Re: Applying mount namespaces

2007-09-26 Thread Sue Sivets

Hi Mark, Firefox says it's V 2.0.0.6, and it's notified me that there's
an update waiting to be applied.

Sue

Mark Post wrote:

On Wed, Sep 26, 2007 at 10:33 PM, in message


<[EMAIL PROTECTED]>, Sue Sivets <[EMAIL PROTECTED]>
wrote:


Hi Robert, I got the same  error message you did when I tried to  view
the page using Firefox, and this wasn't the first time I've  gotten this
message when trying to visit developerworks.



Firefox 1.5 worked fine for me.  What version do you have?


Mark Post

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390



--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: SIFT/UFT

2007-09-26 Thread Rick Troth
There is a 'uftd' source at

http://pb.casita.net/pub/uft/uft-1.7.tar.gz

The UFTD server in that package is pretty rough but works.
It receives files into /var/spool/uft/$USER in a form that can be
easily crunched (received, peeked, or discarded) by shell scripts.
(There is one control file and one byte stream data file per
logical spool file.  The control file can be sourced by a shell.)

Encryption was intentionally external from UFT protocol.
(A UFT server on CMS should theoretically be able to leverage
VM SSL without further changes, but I have never pursued this idea.)

If you're on a traditional IBM system (eg: VM or VSE)
then TCPNJE is going to be a much more complete solution.
The upside to UFT is that it does over ordinary TCP/IP
what RSCS does over NJE, and yet without the additional topology.
(With NJE over IP, you have two networks to administer,
where with UFT, the TCP/IP network is all you have to worry about.)

-- R;

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Applying mount namespaces

2007-09-26 Thread Mark Post
>>> On Wed, Sep 26, 2007 at 10:33 PM, in message
<[EMAIL PROTECTED]>, Sue Sivets <[EMAIL PROTECTED]>
wrote: 
> Hi Robert, I got the same  error message you did when I tried to  view
> the page using Firefox, and this wasn't the first time I've  gotten this
> message when trying to visit developerworks.

Firefox 1.5 worked fine for me.  What version do you have?


Mark Post

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Applying mount namespaces

2007-09-26 Thread Sue Sivets

Hi Robert, I got the same  error message you did when I tried to  view
the page using Firefox, and this wasn't the first time I've  gotten this
message when trying to visit developerworks. However,  the sun finally
dawned, and I tried the link with IE (not my favorite browser needless
to say), and the link worked. So I guess the moral of the story is, if
you're using Firefox to get to developerworks try a different browser. I
don't know why developerworks won't work; but I haven't had any problems
using Firefox with other parts of the IBM internet world like IBMLINK,
or the publishing and/or Redbooks areas.

Sue

RPN01 wrote:

As far as I can tell, the line didn't wrap. The url I tried was:

http://www.ibm.com/developerworks/linux/library/l-mount-namespaces.html

And I get a page headed by "IBM notice: The page you requested cannot be
displayed"

Might it be an internal only link?

--
   .~.Robert P. Nix Mayo Foundation
   /V\RO-OE-5-55200 First Street SW
  /( )\   507-284-0844  Rochester, MN 55905
  ^^-^^   -
"In theory, theory and practice are the same, but
 in practice, theory and practice are different."




On 9/24/07 1:16 PM, "Gentry, Stephen" <[EMAIL PROTECTED]>
wrote:



Worked for me.  Watch out for the wrapped line.
Steve G.

-Original Message-
From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of
RPN01
Sent: Monday, September 24, 2007 2:15 PM
To: LINUX-390@VM.MARIST.EDU
Subject: Re: Applying mount namespaces

I just get a bad URL response. Was there supposed to be something there?

--
   .~.Robert P. Nix Mayo Foundation
   /V\RO-OE-5-55200 First Street SW
  /( )\   507-284-0844  Rochester, MN 55905
  ^^-^^   -
"In theory, theory and practice are the same, but
 in practice, theory and practice are different."




On 9/24/07 10:36 AM, "McKown, John" <[EMAIL PROTECTED]>
wrote:



Likely known to the advanced people on this list, but a real


eye-opener


to this z/OS bigot.




http://www.ibm.com/developerworks/linux/library/l-mount-namespaces.html


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390


or visit


http://www.marist.edu/htbin/wlvindex?LINUX-390


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or
visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390



--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390



--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: SIFT/UFT

2007-09-26 Thread Rich Smrcina

VSE supports SSL over TCPNJE.

