or CVs!) === Please check the web pages for === === examples before sending your ad! === Good luck, Dennis VM VSE linux/390 Positions Available last updated Apr 7. VM VSE linux/390 Positions Wanted last updated Jan 29. 163983 04/14/05 00:05:03 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Hipersockets and DB/2
When DB/2 starts it (via smoke and mirrors) communicates with TCP/IP and issues a gethostid() request. In the tcpip(profile) configuration I did not have a primaryinterface parameter set and therefore the system defaulted to the first interface found in the Home stanza which was my hipersocket definition. My fix was to assign primaryinterface lcs0 sans quotes which points to my OSA and the external world and to change the order of the hosts to have the primary adapter first. Everything is fine now. -Original Message- From: Gianfranco Ciotti [mailto:[EMAIL PROTECTED] Sent: Thursday, April 14, 2005 12:05 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Hipersockets and DB/2 I'm not very exert, but error seems that z/OS tries to resolve the host name of 192.168.1.68 machine but faild. What do you mean for refuses remote connections? Can you ping, if echo replay is enabled, z/OS machine from zlinux using ip address? Thursday 14 April 2005 06:14, You wrote: After, I configured hipersockets for Linux; my DB/2 (under z/OS v1r4) systems now fails refuses remote connections. Here is the log from DB/2 on the mainframe (running in an LPAR no VM). Everything else works fine. I know that this is not a Linux question exactly, but I want hipersockets and so it becomes my issue to resolve. Does anyone have an idea where I should look or where a more appropriate forum would be to ask this question? 20.51.26 STC05183 DSNL512I @ DSNLILNR TCP/IP 766 766 GETHOSTBYADDR(192.168.1.68) FAILED WITH 766RETURN CODE=1 AND REASON CODE= 20.54.40 STC05183 DSNL512I @ DSNLILNR TCP/IP 767 767 GETHOSTBYADDR(192.168.1.68) FAILED WITH 767RETURN CODE=1 AND REASON CODE= 20.57.54 STC05183 DSNL512I @ DSNLILNR TCP/IP 768 Thanks, Doug -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: ooRexx
Nope -Original Message- Interesting. When I did the make install-strip none of the man files got gzipped. Did you tweak the spec file in any other way? -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Problems loading IBMtape into kernel
Mark, thanks for the reply I tried as you suggested and ran depmod. Here's what I got then. primvr2p:~ # depmod -a depmod: *** Unresolved symbols in /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o I don't know what this means. Do I need the kernel sources installed also? Thanks Josh -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Post, Mark K Posted At: Wednesday, April 13, 2005 3:22 PM Posted To: Marist EDU Conversation: Problems loading IBMtape into kernel Subject: Re: Problems loading IBMtape into kernel One possibility is that you might need to run depmod -a manually. It's possible the module requires another module to be loaded first. If so, depmod -a to rebuild the dependency files, followed by a modprobe command (_not_ insmod) might do the trick. If not, I would say that the module wasn't compiled against the version of the kernel you're running, even though it is labeled as such. Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Marist EDU Sent: Wednesday, April 13, 2005 8:32 AM To: LINUX-390@VM.MARIST.EDU Subject: Problems loading IBMtape into kernel Running SLES8 under z/VM. We're trying to access a tape device using the IBM Drivers, when I install the RPM I get the following errors: primvr2p:~ # uname -a Linux primvr2p 2.4.21-273-default #1 SMP Mon Jan 17 13:17:09 UTC 2005 s390 unknown primvr2p:~ # rpm -ivh IBMtape-1.5.9-2.4.21-273.s390.rpm Installing IBMtape IBMtape ## /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_unregister_module /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_block_when_processing_errors /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_release_request /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_do_req /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_allocate_request /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_register_module /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_ioctl /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_sleep /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: Hint: You are trying to load a module without a GPL compatible license and it has unresolved symbols. Contact the module supplier for assistance, only they can help you. /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: insmod /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o failed /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: insmod IBMtape failed IBMtape loaded Does anyone have any ideas on what I should do next? TIA Josh Konkol, CCSE CNE MCSE Technical Research Specialist .~.GuideOne Insurance /V\ /( )\ ^^-^^ [EMAIL PROTECTED] -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
New England Users of VM (NEUVM) Spring Meeting - April 27, 2004
Cross-posted on NEUVM-L, VMESA-L and LINUX-390 - feel free to forward as appropriate. Greetings! NEUVM will be holding it's Spring Meeting on April 27, 2004 at Lombardo's in Randolph, Massachusetts. For meeting details and online registration click here: http://www.neuvm.org/meetings.php Once again, registration is FREE and includes a breakfast buffeet and fabulous Lombardo's luncheon, featuring your choice of Roast Prime Rib of Beef or New England Roasted Turkey Dinner! Advance online registration is required, and we need to determine a head-count for meals so please register ASAP. We're a bit late getting this announcement out, so if you plan on attending please register immediately. :) Presentations include: z/VM and zSeries Linux Security Topics - Alan Altmark, IBM Alan Altmark ill provide a full platform update with a special focus on security topics within zVM and Linux. Etrust Access Control- Lou Oliveri, Computer Associates Lou will present the product internals for Etrust Access Control including topics such as Role based access control, policy management, super user containment, delegated administration and accountability, full program pathing, stack overflow protection (STOP) and other details of Etrust Access Control. Secure Shell for zLinux - George Adams, SSH Communications Secure Shell for zLinux and application security. George will speak to the SSH Tectia solution which specifically addresses end-to-end security issues - system administration, application connectivity, and file transfer. Firewall Technology on zSeries Linux - Mark Boltz, Stonesoft Inc. Mark will present details on the StoneGate Firewall/VPN Engine v2.2.9 for IBM eServer zSeries Linux. Looking forward to seeing you all at Lombardo's for NEUVM's Spring Meeting! Michael Coffin New England Users of VM (NEUVM) 289 Park Street - PMB 123 Stoughton, Massachusetts 02072 Voice: (781) 344-9837FAX: (781) 344-7683 [EMAIL PROTECTED] www.NEUVM.org -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Hipersockets and DB/2
How are you accessing DB2 from Linux? I've had to use either DB2 connect running on linux to talk to DB2, or Neon SHadow Direct. [EMAIL PROTECTED] Sent by: Linux on 390 Port To [EMAIL PROTECTED] LINUX-390@VM.MARIST.EDU IST.EDU cc Subject 04/13/2005 11:14 Hipersockets and DB/2 PM Please respond to Linux on 390 Port [EMAIL PROTECTED] IST.EDU After, I configured hipersockets for Linux; my DB/2 (under z/OS v1r4) systems now fails refuses remote connections. Here is the log from DB/2 on the mainframe (running in an LPAR no VM). Everything else works fine. I know that this is not a Linux question exactly, but I want hipersockets and so it becomes my issue to resolve. Does anyone have an idea where I should look or where a more appropriate forum would be to ask this question? 20.51.26 STC05183 DSNL512I @ DSNLILNR TCP/IP 766 766 GETHOSTBYADDR(192.168.1.68) FAILED WITH 766RETURN CODE=1 AND REASON CODE= 20.54.40 STC05183 DSNL512I @ DSNLILNR TCP/IP 767 767 GETHOSTBYADDR(192.168.1.68) FAILED WITH 767RETURN CODE=1 AND REASON CODE= 20.57.54 STC05183 DSNL512I @ DSNLILNR TCP/IP 768 Thanks, Doug -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
I want to change Logo Config of z/VM V5.1
Hi, all (B (BPlease teach me. (BI use z/VM V5.1. (BI want to change Logo Config Screen of z/VM V5. (BI want to 3270 screen and TCP/IP connection screen. (B (BPlease teach me how to change the screen. (B (BThank you. (B- (BK.M. (B (B__ (BDo You Yahoo!? (BUpgrade Your Life (Bhttp://bb.yahoo.co.jp/ (B (B-- (BFor LINUX-390 subscribe / signoff / archive access instructions, (Bsend email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit (Bhttp://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Problems loading IBMtape into kernel
No, you don't need the kernel source. Did you try the modprobe command anyway? Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Marist EDU Sent: Thursday, April 14, 2005 6:34 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Problems loading IBMtape into kernel Mark, thanks for the reply I tried as you suggested and ran depmod. Here's what I got then. primvr2p:~ # depmod -a depmod: *** Unresolved symbols in /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o I don't know what this means. Do I need the kernel sources installed also? Thanks Josh -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
OpenMosix update
There's a new OpenMosix out, that moves a great deal of the patch from kernel to userspace. http://freshmeat.net/projects/openmosix/? branch_id=21918release_id=193392 Most notable is that this should make a PPC port much easier. It's been my experience that if you can build it on both PPC and Intel, then a zSeries or S390 port is usually pretty straightforward because the word size and endianness issues have been worked out and those parts where it makes a difference are usually pretty cleanly factored out. Adam -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Problems loading IBMtape into kernel
Here are the results of modprobe primvr2p:~ # modprobe IBMtape /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_unregister_module /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_block_when_processing_errors /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_release_request /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_do_req /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_allocate_request /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_register_module /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_ioctl /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_sleep /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: Hint: You are trying to load a module without a GPL compatible license and it has unresolved symbols. Contact the module supplier for assistance, only they can help you. /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: insmod /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o failed /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: insmod IBMtape failed Josh -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Post, Mark K Posted At: Thursday, April 14, 2005 10:03 AM Posted To: Marist EDU Conversation: Problems loading IBMtape into kernel Subject: Re: Problems loading IBMtape into kernel No, you don't need the kernel source. Did you try the modprobe command anyway? Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Marist EDU Sent: Thursday, April 14, 2005 6:34 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Problems loading IBMtape into kernel Mark, thanks for the reply I tried as you suggested and ran depmod. Here's what I got then. primvr2p:~ # depmod -a depmod: *** Unresolved symbols in /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o I don't know what this means. Do I need the kernel sources installed also? Thanks Josh -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
I want to change Logo Config of z/VM V5.1
Hi, all (B (BPlease teach me. (BI use z/VM V5.1. (BI want to change Logo Config Screen of z/VM V5. (BI want to 3270 screen and TCP/IP connection screen. (B (BPlease teach me how to change the screen. (B (BThank you. (B- (BK.M. (B (B (B__ (BDo You Yahoo!? (BUpgrade Your Life (Bhttp://bb.yahoo.co.jp/ (B (B-- (BFor LINUX-390 subscribe / signoff / archive access instructions, (Bsend email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit (Bhttp://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Maintaining SLES9 Colonies?
