Re: Changing password on multiple zLinux servers
On Friday, 10/26/2007 at 09:47 EDT, Alan Cox <[EMAIL PROTECTED]> wrote: > There are - the cluster computing people have a pile of tools for issuing > the same commands on many boxes at once and they'll work for virtual > machines. On VM you can use the CP SEND command from the central server. No extra software on the guests required. This kind of thing works best, however, if the guests are configured to bypass the login prompt when they boot. Otherwise you have to authenticate if not already logged in. > That said: LDAP is probably what you want to consider instead as its > designed for this sort of central management. LDAP is also a good bet as you tend not to fall afoul of security policies and auditors. They know LDAP and it is likely already on their "A" list. A home-grown solution may create more headaches than it solves. Even with CP SEND, any class C user can send commands anonymously (from Linux's point of view). Alan Altmark z/VM Security Weasel IBM Endicott -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: brain cramp on versioning info
CHAPLIN, JAMES (CTR) wrote:
rpm -q for software installed using rpms
or for kernel info you can use:
uname -v
rpm -qa --qf ''
rpm -qd rpm
06:50 [EMAIL PROTECTED] ~]$ rpm -qa kern\* --qf '%{name}
%{version}\t%{release} %{arch} %{license}\n'
kernel 2.6.18 8.1.4.el5 i686 GPLv2
kernel 2.6.18 8.1.10.el5 i686 GPLv2
kernel 2.6.18 8.1.14.el5 i686 GPLv2
kernel-xen 2.6.18 8.1.3.el5 i686 GPLv2
kernel-PAE 2.6.18 8.1.8.el5 i686 GPLv2
kernel-xen 2.6.18 8.1.8.el5 i686 GPLv2
kernel-PAE 2.6.18 8.1.14.el5 i686 GPLv2
kernel-xen 2.6.18 8.1.15.el5 i686 GPLv2
kernel 2.6.18 8.1.8.el5 i686 GPLv2
kernel 2.6.18 8.1.3.el5 i686 GPLv2
kernel-PAE 2.6.18 8.1.15.el5 i686 GPLv2
kernel-doc 2.6.18 8.1.15.el5 noarch GPLv2
kernel-headers 2.6.18 8.1.15.el5 i386 GPLv2
kernel-xen 2.6.18 8.1.4.el5 i686 GPLv2
kernel-PAE 2.6.18 8.1.10.el5 i686 GPLv2
kernel-xen 2.6.18 8.1.14.el5 i686 GPLv2
kernel-PAE 2.6.18 8.1.4.el5 i686 GPLv2
kernel-xen 2.6.18 8.1.10.el5 i686 GPLv2
kernel 2.6.18 8.1.15.el5 i686 GPLv2
06:50 [EMAIL PROTECTED] ~]$
--
Cheers
John
-- spambait
[EMAIL PROTECTED] [EMAIL PROTECTED]
-- Advice
http://webfoot.com/advice/email.top.php
http://www.catb.org/~esr/faqs/smart-questions.html
http://support.microsoft.com/kb/555375
Please do not reply off-list
--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Changing password on multiple zLinux servers
<><><>
Re: "Large" Number of DASD on zLinux on zVM
I always "visualize" these as one command, as: mkinitrd && zipl This way, if mkinitrd is successful, then zipl runs immediately after, which is what I want. If you start typing it in this way, you'll be less likely to forget the second step. Now, if I could just remember to do the first step -- .~.Robert P. Nix Mayo Foundation /V\RO-OE-5-55200 First Street SW /( )\ 507-284-0844 Rochester, MN 55905 ^^-^^ - "In theory, theory and practice are the same, but in practice, theory and practice are different." On 10/26/07 3:03 PM, "Ron Henry" <[EMAIL PROTECTED]> wrote: > Thanks for the great input. I remade the initrd then didn't run the > zipl command. Well, I said I was a rookie. > > THanks for the responses. > > Ron > > -Original Message- > From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of > Mark Post > Sent: Friday, October 26, 2007 1:28 PM > To: LINUX-390@VM.MARIST.EDU > Subject: Re: "Large" Number of DASD on zLinux on zVM > On Fri, Oct 26, 2007 at 1:20 PM, in message > <[EMAIL PROTECTED]>, RPN01 <[EMAIL PROTECTED]> wrote: >> We run over 30 3390 mod 27 devices in a single Linux image w/o >> problems. Did you extend the /dev/dasd devices past /dev/dasdz? This >> could account for the problem... Although 800-81f is 31 devices, so I > may be way off base. > > If he's running RHEL4 or 5, udev should be taking care of creating any > device nodes he needs. I suspect the problem is he didn't rebuild his > initrd, as someone else pointed out. > > > Mark Post > > -- > For LINUX-390 subscribe / signoff / archive access instructions, send > email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or > visit http://www.marist.edu/htbin/wlvindex?LINUX-390 > > -- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: "Large" Number of DASD on zLinux on zVM
