Re: hsi0 and SuSE
Mark In my case, putting in the chanids (space separated) makes things work. Leaving it blank, or using commas to separate them makes things fail. The YAST netwrok screen GUI lists them in line item order. There are no space or commas. IBM OSA Express Network card (0.0.7000)│20.15.36.52 IBM Hipersocket (0.0.f506) │192.0.1.52 IBM Hipersocket (0.0.f507) │ IBM Hipersocket (0.0.f508) │ IBM OSA Express Network card (0.0.1000)│Not configured IBM OSA Express Network card (0.0.1001)│Not configured IBM OSA Express Network card (0.0.1002)│Not configured IBM IUCV │Not configured Prior to the mitigation performed this list looked the same except for the IP address for Hipersocket. It was stated as Not Configured prior to the action we took. So again I see two SuSE problems. 1 - 3 IO addresses listed after configuration. 2 - I see no space or commas and the action we needed to perform. 'Where ever you go - There you are!! ' Richard (Gaz) Gasiorowski Global Solutions Technology Principal Lead Infrastructure Architect CSC 3170 Fairview Park Dr., Falls Church, VA 22042 845-773-9243 Work|845-392-7889 Cell|[EMAIL PROTECTED]|www.csc.com This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. Mark Post [EMAIL PROTECTED] Sent by: Linux on 390 Port LINUX-390@VM.MARIST.EDU 09/24/2008 04:34 PM Please respond to Linux on 390 Port LINUX-390@VM.MARIST.EDU To LINUX-390@VM.MARIST.EDU cc Subject Re: hsi0 and SuSE On 9/24/2008 at 3:44 PM, in message [EMAIL PROTECTED], Richard Gasiorowski [EMAIL PROTECTED] wrote: No the Chandids were there correctly - in fact that appears to be an issue. Why should the behavior of hsi be any different then OSA? You do not see 3 addresses for OSA. Do you agree this a SUSE bug? I'm not sure, since I don't experience the same problem you do. In my case, putting in the chanids (space separated) makes things work. Leaving it blank, or using commas to separate them makes things fail. So, from my perspective, the bug is in the field not being pre-populated by YaST. Comparing the contents of the resulting file in /etc/sysconfig/hardware/hwcfg-qeth-ccw-??? against a working one would be useful. In any case, there is a bug in there somewhere. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Linux reiserfs mounting issue - system hangs
I’m trying to recover a linux SLES9 system using a linux starter system (drstartr). Once I get the environment setup I will use Upstream to recover the data. But first I’ve got to create the dasd and partitions. The system I am trying to recover has a device 0100 on ECKD. No problem creating, mounting, and restoring to 0106. The 0106 has a ext3 filesystem. The system that i need to recover has a 0e00 FBA on the 2107 DS8000 – SCSI and the size is 100g. I have attached 0e20 to the drstartr as 0107 and am trying to recover to that. 0107 has a reiser filesystem. I can’t even get the filesystem mounted without the system hanging. Below is what I’ve done. Obviously, I’ve done something wrong. OR there is something I just don’t know to do. I have logged into the DS8000 and I created a 100g lun by issuing the mkfbvol command. I then issued the chvolgrp adding it to the volume group defined. I can do a showfbvol and I see the lun. dscli showfbvol -dev IBM.2107-75DLAP1 000F Date/Time: September 25, 2008 7:58:55 AM EDT IBM DSCLI Version: 5.1.720.145 DS: IBM.2107-75DLAP1 Name lnxvol_31 ID 000F accstate Online datastateNormal configstate Normal deviceMTM2107-900 datatype FB 512 addrgrp 0 extpool P0 exts 100 captype DS cap (2^30B) 100.0 cap (10^9B) - cap (blocks) 209715200 volgrp V0 ranks1 I’ve issued set edev commands. EDEV 0E20 TYPE FBA ATTRIBUTES 2107 VENDOR: IBM PRODUCT: 2107900 REVISION: .686 BLOCKSIZE: 512 NUMBER OF BLOCKS: 209715200 PATHS: FCP_DEV: 0A20 WWPN: 50050763051301F6 LUN: 4000400F CONNECTION TYPE: SWITCHED FCP_DEV: 0A20 WWPN: 50050763051801F6 LUN: 4000400F CONNECTION TYPE: SWITCHED FCP_DEV: 0B20 WWPN: 50050763051341F6 LUN: 4000400F CONNECTION TYPE: SWITCHED FCP_DEV: 0B20 WWPN: 50050763051841F6 LUN: 4000400F CONNECTION TYPE: SWITCHED I”ve attached 0e20 to drstartr as 0107 I’ve put the device online to the drstartr system using the chccwdev –e 0.0.0107 command I invoked YAST and I performed a dasdfmt on disk /dev/dasdh and I created a partition /dev/dasdh1. FDASD failed for unknown reason was return from YAST. I assumed it was because it was not an ECKD device. For some reason I think I don’t need to format FBA/SCSI.. I mounted /dev/dasdh1 /mnt/susan I issued the mkreiserfs –b 512 –d /dev/dasdh1 I rebooted drstartr I put 0107 online to drstartr using the chccwdev command I issued the mount /dev/dasdh1 /mnt/susan AND the system hangs. You can’t putty into the system. The system is non-responsive. I have to issue the force drstartr logoff immediate command and xautlog drstartr to get the system back. I will admit that I am in way over my head. I’m thinking I need to format /dev/dasdh??? I really don’t know and I am hoping someone does. Thank you, in advance, for your help. Mary Elwood Navy Federal
