Re: email and crypto

2023-12-05 Thread Thomas Kern
AC25 BA9F 2514 80CB 72BE A9A9 C5F1 0A43 8110 Comment: Thomas Kern xsFNBGVvj9MBEADOYpnhdJJWLLbOJc0FHD+jRnQhsmDFPDLkiuLCrIhp71tFqr65 PS0ZIuvgWbfs6vni/rjV9s2vABOcvFx3A9Qsk/376i6gxVKypc3bjjucw4tgtgAl bcqA2hbu/CUUUiDTp5ohoe84QOobHYmRXLWWvgNwa/IQ7YNGKZcAn8IM482/bYyZ hlEt5o3R4Vl4iz

Re: Ansible Tower (AAP)

2022-11-21 Thread Thomas Kern
If I were running a data center with a zVM/Linux capable Mainframe and a whole farm of linux/windows virtual machines, I would look to have the Mainframe be the centralized administration/reporting center for the Ansible (provisioning, patching, deprovisioning, maintenance) processes for System,

Re: New to z/VM and Linux on System z: Minidisk definitions in IBM supplied USER DIRECT question

2014-10-23 Thread Thomas Kern
That would be good document for IBM to supply even for us long-time users of z/VM. I have never used ALL of the IBM supplied directory entries, but I have been asked by Management and Auditors what some of them were for. /Tom Kern On 10/23/2014 08:59, Ambros, Thomas wrote: Neither. What I'd

Re: Query for Destination z article -- mainframes back to the future

2013-03-13 Thread Thomas Kern
3) if you aren't measuring it, you can't tune it. 4) if you aren't measuring it, you really are looking to drive over that cliff. /Tom Kern On 03/13/2013 10:45 AM, Tom Kennelly wrote: Wisdom: 1. You can not tune your way out of a lack of capacity. 2. Computer performance is based upon a

Re: Putty security

2013-03-06 Thread Thomas Kern
On 03/06/2013 03:29 PM, Melancon, Ruddy wrote: I have a security officer that has raised the issue regarding free [Putty] software. Has anyone encounterd security issues with Putty beyond the Release 0.60? I am looking for documented problems. I am also interested in what I could use as a

Re: 2 Factor authentication

2012-10-23 Thread Thomas Kern
There is a replacement for PuTTY's pageant module that will read the HSPD-12 badge I have and use one of the certs from there. I have to enter my badge pin every time I make a connection so it is 2-Factor (something I have-the badge, something I know-the pin to access the badge). I think it is

Re: porting kicks

2012-08-09 Thread Thomas Kern
On 8/8/2012 20:04, Gregg Levine wrote: On Wed, Aug 8, 2012 at 7:51 PM, Thomas Kern tlk_sysp...@yahoo.com wrote: Too bad Tymshare never donated TymVSAM to the VM community, or at least made it more generally available. I never used it directly, just as a user of a canned application

Re: porting kicks

2012-08-08 Thread Thomas Kern
Too bad Tymshare never donated TymVSAM to the VM community, or at least made it more generally available. I never used it directly, just as a user of a canned application that used it. Simple single user VSAM in standard CMS files. /Tom Kern On 8/8/2012 14:56, David Boyes wrote: I'm all for

Re: best way to set up alternate ipl packs on z/VM 6.2?

2012-08-02 Thread Thomas Kern
If you don't need to run the alternate volume for long, you can live with a 1 volume (3390-9) RES pack, with spool and page on it. I built one to be able to IPL something other than our production systems and use multiple VMs in that system to COPY our DASD (VM and MVS) from one DASD subsystem

Incentivising the next generation of VMers

2012-06-06 Thread Thomas Kern
My managements never did that. What got me incentivised (it should be a word), was that I got to solve problems in VM. In the other systems I had to work on, we were not really allowed the freedom to solve problems, Management was willing to live with the lack of utilities and flexibility of

Re: Run NTP on zLinux or not?

2012-06-04 Thread Thomas Kern
When we had linux on Z, we ran the ntpdate program once per day (before start of business). On our current ESX and Oracle Virtualization (xen), we need to run it every hour. /Tom Kern On 6/4/2012 12:31, David Boyes wrote: Running NTP everywhere wakes every guest up periodically, so you waste a

Re: VM toolset(s) info request

2012-03-13 Thread Thomas Kern
This is sort of a 1 from column A, 2 from column B type of an answer. IMHO: Velocity has the best products for Performance and Capacity Planning. They also have a nice VM-base web server. The VMCenter products that CA sells are the best for Operator Console, Tape Management and

Re: How do you set up an rsa public key on zVM to connect to another zVM's Guest's zLinux session to issue a command.

