Isolating one Linux guest in the DMZ

2008-08-20 Thread Fred Schmidt
Hi fellow listers, Our z/VM environment currently sits behind a firewall. We would like to allow one Linux guest to act as an Internet server. We do not however want to expose the other Linux guests or the z/VM environment itself to the outside world. We are using VSWITCH. Is this possible? Wh

Re: DDR'ing 3390 DASD To Remote Location

2008-08-20 Thread Jim Bohnsack
I'm surprised that your posting about being able to backup/restore DCSS/NSS files to disk was not jumped on by a lot of people.  I'd love to have that.  Does it/can it restore the original creation DCSS/NSS date?  The date problem and the fact that IBM's DCSSBKUP only works with DCSS's, not NSS

Re: IPGATE question

2008-08-20 Thread Thomas Kern
Your disappointment in IPGATE's hangups should be proportional to how often your AVS server hangs up. IPGATE hangs maybe 4 times a year. If it were supported we could call it in and sit with someone on the phone to debug it, but it is a freebie and 4 times a year isn't that hard on our operations.

Re: HiperSockets Question

2008-08-20 Thread Martin, Terry R. (CMS/CTR) (CTR)
Hi Alan, Not to belabor the subject I just want to make sure I understand. Here is what my issue was. I processed many SQL queries of DB2 tables via DB2 connect running on a z/OS LPAR down to a Linux server running on the same machine but a different z/VM LPAR without any issues. Until, we ran a

Re: HiperSockets Question

2008-08-20 Thread Thomas Kern
He was El Zorro. And Quickdraw McGraw was El Kabong. The 'El' does make a difference. /Tom Kern Alan Altmark wrote: > On Wednesday, 08/20/2008 at 07:51 EDT, Rich Smrcina <[EMAIL PROTECTED]> > wrote: >> Isn't that Sir Alan da Weasel? :) > > Please. Was Zorro, "Don Zorro"? I think not. > >

Re: IPGATE question

2008-08-20 Thread O'Brien, Dennis L
>The three SFS filepools that I share (2 on CP system, 1 on IFL system) are >all GLOBAL resources. >I do find that once in a while IPGATE gets "confused" and non-responsive and >I have to recycle the SVM on both sides of the link. >Tom Kern I have the same problem with AVS. Once in awhile, a

AUTO: Laurent Dupin is out of the office on business trip (returning 09/29/2008)

2008-08-20 Thread Laurent Dupin
I am out of the office until 09/29/2008. I will respond to your message when I return. Note: This is an automated response to your message "Shutdown wont complete.. What next.." sent on 18/8/08 11:08:24. This is the only notification you will receive while this person is away.

Re: HiperSockets Question

2008-08-20 Thread Alan Altmark
On Wednesday, 08/20/2008 at 07:51 EDT, Rich Smrcina <[EMAIL PROTECTED]> wrote: > Isn't that Sir Alan da Weasel? :) Please. Was Zorro, "Don Zorro"? I think not. Alan da Weasel

Re: HiperSockets Question

2008-08-20 Thread Rich Smrcina
Isn't that Sir Alan da Weasel? :) Alan Altmark wrote: Alan da Weasel -- Rich Smrcina VM Assist, Inc. Phone: 414-491-6001 Ans Service: 360-715-2467 rich.smrcina at vmassist.com http://www.linkedin.com/in/richsmrcina Catch the WAVV! http://www.wavv.org WAVV 2009 - Orlando, FL - May 15-19,

Re: HiperSockets Question

2008-08-20 Thread Nick Laflamme
At 07:09 PM 8/20/2008 -0400, Alan Altmark wrote: I *knew* I'd regret not diving into nitty gritty details. I KNEW IT. Mr. Smartypants. Couldn't let it go, could you? We were in the middle of a *point*. DTCMPY001S Nobody ever expects the Spanish Inquisition.