Re: Linux reiserfs mounting issue - system hangs
Mary, I am not familiar with FBA devices, but I have done some work with Upstream recovery. Are you planning on using FDR/Upstream to perform the recovery? If so Upstream is file based, not filesystem based. That is you might not have to restore your 100G file system to reiser, you might try ext3. Maybe there is an FDR/Upstream guru out here who could answer that question. I mounted /dev/dasdh1 /mnt/susan I issued the mkreiserfs –b 512 –d /dev/dasdh1 According to the device drivers (Preparing an FBA type dasd for use) manual, you create the filesystem then mount it. I issued the mkreiserfs –b 512 –d /dev/dasdh1 I rebooted drstartr I put 0107 online to drstartr using the chccwdev command At the point at which you have created the reiserfs and did the reboot. You are using chccwdev to put 0107 online. Instead of doing the chccwdev, have you tried dasd_configure 0.0.0107 1 0. Then have you tried to do a /cat/proc/dasd/devices to verify that 0107 is alive? (I have experienced similar hangs when I would detach a drive before I unmounted the filesystem on the drive.) When you experience the hang, what does the drstrtr (3270) console have on it. I work with ECKD devices and sometimes when working with unformatted devices with the console attached to my PC, I get a lot of messages coming up on the 3270 console. I have to work through them before my system will come unhung. Do you have any sort of performance monitor? When the system hangs, what does your performance monitor say is going on. Ron Foster Mary Elwood wrote: I’m trying to recover a linux SLES9 system using a linux starter system (drstartr). Once I get the environment setup I will use Upstream to recover the data. But first I’ve got to create the dasd and partitions. The system I am trying to recover has a device 0100 on ECKD. No problem creating, mounting, and restoring to 0106. The 0106 has a ext3 filesystem. The system that i need to recover has a 0e00 FBA on the 2107 DS8000 – SCSI and the size is 100g. I have attached 0e20 to the drstartr as 0107 and am trying to recover to that. 0107 has a reiser filesystem. I can’t even get the filesystem mounted without the system hanging. Below is what I’ve done. Obviously, I’ve done something wrong. OR there is something I just don’t know to do. I have logged into the DS8000 and I created a 100g lun by issuing the mkfbvol command. I then issued the chvolgrp adding it to the volume group defined. I can do a showfbvol and I see the lun. dscli showfbvol -dev IBM.2107-75DLAP1 000F Date/Time: September 25, 2008 7:58:55 AM EDT IBM DSCLI Version: 5.1.720.145 DS: IBM.2107-75DLAP1 Name lnxvol_31 ID 000F accstate Online datastateNormal configstate Normal deviceMTM2107-900 datatype FB 512 addrgrp 0 extpool P0 exts 100 captype DS cap (2^30B) 100.0 cap (10^9B) - cap (blocks) 209715200 volgrp V0 ranks1 I’ve issued set edev commands. EDEV 0E20 TYPE FBA ATTRIBUTES 2107 VENDOR: IBM PRODUCT: 2107900 REVISION: .686 BLOCKSIZE: 512 NUMBER OF BLOCKS: 209715200 PATHS: FCP_DEV: 0A20 WWPN: 50050763051301F6 LUN: 4000400F CONNECTION TYPE: SWITCHED FCP_DEV: 0A20 WWPN: 50050763051801F6 LUN: 4000400F CONNECTION TYPE: SWITCHED FCP_DEV: 0B20 WWPN: 50050763051341F6 LUN: 4000400F CONNECTION TYPE: SWITCHED FCP_DEV: 0B20 WWPN: 50050763051841F6 LUN: 4000400F CONNECTION TYPE: SWITCHED I”ve attached 0e20 to drstartr as 0107 I’ve put the device online to the drstartr system using the chccwdev –e 0.0.0107 command I invoked YAST and I performed a dasdfmt on disk /dev/dasdh and I created a partition /dev/dasdh1. FDASD failed for unknown reason was return from YAST. I assumed it was because it was not an ECKD device. For some reason I think I don’t need to format FBA/SCSI.. I mounted /dev/dasdh1 /mnt/susan I issued the mkreiserfs –b 512 –d /dev/dasdh1 I rebooted drstartr I put 0107 online to drstartr using the chccwdev command I issued the mount /dev/dasdh1 /mnt/susan AND the system hangs. You can’t putty into the system. The system is non-responsive. I have to issue the force drstartr logoff immediate command and xautlog drstartr to get the system back. I will admit that I am in way over my head. I’m thinking I need to format /dev/dasdh??? I really don’t know and I am hoping someone does. Thank you, in advance, for your help. Mary Elwood Navy Federal -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux reiserfs mounting issue - system hangs