Thanks for the great input. I remade the initrd then didn't run the zipl command. Well, I said I was a rookie. THanks for the responses. Ron -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Mark Post Sent: Friday, October 26, 2007 1:28 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: "Large" Number of DASD on zLinux on zVM >>> On Fri, Oct 26, 2007 at 1:20 PM, in message <[EMAIL PROTECTED]>, RPN01 <[EMAIL PROTECTED]> wrote: > We run over 30 3390 mod 27 devices in a single Linux image w/o > problems. Did you extend the /dev/dasd devices past /dev/dasdz? This > could account for the problem... Although 800-81f is 31 devices, so I may be way off base. If he's running RHEL4 or 5, udev should be taking care of creating any device nodes he needs. I suspect the problem is he didn't rebuild his initrd, as someone else pointed out. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: brain cramp on versioning info
SPident..Good Lord I couldn't think of it thanks Mace --- Mark Post <[EMAIL PROTECTED]> wrote: > >>> On Fri, Oct 26, 2007 at 12:15 PM, in message > <[EMAIL PROTECTED]>, LJ > Mace <[EMAIL PROTECTED]> > wrote: > > What the heck is the command to find the > version(s) of > > software your on? > > I remember it is - but for the life of me > I > > can't remember the exact command > > I'm guessing you're thinking of SPident. If so, you > don't really need the -v switches unless you want > the gory details of why you're not completely up to > date. > > > Mark Post > > -- > For LINUX-390 subscribe / signoff / archive access > instructions, > send email to [EMAIL PROTECTED] with the > message: INFO LINUX-390 or visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: "Large" Number of DASD on zLinux on zVM
>>> On Fri, Oct 26, 2007 at 1:20 PM, in message <[EMAIL PROTECTED]>, RPN01 <[EMAIL PROTECTED]> wrote: > We run over 30 3390 mod 27 devices in a single Linux image w/o problems. Did > you extend the /dev/dasd devices past /dev/dasdz? This could account for the > problem... Although 800-81f is 31 devices, so I may be way off base. If he's running RHEL4 or 5, udev should be taking care of creating any device nodes he needs. I suspect the problem is he didn't rebuild his initrd, as someone else pointed out. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: "Large" Number of DASD on zLinux on zVM
Udev should handle this on recent versions of Red Hat (RHEL). The nodes will automatically be built from dasda-dasdz, then dasdaa-dasdzz, and dasdaaa-dasdzzz. -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of RPN01 Sent: Friday, October 26, 2007 1:21 PM To: LINUX-390@VM.MARIST.EDU Subject: Re: [LINUX-390] "Large" Number of DASD on zLinux on zVM We run over 30 3390 mod 27 devices in a single Linux image w/o problems. Did you extend the /dev/dasd devices past /dev/dasdz? This could account for the problem... Although 800-81f is 31 devices, so I may be way off base. -- .~.Robert P. Nix Mayo Foundation /V\RO-OE-5-55200 First Street SW /( )\ 507-284-0844 Rochester, MN 55905 ^^-^^ - "In theory, theory and practice are the same, but in practice, theory and practice are different." On 10/26/07 10:59 AM, "Hall, Ken (GTI)" <[EMAIL PROTECTED]> wrote: > Is your dasd driver a module, and are you using an initrd? > > If this is the case, the range is taken from /etc/modprobe.conf in the > initrd, not /etc. You need to rebuild the initrd and reboot. > > > -Original Message- > From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of > Ron Henry > Sent: Friday, October 26, 2007 11:53 AM > To: LINUX-390@VM.MARIST.EDU > Subject: [LINUX-390] "Large" Number of DASD on zLinux on zVM > > > I have a RedHat Linux machine on zVM 5.2 and I am trying to put about > 40 3390 mod 9s on it. Each device is a full-pack minidisk. > > The machine boots up fine and runs but doesn't have all its dasd. > > a "#CP Q V DASD" shows that the Linux machine has all the DASD mapped to > virtual addresses 800-82B. > > The /proc/dasd/devices only goes as far as 81F. Likewise the /dev/dasd. > > My /etc/zipl.conf allows for 800-83F. > > What have I messed-up here? I am still new to Linux on VM. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 This message w/attachments (message) may be privileged, confidential or proprietary, and if you are not an intended recipient, please notify the sender, do not use or share it and delete it. Unless specifically indicated, this message is not an offer to sell or a solicitation of any investment products or other financial product or service, an official confirmation of any transaction, or an official statement of Merrill Lynch. Subject to applicable law, Merrill Lynch may monitor, review and retain e-communications (EC) traveling through its networks/systems. The laws of the country of each sender/recipient may impact the handling of EC, and EC may be archived, supervised and produced in countries other than the country in which you are located. This message cannot be guaranteed to be secure or error-free. This message is subject to terms available at the following link: http://www.ml.com/e-communications_terms/. By messaging with Merrill Lynch you consent to the foregoing. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: "Large" Number of DASD on zLinux on zVM
We run over 30 3390 mod 27 devices in a single Linux image w/o problems. Did you extend the /dev/dasd devices past /dev/dasdz? This could account for the problem... Although 800-81f is 31 devices, so I may be way off base. -- .~.Robert P. Nix Mayo Foundation /V\RO-OE-5-55200 First Street SW /( )\ 507-284-0844 Rochester, MN 55905 ^^-^^ - "In theory, theory and practice are the same, but in practice, theory and practice are different." On 10/26/07 10:59 AM, "Hall, Ken (GTI)" <[EMAIL PROTECTED]> wrote: > Is your dasd driver a module, and are you using an initrd? > > If this is the case, the range is taken from /etc/modprobe.conf in the > initrd, not /etc. You need to rebuild the initrd and reboot. > > > -Original Message- > From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of > Ron Henry > Sent: Friday, October 26, 2007 11:53 AM > To: LINUX-390@VM.MARIST.EDU > Subject: [LINUX-390] "Large" Number of DASD on zLinux on zVM > > > I have a RedHat Linux machine on zVM 5.2 and I am trying to put about > 40 3390 mod 9s on it. Each device is a full-pack minidisk. > > The machine boots up fine and runs but doesn't have all its dasd. > > a "#CP Q V DASD" shows that the Linux machine has all the DASD mapped to > virtual addresses 800-82B. > > The /proc/dasd/devices only goes as far as 81F. Likewise the /dev/dasd. > > My /etc/zipl.conf allows for 800-83F. > > What have I messed-up here? I am still new to Linux on VM. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: brain cramp on versioning info
>>> On Fri, Oct 26, 2007 at 12:15 PM, in message <[EMAIL PROTECTED]>, LJ Mace <[EMAIL PROTECTED]> wrote: > What the heck is the command to find the version(s) of > software your on? > I remember it is - but for the life of me I > can't remember the exact command I'm guessing you're thinking of SPident. If so, you don't really need the -v switches unless you want the gory details of why you're not completely up to date. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: brain cramp on versioning info
rpm -q for software installed using rpms or for kernel info you can use: uname -v -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of LJ Mace Sent: Friday, October 26, 2007 12:15 PM To: LINUX-390@VM.MARIST.EDU Subject: brain cramp on versioning info What the heck is the command to find the version(s) of software your on? I remember it is - but for the life of me I can't remember the exact command thanks brain dead Mace __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
brain cramp on versioning info
What the heck is the command to find the version(s) of software your on? I remember it is - but for the life of me I can't remember the exact command thanks brain dead Mace __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: "Large" Number of DASD on zLinux on zVM