Re: HiperSockets Question

2008-08-20 Thread Alan Altmark
On Wednesday, 08/20/2008 at 04:44 EDT, Miguel Delapaz/Endicott/[EMAIL PROTECTED] wrote: > If you wanted to get nitpicky, it would actually need 3 fragments to account > for the extra IP header(s). :-) I *knew* I'd regret not diving into nitty gritty details. I KNEW IT. Mr. Smartypants. Co

Re: HiperSockets Question

2008-08-20 Thread Miguel Delapaz
If you wanted to get nitpicky, it would actually need 3 fragments to account for the extra IP header(s). :-) Regards, Miguel Delapaz z/VM TCP/IP Development The IBM z/VM Operating System wrote on 08/20/2008 01:38:48 PM: > > Yes and no. :-) > > It won't be truncated, but it will be fragmented

Re: HiperSockets Question

2008-08-20 Thread Miguel Delapaz
Packet fragmentation is done in the TCP/IP stack. The stack will chunk the packet up into smaller packets before sending it over the HiperSockets device. Regards, Miguel Delapaz z/VM TCP/IP Development The IBM z/VM Operating System wrote on 08/20/2008 12:40:47 PM: > [image removed] > > HiperS

Re: HiperSockets Question

2008-08-20 Thread Alan Altmark
On Wednesday, 08/20/2008 at 03:43 EDT, "Martin, Terry R. (CMS/CTR) (CTR)" <[EMAIL PROTECTED]> wrote: > If I am using HiperSockets and my MTU size is 1500 and a pass a packet size of > 2000 will the data in the packet be truncated since it is bigger than 1500? I > thought I read that since Hip

Re: Sol-390 mailing list created to discuss OpenSolaris for System z

2008-08-20 Thread Jack Woehr
Jon Brock wrote: I thought that was going to be the Marketing arm of the Sirius Cybernetics Corporation. I thought of them the other day when an elevator door closed vewy, vewy, swowy, with a contented sigh. -- Jack J. Woehr# "Self-delusion is http://www.well.com/~jax # half the ba

Re: Sol-390 mailing list created to discuss OpenSolaris for System z

2008-08-20 Thread Jon Brock
I thought that was going to be the Marketing arm of the Sirius Cybernetics Corporation. Too bloody many lawyers. First against the wall when the revolution comes. Jon

HiperSockets Question

2008-08-20 Thread Martin, Terry R. (CMS/CTR) (CTR)
Hi If I am using HiperSockets and my MTU size is 1500 and a pass a packet size of 2000 will the data in the packet be truncated since it is bigger than 1500? I thought I read that since HiperSockets is memory transfers that the MTU can not be split like it would over a normal transmission pipe

Re: DDR'ing 3390 DASD To Remote Location

2008-08-20 Thread Michael Coffin
I'm not in front of a VM terminal, so forgive me is this is documented - but is secure FTP supported? I don't recall seeing a parm for it (doesn't mean it's not there and I didn't see it). :) -Mike -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On B

Re: IPGATE question

2008-08-20 Thread Marcy Cortes
The brilliant Kris wrote: >Do you have an ESM? VMSECURE - I needed surrogate authority for IPGATE Once added - voila! Thank you thank you! (and Santa can still bring me a shiny fast secure IPGATE for xmas). Marcy "This message may contain confidential and/or privileged information. If

Re: IPGATE question

2008-08-20 Thread Kris Buelens
>From this console info I'd say that the problem is on de system with the receiver IPGATE. I don't remember the details, but somehow that IPGATE must present itself to LNXSFS as MARCY when the initial APPC CONNECT is made. I see that I gave IPGATE permission to the VMBATCH RACF profiles of all us

Re: DDR'ing 3390 DASD To Remote Location

2008-08-20 Thread Bruce Hayden
Since the DRPC package has now made the ftpget/ftpput stages available and documented them, I added an ftp option to my PIPEDDR package so that disks can be dumped and restored to and from and ftp server. You can find it at http://www.vm.ibm.com/download/packages/descript.cgi?pipeddr via the vmarc

Re: Dirmaint Mdisk Allocation

2008-08-20 Thread Ivica Brodaric
Maybe you have them as 3390-03 in REGIONS section and 3390-3 (no leading zero) in DEFAULTS? I think they must match exactly or it will take the size of 3390 as defined in DEFAULTS. Try changing the default size for 3390 to 3339. Ivica

Re: IPGATE question

2008-08-20 Thread Schuh, Richard
I presume that those pipes are plastic instead of lead. Regards, Richard Schuh > -Original Message- > From: The IBM z/VM Operating System > [mailto:[EMAIL PROTECTED] On Behalf Of Dave Jones > Sent: Wednesday, August 20, 2008 11:18 AM > To: IBMVM@LISTSERV.UARK.EDU > Subject: Re: IP

