Re: zfcp wwpn change on DR site

2009-12-23 Thread Offer Baruch
Well, after consulting with Redhat, they suggested the same thing.
I will relay on the zoning definitions and define both site in
/etc/zfcp.conf.

Thank you very much!
Offer Baruch

-Original Message-
From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of
Romanowski, John (OFT)
Sent: Wednesday, December 23, 2009 6:00 PM
To: LINUX-390@VM.MARIST.EDU
Subject: Re: zfcp wwpn change on DR site

If the production and DR site's WWPN's won't be available to the guest at
same time then could you have both sets of zfcp definitions in your
/etc/zfcp.conf?
 Only one set would come online depending on whether the guest was running
at production or DR site?
  Avoids need for your /etc/udev/rules.d/55-local-zfcp-conf.rules and its
script.

> -Original Message-
> From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of
Offer
> Baruch
> Sent: Wednesday, December 23, 2009 4:06 AM
> To: LINUX-390@VM.MARIST.EDU
> Subject: Re: zfcp wwpn change on DR site
>
> Hi,
>
>
>
> After testing the solution it seems not to work.
>
> Looking at the log I can see that udev is started before the root file
> system is in read/write mode.
>
> That means that none of my changes are taking affect.
>
> Where can I see that output of my script if it is running under udev?
>
> Does anyone has another idea how to change the zfcp WWPNs without editing
> system delivered scripts?
>
>
>
> Thanks!
>
> Offer Baruch
>
>
>
> From: Offer Baruch [mailto:offerbar...@gmail.com]
> Sent: Tuesday, December 08, 2009 3:51 PM
> To: Linux on 390 Port
> Subject: Re: zfcp wwpn change on DR site
>
>
>
> That is exaclty what i was looking for!
> Can't thank you enough...
>
> Offer Baruch
>
> On Tue, Dec 8, 2009 at 2:12 PM, Christof Schmitt
>  wrote:
>
> On Mon, Dec 07, 2009 at 03:01:43PM +0200, Offer Baruch wrote:
>
> > I am using redhat v5.2.
> > my zfcp definitions are at /etc/zfcp.conf (just another text config file
> > with the WWPNs in it).
> > but i think that this file is read very early in the boot process. when?
> i
> > don't know.
> > I would like to change the file before it is read by zfcp.
>
> Looking at a Redhat system here, i find that the script
> /sbin/zfcpconf.sh reads the configuration file /etc/zfcp.conf. This
> script is run from udev when the zfcp module is loaded in the kernel:
>
> # grep -r zfcpconf.sh /etc/
> /etc/udev/rules.d/56-zfcp.rules:KERNEL=="zfcp_cfdc",
> RUN+="/sbin/zfcpconf.sh"
>
> If you wanted to change the configuration file before that step, you
> could add another file in /etc/udev/rules.d/ to run your script first,
> e.g. create a file /etc/udev/rules.d/55-local-zfcp-conf.rules with the
> line:
> KERNEL=="zfcp_cfdc", RUN+="/usr/local/sbin/update-zfcp-conf.sh"
>
> --
> Christof Schmitt


This e-mail, including any attachments, may be confidential, privileged or
otherwise legally protected. It is intended only for the addressee. If you
received this e-mail in error or from someone who was not authorized to send
it to you, do not disseminate, copy or otherwise use this e-mail or its
attachments.  Please notify the sender immediately by reply e-mail and
delete the e-mail from your system.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 9.0.722 / Virus Database: 270.14.117/2582 - Release Date: 12/22/09
20:22:00

No virus found in this outgoing message.
Checked by AVG - www.avg.com
Version: 9.0.722 / Virus Database: 270.14.117/2582 - Release Date: 12/23/09
21:02:00

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Rejected posting to LINUX-390@VM.MARIST.EDU

2009-12-23 Thread Rob van der Heij
On Thu, Dec 24, 2009 at 12:38 AM, John Summerfield
 wrote:

> I had it happen a few days ago, and I've seen in in the past. I assumed that
> the listserv got confused, or someone restored a mail queue that had already
> been processed, or something.