Is your dasd driver a module, and are you using an initrd? If this is the case, the range is taken from /etc/modprobe.conf in the initrd, not /etc. You need to rebuild the initrd and reboot. -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Ron Henry Sent: Friday, October 26, 2007 11:53 AM To: LINUX-390@VM.MARIST.EDU Subject: [LINUX-390] "Large" Number of DASD on zLinux on zVM I have a RedHat Linux machine on zVM 5.2 and I am trying to put about 40 3390 mod 9s on it. Each device is a full-pack minidisk. The machine boots up fine and runs but doesn't have all its dasd. a "#CP Q V DASD" shows that the Linux machine has all the DASD mapped to virtual addresses 800-82B. The /proc/dasd/devices only goes as far as 81F. Likewise the /dev/dasd. My /etc/zipl.conf allows for 800-83F. What have I messed-up here? I am still new to Linux on VM. Any help greatfully appreciated. Thanks, Ron Henry -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 This message w/attachments (message) may be privileged, confidential or proprietary, and if you are not an intended recipient, please notify the sender, do not use or share it and delete it. Unless specifically indicated, this message is not an offer to sell or a solicitation of any investment products or other financial product or service, an official confirmation of any transaction, or an official statement of Merrill Lynch. Subject to applicable law, Merrill Lynch may monitor, review and retain e-communications (EC) traveling through its networks/systems. The laws of the country of each sender/recipient may impact the handling of EC, and EC may be archived, supervised and produced in countries other than the country in which you are located. This message cannot be guaranteed to be secure or error-free. This message is subject to terms available at the following link: http://www.ml.com/e-communications_terms/. By messaging with Merrill Lynch you consent to the foregoing. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Changing password on multiple zLinux servers
>>> On Fri, Oct 26, 2007 at 11:31 AM, in message <[EMAIL PROTECTED]>, "Fargusson.Alan" <[EMAIL PROTECTED]> wrote: > However, TAR and PAX archives store the UID > (depending on some command line options), so they tend to cause the owner of > a file to be wrong when restored on a different system then the one they were > created. >From what I've experienced, GNU tar stores uid/gid _and_ username/groupname. >During the extract process, if the same user and group are on the system, it >uses them. If not, it restores things using uid/gid. > Basically it is a good idea to coordinate all the UIDs on all systems to > avoid problems. Agreed. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: "Large" Number of DASD on zLinux on zVM
My guess is that you have not gone into YAST and activated them if it SuSE. Thanks, Gary L. Detro Senior IT Specialist 1177 S. Belt Line Rd; Coppell, TX 75019 Internal Mail Stop: 77-01-3001O; Coppell, TX Phone: 469-549-8174 (t/l 603-8174); Fax: 469-549-8235 (t/l 603-8235) Send me an email [EMAIL PROTECTED] IBM Global Solution Center Ron Henry <[EMAIL PROTECTED]> Sent by: Linux on 390 Port 10/26/2007 10:52 AM Please respond to Linux on 390 Port To LINUX-390@VM.MARIST.EDU cc Subject "Large" Number of DASD on zLinux on zVM I have a RedHat Linux machine on zVM 5.2 and I am trying to put about 40 3390 mod 9s on it. Each device is a full-pack minidisk. The machine boots up fine and runs but doesn't have all its dasd. a "#CP Q V DASD" shows that the Linux machine has all the DASD mapped to virtual addresses 800-82B. The /proc/dasd/devices only goes as far as 81F. Likewise the /dev/dasd. My /etc/zipl.conf allows for 800-83F. What have I messed-up here? I am still new to Linux on VM. Any help greatfully appreciated. Thanks, Ron Henry -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 <><>
"Large" Number of DASD on zLinux on zVM
I have a RedHat Linux machine on zVM 5.2 and I am trying to put about 40 3390 mod 9s on it. Each device is a full-pack minidisk. The machine boots up fine and runs but doesn't have all its dasd. a "#CP Q V DASD" shows that the Linux machine has all the DASD mapped to virtual addresses 800-82B. The /proc/dasd/devices only goes as far as 81F. Likewise the /dev/dasd. My /etc/zipl.conf allows for 800-83F. What have I messed-up here? I am still new to Linux on VM. Any help greatfully appreciated. Thanks, Ron Henry -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Changing password on multiple zLinux servers
