Re: VM TCP/IP Secure Telnet

2008-05-11 Thread Wayne Driscoll
That's just because if Alan falls asleep, Chuckie will take control of the keyboard! -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Alan Altmark Sent: Saturday, May 10, 2008 1:12 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: VM TCP/IP Secure

Re: VM TCP/IP Secure Telnet

2008-05-10 Thread Alan Altmark
On Friday, 05/09/2008 at 09:12 EDT, Tim Joyce [EMAIL PROTECTED] wrote: I think the problem is, TUBES really is taking control of port 23. One of the procedures to setup TUBES telnet, is to take (comment) out the PORT 23 statement from PROFILE TCPIP. So, there is no way of letting TCPIP know

Re: VM TCP/IP Secure Telnet

2008-05-10 Thread Alan Altmark
On Friday, 05/09/2008 at 12:19 EDT, Les Geer (607-429-3580) [EMAIL PROTECTED] wrote: PVM (AKA VM/Pass-Through Facility) is a session manager product supporting multiple sessions on one terminal. However, it does not support creation of telnet sessions so does not support SSL. With z/VM

Re: VM TCP/IP Secure Telnet

2008-05-10 Thread Alan Altmark
On Friday, 05/09/2008 at 12:50 EDT, David Boyes [EMAIL PROTECTED] wrote: PVM also has the downside of not being easily licensable on IFLs at the moment. The VM guys might be about to do something about that, but at the moment, getting PVM for an IFL install is a lengthy and somewhat

Re: VM TCP/IP Secure Telnet

2008-05-09 Thread Tim Joyce
, May 09, 2008 9:17 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: VM TCP/IP Secure Telnet I don't know one way or the other, but what about IBM's PVM? -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] Behalf Of Tim Joyce Sent: Friday, May 09, 2008 8:13 AM

Re: VM TCP/IP Secure Telnet

2008-05-09 Thread Huegel, Thomas
Sent: Friday, May 09, 2008 8:22 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: VM TCP/IP Secure Telnet I have heard of the VM pass-through facility, but not familiar with how it works. I will investigate further. Is anyone using pass-through as a session manager? Tim -Original Message- From

Re: VM TCP/IP Secure Telnet

2008-05-09 Thread Adam Thornton
On May 9, 2008, at 8:16 AM, Huegel, Thomas wrote: I think the problem is, TUBES really is taking control of port 23. One of the procedures to setup TUBES telnet, is to take (comment) out the PORT 23 statement from PROFILE TCPIP. So, there is no way of letting TCPIP know that port 23 is a SECURE

Re: VM TCP/IP Secure Telnet

2008-05-09 Thread Les Geer (607-429-3580)
I have used it and it works fine, as with a lot of IBM's stuff the setup is a little complicated, but maybe no worse than anyone elses. What I don't know is if it works with SSL.. I have heard of the VM pass-through facility, but not familiar with how it works. I will investigate further. Is

Re: VM TCP/IP Secure Telnet

2008-05-09 Thread David Boyes
I think the problem is, TUBES really is taking control of port 23. One of the procedures to setup TUBES telnet, is to take (comment) out the PORT 23 statement from PROFILE TCPIP. So, there is no way of letting TCPIP know that port 23 is a SECURE port. I think the fact that Macro4 says secure

Re: VM TCP/IP Secure Telnet

2008-05-09 Thread David Boyes
I have used it and it works fine, as with a lot of IBM's stuff the setup is a little complicated, but maybe no worse than anyone elses. What I don't know is if it works with SSL.. PVM doesn't have any direct IP terminal interface (you have to do the DIAL PVM hack in the telnet server exit),

Re: VM TCP/IP Secure Telnet

2008-05-08 Thread Tim Joyce
Hey Guys, Well I got my SSLSERV up and started to update my PROFILE TCPIP to add a secure port to test with, then I remembered our session manager (Macro 4 - TUBES) intercepts port 23 for telnet and uses the port for TUBES. I found out that TUBES DOES NOT support, nor plan to support, secure

Re: VM TCP/IP Secure Telnet

2008-05-08 Thread Dave Jones
Hi, Tim. Take a look at these two products. 1) Session (Arty Ecock) (http://ukcc.uky.edu/%7Etools/1998/session.vmarc) 2) YVETTE (Chip Coy) (http://www.vm.ibm.com/download/packages/yvette.vmarc) They're both free, and I believe will provide session management functions similar to TUBES,

Re: VM TCP/IP Secure Telnet

2008-05-08 Thread Tim Joyce
PROTECTED] On Behalf Of Ed Zell Sent: Thursday, May 08, 2008 2:13 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: VM TCP/IP Secure Telnet Well I got my SSLSERV up and started to update my PROFILE TCPIP to add a secure port to test with, then I remembered our session manager (Macro 4 - TUBES

Re: VM TCP/IP Secure Telnet

2008-05-08 Thread Tim Joyce
Looks good .. Thanks Dave! Tim -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Dave Jones Sent: Thursday, May 08, 2008 2:14 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: VM TCP/IP Secure Telnet Hi, Tim. Take a look at these two products