Mary, Don't have to run dasdfmt against fba dasd. What's drstartr virtual machine's memory size? Is dbstrtr a RAM-based system? I've had RAM-based rescue system's hang like you described when they don't have enough memory. Give it at least a couple 100MB of memory, or a GB and try again. This e-mail, including any attachments, may be confidential, privileged or otherwise legally protected. It is intended only for the addressee. If you received this e-mail in error or from someone who was not authorized to send it to you, do not disseminate, copy or otherwise use this e-mail or its attachments. Please notify the sender immediately by reply e-mail and delete the e-mail from your system. -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Mary Elwood Sent: Thursday, September 25, 2008 8:47 AM To: LINUX-390@VM.MARIST.EDU Subject: Linux reiserfs mounting issue - system hangs I'm trying to recover a linux SLES9 system using a linux starter system (drstartr). Once I get the environment setup I will use Upstream to recover the data. But first I've got to create the dasd and partitions. The system I am trying to recover has a device 0100 on ECKD. No problem creating, mounting, and restoring to 0106. The 0106 has a ext3 filesystem. The system that i need to recover has a 0e00 FBA on the 2107 DS8000 - SCSI and the size is 100g. I have attached 0e20 to the drstartr as 0107 and am trying to recover to that. 0107 has a reiser filesystem. I can't even get the filesystem mounted without the system hanging. Below is what I've done. Obviously, I've done something wrong. OR there is something I just don't know to do. -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
question about sudo
(rant on)I am trying to protect the system from an incompetent manager making a bad decision about an operator(rant off). Anyway so the operator doen't have to log into root I'm trying to setup sudo to perform several commands. To shorten the keying I have setup cmnd alias ,but when I try to execute the alias i get command not found. So here is my sudo file: Host_Alias IMAGE1 = xx.xx.xx.xxx # User alias specification User_Alias IMAGEUSR1= oper1 # Cmnd alias specification Cmnd_Alias SHUTL2 = /sbin/shutdown -r 0 Cmnd_Alias CMSDOWN = /opt/scripts/cmsshutdown.sh # Defaults specification Defaults targetpw,insults# ask for the password of the target user i.e. root %users ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'! # User privilege specification # You should not use sudo as root in an SELinux environment # If you use SELinux, remove the following line rootALL=(ALL) ALL oper1 ALL=/sbin/shutdown -h now,!/usr/bin/passwd root, !/bin/rm, \ SHUTL2, CMSDOWN # Uncomment to allow people in group wheel to run all commands # %wheelALL=(ALL) ALL # Same thing without a password # %wheelALL=(ALL) NOPASSWD: ALL I've done the sudo -K to bring in the changes but when I do a sudo -l I get: User oper1 may run the following commands on this host: (ALL) ALL (root) /sbin/shutdown -h now (root) !/usr/bin/passwd root (root) !/bin/rm (root) /sbin/shutdown -r 0 Why is it showing the commands and not the alias? thanks Mace -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: question about sudo
Isn't that what you want to see? The resolution of all the aliases and the final result? That's what I'd want to see - sanity check to make sure the aliases are resolving...And in this case it looks like SHUTL2 is resolving but CMSDOWN is not.. Scott Rohling (resending -- for some reason my reply just went directly to ljmace the first time) On Thu, Sep 25, 2008 at 8:53 AM, LJ Mace [EMAIL PROTECTED] wrote: (rant on)I am trying to protect the system from an incompetent manager making a bad decision about an operator(rant off). Anyway so the operator doen't have to log into root I'm trying to setup sudo to perform several commands. To shorten the keying I have setup cmnd alias ,but when I try to execute the alias i get command not found. So here is my sudo file: Host_Alias IMAGE1 = xx.xx.xx.xxx # User alias specification User_Alias IMAGEUSR1= oper1 # Cmnd alias specification Cmnd_Alias SHUTL2 = /sbin/shutdown -r 0 Cmnd_Alias CMSDOWN = /opt/scripts/cmsshutdown.sh # Defaults specification Defaults targetpw,insults# ask for the password of the target user i.e. root %users ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'! # User privilege specification # You should not use sudo as root in an SELinux environment # If you use SELinux, remove the following line rootALL=(ALL) ALL oper1 ALL=/sbin/shutdown -h now,!/usr/bin/passwd root, !/bin/rm, \ SHUTL2, CMSDOWN # Uncomment to allow people in group wheel to run all commands # %wheelALL=(ALL) ALL # Same thing without a password # %wheelALL=(ALL) NOPASSWD: ALL I've done the sudo -K to bring in the changes but when I do a sudo -l I get: User oper1 may run the following commands on this host: (ALL) ALL (root) /sbin/shutdown -h now (root) !/usr/bin/passwd root (root) !/bin/rm (root) /sbin/shutdown -r 0 Why is it showing the commands and not the alias? thanks Mace -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: question about sudo
