Re: Mosix
I have played with LVS linux clusters. Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation Oscar Schultz cc: Sent by: LinuxFrom: on 390 Port Subject: Mosix <[EMAIL PROTECTED] RIST.EDU> 01/04/2002 10:32 AM Please respond to Linux on 390 Port IBM has a nice tutorial on Mosix in the linux section of developerworks - clustering for Linux. Has any one in the group setup a virtual cluster and tried it out? VM and/or LPAR + clustering could be a very interesting enhancement. thanks oscar [EMAIL PROTECTED]
Re: Guest-Lan QDIO/QETH on 2.2.16 kernel
Hipersockets requires Linux kernel 2.4 http://www10.software.ibm.com/developerworks/opensource/linux390/restrictions2_2_16.shtml Gigabit Ethernet driver and QDIO base support Multicasting has to be switched on in the kernel. The Gigabit Ethernet Driver needs QDIO base support. Starting with microcode level 0146, OSA-Express QDIO require a portname to be set in the device driver. This portname is specified using "portname:FOOBAR" in the qeth_options module parameter (see Device Drivers and Installation Commands). HiperSockets support is not available for kernel 2.2, but for kernel 2.4 only. Broadcast functionality is only available on OSA-2 hardware, not on OSA-Express QDIO. Carlos A. Ordonez IBM Corporation Linux for S/390 Competency Center |-+---> | | Jeremy Warren | | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 01/17/2002 04:45| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >--| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Guest-Lan QDIO/QETH on 2.2.16 kernel | | | >--| We are attempting to setup guest-lan for our linux box running 2.2.16 kernel. under zvm 4.2 We have applied ptf's : UM30225 / UQ61461 / UM30140 to CP and IP on vm and it "appears" that the VM IP stack is inserting into our guest lan. We can ping the address etc. Linux on the other hand is being stubborn... We have DL'd the latest qdio.o and qeth.o from developerworks. We have also applied all recommended maintenance to the kernel from this site: http://www10.software.ibm.com/developerworks/opensource/linux390/current2_2.shtml When we do insmods for qdio and qeth this is what we get linux1:~ # insmod qdio Using /lib/modules/2.2.16/net/qdio.o linux1:~ # linux1:~ # insmod qeth noauto,0x0500,0x0501,0x0502,portname:VLAN1,eth0 Using /lib/modules/2.2.16/net/qeth.o linux1:~ # On the console we see: Jan 17 16:40:32 linux1 kernel: qdio: loading QDIO base support Jan 17 16:40:32 linux1 kernel: debug: reserved 1 areas of 4 pages for debugging qdio_setup Jan 17 16:40:32 linux1 kernel: debug: reserved 2 areas of 4 pages for debugging qdio_labs Jan 17 16:40:32 linux1 kernel: debug: reserved 1 areas of 2 pages for debugging qdio_sense Jan 17 16:40:32 linux1 kernel: debug: reserved 2 areas of 4 pages for debugging qdio_trace , Jan 17 16:41:07 linux1 kernel: qdio: loading QDIO base support Jan 17 16:41:07 linux1 kernel: debug: reserved 1 areas of 4 pages for debugging qdio_setup Jan 17 16:41:07 linux1 kernel: debug: reserved 2 areas of 4 pages for debugging qdio_labs Jan 17 16:41:07 linux1 kernel: debug: reserved 1 areas of 2 pages for debugging qdio_sense Jan 17 16:41:07 linux1 kernel: debug: reserved 2 areas of 4 pages for debugging qdio_trace That's it. An ifconfig fails for either name eth0 or hsi0 any help would be greatly appreciated. ifconfig eth0 up eth0: unknown interface: No such device ifconfig hsi0 up hsi0: unknown interface: No such device Here are some of the key config files System config: define lan vlan1 maxconn 100 ownerid system User Directory: PROFILE LINDFLT SPECIAL C000 CTCA SPECIAL C001 CTCA SPECIAL 500 HIPER 3 SYSTEM VLAN1 SPOOL 000C 2540 READER SPOOL 000D 2540 PUNCH A SPOOL 000E 1403 A CONSOLE 009 3215 T TSTTWS LINK MAINT 0190 0190 RR LINK MAINT 019D 019D RR LINK TCPIP 0592 0592 RR *
Re: OSA FDDI
Moloko, we used an OSA FDDI with a customer in PR but they had it in LCS mode. Carlos :-) Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+--> | | Moloko Monyepao| | | | | | Sent by: Linux on | | | 390 Port | | | <[EMAIL PROTECTED]| | | T.EDU> | | | | | | | | | 01/22/2002 12:56 AM| | | Please respond to | | | Linux on 390 Port | | | | |-+--> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: OSA FDDI | | | >---| Where can I find the OSA FDDI patch? I have SUSE Kernel 2.2 installed connected via Escon CTC and I want to use the OSA FDDI as my network device. Is the anybody who has successfully installed and use the OSA FDDI. Please assist. Moloko
Re: OSA
I have seen a couple of problems with defining an OSA card in QDIO and I just wanted to suggest a couple of commands that maybe will help to setup the card manually: echo 'noauto ' >/proc/chandev echo 'qeth0,0x0e30,0x0e31,0x0e32,0,0 '>/proc/chandev echo 'add_parms,0x10,0x0e30,0x0e32,portname:RPTRFET1 ' >/proc/chandev insmod qdio insmod qeth ifconfig eth0 10.0.0.1 netmask 255.255.255.0 broadcast 10.0.0.255 up We had to do this setup when installing on an LPAR in a new z800 because of the bug with SuSE not having the correct syntax at install time. This worked for us. Hope it helps Carlos :-)
Re: Oracle 9i 1(9.0.1) on Redhat 7.2
We did it without any problems. Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Roger Lam | | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 02/05/2002 01:27| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >--| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Oracle 9i 1(9.0.1) on Redhat 7.2 | | | >--| Any attempt to run Oracle on Redhat instead of SuSe? Roger _ Send and receive Hotmail on your mobile device: http://mobile.msn.com
Re: Export
You must execute the script like . myscript and I mean period, space and the script name this nomenclature prevents the shell from forking Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Roger Lam | | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 02/08/2002 01:08| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >--| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Export | | | >--| When I export and echo a variable in a script, it display the correct content such as "home/bin". When I finish the script, I echo the same variable in the command line again, it display blank. How to make this variable permanently exported through my login session. _ Chat with friends online, try MSN Messenger: http://messenger.msn.com
Re: RedHat 7.1 or RedHat 7.2?
RedHat 7.1 is the 64 bit distro for Linux/390 Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Post, Mark K" | | | <[EMAIL PROTECTED]| | | om> | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 02/08/2002 02:10| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >--| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: RedHat 7.1 or RedHat 7.2? | | | >--| I am not aware of a Red Hat 7.1 Linux/390. The only one I know of is 7.2 There are no .iso images for it. Mark Post -Original Message- From: Massimiliano Belardi [mailto:[EMAIL PROTECTED]] Sent: Friday, February 08, 2002 3:50 AM To: [EMAIL PROTECTED] Subject: RedHat 7.1 or RedHat 7.2? Hello world! I'm going to elaborate a project to build several reverse-proxy (Linux with apache) to comunicate with WEbSpere Application Server on Z/OS. Linuxes are built as z/VM guest. I'm not able to decide if is better the RH 7.1 or the 7.2 for 390 arch. Does anybody know the difference betwen these two versions (I've some troubles about 7.2)? Does anybody know where I can download RedHat 7.1 ISO images? Thank's Massimiliano Belardi IBM Global Services Via Sciangai, 53 00100 Rome Italy
Re: Hipersocket problem
In your example you showed : qeth-1,0x1000,0x1001,0x1002,0,0 This entry should not have a "-" between qeth and 1. It should look as qeth1. Also I don't understand why are you using qeth1 unless you have also defined an OSA - QDIO already. Then you should use something like this: alias eth0 qeth alias hsi1 qeth noauto *Fast Ethernet in QDIO mode qeth0,0x0e30,0x0e31,0x0e32,0,0 add_parms,0x10,0x0e30,0x0e32,portname:RPTRFET1 *Hipersockets qeth1,0xe000,0xe001,0xe002,0,0 ad_parms,0x10,0xe000,0xe002,portname:RPTRHPR1 Carlos :-) Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Ferguson, Neale" | | || | | Sent by: Linux on 390 | | | Port| | | <[EMAIL PROTECTED]| | | > | | | | | | | | | 02/15/2002 12:33 AM | | | Please respond to Linux | | | on 390 Port | | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Hipersocket problem | | | >---| I've seen a fair bit of traffic recently about gigabit ethernet and hipersocket problems (and eventual solutions). After having great success on our 2064 we've recently updated drivers and microcode. Now the successes have been replaced by abject failures. We're attempting to get a hipersocket connection going. The VM TCP/IP stack is able to start its device without a problem but the Linux (2.4.7) is having a bit of a problem. Apart from the usual bitch about no source code from which to trace the problem or any messages manual that can help us deciper: "There were problems in hard-setting up the card", here's the log: > insmod qdio Using /lib/modules/2.4.7-SuSE-SMP/misc/qdio.o qdio: loading QDIO base support version 2 ($Revision: 1.78.2.4 $/$Revision: 1.44 .2.1 $) debug: qdio_setup: new level 2 debug: qdio_labs: new level 2 debug: qdio_sense: new level 2 debug: qdio_trace: new level 2 > insmod qeth Using /lib/modules/2.4.7-SuSE-SMP/net/qeth.o qeth: loading qeth S/390 OSA-Express driver ($Revision: 1.136.2.3 $/$Revision: 1 .53.2.2 $/$Revision: 1.18 $) qeth: allocated 0 spare buffers debug: qeth_setup: new level 3 debug: qeth_misc: new level 2 debug: qeth_data: new level 2 debug: qeth_control: new level 2 debug: qeth_sense: new level 2 debug: qeth_qerr: new level 2 debug: qeth_trace: new level 2 qeth: Trying to use card with devnos 0x1000/0x1001/0x1002 qeth: There were problems in hard-setting up the card. debug: unregistering qeth_setup debug: unregistering qeth_qerr debug: unregistering qeth_sense debug: unregistering qeth_misc debug: unregistering qeth_data debug: unregistering qeth_control debug: unregistering qeth_trace /lib/modules/2.4.7-SuSE-SMP/net/qeth.o: init_module: No such device Hint: insmod errors can be caused by incorrect module parameters, including invlid IO or IRQ parameters Here's the /etc/chandev.conf: noauto ctc0,0xe000,0xe001,0,0 qeth-1,0x1000,0x1001,0x1002,0,0 add_parms,0x10,0x1000,0x1002,portname:IUTIQDD0 And here's the /etc/modules.conf: alias hsi0 qeth
Re: Buffersize on Linux CTC Driver
My 2.2.16 SuSE system doesn't have that directory structure, but if you go to a SuSE 2.4.7 everything is there. Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Scully,| | | William"| | || | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 02/14/2002 09:49| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Buffersize on Linux CTC Driver | | | >---| Jay, A CTC is used to connect Linux to TCP/IP on VM. Since that's the only way I can gain access (Telnet) to the Linux server via TCP/IP, I'm as sure as I can be that the CTC driver -is- loaded. I'm also certain that the named file and directories do not exist. linux016:~ # lsmod Module Size Used by ctc21220 1 (autoclean) linux016:~ # cd /proc linux016:/proc # cd net linux016:/proc/net # ls .devigmp ip_mr_cache netstat rpc sockstat udp .. dev_mcast ip_fwchains ip_mr_vifraw rt_cache tcp unix arp dev_stat ip_fwnames netlink routesnmp tr_rif linux016:/proc/net # I'll mention that I'm at the 2.2.16 level of SuSE 7.0 GA. Are you seeing different results with your system? If so, what distribution are you using? I personally haven't yet worked with the 2.4 kernel and if the CTC driver works differently at that level, I'd like to hear that. I'll mention again that the quote from the manual was for the 2.2.16 level of code. Again, perhaps, we've missed some service? Thanks for your comments. The more I check the more I learn about all this stuff! ;-) -Original Message- From: Robert J Brenneman [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 14, 2002 3:34 PM To: [EMAIL PROTECTED] Subject: Re: Buffersize on Linux CTC Driver The file is not there because the driver is not yet loaded. You have to load the driver first before you can change the buffersize. All the appropriate /proc stuff gets created after the driver loads. Jay Brenneman "Scully, William" cc: Sent by: Linux onSubject: Buffersize on Linux CTC Driver 390 Port <[EMAIL PROTECTED] IST.EDU> 02/14/02 02:26 PM Please respond to Linux on 390 Port The IBM "Linux for S/390 Device Drivers and Installation Commands" document, dated 18 July 2001, in Chapter Seven, "Linux for S/390 CTC/ESCON Device Driver", has Usage Note 2 under "Preparing the Connection" which reads: Definitions on the remote side Set up the TCP/IP on the remote side, as described in the reference manuals. This will vary depending on which operating system is used on the remote side. Note: It is important that you have IOBUFFERSIZE 32678 defined because the LINUX for S/390 CTC driver works with 32k internally. This is configurable for each device by writing the value to the buffersize file for that device (proc/net/ctc//buffersize ), for example echo 32768 >/proc/net/ctc/ctc0/buffersize I'm not sure how this is accomplished. Logging on as root and issuing the command doesn't work. Here's what I get: LINUXWPS:/proc # echo 32768 >/proc/net/ctc/ctc0/buffersize bash: /proc/net/ctc/ctc0/buffersize: No such file or directory What is the correct technique for creating the appropriate directories and fil
Re: SAMBA and CTC?