A little off topic, but coordinating UIDs doesn't matter to FTP because you supply a username when you login. With SCP and SFTP you can supply the username, but the default is the name you logged in with, but it does not use the UID (it uses the name). However, TAR and PAX archives store the UID (depending on some command line options), so they tend to cause the owner of a file to be wrong when restored on a different system then the one they were created. Basically it is a good idea to coordinate all the UIDs on all systems to avoid problems. -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] Behalf Of RPN01 Sent: Friday, October 26, 2007 6:28 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Changing password on multiple zLinux servers Actually, for users across multiple systems, I think LDAP is your friend. You can restrict users to specific Linux guests, a single password change effects the user across all the systems, it enforces the uid being the same across all the systems (important if you use nfs or ftp...) and you have a single point for account maintenance. There's some effort in setting it up, but in the end, it will save you considerable time. -- .~.Robert P. Nix Mayo Foundation /V\RO-OE-5-55200 First Street SW /( )\ 507-284-0844 Rochester, MN 55905 ^^-^^ - "In theory, theory and practice are the same, but in practice, theory and practice are different." On 10/26/07 8:17 AM, "CHAPLIN, JAMES (CTR)" <[EMAIL PROTECTED]> wrote: > Running zLinux as Guests on zVM is fantastic until it comes time to > reset your password across multiple servers. The guest servers are > multiply like rabbits. We are a shop new to Linux on the mainframe and > have a question. > > Is there a way to apply without using LDAP, or to issue a series of > commands like passwd across multiple servers either through SSH or other > method from a single server. Where should I point my "learning curve" to > resolve this? I am new to scripting, but how different from REXX can it > be? > > Thanks in advance for any comments and insight > James Chaplin > Systems Programmer > USCBP > > -- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 CONFIDENTIALITY NOTICE: This email from the State of California is for the sole use of the intended recipient and may contain confidential and privileged information. Any unauthorized review or use, including disclosure or distribution, is prohibited. If you are not the intended recipient, please contact the sender and destroy all copies of this email. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Changing password on multiple zLinux servers
To expand James' answer a bit (I've never used the chpasswd command): for I in system1 system2 system3 ; do ssh [EMAIL PROTECTED] 'echo "user:newpass" | chpasswd' done The list of systems could be given by hand, as above, or could be pulled from a file, as in "for I in `cat system.names` ; do" (not sure what the various e-mail programs will do with that, but those are back-ticks around the cat command. You can speed this process up by trading a public key with all the servers involved, such that you wouldn't need to enter a password for each server. With that in mind, it would be a better idea to use another, properly privledged userid, other than root, to perform the task. Maybe go with "ssh [EMAIL PROTECTED] 'echo "user:newpass" | sudo chpasswd'", and pass around a public key for "pswdguy". -- .~.Robert P. Nix Mayo Foundation /V\RO-OE-5-55200 First Street SW /( )\ 507-284-0844 Rochester, MN 55905 ^^-^^ - "In theory, theory and practice are the same, but in practice, theory and practice are different." On 10/26/07 8:45 AM, "Richard Lynch" <[EMAIL PROTECTED]> wrote: > CHAPLIN, JAMES (CTR) wrote: >> Running zLinux as Guests on zVM is fantastic until it comes time to >> reset your password across multiple servers. The guest servers are >> multiply like rabbits. We are a shop new to Linux on the mainframe and >> have a question. >> >> Is there a way to apply without using LDAP, or to issue a series of >> commands like passwd across multiple servers