INFO-VAX Fri, 11 Apr 2008 Volume 2008 : Issue 203 Contents: analyze/audit options to display password Re: analyze/audit options to display password Re: analyze/audit options to display password Re: analyze/audit options to display password Re: analyze/audit options to display password Re: analyze/audit options to display password change password on node 1 from node 2 Re: change password on node 1 from node 2 Re: change password on node 1 from node 2 Re: change password on node 1 from node 2 Re: change password on node 1 from node 2 Re: change password on node 1 from node 2 Re: change password on node 1 from node 2 Re: change password on node 1 from node 2 Re: change password on node 1 from node 2 Changes to VMS patch procedures ? Decnet IV Re: Decnet IV Re: Decnet IV Re: Decnet IV Re: Decnet IV Re: Decnet IV Re: Decnet IV Re: Divining the full pathname of a file, all logicals translated Forms and CDD OpenVMS I64 Four CPU ES40 hanging Re: Four CPU ES40 hanging Re: Four CPU ES40 hanging Re: Four CPU ES40 hanging Re: Four CPU ES40 hanging Re: Four CPU ES40 hanging Re: Four CPU ES40 hanging Re: Four CPU ES40 hanging Re: Four CPU ES40 hanging Re: Longtime VMS system manager/programmer available Re: Longtime VMS system manager/programmer available Re: Longtime VMS system manager/programmer available OpenVMS Boot Camp Update Re: Orange Light on SCSI drive Re: Orange Light on SCSI drive Re: Php invented by a former DECcie ? Re: Php invented by a former DECcie ? Re: Problem with Multinet cluster service names. Re: Problem with Multinet cluster service names. remove expired licences from the database Re: remove expired licences from the database Re: remove expired licences from the database Re: remove expired licences from the database Re: set audit/listener Re: set audit/listener SOLVED: Re: change password on node 1 from node 2 vms 8.3 openssl cert expiration ---------------------------------------------------------------------- Date: Thu, 10 Apr 2008 23:26:03 -0700 (PDT) From: hdrechsel Subject: analyze/audit options to display password Message-ID: <061b30a4-d002-4c26-9f5d-bd92678738d0@y21g2000hsf.googlegroups.com> Hi, we are running VMS 7.2-1. Since we are frequently experiencing breakin attempts from outside via ssh, we are interested in an analysis of the analyze/audit tool. If you use: $ analyze/audit/event=logfail/full you get information of this kind: ----------------------------------------------------------------------- Security alarm (SECURITY) and security audit (SECURITY) on A400, system id: 1424 Auditable event: Network login failure Event time: 1-APR-2008 10:22:39.29 PID: 2020EE66 Process name: TCPIP$FTPC00001 Username: oracle Process owner: [TCPIP$AUX,TCPIP$FTP] Image name: A400$DKA0:[SYS0.SYSCOMMON.] [SYSEXE]LOGINOUT.EXE Status: %LOGIN-F-NOTVALID, user authorization failure ----------------------------------------------------------------------- But I know that there must also be a way to display the passwords used for the breakin trials. Could please anybody provide the correct options necessary to output passwords? Thanks, Horst -- ******************************************************************* Horst Drechsel drechsel_at_sternwarte_dot_uni-erlangen_dot_de Dr. Remeis Observatory Astronomical Institute Phone: +49-951-95222-15 University Erlangen-Nuernberg Fax: +49-951-95222-22 Sternwartstr. 7, D-96049 Bamberg, Germany ******************************************************************* ------------------------------ Date: Fri, 11 Apr 2008 09:38:42 +0100 From: "Richard Brodie" Subject: Re: analyze/audit options to display password Message-ID: "hdrechsel" wrote in message news:061b30a4-d002-4c26-9f5d-bd92678738d0@y21g2000hsf.googlegroups.com... > $ analyze/audit/event=logfail/full > > you get information of this kind: > ... > But I know that there must also be a way to display the passwords $ analyze/audit/event=breakin/full ------------------------------ Date: Fri, 11 Apr 2008 02:12:57 -0700 (PDT) From: hdrechsel Subject: Re: analyze/audit options to display password Message-ID: <0a5cfe58-23f2-47af-beb8-efc8c4601a39@24g2000hsh.googlegroups.com> On Apr 11, 10:38 am, "Richard Brodie" wrote: > "hdrechsel" wrote in message > > news:061b30a4-d002-4c26-9f5d-bd92678738d0@y21g2000hsf.googlegroups.com... > > > $ analyze/audit/event=logfail/full > > > you get information of this kind: > > ... > > But I know that there must also be a way to display the passwords > > $ analyze/audit/event=breakin/full Many thanks for your reply, but $ analyze/audit/event=breakin/full does not show any information in case of unsuccessful breakin attempts, while $analyze/audit/event=logfail/full gives you the trial username, but not the password used for the breakin attempt. I remember that long time ago I used the analyze/ audit command with respective qualifiers such that it also provided the passwords, but cannot verify any more the relevant input qualifiers. Regards, Horst ------------------------------ Date: Fri, 11 Apr 2008 08:28:27 -0700 (PDT) From: Ken.Fairfield@gmail.com Subject: Re: analyze/audit options to display password Message-ID: On Apr 11, 2:12 am, hdrechsel wrote: > On Apr 11, 10:38 am, "Richard Brodie" wrote: > > > "hdrechsel" wrote in message > > >news:061b30a4-d002-4c26-9f5d-bd92678738d0@y21g2000hsf.googlegroups.com... > > > > $ analyze/audit/event=logfail/full > > > > you get information of this kind: > > > ... > > > But I know that there must also be a way to display the passwords > > > $ analyze/audit/event=breakin/full > > Many thanks for your reply, but > > $ analyze/audit/event=breakin/full > > does not show any information in case of unsuccessful breakin > attempts, while > > $analyze/audit/event=logfail/full > > gives you the trial username, but not the password used for the > breakin attempt. I remember that long time ago I used the analyze/ > audit > command with respective qualifiers such that it also provided the > passwords, but cannot verify any more the relevant input qualifiers. I suggest you search through the archives of this group for discussions of intrusion detection/break-in evasion and what gets written to the security.audit$journal, the accountng.dat file, and/or the OPERATOR.LOG. My faulty memory is telling me that the password is *not* displayed/recorded while the attempts are still classified as SUSPECT, but they are once the attempt becomes an INTRUDER. Various combinations of LGI_BRK_LIM and LGI_RETRY_LIM can get the SUSPECTs to INTRUDER status sooner or later... -Ken ------------------------------ Date: Fri, 11 Apr 2008 17:19:25 +0100 From: "Richard Brodie" Subject: Re: analyze/audit options to display password Message-ID: wrote in message news:b20ffd0c-28c3-448a-b7b0- > My faulty memory is telling me that the password is *not* > displayed/recorded while the attempts are still classified > as SUSPECT, but they are once the attempt becomes > an INTRUDER. I tested before I posted earlier, and for me the audit log writes logfail records until intrusion avoidance kicks in, then writes breakin ones which contain the password. If Horst isn't getting any breakins, then I guess either they aren't being audited, or the intrusion threshold hasn't been reached. It depends on exactly what gets written to the intrusion record whether multiple events accumulate; I think earlier TCPIP services versions may have used ephemeral device names. ------------------------------ Date: Fri, 11 Apr 2008 19:22:32 +0200 From: "P. Sture" Subject: Re: analyze/audit options to display password Message-ID: In article , Ken.Fairfield@gmail.com wrote: > My faulty memory is telling me that the password is *not* > displayed/recorded while the attempts are still classified > as SUSPECT, but they are once the attempt becomes > an INTRUDER. Various combinations of LGI_BRK_LIM > and LGI_RETRY_LIM can get the SUSPECTs to > INTRUDER status sooner or later... My memory is telling me that there have been complaints about passwords being available in the audit report. Here's one example: --- start quote --- I can think of some other 'features' that I'd rather be without. In particular, including incorrect passwords within audit logs is not the brightest thing to do unless you'd like anyone with access to VMS audi logs to possibly access other VMS or non-VMS systems using the username and recorded 'incorrect' password that's in the audit logs. --- end quote --- -- Paul Sture Sue's OpenVMS bookmarks: http://eisner.encompasserve.org/~sture/ovms-bookmarks.html ------------------------------ Date: Fri, 11 Apr 2008 13:33:05 +0100 From: Anton Shterenlikht Subject: change password on node 1 from node 2 Message-ID: <20080411123305.GA1876@mech-aslap33.men.bris.ac.uk> My password expired on node 1 in a vms cluster, so I cannot connect with ssh (old problem). I can connect to node 2 using system account. Can I change a system or an ordinary user password on node 1 from node 2? I tried SYSMAN, but cannot see how to do it. I'm also thinking about copying SYSUAF.DAT from node 1 to node 2, running AUTHORIZE on it to change the password, and then sending it back to node 1. Is that a good idea? I can, of course, do it from the console, if everytinkg else fails. many thanks anton -- Anton Shterenlikht Room 2.6, Queen's Building Mech Eng Dept Bristol University University Walk, Bristol BS8 1TR, UK Tel: +44 (0)117 928 8233 Fax: +44 (0)117 929 4423 ------------------------------ Date: Fri, 11 Apr 2008 08:59:21 -0400 From: "Ken Robinson" Subject: Re: change password on node 1 from node 2 Message-ID: <7dd80f60804110559q1ddabf4dlba07d4aa96b16d7f@mail.gmail.com> On Fri, Apr 11, 2008 at 8:33 AM, Anton Shterenlikht wrote: > My password expired on node 1 in a vms cluster, so I cannot connect > with ssh (old problem). I can connect to node 2 using system account. > Can I change a system or an ordinary user password on node 1 from node 2? If your cluster is running with a common sysuaf, then you can change the password from any node in the cluster and it will be changed on all nodes. > > I tried SYSMAN, but cannot see how to do it. > I'm also thinking about copying SYSUAF.DAT from node 1 to node 2, > running AUTHORIZE on it to change the password, and then sending it > back to node 1. Is that a good idea? No that's a bad idea. If someone else changes their password or anything else in node 1's sysuaf between the time you copy it to node 2 and then back to node 1 that change is lost. If you want to use sysman, here's one why to do it if you have a logical name pointing at the sysuaf.dat: $ pipe write sys$output "do mc authorize mod /pass=/nopwdexp" | sysman set env/node=node1 Replace the words within the "<>" with the appropriate strings. Ken ------------------------------ Date: Fri, 11 Apr 2008 15:06:07 +0200 From: "Raf The Cat" Subject: Re: change password on node 1 from node 2 Message-ID: <47ff624d$0$896$ba4acef3@news.orange.fr> hi hanton $ assign node2::sys$system:sysuaf.dat sysuaf $ mc authorize mod ..... best regards "Anton Shterenlikht" a écrit dans le message de news: 20080411123305.GA1876@mech-aslap33.men.bris.ac.uk... > My password expired on node 1 in a vms cluster, so I cannot connect > with ssh (old problem). I can connect to node 2 using system account. > Can I change a system or an ordinary user password on node 1 from node 2? > > I tried SYSMAN, but cannot see how to do it. > I'm also thinking about copying SYSUAF.DAT from node 1 to node 2, > running AUTHORIZE on it to change the password, and then sending it > back to node 1. Is that a good idea? > > I can, of course, do it from the console, if everytinkg else fails. > > many thanks > anton > > -- > Anton Shterenlikht > Room 2.6, Queen's Building > Mech Eng Dept > Bristol University > University Walk, Bristol BS8 1TR, UK > Tel: +44 (0)117 928 8233 > Fax: +44 (0)117 929 4423 > ------------------------------ Date: Fri, 11 Apr 2008 17:00:18 +0100 From: Anton Shterenlikht Subject: Re: change password on node 1 from node 2 Message-ID: <20080411160017.GA3095@mech-aslap33.men.bris.ac.uk> On Fri, Apr 11, 2008 at 03:06:07PM +0200, Raf The Cat wrote: > hi hanton > > $ assign node2::sys$system:sysuaf.dat sysuaf > $ mc authorize mod ..... mc is not a DCL command, is it? I can't find any info on mc. thanks anton -- Anton Shterenlikht Room 2.6, Queen's Building Mech Eng Dept Bristol University University Walk, Bristol BS8 1TR, UK Tel: +44 (0)117 928 8233 Fax: +44 (0)117 929 4423 ------------------------------ Date: Fri, 11 Apr 2008 12:20:15 -0400 From: "Ken Robinson" Subject: Re: change password on node 1 from node 2 Message-ID: <7dd80f60804110920g532eff1cw3c19c9f482de0df9@mail.gmail.com> On Fri, Apr 11, 2008 at 12:00 PM, Anton Shterenlikht wrote: > On Fri, Apr 11, 2008 at 03:06:07PM +0200, Raf The Cat wrote: > > hi hanton > > > > $ assign node2::sys$system:sysuaf.dat