Yes, it happens a few days after the post. It's not uncommon for MTA's
to try delivery for a few days before giving up and apparently return
the item to the sender. I fear we need Harry or Martha to identify
which subscriber does this...

Rob

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Wolf H Rempt/Netherlands/IBM is er even niet

2009-12-23 Thread Wolf H Rempt
I will be out of the office starting  24-12-2009 and will not return until
04-01-2010.

Ik ben onderweg - maar zal regelmatig mijn mail checken - voor zeer urgente
zaken neem aub contact op met Cor van der Struijf

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: How to set up a common USER home directory across multiple zLinux Guests

2009-12-23 Thread Raymond Higgs
Linux on 390 Port  wrote on 12/23/2009 08:45:25
PM:

> Patrick Spinler 
> Sent by: Linux on 390 Port 
>
> 12/23/2009 08:45 PM
>
> Please respond to
> Linux on 390 Port 
>
> To
>
> LINUX-390@VM.MARIST.EDU
>
> cc
>
> Subject
>
> Re: How to set up a common USER home directory across multiple zLinux
Guests
>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Shane Ginnane wrote:
> > Wasn't this what {Open}AFS was designed for ?.
>
> Note that AFS requires kerberos.  It's not a bad place to be at, but is
> a complex pre-requisite.
>
> Also AFS has different file permission semantics's than the 'normal'
> unix model.  Specifically an AFS acl applies to a directory and all
> files it contains, but never to an individual file.  This makes dirs
> that need a mix of private and public files (e.g. $HOME/.xauthority,
> $HOME/.ssh/*_key) tricky to implement.
>
> I'd really like a system with AFS's namespaces, kerberos authentication,
> server redundancy, and client caching, but NFSv4's more unix like
> permisions model + ACL's.
>
> - -- Pat
>
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.4.9 (Darwin)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAksyx7UACgkQNObCqA8uBsyBmQCcD0D9Fw2GPhvkLBWwu7skCbuF
> n4UAn0AV+ZDhceDl2+F/QYvMWxaHfDdy
> =zdRr
> -END PGP SIGNATURE-
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390

Pat,

You'll probably find appendix B of this Redbook interesting:

http://www.redbooks.ibm.com/redpieces/abstracts/sg246657.html

A lot of the development groups inside IBM have slowly been migrating from
AFS to GSA for the last 5 years.  GSA has most of the things in your wish
list.

Regards,

Ray Higgs
System z FCP Development
Bld. 706, B24
2455 South Road
Poughkeepsie, NY 12601
(845) 435-8666,  T/L 295-8666
rayhi...@us.ibm.com

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: How to set up a common USER home directory across multiple zLinux Guests

2009-12-23 Thread Patrick Spinler
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Shane Ginnane wrote:
> Wasn't this what {Open}AFS was designed for ?.

Note that AFS requires kerberos.  It's not a bad place to be at, but is
a complex pre-requisite.

Also AFS has different file permission semantics's than the 'normal'
unix model.  Specifically an AFS acl applies to a directory and all
files it contains, but never to an individual file.  This makes dirs
that need a mix of private and public files (e.g. $HOME/.xauthority,
$HOME/.ssh/*_key) tricky to implement.

I'd really like a system with AFS's namespaces, kerberos authentication,
server redundancy, and client caching, but NFSv4's more unix like
permisions model + ACL's.

- -- Pat

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAksyx7UACgkQNObCqA8uBsyBmQCcD0D9Fw2GPhvkLBWwu7skCbuF
n4UAn0AV+ZDhceDl2+F/QYvMWxaHfDdy
=zdRr
-END PGP SIGNATURE-

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Rejected posting to LINUX-390@VM.MARIST.EDU

2009-12-23 Thread David Boyes
More likely a misconfigured mail-to-news gateway.



