Re: Question: z/VM 5.2 with z/OS 1.8 SYSPLEX and various Linux Guests

2006-11-16 Thread Joe Poole
The last I heard, you can't run z/OS on z/VM.  Regular VM is  OK.  Your best
bet is to run z/OS in an LPAR by itself, and run z/VM in another LPAR.

On Thursday 16 November 2006 11:07 am, Mark Perry wrote:
> Hi List,
> I am considering creating a z/VM 5.2 system for a project. The project
> requires a z/OS SYSPLEX with DB2 Data Sharing, and various Linux Guests
> (Suse/Redhat)
>
> All of this will be "bleeding edge", so consider z/OS 1.8 going to 1.9
> CB02 later. DB2 will be V8 and V9. Linux Guests will be latest Suse and
> Redhat (and Betas).
> The Linux Guests will each be running an SAP system so their memory
> usage will be high, and their I/O load (via DB2 Connect TCP/IP to DB2 on
> z/OS) high also.
>
> This z/VM system will be dedicated to the project, and can be considered
> a TEST environment so performance need not be exceptional, but should be
> "sufficient". It could be running on various zSeries hardware (if that
> is relevant) z900/990 or z9. All DASD will be on Sharks.
>
> I have heard comments/rumors to the effect that mixing z/OS and Linux
> Guests within the same z/VM is not "optimal". In fact several of our
> existing  z/VM systems  seem to follow this "rule", and we haven't
> mixed z/OS and  Linux  Guests until now. I can't get a decent answer as
> to why, it seems historical and perhaps z/VM 5.2 has removed previous
> barriers (<2GB I/O etc.)
>
>  From a resource point of view, it makes more sense to me to have a
> single z/VM rather than splitting the zSeries memory across 2 z/VMs (one
> for z/OS the other Linux).
>
> Anyone on the list have any *recent* experience sharing z/OS SYSPLEXes
> and Linux Guests in the same z/VM?
> Anyone got any good reasons why I should consider creating 2 z/VM
> systems to keep the z/OS and Linux Guests apart?
>
> Mark
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or
> visit http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Disks for DB2 - San vs. big 3390s

2006-09-08 Thread Joe Poole
On Friday 08 September 2006 08:51 am, Evans, Kevin R wrote:
> Watch out for the pink slip then .
>
> K

At my age, Kevin, I head for the social security office.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Disks for DB2 - San vs. big 3390s

2006-09-08 Thread Joe Poole
On Friday 08 September 2006 12:28 am, Post, Mark K wrote:

> If there's any way to picture doing what you want as causing them less
> work over the long run, it might be easier to convince them.  Either
> that, or just getting physically threatening might work.  :)
>
You know, it's really great working in a "small" shop.  It's my z990, my
Shark, my network, and my guys.  I just sit around saying "sounds good to me,
go for it."

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Google out of capacity?

2006-05-04 Thread Joe Poole
On Thursday 04 May 2006 01:03 pm, Joseph Temple wrote:

> Does anyone know how many of what class of servers are being used?   Also,
> my guess is that some sort of hybrid might be the answer.  That is some of
> the clusters may lend themselves to virtualization more than others,
> yielding variable leverage for different platforms.
>
I remember hearing that there are thousands (25k?) in the various computer
rooms, each one being a special design commodity item.  Technicians walk
through the rooms with carts, removing failed servers and replacing them with
new ones.  The old ones are just trashed - not worthy of an attempt to
repair.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: 3390-3 DASD vs. 3390-9 DASD

2006-05-01 Thread Joe Poole
On Monday 01 May 2006 02:45 pm, Frank Gowdey/Admin/Avery/MCS wrote:
> PAV, hm what does the way back machine say Mr Peabody ?
> Its been a while, but I think it was a nocharge built in, use it if you
> want or not.
> No one here can remember very well.
>

It's a chargeable feature, based on the number of TBs of DASD you want to
support.  If you set aside some of the DASD for open systems, you don't have
to pay for that portion.  Same deal with Point in Time Copy (flashcopy+).

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: your chance

2006-05-01 Thread Joe Poole
On Monday 01 May 2006 01:50 pm, O'Brien, Dennis L wrote:
> Susanne is coming to meet the entire mailing list?  She must be quite,
> um, friendly.
>
>Dennis

Apparently, spelling is not among her finer qualities.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Calculations, anyone?

2006-03-03 Thread Joe Poole
At prevailing rates per kw, you can figure on $600 per year per 1000 watts.  A
blade server rack with 5 shelves approaches 2 watts ($12,000), and a z990
with a single books costs 36000 ($21,600).  One z990 costs less that 2 blade
racks, and you can probably run z/OS on it at the same time you're running
your z/VM.  You also need 10 * 208 volt 30 amp power cords for a single 5
shelf rack, and you only need 2 60 amp cords for the z990.

On Friday 03 March 2006 04:53 pm, Tim Hare wrote:
> This is just an interesting thing I found today... Jonathan Schwartz
> posted on his blog some calculations done by Ning (a company I guess
> headed by Marc Andreesen) about Linux on Intel vs. Solaris on AMD Opteron
> boxes.   The link to the post:
>
> http://blogs.sun.com/roller/page/jonathan?entry=coffee_and_keynotes
>
> You will notice the calculations are for a hosted environment, several
> servers in a rack, etc.
>
> It occurred to me to wonder: has anyone  done these kinds of calculations
> where the "rack" was VM and the servers all virtual?
>
> No, I haven't done them (yet) - but it seems to me that there must be some
> point, some number of servers, where the advantage goes to Linux on z/VM
> because you can keep adding servers without adding power or floor space..
> what do you experts think?
>
>
> Tim Hare
> Senior Systems Programmer
> Florida Department of Transportation
> (850) 414-4209
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or
> visit http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Ordering HLASM for Linux on zSeries

2006-01-27 Thread Joe Poole
On Friday 27 January 2006 03:01 pm, McKown, John wrote:

>
> HLASM can only be run if you are running Linux on a IFL, not a General
> CP? Not that I know of any reason to run Linux on a GCP.

You'll only get CPs at your business recovery testing site, at least that's
true at IBM.  (We're running a DR test today, in fact.)

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Switch SAS to zSeries Linux

2006-01-26 Thread Joe Poole
On another list that I monitor, I see quite a few companies putting SAS on
desktops when mainframe upgrade costs got hefty, but no company said they put
it on zSeries or Intel Linux.

On Thursday 26 January 2006 06:25 am, Ceruti, Gerard G wrote:
>  Hi Folks
>
> Has anyone made the move ?, or considered it and then moved to another
> platform ?.
>
> Regards
> Gerard
>
> ___
>___
>
> Standard Bank Disclaimer and Confidentiality Note
>
> This e-mail, its attachments and any rights attaching hereto are, unless
> the context clearly indicates otherwise, the property of Standard Bank
> Group Limited and/or its subsidiaries ("the Group"). It is confidential,
> private and intended for the addressee only. Should you not be the
> addressee and receive this e-mail by mistake, kindly notify the sender, and
> delete this e-mail, immediately and do not disclose or use same in any
> manner whatsoever. Views and opinions expressed in this e-mail are those of
> the sender unless clearly stated as those of the Group. The Group accepts
> no liability whatsoever for any loss or damages whatsoever and howsoever
> incurred, or suffered, resulting, or arising, from the use of this email or
> its attachments. The Group does not warrant the integrity of this e-mail
> nor that it is free of errors, viruses, interception or interference.
> Licensed divisions of the Standard Bank Group are authorised financial
> services providers in terms of the Financial Advisory and Intermediary
> Services Act, No 37 of 2002 (FAIS). For information about the Standard Bank
> Group Limited visit our website http://www.standardbank.co.za
> ___
>
>
> --
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or
> visit http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: LDAP SDBM

2005-08-12 Thread Joe Poole
There is a Redbooks Paper titled "Securing Linux for zSeries with a
Central z/OS (RACF) LDAP Server" which walks you through the
configuration of "Native Authentication".

http://www.redbooks.ibm.com/cgi-bin/searchsite.cgi?query=Securing+Linux

On Friday 12 August 2005 02:13 am, Leon Buitendag wrote:
> Hi, I have installed LDAP server SDBM on ZOS1.3 and am trying to
> connect from SUSe8 that is running on an IFL, I have configured the
> SSHD as I'm using ssh to connect to my linux partition. My problem is
> that I cannot gain access to my linux partition using my RACF userid
> unless I configure the userid to linux. Once I've added the userid to
> linux only then can I coonect using my pacf password. My question is
> how do I connect without having to define the RACF userid to linux.
>
> Thans
>
> Leon Buitendag
> Senior Specialist: Systems Programming
> Data Centre: Numerus
> Cell: +2783 376 6731
> Tel:  +2712 336 0628
> Fax: +2712 336 0606
> E-mail: [EMAIL PROTECTED]
>
>
>
> -
>- For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390
> or visit http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Per engine pricing..

2005-04-11 Thread Joe Poole
 
> OK. Â(scratches chin) ÂCheck out that electric bill. Â$200 per year
> times 200 servers that were shut off. ÂOnly $4k. Â

You folks were certainly kind to me for not pointing out my mathematical 
blunder. Â200 servers times $200 = $40,000, not 4k. ÂSo, if you have a 
z900 on the floor, and a Shark for storage, your annual cost of 
electricity for those 2 boxes, at $.068/kwh, would be less than $4,000. Â
That's a substantial savings which usually comes off of some other 
department's budget, but a good justification none the less.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Per engine pricing..

2005-04-08 Thread Joe Poole
On Thursday 07 April 2005 05:22 pm, Tom Duerbusch wrote:
>
> But hardware and software costs are things that any
> accountant can see.  Real dollars.  All the rest of
> the stuff is soft dollars.  Informed people know there
> are savings and have gut feels that justify things.
> Try explaining those things to a government watchdog
> reporter.  You got 5 minutes...now go...
>
OK.  (scratches chin)  Check out that electric bill.  $200 per year
times 200 servers that were shut off.  Only $4k.  Allright, how about
the refund on prepaid maintenance, at about $1k per year.  Better.  How
about avoiding the costs of buying new (planned) servers for
Windows-only applications by recycling the vacant ones?  Did we avoid
building a new facility because we ran out of floor space?  Can we take
another look at the DR contract and drop coverage for 200 servers?  I
don't like to eliminate jobs, but how many techs took care of 200
servers?  (I'd rather turn them into Linux gurus and have them be even
more creative.)

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Are there any NJE/NRJE interoperability tools for Linux to submit jobs to z/OS?

2005-04-06 Thread Joe Poole
On Wednesday 06 April 2005 10:14 am, James Melin wrote:
> The flexibility requirement really
> requires us to have the ability to have Linux trigger events on z/OS.
>

If your scheduling system can sense the creation of a file on the z/OS
side, then a simple FTP from Linux could trigger events.  We use this
technique to process inbound files that go to a Linux instance to be
decrypted first, then FTP'ed to z/OS where the processing application
resides.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Per engine pricing..