Thomas Kern wrote:

An NJE connection would be even better than FTPing to the zlinux system.

Do any of the TCPNJE implementations include traffic encryption?

David Boyes wrote:


There are full NJE implementations for Linux and other systems.


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or
visit
http://www.marist.edu/htbin/wlvindex?LINUX-390



--
Rich Smrcina
VM Assist, Inc.
Phone: 414-491-6001
Ans Service:  360-715-2467
rich.smrcina at vmassist.com
http://www.linkedin.com/in/richsmrcina

Catch the WAVV!  http://www.wavv.org
WAVV 2008 - Chattanooga - April 18-22, 2008

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Create PDFs

2007-09-26 Thread Thomas Denier
-Tom Duerbusch wrote: -

>I've asked before but now I know more about what I'm talking about
>(if you can believe that ).
>
>We are at a conversion point. Our CICS print output was being coded
>to a hardware box (IDATA box). And those are going away. The new
>printers that are wanted, are IP printers and the IDATA box was used
>with coax attached printers.
>
>Apparently, we manually designed printout using PCL code.
>
>That is, after sending down a setup string, the program would also
>send orders like:
>
>1.  Print this string using this font.
>2.  Make the next letter 20 point.
>3.  Go back to normal pitch and print the next few lines.
>4. Change to red, change the font, change the pitch and print the
>amount.
>5.  etc.
>
>Counting thru this sample program, there are 50+ changes in output,
>based on the number of times we output PCL code.
>
>So, I was wonderingin the 21st century, there must be a better
>way. I'm thinking something that would take a base report, insert
>"code" into it and print it. Take all that crap out of the
>application program. I'm not tied to a PDF format. The bad part
>about PDF output is you need a print server to print the output.

The groff text formatter is free, and included in many Linux
distributions. The formatter is built around a macro processor,
and the exact input syntax depends on the choice of macro package.
The macro package I am most familiar with uses a line starting
with '.P' to indicate a paragraph break and a line starting with
'.H' to indicate a heading. If your application program was
re-written to produce groff input, the reports would still contain
formatting information, but this information would be stated in
terms of document structure rather than printer internals.

The groff formatter is packaged with device drivers for a number
of different output data streams, including PostScript and PCL.
It will not produce PDF directly, but there are open source
utilities available to convert PostScript output to PDF.

>The new printers don't seem to be "pdf" printers that can handle PDF
>internally, and if I can keep from having to buy print servers, so
>much the better.
>
>But then, I could see a Windows box being a development box, that,
>using the GUI, can make forms design much easier to do and then have
>the resulting output "loaded" on a print server.
>
>A zLinux solution would be the easiest. Even of the product cost
>something, I could do a proof of concept during the free trial
>period. Perhaps even use Linux to print the PDF files. I expect the
>load to be about 2,000 pages a day, a page at a time across a couple>dozen
printers.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: SIFT/UFT

2007-09-26 Thread Thomas Kern

An NJE connection would be even better than FTPing to the zlinux system.

Do any of the TCPNJE implementations include traffic encryption?

David Boyes wrote:


There are full NJE implementations for Linux and other systems.


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Suse disk missing

2007-09-26 Thread Mark Post
>>> On Wed, Sep 26, 2007 at 12:59 PM, in message
<[EMAIL PROTECTED]
com>, "Ceruti, Gerard G" <[EMAIL PROTECTED]> wrote: 
> Hi All
> 
> I am having a similar time to Martha with:
> 
> 
>  /sbin/fsck.ext3 (1) -- /data1Ù fsck.ext3 -a /dev/dasdc1 ""
> fsck.ext3: No such device or address while trying to open
/dev/dasdc1"""
> Possibly non-existent or swap device?""
> fsck.ext3 /dev/dasdc1 failed (status 0x8). Run manually!""
> 
> The systems is SUSE Linux 2.6.5-7.244-s390x.
> 
> I have check the HMC and the device is available to the LPAR,
> 
> What I need to confirm is the Linux side , can anyone point me to a
manual 
> or presentation that lays out 
> The device configuration, so that I can check the Channels/devices.

What does "ls -l /sys/bus/ccw/drivers/dasd-eckd/" show?