On Dec 23, 2009, at 6:39 PM, "John Summerfield"  wrote:

> Rob van der Heij wrote:
>> On Mon, Dec 21, 2009 at 2:58 PM, Frank M. Ramaekers
>>  wrote:
>>
>>> I don't know why I keep getting these. �I've never double posted
>>> anything. �On, Saturday, I received 6 of these and 2 on Friday.
>>
>> My guess is that a (former) subscriber has a misbehaving mail agent
>> that now returns the mail to listserv.
>
> I had it happen a few days ago, and I've seen in in the past. I  
> assumed
> that the listserv got confused, or someone restored a mail queue that
> had already been processed, or something.
>
> If it were someone else's misbehaving mail service, I'd expect to see
> something of the kind on other lists I'm on, most higher-volume than
> this, but I don't recall it.
>
>> Or we're getting very old and forget that we already posted ;-)
>
> Have I already posted this? Can't remember..
>
> -- 
>
> Cheers
> Santa
>
> -- spambait
> 1...@coco.merseine.nu  z1...@coco.merseine.nu
> -- Advice
> http://webfoot.com/advice/email.top.php
> http://www.catb.org/~esr/faqs/smart-questions.html
> http://support.microsoft.com/kb/555375
>
> You cannot reply off-list:-)
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO  
> LINUX-390 or visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: How to set up a common USER home directory across multiple zLinux Guests

2009-12-23 Thread David Boyes
Most definately. And the support available is pretty good. They have  
to answer to me if it isn't...8-)





On Dec 23, 2009, at 7:05 PM, "Shane Ginnane"   
wrote:

>> We want to create a central location for all zLinux server's user  
>> home
>> directory located on a common server (using NFS?) with some method of
>> failover if that server is down. Is there a file system that crosses
>> different servers that can be mounted by one system as the user home
>> file system, and then can fail over to another system if that (NFS
>> holding the Home Directories) server goes down?
>
> Wasn't this what {Open}AFS was designed for ?. Even allowed locally  
> cached
> copies to be used and/or editted (not saved) when the server went  
> away.
> And yes failover is available for configuration.
> Never tried it, but it looks like s390x is an option.
>
> Shane ...
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO  
> LINUX-390 or visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: How to set up a common USER home directory across multiple zLinux Guests

2009-12-23 Thread Shane Ginnane
> We want to create a central location for all zLinux server's user home
> directory located on a common server (using NFS?) with some method of
> failover if that server is down. Is there a file system that crosses
> different servers that can be mounted by one system as the user home
> file system, and then can fail over to another system if that (NFS
> holding the Home Directories) server goes down?

Wasn't this what {Open}AFS was designed for ?. Even allowed locally cached
copies to be used and/or editted (not saved) when the server went away.
And yes failover is available for configuration.
Never tried it, but it looks like s390x is an option.

Shane ...

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Rejected posting to LINUX-390@VM.MARIST.EDU

2009-12-23 Thread John Summerfield

Rob van der Heij wrote:

On Mon, Dec 21, 2009 at 2:58 PM, Frank M. Ramaekers
 wrote:


I don't know why I keep getting these. �I've never double posted
anything. �On, Saturday, I received 6 of these and 2 on Friday.


My guess is that a (former) subscriber has a misbehaving mail agent
that now returns the mail to listserv.


I had it happen a few days ago, and I've seen in in the past. I assumed 
that the listserv got confused, or someone restored a mail queue that 
had already been processed, or something.


If it were someone else's misbehaving mail service, I'd expect to see 
something of the kind on other lists I'm on, most higher-volume than 
this, but I don't recall it.



Or we're getting very old and forget that we already posted ;-)


Have I already posted this? Can't remember..

--

Cheers
Santa

-- spambait
1...@coco.merseine.nu  z1...@coco.merseine.nu
-- Advice
http://webfoot.com/advice/email.top.php
http://www.catb.org/~esr/faqs/smart-questions.html
http://support.microsoft.com/kb/555375

You cannot reply off-list:-)

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: OT: out-of-office notices

2009-12-23 Thread John Summerfield

Shane Ginnane wrote:

Well that didn't take long to be disregarded.

Shane ...


They used to be such fun! We'd discuss how easy it is to not send them
to the list, how silly folk who can't manage it are etc etc.