2011-12-22 Thread Thomas Kern
This is a CMS command-line ssh capability that I have been asking for since I started running Linux under z/VM. It may be available from a third-party like Sine Nomine, but it is not available from IBM. /Tom Kern (I no longer run Linux under z/VM, so the Powers That Be succeeded in stalling

Re: linux not ipling

2011-07-12 Thread Thomas Kern
Sounds like there is a typo in /etc/modprobe.conf. You can mount that volume to a Rescue System and look/repair it. I used to use the EXT2CMS package from Sine Nomine to do such edit repairs under CMS. /Tom Kern On 7/12/2011 17:25, Aisik Chang wrote: Hello, listers, We had to change

Re: Linux backups and restores to/from tape

2011-07-10 Thread Thomas Kern
It is good to know that the encryption can be on the client side. Then the server can be doing unencrypted as its default and only those clients that need to encrypt their data can do it and take whatever CPU penalty is necessary for the privacy of their data. Thanks for working on this tool.

Re: Linux backups and restores to/from tape

2011-07-09 Thread Thomas Kern
Have you added software encryption of the tape output? I know that some tape drives support hardware encryption but some places do not have enough of them to spare for linux and the plain tape drives are what are available. /Tom Kern On 7/8/2011 13:16, David Boyes wrote: If you're running

Re: Using 2 NIC addresses to different networks on different VSWITCHes

2011-03-03 Thread Thomas Kern
That is what I have done on real systems (ORACLE RAC) running OEL5 where external access was on one NIC and inter-RAC communications was on an internal network through another NIC. I had to put a GATEWAY= statement in each icfcfg-ethx file and I had the DEFAULT gateway listed in the

selinux training

2011-02-01 Thread Thomas Kern
We don't use selinux because none of us understand it nor have the time to read up on it in our copious free time. But if there were a class about implementing selinux then I might be able to get my company to cut loose with some of the training money. Does anyone teach selinux implementation?

Re: Shared root and shutdown

2010-08-10 Thread Thomas Kern
I like the writable / with RO /bin, /sbin, /lib, /lib64, /usr. This way if you do get around to charging (yeah old school) for disk space, the customer pays for the writable areas, not the shared RO areas. If the customer needs more space, break out other directories to their own disks (/home,

Re: Linux for System z T-shirts

2010-04-30 Thread Thomas Kern
With each penguin wearing a green A-2 flight jacket and red Indiana Jones fedora. /Tom Kern John Campbell wrote: Michael Stephens wrote: Looks good, but how about a penguin riding a dinosaur? At one time I thought a cool logo would be a Tyrannosaurus Rex with a row of Penguins down its

Re: Movin On...

2010-02-03 Thread Thomas Kern
I am glad to see that Velocity is still hiring good people. I hope you enjoy your work. I also hope you will continue work on z/VM, z/OS clients for the xymon monitor. /Tom Kern Rich Smrcina wrote: Cross posted to vse-l, ibmvm and linux-390; sorry for dups. As of February 1, 2010 I've taken a

Re: SLES10 - Oracle/Memory Issues (oom-killer)

2010-01-02 Thread Thomas Kern
If a customer were having a problem with a particular linux guest, could they modify that ESALPS condensation process, say to condense after a week? Or condense normally for all other linux guests but the problem one? /Tom Kern Rob van der Heij wrote: (snipped) We condense the 1-minute data

Re: PROP-like action routines for linux syslog ?

2009-12-31 Thread Thomas Kern
authorized path. /Thomas Kern /301-903-2211 (Office) /301-905-6427 (Mobile) -- For LINUX-390 subscribe / signoff / archive access instructions, send email to lists...@vm.marist.edu with the message: INFO LINUX-390 or visit

Re: Wiki Request: Disaster Recovery

2009-09-28 Thread Thomas Kern
Yes, that works. Thanks. /Tom Kern Ron Foster at Baldor-IS wrote: Look at it now. Is this what you had in mind? Ron Sent from my iPhone -- For LINUX-390 subscribe / signoff / archive access instructions, send email to