Mark Post

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: SIFT/UFT

2007-09-26 Thread David Boyes
> If your target zLinux is on the same mainframe as your VSE, why not
FTP
> directly to the zLinux system? SIFT/UFT would be nice, especially if
you
> could have a SIFT client on the VSE system, but I don't remember
seeing
> any SIFT/UFT server for zLinux. 

There are full NJE implementations for Linux and other systems. 

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: SIFT/UFT

2007-09-26 Thread Thomas Kern

If your target zLinux is on the same mainframe as your VSE, why not FTP
directly to the zLinux system? SIFT/UFT would be nice, especially if you
could have a SIFT client on the VSE system, but I don't remember seeing
any SIFT/UFT server for zLinux. The original VM implementation and the
current RSCS implementation don't seem to have any option for encryption
of the data traffic. I hope that IBM will address this for ALL processes
that send data outside of the system.

/Tom Kern
/301-903-2211

Huegel, Thomas wrote:

Looking for some ideas.
Basically what I need to do is to send files, usually print files, from VSE
to other platforms.
We currently use FTP from VSE. But now we need to encrypt everything. I
would prefer not to do the encryption in VSE, just too expensive.

One thought I had was to PNET the files to RSCS and then UFT them to a
zLINUX guest that would do the encryption and FTPout to the other platforms.
This has some advantages mainly because it uses RSCS.

What do I need to do in the zLINUX machine for it to handle the UFT/UFTD
files from RSCS?

Thanks


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Shared Kernel on Sles10

2007-09-26 Thread Max Belardi

I'm trying to do manual configuration.
The problem now seems to be related to System Map.
Using value provided by IBM site during the DEFSYS command ( DEFSYS
LXSHR 0-FF EW 100-2FF SR 300-4FF EW MINSIZE=64M " seems are related to
2.4 kernel system map.
Anybody know the new value for 2.6 kernel?
Thanks
Max


Mark Post ha scritto:

On Tue, Sep 25, 2007 at  3:40 PM, in message <[EMAIL PROTECTED]>, Max


Belardi <[EMAIL PROTECTED]> wrote:


Thanks Mark
if I point to this site... I can get informations here:
http://www.vm.ibm.com/linux/linuxnss.html

The first paragraph show...
"The VM Share Kernel Support procedure documented on this page was
created a few years ago for use with an older Linux Kernel. So, if you
are using Linux Kernel 2.6, it would be best NOT to use this procedure,
and instead download a new patch of kernel NSS support from the
following link. "

I point to the new link
http://www-128.ibm.com/developerworks/linux/linux390/whatsnew.html

...and there are some documentation about device drivers and commands
In chapter 13 there is: "Shared kernel support"

Setting up a Linux NSS means performs this steps:
1. Boot Linux.
2. Insert savesys= into the kernel parameter file used by your
boot configuration, where  is the name you want to assign to
the NSS. The name can be 1-8 characters long and must consist of
alphabetic and numeric characters. Be sure not to assign a name that
matches any of the device numbers used at your installation.
3. Issue a zipl command to write the modified configuration to the boot
device.
4. Close down Linux.
5. Issue an IPL command to boot Linux from the device that holds the
Linux kernel. During the IPL process, the NSS is created and Linux is
actually booted from the NSS.

This procedure seems that is not working at this time
What's wrong???
Procedure??? (automatic NSS generation is not supported)
Kernel??? (currently is 2.6.16.53)



As I said in my other reply, "what's wrong" is that the patch referenced has 
not (yet) been incorporated in the kernel that ships with SLES.  The developerWorks web 
site is intended for people that intend to build their own kernel from source.  That 
means, distribution providers, or people who are doing it for educational or other 
purposes.

In your case, you should go with the manual procedure that gives all the z/VM 
commands to use.  Understand, though, that the resulting kernel-in-NSS is not 
(yet) supported by Novell.  If/when we ship that functionality, it will be 
supported.  Until then, you're on your own unless you are willing to negotiate 
a custom support arrangement.  (Personally I don't think it will be any 
problematic than booting from a kernel on disk, but commercial support models 
being what they are, that scenario doesn't fall under the supported category 
yet.)

One thing to keep in mind is that putting your kernel into an NSS is only going 
to save you somewhere around 1-4MB (at most).  Unless you have a _lot_ of z/VM 
guests, that isn't going to buy you much.  You're much better off concentrating 
on implementing CMM (phase 1), or xip2fs.  You'll get a lot more return for 
your efforts there.