One time Sally Ditto was out of her office for a while, and we were
rather taken, in addition to the other points, her name and its
resemblance to a well-known DOS utility. We were still discussing it a
week or two later when she returned.

Merry Christmas Shane and the rest! 36 here I hear.






--

Cheers
John

-- spambait
1...@coco.merseine.nu  z1...@coco.merseine.nu
-- Advice
http://webfoot.com/advice/email.top.php
http://www.catb.org/~esr/faqs/smart-questions.html
http://support.microsoft.com/kb/555375

You cannot reply off-list:-)

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: How to set up a common USER home directory across multiple zLinux Guests

2009-12-23 Thread Richard Troth
Haven't used this feature for a while, but last I knew, automounter
maps could specify multiple servers. But it was/is a "first responder
wins" kind of thing, so it might be better to have an alias IP address
for your NFS server which your alternate server assumes when the
primary fails. The former is cooler, but the latter gives you more
control.






On 2009-12-23, CHAPLIN, JAMES (CTR)  wrote:
> We want to create a central location for all zLinux server's user home
> directory located on a common server (using NFS?) with some method of
> failover if that server is down. Is there a file system that crosses
> different servers that can be mounted by one system as the user home
> file system, and then can fail over to another system if that (NFS
> holding the Home Directories) server goes down?
>
> Right now as I understand NFS, if we use an NFS to hold user home
> directories, if the hosting server is taken down, no one can log into
> any of the other zLinux guests.
>
> Can anyone point me to a sample or documentation to resolve this?
>
> James Chaplin
> Systems Programmer, MVS, zVM & zLinux
> Base Technologies, Inc
> Supporting the zSeries Platform Team
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
>

--
Sent from my mobile device

-- R;   <><

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


How to set up a common USER home directory across multiple zLinux Guests

2009-12-23 Thread CHAPLIN, JAMES (CTR)
We want to create a central location for all zLinux server's user home
directory located on a common server (using NFS?) with some method of
failover if that server is down. Is there a file system that crosses
different servers that can be mounted by one system as the user home
file system, and then can fail over to another system if that (NFS
holding the Home Directories) server goes down?

Right now as I understand NFS, if we use an NFS to hold user home
directories, if the hosting server is taken down, no one can log into
any of the other zLinux guests.

Can anyone point me to a sample or documentation to resolve this?

James Chaplin
Systems Programmer, MVS, zVM & zLinux
Base Technologies, Inc
Supporting the zSeries Platform Team

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: strange performance issue

2009-12-23 Thread Andrew Avramenko
Marian,

Run strace for some time and try to compare output for different
users. There will be too much work, but I think You will have exact
answer. I guess there are different library paths for root and
non-root user or smth like that. Also check where is the bottleneck
with some monitoring tool, like nmon.

I'm not sure that the problem is with priority, it will be too easy :-)

--
With best regards,
Andrew

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: FTP/TLS from zOS problems

2009-12-23 Thread Gibney, Dave
Set up gsktrace on z/OS and find the exect error.
  