sysuaf > > $ mc authorize mod ..... > > mc is not a DCL command, is it? I can't find any info on mc. "mc" is short for "mcr" which is a throwback to the old RSX emulator days and still works to invoke programs. Doing: $ auth :== $authorize $ auth s/br * and $ mc authorize s/br * will do the same thing (assuming you've defined the sysuaf logical name to point to your sysuaf.dat file or you're running the command from the directory where your sysuaf.dat file resides.) Ken ------------------------------ Date: Fri, 11 Apr 2008 12:53:21 -0400 From: "Richard B. Gilbert" Subject: Re: change password on node 1 from node 2 Message-ID: Anton Shterenlikht wrote: > On Fri, Apr 11, 2008 at 03:06:07PM +0200, Raf The Cat wrote: >> hi hanton >> >> $ assign node2::sys$system:sysuaf.dat sysuaf >> $ mc authorize mod ..... > > mc is not a DCL command, is it? I can't find any info on mc. > > thanks > anton > Try "MCR". "MC" is just an abbreviation. MCR was an acronym for Monitor Console Routine. It came from one or more of the PDP-11 operating systems. In recent versions of VMS, say 4.0 and later, it's a synonym for RUN SYS$SYSTEM: -- Here, there be dragons. ------------------------------ Date: Fri, 11 Apr 2008 13:06:52 -0400 From: "Ken Robinson" Subject: Re: change password on node 1 from node 2 Message-ID: <7dd80f60804111006h472c381o5c00f37dc79cccc9@mail.gmail.com> On Fri, Apr 11, 2008 at 12:53 PM, Richard B. Gilbert wrote (in part): > Try "MCR". "MC" is just an abbreviation. MCR was an acronym for Monitor > Console Routine. It came from one or more of the PDP-11 operating systems. > In recent versions of VMS, say 4.0 and later, it's a synonym for RUN > SYS$SYSTEM: No, it's not a synonym for RUN SYS$SYSTEM. When you use the MCR command to invoke a program, you can pass parameters to the program on the command line. You can not do that with the RUN command. It is more of a shortcut for defining a foreign command. Ken ------------------------------ Date: Fri, 11 Apr 2008 13:19:50 -0400 From: "Richard B. Gilbert" Subject: Re: change password on node 1 from node 2 Message-ID: Ken Robinson wrote: > On Fri, Apr 11, 2008 at 12:53 PM, Richard B. Gilbert > wrote (in part): > >> Try "MCR". "MC" is just an abbreviation. MCR was an acronym for Monitor >> Console Routine. It came from one or more of the PDP-11 operating systems. >> In recent versions of VMS, say 4.0 and later, it's a synonym for RUN >> SYS$SYSTEM: > > No, it's not a synonym for RUN SYS$SYSTEM. When you use the MCR > command to invoke a program, you can pass parameters to the program on > the command line. You can not do that with the RUN command. It is more > of a shortcut for defining a foreign command. > > Ken c/synonym/substitute/ It saves some typing! ------------------------------ Date: Fri, 11 Apr 2008 10:42:46 -0700 (PDT) From: BaxterD@tessco.com Subject: Re: change password on node 1 from node 2 Message-ID: On Apr 11, 8:33=A0am, Anton Shterenlikht wrote: > My password expired on node 1 in a vms cluster, so I cannot connect > with ssh (old problem). I can connect to node 2 using system account. > Can I change a system or an ordinary user password on node 1 from node 2? > > I tried SYSMAN, but cannot see how to do it. > I'm also thinking about copying SYSUAF.DAT from node 1 to node 2, > running AUTHORIZE on it to change the password, and then sending it > back to node 1. Is that a good idea? > > I can, of course, do it from the console, if everytinkg else fails. > > many thanks > anton > > -- > Anton Shterenlikht > Room 2.6, Queen's Building > Mech Eng Dept > Bristol University > University Walk, Bristol BS8 1TR, UK > Tel: +44 (0)117 928 8233 > Fax: +44 (0)117 929 4423 Returning to your original problem, I think the answer is in the out put Below, LLAMA is booting, sends request to DONKEY, however it joins the cluster as OKAPI, vis. "%CNXMAN, Now a VMScluster member -- system OKAPI" This implies to me, that LLAMA is booting from the wrong root, i.e. that the BOOT_OSFLAGS is incorrectly set at the console level on LLAMA. If LLAMA is booting from SYS0 root, BOOT_OSFLAGS should be 0,0 If LLAMA is booting from SYS1 root, BOOT_OSFLAGS should be 1,0 If LLAMA is booting from SYS2 root, BOOT_OSFLAGS should be 2,0 etc, etc (or should it be the other