Mark Post

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390





--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Suse disk missing

2007-09-26 Thread Bauer, Bobby (NIH/CIT) [E]
We possibly had something similar. We had to update the HSA with a hard 
activate. 


Bobby Bauer
Center for Information Technology
National Institutes of Health
Bethesda, MD 20892-5628
301-594-7474



-Original Message-
From: David Kreuter [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, September 26, 2007 1:08 PM
To: LINUX-390@VM.MARIST.EDU
Subject: Re: Suse disk missing

try 
http://download.boulder.ibm.com/ibmdl/pub/software/dw/linux390/docu/l26cdd03.pdf
David


-Original Message-
From: Linux on 390 Port on behalf of Ceruti, Gerard G
Sent: Wed 9/26/2007 12:59 PM
To: LINUX-390@VM.MARIST.EDU
Subject: Suse disk missing
 
Hi All

I am having a similar time to Martha with:


/sbin/fsck.ext3 (1) -- /data1Ù fsck.ext3 -a /dev/dasdc1 ""
fsck.ext3: No such device or address while trying to open /dev/dasdc1"""
Possibly non-existent or swap device?""
fsck.ext3 /dev/dasdc1 failed (status 0x8). Run manually!""

The systems is SUSE Linux 2.6.5-7.244-s390x.

I have check the HMC and the device is available to the LPAR,

What I need to confirm is the Linux side , can anyone point me to a manual or 
presentation that lays out 
The device configuration, so that I can check the Channels/devices.

I have been looking in /sys/. but for some reason the devices will not show 
up ,
I have taken the channel offline and online , is there a specific message log 
file for online/offline ?.
 

Regards
Gerard Ceruti 
may the 'z' be with you


__

Standard Bank Disclaimer and Confidentiality Note

This e-mail, its attachments and any rights attaching hereto are, unless the 
context clearly indicates otherwise, the property of Standard Bank Group Limited
and/or its subsidiaries ("the Group"). It is confidential, private and intended 
for the addressee only. Should you not be the addressee and receive this e-mail 
by
mistake, kindly notify the sender, and delete this e-mail, immediately and do 
not disclose or use same in any manner whatsoever. Views and opinions
expressed in this e-mail are those of the sender unless clearly stated as those 
of the Group. The Group accepts no liability whatsoever for any loss or
damages whatsoever and howsoever incurred, or suffered, resulting, or arising, 
from the use of this email or its attachments. The Group does not warrant the 
integrity
of this e-mail nor that it is free of errors, viruses, interception or 
interference. Licensed divisions of the Standard Bank Group are authorised 
financial services providers
in terms of the Financial Advisory and Intermediary Services Act, No 37 of 2002 
(FAIS).
For information about the Standard Bank Group Limited visit our website 
http://www.standardbank.co.za
___

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390



--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Suse disk missing

2007-09-26 Thread David Kreuter
try 
http://download.boulder.ibm.com/ibmdl/pub/software/dw/linux390/docu/l26cdd03.pdf
David


-Original Message-
From: Linux on 390 Port on behalf of Ceruti, Gerard G
Sent: Wed 9/26/2007 12:59 PM
To: LINUX-390@VM.MARIST.EDU
Subject: Suse disk missing
 
Hi All

I am having a similar time to Martha with:


/sbin/fsck.ext3 (1) -- /data1Ù fsck.ext3 -a /dev/dasdc1 ""
fsck.ext3: No such device or address while trying to open /dev/dasdc1"""
Possibly non-existent or swap device?""
fsck.ext3 /dev/dasdc1 failed (status 0x8). Run manually!""

The systems is SUSE Linux 2.6.5-7.244-s390x.

I have check the HMC and the device is available to the LPAR,

What I need to confirm is the Linux side , can anyone point me to a manual or 
presentation that lays out 
The device configuration, so that I can check the Channels/devices.

I have been looking in /sys/. but for some reason the devices will not show 
up ,
I have taken the channel offline and online , is there a specific message log 
file for online/offline ?.
 

