Thanks to EVERYONE on the list that responded to my request for
assistance getting SSL working after applying PK97437. I did open an ETR
with IBM and Mark was very quick to help me get things working again.
Regards,
Dave
Poirier wrote:
Dave,
The following link describes the steps you need to do in addition
to what the SSLPOOL PLAN option describes.
http://www.vm.ibm.com/related/tcpip/tcspeins.html
Jim P.
On 11/23/10 10:46 AM, Dave Keeton dave.kee...@state.or.us wrote:
Thanks, Mike
alone, not my employer's.
Dave Keeton dave.kee...@state.or.us
Sent by: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU
11/24/2010 10:49 AM
Please respond to
The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU
To
IBMVM@LISTSERV.UARK.EDU
cc
Subject
Re: Question about
Mike, thanks for the assistance.
In going through your instructions, I see that in my initial attempts at
this I *DID* attempt to set things up using an SSL Pool. Here's what the
output from the command you had me run says:
Directory = VMSYS:TCPMAINT.SSLPOOL_SSL
Grantee R W NR NW
TCPMAINT X
Keeton dave.kee...@state.or.us wrote:
:DCSS_Parms.DEFAULT
--
Dave Keeton
Systems Programmer
Mainframe Computing Svcs
Oregon State Data Center
Office: (503) 373-0832
-24 at 14:18 -0500, James Poirier wrote:
Dave,
In this case I believe it is. The setup doc for using non pool show
it on the nick.tcpip ONLY.
Jim P.
On 11/24/10 2:20 PM, Dave Keeton dave.kee...@state.or.us wrote:
Jim,
That is present also
-0500, James Poirier wrote:
Dave,
:nick.sslserventry needs to be in either SYSTEM DTCPARMS or a
SSLSERV DTCPARMS
Jim P.
On 11/24/10 2:34 PM, Dave Keeton dave.kee...@state.or.us wrote:
Now it seems to have heartburn with the :For. tag... which is
present under
itself reads the 'SYSTEM NETID S' file and matches
against the (virtual) CPU serial number in the virtual machine.
Mike Walter
Aon Corporation
The opinions expressed herein are mine alone, not my employer's.
Dave Keeton dave.kee...@state.or.us
Sent by: The IBM z/VM Operating System
to be
using.
Forwarded Message
From: Dave Keeton dave.kee...@das.state.or.us
To: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU
Subject: Re: Question about SSL Service
Date: Wed, 24 Nov 2010 12:46:33 -0800
Mike,
Yes, I'm positive 198 is the same for SSLSERV. Here's
to shutdown without destroying it? This particular VSWITCH
doesn't have a second fail-over address. If I detach the device from the
VSWITCH controller, vary the device, path and CHPID offline, will this
suffice?
Thanks in advance,
Dave Keeton
, please advise
the sender immediately by reply e-mail and delete this message. Thank you for
your cooperation.
-Original Message-
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On
Behalf Of Dave Keeton
Sent: Monday, May 17, 2010 3:54 PM
To: IBMVM
What a timely question! Management is after me to quantify how many
guests we can run on our 1 IFL for billing purposes. They want to carve
it up into units so they know how many total we have, and therefore can
charge per server. I don't see it going that way, as several of you have
pointed out:
, 2009 at 2:29 PM, Dave Keeton
dave.kee...@state.or.us wrote:
I am attempting to install CA:Account and I have been
unable to get it to start properly (it abends) because
it isn't reading the object directory. I have defined
Can anyone tell me why it takes EXACTLY 4 minutes for LDAPSRV to go from
ready for requests to actually LISTENING on the interfaces?
14:10:57 LDAPSRV *8 091001 21:10:57.790088 GLD1004I LDAP server is
ready for requests
14:14:57 LDAPSRV *8 091001 21:14:57.798419 GLD1059I Listening for
requests
IBMVM@LISTSERV.UARK.EDU
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: LDAP Initialization
Date: Thu, 1 Oct 2009 17:54:07 -0400
On Thursday, 10/01/2009 at 05:26 EDT, Dave Keeton
dave.kee...@state.or.us wrote:
Can anyone tell me why it takes EXACTLY 4 minutes for LDAPSRV to go from
ready
sizeLimit: 500
suffix 1: o=ibm
timeLimit: 3600
useNativeAuth: all
database SDBM GLDBSD31 SDBM-0003
krbIdentityMap: off
readOnly: off
sizeLimit: 500
suffix 1: cn=RACFVM
timeLimit: 3600
Thanks in advance,
Dave Keeton
State of Oregon
Pat, when searching from Linux, yes, I used -x for simple binding. When
searching from z/VM, I did not.