Re: CPU usage formula

2009-08-05 Thread Thomas Kern
/VM data. But you knew that? Thomas Kern wrote: It would be nice if linux could be convinced to deliver consumption data to VM on a per account/user by interval. I don't think it has to be into the 'Accounting' data stream but maybe to the 'Monitor' data stream. I still think VM need a single

Re: CPU usage formula

2009-08-01 Thread Thomas Kern
It would be nice if linux could be convinced to deliver consumption data to VM on a per account/user by interval. I don't think it has to be into the 'Accounting' data stream but maybe to the 'Monitor' data stream. I still think VM need a single performance/capacity/accounting data stream (think

Re: Linux Boot Verification

2009-06-01 Thread Thomas Kern
BigBrother and its follow-on Hobbit(now named Xymon) have tests for SSL certificate expiration, Telnet, FTP, HTTP and other Port availability. There are also capabilities for external scripts on both client and server. I have not run the server part on zSeries yet, but it does run. I have used the

Re: Recompiling MySQL

2009-02-03 Thread Thomas Kern
I can get MySQL to recompile using the original .spec file and with a modified .spec file that includes --with-openssl options. I get a whole set of .s390x.rpm files. There is one that is missing. The normal files available from Novell include mysql-shared and mysql-shared-32bit files, but

Re: Recompiling MySQL

2009-02-03 Thread Thomas Kern
at 10:50 AM, Thomas Kern tlk_sysp...@yahoo.com wrote:=20 -snip- How does the -32bit file get built? Is it just a build using s390 architecture and rename that one rpm file and throw away the rest? It almost looks that way. I did an rpm -qip against the normal and = -32bit RPMs, and they were built

Re: RSCS question.

2009-01-31 Thread Thomas Kern
I use the RSCS transmitters for UFT but the UFTD server supplied with TCPIP. When I first tried setting this up I had problems with the UFT receiver in RSCS so I gave up on that. I can help test/debug things since this process is internal to my systems and just used by systems support staff. Let

Re: Recompiling MySQL

2009-01-30 Thread Thomas Kern
The real error was my lack of bison. Once that was installed, the recompile worked. /Tom Kern Jeff Savit wrote: On 1/29/09 11:51 AM David Boyes Said On 1/29/09 10:19 AM, Kern, Thomas thomas.k...@hq.doe.gov wrote: make[2]: Entering directory `/usr/src/packages/BUILD/mysql-5.0.26/sql' d

Re: System Mail consolidation

2009-01-15 Thread Thomas Kern
I have the extra status messages that different tasks generate in each linux server sent to a central LISTSERV and at 08:00 it does its digest and sends one email to me with all of the status from over night. Exception emails are sent directly to my email and therefore to my blackberry. The userid

Re: Setting up TSM backups to a Mainframe Server

2009-01-05 Thread Thomas Kern
Or set it to run as root under CRON and you can specify the filesystem such as 'dsmc incremental / /srv /oradb'. You can also have the output processed into a status message to be sent to a central administrator or to XYMON (formerly Hobbit). /Tom Kern David Boyes wrote: Have your TSM admin

Re: z/VM Software stack to support zLinux

2008-12-09 Thread Thomas Kern
I would add VM:Tape and VM:Backup from CA to provide enhanced data backuprestore capabilities. IBM offers Tape Manager and Backup Manager (I think that is the name, Tracy Dean can correct me, please). VM:Operator or Operations Manager can be added to help automate the OPERATOR console for some

Re: Difference between Layer 2 and Layer 3 Vswicth

2008-12-01 Thread Thomas Kern
Is the default vswitch configuration a Layer2 or Layer3? How do we define one or the other? /Tom Kern David Boyes wrote: On 12/1/08 3:53 PM, Bernie Wu [EMAIL PROTECTED] wrote: Hi List, Newbie wants to know the difference between layer 2 and layer 3 vswitch ? Layer 3 (as implemented in VM)

Re: Difference between Layer 2 and Layer 3 Vswicth

2008-12-01 Thread Thomas Kern
If I already have linux servers connecting to a Layer3 vswitch, what do I need to do to them to allow a change to a Layer2 vswitch? /Tom Kern David Boyes wrote: On 12/1/08 7:24 PM, Thomas Kern [EMAIL PROTECTED] wrote: Is the default vswitch configuration a Layer2 or Layer3? Layer 3, unless

Re: DIRMAINT necessary with RACFVM?