Re: IPGATE question

2008-08-20 Thread Marcy Cortes
Dave, trying to tick me off ;), wrote: >Of note, re: IPGATE. Since it's first release back in 1998 as part of the >MTREXX package, >IPAGTE development has continued on inside IBM. The current version is much >faster, written >to use CMS Pipelines more, and can encrypt the IP data stream. Just

Re: IPGATE question

2008-08-20 Thread Thomas Kern
And when is the updated, secure version going to be released (posted on t he IBM Downloads webpage)? /Tom Kern On Wed, 20 Aug 2008 13:18:01 -0500, Dave Jones <[EMAIL PROTECTED]> wrote: >Of note, re: IPGATE. Since it's first release back in 1998 as part of th e MTREXX package, >IPAGTE developmen

Re: IPGATE question

2008-08-20 Thread Rob van der Heij
On Wed, Aug 20, 2008 at 8:18 PM, Dave Jones <[EMAIL PROTECTED]> wrote: > Of note, re: IPGATE. Since it's first release back in 1998 as part of the > MTREXX package, IPAGTE development has continued on inside IBM. The current > version is much faster, written to use CMS Pipelines more, and can encr

Re: IPGATE question

2008-08-20 Thread Dave Jones
Of note, re: IPGATE. Since it's first release back in 1998 as part of the MTREXX package, IPAGTE development has continued on inside IBM. The current version is much faster, written to use CMS Pipelines more, and can encrypt the IP data stream. Just FYI. Kris Buelens wrote: Did you have a look

Re: IPGATE question

2008-08-20 Thread Marcy Cortes
The consoles look all happy - the sender (client) says: IPGATEY13 started. IPGATEY13 Request from MARCY for LNXSFS at 4567 10.103.28.161 IPGATEY13 Thread terminating ... Read rc = 0 (0 ) IPGATEY13 ended.

Re: Sol-390 mailing list created to discuss OpenSolaris for System z

2008-08-20 Thread David Boyes
> Dave Jones say: > > In the interim, everybody order and install VM64466 for your 5.3 z/VM > > systems. > The PTF to order that goes with this APAR is: UM32414 > And note that it is for z/VM 5.3 only. Thanks, Dave. I could remember the APAR #, but not the PTF number. Too bloody many lawyers. Fi

Re: IPGATE question

2008-08-20 Thread Kris Buelens
Did you have a look at the consoles of the two involved IPGATE users? As for Query RESOURCE: on the remote systems, IPGATE must be the owning userid of the filepool. That's the trick: IPGATE tells CP it is the owner of the filepool resource. Hence if a connect request comes in, CP sends it to IP

Re: IPGATE question

2008-08-20 Thread Thomas Kern
The three SFS filepools that I share (2 on CP system, 1 on IFL system) ar e all GLOBAL resources. I do find that once in a while IPGATE gets "confused" and non-responsive and I have to recycle the SVM on both sides of the link. /Tom Kern /301-903-2211 On Wed, 20 Aug 2008 12:10:16 -0500, Marcy

Re: Sol-390 mailing list created to discuss OpenSolaris for System z

2008-08-20 Thread Dave Jones
David Boyes wrote: [snip] In the interim, everybody order and install VM64466 for your 5.3 z/VM systems. That's a necessary enabler to be able to use OpenSolaris. It'll help get the Powers That Be Holding Up The Party the message that people want this to happen. The PTF to order that

Re: IPGATE question

2008-08-20 Thread Marcy Cortes
Tried it both ways. The other system that works looks like this: Resource: POOL1 Type: Local Owning Userid: IPGATE acc pool1:marcy. c Ready; T=0.01/0.01 10:05:04 q disk c LABEL VDEV M STAT CYL TYPE BLKSZ FILES BLKS USED-(%) BLKS LEFT BLK TOTAL - DIR C R/W -- 40

Re: IPGATE question

2008-08-20 Thread Imler, Steven J
I think you need to make the LNXSFS FilePool a *global* resource ... JR (Steven) Imler CA Senior Sustaining Engineer Tel: +1 703 708 3479 [EMAIL PROTECTED] > -Original Message- > From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On > Behalf Of Marcy Cortes > Sent: Wednesda

Re: IPGATE question

2008-08-20 Thread Marcy Cortes
Hmm. Well, I see it is picking up the correct TCPIPUSERID by peering into IPGATE1 MTREXX. It seems to accept the connection: flag" IPGATEI06 started. (3 2 AF_INET 3276 10.93.27.253) IPGATEI06 User MARCY from 10.93.27.253 has been accepted for LNXSFS IPGATEI06 ended.