Dave
Just a thought, do you need to do simple binding (ldapsearch -x ...)
instead of the default sasl binding?
is a member of the group STGADMIN) to
access tape drives controlled by RMSMASTR. Being new to RACF, I am not
sure if I've missed a step or not.
Any thoughts or suggestions?
Thanks in advance,
Dave Keeton
Anyone on the list using CA's VM:Backup with HiDRO for Disaster
Recovery? I am curious how you addressed the requirement of creating a
userid called VMIMAGE which owns all the data in the shop. I am
concerned about the VMIMAGE user 'owning' the data. What exactly does
this mean and kind of
Thanks to Rob everyone else who responded. I'm pretty new to RACF as
well, so your examples helped out a lot.
Regards,
Dave
-Original Message-
From: Rob van der Heij rvdh...@gmail.com
Reply-to: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU
To: IBMVM@LISTSERV.UARK.EDU
Subject:
I am having difficulty with the password envelope portion of the LDAP
RACF configuration. I have created my keyring, created my certificates,
exported certificates... but when I attempt to test it by changing the
OPERATNS user's password (which should cause the password to be
enveloped, I get the
I am getting the following error when I try to initialize (start) the
z/VM 5.4 LDAP server:
090519 23:28:04.839025 GLD1019A Unable to open UTF-8 to IBM-1047
converter: 83/ -
090519 23:28:04.839061 GLD1007I LDAP server is stopping.
the TCP/IP Messages and Codes manual talks about the LDAP
Thanks, everyone, for the comments. I was able to get it working after a
couple of days of head-scratching. The biggest thing that threw me for a
loop was the TLS Label in PROFILE TCPIP. I couldn't figure out exactly
what it was asking for - and it evidently does NOT like you to use the
System
I've been very interested in this thread, as I'm also trying to set up
the SSLSERV for Telnet sessions. I am also experiencing the same problem
of connections failing. I have tried to use both x3270 under Linux
(using the L:host:992 option) and using Passport to connect using SSL.
Neither
I need to install ISPF on my z/VM 5.4 system. I have recently installed
RACF and need to add panel support. I have the electronic media from the
Shop zSeries site as well as the DVD for the z/VM 5.4 SDO.
How do I go about installing ISPF after the fact? Can I do it via FTP?
Can that part be
From: The IBM z/VM Operating System on behalf of Dave Keeton
Sent: Thu 3/12/2009 12:20 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: [IBMVM] Merging DirMaint?
I have a question regarding DirMaint and how to migrate/merge from one
release to another. Here's
of Dave Keeton
Sent: Thu 3/12/2009 12:20 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: [IBMVM] Merging DirMaint?
I have a question regarding DirMaint and how to migrate/merge from one
release to another. Here's the scenario:
I have z/VM 5.2 running in production with DirMaint. I have 20+
instances
, Dave Keeton dave.kee...@state.or.us wrote:
I have a follow-up question about the EXTENT CONTROL file In my
ignorance, I used the same REGIONS naming convention in both production
and test. Here's an example:
This is the test system:
:REGIONS.
*RegionId VolSerRegStart RegEnd
DIRMAINT knows the new
region names...
Scott
On Mon, Mar 16, 2009 at 10:31 AM, Dave Keeton dave.kee...@state.or.us
wrote:
Ron,
You're right, test is going away. It will eventually become the
next
release of z/VM at some point later down the road
I have a question regarding DirMaint and how to migrate/merge from one
release to another. Here's the scenario:
I have z/VM 5.2 running in production with DirMaint. I have 20+
instances of SLES9 10 and everything is running great.
I also have z/VM 5.4 running in a test LPAR which also has
Thanks for the reply, Ed. Looks like my transfer produces a file that's
one record larger than yours:
Cmd Filename Filetype Fm Format LreclRecords Blocks Date
Time
UPLOAD EXEC A1 F 80 2564 51 12/03/08
7:31:25
After I've transferred the file using
.
The fix is simple, on your workstation simply make sure the UIPLOAD EXEC file
is in
Windows format. On a Windows PC, the free Notepad++ editor works can do this
easily
(http://notepad-plus.sourceforge.net/uk/site.htm)
Dave Keeton wrote:
Thanks for the reply, Ed. Looks like my transfer
the invalid character in line 2653? You can edit the UPLOAD exec file
in Xedit,
make the last line in the file the current line, and then issue the Xedit
command hextype.
That will show you the line in both hex and character modes.
Dave Keeton wrote:
Okay. I tried using a Windows Pee Cee
to add that to the end of a file.