For nmbd to work with a ctc you need to change the netmask to 255.255.255.0 Carlos :-) Carlos A. Ordonez IBM Corporation Server Consolidation |-+> | | Rod Clayton | | | <[EMAIL PROTECTED]| | | .k12.md.us> | | | Sent by: Linux on 390| | | Port | | | <[EMAIL PROTECTED]| | | EDU> | | || | || | | 02/17/2002 05:05 PM | | | Please respond to| | | Linux on 390 Port| | || |-+> >--| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: SAMBA and CTC? | | | >--| I would like to try SAMBA. My Linux-390 host is connected to the network through a VCTCA to a VSE host which has a CLAW connection to an RS/6000. I am using the default config file as suggested in the IBM redbook. When I try to bring up nmbd -D, it appears to fail and the log file has the following message: [2002/02/17 16:45:01, 0] nmbd/nmbd_subnetdb.c:create_subnets(242) create_subnets: No local interfaces ! [2002/02/17 16:45:01, 0] nmbd/nmbd.c:main(831) ERROR: Failed when creating subnet lists. Exiting. Does each Linux guest have to own the ethernet card? If so, then your Linux guests are limited by the number of eithernet cards you can give them? Can I change something to make it work with VCTCA? Thanks, Rod -- Rod Clayton KA3BHY Systems Programmer Howard County Public Schools [EMAIL PROTECTED]
Re: SuSE 7.2 Samba Hang
You need to apply kernel patches 3 and 4 from the opensource website : http://www10.software.ibm.com/developerworks/opensource/linux390/index.shtml Carlos :-) Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Rob Schwartz| | || | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 02/26/2002 05:13| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >--| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: SuSE 7.2 Samba Hang | | | >--| We have recently installed SuSE 7.2 and the Samba package included and are experiencing a problem. After setting up a share we attempt to access this share via an NT 4.0 workstation. When doing anything with that share the instance hangs -- telnet session is unresponsive and can't even get a linux logon prompt within the VM user. From the VM standpoint the machine is taking a large amount of the CPU. Below is our smb.conf. This worked in SuSE 7.0 Thanks Rob # Global parameters [global] workgroup = BOSDOM2 netbios name = LXFS001 server string = Samba on Boscov's Zseris Mainframe! interfaces = 10.88.1.17/24 security = DOMAIN encrypt passwords = Yes map to guest = Bad User password server = PRIDNS1 keepalive = 30 add user script = useradd %u delete user script = userdel %u os level = 2 wins server = 10.88.4.52 kernel oplocks = No [Fullshare] comment = full limited access path = / valid users = t880tjs admin users = t880tjs read only = No create mask = 0777 browseable = No [homes] comment = Home writeable = Yes [shared] comment = Shared path = /bos1 writeable = Yes create mask = 0777 level2 oplocks = No
Re: SuSE 7.2 Samba Hang
Yes, sorrylinux-2.4.7-s390-3.tar.gz and s390-4.tar.gz Carlos :-) Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Post, Mark K" | | | <[EMAIL PROTECTED]| | | om> | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 02/26/2002 05:53| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: SuSE 7.2 Samba Hang | | | >---| Carlos, You're being a little too vague for me to be sure I know what you're saying. Do you mean linux-2.4.7-s390-3.tar.gz and s390-4.tar.gz from http://www10.software.ibm.com/developerworks/opensource/linux390/current2_4 . shtml? Mark Post -----Original Message- From: Carlos Ordonez [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 26, 2002 5:23 PM To: [EMAIL PROTECTED] Subject: Re: SuSE 7.2 Samba Hang You need to apply kernel patches 3 and 4 from the opensource website : http://www10.software.ibm.com/developerworks/opensource/linux390/index.shtml Carlos :-) Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Rob Schwartz| | || | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 02/26/2002 05:13| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> > --- ---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: SuSE 7.2 Samba Hang | | | > --- ---| We have recently installed SuSE 7.2 and the Samba package included and are experiencing a problem. After setting up a share we attempt to access this share via an NT 4.0 workstation. When doing anything with that share the instance hangs -- telnet session is unresponsive and can't even get a linux logon prompt within the VM user. From the VM standpoint the machine is taking a large amount of the CPU. Below is our smb.conf. This worked in SuSE 7.0 Thanks Rob # Global parameters [global] workgroup = BOSDOM2 netbios name = LXFS001 server string = Samba on Boscov's Zseris Mainframe! interfaces = 10.88.1.17/24 security = DOMAIN encrypt passwords = Yes map to guest = Bad User password server = PRIDNS1 keepalive = 30 add user script = useradd %u delete user script = userdel %u os level = 2 wins server = 10.88.4.52 kernel oplocks = No [Fullshare] comment = full limited access path = / valid users = t880tjs admin users = t880tjs read only = No create mask = 0777 browseable = No [homes] comment = Home writeable = Yes [shared] comment = Shared path = /bos1 writeable = Yes create mask = 0777 level2 oplocks = No
Re: Moving /usr to another disk
Marcy, you can add DASD dynamically in 2.4 by: echo "add device range=0100-0104" >> /proc/dasd/devices <-- 0100-0104 is the device address of the new dasd , notice >> which means concat echo "set device range=0100-0104 on" >> /proc/dasd/devices Carlos :-) Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Marcy Cortes| | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 02/26/2002 06:55| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Moving /usr to another disk | | | >---| Mark Post wrote: >Actually, all I wanted to indicate was that people with 2.2 kernels will >need to reboot to add DASD. I didn't want to get into the details of how >all that is done in this particular HOWTO. So, I reworded the 2.2 part to >take out those details. Actually, that was the hardest part for me as a VMer new to Linux to find. It wasn't in the Suse doc (although there is enough about dasdfmt, mke2fs, and fdasd) and I couldn't find a howto on it anywhere. And I found that I did need to reboot Linux 2.4. Is this not the case? Maybe I didn't find the dynamic way (I did try insmod too but came to the conclusion through reading the list archives that that's only for the initial install out of the ramdisk). Marcy
Re: create an ISO from a CD
Under SuSE 7.2 (SLES) there is a package called mkisofs to create ISO images. I have used it successfully by mounting my cd-rom from my PC via smbfs and running the command. Carlos :-) Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Mark.Pace@ncgico| | | rp.com | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 02/27/2002 09:39| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: create an ISO from a CD | | | >---| How can I make an ISO image from a CD? I would like to be able to then mount that ISO image as loopback device. That way I don't have to have the CD mounted all the time. Mark D Pace Senior Systems Engineer Mainline Information Systems 1700 Summit Lake Drive Tallahassee, FL. 32311 [EMAIL PROTECTED] Phone: 850-219-5184 Fax: 850-219-5050 http://www.mainline.com
Re: create an ISO from a CD
Why would you need to fiddle with the boot image? Don't understand your point. Carlos :-) Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Rob van der Heij| | | <[EMAIL PROTECTED]>| | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 02/27/2002 11:53| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: create an ISO from a CD | | | >---| At 16:39 27-02-02, you wrote: >Under SuSE 7.2 (SLES) there is a package called mkisofs to create ISO >images. I have used it successfully by mounting my cd-rom from my PC via >smbfs and running the command. >Carlos :-) But that is making an ISO image out of files rather than out of a CD. You would probably need to fiddle to get the boot image out of the CD via SMB and back into the ISO image.
Re: create an ISO from a CD
Rob, I created the iso images and mounted them on a loopback without fussing around with the boot image. If you are planing to IPL from this ISO, then it will better be on a CD. The IPL takes its information from a file called (in suse) suse.ins or (in redhat) redhat.ins. This is not like a bootstrap, I am confused still. Thank you for your patience, I am slow. Carlos:-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Rob van der Heij| | | <[EMAIL PROTECTED]>| | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 02/27/2002 01:50| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> > ---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: create an ISO from a CD | | | > ---| >Why would you need to fiddle with the boot image? Don't understand your >point. Carlos :-) If you stick the CD in you PC and copy the files over into a big fat file that is formatted like an ISO image, you lose the boot image. So you will not have a functional duplicate. The point is that if you want to create an iso image on your MS Windows PC you need additional software to make that copy. Your CD may be in such a format that MS Windows does not handle it well. If he's going to pull the file off the CD on the PC then there is little need to put the files back into an ISO imaga and mount that via the loopback device. He might as well keep the files and use them as is. Rob (Embedded image moved to file: pic13145.pcx) pic13145.pcx Description: Binary data
Re: SLES 7 BETA 2.4.7 Kernel Bug
You need patches linux-2.4.7-s390-3.tar.gz and linux-2.4.7-s390-4.tar.gz from http://www10.software.ibm.com/developerworks/opensource/linux390/current2_4.shtml#64-kernel Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Wolfe, Gordon | | | W" | | || | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 03/05/2002 06:31| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: SLES 7 BETA 2.4.7 Kernel Bug | | | >---| This is the problem with beta software. The reason it's called "beta" is that it's still in test. You have to take what you get. My company has an absolute prohibition against using any form of beta code in production for this very reason. We have a subscription, license, and maintenance agreement with SuSE on SLES7 2.4.7. The same bug existed on the commercially-distributed production code too. We just found it a few days ago. If you have a maintenance agreement with SuSE, you can get into the password-protected maintenance site and download the rather substantial (about 12 megs) fix. There was a message that came across the list on February 26th (sorry, I don't have the message) that I think said the problem was with one of the IBM modules. Another way around this problem might be to download the latest patches for 2.4.7 from IBM Developerworks and apply them to the kernel source and rebuild the kernel. This may or may not work because SuSE puts additional patches on the kernel that may cause IBM's patches not to apply. If you're really good at kernel source code and reading diff files you might be able to fix this if it occurs. "Never trust any computer you can lift." Gordon Wolfe, Ph.D. (425)865-5940 VM Technical Services, The Boeing Company > -- > From: Monteleone > Reply To: Linux on 390 Port > Sent: Monday, March 4, 2002 11:59 PM > To: [EMAIL PROTECTED] > Subject: SLES 7 BETA 2.4.7 Kernel Bug > > Hello everybody, > I'm currently testing this version and I get the 'Kernel bug fcntl.c > 417'. > I understood that there is a kernel replacement for users in maintenance > mode. > What happen for the other? > Is there a way to bypass this problem or should i have to subscribe? > Thanks for your responses. > Best Regards, > > > Gérard MONTELEONE > Ingénieur Système & Réseau > * 04.95.23.68.09 / 06.87.72.70.32 > [EMAIL PROTECTED] > S.I.T.E.C zi du Vazzio > 20090 AJACCIO Cedex > > >
Re: Installing JAVA
you can use the command: rpm -ivh ibmjk130-1.3.0-1.s390.rpm Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+--> | | "Kittendorf, Craig"| | | <[EMAIL PROTECTED]| | | TATE.FL.US>| | | Sent by: Linux on 390 Port | | | <[EMAIL PROTECTED]> | | | | | | | | | 03/06/2002 08:59 AM| | | Please respond to Linux on | | | 390 Port | | | | |-+--> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Installing JAVA | | | >---| I'm trying to install ibmjk130-1.3.0-1.s390.rpm on SuSE 7.0 with YaST. I get the message : Cannot find PREIN. What does this mean? Thanks, Craig Kittendorf Systems Programmer
Re: trying to us OSA/E Gig with
Steve, in the z800 Technical Introduction Redbook there is a chapter on Linux that describes how to install SuSE 2.4.7 and QDIO. There is a bug (syntax error) in the installation which doesn't add the portname correctly. Here are some of the steps necessary: OSA Express Fast Ethernet in QDIO mode The installation procedure for the SuSE LINUX 2.4.7 distribution has a minor bug that prevents the automatic setup QDIO mode. However, this setup can be performed manually. To do this, select option 0 (no network). For security reasons, set up the root temporary password first: passwd root Then set up the network, using the following commands: echo 'noauto ' >>/proc/chandev echo 'qeth0,0x0e30,0x0e31,0x0e32,0,0 '>/proc/chandev echo 'add_parms,0x10,0x0e30,0x0e32,portname:RPTRFET1 ' >>/proc/chandev insmod qdio insmod qeth ifconfig eth0 10.0.0.1 netmask 255.255.255.0 broadcast 10.0.0.255 up /etc/rc.d/inetd start /etc/rc.d/portmap start Post YaST setup for network in QDIO mode Our SuSE version could not automatically configure a QDIO interface. We assume this will be fixed in later SuSE releases. To bypass the problem in our release, we performed the following steps while still running in the Telnet session connected to the ramdisk Linux on the z800. After YaST has finished its installation processes, we issued the following commands: mkdir /mnt/newroot mount /dev/dasda1 /mnt/newroot cd /mnt/newroot/etc We used vi to edit the chandev.conf and modules.conf files in the /mnt/newroot/etc directory. In modules.conf, we changed: alias eth0 off to: alias eth0 qeth In chandev.conf, we added the following lines: noauto qeth0,0x0e30,0x0e31,0x0e32,0,0 add_parms,0x10,0x0e30,0x0e32,portname:RPTRFET1 The book is called: Technical Introduction: IBM ^ zSeries 800 - SG24-6515-00 Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Steve Gear | | | Schneider | | | Technical | | | Services| | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 03/14/2002 09:23| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: trying to us OSA/E Gig with | | | >---| hello mark, do you mean the portname defined in vtam for the OSA-E. i am installing SUSE server 7 (kernel 2.4) and using the 'boot from cd' option. from the first menu i select '3' for the gigabit OSA. later, i enter in the device's or auto(i've done both) and then enter in a port name. i have enter'd a portname, however the vtam on the CEC in question did not have one defined, and still got the error. also, i was refered to a marist listserv entry from carlos ordonez on 01/31/2002. this item implies a bug in the SUSE install. i attempted it with no success regards, steve "Post, Mark K" cc: Sent by: LinuxFax to: on 390 Port Subject: Re: trying to us OSA/E Gig with <[EMAIL PROTECTED] ARIST.EDU> 03/13/2002 10:12 PM Please respond to Linux on 390 Port Steve, Don't keep looking, your problem is that you _must_ specify a portname. That has been true for every person that has reported running
Re: Authentication on Linux using PAM to a z/OS RACF server
Jim, we have successfully access LDAP / DB2 (OS/390) from Linux for S/390 using PAM LDAP for authentication. If you use RACF, as far as I understand, you can only have 1 profile for root. This is not good because if you break the one password you have access to all the roots of a penguin farm running under VM. Using LDAP/DB2 (OS/390) gives you the security of OS/390 for your depository and takes away the restriction. Carlos :-) Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Jim Elliott | | | <[EMAIL PROTECTED]| | | et.ibm.com> | | | Sent by: Linux on 390 Port | | | <[EMAIL PROTECTED]> | | | | | | | | | 03/18/2002 12:27 PM | | | Please respond to Linux on | | | 390 Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Authentication on Linux using PAM to a z/OS RACF server | | | >---| In theory, you should be able to use PAM to provide Linux authentication and resource contol through to the LDAP server that is part of the z/OS Security Server (nee RACF). Has anyone done this or does anyone have an idea as to where to start? Regards, Jim Elliott
Re: Authentication on Linux using PAM to a z/OS RACF server
Phil, I don't know why it wouldn't work. We didn't test VM. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Philip J. | | | Tully" | | | <[EMAIL PROTECTED]| | | net.ml.com> | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 03/19/2002 08:51| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Authentication on Linux using PAM to a z/OS RACF server | | | >---| Carlos, Can that LDAP/DB2 be vm LDAP and DB2 under VM? Phil Carlos Ordonez wrote: > > Jim, we have successfully access LDAP / DB2 (OS/390) from Linux for S/390 > using PAM LDAP for authentication. If you use RACF, as far as I > understand, you can only have 1 profile for root. This is not good because > if you break the one password you have access to all the roots of a penguin > farm running under VM. Using LDAP/DB2 (OS/390) gives you the security of > OS/390 for your depository and takes away the restriction. Carlos :-) > > Carlos A. Ordonez > IBM Corporation > Server Consolidation > > |-+---> > | | Jim Elliott | > | | <[EMAIL PROTECTED]| > | | et.ibm.com> | > | | Sent by: Linux on 390 Port | > | | <[EMAIL PROTECTED]> | > | | | > | | | > | | 03/18/2002 12:27 PM | > | | Please respond to Linux on | > | | 390 Port| > | | | > |-+---> > > ---| > | | > |To: [EMAIL PROTECTED] | > |cc: | > | From: | > | Subject: Authentication on Linux using PAM to a z/OS RACF server | > | | > > ---| > > In theory, you should be able to use PAM to provide Linux authentication > and resource contol through to the LDAP server that is part of the z/OS > Security Server (nee RACF). Has anyone done this or does anyone have an > idea as to where to start? > > Regards, Jim Elliott
Re: Authentication on Linux using PAM to a z/OS RACF server
Jim, I didn't mean RACF, I meant DB2 under VM - there is no RACF involved. Carlos :-) |-+--> | | Jim Elliott| | | <[EMAIL PROTECTED]| | | et.ibm.com>| | | Sent by: Linux on | | | 390 Port | | | <[EMAIL PROTECTED]| | | T.EDU> | | | | | | | | | 03/19/2002 09:44 AM| | | Please respond to | | | Linux on 390 Port | | | | |-+--> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Authentication on Linux using PAM to a z/OS RACF server | | | >---| > Phil, I don't know why it wouldn't work. We didn't test VM. Carlos :-) Phil and Carlos: RACF on VM (and I believe the CA products as well) do not provide an LDAP server as they do on z/OS and OS/390. However, Neale Ferguson did port an LDAP server to VM some time ago (it was on a CD in a Redbook he co-authored and was on his web site). I don't know if this could be used or not. Regards, Jim Elliott
Re: ISO FILES
Ken, one way would be to mount them via the loopback device: mount -o loop /myiso.iso /mnt/directory-where-I-want-to-access-the-files-under-the-iso I hope you like my mount point name. Carlos Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Ken Dreger: Dr.| | | D" | | | <[EMAIL PROTECTED]>| | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 03/20/2002 09:51| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: ISO FILES | | | >---| I have grabbed the think blue .ISO files and downloaded them to my desktop system. I have hercules installed on the desktop. the question is "how or what can I do with the .iso images to make them into disks ?? I cannot seem to find any material about these files, and they seem like they are pretty common can somebody point me to a good documentation site ?? ken
Re: Samba on Redhat 7.2
Marco, the new rpm for the kernel-source from redhat 2.4.9-31 has all the fixes necessary for SAMBA. You can find the new rpm at: ftp://ftp.redhat.com/pub/redhat/linux/updates/7.2/en/os/s390/ Compile the kernel using this source. Carlos |-+---> | | "Zarro, Marco" | | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 03/27/2002 02:17| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Samba on Redhat 7.2 | | | >---| Hi! I am currently running Samba version 2.2.1a-5 on my Redhat 7.2 system. I can bring up Samba just fine and also connect to my share(s) from my Windows 2000 pc. However, when I try to get to any of the files on my share it appears that the kernel blows up with an illegal operation: 0001. I am also running kernel version 2.4.9-17. Any help would be greatly appreciated. Thanks!
