z/VM CTCA won't start

2009-01-18 Thread Robin Atwood
I am playing around with z/VM V5R3 Eval Edition which now IPLs under Hercules 3.06. It's intended to demonstrate running Linux under z/VM but before I can do that I have to get the networking for VM going. I have altered PROFILE TCPIP to use a CTC but when I logon TCPIP I get messages: DTCCTC080

CAVMEN Meeting on Thursday, January 22, 2009 - Late Agenda Change

2009-01-18 Thread Chicago Area VM (and Linux) Enthusiasts
Due to a scheduling conflict, Barton Robinson of Velocity Software will not be available to speak at the January 22nd Meeting. Tony Noto of Velocity will be out to present the Velocity Software Product Announcement. Regrettably, we will not be able to present the "Linux and z/VM Performance Con

Re: Security question and using scp

2009-01-18 Thread Michael MacIsaac
... sent this this AM - not sure where it went ... resending ... Marcy, > Same rule here (if only some of these vendors (cough ibm/tivoli cough) would comprehend... ) I'm trying to comprehend, and will also try to bubble the message upwards in my small sphere of influence. So let me ask thi

Re: Security question and using scp

2009-01-18 Thread Scott Rohling
We implemented this within IBM: - created userid 'support' on all Linux guests - made it a 'no login' user - Put support in sudoers to allow commands with NOPASSWD on all guests - Distributed the 'authorized_keys' to /home/support/.ssh with the support user's public key on the central system.

Re: Security question and using scp

2009-01-18 Thread Rob van der Heij
On Sun, Jan 18, 2009 at 11:22 PM, Scott Rohling wrote: > We implemented this within IBM: > - Distributed the 'authorized_keys' to /home/support/.ssh with the support > user's public key on the central system. This is the questionable part of the process I think. Your security guidelines also

Re: Security question and using scp

2009-01-18 Thread Michael MacIsaac
Marcy, > Same rule here (if only some of these vendors (cough ibm/tivoli cough) would comprehend... ) I'm trying to comprehend, and will also try to bubble the message upwards in my small sphere of influence. So let me ask this to the list - what are the rules regarding key-based authenticat

Re: z/VM CTCA won't start

2009-01-18 Thread Dave Jones
Robin, do you have a "START statement at the bottom of your PROFILE TCPIP file? DJ Robin Atwood wrote: I am playing around with z/VM V5R3 Eval Edition which now IPLs under Hercules 3.06. It's intended to demonstrate running Linux under z/VM but before I can do that I have to get the networkin

Re: z/VM CTCA won't start

2009-01-18 Thread Dave Jones
Robin, OK I see what your problem is now: CTCA 0E22 ATTACHED TO DTCVSW2 0E22 CTCA 0E23 ATTACHED TO DTCVSW2 0E23 These devices need to be attached to the TCPIP virtual machine, and not to the default VSWITCH controller virtual machine. DJ Robin Atwood wrote: I am playing around with z/VM V

Re: z/VM CTCA won't start

2009-01-18 Thread Hans Rempel
Robin. I'm assuming your using VCTC. Consider using a VSWITCH or VLAN. A lot easier to manage. CTCA are more complicated. A common problem with CTCA is that you need to cross over the send and receive addresses OR change an options of the define link statement. Hans -Original Message- Fro

Re: Anybody using PigIron z/VM SMAPI client?

2009-01-18 Thread Alan Altmark
On Friday, 01/16/2009 at 08:07 EST, Patrick Spinler wrote: > I'm a relative z/VM newcomer, and when I first heard of this it was also > my introduction to SMAPI. I initially got fairly interested as I have a > number of problems I was hoping for SMAPI to solve, and pigiron would > have been a gr

Re: Security question and using scp

2009-01-18 Thread Alan Altmark
On Sunday, 01/18/2009 at 07:51 EST, Michael MacIsaac/Poughkeepsie/i...@ibmus wrote: > So let me ask this to the list - what are the rules regarding key-based > authentication? Is this approach not authorized even though no root (or > any other) passwords goes over the wire? Or is it just the rul