Search the archives on IBMTCP-L or IBM-MAIN

Dave Gibney
Information Technology Services
Washington State University


> -Original Message-
> From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of
> Donald Russell
> Sent: Wednesday, December 23, 2009 9:54 AM
> To: LINUX-390@VM.MARIST.EDU
> Subject: Re: FTP/TLS from zOS problems
> 
> Well, the 234 is just the response after the client sent AUTH TLS
> instead of a userid. But, a search for ftp auth tls error codes lead
> me to this IBM manual... Communications Server IP User's Guide and
> Commands
> 
> which listed the error codes...
> 17FTP_AUTHENTICATION  Security authentication or negotiation
> failure, incorrect specification of security keywords.
> 
> Sounds interesting, but doesn't offer many clues... sounds like the
> problem could be in the SYSFTPD DD statements...
> Is something misconfigured? On the client? On the server? Is the
> certificate bad? (Same cert is acceptable to a web browser for https
> connections, though I do have to click past a warning when using IE)
> 
> I'm leaning toward MVS no longer trusts my cert, or doesn't trust who
> signed the cert...
> 
> That lead me to adding CLIENTERRCODES EXTENDED to those control
> statements. FTP now exits with an RC of 1710 instead of 10234... Much
> better :-)
> 
> 17 means the same as above, 10 means "OPEN"... hmmm
> 
> Well, I'll keep digging.
> 
> Cheers
> 
> 
> On Wed, Dec 23, 2009 at 09:08, Stewart Thomas J
>  wrote:
> > If I remember correctly, what you want to do is search for "FTP
> client reply code 234" on a web search engine. I think you need to
> break this into mmnnn, where mm is a command code and nnn is the FTP
> client reply code. Most of these are standard codes, so 234 is
> documented in the RFC for the AUTH TLS FTP subcommand.
> >
> > Tom Stewart
> > Mainframe OS, Networking & Security
> > www.johndeere.com
> >
> >
> > -Original Message-
> > From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of
> Donald Russell
> > Sent: Wednesday, December 23, 2009 10:57 AM
> > To: LINUX-390@VM.MARIST.EDU
> > Subject: FTP/TLS from zOS problems
> >
> > When I try to use FTPS from zOS to RHEL zLinux I get these messages
> after connecting:
> >
> > 220 (vsFTPd 2.0.5)
>  AUTH TLS
> > 234 Proceed with negotiation.
> > Authentication negotiation failed
> > Unable to successfully negotiate required authentication Std Return
> Code = 10234, Error Code = 00017 FTP Complete: RC = 10234
> >
> >
> > Where can I find the meanings of these error codes?
> >
> > The puzzling thing for me right now is this USED to work... I'd get
> Authentication successful, and the transfer would continue with no
> problems.
> >
> > Anyway, tracking down the root cause of the failure will probably
> help. :-)
> >
> > Thanks
> >
> > -
> -
> > For LINUX-390 subscribe / signoff / archive access instructions, send
> email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit http://www.marist.edu/htbin/wlvindex?LINUX-390
> >
> > -
> -
> > For LINUX-390 subscribe / signoff / archive access instructions,
> > send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or visit
> > http://www.marist.edu/htbin/wlvindex?LINUX-390
> >
> 
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390
> or visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: FTP/TLS from zOS problems

2009-12-23 Thread Donald Russell
Well, the 234 is just the response after the client sent AUTH TLS
instead of a userid. But, a search for ftp auth tls error codes lead
me to this IBM manual... Communications Server IP User's Guide and
Commands

which listed the error codes...
17  FTP_AUTHENTICATION  Security authentication or negotiation
failure, incorrect specification of security keywords.

Sounds interesting, but doesn't offer many clues... sounds like the
problem could be in the SYSFTPD DD statements...
Is something misconfigured? On the client? On the server? Is the
certificate bad? (Same cert is acceptable to a web browser for https
connections, though I do have to click past a warning when using IE)

I'm leaning toward MVS no longer trusts my cert, or doesn't trust who
signed the cert...

That lead me to adding CLIENTERRCODES EXTENDED to those control
statements. FTP now exits with an RC of 1710 instead of 10234... Much
better :-)

17 means the same as above, 10 means "OPEN"... hmmm

Well, I'll keep digging.

Cheers


On Wed, Dec 23, 2009 at 09:08, Stewart Thomas J
 wrote:
> If I remember correctly, what you want to do is search for "FTP client reply 
> code 234" on a web search engine. I think you need to break this into mmnnn, 
> where mm is a command code and nnn is the FTP client reply code. Most of 
> these are standard codes, so 234 is documented in the RFC for the AUTH TLS 
> FTP subcommand.
>
> Tom Stewart
> Mainframe OS, Networking & Security
> www.johndeere.com
>
>
> -Original Message-
> From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Donald 
> Russell
> Sent: Wednesday, December 23, 2009 10:57 AM
> To: LINUX-390@VM.MARIST.EDU
> Subject: FTP/TLS from zOS problems
>
> When I try to use FTPS from zOS to RHEL zLinux I get these messages after 
> connecting:
>
> 220 (vsFTPd 2.0.5)
 AUTH TLS
> 234 Proceed with negotiation.
> Authentication negotiation failed
> Unable to successfully negotiate required authentication Std Return Code = 
> 10234, Error Code = 00017 FTP Complete: RC = 10234
>
>
> Where can I find the meanings of these error codes?
>
> The puzzling thing for me right now is this USED to work... I'd get 
> Authentication successful, and the transfer would continue with no problems.
>
> Anyway, tracking down the root cause of the failure will probably help. :-)
>
> Thanks
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions, send email 
> to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit 
> http://www.marist.edu/htbin/wlvindex?LINUX-390
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: FTP/TLS from zOS problems