Re: try to load Gigabit OSA Ethernet driver qeth
The redbook is based on Linux 2.4 kernel which works a little different... Carlos :-) Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Steve Gear | | | Schneider | | | Technical | | | Services| | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 04/24/2002 09:13| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: try to load Gigabit OSA Ethernet driver qeth | | | >---| hello, there is a redbook 'ibm server - z800' that describes the whole process. in the linux chapter. are you trying to 'boot from cd' and the script doesn't work. use this. or suse has a fix for this problem. regards, steve gear "Liang, Ih-Cheng" To: [EMAIL PROTECTED] <[EMAIL PROTECTED] cc: m>Fax to: Sent by: LinuxSubject: try to load Gigabit OSA Ethernet on 390 Portdriver qeth <[EMAIL PROTECTED] ARIST.EDU> 04/23/2002 05:12 PM Please respond to Linux on 390 Port I have SuSE v7 running on an S390 LPAR. I tried to load Gigabit OSA Ethernet driver with the following command: insmod qeth qeth_options=noauto,0x0f0a,0x0f0b,0x0f0c This command failed with the following messages: Using /lib/modules/2.2.16/net/qeth.o /lib/modules/2.2.16/net/qeth.o: init_module: Device or resource busy Hint: this error can be caused by incorrect module parameters, including invalid IO or IRQ parameters Any suggestions what I did wrong? Thanks. IC Liang.
Re: Why not nagios?
I have used MON and it doesn't only monitors but it allows you to take some action when the monitor program reports failure and then again when it comes back up. Carlos :-) |-+---> | | Vic Cross | | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 04/24/2002 08:49| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Why not nagios? | | | >---| Just goes to show that change is a constant in Open Source... If Nagios had been around when we wrote the book, I'm certain we would have looked at it instead. :-) As the website states, Nagios is the descendant of Netsaint (Netsaint is dead, long live Netsaint), even to the point of supporting Netsaint plugins. I might have a stab at migrating my Netsaint installation to Nagios, and report how I progress... Ganglia looks *very* interesting, but on a whole other level... The monitor component looks similar to what Netsaint/Nagios provides, but I'm not sure it has the alerting and mapping features. Cheers, Vic Cross - Original Message - From: "PAUL WILLIAMSON" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, April 24, 2002 9:08 PM Subject: Why not nagios? was Re: netsaint per redbook ? > I'm not sure if this should be brought up, but why > waste your time on Netsaint? It's a dead product. > Ethan is no longer developing it. If you want systems > monitoring, look at his new product - nagios. > > There are a bunch others out there, and I'm sure they > would all run under Linux for S/390. > > MON > Ganglia > Big Brother > and a few others, all pretty much can get the job > done... >
Re: Why not nagios?
MON can be found at: http://www.kernel.org/software/mon/ Also in last year's redbook - Distributions - there is a chapter that talks about High Availability and it makes reference to MON and shows a simple setup. Carlos :-) Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Lionel Dyck | | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 04/24/2002 11:01| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Why not nagios? | | | >---| Do you have a url for it? Lionel B. Dyck, Systems Software Lead Kaiser Permanente Information Technology 25 N. Via Monte Ave Walnut Creek, Ca 94598 Phone: (925) 926-5332 (tie line 8/473-5332) E-Mail:[EMAIL PROTECTED] Sametime: (use Lotus Notes address) AIM: lbdyck Carlos Ordonez <[EMAIL PROTECTED]> Sent by: Linux on 390 Port <[EMAIL PROTECTED]> 04/24/2002 06:33 AM Please respond to Linux on 390 Port To [EMAIL PROTECTED] cc bcc Subject Re: Why not nagios? I have used MON and it doesn't only monitors but it allows you to take some action when the monitor program reports failure and then again when it comes back up. Carlos :-) |-+---> | | Vic Cross | | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 04/24/2002 08:49| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> > ---| || |To: [EMAIL PROTECTED] | |cc:| | From:| | Subject: Re: Why not nagios? | || > ---| Just goes to show that change is a constant in Open Source... If Nagios had been around when we wrote the book, I'm certain we would have looked at it instead. :-) As the website states, Nagios is the descendant of Netsaint (Netsaint is dead, long live Netsaint), even to the point of supporting Netsaint plugins. I might have a stab at migrating my Netsaint installation to Nagios, and report how I progress... Ganglia looks *very* interesting, but on a whole other level... The monitor component looks similar to what Netsaint/Nagios provides, but I'm not sure it has the alerting and mapping features. Cheers, Vic Cross - Original Message - From: "PAUL WILLIAMSON" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, April 24, 2002 9:08 PM Subject: Why not nagios? was Re: netsaint per redbook ? > I'm not sure if this should be brought up, but why > waste your time on Netsaint?
Re: try to load Gigabit OSA Ethernet driver qeth
Try the portname in caps... Carlos :-) Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Liang, | | | Ih-Cheng" | | | <[EMAIL PROTECTED]| | | > | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 04/24/2002 03:13| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: try to load Gigabit OSA Ethernet driver qeth | | | >---| Hi, Here are the messages during the boot process: Mar 28 10:48:30 mmsalnxt kernel: SenseID : device 0F08 reports: CU Type/Mod = 1731/01, Dev Type/Mod = 1732/01 Mar 28 10:48:30 mmsalnxt kernel: SenseID : device 0F09 reports: CU Type/Mod = 1731/01, Dev Type/Mod = 1732/01 Mar 28 10:48:30 mmsalnxt kernel: SenseID : device 0F0A reports: CU Type/Mod = 1731/01, Dev Type/Mod = 1732/01 Mar 28 10:48:30 mmsalnxt kernel: SenseID : device 0F0B reports: CU Type/Mod = 1731/01, Dev Type/Mod = 1732/01 I added portname:osagbfda to insmod qeth qeth_options=noauto,0x0f08,0x0f09,0x0f0a,portname:osagbfd8 But still getting the same error. Additional messages in the system's log: Apr 24 12:08:27 mmsalnxt kernel: loading qeth S/390 Gigabit Ethernet driver Apr 24 12:08:27 mmsalnxt kernel: Trying to use card with devnos 0xF08/0xF09/0xF0A Apr 24 12:08:27 mmsalnxt kernel: qeth: received an IDX TERMINATE on irq 0x5AD with cause code 0x22 -- use another portname Apr 24 12:08:28 mmsalnxt kernel: qeth: There were problems in hard-setting up the card. IC Liang. -Original Message- From: Post, Mark K [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 24, 2002 9:45 AM To: [EMAIL PROTECTED] Subject: Re: try to load Gigabit OSA Ethernet driver qeth Was the device reported as being detected during the boot process? E.g., Detected device 010F on subchannel 0016 - PIM = F0, PAM = F0, POM = FF Detected device 0D0C on subchannel 0017 - PIM = F0, PAM = F0, POM = FF Mark Post -Original Message- From: Liang, Ih-Cheng [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 24, 2002 11:57 AM To: [EMAIL PROTECTED] Subject: Re: try to load Gigabit OSA Ethernet driver qeth Yes, I loaded qdio first with insmod qdio. IC Liang. -Original Message- From: Post, Mark K [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 8:49 PM To: [EMAIL PROTECTED] Subject: Re: try to load Gigabit OSA Ethernet driver qeth Did you load the qdio module first? Mark Post -Original Message- From: Liang, Ih-Cheng [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 6:12 PM To: [EMAIL PROTECTED] Subject: try to load Gigabit OSA Ethernet driver qeth I have SuSE v7 running on an S390 LPAR. I tried to load Gigabit OSA Ethernet driver with the following command: insmod qeth qeth_options=noauto,0x0f0a,0x0f0b,0x0f0c This command failed with the following messages: Using /lib/modules/2.2.16/net/qeth.o /lib/modules/2.2.16/net/qeth.o: init_module: Device or resource busy Hint: this error can be caused by incorrect module parameters, including invalid IO or IRQ parameters Any suggestions what I did wrong? Thanks. IC Liang.
Re: Hardening Red Hat 7.2 with Bastille - can't open Questions.txt
I have Bastille working in RedHat 7.2 using Curses. You probably miss running the Install.sh from Bastille to put everything in the right places. Contact me if you want. Carlos :-) Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Michael | | | MacIsaac/Poughkeepsi| | | e/IBM@IBMUS | | | Sent by: Linux on | | | 390 Port| | | <[EMAIL PROTECTED]| | | .EDU> | | | | | | | | | 04/25/2002 10:16 AM | | | Please respond to | | | Linux on 390 Port | | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Hardening Red Hat 7.2 with Bastille - can't open Questions.txt| | | >---| Hi list, I wanted to harden a lean Red Hat install with Bastille. Because there is no X installed, I use curses and seem to get Bastille installed but then get the error: Can't open ./Questions.txt TUI data file... at ./InteractiveBastille line 403. even though the file Questions.txt is right in the same directory. Has anyone seen this? For reference, here is what I did (thanks for help from Carlos Ordonez): Went to Bastille at: http://sourceforge.net/project/showfiles.php?group_id=403&release_id=78589 Did a search on "Curses" at http://search.cpan.org/ to get the following files: # cd /opt # ls -l -rw-r--r--1 root root 244474 Apr 24 10:44 Bastille-1.3.0.tar.bz2 -rw-r--r--1 root root25338 Apr 24 10:44 Bastille-Curses-module-1.3.0-0.5mdk.noarch.rpm -rw-r--r--1 root root75923 Apr 24 10:44 Curses-1.06.tar.gz # tar -xzf Curses-1.06.tar.gz # cd Curses-1.06 # perl Makefile.PL # make ... # make install ... # cd .. # tar -xjf Bastille-1.3.0.tar.bz2 # cd Bastille # mkdir /usr/lib/perl5/site_perl/5.6.0/s390-linux/Bastille # cp *.pm /usr/lib/perl5/site_perl/5.6.0/s390-linux # cd Bastille # cp *.pm /usr/lib/perl5/site_perl/5.6.0/s390-linux # cd .. # mkdir /usr/lib/perl5/site_perl/5.6.0/s390-linux/Curses # cp Curses/Widgets.pm /usr/lib/perl5/site_perl/5.6.0/s390-linux/Curses # mkdir /usr/share/Bastille # ./InteractiveBastille -c Using Curses user interface module. Only displaying questions relevant to the current configuration. Can't open ./Questions.txt TUI data file... at ./InteractiveBastille line 403. -Mike MacIsaac, IBM [EMAIL PROTECTED] (845) 433-7061 P.S. Puzzle to think about: ... . . ...... ... . ... ... ... .. .. .. .. .. ... ... .. ... ... ... ... .. .. .. ... ... ... ... .. .. ... .. .. ... ... ... ... . ... ... ... .