Peter, We've been working with SuSe linux for about four years now. We've tried every management system we can think of. As a result of these experiences, I can only say this: Disk space is cheap, labor hours are not. I'm sending you something offlist that may help. A statesman is a dead politician. Lord knows we need more statesmen! --Berkeley Breathed Gordon Wolfe, Ph.D. Boeing Shared Services Group Enterprise Servers VM Technical Services 425-865-5940 -- From: Peter E. Abresch Jr. - at Pepco Reply To: Linux on 390 Port Sent: Wednesday, April 13, 2005 1:11 PM To: LINUX-390@VM.MARIST.EDU Subject: Maintaining SLES9 Colonies? I am revisiting this again. I implemented a basevol/guestvol system similar to what is described at http://linuxvm.org/present/misc/basevol.html . This has worked for our SLES 8. We now have SLES9 guest up and running and I am wondering if we should continue under this methodology. Some say yes, some say no. Out intent is to reduce man hours to apply individual maintenance to each Linux Guest or product. Since SLES9 is different, the basevol/guestvol R/O scripts do not quite fit. I do not know if this methodology even applies to SLES 9. There is also a local YOU server I believe with SLES 9 that Linux guests can be configured to use for updates. But this means that each Linux guest must have r/w Linux root file system. Is there a recommended or official recommendation for maintaining z/VM Linux colonies? I appreciate any recommendations, philosophies, and/or experiences. As always, thanks. Peter This Email message and any attachment may contain information that is proprietary, legally privileged, confidential and/or subject to copyright belonging to Pepco Holdings, Inc. or its affiliates (PHI). This Email is intended solely for the use of the person(s) to which it is addressed. If you are not an intended recipient, or the employee or agent responsible for delivery of this Email to the intended recipient(s), you are hereby notified that any dissemination, distribution or copying of this Email is strictly prohibited. If you have received this message in error, please immediately notify the sender and permanently delete this Email and any copies. PHI policies expressly prohibit employees from making defamatory or offensive statements and infringing any copyright or any other legal right by Email communication. PHI will not accept any liability in respect of such communications. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: I want to change Logo Config of z/VM V5.1
Hi, K. Luckily it's not too difficult. These are the steps you should follow: First you have to edit file SYSTEM CONFIG. This file is in MAINT CF1. To achieve this you have to perform: - Logon to MAINT - Vmfsetup zvm cp - q cpdisk You will see something like: Label Userid Vdev Mode Stat Vol-ID Rdev Type StartLoc EndLoc MNTCF1 MAINT0CF1 A R/O 310RES 0441 CKD 326360 MNTCF2 MAINT0CF2 B R/O 310RES 0441 CKD 361395 Ready; - cprelease a CPRELEASE request for disk A scheduled. HCPZAC6730I CPRELEASE request for disk A completed. Ready; - link maint cf1 cf1 mr Ready; - acc cf1 z Ready; - Edit SYSTEM CONFIG and locate the Logo_Config line SYSTEM CONFIG W1 F 80 Trunc=72 Size=426 Line=400 Col=1 Alt=0 |...+1+2+3+4+5+6+7. Logo_Config LOGOCONFIG -- This is the file that contains the logos. - Now edit your LOGO CONFIG file and modify it as you need, for example: LOGO CONFIG W1 V 80 Trunc=72 Size=63 Line=20 Col=1 Alt=0 |...+1+2+3+4+5+6+7. /*---* * Local Display Logo Definition * *---*/ CHOOSE_LOGO LOCAL GESLOC LOGO -- This is the file for the LOCAL LOGO. /** * Logical Device Logo Definition * **/ CHOOSE_LOGO LDEV GESLDEV LOGO -- These are the files you have to customize etc. etc. Once you finish: - release z (detach DASD 0CF1 DETACHED Ready; - cpaccess maint cf1 a sr CPACCESS request for mode A scheduled. Ready; HCPZAC6732I CPACCESS request for MAINT's 0CF1 in mode A completed. - q cpdisk Label Userid Vdev Mode Stat Vol-ID Rdev Type StartLoc EndLoc MNTCF1 MAINT0CF1 A R/O 310RES 0441 CKD 326360 MNTCF2 MAINT0CF2 B R/O 310RES 0441 CKD 361395 Ready; - Logoff maint and restart z/VM See z/VM System Administration Guide for more help. Saludos, José R. Barón -Mensaje original- De: Linux on 390 Port [mailto:[EMAIL PROTECTED] En nombre de mainframe_s390 Enviado el: jueves, 14 de abril de 2005 17:01 Para: LINUX-390@VM.MARIST.EDU Asunto: I want to change Logo Config of z/VM V5.1 Hi, all Please teach me. I use z/VM V5.1. I want to change Logo Config Screen of z/VM V5. I want to 3270 screen and TCP/IP connection screen. Please teach me how to change the screen. Thank you. - K.M. __ Do You Yahoo!? Upgrade Your Life http://bb.yahoo.co.jp/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Hipersocket Frame size
Does anyone have any suggestions or guidlines on selecting a frame size in the definition of hipersockets ? I did read in the zSeries Hipersockets that the default Frame size is 16KB, compared with a maximum of 9KB for a Gigabyte Ethernet. But Hipersockets can also be defined as 24, 40 or 64KB. The selection depends on the data characteristics transported over a Hipersockets, which is a trade-off between performance and storage allocation. I want the best performance so what information do I need about the data to determine what frame size to define, and how much storage will I use if I define as 64KB ? All I have right now is that a client wants to transfer large amounts of data between z/OS and Linux but I don't have any details about how large. Is this main storage taken out of the total available on the processor or does it require more storage for each lpar to accomidate the hipersocket definitions ? I appreciate any suggestions. Thanks, Mark Vandale -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: I want to change Logo Config of z/VM V5.1
Unless they went backwards in 5.1 it *is*not* necesssary to logoff maint or restart z/VM. The new logo becomes active as soon as CP re-accesses it. |+- || José Raúl Barón| || Rodríguez | || [EMAIL PROTECTED]| || -sa.es| || Sent by: Linux | || on 390 Port| || [EMAIL PROTECTED]| || ARIST.EDU | || | || | || 04/14/2005 | || 10:21 AM | || Please respond | || to jbaron | || | |+- ---| | | | To: LINUX-390@VM.MARIST.EDU | | cc: | | Subject: Re: I want to change Logo Config of z/VM V5.1 | ---| Hi, K. Luckily it's not too difficult. These are the steps you should follow: First you have to edit file SYSTEM CONFIG. This file is in MAINT CF1. To achieve this you have to perform: - Logon to MAINT - Vmfsetup zvm cp - q cpdisk You will see something like: Label Userid Vdev Mode Stat Vol-ID Rdev Type StartLoc EndLoc MNTCF1 MAINT0CF1 A R/O 310RES 0441 CKD 326360 MNTCF2 MAINT0CF2 B R/O 310RES 0441 CKD 361395 Ready; - cprelease a CPRELEASE request for disk A scheduled. HCPZAC6730I CPRELEASE request for disk A completed. Ready; - link maint cf1 cf1 mr Ready; - acc cf1 z Ready; - Edit SYSTEM CONFIG and locate the Logo_Config line SYSTEM CONFIG W1 F 80 Trunc=72 Size=426 Line=400 Col=1 Alt=0 |...+1+2+3+4+5+6+7. Logo_Config LOGOCONFIG -- This is the file that contains the logos. - Now edit your LOGO CONFIG file and modify it as you need, for example: LOGO CONFIG W1 V 80 Trunc=72 Size=63 Line=20 Col=1 Alt=0 |...+1+2+3+4+5+6+7. /*---* * Local Display Logo Definition * *---*/ CHOOSE_LOGO LOCAL GESLOC LOGO -- This is the file for the LOCAL LOGO. /** * Logical Device Logo Definition * **/ CHOOSE_LOGO LDEV GESLDEV LOGO -- These are the files you have to customize etc. etc. Once you finish: - release z (detach DASD 0CF1 DETACHED Ready; - cpaccess maint cf1 a sr CPACCESS request for mode A scheduled. Ready; HCPZAC6732I CPACCESS request for MAINT's 0CF1 in mode A completed. - q cpdisk Label Userid Vdev Mode Stat Vol-ID Rdev Type StartLoc EndLoc MNTCF1 MAINT0CF1 A R/O 310RES 0441 CKD 326360 MNTCF2 MAINT0CF2 B R/O 310RES 0441 CKD 361395 Ready; - Logoff maint and restart z/VM See z/VM System Administration Guide for more help. Saludos, José R. Barón -Mensaje original- De: Linux on 390 Port [mailto:[EMAIL PROTECTED] En nombre de mainframe_s390 Enviado el: jueves, 14 de abril de 2005 17:01 Para: LINUX-390@VM.MARIST.EDU Asunto: I want to change Logo Config of z/VM V5.1 Hi, all Please teach me. I use z/VM V5.1. I want to change Logo Config Screen of z/VM V5. I want to 3270 screen and TCP/IP connection screen. Please teach me how to change the screen. Thank you. - K.M. __ Do You Yahoo!? Upgrade Your Life http://bb.yahoo.co.jp/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