2009-12-23 Thread Stewart Thomas J
If I remember correctly, what you want to do is search for "FTP client reply 
code 234" on a web search engine. I think you need to break this into mmnnn, 
where mm is a command code and nnn is the FTP client reply code. Most of these 
are standard codes, so 234 is documented in the RFC for the AUTH TLS FTP 
subcommand. 

Tom Stewart
Mainframe OS, Networking & Security
www.johndeere.com 


-Original Message-
From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Donald 
Russell
Sent: Wednesday, December 23, 2009 10:57 AM
To: LINUX-390@VM.MARIST.EDU
Subject: FTP/TLS from zOS problems

When I try to use FTPS from zOS to RHEL zLinux I get these messages after 
connecting:

220 (vsFTPd 2.0.5)
>>> AUTH TLS
234 Proceed with negotiation.
Authentication negotiation failed
Unable to successfully negotiate required authentication Std Return Code = 
10234, Error Code = 00017 FTP Complete: RC = 10234


Where can I find the meanings of these error codes?

The puzzling thing for me right now is this USED to work... I'd get 
Authentication successful, and the transfer would continue with no problems.

Anyway, tracking down the root cause of the failure will probably help. :-)

Thanks

--
For LINUX-390 subscribe / signoff / archive access instructions, send email to 
lists...@vm.marist.edu with the message: INFO LINUX-390 or visit 
http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


FTP/TLS from zOS problems

2009-12-23 Thread Donald Russell
When I try to use FTPS from zOS to RHEL zLinux I get these messages
after connecting:

220 (vsFTPd 2.0.5)
>>> AUTH TLS
234 Proceed with negotiation.
Authentication negotiation failed
Unable to successfully negotiate required authentication
Std Return Code = 10234, Error Code = 00017
FTP Complete: RC = 10234


Where can I find the meanings of these error codes?

The puzzling thing for me right now is this USED to work... I'd get
Authentication successful, and the transfer would continue with no
problems.

Anyway, tracking down the root cause of the failure will probably help. :-)

Thanks

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: zfcp wwpn change on DR site

2009-12-23 Thread Sven Schuetz

Hi Offer,

Does anyone has another idea how to change the zfcp WWPNs without editing
system delivered scripts?




you are probably aware of that, but I thought I'd mention it anyway:
There should be some commercial software available that lets you do
that. I THINK there is software from Tivoli called something like IBM
Tivoli System Automation for Multiplatforms xDR.

Bye,
Sven

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: zfcp wwpn change on DR site

2009-12-23 Thread Romanowski, John (OFT)
If the production and DR site's WWPN's won't be available to the guest at same 
time then could you have both sets of zfcp definitions in your /etc/zfcp.conf?
 Only one set would come online depending on whether the guest was running at 
production or DR site?
  Avoids need for your /etc/udev/rules.d/55-local-zfcp-conf.rules and its 
script.