Re: VM TCP/IP Secure Telnet

2008-05-08 Thread Ed Zell
Hey Ed, I am using TUBES 4.500E . There is a TUBES setting: TCP YES STN3270 23 This has TUBES intercept port 23 from VM TCPIP so if you telnet to your VM TCPIP stack port 23 you get a TUBES menu! Tim Cool Tim, thanks for the info. I am not on TUBES 4.x, so that is not

Re: VM TCP/IP Secure Telnet

2008-05-08 Thread David Boyes
Well I got my SSLSERV up and started to update my PROFILE TCPIP to add a secure port to test with, then I remembered our session manager (Macro 4 - TUBES) intercepts port 23 for telnet and uses the port for TUBES. They may not support it in TUBES, but the stack is doing all the work anyway,

Re: VM TCP/IP Secure Telnet

2008-05-06 Thread Alan Altmark
On Monday, 05/05/2008 at 10:35 EDT, Tim Joyce [EMAIL PROTECTED] wrote: Am I to infer from this that Secure telnet is not available with our current 5.2 release level? Is anyone using secure telnet out there that can point me in the right direction? In z/VM 5.2 you can use SSL with FTP

Re: VM TCP/IP Secure Telnet

2008-05-06 Thread Mrohs, Ray
, May 06, 2008 4:26 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: VM TCP/IP Secure Telnet On Monday, 05/05/2008 at 10:35 EDT, Tim Joyce [EMAIL PROTECTED] wrote: Am I to infer from this that Secure telnet is not available with our current 5.2 release level? Is anyone using secure telnet out

Re: VM TCP/IP Secure Telnet

2008-05-06 Thread Alan Altmark
On Tuesday, 05/06/2008 at 08:27 EDT, Mrohs, Ray [EMAIL PROTECTED] wrote: If your site runs port scans against your z/VM 5.2 SSLSERV, you might get notes from the network people saying you are running an old 2.0 version of SSL. LOL. Actually, you're running a new SSLv3/TLSv1 server that

VM TCP/IP Secure Telnet

2008-05-05 Thread Tim Joyce
Hey Guys, We are looking into using secure telnet on our z/VM 5.2 TCP/IP stack. When looking over info on the VM site, I found the following : Changes Introduced in TCP/IP Level 530 A new statement, SECURETELNETCLIENT, may now be specified in the TCPIP DATA file. This statement provides the

Re: VM TCP/IP Secure Telnet

2008-05-05 Thread Dave Jones
Hi, Tim. I think what your are looking for is the VMSSL server. It can secure Telnet (TN3270) sessions to your z/VM system quite nicely, and it is supported on your release of VM. You can read more about it in Chapter 22 of the TCP/IP Planning and Customization Guide. It is somewhat of a

Re: VM TCP/IP Secure Telnet

2008-05-05 Thread Adam Thornton
On May 5, 2008, at 9:54 AM, Dave Jones wrote: Hi, Tim. I think what your are looking for is the VMSSL server. It can secure Telnet (TN3270) sessions to your z/VM system quite nicely, and it is supported on your release of VM. You can read more about it in Chapter 22 of the TCP/IP

Re: VM TCP/IP Secure Telnet

2008-05-05 Thread David Boyes
You have server support for SSL-wrapped telnet, via a Linux guest. The telnet client on VM doesn't gain that support until 5.3. The option you reference is just what you want the 5.3 client to default - secure or plaintext telnet. You still need the Linux guest, etc.

Re: VM TCP/IP Secure Telnet

2008-05-05 Thread Dave Jones
, 2008 3:16 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: VM TCP/IP Secure Telnet You have server support for SSL-wrapped telnet, via a Linux guest. The telnet client on VM doesn't gain that support until 5.3. The option you reference is just what you want the 5.3 client to default - secure

Re: VM TCP/IP Secure Telnet

2008-05-05 Thread Tim Joyce
System [mailto:[EMAIL PROTECTED] On Behalf Of Dave Jones Sent: Monday, May 05, 2008 3:45 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: VM TCP/IP Secure Telnet Oh, an easy one:-) Go grab the SNA VMSSL enabler tool. It will save you a lot of headaches, imho. Look on: www.sinenomine.net for more

Re: VM TCP/IP Secure Telnet

2008-05-05 Thread David Boyes
I saw this link on your previous email, but it looked as if it would only work with z/VM 5.3 ! We are still 5.2 . We plan to migrate sometime this year, but not before I need to start on this secure telnet project. Version 2.0 requires 5.3. Version 1.5 will work with 5.2 down to 3.1.

Re: VM TCP/IP Secure Telnet

2008-05-05 Thread Tim Joyce
Ah, I will look into 1.5 then ... Thanks! Tim -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of David Boyes Sent: Monday, May 05, 2008 3:51 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: VM TCP/IP Secure Telnet I saw this link on your previous

Re: VM TCP/IP Secure Telnet

2008-05-05 Thread Adam Thornton
On May 5, 2008, at 2:56 PM, Tim Joyce wrote: Ah, I will look into 1.5 then ... Thanks! Actually, 1.2 is the latest 1.x release currently available. There will probably eventually be a 1.3 release, but the updates are minor; if you're not going to have more than 120 simultaneous users