2005-04-04 Thread Joe Poole
On Monday 04 April 2005 01:16 pm, Rich Smrcina wrote:
> No.  The pricing is not based on the number of engines in an LPAR,
> it's based on the number of engines of a particular type running a
> particular workload.  In your scenario you would need three engines
> worth of Oracle AND Websphere AND UDB regardless of the configuration
> of IFLs and LPARs. If you want to run any part of that configuration
> on your standard engines, you would need to add ALL of those engines
> to the licensing requirements as well.
>
...which brings us around to Vendor negotiations.  I doubt if any of the
software products Tom mentioned could make use of 6 or even 8 of the
available CPUs, let alone all 32.  As part of your licensing
negotiations, you configure the Linux instance with the number of CPUs
it can use, which should be the basis of your licensing issues.  If you
want 2 CPUs, you buy 2 licenses.  Sure, we're back on the honor system,
but Vendors are capable of arriving at equitable solutions when
properly approached.  After all, in the world of Linux, there are
alternatives to just about every product, and nobody wants to lose a
customer.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Maximum cylinders in a 3390-27

2005-03-31 Thread Joe Poole
On Thursday 31 March 2005 10:30 am, Michael MacIsaac wrote:
> Hi list,
>
> Is anyone using "mod-27"s?  If so, how many cylinders do they have?

According to my handy little DTS Software pocket reference, the Mod-27
has 32760 cylinders, 56664 bytes/trk, 849960 bytes/cyl, and 27.84GB
capacity.  All the 3390 models have the same bytes/trk and bytes/cyl.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Debian touts dropping full dev for certain archit ectures (incl. S/390)

2005-03-16 Thread Joe Poole
On Wednesday 16 March 2005 07:23 am, shogunx wrote:
> On Wed, 16 Mar 2005, Phil Howard wrote:
> > | That part I have.  What I do not have is 3-phase power to run it.
> >
> > What voltage and amperage does it need?
>
> 3-phase 440V most likely about 20-30 amps.

If originally installed in the US, it probably needs twin feeds, 208
volt 60 amp 3 wire with RussellStoll or Hubbell RS 460R9W receptacles.
At about 20 kbTU/hr, you could heat your house with it, too.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Why Zseries

2005-02-10 Thread Joe Poole
On Thursday 10 February 2005 01:32 pm, Levy, Alan wrote:
> David - thanks. This is what that I was looking for.
>
Let me add to what Dr. David said with a few metrics.  The densely
packed servers of today draw between .1 and .7 kVA of power.  If you
take .3 kVA as an average, it takes only 15 servers to match the 4.5
kVA of a z900.  Add more CPUs and internal disk to the servers, and
it's not uncommon to find a single server rack that exceeds the power
requirements of the zSeries with a Shark thrown in for good measure.

I've heard that it's become difficult to add the required power to some
of the buildings in NYC to support the server induced power load.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Full volume backups in zOS

2005-01-04 Thread Joe Poole
If you don't have either of the commercial products mentioned, OFFLINDR
works fine for us.  The price is right, too.

http://www.clueful.co.uk/mbeattie/s390/offlindr.jcl

On Monday 03 January 2005 11:25 am, Seader, Cameron wrote:
> we use a product called upstream from innovation dp.
> -Cameron
>
> -Original Message-
> From: Linux on 390 Port [mailto:[EMAIL PROTECTED] Behalf Of
> Ifurung, [EMAIL PROTECTED]
> Sent: Monday, January 03, 2005 09:07
> To: LINUX-390@VM.MARIST.EDU
> Subject: Full volume backups in zOS
>
>
> Hello List,
>
> With shared DASD access with a zOS complex, is it possible to do full
> volume backups of zVM DASDs (linux guests volumes and zVM system
> volumes ) in the zOS system?
>
> Our zOS has all the latest equipments like silo automatic tape drives
> and backups done in the zOS would really be efficient.
>
> Thanks for any info.
>
> Ismael Ifurung
>
> -
>- For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390
> or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
>
>
>
> [INFO] -- Access Manager:
> This transmission may contain information that is privileged,
> confidential and/or exempt from disclosure under applicable law.  If
> you are not the intended recipient, you are hereby notified that any
> disclosure, copying, distribution, or use of the information
> contained herein (including any reliance thereon) is STRICTLY
> PROHIBITED. If you received this transmission in error, please
> immediately contact the sender and destroy the material in its
> entirety, whether in electronic or hard copy format.  Thank you.   A2
>
> -
>- For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390
> or visit http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: VIPA and hot standby

2004-12-08 Thread Joe Poole
Consider also an external appliance to do the failover.  We use a Cisco
Content Switch that sits outside the zSeries equipment so it can still
administer the site if we need to bring down z/VM or the hardware for
maintenance.  For example, site 1 gets all the traffic unless it fails,
at which time site 2 starts getting the traffic.  If site 2 goes away
too, site 3 is its backup, and is an Intel box with a single web page
saying "Sorry, we're offline for a few minutes".  When site 1 comes
back, it starts getting all the traffic again.

On Tuesday 07 December 2004 07:21 pm, Tom Shilson wrote:
> Would you care to mention the names of a few of those packages?
>
> thanks
>
> Linux on 390 Port <[EMAIL PROTECTED]> wrote on 12/07/2004
> 06:02:14
>
> PM:
> > As Alan mentioned, VIPA won't accomplish this.  But, there are Open
>
> Source
>
> > packages that will allow you to set up a High Availability (HA)
> > cluster
>
> with
>
> > your Linux/390 guests.
>
> -
>- For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390
> or visit http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


x3270 not supported?

2004-11-11 Thread Joe Poole
Slightly OT:  I just upgraded my workstation to SuSE 9.2 and noticed
from the release notes that x3270 is no longer included in the distro.
It was missing from 9.1, too, evidently because no one is supporting
the product.  The x3270 "about" verbiage says the build that I
downloaded and installed was done on April 6, 2004.  Seems current to
me.  Does anyone know what has or will happen to x3270?  It is really
useful in keeping an eye on z/VM as well as z/OS.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Securing VM using LDAP?

2004-09-20 Thread Joe Poole
That's the book I used to set up LDAP access from Linux instances, 
Susan.  It brings the mythical single sign-on a bit closer to reality.  
If VM could do the same, as David points out, we would take another 
step forward.

On Monday 20 September 2004 13:52, you wrote:
> Jim have you checked out this redbook?
> http://publib-b.boulder.ibm.com/Redbooks.nsf/RedpaperAbstracts/redp02
>21.html This IBM Redpaper provides information to help customers,
> Business Partners, and IBM technical people plan, implement and
> manage a central security solution for authentication and user
> information for multiple Linux systems using an LDAP server and RACF
> on z/OS.
>
> Susan  Greenlee ==
>Linux Technical Support Marketing Specialist
>Internet: [EMAIL PROTECTED]
>External: (845) 435-4838  Tieline: 295-4838
>  =
>
> -
>- For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390
> or visit http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Guest freeze

2004-09-14 Thread Joe Poole
We've seen it when a Samba smbd session goes into a loop when someone, 
probably trying to back up his C drive, or store the family jpegs, runs 
the server out of space.  The solution is to find the process ID with 
TOP and kill that session. 

On Tuesday 14 September 2004 13:20, you wrote:
> Do you know what specifically triggers the problem? I was just asked
> if we could do samba.
>
>
>
>
>  "Seader, Cameron"
>  <[EMAIL PROTECTED]
>  er.com> 
>   To Sent by: Linux on [EMAIL PROTECTED] 390 Port  
> cc <[EMAIL PROTECTED]
>  IST.EDU> 
> Subject Re: Guest freeze
>
>  09/14/2004 08:33
>  AM
>
>
>  Please respond to
>  Linux on 390 Port
>  <[EMAIL PROTECTED]
>  IST.EDU>
>
>
>
>
>
>
> Here is some more information about what we had discovered after
> talking with SuSE. This problem was never resolved.
>
> Just an update on the bug found yesterday. I just got off the phone
> talking with Novell's SUSE support department and we were able to
> narrow down which package was causeing the conflict with the
> openldap2-client library. Samba-2.2.8a has a service called nmb which
> is the netbios service, which has hooks in the openldap2 library
> files. We were able to narrow down to the service nmb when it is
> started it causes a loop process to start in the kernel process
> ksoftirqd_CPU0. This investigation has been sent off to the
> Development labs at SUSE in Germany. They will either find a fix for
> the current package and send that out globally, send us a beta
> version of SLES 9 (which is on beta 2 right now), or they will have
> us wait until SLES 9 is released. Another option is to download the
> Samba 3.0 binaries and compile it for our platform ourselves, which
> would go out of the support bounds for SUSE.
>
> -Cameron Seader
>
> -Original Message-
> From: Troyski [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, September 14, 2004 07:13
> To: [EMAIL PROTECTED]
> Subject: Guest freeze
>
>
> Hi all,
>
> Anybody seen the following conditions :-
>
> o VM linux guest hangs. No response to ssh or at 3270 console. Pings
> from other servers (external and internal) ok though (?)
> o VM CPU @ 100%.
> o No VM paging.
> o VM guys say linux is "looping".
>
> zSeries 800/SLES8 SP2
>
> Would a linux guest memory issue cause this?

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: time

2004-07-26 Thread Joe Poole
On Monday 26 July 2004 13:23, you wrote:
> Greetings;
>
> Of course you would not have all of your penguins each talking to
> "a bunch of remote NTP servers." You just have one of them doing
> that. It then becomes a Stratum-3 time server and the rest of your
> penguins talk to it. You can also have your windows servers and
> desktops synch to your stratum 3 server and greatly reduce the
> utilization of your external network.
>
> Works great! Less bandwidth!
>
> Good luck!
> Dennis

You can also use one of your routers.  We have a Cisco that is the 
master, and all servers and vservers get the time from it.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Oh Dear, More Trouble for SCO

2004-07-23 Thread Joe Poole
On Friday 23 July 2004 15:29, you wrote:
> http://biz.yahoo.com/prnews/040723/sff025_1.html
>
> BayStar intends to file an action requesting a declaratory judgment
> with respect to its rights under the Stock Repurchase Agreement.

That puzzles me, Peter.  There must be some financial benefit to holding 
on to shares that are slip-sliding away.  You'd think Baystar would 
want to get out.  Hmmm.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Performance of large file systems

2004-07-16 Thread Joe Poole
On Friday 16 July 2004 08:47, you wrote:

>
> I'll throw it out:  Anyone using PAV on a DASD box with ESCON?
>

Absolutely.   12 Escon into Shark #1, 4 FICON into Shark #2.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Slack/390 - Slackware Linux for the mainframe

2004-07-07 Thread Joe Poole
On Wednesday 07 July 2004 03:16, you wrote:

>
> My wife, Laura, for thinking that this was a cool thing to do.  :)
>
>
> Mark Post
>

...and it was.  Congratulations to you, Mark, and thank Laura for all of 
us.   You listening, Levanta?  I want this distro supported by August!  
No buts.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Securing Linux for zSeries with a Central z/OS LDAP Server ( RACF)

2004-07-06 Thread Joe Poole
On Tuesday 06 July 2004 11:08, you wrote:
> Greetings,
> I posted something about this last week and did not get any response,
> so I'm writing again to see if anyone in the community of Linux and
> z/Series has had any experience with this. Is there any good
> documentation on how to build the TDBM side of the house and get that
> working? We currently have the SDBM working with authentication to a
> RACF backend, and it works great. We are currently struggling with
> the TDBM side. We are not sure of how to get it configured for TDBM
> and how to setup the Schema for the TDBM database. We are unsure of
> the parameters that need to be set for the slapd.conf file so that
> the TDBM loads correclty.  Does anyone out there have any ideas or
> have had experiences with this and can give us some pointers, or
> maybe some better documentation on how this is done. We have been
> reading the Redbooks on this and have been unsuccessful so far.
>
> Thanks,
> Cameron Seader
>
When I followed the Red Book on LDAP, I cross referenced anything I did 
in the "Security Server LDAP Server Administration and Use" book 
(SC24-5923).  Neither book told the whole story, but taken together, I 
stumbled my way through.  I had to enlist the aid of a DBA to do the 
DB2 part.  Schemas were a big guess.  I did the LDAPADD commands as 
specified, and kept building things, but always ran into pre-reqs that 
didn't exist.  I suppose the z/OS 1.3 schema source might have been 
lacking since I noticed enhancements in later releases of z/OS.  Nobody 
here has the time or need to exploit the DB2 side yet - like you, we 
authorize using the RACF side.  