Re: Samba causes kernel to abend
Patches 3 and 4 from the IBM opensource website will fix the SAMBA problem. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Philip J. | | | Tully" | | | <[EMAIL PROTECTED]| | | net.ml.com> | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 05/02/2002 09:44| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Samba causes kernel to abend | | | >---| There is a patch for this I believe. I am on a call and will look when I finish. Phil "Peter E. Abresch Jr. - at Pepco" wrote: > > I am having a problem with Samba. I am running SuSE Linux SLES7 beta. > Samba seems to work OK. I can open up pictures and text and many other > type of files. However, when I use Microsoft Word/2002 under > Windows/2000 to o > > [Image]
Re: Samba causes kernel to abend
In the SRPM for the kernel source, you can check the SPEC file and it will tell you all the patches applied to the kernel. Carlos :-) Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Peter E. | | | Abresch Jr. - | | | at Pepco" | | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 05/03/2002 08:21| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Samba causes kernel to abend | | | >---| How can I tell what patches are already on if any? Peter Michael MacIsaac <[EMAIL PROTECTED]> Sent by: Linux on 390 Port <[EMAIL PROTECTED]> 05/02/2002 10:18 AM Please respond to Linux on 390 Port To: [EMAIL PROTECTED] cc: Subject:Re: Samba causes kernel to abend > it creates a problem and Linux has to be rebooted. Known problem - you can: (a) Pay for support and SuSE will supply you with the latest fixes, or, (b) Patch the kernel with IBM developerWorks patches 3 and 4: For (b) I wrote it up redbook-style (which has become a bad habit :)) Go to: http://www10.software.ibm.com/developerworks/opensource/linux390/index.shtml Under "Downloads for kernel 2.4" in the left frame, we click on Recommended level (2.4.7). We see the patches from November, 2001 and click on linux-2.4.7-s390-3 which moves us further down the same HTML page. We then click on linux-2.4.7-s390-3.tar.gz which brings up a browser panel with the GNU GPL. When we click Accept, we are able to download the patch. We do the same for patch 4 (linux-2.4.7-s390-4.tar.gz), and FTP these two files to /usr/src on the Linux system to be patched. (you may also consider patches 5 and 6, but they are not needed for the kernel oops) Get the kernel source Those which come with the distribution are usually shipped in RPMs. If the RPM is installed, the head of the source tree is almost always in the directory /usr/src. If you do not have the directory /usr/src/linux-2.4.7.SuSE, it can be added via YaST as follows: # yast Choose Package Management (Update, Installation, Queries) Choose Change or create configuration Choose Development (C, C++, Lisp, etc.) Choose kernel-source (with a space bar, then F10) Escape up a level Choose Start installation - watch for "INSTALLATION COMPLETE" Choose Main Menu - SuSEconfig is launched Choose Exit Yast You should now have a directory /usr/src/linux-2.4.7.SuSE. Patch the code We now have the patches as tar files named linux-2.4.7-s390-3.tar.gz and linux-2.4.7-s390-4.tar.gz on our Linux system. We untar them: # cd /usr/src # tar -xzf linux-2.4.7-s390-3.tar.gz # tar -xzf linux-2.4.7-s390-4.tar.gz We now have .diff files which are also called patches. We peek into them using the head command to see the directory structure: # ls *.diff linux-2.4.7-s390-3.diff linux-2.4.7-s390-4.diff # head -3 *.diff ==> linux-2.4.7-s390-3.diff <== linux-2.4.7-s390/Documentation/s390/chandev.8 --- linux-2.4.7/Documentation/s390/chandev.8Wed Nov 7 11:43:51 2001 +++ linux-2.4.7-s390/Documentation/s390/chandev.8 Wed Oct 17 14:44:39 2001 ==> linux-2.4.7-s390-4.diff <== diff -urN linux-2.4.7/arch/s390/kernel/entry.S linux-2.4.7-s390/arch/s390/kernel/entry.S --- linux-2.4.7/arch/s390/kernel/entry.SFri Nov 23 16:30:58 2001 +++ linux-2.4.7-s390/arch/s390/kernel/entry.S Fri Nov 23 16:32:38 2001 Note that the base directory is named linux-2.4.7 and the directory from which the patch was obtained is linux-2-4-7-s390. To apply a pa
Re: CLONING Process under RH 7.2
Here is a piece of a script we use for cloning RedHat style servers: cat /mnt/gold/etc/osa.hosts | sed -e "s/98.33.98.x/$ipaddr/g" \ -e "s/li/$host/g" > /mnt/gold/etc/hosts.new cat /mnt/gold/etc/sysconfig/osa.network | sed -e "s/98.33.98.1/$gateway/g" \ -e "s/li/$host/g" > /mnt/gold/etc/sysconfig/network.new cat /mnt/gold/etc/sysconfig/network-scripts/osa.ifcfg-eth0 | sed -e "s/98.33.98.x/$ipaddr/g" \ -e "s/98.33.98.255/$broadcast/g" \ -e "s/255.255.255.0/$mask/g" \ -e "s/98.33.98.0/$netaddr/g" > /mnt/gold/etc/sysconfig/network-scripts/ifcfg-eth0.new cat /mnt/gold/etc/sysconfig/network-scripts/osa.ifcfg-eth0:0 | sed -e "s/98.33.98.x/$secipadr/g" \ -e "s/98.33.98.255/$broadcast/g" \ -e "s/255.255.255.0/$mask/g" \ -e "s/98.33.98.0/$netaddr/g" > /mnt/gold/etc/sysconfig/network-scripts/ifcfg-eth0:0.new cat /mnt/gold/etc/osa.dtpasswd | sed -e "s/li/$host/g" > /mnt/gold/etc/dtpasswd.new cat /mnt/gold/etc/httpd/conf/osa.hostname.conf | sed -e "s/98.33.98.x/$ipaddr/g" \ -e "s/li/$host/g" > /mnt/gold/etc/httpd/conf/hostname.cnew mv /mnt/gold/etc/hosts.new /mnt/gold/etc/hosts mv /mnt/gold/etc/sysconfig/network.new /mnt/gold/etc/sysconfig/network mv /mnt/gold/etc/sysconfig/network-scripts/ifcfg-eth0.new /mnt/gold/etc/sysconfig/network-scripts/ifcfg-eth0 mv /mnt/gold/etc/sysconfig/network-scripts/ifcfg-eth0:0.new /mnt/gold/etc/sysconfig/network-scripts/ifcfg-eth0:0 mv /mnt/gold/etc/dtpasswd.new /mnt/gold/etc/dtpasswd mv /mnt/gold/etc/httpd/conf/hostname.cnew /mnt/gold/etc/httpd/conf/hostname.conf Carlos :-) Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Chet Norris | | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 05/03/2002 09:20| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: CLONING Process under RH 7.2 | | | >---| I'm currently running multiple test images of SuSE 7.0 under VIF, using the Distributions redbook (section 16.6.8) cloning process, and it works great. What files would need to be changed to do the same process under RedHat 7.2? To clone a SuSE image I have been modifying the IP address and image name in etc/hosts, etc/rc.config and etc/route.conf. = Chet Norris Marriott International,Inc. __ Do You Yahoo!? Yahoo! Health - your guide to health and wellness http://health.yahoo.com
Re: many Linux guests under vm. how to manage.
Most definitely #1 option. The biggest obstacle for a Unix admin person is to loose all control of whatever he/she is administrating. Mainframers keep control of the box and anything that spills into VM, images, performance of VM, capacity planning, software upgrades of VM, VM's TCPIP stack, guest lans and let the application people administer their own servers. This usually is the most amicable solution and spawns friendly interaction between the two groups, which I think helps in skills transfer. Carlos :-) Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Rich Blair | | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 05/03/2002 02:30| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: many Linux guests under vm. how to manage. | | | >---| We're a Software company and have many products and many developers. We'd be interested in hearing your thoughts on ways to manage many Linux guests in a development environment. Options we've considered: 1. Give each development group their own Linux. Possibly a couple of members of the group serve as admins and have root authority. They would be responsible for the care and feeding of their respective Linux system. We only get involved if requirements extend to VM admin tasks. 2. We (IBM syprogs) micromanage each Linux - retaining complete control of each system - never divulging the root password etc. We do all Linux upgrades, vm work, etc... Thanks.
Re: synchronize passwords
We have tested using also the pam winbind to authenticate users login into Linux. Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Tim Verhoeven | | | <[EMAIL PROTECTED]> | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 05/15/2002 02:06| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: synchronize passwords | | | >---| On Wed, 15 May 2002, Philip J. Tully wrote: > Is this using the winbind portion of Samba? Has anyone used Winbind? See below for answer. > > Tim Verhoeven wrote: > > > > On Mon, 13 May 2002, John Summerfield wrote: > > > > > > in our company our passwords are synchronized with a tool called pass-go. > > > > My idea is to also synchronize the linux passwords with our RACF or > > > > lan-passwords. > > > > > > > > Pass-Go is not available for L/390.. bad luck. Out domain controller is > > > > OS/2, so it is unfortunately not possible to synchronize via samba. > > > > > > Have you actually tried? Linux can authenticate against an NT server, though I > > > don't know how it's done. > > > > You can do this with PAM, there is a module called pam_smb_auth that lets > > you authenticate against domain controllers. > > > > Basic setup is just adding this module to the auth section of the pam > > config files. It depends on how tight integration you want. With pam_smb_auth you can only authenticate to a domain. In short use the passwords that are stored in the domain. The users still have to be present in the /etc/passwd file. The winbind daemon uses nss to import the domain users and groups into the UNIX/Linux environment. This means that all domain users appear to being added to the /etc/passwd file. This is done by a library thats is the link between the winbind daemon and nss. Winbind also included a pam module that also allows you to authenticate users that are in the domain, so this pam module is simular to pam_auth_smb. So the choice is : - only passwd integration : pam_smb_auth - user integration : winbindd + winbind nss library - complete : winbindd + winbind nss lib + winbind pam module I'm using the second to import users for a Samba file and print server. Regards, Tim -- === Tim Verhoeven Linux & Open Source Specialist GSM : 0496 / 693 453 + e-business solutions Email : [EMAIL PROTECTED] + consulting URL : www.sin.khk.be/~dj/ + Server consolidation ===
Re: Antwort: Re: synchronize passwords
In the redbook Linux for s/390 and zSeries: distributions there is a chapter that shows how to setup LDAP for authentication. Authenticating against RACF has limitations because you can only have one RACF user profile with a specific name. In other words one ROOT user only. SO if you are doing a bunch of linux images you would have to do something in RACF to manipulate the names of the root userids. We tested using LDAP-DB2 on OS/390 and it worked fine. You need to get some missing schemas (at that time) some if you are looking for more info let me know. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Tim-Chr. Hanschen" | | || | | Sent by: Linux on | | | 390 Port| | | <[EMAIL PROTECTED]| | | .EDU> | | | | | | | | | 05/16/2002 02:10 AM | | | Please respond to | | | Linux on 390 Port | | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Antwort: Re: synchronize passwords | | | >---| Do you have something like a cookbook for configure PAM to authenticate users login and samba access to a RACF database? I do not know how to set up. Well, via Perl-LDAP I get a connection to RACF... so far so good, but do I have to set up ldap.conf, slapd.conf, ....? TIA, - Tim - Carlos Ordonez <[EMAIL PROTECTED]>@VM.MARIST.EDU> on 15.05.2002 20:21:33 Bitte antworten an Linux on 390 Port <[EMAIL PROTECTED]> Gesendet von: Linux on 390 Port <[EMAIL PROTECTED]> An: [EMAIL PROTECTED] Kopie: Thema:Re: synchronize passwords We have tested using also the pam winbind to authenticate users login into Linux. Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Tim Verhoeven | | | <[EMAIL PROTECTED]> | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 05/15/2002 02:06| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> > ---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: synchronize passwords | | | > ---| On Wed, 15 May 2002, Philip J. Tully wrote: > Is this using the winbind portion of Samba? Has anyone used Winbind? See below for answer. > > Tim Verhoeven wrote: > > > > On Mon, 13 May 2002, John Summerfield wrote: > > > > > > in our company our passwords are synchronized with a tool called pass-go. > > > > My idea is to also synchronize the linux passwords with our RACF or > > > > lan-passwords. > > > > > > > > Pass-Go is not available for L/390.. bad luck. Out domain controller is > > > > OS/2, so it is unfortunately not possible to synchronize via samba. > > > > > > Have you actually tried? Linux can authenticate against an NT ser
Re: Oracle on linux/390
Phil, do you have an LVM created? I think you need one. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Philip J. | | | Tully" | | | <[EMAIL PROTECTED]| | | net.ml.com> | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 05/28/2002 02:29| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Oracle on linux/390 | | | >---| Hello all, We are in the process of evaluating Oracle on linux/390. One of the Oracle Dba's provided a multi-volume input file to load the database. After file 1 the load stops. It appears either Oracle does not recognize the next file as being part of a mult-volume file or that file 1 is part of a mult-volume file. The dba has taken the same file and was able to load it on an Oracle system on another platform. Any ideas how to get around this? Phil Tully
Re: Oracle on linux/390
What version of Oracle is the input file from? Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Philip J. | | | Tully" | | | <[EMAIL PROTECTED]| | | net.ml.com> | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 05/29/2002 07:25| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Oracle on linux/390 | | | >---| We are definitely running with an LVM. The current database areas have plenty of space: /dev/or2/lvor2 23G 5.0G 17G 22% /ora02 /dev/or3/lvor3 23G 4.2G 18G 19% /ora03 The problem is the input file isn't being recognized properly. Phil Carlos Ordonez wrote: > > Phil, do you have an LVM created? I think you need one. Carlos :-) > > Saying goes: Great minds think alike - I say: Great minds think for > themselves! > > Carlos A. Ordonez > IBM Corporation > Server Consolidation > > |-+---> > | | "Philip J. | > | | Tully" | > | | <[EMAIL PROTECTED]| > | | net.ml.com> | > | | Sent by: Linux | > | | on 390 Port | > | | <[EMAIL PROTECTED]| > | | RIST.EDU> | > | | | > | | | > | | 05/28/2002 02:29| > | | PM | > | | Please respond | > | | to Linux on 390 | > | | Port| > | | | > |-+---> > > ---| > | | > |To: [EMAIL PROTECTED] | > |cc: | > | From: | > | Subject: Oracle on linux/390 | > | | > > ---| > > Hello all, > > We are in the process of evaluating Oracle on linux/390. One of the > Oracle Dba's provided a multi-volume input file to load the database. > After file 1 the load stops. It appears either Oracle does not recognize > the next file as being part of a mult-volume file or that file 1 is part > of a mult-volume file. The dba has taken the same file and was able to > load it on an Oracle system on another platform. > > Any ideas how to get around this? > > Phil Tully
Re: Questions about TSM client for linz
There is a new TSM client under Linux that supports ext3. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Ferguson, Neale" | | || | | Sent by: Linux on 390 | | | Port| | | <[EMAIL PROTECTED]| | | > | | | | | | | | | 06/07/2002 09:32 AM | | | Please respond to Linux | | | on 390 Port | | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Questions about TSM client for linz | | | >---| Phil, Have you checked out the System Management Redpiece that Jim referred to in an early post? Chapter 11 is devoted to Tivoli. On page 195 there is a note: "Important: The TSM 4.2.0 client can only recognise ext2 and nfs filesystems. If you are using other types of filesystems (e.g. ext3, reiserfs, jfs, xfs, etc.) then you need to add VIRTUALMountpoint statements in your dsm.sys file for each mount point that is not ext2 or nfs (if you want to back up those filesystems)."