But when I sudo SHUTL2 I get: sudo: SHUTL2: command not found Mace --- On Thu, 9/25/08, Scott Rohling [EMAIL PROTECTED] wrote: From: Scott Rohling [EMAIL PROTECTED] Subject: Re: question about sudo To: LINUX-390@VM.MARIST.EDU Date: Thursday, September 25, 2008, 11:06 AM Isn't that what you want to see? The resolution of all the aliases and the final result? That's what I'd want to see - sanity check to make sure the aliases are resolving...And in this case it looks like SHUTL2 is resolving but CMSDOWN is not.. Scott Rohling (resending -- for some reason my reply just went directly to ljmace the first time) On Thu, Sep 25, 2008 at 8:53 AM, LJ Mace [EMAIL PROTECTED] wrote: (rant on)I am trying to protect the system from an incompetent manager making a bad decision about an operator(rant off). Anyway so the operator doen't have to log into root I'm trying to setup sudo to perform several commands. To shorten the keying I have setup cmnd alias ,but when I try to execute the alias i get command not found. So here is my sudo file: Host_Alias IMAGE1 = xx.xx.xx.xxx # User alias specification User_Alias IMAGEUSR1= oper1 # Cmnd alias specification Cmnd_Alias SHUTL2 = /sbin/shutdown -r 0 Cmnd_Alias CMSDOWN = /opt/scripts/cmsshutdown.sh # Defaults specification Defaults targetpw,insults# ask for the password of the target user i.e. root %users ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'! # User privilege specification # You should not use sudo as root in an SELinux environment # If you use SELinux, remove the following line rootALL=(ALL) ALL oper1 ALL=/sbin/shutdown -h now,!/usr/bin/passwd root, !/bin/rm, \ SHUTL2, CMSDOWN # Uncomment to allow people in group wheel to run all commands # %wheelALL=(ALL) ALL # Same thing without a password # %wheelALL=(ALL) NOPASSWD: ALL I've done the sudo -K to bring in the changes but when I do a sudo -l I get: User oper1 may run the following commands on this host: (ALL) ALL (root) /sbin/shutdown -h now (root) !/usr/bin/passwd root (root) !/bin/rm (root) /sbin/shutdown -r 0 Why is it showing the commands and not the alias? thanks Mace -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Update mySql on Slack/390
I would like to upgrade to the latest version on MySql on my Slack/390 10.1 system. It there a prebuilt package out there that I can install. Thanks, Russ -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: question about sudo
Ah - well - the alias isn't for the 'sudo' command itself -- it's just for sudoers...The alias will resolve into the list of commands -- you don't actually get to use it on the command line. It's just a vehicle to help you code sudoers more efficiently - not to provide an alias when you issue commands. Make sense? Scott Rohling On Thu, Sep 25, 2008 at 9:22 AM, LJ Mace [EMAIL PROTECTED] wrote: But when I sudo SHUTL2 I get: sudo: SHUTL2: command not found Mace --- On Thu, 9/25/08, Scott Rohling [EMAIL PROTECTED] wrote: From: Scott Rohling [EMAIL PROTECTED] Subject: Re: question about sudo To: LINUX-390@VM.MARIST.EDU Date: Thursday, September 25, 2008, 11:06 AM Isn't that what you want to see? The resolution of all the aliases and the final result? That's what I'd want to see - sanity check to make sure the aliases are resolving...And in this case it looks like SHUTL2 is resolving but CMSDOWN is not.. Scott Rohling (resending -- for some reason my reply just went directly to ljmace the first time) On Thu, Sep 25, 2008 at 8:53 AM, LJ Mace [EMAIL PROTECTED] wrote: (rant on)I am trying to protect the system from an incompetent manager making a bad decision about an operator(rant off). Anyway so the operator doen't have to log into root I'm trying to setup sudo to perform several commands. To shorten the keying I have setup cmnd alias ,but when I try to execute the alias i get command not found. So here is my sudo file: Host_Alias IMAGE1 = xx.xx.xx.xxx # User alias specification User_Alias IMAGEUSR1= oper1 # Cmnd alias specification Cmnd_Alias SHUTL2 = /sbin/shutdown -r 0 Cmnd_Alias CMSDOWN = /opt/scripts/cmsshutdown.sh # Defaults specification Defaults targetpw,insults# ask for the password of the target user i.e. root %users ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'! # User privilege specification # You should not use sudo as root in an SELinux environment # If you use SELinux, remove the following line rootALL=(ALL) ALL oper1 ALL=/sbin/shutdown -h now,!/usr/bin/passwd root, !/bin/rm, \ SHUTL2, CMSDOWN # Uncomment to allow people in group wheel to run all commands # %wheelALL=(ALL) ALL # Same thing without a password # %wheelALL=(ALL) NOPASSWD: ALL I've done the sudo -K to bring in the changes but when I do a sudo -l I get: User oper1 may run the following commands on this host: (ALL) ALL (root) /sbin/shutdown -h now (root) !/usr/bin/passwd root (root) !/bin/rm (root) /sbin/shutdown -r 0 Why is it showing the commands and not the alias? thanks Mace -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: question about sudo