I also see the need for a administrative tool once the data is loaded.  
Managing all those accounts will take some doing.  

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Performance with Multiple CPUs

2004-06-22 Thread Joe Poole
On Tuesday 22 June 2004 14:19, Mark Post wrote:

Anything that requires more than 1 CPU is not little.

Granted, but it could be mighty important to the business!  

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: VM user manager

2004-06-22 Thread Joe Poole
Check on BMC's product, too.  "Deployment Manager" is another choice, 
although we use Levanta:
http://www.bmc.com/products/proddocview/0,,0_0_0_9542,00.html


On Monday 21 June 2004 20:55, you wrote:
> I know DIRMAINT and Levanta that provide an interface to VM to manage
> virtual machines. Are there other products? Has anyone compared them
> in functionality, price and ease of use?
> Thanks
> __
> Ranga Nathan / CSG
> Systems Programmer - Specialist; Technical Services;
> BAX Global Inc. Irvine-California
> Tel: 714-442-7591   Fax: 714-442-2840
>
> -
>- For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390
> or visit http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Is the site "www-gnats.gnu.org:8080" closed or moved ?

2004-06-22 Thread Joe Poole
I got "connection refused" which means something answered.
Try this:
http://www.gnu.org/software/gnats/


On Tuesday 22 June 2004 05:50, you wrote:
> Hello everyone,
>
> This is the first time to send a mail to this Mailing listing.
> I would like to see a bug report which should be located at
> http://www-gnats.gnu.org:8080/cgi-bin/wwwgnats.pl/full/1738.
> But I can't see it due to DNS error or not find server.
> Do anyone know whether that the site has already been closed
> or the site has been moved ? If you have any information about
> the site, please tell me.
>
> Thanks and regrads,
>
> Hitoshi Endoh from TOKYO, JAPAN.
>
> -
>- For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390
> or visit http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: J2EE performance?

2004-06-18 Thread Joe Poole
On Friday 18 June 2004 15:02, you wrote:
> I'll try to address some of Brandon's original questions:
>
> 1. We have noticed that Java applications will "hog" the CPU if you
> let it.

I'll add to what Eric said.  A Java application is like any other; it 
will run poorly if written poorly.  Many of us old timers remember 
pouring over our programs to try to get them to run efficiently on the 
360 processors.  Such diligence is warranted for any application that 
will run in a virtual environment.  Make sure the code is doing what 
you intend it to do, and tune, tune, tune.  And this applies to any 
platform, including Intel.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: WAS 5.1 ND on z/linux

2004-06-07 Thread Joe Poole
When garbage collection touches all those pages with such frequency,  I 
would imagine that z/VM would want to consider them not eligible for 
paging.  Even when a WAS virtual server is inactive, the working set 
size never shrinks, as would be expected.  

I've suspected this CPU and memory behavior in our WAS 4 and WAS 5 
instances, and we'll investigate it further.

It would appear that a direct port of an Intel architectured application 
may not play well with others in a virtual world.  Perhaps software 
architects who are about to port to Linux on zSeries should spend some 
time in Hursley, England to see how the CICS folks learned to share. 

On Monday 07 June 2004 12:27, you wrote:
> Anyone using WebSphere 5.1.0.3 on z/linux seeing an garbage
> collection problem in the 1.4.1 JVM that ships with the product?
>
> We're seeing (and have a PMR open) where java garbage collection is
> running at intervals of 100-1500 milliseconds to do cleanup on a 512
> MB heap size, even when that heap is 75-96% free.
>
> We turned verbose garbage collection on and discovered this. We're
> spending 65% of the process time in garbage collection when we
> shouldn't be.
>
> -
>- For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390
> or visit http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: linux 390 education

2004-06-02 Thread Joe Poole
On Wednesday 02 June 2004 08:53, you wrote:
> What books, manuals, or courses would you recommend to
> learn how to support both VM and Linux under VM.  I
> have some VM experience as a user and Intel Linux
> administration.
>

If you have some VM experience, I suggest IBM's course ZV060 as a 
starter.   Also check out (http://www.redbooks.ibm.com/) the Redbooks 
and Redpieces that many on this list have contributed to and/or 
authored.  The linuxvm.org website is a treasure trove of how-tos and 
presentations.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: ESJ Interview

2004-06-01 Thread Joe Poole
On Thursday 27 May 2004 11:25, you wrote:
> I struggled with this one quite a while before sending it to the
> list. Somehow it just seems wrong to publicize myself in this way,
> probably due to my midwest upbringing.  In any case, Stephen Swoyer
> from Enterprise Systems Journal did an interview with me which got
> published online last week. Hopefully it will be of some value.
>
> http://www.esj.com/enterprise/article.asp?EditorialsID=971


Good job, Mark.  

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: IFL connectivity issues

2004-05-20 Thread Joe Poole
To add to what Mark said, make sure the timeout values on the Linux 
instances are less than that of any firewall appliance you might be 
routing traffic through.  Our Cisco Pix would whack a connection after 
1 hour of non-use, sending the reset to the client, but not to the data 
base server at the other end.

On Thursday 20 May 2004 11:55, you wrote:
> My first reaction is that the systems are getting into the eligible
> queue and the connections are timing out.
>
>
> Mark Post
>
> -Original Message-
> From: Linux on 390 Port [mailto:[EMAIL PROTECTED] On Behalf Of
> Duane Weaver
> Sent: Thursday, May 20, 2004 11:02 AM
> To: [EMAIL PROTECTED]
> Subject: Fwd: IFL connectivity issues
>
>
> The following was reported to me by my coworker handling the LINUX
> side of things.
>
> We have made no changes to z/VM 4.3 on our IFL.
>
> Anyone have any thoughts?
>
> Duane
>
> >Subject: IFL connectivity issues
> >Date: Thu, 20 May 2004 09:43:34 -0400
> >X-MS-Has-Attach:
> >X-MS-TNEF-Correlator:
> >Thread-Topic: IFL connectivity issues
> >Thread-Index: AcQ+cHGTKvgUI9zrSOOQmWkplpi0Qg==
>
> From: "George Rester" <[EMAIL PROTECTED]>
>
> >To: "Z-VM" <[EMAIL PROTECTED]>
> >
> >OK Guys,
> >
> >Here is a little problem that has been running around for the last
> >month or so.
> >
> >Every so often, and at no discernible time or event, connections to
> > the various zLinux systems are dropped from the clients connecting
> > to them. For the most part the system remains up and running,
> > recovers sometimes in an instant, other in minuets, while on a few
> > occasions not at all; a system reboot was needed.  The loss of
> > connection is not with all of the zLinux systems at once however;
> > if linux03 drops, you can still access linux05, etc...
> >
> >This problem has been seen from the OIT network, VPN network,
> >roadrunner, and now from a third party user, eSpaceCommunications.
> >Twice today already they have reported dropped connections followed
> > by a restoration of access.  Access to a "dropped" system can also
> > not be made from another zLinux system during this outage also.
> >
> >Since this is effecting all of the "used" systems, 1,2,3,5,8 and 9,
> > I can't find it being anything at the zLinux side, and nothing has
> > been changed on a number of these systems since installations.
> >
> >Have there been any changes to the network or the zVM internal
> >networking definitions that could be contributing to this problem?
> >
> >Thanks,
> >
> >George
>
> -
>- For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390
> or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
>
> -
>- For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390
> or visit http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Article on Groklaw on SCO's subpoena of FSF

2004-05-20 Thread Joe Poole
>
> Time to make Tshirts with "I'm a Defendant in the SCO Lawsuit!
> Wouldn't you Like to Be One Too?" on them.
>
> -- db
>

Mine gets a target on the back, David.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Anyone what to sell me SuSE Linux for s/390?

2004-05-19 Thread Joe Poole
On Wednesday 19 May 2004 16:55, you wrote:
> With the answers I have ben getting about the SuSE side of things
> today I wonder what you get for $15K. If their service is as good as
> their sales I don't think I want it. I think I'm getting to old for
> this business..;-( What ever happened to service?
>
> Getting old with a lot less patience
> Dave

I, too, am getting within eyesight of retirement, Dave.  However, I 
believe that we have to pay for the fixes and downloads from the 
distributions we choose, until our staffs build their skill levels to 
be able to bolt together a working Linux instance from freely available 
materials.  When that day comes, and I hope to be here when it does,  
open source will have arrived at our shop to the tune of popping corks 
and cheers galore.  Oh, yeah.  Pizza, too.  (Big spender, huh?) 

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Anyone what to sell me SuSE Linux for s/390?

2004-05-19 Thread Joe Poole
There has been a marketing change for SuSE.  I found out that you have 
to call your Novell rep, who can recommend a software reseller in your 
area that handles Novell products.  I think the discount you can get is 
based on the reseller's discount with Novell.  Example:  SuSE annual 
maintenance is part number 874-002691-001 for SLES8, list price just 
shy of $15k.  Negotiate your heart out!

On Wednesday 19 May 2004 10:55, you wrote:
> If there is a vendor on the list that would like to sell me the media
> package for SuSE enterprise Linux for S/390 please email me OFFLINE.
> I would also consider over packages for Linux for S/390.
>
> TIA
> Dave
>
> -
>- For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390
> or visit http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Hipersockets..... a couple of questions

2004-05-18 Thread Joe Poole
On Tuesday 18 May 2004 16:11, you wrote:

>
> If we're in 31 bit mode on z/VM we should do 2 real and 1 expanded?
> We change the config on the 23rd of this month, so I want to get it
> right. The next time we can change the config is july 18th but the
> POC will be over by then.
>
Steve Wehr recommends 70% real and 30% expanded in his Red Paper.  z/VM 
supports 64 bit addressing, so you're probably OK.  2.5 GB main and .5 
GB expanded is a good start.  30% of 3.0GB is .9 which means you would 
have 2.1 real and .9 expanded.  

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: /etc/passwd and /etc/shadow - synchronized on mul tiple images

2004-04-21 Thread Joe Poole
The Redbook speaks to that point:

http://publib-b.boulder.ibm.com/Redbooks.nsf/RedbookAbstracts/redp0221.html?Open


On Wednesday 21 April 2004 11:26, you wrote:
> Uou also need to get the heirarchy in the PAM files just right, so it
> passes local accounts, and sends others to LDAP properly.
>

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: FTEs per Server

2004-04-14 Thread Joe Poole
On Tuesday 13 April 2004 20:09, you wrote:

> Darned users.  If we could set traps for them and eliminate them as a
> source of disruption, things would be a lot easier.  :-)  I say give
> them fake keyboards and mice.
>
> Alan Altmark

Sign on the cubicle of one of the programmers working on the new 
Websphere Commerce Suite web site:

SELECT * FROM users Where clue = True;

No rows returned. 