Re: S/390 Linux on 9672-R32 ?
Guys, I was hoping someone will say it but if I remember correctly for you to run Linux on a G2, you must have a certain Micro Code Level because of a missing instruction (set? don't remember if it is one or more). I need to dig around to find the right level. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+--> | | Jim Elliott| | | <[EMAIL PROTECTED]| | | et.ibm.com>| | | Sent by: Linux on | | | 390 Port | | | <[EMAIL PROTECTED]| | | T.EDU> | | | | | | | | | 06/14/2002 11:54 AM| | | Please respond to | | | Linux on 390 Port | | | | |-+--> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: S/390 Linux on 9672-R32 ? | | | >---| > Will S/390 Linux run native on a 9672-R32 ? > Or would you need VIF ? Neil: Linux will run on a G2, but performance may be poor due to lack of IEEE floating point (and it is not supported). VIF has nothing to do with this, and besides VIF is very much a dead product (withdrawn from marketing). z/VM V4 is the solution for multiple Linux images on S/390 and zSeries and requires G5 or later. Regards, Jim
Re: S/390 Linux on 9672-R32 ?
Jim, I am confuse --- it sounds like an R32 should be a G1 with 3 CPUs. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+--> | | Jim Elliott| | | <[EMAIL PROTECTED]| | | et.ibm.com>| | | Sent by: Linux on | | | 390 Port | | | <[EMAIL PROTECTED]| | | T.EDU> | | | | | | | | | 06/14/2002 02:56 PM| | | Please respond to | | | Linux on 390 Port | | | | |-+--> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: S/390 Linux on 9672-R32 ? | | | >---| > Will S/390 Linux run native on a 9672-R32 ? David: The R32 is a "G2" box, not a "G3". See http://www.vm.ibm.com/devpages/jelliott/cmosproc.html Carlos: The original "G2" systems did not have the Relative and Immediate instruction set (or at least not all of it was present). This was added via an EC around the time we shipped the "G3" (9672-Rn4 and 2003/MP 2000) systems. Every machine out there should have had this EC on for several years now. David Boyes posted the EC number here about two years ago, and it is probably somewhere in the archives. Regards, Jim
Re: 2.4.17-may timer pop problems
We have been running 2.4.17-may with the timer patch and have been doing a battery of tests for a class that we are preparing and it is behaving perfectly. We have tested QDIO, guest lans, all sorts of journaling file systems, ACL/EA, devfs It hasn't crashed since we brought it up - about 2 weeks... Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Mike Kershaw| | | <[EMAIL PROTECTED]| | | ist.edu>| | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 06/20/2002 12:30| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: 2.4.17-may timer pop problems | | | >---| I'm running 2.4.17-may with the no timer patch, qdio, and guest lans. I've noticed it has the highly unfortunate tendency to just completely drop dead with no errors on the console. The console drops into CP READ on any attempt to interact with the linux/390 system, and will not resume. a re-IPL is the only route left. No panic message or anything useful. It doesn't seem to be load dependent - happens fully idle, happens in the middle of compiling. Happens doing network traffic, happens sitting there doing nothing, happens with the console attached and with the console disconnected (hey, it was worth a shot). Usually happens within 15-25 minutes of IPL. Anyone else encounter this? -m -- Michael Kershaw [EMAIL PROTECTED] Linux Systems Programmer, Information Technology "Don't worry, I'm sure they'll listen to Reason." -- Fisheye, Snowcrash
Re: 2.4.17-may timer pop problems
Not at all, we use "shutdown -r now" wait a few... and telnet back into it without problems. Something I noticed is that when it IPLs, it moves. I guess is a perception but it appears very fast. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Ferguson, Neale" | | || | | Sent by: Linux on 390 | | | Port| | | <[EMAIL PROTECTED]| | | > | | | | | | | | | 06/20/2002 04:48 PM | | | Please respond to Linux | | | on 390 Port | | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: 2.4.17-may timer pop problems | | | >---| Do you have any problems shutting down? > -Original Message- > We have been running 2.4.17-may with the timer patch and have > been doing a > battery of tests for a class that we are preparing and it is behaving > perfectly. We have tested QDIO, guest lans, all sorts of > journaling file > systems, ACL/EA, devfs It hasn't crashed since we > brought it up - > about 2 weeks... Carlos :-)
Re: Tripwire on S390
I have installed Tripwire and run the reports on SuSE 2.4.17 and 2.4.7. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Charles | | | Lysholm/Chicago/| | | IBM@IBMUS | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 07/10/2002 12:18| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Tripwire on S390 | | | >---| Our team is attemptng to install Tripwire on a s/390 guest. It appears from the source that we pulled that it is only supported for intel and sparc. Has anybody had success compiling and using Tripwire? If so, could you give some advise on what it took. Chuck Lysholm IBM Global Services Advisory Programmer Analyst [EMAIL PROTECTED] (630) 979-7725
Re: Linux data on IBM RVA
The default I think is to reserved 5% of the size of the filesystem for root. Look at the -m on the mkfs. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Alan Cox| | | <[EMAIL PROTECTED]| | | uu.org.uk> | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 07/10/2002 05:23| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Linux data on IBM RVA | | | >---| > The df command shows /dev/dasdb1 as having 6983168 1K blocks. But it also > shows 846212 used, and 5776348 available. 846212+5776348=6622560. > Where did 6983168-6622560=360608 blocks go to? I assume it is filesystem > overhead, but 360MB of filesystem overhead seems a little high??? The default behaviour is to reserve part of the disk for root. See man tune2fs. In terms of general overheads an ext3 file system has a static allocation for bitmaps, superblocks and inode blocks. That can make it look high when empty compared to a file system which dynamically allocates all of its metadata.
Re: Tripwire on S390
I think Tripwire is available with SuSE for Linux for s390. Carlos :-) (I don't have access to a machine right now but I think I installed it from yast). Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Post, Mark K" | | | <[EMAIL PROTECTED]| | | om> | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 07/10/2002 01:41| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Tripwire on S390 | | | >---| I just downloaded the source from Sourceforge. I made a tweak to the Makefile, and tweaked the i686 include file. It seems to be compiling ok. See if this diff helps. Mark Post -Original Message- From: Charles Lysholm [mailto:[EMAIL PROTECTED]] Sent: Wednesday, July 10, 2002 12:18 PM To: [EMAIL PROTECTED] Subject: Tripwire on S390 Our team is attemptng to install Tripwire on a s/390 guest. It appears from the source that we pulled that it is only supported for intel and sparc. Has anybody had success compiling and using Tripwire? If so, could you give some advise on what it took. Chuck Lysholm IBM Global Services Advisory Programmer Analyst [EMAIL PROTECTED] (630) 979-7725 (See attached file: tripwire.diff) tripwire.diff Description: Binary data
Re: Failed to get ACL's to work
You probably didn't turn the ACLs on, in the kernel configuration. Do a
make menuconfig under the linux directory and check the filesystems
section. You should see something for the ACLs under the ext2 file system.
Carlos :-)
|-+--->
| | Tim Verhoeven |
| | <[EMAIL PROTECTED]> |
| | Sent by: Linux |
| | on 390 Port |
| | <[EMAIL PROTECTED]|
| | RIST.EDU> |
| | |
| | |
| | 09/30/2002 03:37|
| | AM |
| | Please respond |
| | to Linux on 390 |
| | Port|
| | |
|-+--->
>---|
|
|
|To: [EMAIL PROTECTED]
|
|cc:
|
| From:
|
| Subject: Failed to get ACL's to work
|
|
|
>---|
Hello All,
I'm trying to implement Samba and ACL on a G5 S/390. The installation went
fine (off everything) but the ACL tools now give me a error.
When I'm trying to set a ACL (using setfacl) I get a "function not
implemented" error. But I have seen no error in the compilation of these
tools (I used the source rpm packages)
I did a strace and this is the relevant part :
stat64("acl.txt", {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
getuid() = -1 ENOSYS (Function not implemented)
getuid() = -1 ENOSYS (Function not implemented)
write(2, "setfacl: acl.txt: Function not i"..., 43) = 43
_exit(1)
The list of software involved and there versions :
2.4.17acl s390 (Suse SLES 7 / SuSE 7.2)
acl-2.0.18-0.src.rpm
e2fsprogs-1.27ea-26.4.src.rpm
attr-2.0.10-0.src.rpm
fileutils-4.1.8acl-65.5.src.rpm
glibc-2.2.4-31
linux-2.4.17acl-0.8.28.diff
linux-2.4.17ea-0.8.26.diff
Has anyone had a simular issue ? Or can give me hints to further debug
this issue ?
Thanks,
Tim
--
===
Tim Verhoeven
Linux & Open Source Specialist
GSM : 0496 / 693 453 + e-business solutions
Email : [EMAIL PROTECTED] + consulting
URL : www.sin.khk.be/~dj/ + Server consolidation
===
Re: Dasd partition disappeared
check the IBM opensource website http://www10.software.ibm.com/developerworks/opensource/linux390/current2_4_x-august2001.shtml for: 2001-12-12 patches s390-tools-4.tar.gz MD5 recommended (2001-12-12) This patch contains the following s390-tools bug fix: Description: fdasd: missing 390 data set name for big disks. Symptom: One of the 390 data set names, which exists for each partition, is missing for modell 9 DASDs. Problem: The modell 9 DASD needs a special freespace label within the VTOC. In this case the "last available FMT1 DSCB"-pointer wasn't set to the right label. Solution: This pointer is now set correctly. Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Michael K | | | Lambert | | | <[EMAIL PROTECTED]| | | > | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 10/08/2002 01:48| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Dasd partition disappeared | | | >---| Hello everyone, I'm running a Red Hat 7.2 linux/390 network on a s390 G6 under z/VM. Just yesterday I added a 5 gig minidisk from a mod9 to one of our images using dirmaint. I added the new disk to zipl.conf, zipl'd, shutdown and logged the image and brought it back up with the minidisk. I dasdfmt'd, fdasd'd and put a ext2 filesystem on it. I then used the disk as normal, NFS exporting it and sharing the data held on it with no problem. However, this morning I bounced the image again and, on startup, I got the message "bad superblock" on dasde, the new disk, and was thrown into single user mode. After commenting out the /dev/dasde1 entry in /etc/fstab I was able to boot fully. Attempting to fun e2fsck on the disk resulted in the "bad superblock" message, and fdasd reported that there was no volume label or partition on it. The disk is still fully visible on the VM level, it just appears that the linux level formatting had disappeared entirely. Has anyone else seen any problems similar to this? I have had this happen once before, but I assumed it occured because I had linked the drive from the owner to itself, eg from image lnxsa01 I issued the command "#cp link lnxsa01 401 401 mr," so that I wouldn't need to bounce the image to pick up the drive. I avoided that self-linking this time, but here it is again. Michael Lambert
Re: qeth problems
I think your problems is that the addparms is add_parms. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Michael K | | | Lambert | | | <[EMAIL PROTECTED]| | | > | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 10/09/2002 11:29| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: qeth problems | | | >---| Hello again, I've been trying to give a linux image access to an OSA via the qeth module with no luck. I have been following the instructions in the "Large Scale Linux Deployment" Redpiece because it deals with Red Hat 7.2 systems, which is what we run here. While searching through previous posts on the subject I found conflicting advice, so here we go again. Here are the contents of /etc/chandev.conf: noauto;qeth0,0x11f4,0x11f5,0x11f6;addparms,0x10,0x11f4,0x11f6,portname:OSDF9P0 Here are the relevant contents of modules.conf: alias eth0 qeth add probeall qeth qdio Whenever I issue an "ifup eth0" command, it generate these results: SIOCSIFMTU: No such device SIOCGIFFLAGS: No such device Failed to bring up eth0. And here is what is produced in the kernel buffer: IPv6 v0.8 for NET4.0 IPv6 over IPv4 tunneling driver qeth: loading qeth S/390 OSA-Express driver ($Revision: 1.260.2.10 $/$Revision: 1.86.2.1 $/$Revision: 1.31 $:IPv6) qeth: allocated 0 spare buffers debug: qeth_setup: new level 3 debug: qeth_misc: new level 2 debug: qeth_data: new level 2 debug: qeth_control: new level 2 debug: qeth_sense: new level 2 debug: qeth_qerr: new level 2 debug: qeth_trace: new level 2 chandev_setup unknown verb noauto;qeth0,0x11f4,0x11f5,0x11f6;addparms,0x10,0x11f4,0x11f6,portname:OSDF9P0 on line no 1 interpreted as addparms,0x10,0x11f4,0x11f6,portname:OSDF9P0 after the last semicolon . Type man chandev for more info. qeth: Trying to use card with devnos 0x11F4/0x11F5/0x11F6 qeth: sense data available on write channel. qeth: irb: 00 c2 40 17 00 b6 5f 58 02 00 00 22 00 80 00 00 qeth: irb: 01 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 qeth: sense data: 80 00 00 00 00 00 00 01 00 00 01 00 00 00 00 00 qeth: sense data: 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 qeth: unit check/exception in write_handler (irq 0x668, devstat 0x02, schstat 0x00, rqparam 0x1004) qeth: IDX_ACTIVATE(wr) on write channel irq 0x668: timeout qeth: There were problems in hard-setting up the card. qeth: loading qeth S/390 OSA-Express driver ($Revision: 1.260.2.10 $/$Revision: 1.86.2.1 $/$Revision: 1.31 $:IPv6) qeth: allocated 0 spare buffers debug: qeth_setup: new level 3 debug: qeth_misc: new level 2 debug: qeth_data: new level 2 debug: qeth_control: new level 2 debug: qeth_sense: new level 2 debug: qeth_qerr: new level 2 debug: qeth_trace: new level 2 qeth: Trying to use card with devnos 0x11F4/0x11F5/0x11F6 qeth: sense data available on write channel. qeth: irb: 00 c2 40 17 00 b6 5f 58 02 00 00 22 00 80 00 00 qeth: irb: 01 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 qeth: sense data: 80 00 00 00 00 00 00 01 00 00 01 00 00 00 00 00 qeth: sense data: 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 qeth: unit check/exception in write_handler (irq 0x668, devstat 0x02, schstat 0x00, rqparam 0x1004) qeth: IDX_ACTIVATE(wr) on write channel irq 0x668: timeout qeth: There were problems in hard-setting up the card. The "unknown verb" en
Re: RH network changes
/etc/hosts /etc/sysconfig/network /etc/sysconfig/network-scripts/ifcfg-eth0 /etc/httpd/conf/hostname.conf I think. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Betsie Spann| | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 10/22/2002 05:31| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: RH network changes | | | >---| Hi, I'm trying to change my network settings on a RH 7.1 system from the 3270 console. On SuSE, I update /etc/route.conf, /etc/rc.config, /etc/chandev.conf, /etc/modules.conf (if necessary), run /sbin/SuSEconfig, ifconfig and reboot. I suspect the RH files are in /etc/sysconfig. TELNET,RLOGIN is not an option. Any one know the files needed? Betsie Spann