2008-10-13 Thread Thomas Kern
DIRMAINT is a directory manager, RACF is a security manager. While the two work together, they are not interchangeable. Even in a system where I am the only one making changes to the directory, I prefer to turn DIRMAINT on to make it easier for me to make changes to the directory entries. /Tom

Re: Perftk fun

2008-09-28 Thread Thomas Kern
How did you fix the monitor sample config thing? /Tom Kern Pat Carroll wrote: Hi David Thanks for the quick response. I fixed the monitor sample config thing... FCONRMT AUTHORIZ (unchanged from 5.2): VMPRODA PERFSVM SFSERV CMD DATA VMPRODA * DATA Patrick Carroll | Enterprise

Re: DDR'ing 3390 DASD To Remote Location

2008-06-17 Thread Thomas Kern
I think his thinking about using Linux as an intermediary at the production and hot sites is that he doesn't have to pay another license for z/VM to always be running at the hot site. With some programming, Linux at the hot site might even be able to unpack the PIPEDDR files and write to the

Re: Capturing PERFKIT console messages

2008-06-04 Thread Thomas Kern
an email. The MAILIT package from the IBM Downloads website is excellent for sending out the email. /Thomas Kern /U.S. Department of Energy /301-903-2211 FC PROCESS CPO* 'LOGON' DISPLAY CPO CALL VALLGN PASSARGS NOTIFY VALLGN EXEC T1; V 35 Blks=1 Col=1 Rec=1 of 6 Files=1 /* */ trace off

Re: Historical data for performance of Linux

2008-06-02 Thread Thomas Kern
user utilization data from PerfTK listings and then charge people based on those numbers. /Tom Kern /301-903-2211 --Original Message- On Mon, Jun 2, 2008 at 4:17 AM, Thomas Kern [EMAIL PROTECTED] wrote: Perhaps more customers will get around to using the accumulation files

Re: Historical data for performance of Linux

2008-06-01 Thread Thomas Kern
I have written FORTRAN, Rexx and SAS programs for the reduction of accounting and performance data. Luckily this was all for internal review not for real charge-back, no money changed hands. Management only likes my programs when the numbers match their predetermined ideas of who is taking how

Re: fstab and other small, critical file recoveries

2008-05-30 Thread Thomas Kern
If we had a NETDATA command (query/send/receive functions) then on SLES10-SP2 (VM Unit Record functionality) we could netdata the files to ourselves at the end of each successful IPL and they would be waiting for us when we find corruption/errors in these files. /Tom Kern /301-903-2211

SLES Maintenance Mirror (was: Express Password?)

2008-05-29 Thread Thomas Kern
Can anyone give a rough estimate of the DASD space required to hold all of the maintenance for 'GA SP1 SP2' of SLES10? Having read Mark's article on setting up a maintenance mirror, I am interested in trying it, but do not want to be in the run it, increase space, run it, increase space, run it,

Re: VM Accounting data in linux

2008-05-21 Thread Thomas Kern
Cross-posted to z/VM list. I want to thank Rob for pointing out the new STRUCTURE capabilities in the latest runtime version of Pipelines. His presentation shows enough to get me started on more intensive processing of z/VM's accounting data. To add something to the community, here is my first

Re: z/Linux access to z/OS DASD

2008-05-20 Thread Thomas Kern
Except the original poster wants to REDUCE z/OS cycles and cost, not INCREASE them. /Tom Kern John Summerfield wrote: I imagine it's possible to port Linux to z/OS. I'm thinking here of the user-mode-linux model, where the kernel's hardware is provided in the host OS. It would need tty

Re: z/Linux access to z/OS DASD

2008-05-19 Thread Thomas Kern
I am pretty sure it would take at least a new driver and probably a new filesystem, akin to CMSFS for a start. But then you get into the area of security. Without z/OS doing the file access, your z/OS security package cannot validate any of the linux i/o to each file. Any process on linux might be

Re: VM Accounting data in linux

2008-05-15 Thread Thomas Kern
I have been successfully collecting the accounting cards for a long time. I have them from the very first IPL of this z890. I am not doing chargeback. I would not do charge back from the accounting cards, I would do it from the Monitor data stream because the per user utilization and the rest of

Re: VM Accounting data in linux

2008-05-15 Thread Thomas Kern
Now that Structure stuff looks nifty. I will be trying that. Thanks. /Tom Kern -- Original Message -- From: Rob van der Heij [EMAIL PROTECTED] Not on Linux, but new If you want to take advantage of the opportunity to play with some modern pipelines stuff, have a look at my

VM Accounting data in linux

2008-05-14 Thread Thomas Kern
Has anyone begun using linux tools (awk, rrdtool, MySQL, etc) to manipulate, store, report the data in the VM accounting cards? I haven't had to report on VM's accounting data for several years now and the product used for that task has been removed. There is now a high level interest in mainframe

Re: VM Accounting data in linux

2008-05-14 Thread Thomas Kern
As much as I like the idea of having accounting data for each process/job in a linux server, I don't think the VM accounting data is the place to put it. For a long time I have felt that process accounting should go into the Monitor data stream so like SMF there is all the data in ONE place.