Regards
Gerard Ceruti 
may the 'z' be with you


__

Standard Bank Disclaimer and Confidentiality Note

This e-mail, its attachments and any rights attaching hereto are, unless the 
context clearly indicates otherwise, the property of Standard Bank Group Limited
and/or its subsidiaries ("the Group"). It is confidential, private and intended 
for the addressee only. Should you not be the addressee and receive this e-mail 
by
mistake, kindly notify the sender, and delete this e-mail, immediately and do 
not disclose or use same in any manner whatsoever. Views and opinions
expressed in this e-mail are those of the sender unless clearly stated as those 
of the Group. The Group accepts no liability whatsoever for any loss or
damages whatsoever and howsoever incurred, or suffered, resulting, or arising, 
from the use of this email or its attachments. The Group does not warrant the 
integrity
of this e-mail nor that it is free of errors, viruses, interception or 
interference. Licensed divisions of the Standard Bank Group are authorised 
financial services providers
in terms of the Financial Advisory and Intermediary Services Act, No 37 of 2002 
(FAIS).
For information about the Standard Bank Group Limited visit our website 
http://www.standardbank.co.za
___

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390



--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Suse disk missing

2007-09-26 Thread Ceruti, Gerard G
Hi All

I am having a similar time to Martha with:


/sbin/fsck.ext3 (1) -- /data1Ù fsck.ext3 -a /dev/dasdc1 ""
fsck.ext3: No such device or address while trying to open /dev/dasdc1"""
Possibly non-existent or swap device?""
fsck.ext3 /dev/dasdc1 failed (status 0x8). Run manually!""

The systems is SUSE Linux 2.6.5-7.244-s390x.

I have check the HMC and the device is available to the LPAR,

What I need to confirm is the Linux side , can anyone point me to a manual or 
presentation that lays out 
The device configuration, so that I can check the Channels/devices.

I have been looking in /sys/. but for some reason the devices will not show 
up ,
I have taken the channel offline and online , is there a specific message log 
file for online/offline ?.
 

Regards
Gerard Ceruti 
may the 'z' be with you


__

Standard Bank Disclaimer and Confidentiality Note

This e-mail, its attachments and any rights attaching hereto are, unless the 
context clearly indicates otherwise, the property of Standard Bank Group Limited
and/or its subsidiaries ("the Group"). It is confidential, private and intended 
for the addressee only. Should you not be the addressee and receive this e-mail 
by
mistake, kindly notify the sender, and delete this e-mail, immediately and do 
not disclose or use same in any manner whatsoever. Views and opinions
expressed in this e-mail are those of the sender unless clearly stated as those 
of the Group. The Group accepts no liability whatsoever for any loss or
damages whatsoever and howsoever incurred, or suffered, resulting, or arising, 
from the use of this email or its attachments. The Group does not warrant the 
integrity
of this e-mail nor that it is free of errors, viruses, interception or 
interference. Licensed divisions of the Standard Bank Group are authorised 
financial services providers
in terms of the Financial Advisory and Intermediary Services Act, No 37 of 2002 
(FAIS).
For information about the Standard Bank Group Limited visit our website 
http://www.standardbank.co.za
___

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


TSM vulnerabilities

2007-09-26 Thread Dave Jones

This might be of interest to those on the list that run Tivoli Storage
Manager software
---

September 24, 2007 (Computerworld) -- IBM has issued a warning  to
customers that security fixes should be installed for two
vulnerabilities in the IBM Tivoli Storage Manager (TSM) backup
software client. The security holes could allow a buffer overrun
attack or enable unauthorized access to stored data, IBM said.

In the alert advisory issued late last week, IBM security researchers
said that three client interfaces of TSM -- the Web client GUI, the
backup-archive client scheduling tool, and the backup-archive server-
initiated prompted scheduling product -- could be impacted by the
vulnerabilities. No other TSM client tools are affected, IBM said.

By taking advantage of the TSM vulnerabilities, hackers could subvert
the backup software's code in two ways, IBM said: A buffer overrun
could crash an operating system, or the exploit could open the door
for injection code execution. The vulnerability could also allow
someone to take advantage of server-initiated prompted scheduling to
gain access to private information.

According to IBM, the vulnerabilities are in TSM Express backup
clients, and TSM v5.1, v5.2, v5.3 and v5.4 backup-archive clients.

Links within IBM's security advisory provide update packages for
immediate download and instructions for installation.