Re: chandev question
put noauto in chandev.conf Carlos Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Dave Myers | | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 10/21/2002 01:12| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: chandev question | | | >---| I tried looking this up on developerworks...but I can not find the Documentation 2.4 library on that page anymore...has it been moved? I tried changing my redhat 7.2 network device yesterday from the built-in MP3000 nic cards...to a bustech ns140 device. (fyi...I use the ns140 for 3 other os/390 lpars and it's working fine)... I modified /etc/chandev.conf to the bustech device numbers and cycled redhat. When I came up, the system still used the MP3000 nic cards for it's network devices. It did not use the new devices. I noticed messages in /proc/chandev that said something like b06/b07 devices forced by chandev And...I notice msgs indicating that the old nic card addresses were auto-sensed by chandev??? How do I tell redhat to use what's in my chandev and to not auto-sense?? For some reason...it looks also like my new bustech devices are not being detected by redhat? Any ideas? Tia Dave
Re: Marist Linux and OSA-Express
Anne, Vic - I might have missed previous responses but what Anne shows in the messages, 3088/60, I think is consider an OSA in LCS mode. This could be that you need to put an ipldelay on the boot parameter. I haven't used the Marist distro in a long time and I never experienced problems when coming up with an LCS card on an LPAR but I think there were some people that did. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Vic Cross | | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 10/17/2002 12:11| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Marist Linux and OSA-Express | | | >---| Anne, It would appear that OSA-E is not (at this time) supported by the Marist system. The problem you see is happening because your OSA-Express is not an OSA -- OSA refers to the pre-Express OSA cards, or an OSA defined in LCS mode. If there\'s not an option that says \"QDIO\" or \"OSA-Express\", you\'re out of luck. If you want to play with Marist on your OSA-Express, redefine it to use LCS rather than QDIO. This will require IOCDS work, and a port cannot be in LCS and QDIO mode simultaneously so you would not be able to do this if your port is used by another LPAR/guest. This is also not possible if you have the Gigabit Ethernet OSA-Express, as it *only* supports QDIO. Rather than changing your IOCDS, you could use CTC to link to another system and use that as your router to the outside world. (Of course if you don\'t already have CTC defined to that LPAR and would have to update the IOCDS to do so, you might as well change your OSA...) There\'s network voodoo involved, but nothing that this list couldn\'t get you through! ;) Best of luck, Vic Cross On 17.10.2002 at 05:36:53, \"Peticolas, Anne\" <[EMAIL PROTECTED]> wrote: > Hi, > I\'m trying to get my feet wet by bringing up Marist distribution from > tape in an LPAR environment. Cannot get network connectivity. (This seems > to be a common problem as I\'ve looked through the archives of this list, but > do not see an exact match to my problem, so . . . ) I\'m wondering now > whether I should be doing something different or whether OSA-Express is > supported by Marist. Any help/advice would be appreciated. > I\'ve tried several variations. Right now the device is configured in > the IOCDS as type OSE. When it comes up I see > > Detected device 0090 on subchannel 01C5 - PIM = 80 PAM = 80 POM = FF > Detected device 0091 on subchannel 01C6 - PIM = 80 PAM = 80 POM = FF > Detected device 009E on subchannel 01C7 - PIM = 80 PAM = 80 POM = FF > > and > > SenseID: device 0090 reports: Dev Type/Mod = 3088/60 > SenseID: device 0091 reports: Dev Type/Mod = 3088/60 > SenseID: device 009E reports: Dev Type/Mod = 3088/62 > > I answer 2) for osa ethernet to \"Select the type of your network device:\" > and > noauto=1 devno_portno_pairs=0x0090,0 to \"Please type in the options for the > lcs module:\" > > After answering network questions, I get > Bringing up interface lo >[OK] > Bringing up interface eth0 > > and it just hangs there forever. > > > Regards, >Anne Peticolas >Dept. of Veterans\' > Affairs >Austin, Texas >
Re: Bastille for RH 7.2 on L/390
We have Bastille running on SuSE. RedHat is supposed to be the distro for Bastille. What problems are you having? Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | paultz | | | <[EMAIL PROTECTED]| | | > | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 10/29/2002 03:58| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Bastille for RH 7.2 on L/390 | | | >---| Does anyone have Bastille working on RH 7.2? Is there an s390 RPM flavor? Thanks, Paul
Re: Bastille for RH 7.2 on L/390
Paul, here is a piece of the workbook that we are using in class: The site recommends using version is 1.3.0 RPMs, however, they do not work with the s390 architecture, so the source tar file, Bastille-1.3.0.tar.bz2, is used. Also you need to install Perl curses or Tk modules, depending on what mode you want to run in: curses mode (-c) or Xwindows mode (-x). http://sourceforge.net/project/showfiles.php?group_id=403&release_id=78589 To install Bastille, do the following: Install Curses or Tk perl module. (you need to install only one!) If you prefer to run Bastille using Curses, untar and install Curses: # cd /usr/src # tar xzf /mnt/labstuff/security/bastille/Curses-1.06.tar.gz # cd Curses-1.06 # perl Makefile.PL # make # make install you can also use the rpm from the same website as Bastille : Bastille-Curses-module-1.3.0-0.5mdk.noarch.rpm --nodeps If you prefer to run Bastille using Xwindows, install the Tk module # rpm -ivh ../labstuff/security/bastille/Bastille-Tk-module-1.3.0-0.5 mdk.noarch.rpm --nodeps Untar Bastille : # cd /usr/src # tar xjf /mnt/labstuff/security/bastille/Bastille-1.3.0.tar.bz2 # cd Bastille # chmod +x Install.sh # ./Install.sh You can run Bastille in Xwindows mode with the command ./InteractiveBastille -x. You must be in a KDE window to run this command or have access to Xwindows. If you prefer to run in curses mode you have to change the -x parameter for a -c .This will begin the security interview (read the descriptions of each proposed action! - they are very informative). Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | paultz | | | <[EMAIL PROTECTED]| | | > | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 10/30/2002 11:04| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Bastille for RH 7.2 on L/390 | | | >---| Hi, Carlos. No problems ... I just started looking for this yesterday and all I could find was an i386 RPM. Just wondering if others on this list knew of an s390 RPM or how they went about installing. Thanks, Paul ===== From: Carlos Ordonez <[EMAIL PROTECTED]> Subject: Re: Bastille for RH 7.2 on L/390 We have Bastille running on SuSE. RedHat is supposed to be the distro for Bastille. What problems are you having? Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | paultz | | | <[EMAIL PROTECTED]| | | > | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 10/29/2002 03:58| | | PM
Re: How do I reconfigure my ETH0 LCS device to a new device address i n Command Line Mode?
You will have to change the rc.config, hosts and route.conf. You have a set of commands that helps you do changes to this files and they are: sed, tail, head . You can use the sed command to change and the tail and head to add or delete lines form your files. ex.: cat rc.config | sed -e 's/192.168.1.1/192.168.1.2/g' > rc.config.new < this will change all occurences of 192.168.1.1 for 192.168.1.2 and put it in a new file. After you check for correctness, backup the old file and replace it by this one. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Donna Awald | | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 10/30/2002 02:55| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: How do I reconfigure my ETH0 LCS device to a new device address i n Command Line Mode?| | | >---| I am trying to clone my SLE system running in LPAR mode to another LPAR. My lan addresses are different as well as the IP address. I am able to do a DFDSS backup of the volumes, restore them to new addresses, IPL from the CDROM, update PARMFILE, ZIPL, and IPL successfully on the new DASD and LPAR. But I can not configure the network. I am looking for something like the NETSETUP command on the boot CDROM. Because I am using a MP3000, and the system messages area as my console, I can only use command line commands. Does anyone know of a way to re-configure this thru command line? Or even booting from CDROM and chroot over to the system? It looks like IFCONFIG will help with switching the IP address, but I need to change the definition of ETH0 to use a new address and port number. Thanks, Donna Awald Director of Systems Architecture Empagio "Creating Harmony in Human Resources" [EMAIL PROTECTED] http://www.empagio.com (678) 931-3016 (office) (678) 931-3001 (Fax)
Re: Bastille for RH 7.2 on L/390
Paul, the method I use all the time is the x-windows. If you are using the Curses and the rpm from Bastille doesn't work try the tar file. This one works in class (curses tar) without problems. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | paultz | | | <[EMAIL PROTECTED]| | | > | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 10/30/2002 03:26| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Bastille for RH 7.2 on L/390 | | | >---| Carlos, I installed the BastilleCurses and Tk rpms, and used the Bastille-1.3.0.tar.bz2 method per the directions. I am now receiving numerous errors, such as: RAW ERROR: Bareword "A_BOLD" not allowed while "strict subs" in use at /usr/lib/perl5/site_perl/Curses/Widgets.pm line 162. Have you been through this process in class and gotten it to work? Should I have used the Curses-1.06.tar.gz, instead? Thanks, Paul ======= From: Carlos Ordonez <[EMAIL PROTECTED]> Subject: Re: Bastille for RH 7.2 on L/390 Paul, here is a piece of the workbook that we are using in class: The site recommends using version is 1.3.0 RPMs, however, they do not work with the s390 architecture, so the source tar file, Bastille-1.3.0.tar.bz2, is used. Also you need to install Perl curses or Tk modules, depending on what mode you want to run in: curses mode (-c) or Xwindows mode (-x). http://sourceforge.net/project/showfiles.php?group_id=403&release_id=78589 To install Bastille, do the following: Install Curses or Tk perl module. (you need to install only one!) If you prefer to run Bastille using Curses, untar and install Curses: # cd /usr/src # tar xzf /mnt/labstuff/security/bastille/Curses-1.06.tar.gz # cd Curses-1.06 # perl Makefile.PL # make # make install you can also use the rpm from the same website as Bastille : Bastille-Curses-module-1.3.0-0.5mdk.noarch.rpm --nodeps If you prefer to run Bastille using Xwindows, install the Tk module # rpm -ivh ../labstuff/security/bastille/Bastille-Tk-module-1.3.0-0.5 mdk.noarch.rpm --nodeps Untar Bastille : # cd /usr/src # tar xjf /mnt/labstuff/security/bastille/Bastille-1.3.0.tar.bz2 # cd Bastille # chmod +x Install.sh # ./Install.sh You can run Bastille in Xwindows mode with the command ./InteractiveBastille -x. You must be in a KDE window to run this command or have access to Xwindows. If you prefer to run in curses mode you have to change the -x parameter for a -c .This will begin the security interview (read the descriptions of each proposed action! - they are very informative). Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | paultz | | | <[EMAIL PROTECTED]| | | > | | | Sent by: Linux | | |
Re: Virtual network topology questions...
I think that as long as your distribution of Linux supports QDIO (which 2.2.16 does) you can define a "qdio" (instead of a "hipers" one) guest lan under zVM 4.3 and use qdio/qeth. (I think! haven't tried it) Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Rich Smrcina| | | <[EMAIL PROTECTED]| | | com>| | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 11/08/2002 10:23| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Virtual network topology questions... | | | >---| No hardware hipersockets doesn't necessarily mean that you can't use the guest LAN. Are you using the evaluation version of SuSE 7.2 or are you using the old SuSE with the 2.2.16 kernel? If the former you can define a guest LAN and set up SuSE to use it. If the latter, then you are definitely stuck using point to point. On Friday 08 November 2002 09:12 am, you wrote: > 9672, so no hiper-sockets. In trial mode, so no money to buy a distribution > or support, but with the potential to do so if / when it goes into > production. Potentially running DB2 and WebSphere, so SuSE instead of > RedHat, as IBM supports SuSE more so than RedHat, in our experience. > > I'd like to work within the confines I have. > > > Robert P. Nixinternet: [EMAIL PROTECTED] > Mayo Clinic phone: 507-284-0844 > 200 1st St. SW page: 507-255-3450 > Rochester, MN 55905 > > "In theory, theory and practice are the same, > but in practice, theory and practice are different." > > > -Original Message- > > From: Adam Thornton [SMTP:[EMAIL PROTECTED]] > > Sent: Friday, November 08, 2002 9:59 AM > > To: [EMAIL PROTECTED] > > Subject: Re: Virtual network topology questions... > > > > On Fri, Nov 08, 2002 at 08:44:20AM -0600, Nix, Robert P. wrote: > > > Given an IFL running zVM and several Linux/390 images, is it better to > > > fan out to all the Linux images from zVM's TCPIP, or should TCPIP talk > > > to a selection of images, with these images each handling several end > > > machines, more like a tree structure? What would be the advantages and > > > disadvantages of either method, and is there a "break-even" point below > > > which you'd want to fan from TCPIP, but above which you'd want "helper" > > > images? > > > > I'd say that the answer is "none of the above." > > > > Which version of z/VM? If at all possible, use a guest LAN. It makes > > your life a *whole* lot simpler. If you can't, I'd say use about six > > downstream Linux images per upstream router; IUCV is theoretically > > faster, but I have found CTC somewhat easier to configure. > > > > Now, you're using SuSE, so that may be a stumbling block too. IIRC, the > > totally-free version (beer, not speech, for those of you keeping score > > at home) of SuSE doesn't do HiperSockets. But if you have either the > > $500 trial or a support contract then you have access to the service > > releases, which do let you use HiperSockets. And if you don't, then > > (IMHO) you shouldn't be using SuSE--if you're going to be your own > > support, you may as well be your own support with a less antiquated > > distribution. I'm going to surprise exactly no one by saying here, > > "Debian." Largely because I haven't played with RH in a long time, and > > I know that Debian works just fine (albeit taintedly) with
Re: Virtual network topology questions...