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Linux Administration tools

2004-04-08 Thread Joe Poole
There is another monitor available - RMFPM.  If you have RMF running on 
the z/OS side of the wall, check out

http://www-1.ibm.com/servers/eserver/zseries/zos/rmf/rmfhtmls/pmweb/pmweb.htm

and see if it does what you want.  The price is certainly within my 
budget.  ($0)  You start up GPMSERVE on z/OS, and install the data 
gatherer on the Linux instance.  I use the Linux desktop client, but 
one is available for Windoze, too.  The end result is a nice graphical 
display that you can customize for z/OS or your sysplex, and another 
selectable page for the Linux instances you want to keep an eye on.  
Toggle back and forth as needed.

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Linux Administration tools

2004-04-06 Thread Joe Poole
We use Levanta at Boscov's.   RTM for monitoring.  (Sure wish they'd 
spring for Barton's stuff.)

On Tuesday 06 April 2004 13:22, you wrote:
> Hi all,
>
> I am trying to get a feel for how people are managing their Linux
> Instances on the S/390.
>
> Are you using any tools like Levanta?
>
> If not, what are you using?
>
> Thanks
> Gene
>
> -
>- For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390
> or visit http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: Usage Metrics for z/Linux

2004-03-26 Thread Joe Poole
Poke around http://www.cimslab.com/ to see if that suits your needs.  
They primarily do z/OS and VSE, but I know that they have collectors 
for VM and Linux.  I've not tried collecting data from the colony.  Or 
give them a call and tell them what you need.  They're a pretty good 
bunch of guys and could probably come up with what you want.

On Friday 26 March 2004 11:32, you wrote:
> What if anything exists to provide utilization metrics for chargeback
> in the Linux world.  We're going to VM, so that's what I think I'd be
> more interested in. I assume there are still poor granularity issues
> amongst other things? Just curious what methods/products people are
> finding effective for billing back Linux resource usage.
>
> -
>- For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: INFO LINUX-390
> or visit http://www.marist.edu/htbin/wlvindex?LINUX-390

--
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390


Re: dasdfmt with a 1K block size - still not recommde d?

2004-02-18 Thread Joe Poole
On Wednesday 18 February 2004 13:13, you wrote:
> [sigh]
> Another datapoint indicating that MVS should learn FBA.
> But it's a losing battle.   

I suppose many of you remember the twin 3370A disks that were a must for 
every water cooled 3090 installation.  If they knew FBA then...


Re: x3270 Keymap Utility?

2004-02-12 Thread Joe Poole
On Wednesday 11 February 2004 17:55, you wrote:
> I have a problem with the keymap too. some function keys dont work
> and I dont know where the definitions live.
> Is it part of the source that I have to recompile? I have poked
> around but with no luck.
>
> Also, my x3270 came as part of SuSE. I only have the binary rpms.

I use a SuSE desktop, too.  Here's the instructions I put together to 
remind me (I'm getting old) how to activate the new settings:

Keyboard remapping:

Apply these changes to make x3270 behave like Extra! Sessions:

Use a File Manager with root priveleges to access the 
/home/userid
directory.  Change the view to show  hidden files and use Kedit or some 
other editor to add theses statements to the end of .Xresources:

!
! Some adjustments to the keyboard of x3270:
!
x3270.keymap.custom:\
   Escape:Reset()\n\
   Return:Newline()\n\
   Control_R: Enter()\n\
   End:   EraseEOF()\n\
   Pause: Clear()\n\
   Prior: PA("1")\n\
   Next:  PA("2")\n\
   ShiftF1:   PF(13)\n\
   ShiftF2:   PF(14)\n\
   ShiftF3:   PF(15)\n\
   ShiftF4:   PF(16)\n\
   ShiftF5:   PF(17)\n\
   ShiftF6:   PF(18)\n\
   ShiftF7:   PF(19)\n\
   ShiftF8:   PF(20)\n\
   ShiftF9:   PF(21)\n\
   ShiftF10:  PF(22)\n\
   ShiftF11:  PF(23)\n\
   ShiftF12:  PF(24)\n
!
! Now tell x3270 to use these adjustments.
!
x3270.keymap:   custom
!
! then open a shell and issue: xrdb -merge .Xresources

When finished, save /home/userid/.Xresources and open a shell.  Issue 
the command  xrdb -merge .Xresources  to activate the overrides.  The 
next time you open a session with x3270, the changes will be in effect.

Different screen models:

Create an icon on the desktop and set the application path to:

'/usr/X11R6/bin/x3270' -model 3279-5 mvshost1

Change the model to 3279-4 or 3279-2 as needed, and change the host 
field to vmhost1 as needed.


Re: Accessing OS/390data from Linux LPAR.

2004-02-06 Thread Joe Poole
On Thursday 05 February 2004 22:14, you wrote:
> I have downloaded this but looks like it requires "Enterprise
> Extender" on the OS/390 side.
>
> I was looking at the CICS sockets interface. On the Linux side I can
> rig up something in Perl easily. But the CICS side seems to be a big
> effort. If anyone has done sockets on CICS, can I have some pointers
> please?
>

There is a good book on the TCPIP Book Manager bookshelf about CICS 
Sockets programming, F1A1G100 (SC31-8807).  See Appendix D for the CICS 
sample programs.  We have several examples in use based on the 
information in this book, both initiator and listener types.


Re: Support question for a new Lead / manager of zLinux

2004-02-03 Thread Joe Poole
On Tuesday 03 February 2004 10:31, you wrote:
> What sort of rate did you get for that per call basis?

Support Line is $230/hr (8 to 5), $310 offshift,
supported products are at:
http://www-1.ibm.com/services/sl/products/

Consult Line is $270/hr (8 to 5), $365 offshift and covers complex 
questions.
http://www-1.ibm.com/services/its/us/consline2.html


Re: Support question for a new Lead / manager of zLinux

2004-02-03 Thread Joe Poole
On Tuesday 03 February 2004 07:59, you wrote:
> 1. Defect support, problem support was acquired from IBM at a cost. 
> This is specifically Linux defect / problem support. (there is of
> course separate support for VM itself).
> 2. Update, patch, maintenance support was purchased from SuSE or Red
> Hat separately.
>

You can also enter into a support contract on a "per call" basis with 
IBM.  That contract would cover both z/VM and Linux, and you would be 
billed on an hourly basis for each call.  We chose this route since 
most of the calls would be in the beginning of our projects, and as 
more experience is gained, the calls would taper off.  


Re: Linux desktop

2004-01-27 Thread Joe Poole
On Tuesday 27 January 2004 14:44, you wrote:
> CUPS makes this pretty easy.
>

...and CUPS also lets you register any printers you have defined on 
InfoPrint Server, if you have z/OS and the feature.  For those products 
that don't use CUPS, a simple lpr -P (prtname) works, too.  


Re: Success stories, planning for success?

2004-01-22 Thread Joe Poole
Most of the intelligent folks are probably cruising around Linux World 
today, so I'll take a crack at your question, Eric.

First, and foremost, is the blessing of your management that they would 
truly like to see your implementation work.  They should energize the 
other Administrators and Networking people so that everyone knows how 
management feels and how important their individual contributions will 
be to the success of the project.

Pick the platform.  If you have access to an IFL, you might as well 
lobby for z/VM.  If not, find a decent xBox to work with.

Pick your Linux distribution and get it on order.

If working with the zBox, have someone take a class like IBM's ZV060 
which teaches the installation of z/VM when intended for Linux.

Decide which function you want to port to the new platform, like some 
static web pages that would work on Apache, or a file/print server.  
DB2 on AIX or Intel is also a good candidate.  Don't make your first 
conversion too difficult.

Assemble the team.  IPL the coffee pot.  Print the Red Books.  Go to it.

On Thursday 22 January 2004 09:23, you wrote:
> Here is a question for the group that I don't recall seeing.  I have
> recently been asked to compile a list of those things that are most
> important, a must have, to realize success the implementation of
> Linux. Anyone here have a success story they can share, either
> x/Linux or z/Linux is welcome?  What "things" were most important to
> realizing that success? Or what things would be considered a must
> have for the successful implementation of Linux, again x/Linux or
> z/Linux?
>
> Thoughts...
>
> Thanks!
> Eric Sammons


OSDL Linux Legal Defense Fund

2004-01-12 Thread Joe Poole
News this day on the OSDL site:

http://www.osdl.org/about_osdl/legal/lldf/lldf_description.html

and Groklaw:

http://www.groklaw.net/


Re: Setuid programs on SLES 7 & 8

2004-01-05 Thread Joe Poole
On Monday 05 January 2004 15:48, you wrote:
> sed -e 's/through/throw/'
>
> Sigh.  Mondays.
>
>
> Mark Post
 
We knew what you meant.


Re: SCO Christmas Letter

2003-12-30 Thread Joe Poole
On Monday 29 December 2003 17:46, you wrote:
> As well as for your barristers.  It might cut down on the amount of
> time they think they need to devote to research, and save some money.
>  Plus, it might just give them the hiccups from laughing so much.  :)
>
They, as well as our CIO, are well aware of Groklaw and the valuable 
information the site provides.  I did caution them all not to be 
drinking egg nog at the same time they peruse the web site.   


SCO Christmas Letter

2003-12-29 Thread Joe Poole
We received our Christmas letter from SCO, warning us that we may not 
make Santa's list next year if we persist in befriending penguins with 
questionable ancestry.  Although dated on December 19th, the letter did 
not arrive in time for Christmas Eve and therefore could not be placed 
in the CIO's stocking.  CIO immediately forwarded same to the 
barristers so that they might also enjoy the season's greetings.

Has anyone else on this list received the SCO Christmas Carol?  Not as 
well written as that by Charles Dickens, but classically entertaining 
nonetheless.  


Re: New doctor in the house...8-)

2003-11-18 Thread Joe Poole
On Tuesday 18 November 2003 14:54, you wrote:
> Yay!  Very cool.  Glad to hear things went well!
>
>
> Mark Post
>

Second that!


Re: Linux ready for the desktop: IBM

2003-11-12 Thread Joe Poole
On Wednesday 12 November 2003 10:33, you wrote:
> >is it used in preference to Windows? AIX? etc.
>
> Well, I for one certainly prefer Linux to Windows.
>

I'll second that.  In my 2 years of desktop Linux (SuSE), mainly 
administrative tasks and z/OS and z/VM monitoring, I'm happy.  The only 
thing I can't do is use the Softcopy Receiver Tool to update the z/OS 
manuals in Bookmanager.


Re: Authentication against RACF backed LDAP DB when using WAS 5 for z/Linux

2003-10-21 Thread Joe Poole
On Tuesday 21 October 2003 10:56, you wrote:
> I'm trying to resolve a couple things
>
> Specifically, what does it want/mean for Server User ID? RACF LDAP
> Server or WebSphere Application Server?

I think they mean the host name as registered in DNS, where GLDSRV is 
listening on port 389.
 