IBM is recommending that customers refrain from using the affected
clients until the fixes are installed.
---


http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9038498&source=NLT_PM&nlid=8
(watch out for line wrap, too)
--
DJ
V/Soft

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


snmp query

2007-09-26 Thread Susan Zimmerman
Wow!   Thanks for all the responses...for right now, since all we need is
the device type and model... it looks like David Boyes' suggestion is the
easiest to try first.  Thanks again everyone for your help.

susan

<  David Boyes' response >

>You need the snmptools package in your distribution (may be part of the =
>net-snmp package, depending on your distribution).
>
>Once you install that, you have a program called 'snmpget'. This will =
>retrieve the value of a MIB variable to stdout.=20
>You want to retrieve the .vendorID and .deviceType fields from the =
>standard system MIB (you can look those up either in the MIBs for your =
>printers, or in the SNMP RFCs).
>
>You then need something like the following pseudo-code (no carping about =
>backticks or csh syntax, please. I've heard it, and so has everyone =
>else):
>
>touch output.file
>foreach i in (`cat ipadresslist.file`)
 >   snmpget $i system.vendorID >> output.file
 >   snmpget $i system.deviceType >> output.file
>end
>
>The syntax of the above is off the top of my head, so check the man =
>pages, but hand something like this a file of IP addresses or host names =
>to try, and the output file should contain the responses you want. If =
>you replace the snmpget program with snmpwalk, you'll get everything =
>that printer knows about itself -- caution: this may slow or stop =
>printing on some printers with limited CPU resources.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


SIFT/UFT

2007-09-26 Thread Huegel, Thomas
Looking for some ideas.
Basically what I need to do is to send files, usually print files, from VSE
to other platforms.
We currently use FTP from VSE. But now we need to encrypt everything. I
would prefer not to do the encryption in VSE, just too expensive.

One thought I had was to PNET the files to RSCS and then UFT them to a
zLINUX guest that would do the encryption and FTPout to the other platforms.
This has some advantages mainly because it uses RSCS.

What do I need to do in the zLINUX machine for it to handle the UFT/UFTD
files from RSCS?

Thanks


__
<< ella for Spam Control >> has removed VSE-List messages and set aside
VM-List for me
You can use it too - and it's FREE!  http://www.ellaforspam.com

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Help, my VIPA won't work - long email

2007-09-26 Thread Bauer, Bobby (NIH/CIT) [E]
Here is the ifcfg-eth0:
BOOTPROTO=none
SUBCHANNELS=0.0.0c60,0.0.0c61,0.0.0c62
DEVICE=eth0
NETMASK=255.255.255.240
BROADCAST=xxx.xxx.64.63
IPADDR=xxx.xxx.64.58
NETWORK=xxx.xxx.64.48
NETTYPE=qeth
ONBOOT=yes
GATEWAY=xxx.xxx.64.49
TYPE=Ethernet
USERCTL=no
IPV6INIT=no
PEERDNS=yes

And route -n 
Kernel IP routing table
Destination Gateway   Genmask Flags Metric RefUse
Iface
xxx.xxx.64.48   0.0.0.0   255.255.255.240 U 0  0  0
eth0
xxx.xxx.160.0   0.0.0.0   255.255.254.0   U 0  0  0
dummy0
0.0.0.0 xxx.xxx.64.49 0.0.0.0 UG0  0  0
eth0

A couple of tries with route-eth0. 
I coded:
GATEWAY0=xxx.xxx.64.49
NETMASK0=255.255.254.0
ADDRESS0=xxx.xxx.160.0

And when I restarted the network I received message:
Bringing up interface eth0:  RTNETLINK answers: File exists
[  OK  ]

Then I coded:
GATEWAY0=xxx.xxx.160.1
NETMASK0=255.255.254.0
ADDRESS0=xxx.xxx.160.0

And got:
Bringing up interface eth0:  RTNETLINK answers: Network is unreachable
[  OK  ]


Is it possible to have a VIPA in a different subnet? All the examples
I've seen have them in the same subnet.