With SuSE SLES 7 you can use virtual hipersockets and virtual qdio lans (both), and this is for sure. Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Dave Myers | | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 11/08/2002 10:57| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Virtual network topology questions... | | | >---| So according to the statements below...I CAN use SUSE SLES7 to play the guest lan game, using QDIO instead of virtual hipersockets? Am I correct in this assumption? Any testimony from someone who has setup guest lans with SUSE SLES7? Tia Dave Myers Adam said... Now, you're using SuSE, so that may be a stumbling block too. IIRC, the totally-free version (beer, not speech, for those of you keeping score at home) of SuSE doesn't do HiperSockets. But if you have either the $500 trial or a support contract then you have access to the service releases, which do let you use HiperSockets. And if you don't, then (IMHO) you shouldn't be using SuSE--if you're going to be your own support, you may as well be your own support with a less antiquated Rober said... No hardware hipersockets doesn't necessarily mean that you can't use the guest LAN. Are you using the evaluation version of SuSE 7.2 or are you using the old SuSE with the 2.2.16 kernel? If the former you can define a guest LAN and set up SuSE to use it. If the latter, then you are definitely stuck using point to point. Carlos said: I think that as long as your distribution of Linux supports QDIO (which 2.2.16 does) you can define a "qdio" (instead of a "hipers" one) guest lan under zVM 4.3 and use qdio/qeth. (I think! haven't tried it) Carlos :-)
Re: Network Trace
Etherreal. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Eddie Chen | | | <[EMAIL PROTECTED]>| | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 11/15/2002 01:44| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Network Trace | | | >---| Does anyone know any X-window tools that does Network and System Trace... Other then tcpdump.
Re: Linux kernel bug caused by Samba
If what you have is the SuSE SLES 7 two cd version, you are missing kernel patches 3 and 4. I don't remember being able to update SAMBA and fix the problem, the problem was with the 390 kernel. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+--> | | Mark Darvodelsky | | | | | | Sent by: Linux on 390 | | | Port | | | <[EMAIL PROTECTED]| | | U> | | | | | | | | | 11/18/2002 08:50 PM| | | Please respond to Linux| | | on 390 Port| | | | |-+--> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Linux kernel bug caused by Samba | | | >---| We've just run into the 2.4.7 kernel bug that occurs with Samba writing to a Windows share. I've reviewed previous discussion on this list but I'm not clear whether I can get around the problem by upgrading the kernel or Samba. Can I just upgrade to the latest Samba by downloading the source and running make? Regards, Mark Darvodelsky, Royal SunAlliance Australia - Data Centre. Phone: +61-2-99789081 Email: [EMAIL PROTECTED] CAUTION - This message is intended for the addressee named above It may contain privileged or confidential information. If you are not the intended recipient of this message you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer. Internet emails are not necessarily secure. Royal & SunAlliance does not accept responsibility for changes made to this message after it was sent
Re: g3 and OSA-2 Ethernet problem
This depends on the card of course... If it is a G3 with an ENTR card then it has 2 ports and if you only have 2 LPARS you can share the card without using OSA/SF. Each LPAR gets a port. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Rich Smrcina| | | <[EMAIL PROTECTED]| | | com>| | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 11/19/2002 11:12| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: g3 and OSA-2 Ethernet problem | | | >---| The port can be shared, but OSA/SF is the way that the sharing is set up on the card and in the I/O subsystem. Linux will just see an LCS device. Do you have OSA/SF set up or are you using the defaults? On Tuesday 19 November 2002 09:10 am, you wrote: > That helps if you understand OSA/SF - which I don't. What I want to be > able to prove to the people who control the network is that YES indeed, I > can have an LPAR share a port on an OSA card. The biggest thing preventing > my install of another Linux LPAR is another cable being strung to switch. > If I don't have to do that. > > -- Rich Smrcina Sytek Services, Inc. Milwaukee, WI [EMAIL PROTECTED] [EMAIL PROTECTED] Catch the WAVV! Stay for Requirements and the Free for All! Update your S/390 skills in 4 days for a very reasonable price. WAVV 2003 in Winston-Salem, NC. April 25-29, 2003 For details see http://www.wavv.org
Re: Linux kernel bug caused by Samba
I haven't used Samba 2.2.6 yet - the latest for me has been 2.2.5. I guess I am behind again. It is hard to live in linux time clock. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Post, Mark K" | | | <[EMAIL PROTECTED]| | | om> | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 11/19/2002 10:57| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Linux kernel bug caused by Samba | | | >---| Carlos, There were two ways to address the problem, and the Samba team decided to work around the kernel problem, for at least the time being. So yes, you can avoid the problem by using Samba 2.2.6, or by putting on the kernel patches. Mark Post -Original Message- From: Carlos Ordonez [mailto:[EMAIL PROTECTED]] Sent: Tuesday, November 19, 2002 8:29 AM To: [EMAIL PROTECTED] Subject: Re: Linux kernel bug caused by Samba If what you have is the SuSE SLES 7 two cd version, you are missing kernel patches 3 and 4. I don't remember being able to update SAMBA and fix the problem, the problem was with the 390 kernel. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation
Re: Asking for RH technical reference
Betsie, the reason is that first in /etc/pam.d there is a login file which contains a line for securetty (I think is the first or second) if you comment that one out it will let root login from any terminal. The other problem is (if I remember correctly) RedHat doesn't enable telnet automatically. For this you would need to go to /etc/xinetd.d/telnet file and change the disable entry from yes to no. The easiest way to get into it is to change from the zVM console of the Linux guest the ability to telnet via a sed command like this: cat /etc/xinetd.d/telnet | sed -e 's/yes/no/g' > telnet-new and then make sure it is ok and move it on top of telnet you must now restart inetd by /etc/init.d/inetd restart telnet into your RedHat machine with the other user, do an "su" to root and edit the pam.d file if you want to be able to logon to root. If you only want to be able to logon to root from the zVM console instead you can add the word "console" at the end of the /etc/securetty file. Hope this helps. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Betsie Spann| | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 11/20/2002 08:08| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Asking for RH technical reference | | | >---| Hi, Looking for a reference book to teach myself about RH. The type of questions I have are Why can't I login as root? Why can't I issue commands with rexecd? Betsie
Re: Asking for RH technical reference
Sorry, didn't mean to answer questions she didn't have Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+> | | John Summerfield | | | | | | Sent by: Linux on 390| | | Port | | | <[EMAIL PROTECTED]| | | EDU> | | || | || | | 11/21/2002 11:07 AM | | | Please respond to| | | Linux on 390 Port| | || |-+> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Asking for RH technical reference | | | >---| On Thu, 21 Nov 2002, Carlos Ordonez wrote: > Betsie, the reason is that first in /etc/pam.d there is a login file which Betsi asked about reading material, not answeres to those specific questions. Given the nature of _those_ questions, she's going to have a lot more. -- Cheers John. Join the "Linux Support by Small Businesses" list at http://mail.computerdatasafe.com.au/mailman/listinfo/lssb
Re: Testing a second OSA-E card
Make sure you put portname:TESTPORT (I mean colon!!! not = sign) Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Froberg, David | | | C" | | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 12/05/2002 08:58| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Testing a second OSA-E card | | | >---| We recently upgraded our 9672 G6 (with an OSA-2 card) to a z900 (with two OSA-E cards). I'm testing a SuSE Linux 2.2.16 distribution and currently using one of the OSA-Es in non-qdio mode. Everything is working fine just like with the 9672. I would like to try the other OSA-E (which is genned for qdio). I've look through some of the redbooks and search the archives and I wasn't real sure of the command sequence to get Linux talking to OSA-E on at least a temporary basis. Would the sequence be something like: insmod qdio insmod qeth qeth1,0x1500,0x1501,0x1502,portname=TESTPORT [1500 is the device number] ifconfig eth1 xxx.xxx.xxx.xxx netmask xxx.xxx.xxx.xxx Thanks, Dave Froberg Phone: 202-312-9807 Email: [EMAIL PROTECTED]
Re: LINUX & Security
Vince, can you have multiple root ids and passwords? Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Re, Vincent" | | | <[EMAIL PROTECTED]| | | om> | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 12/10/2002 02:48| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: LINUX & Security | | | >---| If you are an ACF2 (or CA-Top Secret) customer, then we have an open-source PAM plug-in that lets you authenticate directly against ACF2 or Top Secret. The client side (the part that runs on Linux) is available in source code or pre-built RPM form (both Intel and mainframe Linux). The server is simply a built-in integrated part of ACF2. With our plug-in installed, you need no user definition on Linux - your existing mainframe security rules and passwords are all that's needed. Compared to the LDAP approach, our PAM implementation is faster, just as secure (we use OpenSSL on the network connection), and includes a number of additional features that help you control who should be able to connect to a particular Linux image. It's described in the ACF2 6.5 Product Announcement, which you can read here: http://www3.ca.com/Files/ProductAnnouncements/etrust_acf2_pd_rel65.pdf Vince Re Computer Associates -Original Message- From: James Melin [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 10, 2002 1:27 PM To: [EMAIL PROTECTED] Subject: Re: LINUX & Security I'd like to add a follow-on question to this Has anone gotten Linux to update user ID's/Passwords from an NT central domain ? Is it possible to synchronize those, or failing that has anyone gotten Linux security to refresh from RACF or ACF2 secuirity databases, or even authenticate logon using LDAP into RACF or ACF2 instead of manually trying to synchronize Linux user lists/passwords/groups/ etc |-+> | | Joseph Sumi | | | <[EMAIL PROTECTED]| | | v> | | | Sent by: Linux on| | | 390 Port | | | <[EMAIL PROTECTED]| | | IST.EDU> | | || | || | | 12/10/2002 09:42 | | | AM | | | Please respond to| | | Linux on 390 Port| | || |-+> >--- ---| | | | To: [EMAIL PROTECTED] | | cc: | | Subject: LINUX & Security | >--- ---| Hello, we have just started to research SUSE Linux under z/VM, and I've been asked these questions: - Does SUSE Linux issue any SAF (RACF) calls for security in the z/VM environment ? If not, how is security handled ? - Are there any types of "SMF" records cut to record access or violations to resources in a Linux z/VM environment ? - Does anyone have a link to more specific security / Linux information ? Thanks.
