Re: How do you set up an rsa public key on zVM to connect to another zVM's Guest's zLinux session to issue a command.

2011-12-22 Thread David Boyes
On 12/22/11 7:42 PM, "Thomas Kern"  wrote:

> It may be available from a third-party like Sine Nomine, but it
>is not available from IBM.

It is available from us for a nominal cost.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: How do you set up an rsa public key on zVM to connect to another zVM's Guest's zLinux session to issue a command.

2011-12-22 Thread David Boyes
>What I want to be able to do is to send a user ID and commands to a zVM
>guest that hosts a zLinux server, logging in with only the user ID and
>using the rsa keys to authenticate on the zLinux side (allowing commands
>to be issued under that ID). Has anyone done this or is it possible?

We wrote a CMS SSH client to do this. Contact me offlist for more details.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: How do you set up an rsa public key on zVM to connect to another zVM's Guest's zLinux session to issue a command.

2011-12-22 Thread Thomas Kern
This is a CMS command-line ssh capability that I have been asking for since I 
started
running Linux under z/VM. It may be available from a third-party like Sine 
Nomine, but it
is not available from IBM.

/Tom Kern
(I no longer run Linux under z/VM, so the Powers That Be succeeded in stalling 
long enough
for my need to just go away).

On 12/22/2011 18:28, CHAPLIN, JAMES (CTR) wrote:
> I have a REXX script that issues a set of SEND commands to another zVM
> guest to log on another guest's Linux session and issue a Linux command
> and then exit. The problem with the script is that it is passing the
> password to Linux and I would like to change this to using an rsa
> public/private key exchange instead.
>
>
>
> What I want to be able to do is to send a user ID and commands to a zVM
> guest that hosts a zLinux server, logging in with only the user ID and
> using the rsa keys to authenticate on the zLinux side (allowing commands
> to be issued under that ID). Has anyone done this or is it possible?
>
>
>
> Is there a reverse command to the "vmcp" command in IBM s390 toolkit, a
> type of CP command that issues a Linux command the Linux side, like the
> vmcp allows CP commands to be issued from Linux to the zVM session.
> Because of authentication on the Linux side, I do not think this is
> possible, but I would like to learn I am wrong here.
>
>
>
> James Chaplin
>
> Systems Programmer, MVS, zVM & zLinux
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> --
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


How do you set up an rsa public key on zVM to connect to another zVM's Guest's zLinux session to issue a command.

2011-12-22 Thread CHAPLIN, JAMES (CTR)
I have a REXX script that issues a set of SEND commands to another zVM
guest to log on another guest's Linux session and issue a Linux command
and then exit. The problem with the script is that it is passing the
password to Linux and I would like to change this to using an rsa
public/private key exchange instead. 

 

What I want to be able to do is to send a user ID and commands to a zVM
guest that hosts a zLinux server, logging in with only the user ID and
using the rsa keys to authenticate on the zLinux side (allowing commands
to be issued under that ID). Has anyone done this or is it possible? 

 

Is there a reverse command to the "vmcp" command in IBM s390 toolkit, a
type of CP command that issues a Linux command the Linux side, like the
vmcp allows CP commands to be issued from Linux to the zVM session.
Because of authentication on the Linux side, I do not think this is
possible, but I would like to learn I am wrong here.

 

James Chaplin

Systems Programmer, MVS, zVM & zLinux


--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Clustered file systems

2011-12-22 Thread John Campbell
David Boyes wrote:
>> I just want to insert a comment about a Clustered F/S (better than a C/F,
>> right?) in an application environment where there are a sh!tload of links and
>> unlinks within a single directory...
>> Don't do it.
>> Just...  don't.
>
> Newer cluster file systems like PVFS2 and Ceph have mechanisms to limit the 
> impact of this kind of activity.

The problem arises when your application-- being multi-threaded and
moving up to 2.2 million files in a day-- *depends* upon linking and
unlinking being *fast* in order to "move" the files being manipulated.
 All running on HF (Huge) Solaris boxes and the F/S's in question
residing in a SAN.  While not normally a problem, when there is a
single directory that gets all of the files being processed for
auditing you can end up with one *hell* of a nightmare that cannot be
solved without a major re-design of the application itself.

Mind you, the locking mechanism around directory manipulation is
hidden and won't show up in the stats... and it was, in hindsight, a
miracle that I even remembered, during a meeting on this, that
directory manipulation is single threaded.  (We discovered, in some
follow-ups, that we were near the limit even on a single box with the
non-clustered architecture;  We have ways to avoid this, now.)

I hate IE right now since WXP keeps dropping characters as I type them
into this browser window.

-soup

-- 
John R. Campbell         Speaker to Machines          souperb at gmail dot com
MacOS X proved it was easier to make Unix user-friendly than to fix Windows

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/


Re: Clustered file systems

2011-12-22 Thread David Boyes
> I just want to insert a comment about a Clustered F/S (better than a C/F,
> right?) in an application environment where there are a sh!tload of links and
> unlinks within a single directory... 
> Don't do it. 
> Just...  don't.

Newer cluster file systems like PVFS2 and Ceph have mechanisms to limit the 
impact of this kind of activity.  

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
--
For more information on Linux on System z, visit
http://wiki.linuxvm.org/