Re: Problems loading IBMtape into kernel
I read the hint a couple of times, and I think it is trying to tell you that the IBMtape.o module is not tagged as being GPL compliant. Modules that are not GPL compliant cannot call some functions in the kernel. I don't know why IBMtape.o would not be GPL compliant. -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] Behalf Of Marist EDU Sent: Thursday, April 14, 2005 8:09 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Problems loading IBMtape into kernel Here are the results of modprobe primvr2p:~ # modprobe IBMtape /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_unregister_module /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_block_when_processing_errors /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_release_request /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_do_req /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_allocate_request /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_register_module /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_ioctl /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_sleep /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: Hint: You are trying to load a module without a GPL compatible license and it has unresolved symbols. Contact the module supplier for assistance, only they can help you. /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: insmod /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o failed /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: insmod IBMtape failed Josh -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Post, Mark K Posted At: Thursday, April 14, 2005 10:03 AM Posted To: Marist EDU Conversation: Problems loading IBMtape into kernel Subject: Re: Problems loading IBMtape into kernel No, you don't need the kernel source. Did you try the modprobe command anyway? Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Marist EDU Sent: Thursday, April 14, 2005 6:34 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Problems loading IBMtape into kernel Mark, thanks for the reply I tried as you suggested and ran depmod. Here's what I got then. primvr2p:~ # depmod -a depmod: *** Unresolved symbols in /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o I don't know what this means. Do I need the kernel sources installed also? Thanks Josh -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Problems loading IBMtape into kernel
Josh, chatting with some developer, I got the following information: It looks like the Linux middle level scsi driver scsi_mod.o is not loaded. zfcp may not loaded into the kernel, either. Try the following: lsmod (check output, see if scsi_mod and zfcp are there) modprobe scsi_mod modprobe zfcp modprobe IBMtape Can you let us know whether the mid scsi stack modules are loaded? What is the result of the commands above? Kind Regards Christoph Marist EDU [EMAIL PROTECTED] ail.com To Sent by: Linux on LINUX-390@VM.MARIST.EDU 390 Port cc [EMAIL PROTECTED] IST.EDU Subject Re: Problems loading IBMtape into kernel 14.04.2005 17:09 Please respond to Linux on 390 Port Here are the results of modprobe primvr2p:~ # modprobe IBMtape /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_unregister_module /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_block_when_processing_errors /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_release_request /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_do_req /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_allocate_request /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_register_module /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_ioctl /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_sleep /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: Hint: You are trying to load a module without a GPL compatible license and it has unresolved symbols. Contact the module supplier for assistance, only they can help you. /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: insmod /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o failed /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: insmod IBMtape failed Josh -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Post, Mark K Posted At: Thursday, April 14, 2005 10:03 AM Posted To: Marist EDU Conversation: Problems loading IBMtape into kernel Subject: Re: Problems loading IBMtape into kernel No, you don't need the kernel source. Did you try the modprobe command anyway? Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Marist EDU Sent: Thursday, April 14, 2005 6:34 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Problems loading IBMtape into kernel Mark, thanks for the reply I tried as you suggested and ran depmod. Here's what I got then. primvr2p:~ # depmod -a depmod: *** Unresolved symbols in /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o I don't know what this means. Do I need the kernel sources installed also? Thanks Josh -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Problems loading IBMtape into kernel
Because it's OCO and thus can't be tagged as GPL in the module. -Original Message- I read the hint a couple of times, and I think it is trying to tell you that the IBMtape.o module is not tagged as being GPL compliant. Modules that are not GPL compliant cannot call some functions in the kernel. I don't know why IBMtape.o would not be GPL compliant. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Can I make LVM by 1 DASD?
Hi,all (B (BI want to make Logical Volume using only 1 DASD. (BThe DASD type is 3390-27type.(about 32000cyls.) (BI will make LV via YaST. (BThe 3390-27type DASD will have about 30LVs. (B (BCan I make LVs as above? (B (BThank you. (B (BK.M. (B (B__ (BDo You Yahoo!? (BUpgrade Your Life (Bhttp://bb.yahoo.co.jp/ (B (B-- (BFor LINUX-390 subscribe / signoff / archive access instructions, (Bsend email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit (Bhttp://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Can I make LVM by 1 DASD?
Yes, that way you can divide up the volume in any way that you want. mainframe_s390 wrote: Hi,all I want to make Logical Volume using only 1 DASD. The DASD type is 3390-27type.(about 32000cyls.) I will make LV via YaST. The 3390-27type DASD will have about 30LVs. Can I make LVs as above? Thank you. K.M. __ Do You Yahoo!? Upgrade Your Life http://bb.yahoo.co.jp/ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- Rich Smrcina VM Assist, Inc. Main: (262)392-2026 Cell: (414)491-6001 Ans Service: (866)569-7378 rich.smrcina at vmassist.com Catch the WAVV! http://www.wavv.org WAVV 2005 - Colorado Springs - May 20-24, 2005 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Can I make LVM by 1 DASD?