Re: LINUX & Security
Vince, I guess my question is, if I have 50 linux images running under VM and each of them have a root user, can I have a different password for each of them? Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Re, Vincent" | | | <[EMAIL PROTECTED]| | | om> | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 12/10/2002 05:20| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: LINUX & Security | | | >---| > Vince, can you have multiple root ids and passwords? Carlos :-) If you're asking whether you can have multiple user IDs with UID=0, then the answer is yes. UID/GID, shell program and home directory all come from the PAM server (ACF2, Top Secret, etc.), and there's no reason you couldn't have multiple UID 0 IDs if you wanted to. The nice thing about our PAM implementation is that you have a lot of flexibility when it comes to restricting which Linux images (or facilities within a Linux system) a given user can access. You might set it up so that users get root privileges, but only on a particular Linux image. Or, perhaps you'd let them use Telnet but not FTP. Because the authentication is processed by ACF2/Top Secret, all of the normal system entry controls are extended and apply to Linux as well. For example, an earlier post asked about auditing, and with our PAM plug-in, you will most definitely see a complete audit trail of Linux sign-on activity in your z/OS SMF records. Having said that, multiple UID 0 users might or might not be a good thing on Linux because there would be no way to segregate their permissions (that is, once logged on, any root user would have access to all resources). Keep in mind that PAM is just for user authentication - if you want true access control then you need something more. This is where our eTrust Access Control product fits in: it's essentially z/OS-style resource protection for Linux, and it provides the kind of granular resource protection (including controlling what root users may do), auditing, etc. that mainframe sites would be accustomed to. Vince Re Computer Associates
Re: LINUX & Security
Thanks... that's cool - very nicely done Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Re, Vincent" | | | <[EMAIL PROTECTED]| | | om> | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 12/11/2002 09:22| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: LINUX & Security | | | >---| > if I have 50 linux images running under VM and > each of them have a root user, can I have a different > password for each of them? There are lots of options here, depending on exactly what you're trying to achieve. Personally (as one who hates to remember different passwords), I would rather have one ID and password, and use security policy to control which systems I'm allowed to connect to. But if I prefer, I could just as easily have a different root account/password on each system. Or a mixture of both. The exact details vary depending on which security product (ACF2, Top Secret, eTrust Access Control) you're working with, but in general all of the system entry validation features of the security products apply. Vince Re Computer Associates
Re: FW: Apache on zSeries with SSL
Ralph, this is something we put together for a class we are teaching, hope it helps (See attached file: Crypto.pdf) Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+--> | | "Noll, Ralph" | | | <[EMAIL PROTECTED]| | | tate.ar.us>| | | Sent by: Linux on | | | 390 Port | | | <[EMAIL PROTECTED]| | | T.EDU> | | | | | | | | | 12/16/2002 02:24 PM| | | Please respond to | | | Linux on 390 Port | | | | |-+--> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: FW: Apache on zSeries with SSL | | | >---| > > I cannot get SSL (secure sockets layer) working on the z-box. > I have loaded, reloaded, configured, re-configured, looked on the > internet, in short tried everything I know to fix the problem. > > The installation of apache from source (and related packages) went > according to plan. The new apache works fine in normal http mode. > However, once apache is put in https mode (startssl) - which starts > apache up just fine with no errors, you then cannot get to any page > using "https://lrnet/";. The browser just hangs, no > messages, no errors, > it just hangs. > we have zvm 4.3 linux 390 zvmlinx1:~ # uname -a Linux zvmlinx1 2.4.17-SuSE #1 SMP Thu Feb 28 14:28:29 GMT 2002 s390x unknown zvmlinx1:~ any ideas thanks Ralph Noll Systems Programmer City of Little Rock Phone (501) 371-4884 Fax (501) 371-4712 mailto:[EMAIL PROTECTED] \\\|/// \\\ ~ ~ /// ( @ @ ) ===oOOo=(_)=oOOo=== Crypto.pdf Description: Adobe PDF document
Re: High Availability
You can use LVS (Linux Virtual Servers) as a load balancer and high availability clustering technique. It comes already setup on the kernel, all you need to do is install a package called IPVSADM to be able to manipulate the cluster. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Steven Adams| | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 12/18/2002 09:05| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: High Availability | | | >---| Take a look at http://openmosix.sourceforge.net/ That is the open source product of choice since Beowulf, and others, decided to start selling the product. Unfortunately, I don't see an S/390 port for this product so I apologize of being off-topic with this reply. On Wednesday 18 December 2002 03:24 pm, you wrote: > Dave, > > Thanks for the reply. We've actually already looked into using CSE if it > happens to go on two VM systems. Other possibilities are vm/linux and > rs-6000/linux or intel-linux, or even a Unix system. In other words, one > on a VM guest linux and one somewhere else as the failover site. > > So, the question still remains, "What kind of software do people use on > Linux/390 for high-availability clustering?" > > "Christmas is a funny season. What other time of the year do you sit in > front of a dead tree and eat candy out of your socks?" Gordon Wolfe, Ph.D. > (425)865-5940 > VM Technical Services, The Boeing Company > > > -- > > From: Dave Jones > > Reply To: Linux on 390 Port > > Sent: Wednesday, December 18, 2002 2:04 PM > > To: [EMAIL PROTECTED] > > Subject: Re: High Availability > > > > Gordon, > > look into using VM's CSE (Cross System Extensions) technology. It allows > > for implementing just such a failover technique and it's already included > > in your VM system. You can easily test your implementation by using two > > 2nd level VM guests coupled via a (v)CTC adapter. > > > > Contact me offline for all of the gory setup and configuration details. > > > > Dave Jones > > Sine Nomine Associates > > Houston > > - Original Message - > > From: "Wolfe, Gordon WE" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Wednesday, December 18, 2002 3:54 PM > > Subject: High Availability > > > > > > What kind of software do people run on Linux/390 for high-availability > > clustering? We're considering setting up two Linux servers on two > > different 390/IFL processors as printservers and want to be able to > > failover to the other processor when one fails or is taken down for > > service. And of course, we want to test it on our single IFL engine > > first. > > > > "Christmas is a funny season. What other time of the year do you sit in > > front of a dead tree and eat candy out of your socks?" > > Gordon Wolfe, Ph.D. (425)865-5940 > > VM Technical Services, The Boeing Company
Re: High Availability
There is at least one company (not a reference) using LVS as an HA vehicle for their solution in production in Linux zSeries. The company is very happy. We also did some experiments at another company which tested the LVS running a director in two different LPARS in two different machines and when you bring down zVM in the one running the primary director, the secondary director takes over in the other LPAR and everything looks as if nothing happens (well...you know what I mean). The good thing about LVS is that you can have Linux in Intel or any other platform serving as real servers. If you use tunneling as the protocol the real servers can be located any where and it supports windows or any other operating system that you can run the application and that supports TCPIP. I have tested having servers in Linux zSeries and Intel and everything worked fine. I know I am over simplifying things but it is really not difficult to setup and test. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | David Boyes | | || | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 12/18/2002 09:59| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: High Availability | | | >---| > Thanks for the reply. We've actually already looked into using CSE if it happens to go on two VM systems. Other >possibilities are vm/linux and rs-6000/linux or intel-linux, or even a Unix system. In other words, one on a VM guest linux and >one somewhere else as the failover site. > So, the question still remains, "What kind of software do people use on Linux/390 for high-availability clustering?" It's a multipart problem. As Dave J mentioned, CSE is one part of the solution when there are Linux/390 systems involved, but there are some missing pieces before you can consider doing HA beyond a trivial load-balancing solution, primarily the ability to do frame-based bridging between internal LANs and external V:LAN infrastructure without paying a huge computational penalty. I think there's a couple of cases here: Case 1: HA for virtual machine implementations only. This has three sub-cases, VM HA, Linux HA, and application HA. Case 2: HA for mixed virtual machine/discrete machine, both Linux systems. This has several sub-cases as well, VM HA, Linux HA, application HA, HA signaling processes. Case 3: HA for mixed virtual machine/discrete machine, differing operating system. This has many sub-cases, some of which are VM HA, n cases of discrete machine HA, network HA, HA signaling, etc. At a crude level, layer 4 content switching (devices such as the Cisco Content Switch (aka Local Director and Distributed Director) or the Alteon/Big IP style solutions) is vendor neutral, and applies equally well to all three cases for handling distribution of incoming traffic to a set of systems. It addresses only 1 way traffic (from the outside to the server farm), and requires an agent of some type to run on the systems to detect heartbeat and feed back load information to balance work. Failover is handled in two sub-classes: system failure and system overload, both of which are handled by eliminating the failing or overloaded server from receiving new work. One still needs a HSRP/VRRP-style virtual address HA network solution for outgoing traffic as well. The current VRRP code does not work on Linux/390 systems using OSAs because the adapters do not return an
Re: High Availability
David, I thought I was going to stay quite and not say anything but all through the Holidays I couldn't get this email from my mind. I know you have done a lot of testing with LVS and I would like to get some of your benchmarks so that I can learn more about how the LVS behaves on Linux for s/390, so Could I get some of the benchmark numbers you have gotten from testing tunneling on Linux for s/390? It would really benefit me and my work with customers, so if you can send some of those numbers it would really help a lot of people. I am willing to send them to the LVS forum (which I belong to) and let them know how bad there performance is. As a matter of fact we have some people working with the LVS in production and by the way as much as your 8000 linux images running under VM customer is not a reference (and unknown to everyone) so is this customer and it is very happy with the performance. Please let me know when I can get your benchmark numbers. Thanks Carlos :-) > If you use tunneling as the protocol the real servers can be > located any where and it supports windows or any other > operating system > that you can run the application and that supports TCPIP. > [... snip ...] > I > have tested > having servers in Linux zSeries and Intel and everything > worked fine. I > know I am over simplifying things but it is really not > difficult to setup > and test. Carlos :-) Doing this on a par with existing Unix or Windows based clustering tools is quite a bit harder than just workload distribution, which is the majority of what LVS can do -- LVS provides services similar to the external CSS boxes. To do more sophisticated clustering, it takes a LOT of hardware resources, and unfortunately, zSeries hardware is still more expensive than the commodity hardware on the discrete systems which makes this a hard sell as a viable solution. The tunneling you mention is *very* processor intensive -- exactly the point I mentioned earlier. Technically it works, but I don't think very many of us can dedicate an engine -- even a lower cost IFL engine -- to layer 2 frame forwarding, and in a significant implementation, it's not unlikely to need that kind of horsepower to keep packets moving. We need some hardware-based acceleration for this function, ASAP. -- db Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation
Re: 3270 emulation packages
Host on Demand... Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Abruzzese, Pat"| | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 01/07/2003 09:34| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: 3270 emulation packages | | | >---| I need a 3270 emulation package that is web based. Anyone currently using one. vr, P. Abruzzese
Re: where can i get ipvsadm RPM package redhat 32 bit ?
I am almost positive that RedHat has it in their rpms. I have played with LVS mostly on SuSE but I have tested running RedHat 7.2 on s390 successfully. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | seo | | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 01/13/2003 08:23| | | AM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: where can i get ipvsadm RPM package redhat 32 bit ? | | | >---| redhat linux , there is ipvsadm RPM package in 64-bit but no ipvsadm rpm file in 32-bit packages where can i get it ? i tried to compile source file tar.gz file, but i couldn't has anyone succeed to setup LVS using ipvsadm package(RPM) on redhat linux machine?
Re: Adding Software to Red Hat
RedHat doesn't have a yast like command. Mount the CDs and use the rpm command. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | "Scully,| | | William"| | || | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 01/13/2003 04:00| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Adding Software to Red Hat | | | >---| If someone would point me in the right direction, I'd appreciate the assistance. I'm new to using Red Hat. I've installed Red Hat Linux 7.2 for S/390 (2.4 kernel) without any graphical interface (KDE or GNOME) packages. Is there a non-graphical (using PuTTY, ncurses, for example) interface to adding software to this system? If I were using SuSE (which I'm quite comfortable with) I'd use YaST to do something like this. William P. Scully Systems Programmer Computer Associates International, Inc 2291 Wood Oak Drive Unit 5-29C Herndon, Virginia 20171 Work: +1 703 708 3976 FAX: +1 703 708 3267 Beep: +1 888 BEEP CAI [EMAIL PROTECTED]
Re: Linux Monitoring Tools?
mon is a great monitoring tool based on scripts, that can be use to tell if services are up or down and to react to problems (general purpose resource monitoring tool) http://www.kernel.org/software/mon/ Nothing like Omegamon for MVS. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+---> | | Steven Adams| | | | | | Sent by: Linux | | | on 390 Port | | | <[EMAIL PROTECTED]| | | RIST.EDU> | | | | | | | | | 01/13/2003 06:44| | | PM | | | Please respond | | | to Linux on 390 | | | Port| | | | |-+---> >---| | | |To: [EMAIL PROTECTED] | |cc: | | From: | | Subject: Re: Linux Monitoring Tools? | | | >---| On Monday 13 January 2003 03:21 pm, you wrote: > Are there similar "performance monitoring" type tools are out there for > Linux? What are others using? IBM are offering us Tivoli, anybody have any > experience using it with Linux? (Vendor input is welcome, but if this > would contravene list policy please reply direct!) > > We're SuSe on z/800 under z/VM, just piloting at the moment, but will be > running Samba File & Print server as our first "production" application. > There are many built in tools with the OS - like netstat, top, ps and the proc filesystem. Are you looking to monitor a specific area or are you looking for general monitoring and alerting?
Re: Linux Root Problem....
Use a journaling file system. Carlos :-) Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+-> | | "Ketchens, LeMarr T. | | | (RyTull)" | | | | | | Sent by: Linux on 390 | | | Port | | | <[EMAIL PROTECTED]| | | DU> | | | | | | | | | 02/20/2003 09:09 AM | | | Please respond to | | | Linux on 390 Port | | | | |-+-> >--| | | | To: [EMAIL PROTECTED] | | cc: | | Subject: Linux Root Problem | | | >--| One of my root directories within a Linux Guest seems to gotten corrupted. I need to know there are some ways to prevent this in the future and what can I do to check what happen before this occurred. This is the second time that this guest magically went down and no one "claims" to have done anything. I did an FDR Dump a couple of weeks ago, but I want to try and see if I can recover without Restoring what was out there then. Anything helpful would be appreciated. Thanks. **Below are some messages I receive when I boot up. Keep in mind, I'm running SuSE 2.4.7 as a Guest under z/VM 4.3.0. ** Run file system check on root for LVM activation ..doneRemounting root file system (/) read/write for vgscan... EXT2-fs warning: mounting unchecked fs, running e2fsck is recommended Scanning for LVM volume groups... LVM version 0.9.1_beta7 by Heinz Mauelshagen (10/04/2001) lvm -- Module successfully initialized vgscan -- reading all physical volumes (this may take a while...) vgscan -- found inactive volume group "rtora" vgscan -- "/etc/lvmtab" and "/etc/lvmtab.d" successfully created vgscan -- WARNING: This program does not do a VGDA backup of your volume group Activating LVM volume groups... vgchange -- volume group "rtora" successfully activated Activating swap-devices in /etc/fstab... ..doneChecking file systems... Parallelizing fsck version 1.19a (13-Jul-2000) /dev/dasda1 contains a file system with errors, check forced. /dev/dasda1: Unattached inode 143214 /dev/dasda1: UNEXPECTED INCONSISTENCY; RUN fsck MANUALLY. (i.e., without -a or -p options) fsck.ext2 /dev/dasda1 failed (status 4)! Run it manually! ..failed fsck failed. Please repair manually and reboot. The root file system is currently mounted read-only. To remount it read-write do: bash# mount -n -o remount,rw / Attention: Only CONTROL-D will reboot the system in this maintanance mode. shutdown or reboot will not work. Give root password to login: Unmounting file systems (ignore error messages) could not umount /dev/shm - trying shmfs instead umount: shmfs: not found umount: /dev/shm: not mounted could not umount /was402 - trying /dev/dasdc1 instead umount: /dev/dasdc1: not mounted could not umount /u02 - trying /dev/rtora/lvora instead umount: /dev/rtora/lvora: not mounted could not umount /usr - trying /dev/dasdb1 instead umount: /dev/dasdb1: not mounted devpts umounted /dev/dasda1 umounted --- Legal Disclaimer: The information contained in this communication may be confidential, is intended only for the use of the recipient named above, and may be legally privileged. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication, or any of its contents, is strictly prohibited. If you have received this communication in error, please re-send this communication to the sender and delete the original message and any copy of it from your computer system. Thank you. ---
Re: Accessing an SMB share from another linux box
For some reason or another it works for me only when I put the options at
the end of the command:
mount -t smbfs //9.117.44.44/zntc /mnt/linux390 -o
username=administrator,password=asdcs
Saying goes: Great minds think alike - I say: Great minds think for
themselves!
Carlos A. Ordonez
IBM Corporation
Server Consolidation
|-+->
| | James Melin |
| | <[EMAIL PROTECTED]|
| | epin.mn.us> |
| | Sent by: Linux on |
| | 390 Port |
| | <[EMAIL PROTECTED]|
| | ST.EDU> |
| | |
| | |
| | 02/28/2003 12:01 |
| | PM|
| | Please respond to |
| | Linux on 390 Port |
| | |
|-+->
>|
|
|
| To: [EMAIL PROTECTED]
|
| cc:
|
| Subject: Accessing an SMB share from another linux box
|
|
|
>|
I have a directory on my SLES/390 distribution shared so that windoze can
access it. Typically, I use this to copy CD contents to that directory for
installation.
DB2 Connect Enterprise Edition 8.1 has RPM packages that are named
identically except for one has an uppercase character in it - fine in
unix/linux, bad in windows. It tries to do a file replace instead of a
copyt.
how do I access an SMB shared directory from another linux? I have tried
mount -t smbfs {variants of various commands} to no avail
If someone could show me an example of how to make this work, I'd be
ecstatic.
Re: No Subject
Jim, what are you smoking? Saying goes: Great minds think alike - I say: Great minds think for themselves! Carlos A. Ordonez IBM Corporation Server Consolidation |-+> | | Alan Cox | | | <[EMAIL PROTECTED]| | | u.org.uk>| | | Sent by: Linux on| | | 390 Port | | | <[EMAIL PROTECTED]| | | IST.EDU> | | || | || | | 04/04/2003 02:12 | | | PM | | | Please respond to| | | Linux on 390 Port| | || |-+> >| | | | To: [EMAIL PROTECTED] | | cc: | | Subject: Re: No Subject | | | >| On Gwe, 2003-04-04 at 20:55, Jim Elliott wrote: > A z800-0A1 is equivalent (in pure compute power) to a 280MHz Intel > system. Don't forget, this is the second smallest system IBM sells > today in the zSeries family. 280Mhz which x86 CPU out of curiosity ?