Re: Adabas and TSM

2008-04-22 Thread Thomas Kern
I don't have ADABAS but I do have multiple Oracle servers that I backup with TSM. I do not use the TSM scheduler or CAD to manage the backup time. My customers require a known outage for backups, so I use a CRON job to stop the Oracle instance, run the DSMC Incremental backup and then start the

Re: hipersocket address versus regular address

2008-02-26 Thread Thomas Kern
When I set up my hipersocket network between two z/VM LPARs, I went to the networking people and got a 10.x.y.0-255 segment for my own use. They promised not to let anyone else use it in the rest of the network. /Tom Kern Frank Swarbrick wrote: When setting up the IP address for a hipersocket

Re: report archive software?

2008-02-04 Thread Thomas Kern
There is a JES2MAIL/JES2FTP product from some vendor I cannot remember tonight. It is supposed to be able to generate PDF files before sending them to the appropriate destination. An FTP to a linux server on an IFL could be done and then let the linux serve them out via Apache2 with all the

Re: free and easy zVM scheduling automation tool

2007-11-01 Thread Thomas Kern
The core utility is supplied by IBM, it is called WAKEUP. But to make it easy, do to the IBM Downloads webpage and get the RXServer package (http://www.vm.ibm.com/download/packages/descript.cgi?RXSERVER). This is a template for general purpose service virtual machines. One sample in the package

Re: Linux guest to manage zVM?

2007-10-11 Thread Thomas Kern
I too, love CMS as a versatile platform for interactive and server tasks. But I just don't think that IBM will enhance the CMS environment for managing the VM system itself or the Linux guests that IBM is promoting. It will take third-party vendors to provide encryption capabilities, spool backup

Re: Linux guest to manage zVM?

2007-10-07 Thread Thomas Kern
Even with the multi-programming capability of linux, I might prefer to separate some functions. I think things like DIRMAINT, PERFTK, VMUTIL, SYSLOG, other internal functions being in one server, RSCS, VTAM/SNA(if necessary), TN3270, FTP, NFS, Web, other external functions being in another

Re: SIFT/UFT

2007-09-26 Thread Thomas Kern
If your target zLinux is on the same mainframe as your VSE, why not FTP directly to the zLinux system? SIFT/UFT would be nice, especially if you could have a SIFT client on the VSE system, but I don't remember seeing any SIFT/UFT server for zLinux. The original VM implementation and the current

Re: SIFT/UFT

2007-09-26 Thread Thomas Kern
An NJE connection would be even better than FTPing to the zlinux system. Do any of the TCPNJE implementations include traffic encryption? David Boyes wrote: There are full NJE implementations for Linux and other systems. --

Re: Novell Suse vs Red Hat

2007-09-24 Thread Thomas Kern
I have tried both and have decided that the best way to choose a distribution has nothing to do with their performance on a zSeries. For me, both worked well enough with our web workload, that I would have needed extensive instrumentation (your queue, Barton) to tell the difference. I think there

Re: Migrating Linux Dasd to a larger device

2007-08-30 Thread Thomas Kern
Some suggestions: 1) Swap disks: Get more paging space defined for your VM system and switch from DASD swap areas to VDISK swap areas. 2) Mod3s that don't need expansion: Use DDR to copy from real DASD to minidisk definitions of the same size. Multiple copies can be run in parallel by using

Re: FTPS (FTP over SSL) Package for SLES9

2007-08-27 Thread Thomas Kern
Try SecureFTP from Glub Tech. http://www.glub.com/products/secureftp/ I use its Windows version to transfer files to a VM FTP server protected by SSL. There is a linux client. It is supposed to be pure Java. /Tom Kern /301-903-2211 --- Clark, Douglas [EMAIL PROTECTED] wrote: Does anyone know of