> -Original Message-
> From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Offer
> Baruch
> Sent: Wednesday, December 23, 2009 4:06 AM
> To: LINUX-390@VM.MARIST.EDU
> Subject: Re: zfcp wwpn change on DR site
>
> Hi,
>
>
>
> After testing the solution it seems not to work.
>
> Looking at the log I can see that udev is started before the root file
> system is in read/write mode.
>
> That means that none of my changes are taking affect.
>
> Where can I see that output of my script if it is running under udev?
>
> Does anyone has another idea how to change the zfcp WWPNs without editing
> system delivered scripts?
>
>
>
> Thanks!
>
> Offer Baruch
>
>
>
> From: Offer Baruch [mailto:offerbar...@gmail.com]
> Sent: Tuesday, December 08, 2009 3:51 PM
> To: Linux on 390 Port
> Subject: Re: zfcp wwpn change on DR site
>
>
>
> That is exaclty what i was looking for!
> Can't thank you enough...
>
> Offer Baruch
>
> On Tue, Dec 8, 2009 at 2:12 PM, Christof Schmitt
>  wrote:
>
> On Mon, Dec 07, 2009 at 03:01:43PM +0200, Offer Baruch wrote:
>
> > I am using redhat v5.2.
> > my zfcp definitions are at /etc/zfcp.conf (just another text config file
> > with the WWPNs in it).
> > but i think that this file is read very early in the boot process. when?
> i
> > don't know.
> > I would like to change the file before it is read by zfcp.
>
> Looking at a Redhat system here, i find that the script
> /sbin/zfcpconf.sh reads the configuration file /etc/zfcp.conf. This
> script is run from udev when the zfcp module is loaded in the kernel:
>
> # grep -r zfcpconf.sh /etc/
> /etc/udev/rules.d/56-zfcp.rules:KERNEL=="zfcp_cfdc",
> RUN+="/sbin/zfcpconf.sh"
>
> If you wanted to change the configuration file before that step, you
> could add another file in /etc/udev/rules.d/ to run your script first,
> e.g. create a file /etc/udev/rules.d/55-local-zfcp-conf.rules with the
> line:
> KERNEL=="zfcp_cfdc", RUN+="/usr/local/sbin/update-zfcp-conf.sh"
>
> --
> Christof Schmitt


This e-mail, including any attachments, may be confidential, privileged or 
otherwise legally protected. It is intended only for the addressee. If you 
received this e-mail in error or from someone who was not authorized to send it 
to you, do not disseminate, copy or otherwise use this e-mail or its 
attachments.  Please notify the sender immediately by reply e-mail and delete 
the e-mail from your system.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: zfcp wwpn change on DR site

2009-12-23 Thread Romanowski, John (OFT)
Not familiar with redhat, but maybe need its mkinitrd script to copy your 
script into the initrd so udev finds it when it's run out of the initrd.  Look 
in mkinitrd to see what files/directories (especially udev-related) it's 
copying into initrd and maybe you can position your script to piggy-back on 
that copying.
 Also check if that copying will pick up your 
/etc/udev/rules.d/55-local-zfcp-conf.rules