now I see said the blind man. I was hoping to make it very,very simple Mace --- On Thu, 9/25/08, Scott Rohling [EMAIL PROTECTED] wrote: From: Scott Rohling [EMAIL PROTECTED] Subject: Re: question about sudo To: LINUX-390@VM.MARIST.EDU Date: Thursday, September 25, 2008, 11:33 AM Ah - well - the alias isn't for the 'sudo' command itself -- it's just for sudoers...The alias will resolve into the list of commands -- you don't actually get to use it on the command line. It's just a vehicle to help you code sudoers more efficiently - not to provide an alias when you issue commands. Make sense? Scott Rohling On Thu, Sep 25, 2008 at 9:22 AM, LJ Mace [EMAIL PROTECTED] wrote: But when I sudo SHUTL2 I get: sudo: SHUTL2: command not found Mace --- On Thu, 9/25/08, Scott Rohling [EMAIL PROTECTED] wrote: From: Scott Rohling [EMAIL PROTECTED] Subject: Re: question about sudo To: LINUX-390@VM.MARIST.EDU Date: Thursday, September 25, 2008, 11:06 AM Isn't that what you want to see? The resolution of all the aliases and the final result? That's what I'd want to see - sanity check to make sure the aliases are resolving...And in this case it looks like SHUTL2 is resolving but CMSDOWN is not.. Scott Rohling (resending -- for some reason my reply just went directly to ljmace the first time) On Thu, Sep 25, 2008 at 8:53 AM, LJ Mace [EMAIL PROTECTED] wrote: (rant on)I am trying to protect the system from an incompetent manager making a bad decision about an operator(rant off). Anyway so the operator doen't have to log into root I'm trying to setup sudo to perform several commands. To shorten the keying I have setup cmnd alias ,but when I try to execute the alias i get command not found. So here is my sudo file: Host_Alias IMAGE1 = xx.xx.xx.xxx # User alias specification User_Alias IMAGEUSR1= oper1 # Cmnd alias specification Cmnd_Alias SHUTL2 = /sbin/shutdown -r 0 Cmnd_Alias CMSDOWN = /opt/scripts/cmsshutdown.sh # Defaults specification Defaults targetpw,insults# ask for the password of the target user i.e. root %users ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'! # User privilege specification # You should not use sudo as root in an SELinux environment # If you use SELinux, remove the following line rootALL=(ALL) ALL oper1 ALL=/sbin/shutdown -h now,!/usr/bin/passwd root, !/bin/rm, \ SHUTL2, CMSDOWN # Uncomment to allow people in group wheel to run all commands # %wheelALL=(ALL) ALL # Same thing without a password # %wheelALL=(ALL) NOPASSWD: ALL I've done the sudo -K to bring in the changes but when I do a sudo -l I get: User oper1 may run the following commands on this host: (ALL) ALL (root) /sbin/shutdown -h now (root) !/usr/bin/passwd root (root) !/bin/rm (root) /sbin/shutdown -r 0 Why is it showing the commands and not the alias? thanks Mace -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: question about sudo
To further explain -- you would normally use an alias in sudoers to point to a list of commands ... Cmnd_Alias OPCMDS = /opt/scripts/cmsshutdown.sh, /sbin/shutdown -h now, /sbin/shutdown -r now Then use that allias throughout the sudoers file: oper1 ALL=OPCMDS Scott Rohling On Thu, Sep 25, 2008 at 9:33 AM, Scott Rohling [EMAIL PROTECTED]wrote: Ah - well - the alias isn't for the 'sudo' command itself -- it's just for sudoers...The alias will resolve into the list of commands -- you don't actually get to use it on the command line. It's just a vehicle to help you code sudoers more efficiently - not to provide an alias when you issue commands. Make sense? Scott Rohling On Thu, Sep 25, 2008 at 9:22 AM, LJ Mace [EMAIL PROTECTED] wrote: But when I sudo SHUTL2 I get: sudo: SHUTL2: command not found Mace --- On Thu, 9/25/08, Scott Rohling [EMAIL PROTECTED] wrote: From: Scott Rohling [EMAIL PROTECTED] Subject: Re: question about sudo To: LINUX-390@VM.MARIST.EDU Date: Thursday, September 25, 2008, 11:06 AM Isn't that what you want to see? The resolution of all the aliases and the final result? That's what I'd want to see - sanity check to make sure the aliases are resolving...And in this case it looks like SHUTL2 is resolving but CMSDOWN is not.. Scott Rohling (resending -- for some reason my reply just went directly to ljmace the first time) On Thu, Sep 25, 2008 at 8:53 AM, LJ Mace [EMAIL PROTECTED] wrote: (rant on)I am trying to protect the system from an incompetent manager making a bad decision about an operator(rant off). Anyway so the operator doen't have to log into root I'm trying to setup sudo to perform several commands. To shorten the keying I have setup cmnd alias ,but when I try to execute the alias i get command not found. So here is my sudo file: Host_Alias IMAGE1 = xx.xx.xx.xxx # User alias specification User_Alias IMAGEUSR1= oper1 # Cmnd alias specification Cmnd_Alias SHUTL2 = /sbin/shutdown -r 0 Cmnd_Alias CMSDOWN = /opt/scripts/cmsshutdown.sh # Defaults specification Defaults targetpw,insults# ask for the password of the target user i.e. root %users ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'! # User privilege specification # You should not use sudo as root in an SELinux environment # If you use SELinux, remove the following line rootALL=(ALL) ALL oper1 ALL=/sbin/shutdown -h now,!/usr/bin/passwd root, !/bin/rm, \ SHUTL2, CMSDOWN # Uncomment to allow people in group wheel to run all commands # %wheelALL=(ALL) ALL # Same thing without a password # %wheelALL=(ALL) NOPASSWD: ALL I've done the sudo -K to bring in the changes but when I do a sudo -l I get: User oper1 may run the following commands on this host: (ALL) ALL (root) /sbin/shutdown -h now (root) !/usr/bin/passwd root (root) !/bin/rm (root) /sbin/shutdown -r 0 Why is it showing the commands and not the alias? thanks Mace -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux reiserfs mounting issue - system hangs