Re: SSL Confusion

2007-08-10 Thread Thomas Kern
For the SSL enabler, I can live with an increased footprint if it can help you create, maintain and package it. Thanks for doing this for the VM community. /Tom Kern /A very satisfied customer of free software. --- Adam Thornton [EMAIL PROTECTED] wrote: It's A; however doing B with stunnel is

Re: How to translate Load Average to meaningful management numbers

2007-08-09 Thread Thomas Kern
I can't help you with Nagios, but if you want to try a replacement, look for Rich Smrcina for a copy of the Hobbit code for SLES on zSeries, or get a copy of the x86 code for a server and get a copy of the client code for SLES on zSeries. Hobbit is an follow-on to BigBrother and one of its

Re: tape backups

2007-08-06 Thread Thomas Kern
TSM client to a z/OS TSM server works very well for file-level backups. Our Disaster Recovery backups are still done from outside the Linux server while the Linux server is NOT logged on. We already had TSM server on our OS/390-z/OS system so it was nothing to add our Linux workload. As we add

Re: tape backups

2007-08-06 Thread Thomas Kern
To backup the z/VM minidisks and the linux minidisks, we do image backups for Disaster Recovery using DDR. VM:Backup and IBM's Backup/Restore Manager can also do the job of full volume, minidisk-level image backups and CMS file-level backups. There are some homegrown CMS file-level Backup/Restore

Re: zSeries IFL speed rating

2007-07-21 Thread Thomas Kern
I didn't need a full throughput benchmark, nor did I need to benchmark the I/O subsystem or the tape drives. The boss asked a specific question about the CPU power. I found a program that answered his question to his complete satisfaction. Now if he had asked for a throughput benchmark, an

Re: zSeries IFL speed rating

2007-07-19 Thread Thomas Kern
Since Mhz and MIPS are such misused values, I prefer to run the same program on old and new engines to compare the performance change. I use an old FORTRAN (no flames please) program that computes pi to 5000 places. A boss once needed something to see if the vendor really did upgrade our

Re: Backup and Restore Strategies For Z/Linux

2007-07-09 Thread Thomas Kern
True, being used from the 'outside' of a linux system, it must be used when the target system is logged off. But the existence of these tools indicates that it is possible to access linux files from other operating systems and a backup/restore process could be written (at least one person knows

Sample mono (aspx) code ?

2007-06-19 Thread Thomas Kern
I have installed the mono rpms to a SLES10 system, did a miminal configuration for apache2 and started it up. So far so good. What I need now is a sample .aspx program so I can show the doubting customer that ASP on linux/mainframe really works. I tried a sample program from ASP101 but kept

Active Server Pages from Apache2 under SLES 9/10 ?

2007-06-01 Thread Thomas Kern
I have a customer currently using our linux under z/VM to host multiple websites. All sites are simple static html, jpg, and pdf files. He is looking into using another office's RedDot system for content management and Department-wide lookfeel standards. The RedDot admins say that in order to

IBM Tivoli Monitoring (ITM) Monitoring Server and Portal Server

2007-05-30 Thread Thomas Kern
We are looking at putting these two components into linux servers on our z890 IFL. So far I have only installed the 64bit versions of SLES 9 10. Does anyone have any hints/warnings/horror_stories about this? Any recommendations for the installation of the 31bit SLES9? /Tom Kern /301-903-2211

Re: IBM Tivoli Monitoring (ITM) Monitoring Server and Portal Server

2007-05-30 Thread Thomas Kern
Unfortunately, Chapter 3 of the ITM_Install.pdf that I have been given has a chart of supported Operating systems for each of the components and neither of these is supported on any 64bit zSeries system and nothing newer than SLES9. SLES9 in okay because I have to have that for Oracle, but I

Minimum SLES9 packages for Oracle10

2007-05-14 Thread Thomas Kern
I currently have Oracle10 running in a SLES9 system that was built to be a general purpose system with a shared /usr. A system for Oracle or Apache2 or Samba or other file/data manipulations. Now I would like to restrict this system to just an Oracle workload. Does anyone have a list of the

Multiple volumes with PAV ( was: dasd (3390) model usable space)

2007-05-09 Thread Thomas Kern
Thanks Dave Mark for leading to the next topic. I have had to try putting multiple PAVed volumes together for a larger filesystem for an Oracle database. This is to be under SLES9. I found some IBM redpieces but they all show an example of a single PAVed volume. Is there better documentation