On Apr 14, 2005, at 11:08 AM, mainframe_s390 wrote: Hi,all I want to make Logical Volume using only 1 DASD. The DASD type is 3390-27type.(about 32000cyls.) I will make LV via YaST. The 3390-27type DASD will have about 30LVs. Can I make LVs as above? If you're running VM, you can certainly divide your mod-27 up into a whole lot of minidisks, and then use them as separate devices. No Linux-level LVM required. If you're not, it might be possible to create a volume group with just a single extent in it and then divide that into multiple logical volumes, but I don't see what benefit you would gain from that. Adam -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Can I make LVM by 1 DASD?
Resizing those filesystems would be easier. But being the VM bigot, I prefer the minidisk approach myself. Adam Thornton wrote: On Apr 14, 2005, at 11:08 AM, mainframe_s390 wrote: Hi,all I want to make Logical Volume using only 1 DASD. The DASD type is 3390-27type.(about 32000cyls.) I will make LV via YaST. The 3390-27type DASD will have about 30LVs. Can I make LVs as above? If you're running VM, you can certainly divide your mod-27 up into a whole lot of minidisks, and then use them as separate devices. No Linux-level LVM required. If you're not, it might be possible to create a volume group with just a single extent in it and then divide that into multiple logical volumes, but I don't see what benefit you would gain from that. Adam -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- Rich Smrcina VM Assist, Inc. Main: (262)392-2026 Cell: (414)491-6001 Ans Service: (866)569-7378 rich.smrcina at vmassist.com Catch the WAVV! http://www.wavv.org WAVV 2005 - Colorado Springs - May 20-24, 2005 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Can I make LVM by 1 DASD?
You can split up the DASD into equally sized minidisks and if you stripe the LV, then Linux will initiate multiple I/Os across howewever many physical volumes (minidisks) you have in the group. Depending on how many paths there are to the mod-27 device, there may be a performance benefit(?). Ray Mrohs Energy Information Administration U.S. Department of Energy -Original Message- From: Rich Smrcina [mailto:[EMAIL PROTECTED] Sent: Thursday, April 14, 2005 12:31 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: Can I make LVM by 1 DASD? Resizing those filesystems would be easier. But being the VM bigot, I prefer the minidisk approach myself. Adam Thornton wrote: On Apr 14, 2005, at 11:08 AM, mainframe_s390 wrote: Hi,all I want to make Logical Volume using only 1 DASD. The DASD type is 3390-27type.(about 32000cyls.) I will make LV via YaST. The 3390-27type DASD will have about 30LVs. Can I make LVs as above? If you're running VM, you can certainly divide your mod-27 up into a whole lot of minidisks, and then use them as separate devices. No Linux-level LVM required. If you're not, it might be possible to create a volume group with just a single extent in it and then divide that into multiple logical volumes, but I don't see what benefit you would gain from that. Adam -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- Rich Smrcina VM Assist, Inc. Main: (262)392-2026 Cell: (414)491-6001 Ans Service: (866)569-7378 rich.smrcina at vmassist.com Catch the WAVV! http://www.wavv.org WAVV 2005 - Colorado Springs - May 20-24, 2005 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Really silly SSH question.
Just for grins and giggles, I created an SSH private key/public key pair. I can now use PuTTY to logon to Linux without using my Linux password. Instead, I must use a Passphrase. What have I gained? I did replace my password with a passphrase, but how is that more secure? I don't see a way to say: This passphrase must be used when doing an SSH from that incoming IP address. Am I missing something? (very likely). I could use a different private/public key for each server that I use SSH with, I guess. But I've only got one server, so far. Oh well, it was a learning experience, I guess. -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its' content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Really silly SSH question.
I have never tried this, but I believe if you don't specify a passphrase your private key is not encrypted on the HD and you won't be prompted for it. Have you tried generating a pair without giving a passphrase? Rod On 4/14/05, McKown, John [EMAIL PROTECTED] wrote: Just for grins and giggles, I created an SSH private key/public key pair. I can now use PuTTY to logon to Linux without using my Linux password. Instead, I must use a Passphrase. What have I gained? I did replace my password with a passphrase, but how is that more secure? I don't see a way to say: This passphrase must be used when doing an SSH from that incoming IP address. Am I missing something? (very likely). I could use a different private/public key for each server that I use SSH with, I guess. But I've only got one server, so far. Oh well, it was a learning experience, I guess. -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its' content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Really silly SSH question.
-Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Rod Clayton Sent: Thursday, April 14, 2005 1:24 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: Really silly SSH question. I have never tried this, but I believe if you don't specify a passphrase your private key is not encrypted on the HD and you won't be prompted for it. Have you tried generating a pair without giving a passphrase? Rod No, but that is terrible security-wise. Anybody who manages to steal my private key can logon as myself with no protection. I'm far too paranoid for that! -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its' content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Really silly SSH question.
Hi, On 4/14/05, McKown, John [EMAIL PROTECTED] wrote: password. Instead, I must use a Passphrase. What have I gained? I did replace my password with a passphrase, but how is that more secure? I A passphrase is a password to access your private LOCAL key. The passph is used locally to access your local (on your PC) private key. A cracker with only the passph will get nowhere (as opposed to password authentication, where the password is all he needs). He has to have both the passph AND the key (which means he will have to crack your local PC to steal it) which is stored in your local computer. The authentication (server side) is done by using the private key (which is encrypted locally with a passphrase). For added security you can also have your key on a physical smart card (in that case you need a card reader on your PC). Then a cracker will need both your card and the passph. Tiago -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: New England Users of VM (NEUVM) Spring Meeting - April 27, 2005
Thanks to everyone that pointed out my error, the meeting is indeed April 27, 2005 (not 2004). :) Michael Coffin New England Users of VM (NEUVM) 289 Park Street - PMB 123 Stoughton, Massachusetts 02072 Voice: (781) 344-9837FAX: (781) 344-7683 [EMAIL PROTECTED] www.NEUVM.org -Original Message- From: VM/ESA and z/VM Discussions [mailto:[EMAIL PROTECTED] On Behalf Of Michael Coffin Sent: Thursday, April 14, 2005 10:16 AM To: [EMAIL PROTECTED] Subject: New England Users of VM (NEUVM) Spring Meeting - April 27, 2005 Importance: High Cross-posted on NEUVM-L, VMESA-L and LINUX-390 - feel free to forward as appropriate. Greetings! NEUVM will be holding it's Spring Meeting on April 27, 2004 at Lombardo's in Randolph, Massachusetts. For meeting details and online registration click here: http://www.neuvm.org/meetings.php Once again, registration is FREE and includes a breakfast buffeet and fabulous Lombardo's luncheon, featuring your choice of Roast Prime Rib of Beef or New England Roasted Turkey Dinner! Advance online registration is required, and we need to determine a head-count for meals so please register ASAP. We're a bit late getting this announcement out, so if you plan on attending please register immediately. :) Presentations include: z/VM and zSeries Linux Security Topics - Alan Altmark, IBM Alan Altmark ill provide a full platform update with a special focus on security topics within zVM and Linux. Etrust Access Control- Lou Oliveri, Computer Associates Lou will present the product internals for Etrust Access Control including topics such as Role based access control, policy management, super user containment, delegated administration and accountability, full program pathing, stack overflow protection (STOP) and other details of Etrust Access Control. Secure Shell for zLinux - George Adams, SSH Communications Secure Shell for zLinux and application security. George will speak to the SSH Tectia solution which specifically addresses end-to-end security issues - system administration, application connectivity, and file transfer. Firewall Technology on zSeries Linux - Mark Boltz, Stonesoft Inc. Mark will present details on the StoneGate Firewall/VPN Engine v2.2.9 for IBM eServer zSeries Linux. Looking forward to seeing you all at Lombardo's for NEUVM's Spring Meeting! Michael Coffin New England Users of VM (NEUVM) 289 Park Street - PMB 123 Stoughton, Massachusetts 02072 Voice: (781) 344-9837FAX: (781) 344-7683 [EMAIL PROTECTED] www.NEUVM.org -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Really silly SSH question.