JR (Steven) Imler
CA
Senior Sustaining Engineer
Tel: +1 703 708 3479
[EMAIL PROTECTED]
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED]
On Behalf Of Dave Keeton
Sent: Wednesday, December 03, 2008 12:32 PM
had with using FTP to upload
files to VM, I
now use, if it's possible, the IND$FILE file transfer built into many of the
major TN3270
emulators, including the text-based c3270 one for Linux. The VM IND$FILE
module can be
found on MAINT's 190 minidisk on modern VM systems.
Dave Keeton
on the details.
Dennis O'Brien
We are Borg of America. You will be assimilated. Resistance is futile.
From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On
Behalf Of Dave Keeton
Sent: Wednesday, October 15, 2008 15:39
I am attempting to install VM:Backup from CA and it wants me to update
the directory with the user info for VMBACKUP. Trouble is, I'm using
DirMaint and I can't seem to figure out how to manually add the user as
the installation program has spelled out the entry for me.
Can I update the USER
FSMBCJ2182I VOLSPECIFIC VM0004
3592 300GB
FSMBCJ2182I VOLSPECIFIC VM0005
3592 300GB
Dave Keeton
Systems Programmer
Enterprise Systems
Oregon State Data Center
(503) 373-0832
email: [EMAIL PROTECTED]
The APARs which allow RMS to issue a query device without attaching
the device are VM64062 and VM64206 for RMS, and VM64157 for CP.
However, none of this service in my belief will help solve the
I/O errors you are receiving. If you associate a device with a
particular scratch pool, and there are
Yesterday I was getting pretty excited because I actually got VM talking
to our tape library. I was able to see the volumes that were assigned to
me and assign them to a scratch category. I even mounted a tape, invoked
DDR and dumped a MOD3 and a MOD9 to the tape. Then, later that day, I
started
virtual machine.
I also see the device you are working with is a 3592 (the most recent
hardware from IBM), so these error may go away by upgrading your
DFSMS/VM software.
JR
JR (Steven) Imler
CA
Senior Software Engineer
Tel: +1 703 708 3479
Fax: +1 703 708 3267
[EMAIL PROTECTED]
Dave Keeton
=
804004272030202364C44340404040404034001213902004E8205D8F2011
12:17:47 * MSG FROM RMSMASTR:FSMBAD2006E Library I/O error; reason
code = 3800, request identifier = 18, device = 4116, library = TLLIB01
Has anyone seen this before or have any insight as to what might be
going on?
Dave Keeton
Systems Programmer
Enterprise Systems
:FSMBAD2006E Library I/O error; reason
code =
3800, request identifier = 12, device = 4116, library = TLLIB01
The line about Sense Data make no sense to me...
Dave Keeton
Systems Programmer
Enterprise Systems
Oregon State Data Center
(503) 373-0832
email: [EMAIL PROTECTED]
this condition? I've encountered it
before; I see it when a Linux guest is shutdown and the guest is still
logged on. I don't know how to force this condition. Any help would be
greatly appreciated.
Thanks in advance,
Dave Keeton
Oregon State Data Center
After bringing up FTPSERVE to transfer some files, I noticed this
morning that I'm unable to connect to the IP address I used for z/VM. I
am still able to access the z/VM console through the ICC network, but
the address specified in the DTCPARMS file is unresponsive. I can't seem
to figure out
EST, Dave Keeton [EMAIL PROTECTED]
wrote:
After bringing up FTPSERVE to transfer some files, I noticed this
morning that
I'm unable to connect to the IP address I used for z/VM. I am still able
to
access the z/VM console through the ICC network, but the address
specified in
the DTCPARMS
Message-
From: Alan Altmark [EMAIL PROTECTED]
Reply-To: The IBM z/VM Operating System IBMVM@LISTSERV.UARK.EDU
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: TCPIP troubleshooting
Date: Tue, 20 Nov 2007 14:01:24 -0500
On Tuesday, 11/20/2007 at 01:49 EST, Dave Keeton [EMAIL PROTECTED]
wrote:
After
: TCPIP troubleshooting
Date: Tue, 20 Nov 2007 17:12:31 -0500
On Tuesday, 11/20/2007 at 02:40 EST, Dave Keeton [EMAIL PROTECTED]
wrote:
Thank you, Alan. Using ifconfig, I see that the interface is listed as
DOWN:
GBE200 inet addr: 10.254.145.64 mask: 255.255.255.0
DOWN MTU: 8992
this? Does anyone know where SuSE stores its
hostname variable (other than /etc/hostname which doesn't appear to be
read by YaST). I can use the hostname -v new name and change it on
the fly, but it doesn't stick after reboot.
TIA,
Dave Keeton
z/VM Linux Systems Administrator
SDC Enterprise
49 matches
Mail list logo