Re: Assigning/Tracking Host names

2007-05-01 Thread Thomas Kern
The current DIRMAINT has special user-defined fields called TAGS. They can be created, modified, deleted by standard DIRMAINT commands, not just get|edit|replace. snipped from DIRMAINT DEFINESTAG command Use the DEFINESTAG operand of the DIRMAINT command to manipulate user defined tagged

Re: Crypto CPACF enablement

2007-04-26 Thread Thomas Kern
Is there a verification program that can be run in a SLES 9/10 guest to check the functionality of the CPACF / Coprocessor / Accelerator ? --- LINUX-390@VM.MARIST.EDU [EMAIL PROTECTED] wrote: Kind of stuck on this one. Had the CE come out and enable the Crypto co-processor CPACF feature code

Re: Crypto CPACF enablement

2007-04-26 Thread Thomas Kern
Since the z90crypt package does not seem to support the new instructions provided by the CPACF feature, this seems like a new niche for an enterprising third-party. A fast data encryption/decryption program that supports AES is always helpful on U.S. government computer systems, even linux under

Re: Crypto CPACF enablement

2007-04-26 Thread Thomas Kern
Okay. That sounds better. So all of my OpenSSL processing already uses the new KM/KMC instructions. /Tom Kern /301-903-2211 --Original Message--- From: Alan Altmark [EMAIL PROTECTED] There is confusion. z90crypt operates the crypto cards. That's its sole

Re: Backup Restore

2007-03-28 Thread Thomas Kern
Are you looking for Disaster Recovery backups of z/VM and Linux DASD? Or are you looking for file level backup/restore for these systems? For DR purposes, DDR or other programs can dump/restore all of your DASD to VTS tapes. Mounting the VTS tapes requires DFSMS/RM and is enhanced by tape

Re: Graphing program?

2007-03-21 Thread Thomas Kern
I use GNUPLOT under windows to interactively get my plot/chart the way I like it, then I can transfer those control statements to a linux virtual machine for an automated process. Such as a nightly FTP of VM performance data to the linux virtual machine where a CRON job runs GNUPLOT using the set

Re: Root file system on ramdisk

2007-03-07 Thread Thomas Kern
I cannot say if anyone has done it nor that it should be done for a production workload, but I would like to see a 'recovery' system packaged in an NSS so that I can quickly IPL a known system from within a broken instance, fix the broken stuff and then IPL the fixed system. Much like sticking a

Re: full screen editor and SSH

2007-02-20 Thread Thomas Kern
I second this recommendation for using Midnight Commander's edit function. You can use it outside of the MC file/directory listing by using the mcedit command. it is simple, responsive and uses some PF keys to get you through things. /Tom Kern --- Terry Spaulding [EMAIL PROTECTED] wrote: If

Re: TN3270 Emulator under Linux

2007-01-16 Thread Thomas Kern
I hope you can build it with SSL support just in case he needs to run secured sessions. That feature is why I have x3270 on a windows image here at home. We do not allow unsecured tn3270 to our mainframe. /Tom Kern --- David Boyes [EMAIL PROTECTED] wrote: Does anyone know if there is any

Re: TN3270 Emulator under Linux

2007-01-16 Thread Thomas Kern
Sorry, but IBM does not provide an SSH daemon for their z/VM system. /Tom Kern --- John Summerfield [EMAIL PROTECTED] wrote: and presumably ssh and a VPN would do as well. I personally run openvpn which uses UDP (TCP is possible too) and, other than the open UDP port, doesn't require any

Re: CMSDDR-format Linux files. Was: SLES10 Install kernel panic

2006-11-28 Thread Thomas Kern
--- David Boyes [EMAIL PROTECTED] wrote: ... snipped ... 1) Bandwidth -- 2) Reliability -- 3) What happens every time they release a new Intel version -- You can already get that. Heck, *we* supply a cheap install server in CMSDDR format that works equally well for Debian or RH/SuSE.