Many systems administrators do _not_ enable logging in via SSH with passwords. Key pairs are required. If you used a good passphrase, you've gained more security. A good passphrase will be almost 100% impossible to guess or brute-force. If you wish, you can change the passphrase on your private key, and never have to sign in to any other system to do it. (Most people never do this, but it is possible.) You can create separate key pairs for various systems. It's not required, but some people like the idea. If you have a number of people that need access to a particular userid for some reason, if they have key pairs, each person can log in with their key pair, and never have to know what the password on the account is (or what each other's passphrase is). The list goes on. In general, a key pair with a really good password is much, much more secure and flexible than a password. Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of McKown, John Sent: Thursday, April 14, 2005 1:11 PM To: LINUX-390@VM.MARIST.EDU Subject: Really silly SSH question. Just for grins and giggles, I created an SSH private key/public key pair. I can now use PuTTY to logon to Linux without using my Linux password. Instead, I must use a Passphrase. What have I gained? I did replace my password with a passphrase, but how is that more secure? I don't see a way to say: This passphrase must be used when doing an SSH from that incoming IP address. Am I missing something? (very likely). I could use a different private/public key for each server that I use SSH with, I guess. But I've only got one server, so far. Oh well, it was a learning experience, I guess. -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its' content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Really silly SSH question.
I see a flaw in your logic here. If you don't want to type anything to access a remote system then your local computer needs to store all the information needed to access the remote system. Anyone that has access to your system can steal this information. If you don't want to store this information then you will need to type something every time. -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] Behalf Of McKown, John Sent: Thursday, April 14, 2005 11:28 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Really silly SSH question. -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Rod Clayton Sent: Thursday, April 14, 2005 1:24 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: Really silly SSH question. I have never tried this, but I believe if you don't specify a passphrase your private key is not encrypted on the HD and you won't be prompted for it. Have you tried generating a pair without giving a passphrase? Rod No, but that is terrible security-wise. Anybody who manages to steal my private key can logon as myself with no protection. I'm far too paranoid for that! -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its' content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Really silly SSH question.
*** Reply to note of Thu, 14 Apr 2005 13:11:13 -0500 (EST/CDT) *** by LINUX-390@VM.MARIST.EDU You would add your passphrase to PuTTY's pagent? Sal McKown, John [EMAIL PROTECTED] writes: Just for grins and giggles, I created an SSH private key/public key pair. I can now use PuTTY to logon to Linux without using my Linux password. Instead, I must use a Passphrase. What have I gained? I did replace my password with a passphrase, but how is that more secure? I don't see a way to say: This passphrase must be used when doing an SSH from that incoming IP address. Am I missing something? (very likely). I could use a different private/public key for each server that I use SSH with, I guess. But I've only got one server, so far. Oh well, it was a learning experience, I guess. -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its' content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Really silly SSH question.
On Apr 14, 2005, at 1:11 PM, McKown, John wrote: Just for grins and giggles, I created an SSH private key/public key pair. I can now use PuTTY to logon to Linux without using my Linux password. Instead, I must use a Passphrase. What have I gained? I did replace my password with a passphrase, but how is that more secure? Unix passwords are traditionally limited to 8 characters. No such restriction exists on passphrase length. Mine is somewhere in the 40 or 50 character range, I believe. Very, very difficult to brute-force. Adam -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Really silly SSH question.
-Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Fargusson.Alan Sent: Thursday, April 14, 2005 1:36 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: Really silly SSH question. I see a flaw in your logic here. If you don't want to type anything to access a remote system then your local computer needs to store all the information needed to access the remote system. Anyone that has access to your system can steal this information. If you don't want to store this information then you will need to type something every time. Hum, I guess I didn't say that very well. My comment on the use of the passphrase was more how is a passphrase more secure than a password? than I don't want to type a passphrase. That has been answered. Another person indicated that the passphrase is only used LOCALLY and not sent to the server onto which I am logging. From more reading, apparently what is sent to the server is a one time cert or some such thing. So somebody intercepting that wouldn't be able to access the server. I'm learning, albeit slowly. Right now my private key file is on a USB flash drive, which is on a chain around my neck. The file is definitely NOT on my Windows desktop at work! I'll only plug it in when I want to SSH onto the Linux system. Now to see how to setup SSH on the server to disallow passwords, as indicated in another message. -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its' content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
.deb kernel 2.6
Hi. Im using .deb for kernel 2.4 from sinenomine, and i want to know if they (or something else) have the .deb for kernel 2.6. Thanks. _ Do You Yahoo!? Informacisn de Estados Unidos y Amirica Latina, en Yahoo! Noticias. Vismtanos en http://noticias.espanol.yahoo.com -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: .deb kernel 2.6
On Apr 14, 2005, at 2:00 PM, Lizbeth Ortiz wrote: Hi. Im using .deb for kernel 2.4 from sinenomine, and i want to know if they (or something else) have the .deb for kernel 2.6. I haven't built one, nor have I tried using a 2.6 kernel with Woody. Your best bet at the moment is to install Sarge (http://ftp.debian.org/debian/dists/testing/main/installer-s390/rc3/ images/) and then upgrade the kernel with apt. I have used 2.6 kernels with Sarge, and once you get past the different device nomenclature, it's quite straightforward. Sine Nomine *will* be releasing a Sarge distribution, as soon as Sarge is released by the Debian project as the new stable (plus a little while to package it a nice VM-based installer). Adam -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Really silly SSH question.
Edit /etc/ssh/sshd_config and add this: PasswordAuthentication no Or if it's already there, change yes to no. Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of McKown, John Sent: Thursday, April 14, 2005 1:47 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: Really silly SSH question. -snip- Now to see how to setup SSH on the server to disallow passwords, as indicated in another message. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Problems loading IBMtape into kernel
Thank you sooo much that worked !! primvr2p:~ # lsmod Module Size Used byNot tainted qeth 175372 2 ipv6 329288 -1 [qeth] key41840 0 [ipv6] qdio 37256 2 [qeth] lvm-mod70408 0 (autoclean) dasd_eckd_mod 56424 4 dasd_mod 49748 5 [dasd_eckd_mod] ext3 94784 3 jbd55124 3 [ext3] primvr2p:~ # modprobe scsi_mod primvr2p:~ # modprobe zfcp primvr2p:~ # modprobe IBMtape Warning: loading /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o will taint the kernel: non-GPL license - USER LICENSE AGREEMENT FOR IBM DEVICE DRIVERS See http://www.tux.org/lkml/#export-tainted for information about tainted modules Module IBMtape loaded, with warnings primvr2p:~ # IBMtaped status IBMtaped is not running. primvr2p:~ # IBMtaped start primvr2p:~ # IBMtaped status IBMtaped is running, pid 2947. Josh -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Christoph Arenz Posted At: Thursday, April 14, 2005 10:55 AM Posted To: Marist EDU Conversation: Problems loading IBMtape into kernel Subject: Re: Problems loading IBMtape into kernel Josh, chatting with some developer, I got the following information: It looks like the Linux middle level scsi driver scsi_mod.o is not loaded. zfcp may not loaded into the kernel, either. Try the following: lsmod (check output, see if scsi_mod and zfcp are there) modprobe scsi_mod modprobe zfcp modprobe IBMtape Can you let us know whether the mid scsi stack modules are loaded? What is the result of the commands above? Kind Regards Christoph Marist EDU [EMAIL PROTECTED] ail.com To Sent by: Linux on LINUX-390@VM.MARIST.EDU 390 Port cc [EMAIL PROTECTED] IST.EDU Subject Re: Problems loading IBMtape into kernel 14.04.2005 17:09 Please respond to Linux on 390 Port Here are the results of modprobe primvr2p:~ # modprobe IBMtape /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_unregister_module /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_block_when_processing_errors /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_release_request /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_do_req /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_allocate_request /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_register_module /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_ioctl /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_sleep /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: Hint: You are trying to load a module without a GPL compatible license and it has unresolved symbols. Contact the module supplier for assistance, only they can help you. /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: insmod /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o failed /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: insmod IBMtape failed Josh -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Post, Mark K Posted At: Thursday, April 14, 2005 10:03 AM Posted To: Marist EDU Conversation: Problems loading IBMtape into kernel Subject: Re: Problems loading IBMtape into kernel No, you don't need the kernel source. Did you try the modprobe command anyway? Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Marist EDU Sent: Thursday, April 14, 2005 6:34 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Problems loading IBMtape into kernel Mark, thanks for the reply I tried as you suggested and ran depmod. Here's what I got then. primvr2p:~ # depmod -a depmod: *** Unresolved symbols in /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o I don't know what this means. Do I need the kernel sources installed also? Thanks Josh -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 --