> -Original Message-
> From: Linux on 390 Port [mailto:linux-...@vm.marist.edu] On Behalf Of Offer
> Baruch
> Sent: Wednesday, December 23, 2009 4:06 AM
> To: LINUX-390@VM.MARIST.EDU
> Subject: Re: zfcp wwpn change on DR site
>
> Hi,
>
>
>
> After testing the solution it seems not to work.
>
> Looking at the log I can see that udev is started before the root file
> system is in read/write mode.
>
> That means that none of my changes are taking affect.
>
> Where can I see that output of my script if it is running under udev?
>
> Does anyone has another idea how to change the zfcp WWPNs without editing
> system delivered scripts?
>
>
>
> Thanks!
>
> Offer Baruch
>
>
>
> From: Offer Baruch [mailto:offerbar...@gmail.com]
> Sent: Tuesday, December 08, 2009 3:51 PM
> To: Linux on 390 Port
> Subject: Re: zfcp wwpn change on DR site
>
>
>
> That is exaclty what i was looking for!
> Can't thank you enough...
>
> Offer Baruch
>
> On Tue, Dec 8, 2009 at 2:12 PM, Christof Schmitt
>  wrote:
>
> On Mon, Dec 07, 2009 at 03:01:43PM +0200, Offer Baruch wrote:
>
> > I am using redhat v5.2.
> > my zfcp definitions are at /etc/zfcp.conf (just another text config file
> > with the WWPNs in it).
> > but i think that this file is read very early in the boot process. when?
> i
> > don't know.
> > I would like to change the file before it is read by zfcp.
>
> Looking at a Redhat system here, i find that the script
> /sbin/zfcpconf.sh reads the configuration file /etc/zfcp.conf. This
> script is run from udev when the zfcp module is loaded in the kernel:
>
> # grep -r zfcpconf.sh /etc/
> /etc/udev/rules.d/56-zfcp.rules:KERNEL=="zfcp_cfdc",
> RUN+="/sbin/zfcpconf.sh"
>
> If you wanted to change the configuration file before that step, you
> could add another file in /etc/udev/rules.d/ to run your script first,
> e.g. create a file /etc/udev/rules.d/55-local-zfcp-conf.rules with the
> line:
> KERNEL=="zfcp_cfdc", RUN+="/usr/local/sbin/update-zfcp-conf.sh"
>
> --
> Christof Schmitt
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
>
>
>
> No virus found in this incoming message.
> Checked by AVG - www.avg.com
> Version: 9.0.709 / Virus Database: 270.14.101/2555 - Release Date: 12/09/09
> 21:41:00
>
> No virus found in this outgoing message.
> Checked by AVG - www.avg.com
> Version: 9.0.722 / Virus Database: 270.14.117/2582 - Release Date: 12/22/09
> 20:22:00
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390


This e-mail, including any attachments, may be confidential, privileged or 
otherwise legally protected. It is intended only for the addressee. If you 
received this e-mail in error or from someone who was not authorized to send it 
to you, do not disseminate, copy or otherwise use this e-mail or its 
attachments.  Please notify the sender immediately by reply e-mail and delete 
the e-mail from your system.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: zfcp wwpn change on DR site

2009-12-23 Thread Offer Baruch
Hi,



After testing the solution it seems not to work.

Looking at the log I can see that udev is started before the root file
system is in read/write mode.

That means that none of my changes are taking affect.

Where can I see that output of my script if it is running under udev?

Does anyone has another idea how to change the zfcp WWPNs without editing
system delivered scripts?



Thanks!

Offer Baruch



From: Offer Baruch [mailto:offerbar...@gmail.com]
Sent: Tuesday, December 08, 2009 3:51 PM
To: Linux on 390 Port
Subject: Re: zfcp wwpn change on DR site



That is exaclty what i was looking for!
Can't thank you enough...

Offer Baruch

On Tue, Dec 8, 2009 at 2:12 PM, Christof Schmitt
 wrote:

On Mon, Dec 07, 2009 at 03:01:43PM +0200, Offer Baruch wrote:

> I am using redhat v5.2.
> my zfcp definitions are at /etc/zfcp.conf (just another text config file
> with the WWPNs in it).
> but i think that this file is read very early in the boot process. when? i
> don't know.
> I would like to change the file before it is read by zfcp.

Looking at a Redhat system here, i find that the script
/sbin/zfcpconf.sh reads the configuration file /etc/zfcp.conf. This
script is run from udev when the zfcp module is loaded in the kernel:

# grep -r zfcpconf.sh /etc/
/etc/udev/rules.d/56-zfcp.rules:KERNEL=="zfcp_cfdc",
RUN+="/sbin/zfcpconf.sh"

If you wanted to change the configuration file before that step, you
could add another file in /etc/udev/rules.d/ to run your script first,
e.g. create a file /etc/udev/rules.d/55-local-zfcp-conf.rules with the
line:
KERNEL=="zfcp_cfdc", RUN+="/usr/local/sbin/update-zfcp-conf.sh"

--
Christof Schmitt


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or
visit
http://www.marist.edu/htbin/wlvindex?LINUX-390



No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 9.0.709 / Virus Database: 270.14.101/2555 - Release Date: 12/09/09
21:41:00

No virus found in this outgoing message.
Checked by AVG - www.avg.com
Version: 9.0.722 / Virus Database: 270.14.117/2582 - Release Date: 12/22/09
20:22:00


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390