On 9/25/2008 at 8:46 AM, in message [EMAIL PROTECTED], Mary Elwood [EMAIL PROTECTED] wrote: -snip- I invoked YAST and I performed a dasdfmt on disk /dev/dasdh and I created a partition /dev/dasdh1. FDASD failed for unknown reason was return from YAST. I assumed it was because it was not an ECKD device. For some reason I think I don*t need to format FBA/SCSI.. Both the dasdfmt and fdasd are unnecessary on an FBA device. When the device is detected, the kernel automatically creates the single partition. I mounted /dev/dasdh1 /mnt/susan How did you do that without first having put a file system on it? I issued the mkreiserfs *b 512 *d /dev/dasdh1 I rebooted drstartr That wasn't necessary, big warning messages from mkreiserfs to the contrary. (Who thought that putting out ATTENTION: YOU SHOULD REBOOT AFTER FDISK! during a mkreiserfs command was a good idea?) I put 0107 online to drstartr using the chccwdev command I issued the mount /dev/dasdh1 /mnt/susan AND the system hangs. You can*t putty into the system. The system is non-responsive. I have to issue the force drstartr logoff immediate command and xautlog drstartr to get the system back. What does your z/VM performance monitor say this guest is doing? I agree with John that it's likely your system is thrashing itself to death from not having enough virtual storage defined to it. If so, that should show up on your monitor. If that's not it, then we may need to get into some magic sysrq key stuff. Do you have a support contract with anyone? Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: question about sudo
You know I've read a lot on sudo but this was never explained so well or if it was I missed it. You have turned on another light. Thanks Scott Mace --- On Thu, 9/25/08, Scott Rohling [EMAIL PROTECTED] wrote: From: Scott Rohling [EMAIL PROTECTED] Subject: Re: question about sudo To: LINUX-390@VM.MARIST.EDU Date: Thursday, September 25, 2008, 11:42 AM To further explain -- you would normally use an alias in sudoers to point to a list of commands ... Cmnd_Alias OPCMDS = /opt/scripts/cmsshutdown.sh, /sbin/shutdown -h now, /sbin/shutdown -r now Then use that allias throughout the sudoers file: oper1 ALL=OPCMDS Scott Rohling On Thu, Sep 25, 2008 at 9:33 AM, Scott Rohling [EMAIL PROTECTED]wrote: Ah - well - the alias isn't for the 'sudo' command itself -- it's just for sudoers...The alias will resolve into the list of commands -- you don't actually get to use it on the command line. It's just a vehicle to help you code sudoers more efficiently - not to provide an alias when you issue commands. Make sense? Scott Rohling On Thu, Sep 25, 2008 at 9:22 AM, LJ Mace [EMAIL PROTECTED] wrote: But when I sudo SHUTL2 I get: sudo: SHUTL2: command not found Mace --- On Thu, 9/25/08, Scott Rohling [EMAIL PROTECTED] wrote: From: Scott Rohling [EMAIL PROTECTED] Subject: Re: question about sudo To: LINUX-390@VM.MARIST.EDU Date: Thursday, September 25, 2008, 11:06 AM Isn't that what you want to see? The resolution of all the aliases and the final result? That's what I'd want to see - sanity check to make sure the aliases are resolving...And in this case it looks like SHUTL2 is resolving but CMSDOWN is not.. Scott Rohling (resending -- for some reason my reply just went directly to ljmace the first time) On Thu, Sep 25, 2008 at 8:53 AM, LJ Mace [EMAIL PROTECTED] wrote: (rant on)I am trying to protect the system from an incompetent manager making a bad decision about an operator(rant off). Anyway so the operator doen't have to log into root I'm trying to setup sudo to perform several commands. To shorten the keying I have setup cmnd alias ,but when I try to execute the alias i get command not found. So here is my sudo file: Host_Alias IMAGE1 = xx.xx.xx.xxx # User alias specification User_Alias IMAGEUSR1= oper1 # Cmnd alias specification Cmnd_Alias SHUTL2 = /sbin/shutdown -r 0 Cmnd_Alias CMSDOWN = /opt/scripts/cmsshutdown.sh # Defaults specification Defaults targetpw,insults# ask for the password of the target user i.e. root %users ALL=(ALL) ALL # WARNING! Only use this together with 'Defaults targetpw'! # User privilege specification # You should not use sudo as root in an SELinux environment # If you use SELinux, remove the following line rootALL=(ALL) ALL oper1 ALL=/sbin/shutdown -h now,!/usr/bin/passwd root, !/bin/rm, \ SHUTL2, CMSDOWN # Uncomment to allow people in group wheel to run all commands # %wheelALL=(ALL) ALL # Same thing without a password # %wheelALL=(ALL) NOPASSWD: ALL I've done the sudo -K to bring in the changes but when I do a sudo -l I get: User oper1 may run the following commands on this host: (ALL) ALL (root) /sbin/shutdown -h now (root) !/usr/bin/passwd root (root) !/bin/rm (root) /sbin/shutdown -r 0 Why is it showing the commands and not the alias? thanks Mace -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