Re: Problems loading IBMtape into kernel
No, that has nothing to do with it. Non-GPL modules can call any kernel function they way. This message was added to direct people with non-GPL modules to the people that wrote them, and not expect the kernel developers to figure out the problem. They didn't write it, they may or may not have the source code for it, so don't bother them, essentially. Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Fargusson.Alan Sent: Thursday, April 14, 2005 10:33 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Problems loading IBMtape into kernel I read the hint a couple of times, and I think it is trying to tell you that the IBMtape.o module is not tagged as being GPL compliant. Modules that are not GPL compliant cannot call some functions in the kernel. I don't know why IBMtape.o would not be GPL compliant. -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] Behalf Of Marist EDU Sent: Thursday, April 14, 2005 8:09 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Problems loading IBMtape into kernel Here are the results of modprobe primvr2p:~ # modprobe IBMtape /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_unregister_module /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_block_when_processing_errors /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_release_request /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_do_req /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_allocate_request /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_register_module /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_ioctl /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: unresolved symbol scsi_sleep /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: Hint: You are trying to load a module without a GPL compatible license and it has unresolved symbols. Contact the module supplier for assistance, only they can help you. /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: insmod /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o failed /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o: insmod IBMtape failed Josh -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Post, Mark K Posted At: Thursday, April 14, 2005 10:03 AM Posted To: Marist EDU Conversation: Problems loading IBMtape into kernel Subject: Re: Problems loading IBMtape into kernel No, you don't need the kernel source. Did you try the modprobe command anyway? Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Marist EDU Sent: Thursday, April 14, 2005 6:34 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Problems loading IBMtape into kernel Mark, thanks for the reply I tried as you suggested and ran depmod. Here's what I got then. primvr2p:~ # depmod -a depmod: *** Unresolved symbols in /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o I don't know what this means. Do I need the kernel sources installed also? Thanks Josh -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Problems loading IBMtape into kernel
Christoph, I doubt that will work. The whole idea of the depmod/modprobe commands is to avoid having to do stuff like that. Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Christoph Arenz Sent: Thursday, April 14, 2005 10:55 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Problems loading IBMtape into kernel Josh, chatting with some developer, I got the following information: It looks like the Linux middle level scsi driver scsi_mod.o is not loaded. zfcp may not loaded into the kernel, either. Try the following: lsmod (check output, see if scsi_mod and zfcp are there) modprobe scsi_mod modprobe zfcp modprobe IBMtape Can you let us know whether the mid scsi stack modules are loaded? What is the result of the commands above? Kind Regards Christoph -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Problems loading IBMtape into kernel
Josh, Try this again as depmod -ae so that it will tell you exactly what unresolved symbols there are. (I suspect they're going to match what the modprobe command reported, but it's worth a shot.) In the meantime, have you opened a support incident with your support provider? Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Marist EDU Sent: Thursday, April 14, 2005 6:34 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Problems loading IBMtape into kernel Mark, thanks for the reply I tried as you suggested and ran depmod. Here's what I got then. primvr2p:~ # depmod -a depmod: *** Unresolved symbols in /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o I don't know what this means. Do I need the kernel sources installed also? Thanks Josh -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Problems loading IBMtape into kernel
On Apr 14, 2005, at 2:25 PM, Marist EDU wrote: Thank you sooo much that worked !! primvr2p:~ # lsmod Module Size Used byNot tainted qeth 175372 2 ipv6 329288 -1 [qeth] key41840 0 [ipv6] qdio 37256 2 [qeth] lvm-mod70408 0 (autoclean) dasd_eckd_mod 56424 4 dasd_mod 49748 5 [dasd_eckd_mod] ext3 94784 3 jbd55124 3 [ext3] primvr2p:~ # modprobe scsi_mod primvr2p:~ # modprobe zfcp primvr2p:~ # modprobe IBMtape Warning: loading /lib/modules/2.4.21-273-default/kernel/drivers/scsi/IBMtape.o will taint the kernel: non-GPL license - USER LICENSE AGREEMENT FOR IBM DEVICE DRIVERS See http://www.tux.org/lkml/#export-tainted for information about tainted modules Module IBMtape loaded, with warnings OK, that's really weird. Isn't modprobe designed to figure out what the module dependencies are, and load stacks of device drivers if it needs to? Adam -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Problems loading IBMtape into kernel
Absolutely. Josh should not have had to do those additional modprobe commands. Almost sounds like the depmod command is broken on his system. Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Adam Thornton Sent: Thursday, April 14, 2005 2:37 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: Problems loading IBMtape into kernel -snip- OK, that's really weird. Isn't modprobe designed to figure out what the module dependencies are, and load stacks of device drivers if it needs to? -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
problems with kernel 2.6
I've installed, via apt, kernel-image-2.6.8-2-s390, and i've modified /boot/parmfile deleting the word noinitrd, also i've modified /etc/zipl.conf adding the line ramdisk=/initrd.img and after rebooted the vm i have: RAMDISK: cramfs filesystem found at block 0 RAMDISK: Loading 2036 blocks ]1 disk( into ram disk... done. VFS: Mounted root (cramfs filesystem) readonly. Freeing unused kernel memory: 84k freed initrd-tools: 0.1.78 pivot_root: No such file or directory /sbin/init: 431: cannot open dev/console: No such file Kernel panic: Attempted to kill init! HCPGIR450W CP entered; disabled wait PSW 000A 800306C4 What is the problem? _ Do You Yahoo!? Informacisn de Estados Unidos y Amirica Latina, en Yahoo! Noticias. Vismtanos en http://noticias.espanol.yahoo.com -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
.deb for kernel 2.6
Hi, Im using .deb for kernel 2.4 from sinenomine, and i want to know if they (or something else) have the .deb for kernel 2.6. Thanks :-) - Gobierno del Distrito Federal. Secretaria de Finanzas. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: problems with kernel 2.6
On Apr 14, 2005, at 3:53 PM, Lizbeth Ortiz wrote: I've installed, via apt, kernel-image-2.6.8-2-s390, and i've modified /boot/parmfile deleting the word noinitrd, also i've modified /etc/zipl.conf adding the line ramdisk=/initrd.img and after rebooted the vm i have: RAMDISK: cramfs filesystem found at block 0 RAMDISK: Loading 2036 blocks ]1 disk( into ram disk... done. VFS: Mounted root (cramfs filesystem) readonly. Freeing unused kernel memory: 84k freed initrd-tools: 0.1.78 pivot_root: No such file or directory /sbin/init: 431: cannot open dev/console: No such file Kernel panic: Attempted to kill init! HCPGIR450W CP entered; disabled wait PSW 000A 800306C4 What is the problem? You need to create a static /dev/console node. I think it's a character device, major 5 minor 1. Also, your DASD spec will have changed. Instead of dasd=150-155 or whatever, it'd be dasd=0.0.150-0.0.155. Don't forget to rerun zipl. Further, there are some changes to the chandev layer to get your network devices working again with the new group devices stuff. I did that with the creation of a file /etc/groupdev, and the following script (/etc/init.d/groupdev.sh): # # groupdev.sh S/390 module initialization parameters # # Must run before networking but after udev. # # Version: @(#)groupdev.sh 0.0-0 27-Apr-2004 [EMAIL PROTECTED] # [ -f /etc/default/rcS ] . /etc/default/rcS test -f /etc/groupdev ( # Loop over lines in /etc/groupdev echo -n Initializing ccwgroup devices... while read type rest do case $type in |\#*) continue ;; esac case $type in qeth) modprobe -k ${type} set -- $rest echo 0.0.${1},0.0.${2},0.0.${3} /sys/bus/ccwgroup/drivers/${type }/group echo $4 /sys/bus/ccwgroup/drivers/${type}/0.0.${1}/online ;; esac done echo done. ) /etc/groupdev : exit 0 And /etc/groupdev contains: # format is: # type rest # type is qeth or another grouped device # qeth is the only one I know about right now. # # for qeth, rest is # read-device write-device data-device online # where the devices are four-digit hex addresses, # and online is 1 or 0 for whether the device should be #on- or offline qeth0340034103421 qeth0344034503461 Hope this helps. Adam -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: problems with kernel 2.6
You didn't mention actually running mkinitrd. Did you? Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Lizbeth Ortiz Sent: Thursday, April 14, 2005 3:53 PM To: LINUX-390@VM.MARIST.EDU Subject: problems with kernel 2.6 I've installed, via apt, kernel-image-2.6.8-2-s390, and i've modified /boot/parmfile deleting the word noinitrd, also i've modified /etc/zipl.conf adding the line ramdisk=/initrd.img and after rebooted the vm i have: RAMDISK: cramfs filesystem found at block 0 RAMDISK: Loading 2036 blocks ]1 disk( into ram disk... done. VFS: Mounted root (cramfs filesystem) readonly. Freeing unused kernel memory: 84k freed initrd-tools: 0.1.78 pivot_root: No such file or directory /sbin/init: 431: cannot open dev/console: No such file Kernel panic: Attempted to kill init! HCPGIR450W CP entered; disabled wait PSW 000A 800306C4 What is the problem? _ Do You Yahoo!? Informacisn de Estados Unidos y Amirica Latina, en Yahoo! Noticias. Vismtanos en http://noticias.espanol.yahoo.com -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Why read-only filesystem?