either through SSH or other >> method from a single server. Where should I point my "learning curve" to >> resolve this? I am new to scripting, but how different from REXX can it >> be? >> >> Thanks in advance for any comments and insight >> James Chaplin >> Systems Programmer >> USCBP >> >> -- >> For LINUX-390 subscribe / signoff / archive access instructions, >> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or >> visit >> http://www.marist.edu/htbin/wlvindex?LINUX-390 >> >> > LDAP is clearly the perferred solution for this situation. However, if > you don't want to do that see chpasswd. Somthing like... > > echo 'user:newpass' | chpasswd > > ... could be pushed out to the other servers using ssh. > > ~rich > > > > > -- > > -- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Changing password on multiple zLinux servers
Since you are running on VM. It should be easy to come up with an exec that would use secuser to issue passwd commands to every linux server. Calvin Fisher "CHAPLIN, JAMES (CTR)" <[EMAIL PROTECTED] To sociates.dhs.gov> LINUX-390@VM.MARIST.EDU Sent by: Linux on cc 390 Port <[EMAIL PROTECTED] Subject IST.EDU> Changing password on multiple zLinux servers 10/26/2007 09:17 AM Please respond to Linux on 390 Port <[EMAIL PROTECTED] IST.EDU> Running zLinux as Guests on zVM is fantastic until it comes time to reset your password across multiple servers. The guest servers are multiply like rabbits. We are a shop new to Linux on the mainframe and have a question. Is there a way to apply without using LDAP, or to issue a series of commands like passwd across multiple servers either through SSH or other method from a single server. Where should I point my "learning curve" to resolve this? I am new to scripting, but how different from REXX can it be? Thanks in advance for any comments and insight James Chaplin Systems Programmer USCBP -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 <><><>
Re: Changing password on multiple zLinux servers
Hi James, Maybe you can take a look at multixterm (http://expect.nist.gov/example/multixterm.man.html). I haven't used it but it seems to provide what you are looking for, before using the utility you need to install expect and tk. Regards, Jose -Original Message- From: RPN01 [mailto:[EMAIL PROTECTED] Sent: Friday, October 26, 2007 9:28 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Changing password on multiple zLinux servers Actually, for users across multiple systems, I think LDAP is your friend. You can restrict users to specific Linux guests, a single password change effects the user across all the systems, it enforces the uid being the same across all the systems (important if you use nfs or ftp...) and you have a single point for account maintenance. There's some effort in setting it up, but in the end, it will save you considerable time. -- .~.Robert P. Nix Mayo Foundation /V\RO-OE-5-55200 First Street SW /( )\ 507-284-0844 Rochester, MN 55905 ^^-^^ - "In theory, theory and practice are the same, but in practice, theory and practice are different." On 10/26/07 8:17 AM, "CHAPLIN, JAMES (CTR)" <[EMAIL PROTECTED]> wrote: > Running zLinux as Guests on zVM is fantastic until it comes time to > reset your password across multiple servers. The guest servers are > multiply like rabbits. We are a shop new to Linux on the mainframe and > have a question. > > Is there a way to apply without using LDAP, or to issue a series of > commands like passwd across multiple servers either through SSH or other > method from a single server. Where should I point my "learning curve" to > resolve this? I am new to scripting, but how different from REXX can it > be? > > Thanks in advance for any comments and insight > James Chaplin > Systems Programmer > USCBP > > -- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 Scanned by McAfee SCM1 Scanned by Triple-S SCM1 - *Attention* This electronic message, including any attachments, contains information that may be legally confidential and/or privileged. The information is intended solely for the individual or entity named above and access by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error and delete it from your system.
