Re: BFS SSLSERV question

2009-03-30 Thread Kris Buelens
2009/3/30 Jim Bohnsack : > On my 2nd level system installed from the IBM ddr and then the SSL PTF, when > I try what Richard suggested, I get the following: > > ls -la > /etc > Erwxrwxrwx 1 maintsystem21 Oct 2 15:55 /etc -> > /../VMBFS:VMSYSU:E > TC > $ > > Is that normal? Why is it

Re: BFS SSLSERV question

2009-03-30 Thread Jim Bohnsack
On my 2nd level system installed from the IBM ddr and then the SSL PTF, when I try what Richard suggested, I get the following: ls -la /etc Erwxrwxrwx   1 maint    system    21 Oct  2 15:55 /etc -> /../VMBFS:VMSYSU:E TC  

Re: BFS SSLSERV question

2009-03-23 Thread David Boyes
On 3/22/09 3:31 PM, "Alan Altmark" wrote: > Sorry, David, that would just make things worse since we'd keep shipping a > new CONFIG filepool in each release as we do with VMSYS and VMSYSU, and > then there would be two *global* CONFIG filepools in the collection. Two > objects would attempt to

Re: BFS SSLSERV question

2009-03-22 Thread Kris Buelens
In this new redbook we do indeed recommend to create a special filepool as storage space for the certificates and the LDAP databases, this to avoid problems with release migrations. The principle: customer data in your filepool; software in IBM's VMSYS. This is definitely not the way things are e

Re: BFS SSLSERV question

2009-03-22 Thread Alan Altmark
On Sunday, 03/22/2009 at 03:17 EDT, David Boyes wrote: > Sounds like a good practice for the next release. Call it CONFIG or > something like that, and fix the apps like DFSMS to put their config > files there by default. Sorry, David, that would just make things worse since we'd keep shipping

Re: BFS SSLSERV question

2009-03-22 Thread David Boyes
> You might find it worth the effort to create your own SFS filepool > so that > release-to-release migrations don't create a disruption since you > have to > actually migrate VMSYS content. With your own global filepool, > your 2nd > level system can down to the 1st level system (via TSAF)

Re: BFS SSLSERV question

2009-03-22 Thread Alan Altmark
On Friday, 03/20/2009 at 09:29 EDT, Jim Bohnsack wrote: > Thank you all for your responses. It sounds as if it is as I suspected, > a total lack of knowledge about BSF and almost as much of a lack of > knowledge about SFS. It might be a good idea to include some of these > SFS/BFS peculiar hint

Re: BFS SSLSERV question

2009-03-21 Thread Dave Jones
The Redbook Kris is referring to can be found here: http://www.redbooks.ibm.com/abstracts/sg245148.html?Open. There is an overview of BFS is Chapter 2. Another Redbook that might be of interest is "OpenEdition for VM/ESA A Implementation and Administration Guide" (http://www.redbooks.ibm.com/a

Re: BFS SSLSERV question

2009-03-21 Thread Jim Bohnsack
A useful Redbook or Redpaper, or whatever category it could be put into, would be very useful. There must be others besides me who would benefit from everything being in one place and being complete. What Alan said in his response to my post was not mentioned anywhere that I've seen. As I've

Re: BFS SSLSERV question

2009-03-21 Thread Kris Buelens
Seeking for some brief SFS/BFS overview: a certain DJ, well known here, might remember I asked him in 1998 to devote a small section of the VM/ESA Network computing with Java And NetRexx (SG24-5148) Redbook to it. I wrote something similar for the upcoming Redbook about password synchronization bet

Re: BFS SSLSERV question

2009-03-20 Thread Jim Bohnsack
Thank you all for your responses. It sounds as if it is as I suspected, a total lack of knowledge about BSF and almost as much of a lack of knowledge about SFS. It might be a good idea to include some of these SFS/BFS peculiar hints or ideas in the TCPIP doc, especially for the VM newbie (as

Re: BFS SSLSERV question

2009-03-20 Thread Richard Troth
I cannot say enough good about how Endicott implemented OpenVM ... now some 15+ years ago. The way the POSIX info is rolled into the CP Dir is spot on. There are issues, notably performance concerns and a gross lack of attention (thanks to the distracting popularity of Linux on VM). But the core

Re: BFS SSLSERV question

2009-03-20 Thread Alan Altmark
On Friday, 03/20/2009 at 01:13 EDT, Jim Bohnsack wrote: > I have a dumb question and a long posting. Sorry. We have SSLSERV > working on our 2nd lvl z/VM 5.4 system, the one I loaded from the IBM > DDR. I always bring up a new release on a 2nd level id and then move > code piece by piece to ou

Re: BFS SSLSERV question

2009-03-20 Thread O'Brien, Dennis L
Jim, Did you enroll the ROOT, SSLSERV, and GSKSSLDB BFS filespaces in your SFS server? Did you create the objects that go in those filespaces? Take a look at your starter system to see what they should look like. I did my z/VM 5.4.0 upgrade by rotating in a new sysres set, so all that was done f

Re: BFS SSLSERV question

2009-03-20 Thread Rich Smrcina
Jim Bohnsack wrote: GSKKYMAN gives me the database menu and my replies are as follows: Enter key database name (press ENTER to return to menu): /etc/gskADM/KeyDBT.kdb Enter database password (press ENTER to return to menu):