I just cloned a new SLES9 server in VM from another, working (shut-down) SLES9 server. When I bring it up, however, the boot disk comes up read-only. lnx20019:/# df Filesystem 1K-blocks Used Available Use% Mounted on /dev/dasda13548928 2983088385560 89% / proc 3548928 2983088385560 89% /proc lnx20019:/# cat /proc/dasd/devices cat: /proc/dasd/devices: No such file or directory mount /dev/dasda1 / -o rw,remount -t ext3 mount: block device /dev/dasda1 is write-protected, mounting read-only The VM directory shows the disk as MR. There isn't anything in /etc/zipl.conf or /etc/fstab that would indicate this dasd device is read-only. So why is it coming up read-only? A statesman is a dead politician. Lord knows we need more statesmen! --Berkeley Breathed Gordon Wolfe, Ph.D. Boeing Shared Services Group Enterprise Servers VM Technical Services 425-865-5940 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: problems with kernel 2.6
From what someone else posted here recently, that's not necessary. I can't verify that myself, unfortunately. Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Adam Thornton Sent: Thursday, April 14, 2005 4:12 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: problems with kernel 2.6 -snip- Also, your DASD spec will have changed. Instead of dasd=150-155 or whatever, it'd be dasd=0.0.150-0.0.155. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Why read-only filesystem?
There will be clues of some kind in the spooled console log, I'm sure. (Hint, hint.) Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Wolfe, Gordon W Sent: Thursday, April 14, 2005 5:24 PM To: LINUX-390@VM.MARIST.EDU Subject: Why read-only filesystem? I just cloned a new SLES9 server in VM from another, working (shut-down) SLES9 server. When I bring it up, however, the boot disk comes up read-only. lnx20019:/# df Filesystem 1K-blocks Used Available Use% Mounted on /dev/dasda13548928 2983088385560 89% / proc 3548928 2983088385560 89% /proc lnx20019:/# cat /proc/dasd/devices cat: /proc/dasd/devices: No such file or directory mount /dev/dasda1 / -o rw,remount -t ext3 mount: block device /dev/dasda1 is write-protected, mounting read-only The VM directory shows the disk as MR. There isn't anything in /etc/zipl.conf or /etc/fstab that would indicate this dasd device is read-only. So why is it coming up read-only? -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Why read-only filesystem?
Never mind, all. I had it linked somewhere else. A statesman is a dead politician. Lord knows we need more statesmen! --Berkeley Breathed Gordon Wolfe, Ph.D. Boeing Shared Services Group Enterprise Servers VM Technical Services 425-865-5940 -- From: Post, Mark K Reply To: Linux on 390 Port Sent: Thursday, April 14, 2005 3:29 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: Why read-only filesystem? There will be clues of some kind in the spooled console log, I'm sure. (Hint, hint.) Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Wolfe, Gordon W Sent: Thursday, April 14, 2005 5:24 PM To: LINUX-390@VM.MARIST.EDU Subject: Why read-only filesystem? I just cloned a new SLES9 server in VM from another, working (shut-down) SLES9 server. When I bring it up, however, the boot disk comes up read-only. lnx20019:/# df Filesystem 1K-blocks Used Available Use% Mounted on /dev/dasda13548928 2983088385560 89% / proc 3548928 2983088385560 89% /proc lnx20019:/# cat /proc/dasd/devices cat: /proc/dasd/devices: No such file or directory mount /dev/dasda1 / -o rw,remount -t ext3 mount: block device /dev/dasda1 is write-protected, mounting read-only The VM directory shows the disk as MR. There isn't anything in /etc/zipl.conf or /etc/fstab that would indicate this dasd device is read-only. So why is it coming up read-only? -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Really silly SSH question.
- Original Message - From: McKown, John [EMAIL PROTECTED] To: LINUX-390@VM.MARIST.EDU Sent: Thursday, April 14, 2005 2:11 PM Subject: Really silly SSH question. Just for grins and giggles, I created an SSH private key/public key pair. I can now use PuTTY to logon to Linux without using my Linux password. Instead, I must use a Passphrase. What have I gained? The keystrokes authorizing the use of the key do not pass over the network, and they are not incorporated in the values used to authenticate other than to select wihich authenticator is transmitted to the remote system. Makes it a lot harder to intercept traffic or your authentication keys without physical access to your computer. -- db -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Really silly SSH question.
For added security you can also have your key on a physical smart card (in that case you need a card reader on your PC). Then a cracker will need both your card and the passph. This is a great way to use small-size USB memory drives, BTW. If you're clever about it, you can also store other personal configuration files on the same drive, making it easy to move your settings with you. -- db -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Really silly SSH question.