Sol-390 mailing list created to discuss OpenSolaris for System z

2008-08-20 Thread David Boyes
To avoid dragging these two lists off-topic constantly, by grace of the fine people at Marist College, a mailing list called sol-390 has been created to discuss the forthcoming availability of the OpenSolaris port for System z. We're very, very close, and if you're interested in the topic, I'd stro

Re: changing passwords for BLDSEG, BLDCMS, BLD*

2008-08-20 Thread Jack Woehr
Wayne Driscoll wrote: IBM's response will probably be (a valid response IMHO) "if you want security, install an ESM." Or a good (OpenBSD!?) firewall. Especially now that there is going to be on SourceForge an open source class lib in Java to access VSMAPI. Cool, and the output is correct,

Re: DDR'ing 3390 DASD To Remote Location

2008-08-20 Thread Dave Jones
Hi, Jiri. This is way cool, many thanks for doing the work and sharing it. I think it's going to make life a bit easier for some folks. Some suggestions: 1) There seems to be an undocumented option in at least the FTPGET stage -- -DVDEOF. Of course, this might have meaning only in the case o

Re: changing passwords for BLDSEG, BLDCMS, BLD*

2008-08-20 Thread Wayne Driscoll
IBM's response will probably be (a valid response IMHO) "if you want security, install an ESM." Wayne Driscoll Product Developer NOTE: All opinions are strictly my own. -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Thomas Kern Sent: Wedn

Re: changing passwords for BLDSEG, BLDCMS, BLD*

2008-08-20 Thread Thomas Kern
IBM should have shipped a lot of things set in a more secure mode. /Tom Kern On Wed, 20 Aug 2008 17:52:11 +0200, Rob van der Heij <[EMAIL PROTECTED]> wrote: >On Wed, Aug 20, 2008 at 5:47 PM, Thomas Kern <[EMAIL PROTECTED]> wro te: > >> I have those userids set to AUTOONLY. > >And IBM should

Re: changing passwords for BLDSEG, BLDCMS, BLD*

2008-08-20 Thread Rob van der Heij
On Wed, Aug 20, 2008 at 5:47 PM, Thomas Kern <[EMAIL PROTECTED]> wrote: > I have those userids set to AUTOONLY. And IBM should have shipped it like that... Rob

Re: IPGATE question

2008-08-20 Thread Thomas Kern
I have a second stack to use the HyperSockets between a CP and an IFL systems. The IPGATE servers have a TCPIP DATA on their A-disk which defin es the TCPIPUSERID. /Tom Kern /301-903-2211 On Wed, 20 Aug 2008 10:39:53 -0500, Marcy Cortes <[EMAIL PROTECTED]> wrote: >Is anyone using IPGATE with

Re: changing passwords for BLDSEG, BLDCMS, BLD*

2008-08-20 Thread Thomas Kern
I have those userids set to AUTOONLY. /Tom Kern On Wed, 20 Aug 2008 10:56:07 -0400, Gentry, Stephen <[EMAIL PROTECTED]> wrote: >Would I cause any problems if I were to change the passwords for any VM >user ids that begin with BLD? (Auditors, 'nough said). When doing >certain maintenance functi

Re: changing passwords for BLDSEG, BLDCMS, BLD*

2008-08-20 Thread Ed Zell
> Would I cause any problems if I were to change the passwords > for any VM user ids that begin with BLD? (Auditors, 'nough > said). When doing certain maintenance functions, VM will > sometimes autolog some of these BLD* userids. I didn't if > there was some process where VM actually did a logon,

IPGATE question

2008-08-20 Thread Marcy Cortes
Is anyone using IPGATE with a TCPIP stack who has a name other than TCPIP? I have one system working and another which doesn't and that's the only difference I can find. Marcy "This message may contain confidential and/or privileged information. If you are not the addressee or authorized to

changing passwords for BLDSEG, BLDCMS, BLD*

2008-08-20 Thread Gentry, Stephen
Would I cause any problems if I were to change the passwords for any VM user ids that begin with BLD? (Auditors, 'nough said). When doing certain maintenance functions, VM will sometimes autolog some of these BLD* userids. I didn't if there was some process where VM actually did a logon, during ser