Re: question about sudo
now I see said the blind man. I was hoping to make it very,very simple Suggestion: Write some small scripts with the command names you want, stash them somewhere, and have the aliases call those scripts. You can then authorize appropriately in sudoers. Also lets it warn you when J. Random Luser decides to do something stupid. -- db -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Update mySql on Slack/390
On 9/25/2008 at 11:25 AM, in message [EMAIL PROTECTED], Jones, Russell [EMAIL PROTECTED] wrote: I would like to upgrade to the latest version on MySql on my Slack/390 10.1 system. It there a prebuilt package out there that I can install. Not at the moment. What version of MySQL are you interested in? Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Update mySql on Slack/390
It looks like 5.0 is that latest stable release. I found a s390 download on the mySql web site. The package is mysql-5.0.67-linux-s390x.tar.gz http://dev.mysql.com/get/Downloads/MySQL-5.0/mysql-5.0.67-linux-s390x.t ar.gz/from/http:/mirror.trouble-free.net/mysql_mirror/ . Should that package work? Russell Jones ANPAC System Programmer -Original Message- From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of Mark Post Sent: Thursday, September 25, 2008 11:11 AM To: LINUX-390@VM.MARIST.EDU Subject: Re: Update mySql on Slack/390 On 9/25/2008 at 11:25 AM, in message [EMAIL PROTECTED] , Jones, Russell [EMAIL PROTECTED] wrote: I would like to upgrade to the latest version on MySql on my Slack/390 10.1 system. It there a prebuilt package out there that I can install. Not at the moment. What version of MySQL are you interested in? Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux reiserfs mounting issue - system hangs
Mark Post wrote: On 9/25/2008 at 8:46 AM, in message [EMAIL PROTECTED], Mary Elwood [EMAIL PROTECTED] wrote: -snip- I invoked YAST and I performed a dasdfmt on disk /dev/dasdh and I created a partition /dev/dasdh1. FDASD failed for unknown reason was return from YAST. I assumed it was because it was not an ECKD device. For some reason I think I don*t need to format FBA/SCSI.. Both the dasdfmt and fdasd are unnecessary on an FBA device. When the device is detected, the kernel automatically creates the single partition Sometimes when I have problems with an FBA device (especially edev), and I want to wipe it clean, I zero out the beginning of the LUN and fdisk it, like so: # dd if=/dev/zero of=/dev/dasdh bs=1M count=1 # fdisk /dev/dasdh (n for new partition, p for primary, w to save and quit) # mkfs... /dev/dasdh1 -- Brad Hinson [EMAIL PROTECTED] Sr. Support Engineer Lead, System z Red Hat, Inc. (919) 754-4198 www.redhat.com/z -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Linux reiserfs mounting issue - system hangs
On Sep 25, 2008, at 10:49 AM, Mark Post wrote: That wasn't necessary, big warning messages from mkreiserfs to the contrary. (Who thought that putting out ATTENTION: YOU SHOULD REBOOT AFTER FDISK! during a mkreiserfs command was a good idea?) One might parenthetically note that Hans Reiser is no longer known for making good decisions. Me, I'd stay away from ReiserFS entirely. That's because it ate my data under heavy load. Yes, that was some time ago, yes, I don't have any reason to believe it wasn't fixed, no, I don't feel like experimenting further. Adam -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Piping dd to tar/bzip/etc for in stream compression
gah wrote: I am looking to take dd disk images of some small disk volumes and compres= s the dd output in stream rather than after the fact. Is that possible? My experiments so far seem to indicate that it needs to be a two step process.