>
>
> Secondly what should be in the base Distinguished name? I currently
> have ou=racf,o=co.hennepin.mn,c=us  which I believe is correct given
> our domain name etc.

It should be the name you assigned in the SDBM section of SLAPDCNF  
between the quotes of suffix = (mine is sysplex=BOSCOVS_RACF)

>
> Any advice ideas? No matter what I put in the Server User - including
> my own ID/PW for RACF it fails.

Here is a batch job I use to test certain combinations of requests:

//LDAPTEST EXEC PGM=IKJEFT1B 
//STEPLIB  DD   DISP=SHR,DSN=CEE.SCEERUN 
// DD   DISP=SHR,DSN=GLD.SGLDLNK 
//SYSPROC  DD   DSN=GLD.SGLDEXEC,DISP=SHR 
//SYSPRINT DD   SYSOUT=* 
//SYSTSPRT DD   SYSOUT=* 
//SYSTSIN  DD   * 
LDAPSRCH -v -h MVSHOST1 -p 389 - 
-D racfid=t88ttst,profileType=user,sysplex=BOSCOVS_RACF - 
-w ldaptst - 
-b racfid=t88ttst,profiletype=user,sysplex=BOSCOVS_RACF - 
"objectclass=*" 
// 


Re: "SCO gives Linux users more time on license fee charges"

2003-10-20 Thread Joe Poole
On Monday 20 October 2003 13:50, you wrote:
> Watch out for the wrap:
>
> http://www.computerworld.com/softwaretopics/os/linux/story/0,10801,86
>164,00.html?nas=AM-86164
>
> --henry schaffer
Interesting, Henry...


Invoicing could also expose SCO to lawsuits, the analyst said. "It's one 
thing to file a lawsuit against a specific company, and it's another 
thing to present invoices to a large number of end-user companies, many 
of whom will regard them as fraudulent and take counter action," Haff 
said. 


Isn't mail fraud a federal offense?


Re: Cluster (HA) solutions for z/VM

2003-10-17 Thread Joe Poole
Have a look at the Red Paper on High Availability for zVM and Linux:

http://publib-b.boulder.ibm.com/Redbooks.nsf/9445fa5b416f6e32852569ae006bb65f/76a57335bb29155385256bd4006dcf48?OpenDocument

(or go to the IBM Redbook site and search for 'high availability')

On Friday 17 October 2003 08:24, you wrote:
> I have just been asked by a group of developers and business owners
> if we move their application to the Mainframe (zLinux), can we
> provide a HA environment?  This would be application HA such as
> available with Veritas Cluster on x86 Linux systems or Solaris and
> Veritas etc. . .
>
> So clearly my question to the group is does such software (solutions)
> exist for the Z/VM Linux platform?  Is anyone doing this today?  And
> if not how can we make this happen?  Regardless of how reliable the
> zSeries Platform is and how reliable Z/VM is we still can not
> guarantee application, DB, network, HD availability.  That is
> generally where a solution such as Veritas Cluster or Sun Cluster
> comes in.
>
> Thanks!
> Eric Sammons
> (804)697-3925
> FRIT - Infrastructure Engineering


Re: Well, I've gone and done it. I'm quoted in an article in the who SCO/IBM Fracas.

2003-09-12 Thread Joe Poole
On Friday 12 September 2003 13:45, you wrote:
> http://www.esj.com/news/article.asp?EditorialsID=668

OK, Jim.  The race is on!  Who gets the invoice first, you or me?


Re: InfoWorld Article - Microsoft Benchmarks Step Up Linux Assault

2003-09-05 Thread Joe Poole
On Friday 05 September 2003 14:11, you wrote:
> > He obviuosly does not understand the power of the
> > mainframe. IBM has always talked about throughput
> > rather than "performance" - elapsed time of any given
> > transaction and throughput.
>
> Oh, I'd think he understands all too well. Most of the industry
> "performance" benchmarks measure things that mainframes aren't good
> at. It's like measuring the duration of your next trip to the grocery
> store in angstroms per cubic kilometer.  The measurements are
> meaningless, or are misleading in ways that don't benefit IBM, so
> there's no point in expending lots of resources to compare something
> that won't tell you anything positive.
>
> This is long-standing IBM policy -- nothing new to see here.

I guess I was silly giving the guy a half hours worth of reasons during 
the interview.  Only a handful were quoted.


Torvalds Slams SCO

2003-08-21 Thread Joe Poole
http://www.eweek.com/article2/0,3959,1227150,00.asp


eWEEK: For its part though, SCO has said that there are so many lines of 
code, and a variety of applications and devices that use that code, 
that simply removing the offending code would not be technically 
feasible or possible and would not solve the problem. Do you agree? 


Torvalds: They are smoking crack. Their slides said there are [more 
than] 800,000 lines of SMP code that are "infringing," and they are 
just off their rocker. The SMP code was written by a number of Linux 
people I know well (I did a lot of the SMP IRQ scalability myself, 
personally), so their claims are just ludicrous. And they claim they 
own JFS [journaled file system technology] too. Whee. They're not shy 
about claiming ownership of other people's code-while at the same time 
beating their breasts about how they have been wronged. So the SCO 
people seem to have a few problems keeping the truth straight, but if 
there is something they know all about, it's hypocrisy. 


Re: A Very Serious Virus Alert

2003-08-14 Thread Joe Poole
On Tuesday 12 August 2003 16:53, you wrote:
> > I see your Model I and raise you a Timex-Sinclair 1000 and an
> > Atari VCS.
> > Of course, David's about to rush in and trump us all with the IMSAI
> > 8080.
>
> Nope. Hard (not) to do buffer overflows in 512 bytes of memory.
>
> -- db
I'm bummed.  My Times-Sinclair disappeared, and all I have left is this 
360/30 front panel on my credenza.  (serial 11717).


OSDL releases position paper

2003-08-04 Thread Joe Poole
The Open Source Development Labs has released an interesting position 
paper:

http://www.osdl.org/newsroom/press_releases/2003/2003_07_31_beaverton.html


Re: Gartner (Australia) on Linux

2003-08-04 Thread Joe Poole
I wonder if they ever let this guy out of the office?

"Niche areas Linux is being deployed in include edge of network areas 
such as domain name servers, proxy servers, caching and firewalls, said 
Mr Sargeant."

Step outside and have a look, Mr. Sargeant.  You WILL find mission 
critical applications running on Linux platforms of all kinds.


On Monday 04 August 2003 05:16, you wrote:
> http://www.news.com.au/common/story_page/0,4057,6861814%255E15306,00.
>html
>
> "LINUX penetration within Australian enterprises may reach 90 per
> cent within three years, but it will remain a niche technology, ..."
>
> I'm vaguely reminded of Winston Churchill's "some chicken, some neck"
> remark.  90% is one hell of a niche.


Re: An update to the little script I post the other day...

2003-08-01 Thread Joe Poole
Now THAT was funny!   Sorry Gordon, I'm laughing too hard to jump on 
Leland.  

On Friday 01 August 2003 13:39, you wrote:
> Air traffic control?
>
> -Original Message-
> From: John Ford [mailto:[EMAIL PROTECTED]
> Sent: Friday, August 01, 2003 1:39 PM
> To: [EMAIL PROTECTED]
> Subject: Re: An update to the little script I post the other day...
>
>
> I doubt that it would be possible to FIND a working System/7! :-)
>


Re: Where are your databases?

2003-07-31 Thread Joe Poole
We're using DB2 UDB on SuSE Linux in several production instances.  
Under construction is Websphere Commerce Suite which uses DB2 for its 
own files, plus DB2 UDB for our catalog of products.  Our gift registry 
penguin remotely binds to DB2 on the z/OS side to retrieve data as 
well.  If the IFL gets a little winded when WCSBE comes online in 
October, we can move the DB2 UDB data bases to the z/OS side and 
remotely bind as a cycle saving effort.  Data, data, everywhere but not 
a byte to eat.

On Thursday 31 July 2003 11:59, you wrote:
> In another thread (Whither ) it was the general
> consensus that people like lots of little linxues.
>
> So, where are your databases? Distributed databases?
> Small databases that fit into something less than a
> TB? Other hardware and other OS?
>
> One popular answer I've heard is DB2 MVS. Another is
> Oracle on Sun?
>
> Anyone using Linux for a database server?
>
> =
> Jim Sibley
> Implementor of Linux on zSeries in the beautiful Silicon Valley
>
> "Computer are useless.They can only give answers." Pablo Picasso
>
> __
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com


Re: z/Linux and ICSF?

2003-07-25 Thread Joe Poole
Lionel,

See Chapter 7 of the Redbook SG24-6870,
zSeries Crypto Guide Update

We haven't tried it yet.


On Friday 25 July 2003 13:10, you wrote:
> Does linux on Z support the ICSF for crypto?
>
> 
> Lionel B. Dyck, Systems Software Lead
> Kaiser Permanente Information Technology
> 25 N. Via Monte Ave
> Walnut Creek, Ca 94598
>
> Phone:   (925) 926-5332 (tie line 8/473-5332)
> E-Mail:[EMAIL PROTECTED]
> Sametime: (use Lotus Notes address)
> AIM:lbdyck


Re: Gartner speaks

2003-07-24 Thread Joe Poole
On Thursday 24 July 2003 07:55, you wrote:
> http://www.theregister.co.uk/content/4/31938.html
>
> How is this SCO afair affecting people here?

We're still rolling out the penguins (without fur BTW).  Websphere 
Commerce Suite is the latest effort, running in test instances.  Our 
CIO is in "wait and see" mode, as are we all.  Attorneys agree.  
Without proof, there's no reason to stop.


Re: SCO not playing by Aussie Rules

2003-07-23 Thread Joe Poole
On Wednesday 23 July 2003 12:08, you wrote:
> > Have you noticed that most cars look like they were designed by the
> > same guy?

I think he's the same guy who designs all the sneakers, too.


Re: Background on SCO

2003-06-19 Thread Joe Poole
"These guys in Utah are no dummies. The crunchies in the Linux community 
should be paying more attention."

We're "crunchies" now?  Hmmm.  I wonder where that came from. 


On Thursday 19 June 2003 09:46, you wrote:
> An interesting background to the SCO suit.
>
> http://www.forbes.com/2003/06/18/cz_dl_0618linux.html?partner=yahoo&r
>eferrer=
>
>
>
> 
> Lionel B. Dyck, Systems Software Lead
> Kaiser Permanente Information Technology
> 25 N. Via Monte Ave
> Walnut Creek, Ca 94598
>
> Phone:   (925) 926-5332 (tie line 8/473-5332)
> E-Mail:[EMAIL PROTECTED]
> Sametime: (use Lotus Notes address)
> AIM:lbdyck


Re: VM Memory for Samba

2003-06-11 Thread Joe Poole
Lionel,

Here's a line from our RTM showing one of our busiest file servers, 
supporting around 650 users: 

  %CPU %CP %EM ISEC PAG  WSS  RES   UR PGES SHARE VMSIZE 
TYP,CHR,STAT
 LXFS001   1.7 .45 1.2  154 .90  53K  53K   .0  15K   400   256M 
VUS,DSC,DISP

You can see that it's quite happy with 256M, and a working set size of 
53K pages.  