Re: z/VM maintenance recommendations

2006-10-17 Thread Thomas Kern
My first suggestion is to get subscribed to the IBMVM listserv at LISTSERV.UARK.EDU Now for your maintenance, it is nicer on z/VM than with z/OS because you do not need another LPAR for testing. YOu can have cloned volumes or reserved maintenance volumes owned by a class G virtual machine and you

Re: PuTTY Question

2006-10-13 Thread Thomas Kern
It should not be too hard to create a myyast script to set TERM=linux, run yast and reset TERM to its original value. Then mc gets to work with TERM=xterm and yast sees its TERM=linux setting. It doesn't matter that PuTTY still thinks it is using xterm. /Tom Kern --- Leland Lucius [EMAIL

Re: OpenSSH Oddity

2006-09-23 Thread Thomas Kern
Maybe some difference in the sshd/pam configurations? --- LINUX-390@VM.MARIST.EDU [EMAIL PROTECTED] wrote: One other item of interest. If I try to connect using keys, and not a password, things work just fine. But, as I said, when I am not using keys, I don't even get prompted for a password,

Re: How to signal a Linux guest from z/VM?

2006-09-07 Thread Thomas Kern
I was talking about the source of the SMSG that has arrived at my Linux service virtual machine. Sources like OPERATOR, MAINT, VMUTIL, not the anonymous userids (HACKER1, HACKER2, HACKER3) that are on the less properly administrated systems. Inside the Linux service virtual machine, there are also

Re: How to signal a Linux guest from z/VM?

2006-09-06 Thread Thomas Kern
I have suggested before that a Linux service virtual machine should have a facility to accept SMSGs, validate the origin against an authorized user list and process the content appropriately for that SVM. The response has generally been that is a dinosaur-style mainframe thing that doesn't belong

Re: How to signal a Linux guest from z/VM?

2006-09-06 Thread Thomas Kern
That's why I like using something internal to the zSeries for zSeries communications and automation. The source of the data can be trusted to not be spoofed so you can authenticate that against a table of authorized users and be safe. With the VMCF protocal (SMSG is just a commandline SENDX,

Re: /dev/random

2006-08-21 Thread Thomas Kern
I was never able to generate GPG or ssh public/private personal keys because of the lack of entropy on my basically idle system. I had to generate all of the personal keys down on my PC and upload them for use under Linux or z/OS. /Tom Kern --- Arty Ecock [EMAIL PROTECTED] wrote: Hi, I

Logging server ? (was Re: Small Mail Transport Agent)

2006-08-03 Thread Thomas Kern
This sounds like a good idea for another linux appliance. A centralized logging and log-analysis server could be a nice drop-in appliance for a fledgling penguin network. One spot to accumulate logs, rotate logs, analyze logs and archive logs. Sounds much better than having to configure each

Re: Bad Linux backups

2006-07-24 Thread Thomas Kern
We have used DFDSS, DDR and PIPEDDR to backup VM volumes containing Linux data. Inside the Linux systems, we use TSM for filelevel restores. Does Bacula support encryption of the data on tape? /Tom Kern /301-903-2211 From: David Boyes [EMAIL PROTECTED] What is everyone using for Linux

Re: Bad Linux backups

2006-07-24 Thread Thomas Kern
For my SLES9 systems, I use 'SIGNAL SHUTDOWN FOR userx WITHIN 120' to bring the servers down. For my older TurboLinux systems, I use SCIF to enter a 'SHUTDOWN -H NOW' command at the server's virtual console. Once all the Linus systems are down, I run the backups and use XAUTOLOG to initiate each

Bacula ( was Re: Bad Linux Backup)

2006-07-24 Thread Thomas Kern
So Bacula does NOT provide for the encryption of data on its own tapes whether running on zSeries or x86? The encryption of off-site backup tapes is a matter of discussion for all-platforms, not just our mainframe. /Tom Kern /301-903-2211 From: David Boyes [EMAIL PROTECTED] Does Bacula

Re: Looking for some 'alternatives'

2006-06-02 Thread Thomas Kern
My way out of this problem was given by our Network/Cyber securiity people. They don't want any clear-text FTP. It must be encrypted so I gave the web content managers a copy of WinSCP, told them to save all the html as local files and use WinSCP to upload them to our Linux system. I am not sure

Re: Logical Volume Manager

2006-05-31 Thread Thomas Kern
I currently shutdown or linux guests and do full volume DDR backup of all DASD. At our next DR exercise, I am going to see if recreating the LVM volumes from scratch and restoring the data from TSM on z/OS will be less time. If this is less time than DDR, then I will be able to reduce my DDR

Re: Tom Shepherd - in IBM Meeting in Dallas April 24-26

2006-04-30 Thread Thomas Kern
I use Yahoo for these lists so that they will not flood my client's blackberry with messages. My client also blocks access to the public web email services. My solution is to view the three main lists I am interested in via their listserv web interfaces. I can read and reply to these messages from

  1   2   >