= I'd prefer that it be one step, but I've not succeeded in getting it to work with pipes. With most systems you don't need dd for disks, just for tapes. When cloning disks in Linux, I mostly use dd. Compared with tar and the like, it reduces seek time. Also, tar changes filesystem metadata (create time), and that interferes with things I want to do. I would use tar, or similar to clone disks 1. To copy a subset of the filesystem 2. To change filesystem (this rarely happens, I'm fairly happy with ext3) 3. Maybe, if I want to change the size of several filesystems on a single disk. 4. I don't know how to do it with dd, and don't want to learn just now. 5. If cloning an in-use disk. It's not usually a good idea, but if one truly knows the consequences, and the consequences are not serious, it does work. I use dd to clone a disk 1. When I don't want to change filesystems 2. When I don't want to enlarge more than one partition, and that partition is physically last. 3. I don't think it's happened yet, but copying to a smaller disk with dd can be okay. Note that use of dd may involve use of resize tools and repartitioning. Use of tar does involve repartitioning and mkfs tools. It also involves reinstalling boot loaders. -- Cheers John -- spambait [EMAIL PROTECTED] [EMAIL PROTECTED] -- Advice http://webfoot.com/advice/email.top.php http://www.catb.org/~esr/faqs/smart-questions.html http://support.microsoft.com/kb/555375 You cannot reply off-list:-) -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: question about sudo
LJ Mace wrote: (rant on)I am trying to protect the system from an incompetent manager making a bad decision about an operator(rant off). Anyway so the operator doen't have to log into root I'm trying to setup sudo to perform several commands. To shorten the keying I have setup cmnd alias ,but when I try to execute the alias i get command not found. So here is my sudo file: Host_Alias IMAGE1 = xx.xx.xx.xxx # User alias specification User_Alias IMAGEUSR1= oper1 # Cmnd alias specification Cmnd_Alias SHUTL2 = /sbin/shutdown -r 0 Cmnd_Alias CMSDOWN = /opt/scripts/cmsshutdown.sh # Defaults specification Defaults targetpw,insults# ask for the password of the target user i.e. root Before I go further, this looks like SUSE. I think that last line is broken; anyone who knows the root password can also use su. I also do not like lecture or insults, the humour wears pretty thin after 30 iterations. -- Cheers John -- spambait [EMAIL PROTECTED] [EMAIL PROTECTED] -- Advice http://webfoot.com/advice/email.top.php http://www.catb.org/~esr/faqs/smart-questions.html http://support.microsoft.com/kb/555375 You cannot reply off-list:-) -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: question about sudo
David Boyes wrote:
now I see said the blind man.
I was hoping to make it very,very simple
Suggestion: Write some small scripts with the command names you want,
stash them somewhere, and have the aliases call those scripts. You can
then authorize appropriately in sudoers. Also lets it warn you when J.
Random Luser decides to do something stupid.
You can also authorise a directory, say /usr/local/operators/bin
The scripts in that directory can do whatever their author deems
appropriate, so you'd want to be able to change its contents, but the
operator(s) would only be able to execute (maybe not list the directory,
and certainly not list the contents of files).
Review whether apparmour or selinux can assist with securing access;
note that once the user's said sudo they are root, but maybe the
security can see that it's operator who's become root.
Permissions 700, owner root on the scripts is fine, by the time it
matters the user's root.
Take care with any user input, lest you open a hole. Perl with taint is
good.
In a shell script, my first cut would be something like this:
goodchars='[-a-z][0-9]/ '
TP1=$(echo -n $1 | tr -d ${goodchars})
[ -n ${TP1} ] {echo Invalid input; exit; }
You might want more in goodchars, but you don't want any of these:-
;\\\n\r, and don't assume that list is exhaustive.
--
Cheers
John
-- spambait
[EMAIL PROTECTED] [EMAIL PROTECTED]
-- Advice
http://webfoot.com/advice/email.top.php
http://www.catb.org/~esr/faqs/smart-questions.html
http://support.microsoft.com/kb/555375
You cannot reply off-list:-)
--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Update mySql on Slack/390
Jones, Russell wrote: It looks like 5.0 is that latest stable release. I found a s390 download on the mySql web site. The package is mysql-5.0.67-linux-s390x.tar.gz http://dev.mysql.com/get/Downloads/MySQL-5.0/mysql-5.0.67-linux-s390x.t ar.gz/from/http:/mirror.trouble-free.net/mysql_mirror/ . Should that package work? Depends on the libraries it's built against. -- Cheers John -- spambait [EMAIL PROTECTED] [EMAIL PROTECTED] -- Advice http://webfoot.com/advice/email.top.php http://www.catb.org/~esr/faqs/smart-questions.html http://support.microsoft.com/kb/555375 You cannot reply off-list:-) -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
Re: Update mySql on Slack/390
On 9/25/2008 at 12:22 PM, in message [EMAIL PROTECTED], Jones, Russell [EMAIL PROTECTED] wrote: -snip- I found a s390 download on the mySql web site. The package is mysql-5.0.67-linux-s390x.tar.gz http://dev.mysql.com/get/Downloads/MySQL-5.0/mysql-5.0.67-linux-s390x.t ar.gz/from/http:/mirror.trouble-free.net/mysql_mirror/ . Should that package work? Not likely, even if it weren't a 64-bit package. If you can wait a bit, I'll have one built for you. Mark Post -- For LINUX-390 subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