Joe

On Wednesday 11 June 2003 09:41, you wrote:
> How much memory should be allocated to a Linux guest by z/VM that is
> doing only Samba for file serving?
>
> Does it matter how many users?   Est is between 200 and 2000 per
> instance.
>
> thx
> 
> Lionel B. Dyck, Systems Software Lead
> Kaiser Permanente Information Technology
> 25 N. Via Monte Ave
> Walnut Creek, Ca 94598
>
> Phone:   (925) 926-5332 (tie line 8/473-5332)
> E-Mail:[EMAIL PROTECTED]
> Sametime: (use Lotus Notes address)
> AIM:lbdyck


The meddling continues:

2003-06-10 Thread Joe Poole
GeCad software made a name for itself by developing the first anti-virus 
software to run on zLinux, and guess who just bought the technology?

http://www.ravantivirus.com/pages/shownews.php?i=153

I wonder how long it will take before the Linux offerings are withdrawn?


Re: pam_ldap to LDAP server on z/OS with RACF backend

2003-06-06 Thread Joe Poole
Here's one that works for me.  It asks if a userid is connected to a 
certain RACF group.

LDAPSRCH -v -h MVSHOST1 -p 3389 - 
-D racfid=LDAPBIND,profileType=user,sysplex=BOSCOVS_RACF - 
-w BINDER - 
-b profiletype=connect,sysplex=BOSCOVS_RACF - 
"(&(racfuserid=tsouser)(racfgroupid=DIALGRP))" 

On Thursday 05 June 2003 15:02, you wrote:
> > You're welcome, but did it help you to the point you're working
> > now?
>
> I thought it would be a piece of cake after reading that redpaper...
> but after much trial and error, I'm still having problems.
>
> Here's what I'm up to...
>
> pam.d/httpd is a mere:
> authrequired   pam_ldap.so
> account required   pam_ldap.so
> passwordrequired   pam_ldap.so
>
> Which should be enough, really.
>
> /etc/openldap/ldap.conf is:
> host (host is fine)
> base profiletype=user,sysplex=TIMEPLEX
> binddn racfid=(racfid),profiletype=user,sysplex=TIMEPLEX
> bindpw (password in plain text)
> ldap_version 3
> pam_login_attribute racfid
> SASL_SECPROPS = none
>
> That racfid is from somebody with AUDITOR
>
> The messages I'm getting now are:
> Jun  5 14:38:20 linmast httpd: nss_ldap: could not search LDAP server
> - Insufficient access
> Jun  5 14:38:20 linmast last message repeated 15 times
> Jun  5 14:38:23 linmast httpd: pam_ldap: ldap_search_s Insufficient
> access
>
> Though in the past I also saw:
> Jun  5 14:19:43 linmast httpd: nss_ldap: could not search LDAP server
> - DSA is unwilling to perform, but that was when I had ldap in
> nsswitch.conf.
>
> With ldapsearch I have to use -x or the bind fails, so I've tried
> with and without the SASL_SECPROPS none.  Ldapsearch worked with -P 3
> so ldap_version 3 should not be breaking anything.
>
> And ldapsearch -x -D "(racfid),profiletype=user,sysplex=TIMEPLEX" -W
> -b "racfid=(someoneelse),profiletype=user,sysplex=TIMEPLEX"
> "objectclass=*" works fine.  It fails if I don't specify the -D -W
> though... Perhaps incorrectly I thought that ldapsearch would bind
> with the dn specified in /etc/openldap/ldap.conf if none was provided
> on the command line, but I get:
>
> text: R000137 'CN=ANYBODY' is not a valid RACF DN for bind.  Check
> that the syntax is correct and that it is a DN for a RACF user.
>
> All in all it's a mess.
>
> ~ Daniel
>
>
>
>
>
>
> -
>--
>
> This message is the property of Time Inc. or its affiliates. It may
> be legally privileged and/or confidential and is intended only for
> the use of the addressee(s). No addressee should forward, print,
> copy, or otherwise reproduce this message in any manner that would
> allow it to be viewed by any individual not originally listed as a
> recipient. If the reader of this message is not the intended
> recipient, you are hereby notified that any unauthorized disclosure,
> dissemination, distribution, copying or the taking of any action in
> reliance on the information herein is strictly prohibited. If you
> have received this communication in error, please immediately notify
> the sender and delete this message. Thank you.


Re: pam_ldap to LDAP server on z/OS with RACF backend

2003-06-06 Thread Joe Poole
Go to...
http://www.elink.ibmlink.ibm.com/public/applications/publications/cgibin/pbi.cgi?CTY=US
Click 'search for publications'
type 'sc24-5923' in the publication number, and hit Go.
The actual link is much too long to paste here without wrapping.

On Thursday 05 June 2003 12:02, you wrote:
> Joe,
>
> You had to know I was going to ask this...  :)
>
> Do have a pointer to an online version of this?
>
>
> Mark Post
>


Re: pam_ldap to LDAP server on z/OS with RACF backend

2003-06-06 Thread Joe Poole
Another reference is SC24-5923, Security Server LDAP Server 
Administration and Use.  All 3 are handy to keep open when trying to 
figure it out.  What one doesn't explain properly, the others do.

On Thursday 05 June 2003 11:36, you wrote:
> Daniel,
>
> You're welcome, but did it help you to the point you're working now?
>
>
> Mark Post
>
> -Original Message-
> From: Daniel Jarboe [mailto:[EMAIL PROTECTED]
> Sent: Thursday, June 05, 2003 7:14 AM
> To: [EMAIL PROTECTED]
> Subject: Re: pam_ldap to LDAP server on z/OS with RACF backend
>
>
> Thank you Mark, that was exactly what I was looking for (it is a lot
> more specific than the RACF authentication portion outlined in the
> OpenLDAP chapter of Linux on IBM zSeries and S/390: System
> Management).
>
> > Have you read the IBM Redpaper on this?  "Linux on IBM
> > zSeries and S/390:
> > Securing Linux for zSeries with a Central z/OS LDAP Server (RACF)"
> > http://www.redbooks.ibm.com/redpapers/pdfs/redp0221.pdf
>
> ~ Daniel
>
>
>
>
>
>
>
>
>
>
>
> -
>--
>
> This message is the property of Time Inc. or its affiliates. It may
> be legally privileged and/or confidential and is intended only for
> the use of the addressee(s). No addressee should forward, print,
> copy, or otherwise reproduce this message in any manner that would
> allow it to be viewed by any individual not originally listed as a
> recipient. If the reader of this message is not the intended
> recipient, you are hereby notified that any unauthorized disclosure,
> dissemination, distribution, copying or the taking of any action in
> reliance on the information herein is strictly prohibited. If you
> have received this communication in error, please immediately notify
> the sender and delete this message. Thank you.


Re: Time Sync

2003-06-03 Thread Joe Poole
Talk to your network gang, too.  Cisco router IOS at release 12.0 or 
better has NTP support.  Adjust you firewall to allow it to request the 
time from one of the Cesium clocks (Naval Observatory I think), and 
you've got the time.  We point our Linux instances at the Cisco for 
second level synching

On Friday 30 May 2003 17:47, you wrote:
> Steve ...
>
> Linux/390 will synch time with NTP
> just as effectively as Linux on a PC will.
> VM does not benefit from this  (but is not harmed by it).
> I have *not* found NTP to be a resource hog;  in fact,  it is
> designed to be kind of low impact.   (Seems to sleep a lot
> waiting for time to pass and then check again what time it is.)
>
> Hopefully you have an internal time reference.
> If not,  you'll have to find one outside of your network.
> (Probably okay,  but there's no telling how responsive they
> will be since it is a courtesy of sorts.)   You're welcome to hit
> my personal network  (at home).   Contact me off list for that addr.
> (I'm not in the NTP biz.)
>
> -- R;


Re: x3270 keymap

2003-06-03 Thread Joe Poole
Here are my notes that I made while creating the icons for my SuSE 8.2 
workstation:  


Keyboard remapping:

Apply these changes to make x3270 behave like Extra! Sessions:

Use a File Manager with root priveleges to access the 
/home/userid
directory.  Change the view to show  hidden files and use Kedit or some 
other editor to add theses statements to the end of .Xresources:

!
! Some adjustments to the keyboard of x3270:
!
x3270.keymap.custom:\
   Escape:Reset()\n\
   Return:Newline()\n\
   Control_R: Enter()\n\
   End:   EraseEOF()\n\
   Pause: Clear()\n\
   Prior: PA("1")\n\
   Next:  PA("2")\n\
   ShiftF1:   PF(13)\n\
   ShiftF2:   PF(14)\n\
   ShiftF3:   PF(15)\n\
   ShiftF4:   PF(16)\n\
   ShiftF5:   PF(17)\n\
   ShiftF6:   PF(18)\n\
   ShiftF7:   PF(19)\n\
   ShiftF8:   PF(20)\n\
   ShiftF9:   PF(21)\n\
   ShiftF10:  PF(22)\n\
   ShiftF11:  PF(23)\n\
   ShiftF12:  PF(24)\n
!
! Now tell x3270 to use these adjustments.
!
x3270.keymap:   custom
!
! then open a shell and issue: xrdb -merge .Xresources

When finished, save /home/userid/.Xresources and open a shell.  Issue 
the command  xrdb -merge .Xresources  to activate the overrides.  The 
next time you open a session with x3270, the changes will be in effect.

Different screen models:

Create an icon on the desktop and set the application path to:

'/usr/X11R6/bin/x3270' -model 3279-5 mvshost1

Change the model to 3279-4 or 3279-2 as needed, and change the host 
field to vmhost1 as needed.

On Monday 02 June 2003 13:29, you wrote:
> Sorry for the total ignorance question. Is there a simple to
> understand document on how to set up the keymap for x3270? I've
> looked a bit at what I could find, but to be blunt, I just didn't
> understand it. I'm an old 3270 user whose fingers are permenantly
> encoded as to where the "special" keys such a ENTER (right cntl),
> NewLine (Enter), and RESET (left cntl) are supposed to be. Along with
> Insert, Home, PA1 (PgUP), PA2 (PgDN), ATTN (Esc), clear (Pause). I
> really wish that there we some "keymap editor" around which would do
> this for me. OK, it is one thing I like about Windows.


Re: The Waterloo tapes

2003-03-21 Thread Joe Poole
Try http://www.cbttape.org/

On Thursday 20 March 2003 17:38, you wrote:
> I got some very useful exec's from these tapes. The one I really
> would like to find again is the 'VTAM EXEC' can anyone point me
> to an updated version of this exec.
>
> vr,
>
> P. Abruzzese


Re: Interesting perspective

2003-03-17 Thread Joe Poole
Perhaps the writer was referring to a Sysplex where multiple LPARs are 
running z/OS with a coupling facility in the middle.  Using MQ Series 
clustering, DB2 Data Sharing, VSAM RLS, VIPA, and the like, you could 
switch workload from one image to another, IPL the image you drained, 
and migrate the workload back.  It takes a lot of work, but it can be 
done.  

On Monday 17 March 2003 16:35, you wrote:
> I agree. The writer is wrong. There is plenty of code, even with z/OS
> V1.4, which cannot be 'swapped into place', on a running system.
> ..thanks
>


Re: 1000th z800 Sold

2003-03-10 Thread Joe Poole
The press release didn't make it clear that we obtained the z900 as a 
replacement for our (wheezing) 9672 G3 processor.  At order time, we 
added the IFL in anticipation of z/VM and Linux.  Writers license, I 
suppose.