Re: SECUSER

2008-08-20 Thread Schuh, Richard
With that bit of knowledge, OBSERVER is new enough that I didn't even remember it was available, I can have my cake and eat it, too. Observer plus Class C SEND gives me the equivalent of SECUSER without the hassle. Regards, Richard Schuh > -Original Message- > From: The IBM z/VM Op

Re: SECUSER

2008-08-20 Thread Mike Harding
We run it and OBSERVER works quite well, thank you very much, without interfering with *MSG. But while we're (obliquely) discussing OBSERVER, ISTR that early on we were told we could have multiple observers of a userid, but that hasn't appeared to be the case. Also I thought secuser and observ

Re: SECUSER

2008-08-20 Thread Schuh, Richard
You do indeed do a pretty good job. It is just that it sometimes helps to have a titled individual press the argument. Regards, Richard Schuh > -Original Message- > From: The IBM z/VM Operating System > [mailto:[EMAIL PROTECTED] On Behalf Of Alan Altmark > Sent: Tuesday, August 19,

Re: SECUSER

2008-08-20 Thread Tracy Dean
On Wed, 20 Aug 2008 01:14:16 -0400, Alan Altmark <[EMAIL PROTECTED] > wrote: >On Wednesday, 08/20/2008 at 12:50 EDT, Rob van der Heij ><[EMAIL PROTECTED]> wrote: >> On Tue, Aug 19, 2008 at 11:58 PM, Alan Altmark <[EMAIL PROTECTED] m> >wrote: >> >> > Ah, one of the Great Schisms. See the 3rd from

Re: First time z/VM installer

2008-08-20 Thread Dave Jones
Mike is one of the regular presenter at SHARE, and knows quite a bit about all things z/VM, especially installation and configuration. Going to SHARE, and reading this list, are two great ways of learning what you need to know about z/VM and hosting zLinux as a guest. Susan Barron wrote: [sni

Re: First time z/VM installer

2008-08-20 Thread Susan Barron
Hi Mike, Thanks so much for responding. I attended your session at SHARE in San Jose and that is how I knew about the sheet. I have reviewed the packing information and on the sheet for the tapes it lists : GA76-0407-01 z/VM Summ - Auto Install and Svc-Tape Inst GC24-6099-04 z/

Re: SECUSER

2008-08-20 Thread Bruce Hayden
Well, I don't have factual knowledge of the VM Automated Operations product, but I do have practical knowledge. I installed it on my test LPAR, and I set OBSERVER on just about all SVMs and Linux machines that run there. One of the SVMs receives messages from Linux machines (using Pipe STARMSG) a

Re: z/VM z/Linux tools website

2008-08-20 Thread Fran Hensler
On Wed, 20 Aug 2008 08:25:00 -0400 Martin, Terry R. (CMS/CTR) (CTR) said: >At one point I had the name of a website that had z/VM and z/Linux tools >such as TRACK and others. I can not remember the site can someone help >this "old guy" with this? http://vm.marist.edu/track/ /Fran Hensle

z/VM z/Linux tools website

2008-08-20 Thread Martin, Terry R. (CMS/CTR) (CTR)
Hi At one point I had the name of a website that had z/VM and z/Linux tools such as TRACK and others. I can not remember the site can someone help this "old guy" with this? Thank You, Terry Martin Lockheed Martin - Information Technology z/OS & z/VM Systems - Performance and Tuning C

Re: SECUSER

2008-08-20 Thread Colin Allinson
"Schuh, Richard" <[EMAIL PROTECTED]> wrote :- > I have a service machine the runs with MSG set to IUCV. If I enter the command "SET SECUSER svcid *", > messages are displayed on my console rather than being sent to the IUCV handler. > The messages do not get displayed on the console if I log o

EREPDATA

2008-08-20 Thread Lee Pretorius
How would I find the EREPDATA which gets sent through from the customer to make sure that we are receiving this? Lee Pretorius IT Specialist IBM S.A. (Pty) Ltd Private Bag X9907 Sandton 2146 (W) 011-302-8020 (C) 082-570-4204 E-mail : [EMAIL PROTECTED]