Instead, I must use a Passphrase. What have I gained? John ... I'm not a security expert, but I believe those who are would put it something like this: You have more security now because there are TWO things required for you to connect to the remote system: what you KNOW (same as before, but perhaps now longer) and what you HAVE (private key). A traditional password is what you KNOW. A passphrase is not a lot different, as you point out, except that it is much longer in practice, and that's a Good Thing. The private key is a what you HAVE. It's like a SecurID card. It's a VERY VALUABLE thing. Protect it! As others have said, with no passphrase on your private key (your local key to PuTTY or your secret key of the pair) you can automate signing on, and that's useful, but dangerous. But WITH a passphrase, someone acquiring your secret key has a much more difficult time breaking in. You want to avoid that theft, but you have some protection in case it happens. The public key matches your private key but does not expose it. The public key can be swiped from the remote host, and you have lost nothing. (Except that there may have been a compromise of that system which allowed the rogue to get that key. But that's really a different problem.) Someone taking your public key could arrange for you to get access to THEIR system(s), and that's no win for them. This is subtle: Traditional password sign-on requires that some secret must be shared between you and the target system. That's a secret which can be taken by a bad guy. Public key is a HUGE improvement, reducing the value of stealing info from the target system. So there are two things: what you KNOW and what you HAVE, and that's a big improvement. Further, the KNOWn part is removed from the system(s) you're signing onto. (That is, the passphrase is never stored on any target system, but is always local to where the secret key (private key) is held.) Does this help? -- R; -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Looking for Lost Contacts
I am looking for several people that have attended past CAVMEN meetings that I have lost contact with. If you are one of these people, please contact me by E-Mail off list, or call my voice number in the signature below. I am looking for: Ted Manos - Mutual of Omaha John Chase - United Stationers Jerry Schabes - Evergreen Consulting Thank you. Mark M. Suchecki - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - CAVMEN Coordinator Voice: (847) 518-0058 FAX:(847) 518-0083 E-Mail: [EMAIL PROTECTED] Web:http://cavmen.home.comcast.net - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: problems with kernel 2.6
Hi I've created the /dev/console and i've modified /boot/parmfile, as indicated, and now i have: RAMDISK: cramfs filesystem found at block 0 RAMDISK: Loading 2036 blocks ]1 disk( into ram disk... done. VFS: Mounted root (cramfs filesystem) readonly. Freeing unused kernel memory: 84k freed initrd-tools: 0.1.78 pivot_root: No such file or directory /sbin/init: 431: cannot open dev/console: No such file Kernel panic: Attempted to kill init! HCPGIR450W CP entered; disabled wait PSW 000A 800306C4 now what? :-( --- Adam Thornton [EMAIL PROTECTED] wrote: On Apr 14, 2005, at 3:53 PM, Lizbeth Ortiz wrote: I've installed, via apt, kernel-image-2.6.8-2-s390, and i've modified /boot/parmfile deleting the word noinitrd, also i've modified /etc/zipl.conf adding the line ramdisk=/initrd.img and after rebooted the vm i have: RAMDISK: cramfs filesystem found at block 0 RAMDISK: Loading 2036 blocks ]1 disk( into ram disk... done. VFS: Mounted root (cramfs filesystem) readonly. Freeing unused kernel memory: 84k freed initrd-tools: 0.1.78 pivot_root: No such file or directory /sbin/init: 431: cannot open dev/console: No such file Kernel panic: Attempted to kill init! HCPGIR450W CP entered; disabled wait PSW 000A 800306C4 What is the problem? You need to create a static /dev/console node. I think it's a character device, major 5 minor 1. Also, your DASD spec will have changed. Instead of dasd=150-155 or whatever, it'd be dasd=0.0.150-0.0.155. Don't forget to rerun zipl. Further, there are some changes to the chandev layer to get your network devices working again with the new group devices stuff. I did that with the creation of a file /etc/groupdev, and the following script (/etc/init.d/groupdev.sh): # # groupdev.sh S/390 module initialization parameters # # Must run before networking but after udev. # # Version: @(#)groupdev.sh 0.0-0 27-Apr-2004 [EMAIL PROTECTED] # [ -f /etc/default/rcS ] . /etc/default/rcS test -f /etc/groupdev ( # Loop over lines in /etc/groupdev echo -n Initializing ccwgroup devices... while read type rest do case $type in |\#*) continue ;; esac case $type in qeth) modprobe -k ${type} set -- $rest echo 0.0.${1},0.0.${2},0.0.${3} /sys/bus/ccwgroup/drivers/${type }/group echo $4 /sys/bus/ccwgroup/drivers/${type}/0.0.${1}/online ;; esac done echo done. ) /etc/groupdev : exit 0 And /etc/groupdev contains: # format is: # type rest # type is qeth or another grouped device # qeth is the only one I know about right now. # # for qeth, rest is # read-device write-device data-device online # where the devices are four-digit hex addresses, # and online is 1 or 0 for whether the device should be #on- or offline qeth0340034103421 qeth0344034503461 Hope this helps. Adam -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 _ Do You Yahoo!? Informacisn de Estados Unidos y Amirica Latina, en Yahoo! Noticias. Vismtanos en http://noticias.espanol.yahoo.com -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: problems with kernel 2.6
No, i just installed it via apt (apt-get install kernel-image-...) and modified zipl.conf adding ramdisk=/initrd.img (and of course i've runned zipl) --- Post, Mark K [EMAIL PROTECTED] wrote: You didn't mention actually running mkinitrd. Did you? Mark Post -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Lizbeth Ortiz Sent: Thursday, April 14, 2005 3:53 PM To: LINUX-390@VM.MARIST.EDU Subject: problems with kernel 2.6 I've installed, via apt, kernel-image-2.6.8-2-s390, and i've modified /boot/parmfile deleting the word noinitrd, also i've modified /etc/zipl.conf adding the line ramdisk=/initrd.img and after rebooted the vm i have: RAMDISK: cramfs filesystem found at block 0 RAMDISK: Loading 2036 blocks ]1 disk( into ram disk... done. VFS: Mounted root (cramfs filesystem) readonly. Freeing unused kernel memory: 84k freed initrd-tools: 0.1.78 pivot_root: No such file or directory /sbin/init: 431: cannot open dev/console: No such file Kernel panic: Attempted to kill init! HCPGIR450W CP entered; disabled wait PSW 000A 800306C4 What is the problem? _ Do You Yahoo!? Informacisn de Estados Unidos y Amirica Latina, en Yahoo! Noticias. Vismtanos en http://noticias.espanol.yahoo.com -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 _ Do You Yahoo!? Informacisn de Estados Unidos y Amirica Latina, en Yahoo! Noticias. Vismtanos en http://noticias.espanol.yahoo.com -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: problems with kernel 2.6
On Apr 14, 2005, at 8:19 PM, Lizbeth Ortiz wrote: No, i just installed it via apt (apt-get install kernel-image-...) and modified zipl.conf adding ramdisk=/initrd.img (and of course i've runned zipl) Well, definitely run mkinitrd. See if that helps. Although I'm running my 2.6 systems with no initrd, but then I also built the kernel from source on them too, and made sure I didn't need an initrd. Adam -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: problems with kernel 2.6
i've doesnt yet try to play with mkinitrd (thats gonna be tomorrow), i've tried to install sarge from scratch, and now... i've installed sarge from zero, no dist-upgrade or anything else, just from scratch, and after that, i've installed kernel-image-2.6-s390x via apt, the news is that it doesnt require initrd, so i've rebooted the vm, and after that, i've received the following: VFS: Cannot open root device dasda2 or unknown-block(0,0) Please append a correct root= boot option Kernel panic: VFS: Unable to mount root fs on unknown-block(0,0) HCPGIR450W CP entered; disabled wait PSW 00020001 8000 0030949E i've modified zipl.conf (now the parm line isnt in /boot/parmfile, it is in zipl.conf) from: parameters = ro vmpoff=LOGOFF dasd=201 root=/dev/dasda2 to: parameters = ro vmpoff=LOGOFF dasd=0.0.0201 root=/dev/dasda2 and its the same, the problem is that kernel 2.6 doesnt see dasda2, how could i resolve this? thanks --- Adam Thornton [EMAIL PROTECTED] wrote: On Apr 14, 2005, at 8:19 PM, Lizbeth Ortiz wrote: No, i just installed it via apt (apt-get install kernel-image-...) and modified zipl.conf adding ramdisk=/initrd.img (and of course i've runned zipl) Well, definitely run mkinitrd. See if that helps. Although I'm running my 2.6 systems with no initrd, but then I also built the kernel from source on them too, and made sure I didn't need an initrd. Adam -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 _ Do You Yahoo!? Informacisn de Estados Unidos y Amirica Latina, en Yahoo! Noticias. Vismtanos en http://noticias.espanol.yahoo.com -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Really silly SSH question.
If you use PuTTY on Windows you can install Pageant (this is included in the installer package), and load your key (and type your passpharse) only _one time_ (when Pageant is running), and than you can logon to every system without passwords. Linux on 390 Port LINUX-390@VM.MARIST.EDU rta 2005.04.14 20:11:13 idpontban: Just for grins and giggles, I created an SSH private key/public key pair. I can now use PuTTY to logon to Linux without using my Linux password. Instead, I must use a Passphrase. What have I gained? I did replace my password with a passphrase, but how is that more secure? I don't see a way to say: This passphrase must be used when doing an SSH from that incoming IP address. Am I missing something? (very likely). I could use a different private/public key for each server that I use SSH with, I guess. But I've only got one server, so far. Oh well, it was a learning experience, I guess. -- John McKown Senior Systems Programmer UICI Insurance Center Information Technology This message (including any attachments) contains confidential information intended for a specific individual and purpose, and its' content is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this transmission, or taking any action based on it, is strictly prohibited. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390