On Monday 10 March 2003 08:36, you wrote:
> >> Anyone else find it a stretch of credibility that the 1000th z900
> >> and the 1000th z800 both went to Linux-only shops?
> >
> > Not quite.  We got the 1000th z900.  We run z/OS in support of 9
> > production CICS regions, thousands of batch programs, and, oh yes,
> > z/VM and Linux.
>
> http://www-916.ibm.com/press/prnews.nsf/jan/75738294A42413B185256AD10
>058E3E9
>
> "ARMONK, NY--September 24, 2001--IBM announced that it shipped its
> 1,000th IBM eServer z900 today to Boscov's, the largest family-owned
> department store company in the U.S. Boscov's plans to consolidate
> its Windows NT server farm on a single z900 running Linux."


Re: 1000th z800 Sold

2003-03-10 Thread Joe Poole
Not quite.  We got the 1000th z900.  We run z/OS in support of 9 
production CICS regions, thousands of batch programs, and, oh yes, z/VM 
and Linux.

On Saturday 08 March 2003 04:06, you wrote:

> Anyone else find it a stretch of credibility that the 1000th z900 and
> the 1000th z800 both went to Linux-only shops?


Re: IBM pricing (was "URGENT! really low performance. A related question...")

2003-02-20 Thread Joe Poole
To a degree, IBM has listened to us.  Look at the product mix that has 
appeared recently, generally at lesser cost:  File Manager, Fault 
Analyzer, CICS/PM, RMF/PM (for Linux, too), DB2 Utilities Suite, etc.  
If you get weary of the constant contract negotiations, you can 
usually find something from IBM that will work, perhaps not as full 
functioned, but works.  After our installation of the z900, 3 major 
software vendors are no longer doing business with us, their products 
having been replaced with IBM software.  A painful period to be sure, 
but the message was sent.


On Thursday 20 February 2003 16:51, you wrote:
 They should follow what Gate's did in the beginning---give it away
 and nail ya later on Maint./upgrades.
 But then again how about IBM doing something really strange ...
 listen to customers getting nailed on all the pricing by third part
 vendors as well as IBM because it is a MAINFRAME ...guess it is
 true--IBM is trying to Kill MVS/S-390/z-OS/VM/VSE--depends what
 flavor you are. If you run it on a zBOX better open up the wallet



Re: Linux userid administration (use of Linux-PAM, with LDAP, with RACF)

2003-02-14 Thread Joe Poole
Steve;

I have the z/OS LDAP server running, with both TDBM (DB2) and SDBM 
(RACF) databases gen'd.  It looks promising, in that I'm using batch 
(IKJEFT01) to experiment with different RACF and DB2 calls.  Other 
priorities have not allowed us the opportunity to test with z/Linux, 
but the Red Book makes it look easy - "Securing Linux for zSeries 
with a Central z/OS (RACF) LDAP Server.  Also, you'll need SC24-5923 
for Administration and Use.  Follow the procedures in both books 
simultaneously, since they complement one another very well.  Maybe I 
can get back to it once the auditors leave.  (sigh)

JP

On Friday 14 February 2003 13:13, you wrote:
 I'm interested in opinions and experience of others to provide
 centralized login, passwd, and su  authorizations using Linux-PAM
 and LDAP and RACF or some other central database.That is,  with
 mulitple Linux servers, I want to use a central database (RACF,
 LDAP, whatever) to store/maintain login and password data.

 Steve  Collins  IGS  [EMAIL PROTECTED]



Re: URGENT! really low performance.

2003-02-13 Thread Joe Poole
Thanks, Dan.  Memory fades..

JP

On Thursday 13 February 2003 16:59, you wrote:
 In the (relatively) dark ages of VM/HPO and the 4381 MP models, they
 called this "Active Wait".  I'm sure somebody got a nice oxymoron
 award for that one... ;)

 -dan.

 On Thu, 13 Feb 2003, Joe Poole wrote:
 > On Thursday 13 February 2003 16:09, Alex wrote:
 >
 >  -the hmc indicates that the ifl is at 99% utilization.
 >
 > Our HMC on the z900 always shows 99% for the IFL, even if it's not
 > doing anything substantial.  Running a CPU hot all the time was an
 > old performance enhancing trick I remember from the 4381 days.  I
 > can't recall why, though.  The RTM numbers give a better reading.



Re: URGENT! really low performance.

2003-02-13 Thread Joe Poole
On Thursday 13 February 2003 16:09, Alex wrote:

 -the hmc indicates that the ifl is at 99% utilization.

Our HMC on the z900 always shows 99% for the IFL, even if it's not 
doing anything substantial.  Running a CPU hot all the time was an 
old performance enhancing trick I remember from the 4381 days.  I 
can't recall why, though.  The RTM numbers give a better reading.  



Re: Power of Open Source - Microsoft Warns SEC of Open-Source Threat

2003-02-05 Thread Joe Poole
I was leaning toward a reference to tailored SAP, Peoplesoft, and the 
millions of lines of COBOL code that define our business rules, and 
that we wrote ourselves over the past 30 years.  (Much of which is 
probably running every night!).  Open source software can't replace 
that, but still has a home performing many other functions we've all 
taken on in recent years.

On Wednesday 05 February 2003 10:51, you wrote:
 Maybe they think that if they use open source software as part of
 their proprietary software that they would have to make their
 software open. AFAIK, it doesn't matter unless you distribute your
 software with the OSS stuff embedded (and thus no longer open). If
 I'm wrong... straighten me out...

 -jcf
 - Original Message -
 From: "Rick Troth" <[EMAIL PROTECTED]>
 To: <[EMAIL PROTECTED]>
 Sent: Tuesday, February 04, 2003 6:27 PM
 Subject: Re: Power of Open Source - Microsoft Warns SEC of
 Open-Source Threat

 > > "The most oft-cited reason given by larger companies
 > >  with 2,000+ employees for not installing Linux is that
 > >  the proprietary nature of the software their companies depends
 > > upon precludes them from open-source development."
 > >
 > > I don't understand the foregoing.
 >
 > I don't either.
 >
 > -- RMT



Re: Microsoft gets an 'F'

2003-02-03 Thread Joe Poole
On Saturday 01 February 2003 11:41, Phil Payne wrote:

 Linux looks like following down the same road.  The question that
 occurs to me is - is free access to the source of an operating
 system actually a prerequisite for this?

I think so, Phil.  Primarily due to the fact that you can't run 
anything on my MVS system that I didn't help you run.  Because source 
has to be compiled into a library prior to execution is a hugh 
security boost, as is RACF and the corresponding HFS permissions of 
the *nix world.  



Re: SuSE Linux - TOC

2003-01-28 Thread Joe Poole
On Monday 27 January 2003 17:31, Scott Chapman wrote:

 Performance needs to be tracked from VM's perspective, and maybe
 from Linux's.  Therefore some sort of VM monitor like RTM (not
 necessarily a recommendation!) or Velocity Software's product is
 probably required.  I believe Candle also has some sort of VM/Linux
 monitoring package.  For our pilot project we didn't look beyond
 VM's own monitor and top in Linux, but I believe we would trial a
 3rd party solution if we went forward.

There is a beta monitor from IBM, RMF PM that monitors z/Linux 
instances.   Java based, and displays on Windoze or Linux 
workstations:

http://www-1.ibm.com/servers/eserver/zseries/zos/rmf/rmfhtmls/rmftools.htm#pmlin

The price is right, for now.  If you have RTM, you can do something 
like this in a window to view your VM performance (works well until 
you get a lot of instances, where a more robust monitor would be 
needed):

/* REXX EXEC TO LOOP THE VMC COMMAND */
DO FOREVER
  VMC VMRTM DISPLAY USER
  SLEEP 15 SEC
  CLRSCRN
  VMC VMRTM DISPLAY
  SLEEP 15 SEC
  CLRSCRN
  VMC VMRTM DISPLAY LOG
  SLEEP 15 SEC
  CLRSCRN
END



Re: Z/VM Backups and Restores

2003-01-27 Thread Joe Poole
Also, check our OFFLINDR - the price is right, and it works.

http://www.clueful.co.uk/mbeattie/s390/offlindr.jcl

On Monday 27 January 2003 09:51, you wrote:
 I need to know what's used a very good backup/restore application in
 z/VM. I need to know what I can use without having to purchase
 anything.  I've read something about DDR, but I want some input on
 whether that is the best way to go.

 Lemarr Ketchens
 Ryerson Tull, Inc.


 --- Legal Disclaimer: The information contained in this
 communication may be confidential, is intended only for the use of
 the recipient named above, and may be legally privileged.  If the
 reader of this message is not the intended recipient, you are hereby
 notified that any dissemination, distribution, or copying of this
 communication, or any of its contents, is strictly prohibited.  If
 you have received this communication in error, please re-send this
 communication to the sender and delete the original message and any
 copy of it from your computer system. Thank you. ---



Re: DB2

2003-01-24 Thread Joe Poole
Line us.  We use UDB EE in Linux - works just fine and response time 
is quite good.  DB2 Connect in a gateway instance can retrieve info 
from DB2 on z/OS.  The performance is so close between the 2 that you 
can decide where to build your tables based on which side of your 
zBox has the capacity to spare.  If you're watching your WLC budget, 
UDB EE might just be the ticket.  As with all things Linux, "it 
depends".  (And Linuxworld was great!)

On Thursday 23 January 2003 16:10, you wrote:
 Bruce,

 What exactly are you looking for?  A number of people on the mailing
 list have reported using DB2 Connect and the like.

 Mark Post

 -Original Message-
 From: Bruce Fry [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, January 23, 2003 1:43 PM
 To: [EMAIL PROTECTED]
 Subject: DB2


 Does anyone have any experience or information concerning DB2
 executing in a Linux environment?



Re: NTP, was: 2074 and the HMC

2003-01-15 Thread Joe Poole
Another good solution is to have one of your routers (we use a Cisco 
7507) configured as the NTP client of the cesium clock, and as the 
server to the rest of the network.  All of our Linux instances go to 
the router to set their clocks.  Considering the 4:00 PM stampede, I 
suppose some of the IS staff use it on their workstations, too.


On Wednesday 15 January 2003 14:02, you wrote:
 Stephen,

 You can run NTP on your Linux/390 systems.  I do on mine.  The only
 caveat I would have is that if you have VM and wind up running
 hundreds of Linux/390 guests, you don't want them all trying to
 contact an external timing source. Some folks have set up one guest
 as the local timekeeper, and the others guests talk to it.

 Mark Post



Re: 2074 and the HMC

2003-01-15 Thread Joe Poole
If I remember correctly, the z800 has no parallel channels.  That 
rules out native parallel 3274 or 3174 connection.  However, the used 
equipment market has 3174s with internal Escon, although pricey in 
the $4,500 range.  Parallel to escon converters are available, which 
makes a regular 3174L parallel equipped usable for much less money 
($<500).  Used equipment dealers could set you up quickly.  Try a 
google search with 'used 3174 controller'.  The 2074, if your budget 
allows, is the best bet since a single unit can handle all the LPARs 
you may define, with a console in each.  We use an old 3274 parallel 
attached controller to our z900.