Re: Changing password on multiple zLinux servers
> Is there a way to apply without using LDAP, or to issue a series of > commands like passwd across multiple servers either through SSH or other > method from a single server. Where should I point my "learning curve" to There are - the cluster computing people have a pile of tools for issuing the same commands on many boxes at once and they'll work for virtual machines. That said: LDAP is probably what you want to consider instead as its designed for this sort of central management. See: http://www.netfort.gr.jp/~dancer/software/dsh.html http://www.cyberciti.biz/tips/execute-commands-on-multiple-hosts-using-expect-tool-part-iii.html -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Changing password on multiple zLinux servers
CHAPLIN, JAMES (CTR) wrote: Running zLinux as Guests on zVM is fantastic until it comes time to reset your password across multiple servers. The guest servers are multiply like rabbits. We are a shop new to Linux on the mainframe and have a question. Is there a way to apply without using LDAP, or to issue a series of commands like passwd across multiple servers either through SSH or other method from a single server. Where should I point my "learning curve" to resolve this? I am new to scripting, but how different from REXX can it be? Thanks in advance for any comments and insight James Chaplin Systems Programmer USCBP -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 LDAP is clearly the perferred solution for this situation. However, if you don't want to do that see chpasswd. Somthing like... echo 'user:newpass' | chpasswd ... could be pushed out to the other servers using ssh. ~rich -- -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Changing password on multiple zLinux servers
Actually, for users across multiple systems, I think LDAP is your friend. You can restrict users to specific Linux guests, a single password change effects the user across all the systems, it enforces the uid being the same across all the systems (important if you use nfs or ftp...) and you have a single point for account maintenance. There's some effort in setting it up, but in the end, it will save you considerable time. -- .~.Robert P. Nix Mayo Foundation /V\RO-OE-5-55200 First Street SW /( )\ 507-284-0844 Rochester, MN 55905 ^^-^^ - "In theory, theory and practice are the same, but in practice, theory and practice are different." On 10/26/07 8:17 AM, "CHAPLIN, JAMES (CTR)" <[EMAIL PROTECTED]> wrote: > Running zLinux as Guests on zVM is fantastic until it comes time to > reset your password across multiple servers. The guest servers are > multiply like rabbits. We are a shop new to Linux on the mainframe and > have a question. > > Is there a way to apply without using LDAP, or to issue a series of > commands like passwd across multiple servers either through SSH or other > method from a single server. Where should I point my "learning curve" to > resolve this? I am new to scripting, but how different from REXX can it > be? > > Thanks in advance for any comments and insight > James Chaplin > Systems Programmer > USCBP > > -- > For LINUX-390 subscribe / signoff / archive access instructions, > send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Changing password on multiple zLinux servers
Running zLinux as Guests on zVM is fantastic until it comes time to reset your password across multiple servers. The guest servers are multiply like rabbits. We are a shop new to Linux on the mainframe and have a question. Is there a way to apply without using LDAP, or to issue a series of commands like passwd across multiple servers either through SSH or other method from a single server. Where should I point my "learning curve" to resolve this? I am new to scripting, but how different from REXX can it be? Thanks in advance for any comments and insight James Chaplin Systems Programmer USCBP -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