Thanks

Bobby Bauer
Center for Information Technology
National Institutes of Health
Bethesda, MD 20892-5628
301-594-7474


-Original Message-
From: Brad Hinson [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, September 25, 2007 4:30 PM
To: LINUX-390@VM.MARIST.EDU
Subject: Re: Help, my VIPA won't work - long email

On Tue, 2007-09-25 at 13:34 -0400, Bauer, Bobby (NIH/CIT) [E] wrote:
> Running Red Hat 5 with 2 OSA cards and I'm trying to setup a VIPA. I'm
> in lpar mode without z/VM and I took my instructions from:
>
>
>
> Linux on System z
>
> Device Drivers, Features, and Commands February, 2007
>
> Linux Kernel 2.6 - October 2005 stream
>
>
>
>
>
> For simplicity sake, I took down eth1 and just used eth0. Eth0 has a
> different netmask than the VIPA (dummy0) just like on our MVS lpars.
>
>
>
> ifconfig eth0
>
> eth0  Link encap:Ethernet  HWaddr 00:11:25:C0:7D:46
>
>   inet addr:xxx.xxx.64.58  Bcast:xxx.xxx.64.63
> Mask:255.255.255.240
>
>   inet6 addr: fe80::11:2500:3c0:7d46/64 Scope:Link
>
>   UP BROADCAST RUNNING MULTICAST  MTU:1492  Metric:1
>
>   RX packets:273 errors:0 dropped:0 overruns:0 frame:0
>
>   TX packets:449 errors:0 dropped:0 overruns:0 carrier:0
>
>   collisions:0 txqueuelen:1000
>
>   RX bytes:26260 (25.6 KiB)  TX bytes:51522 (50.3 KiB)
>
>
>
> ifconfig dummy0
>
> dummy0Link encap:Ethernet  HWaddr 6A:A9:14:7F:2B:D3
>
>   inet addr:xxx.xxx.160.48  Bcast:xxx.xxx.161.255
> Mask:255.255.254.0
>
>   inet6 addr: fe80::68a9:14ff:fe7f:2bd3/64 Scope:Link
>
>   UP BROADCAST RUNNING NOARP  MTU:1492  Metric:1
>
>   RX packets:0 errors:0 dropped:0 overruns:0 frame:0
>
>   TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
>
>   collisions:0 txqueuelen:0
>
>   RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)
>
>
>
> dummy0 was actually setup in
/etc/sysconfig/network-scripts/ifcfg-dummy0
> and looks like:
>
> DEVICE=dummy0
>
> NETMASK=255.255.254.0
>
> IPADDR=xxx.xxx.160.48
>
> BROADCAST=xxx.xxx.161.255
>
> NETWORK=xxx.xxx.160.0
>
> GATEWAY=xxx.xxx.160.1
>
> NETTYPE=qeth
>
> ONBOOT=yes
>
> TYPE=Ethernet
>
> MTU=1492
>

You really shouldn't have GATEWAY= in ifcfg-*, unless it's defined in
one (and only one) ifcfg file and nowhere else.  This is used to specify
the default gateway.  Ideally, define the GATEWAY=
in /etc/sysconfig/network.  To define gateways to other networks, use
static routes.  The syntax for adding a static route is here:

http://kbase.redhat.com/faq/FAQ_79_2561.shtm

If this doesn't help, can you post your ifcfg-eth* as well as the output
of route -n?

Thanks,
-Brad

>
>
> To set up the VIPA association I issued
>
> qethconf vipa add xxx.xxx.160.48 eth0
>
>
>
> and verified with
>
>
>
> qethconf vipa list
>
> vipa add 128.231.160.48 eth0
>
>
>
> and to further check this out:
>
> qetharp -nq eth0
>
> AddressHWaddress   HWTypeIface
>
> xxx.xxx.64.49  00:00:0c:07:ac:0e   ether eth0
>
> xxx.xxx.160.48 00:11:25:c0:7d:46   ether eth0
>
> xxx.xxx.64.58  00:11:25:c0:7d:46   ether eth0
>
>
>
>  and
>
> route
>
> Kernel IP routing table
>
> DestinationGateway   Genmask Flags Metric Ref Use
Iface
>
> xxx.xxx.64.48  * 255.255.255.240 U 0  0   0
eth0
>
> xxx.xxx.160.0  * 255.255.254.0   U 0  0   0
> dummy0
>
> defaultxxx.xxx.64.49 0.0.0.0 UG0  0   0
eth0
>
>
>
> At this point I can't ping my VIPA (xxx.xxx.160.48) from the LAN and I
> can't ping my router at xxx.xxx.160.1 from the Linux host.
>
>
>
> Looks like something wrong in the LAN but as a test I took down dummy0
> and changed eth0 to point to xxx.xxx.160.48 (VIPA address) with a
> default route of xxx.xxx.160.1. In this conf