On Wednesday 15 January 2003 09:48, you wrote:
 On Wednesday, 01/15/2003 at 03:55 EST, "[EMAIL PROTECTED]"

 <[EMAIL PROTECTED]> wrote:
 > Can anyone help me with this issue?
 >
 > I am responsible for getting a z/800 up and running with z/VM and
 > Linux.  I am still caught up on the hardware stage though.  I was
 > told by people that I absolutely NEED a 2074 (or a 3174 and a
 > console) controller to install VM.  I've heard several places that
 > the HMC and SE will not allow me to interact with the z/VM
 > installation program.  Now, as we are getting closer to bringing
 > our z/800 to life, I am hearing from someone that we CAN use the
 > HMC to interact with the z/VM installation program and we DO NOT
 > need a 2074 (or 3174) at all.  Can anyone shed some light on this
 > mystery?  And if possible, can you point me in the direction of
 > the appropriate Redbook and/or official IBM documentation? 
 > Thanks.

 A 3270 is required for the installation and configuration of z/VM. 
 Once the system is installed and configured (including VM TCP/IP),
 then the system console on the HMC is sufficient to OPERATE the
 system.  Telnet can be used to access the system so that you can
 perform additional system configuration.  The requirement to have a
 3270 for TCP/IP configuration is listed in the General Information
 Manual ("TCP/IP for z/VM Hardware Requirements", p. 15 in z/VM 4.2
 version).

 The addition of an ifconfig command in z/VM 4.3 can reduce the need
 for a 3270 even more, but permanent changes to your CP or TCP/IP
 configuration will require a 3270 so that you can edit files (unless
 you are big on line-mode editing or are a CMS Pipeline expert).  If
 you are using DirMaint, it is much easier with the menus, requiring
 a 3270 (also mentioned in the General Information Manual).

 On a personal note, I have never understood the aversion to having
 3270 access for all LPARs on all CECs.  Given the value you receive,
  the IBM 2074, or similar non-IBM products, are worth the relatively
 small expense. In an emergency, local 3270 access will be your best
 friend.  I would not want to try to wade through a TCP/IP console
 log looking at traces using the HMC...

 Alan Altmark
 Sr. Software Engineer
 IBM z/VM Development



Re: I got unsubscribed...

2003-01-14 Thread Joe Poole
Jay,

It's possible that you are the innocent victim of one of those worms 
loose in the world these days (Klez, Sobig, Naith or Lirva).  They 
randomly pick a message, attach you as the "to", and some other 
random name as the "from", and confuse the heck out of everyone.  I 
didn't receive those you mentioned.  

On Tuesday 14 January 2003 09:02, you wrote:
 ...because my mailer rejects any messages with a character set of
 BIG5, EUC-KR, or KS_C_5601-1987. I got three of those in the past
 few days.

 Those character sets are for Chinese and Korean, languages I (and, I
 suspect most folks on this list) can't even display correctly, much
 less read. (I read mail on several different systems, not all of
 them Linux, so a Linux solution to the display problem won't help.)
 I don't believe people should be sending mail to the list in those
 character sets, and I do not believe the list should be passing them
 through to users. Is there a Listserv option to disable those
 messages?



Re: Anyone running DB2 connect on linux - I just got asked where it keeps the log

2003-01-10 Thread Joe Poole
I checked with our DBAs and they said that the diagnosis log is about 
all there is.  The Peoplesoft second tier server (non-Linux) has an 
access log built as part of the application, which is probably what 
the db2 connect folks were counting on.


On Friday 10 January 2003 10:25, you wrote:
 Someone in development is putzing with Db2 connect enterprise
 edition under Linux. Does anyone know offhand where the access log
 for it would be? this isn't something I regularly support so I'm at
 a loss to answer them without a query to IBM - and I'm not sure
 we're covered under service contract for db2 EE queries



Re: Linux on 390

2003-01-06 Thread Joe Poole
I'll add to Mark's list Apache, UDB, Tivoli Netview...

On Monday 06 January 2003 09:54, you wrote:
 We use Linux in both test and production environment.
 We have several test websites using Tomcat, testing backups using
 amanda, We have production Linux guests running, DNS, Radius Server,
 FTP, NFS.



 Mark D Pace
 Senior Systems Engineer
 Mainline Information Systems
 1700 Summit Lake Drive
 Tallahassee, FL. 32317
 [EMAIL PROTECTED]
 Office: 850.219.5184
 Fax: 850.219.5050
 http://www.mainline.com



 Paul Claus
   cc:
 Sent by: Linux on   Subject: Linux on
 390 390 Port
 <[EMAIL PROTECTED]
 IST.EDU>


 01/06/2003 09:28
 AM
 Please respond to
 Linux on 390 Port






 Happy New Year everyone

 My management has asked me to explore the possibilities of running
 Linux on the mainframe, I was wondering how the list members are
 using Linux on the mainframe:

  Are you running production under Linux. If so what type of
 applications are being serviced.
  or
  Testing Linux to see if it can handle a production workload.

 Thank you in advance for your help in this matter

 Paul Claus
 Lead Systems Programmer
 [EMAIL PROTECTED]
 (630) 773-5085



Re: FYI Network printer problem - WAS - HOWTO define a network printer to Linux S/390

2002-12-19 Thread Joe Poole
PSF on z/OS has had trouble connecting to some Lexmark printers 
without the port 9100 specification in the PRINTDEV specs.  I 
recently had the same problem with an IBM Infoprint 1120, which was 
solved with the port statement as well.  BTW, we use Infopriint 
Server on z/OS to spool from z/Linux (and desktop, too) into the JES 
queue where the high speed printers can do the work.

On Thursday 19 December 2002 06:04, you wrote:
 Hi,

 Just for your information, we have 12000 (that´s it, twelve
 thousend) printers.
 They´re from Lexmark, IBM and Xerox. All of them have a problem with
 the LPD internal
 implementation. At some time the spool can not talk to the printer
 anymore because it does not receive the ACK for the SYN it sends (we
 can reproduce the problem
 using OS/2 and Linux).
 The solution, so far, is to print using the High Performance
 port (9100 at the Lexmark -
 I can´t remember the port for the other printers). To do that I
 recomend you use CUPS to do the
 job.

 Regards. Penna



Re: LINUX & Security

2002-12-10 Thread Joe Poole
Will do.  Also, for those with access to the presentations from the 
October Tech Conference in Miami (VM/VSE/zOS/Linux) see A02 and A08 
by Jon Furminger of IBM.  Good overviews.  

On Tuesday 10 December 2002 15:37, you wrote:
 Keep us informed on this, will you Joe?

 "Christmas is a funny season.  What other time of the year do you
 sit in front of a dead tree and eat candy out of your socks?" Gordon
 Wolfe, Ph.D. (425)865-5940
 VM Technical Services, The Boeing Company

 > --
 > From:     Joe Poole
 > Reply To: Linux on 390 Port
 > Sent: Tuesday, December 10, 2002 11:31 AM
 > To:   [EMAIL PROTECTED]
 > Subject:  Re: LINUX & Security
 >
 > Although I'm not deep enough into the process to be dangerous, you
 > might want to look at the z/OS LDAP server.  Check the Redbook
 > "Securing Linux for zSeries with a Central z/OS (RACF) LDAP
 > Server" and the two publications SC24-5923-03 and SC24-5924-02
 > dealing with administration and Client programming.  It might
 > answer some of your questions.  We're looking at it as a way to
 > perform the old RACHECK from a client application to authenticate
 > a user's connection to a specific RACF group.
 >
 > On Tuesday 10 December 2002 13:26, you wrote:
 >  I'd like to add a follow-on question to this
 >
 >  Has anone gotten Linux to update user ID's/Passwords from an NT
 >  central domain ? Is it possible to synchronize those, or failing
 >  that has anyone gotten Linux security to refresh from RACF or
 > ACF2 secuirity databases, or even authenticate logon using LDAP
 > into RACF or ACF2 instead of manually trying to synchronize Linux
 > user lists/passwords/groups/ etc
 >
 >  |-+>
 >  |
 >  | |   Joseph Sumi  |
 >  | |   <[EMAIL PROTECTED]|
 >  | |   v>   |
 >  | |   Sent by: Linux on|
 >  | |   390 Port |
 >  | |   <[EMAIL PROTECTED]|
 >  | |   IST.EDU> |
 >  | |
 >  | |
 >  | |   12/10/2002 09:42 |
 >  | |   AM   |
 >  | |   Please respond to|
 >  | |   Linux on 390 Port|
 >  |
 >  |-+>
 >  |
 >>--
 >>---
 >> -
 >>|
 >>
 >|   To:   [EMAIL PROTECTED]
 >|
 >| cc:
 >|   | 
Subject:
 >|
 >|  LINUX & Security
 >|
 >>--
 >>---
 >> -
 >>|
 >
 >  Hello, we have just started to research SUSE Linux under z/VM,
 > and I've been asked these questions:
 >
 >  - Does SUSE Linux issue any SAF (RACF) calls for security in the
 >  z/VM environment ? If not, how is security handled ?
 >
 >  - Are there any types of "SMF" records cut to record access or
 >  violations to resources in a Linux z/VM environment ?
 >
 >  - Does anyone have a link to more specific security / Linux
 >  information ?
 >
 >  Thanks.



Re: LINUX & Security

2002-12-10 Thread Joe Poole
Although I'm not deep enough into the process to be dangerous, you 
might want to look at the z/OS LDAP server.  Check the Redbook 
"Securing Linux for zSeries with a Central z/OS (RACF) LDAP Server" 
and the two publications SC24-5923-03 and SC24-5924-02 dealing with 
administration and Client programming.  It might answer some of your 
questions.  We're looking at it as a way to perform the old RACHECK 
from a client application to authenticate a user's connection to a 
specific RACF group.

On Tuesday 10 December 2002 13:26, you wrote:
 I'd like to add a follow-on question to this

 Has anone gotten Linux to update user ID's/Passwords from an NT
 central domain ? Is it possible to synchronize those, or failing
 that has anyone gotten Linux security to refresh from RACF or ACF2
 secuirity databases, or even authenticate logon using LDAP into RACF
 or ACF2 instead of manually trying to synchronize Linux user
 lists/passwords/groups/ etc

 |-+>
 |
 | |   Joseph Sumi  |
 | |   <[EMAIL PROTECTED]|
 | |   v>   |
 | |   Sent by: Linux on|
 | |   390 Port |
 | |   <[EMAIL PROTECTED]|
 | |   IST.EDU> |
 | |
 | |
 | |   12/10/2002 09:42 |
 | |   AM   |
 | |   Please respond to|
 | |   Linux on 390 Port|
 |
 |-+>
 |
   >-
   >-|
   >
   |   To:   [EMAIL PROTECTED] 
   | |
   | cc: 
   |   | Subject:
   |  LINUX & Security   
   |  |
   |
   >-
   >-|

 Hello, we have just started to research SUSE Linux under z/VM, and
 I've been asked these questions:

 - Does SUSE Linux issue any SAF (RACF) calls for security in the
 z/VM environment ? If not, how is security handled ?

 - Are there any types of "SMF" records cut to record access or
 violations to resources in a Linux z/VM environment ?

 - Does anyone have a link to more specific security / Linux
 information ?

 Thanks.



  1   2   >