way around) I assume that OKAPI is on SYS0, since it is the original Alpha node. If LLAMA boots with boot flags set to 0,0 it will try to come up as OKAPI, which is a problem since OKAPI is already up. Dave. on LLAMA during booting ******************* %CNXMAN, Sending VMScluster membership request to system DONKEY %CNXMAN, Now a VMScluster member -- system OKAPI %STDRV-I-STARTUP, OpenVMS startup begun at 7-SEP-2007 15:49:09.14 %CNXMAN, Lost connection to system DONKEY %PEA0, Port has Closed Virtual Circuit - REMOTE NODE OKAPI %CNXMAN, Quorum lost, blocking activity ------------------------------ Date: 11 Apr 2008 11:41:15 GMT From: Simon Clubley Subject: Changes to VMS patch procedures ? Message-ID: <47ff4e5b$0$90273$14726298@news.sunsite.dk> The following text has appeared in the latest ECO patch lists. |Note: |Because of scheduled changes to the patch kit process, UPDATE kits that |had been scheduled for release during June 2008 have been cancelled. The |next scheduled release of OpenVMS Update patch kits is September 2008. |The changes to the patch process are internal and will not change the |content or structure of the patch kits. Would anyone from HP care to comment on the nature of these changes ? In particular, can anyone give an assurance that we are not going to see a repeat of the patch fiasco that occurred in the early UCX 4.x timeframe ? Thanks, Simon. -- Simon Clubley, clubley@remove_me.eisner.decus.org-Earth.UFP Microsoft: Bringing you 1980's technology to a 21st century world ------------------------------ Date: Thu, 10 Apr 2008 23:55:58 -0700 (PDT) From: denis.fayaud@free.fr Subject: Decnet IV Message-ID: We have just received a renewed DS15A to replace an old AlphaServer 2100. The problem is that it has been shipped with Decnet Plus allready installed. In my case, I really need Decnet IV and I don't know the fair way to return back from Decnet Plus to Decnet IV. What I found in the news group didn't show me the way ! Any help please ? D.fayaud ------------------------------ Date: Fri, 11 Apr 2008 10:24:07 +0200 From: "P. Sture" Subject: Re: Decnet IV Message-ID: In article , denis.fayaud@free.fr wrote: > We have just received a renewed DS15A to replace an old AlphaServer > 2100. The problem is that it has been shipped with Decnet Plus > allready installed. In my case, I really need Decnet IV and I don't > know the fair way to return back from Decnet Plus to Decnet IV. What I > found in the news group didn't show me the way ! > Any help please ? > D.fayaud This is what my system with DECnet Plus installed shows: $ product show product decnet* ------------------------------------ ----------- --------- PRODUCT KIT TYPE STATE ------------------------------------ ----------- --------- DEC AXPVMS DECNET_OSI V8.3 Full LP Installed ------------------------------------ ----------- --------- Run the command on your system to see what you have, then use the PRODUCT REMOVE command, e.g.: $ product remove DECNET_OSI -- Paul Sture Sue's OpenVMS bookmarks: http://eisner.encompasserve.org/~sture/ovms-bookmarks.html ------------------------------ Date: Fri, 11 Apr 2008 09:49:28 -0600 From: Keith Parris Subject: Re: Decnet IV Message-ID: denis.fayaud@free.fr wrote: > We have just received a renewed DS15A to replace an old AlphaServer > 2100. The problem is that it has been shipped with Decnet Plus > allready installed. In my case, I really need Decnet IV and I don't > know the fair way to return back from Decnet Plus to Decnet IV. Easiest way is probably to do as I have often done: boot from the OpenVMS installation CD, and then using the menu of options, first remove the layered product DECnet-Plus or DECnet/OSI or whatever they call DECnet Phase V on the CD and then again use the menus to install the layered product DECnet Phase IV. ------------------------------ Date: Fri, 11 Apr 2008 08:52:36 -0700 (PDT) From: Ken.Fairfield@gmail.com Subject: Re: Decnet IV Message-ID: <4d8bd2ee-e844-41f9-b236-32a02a5b3961@c19g2000prf.googlegroups.com> On Apr 11, 1:24 am, "P. Sture" wrote: > In article > , > > denis.fay...@free.fr wrote: > > We have just received a renewed DS15A to replace an old AlphaServer > > 2100. The problem is that it has been shipped with Decnet Plus > > allready installed. In my case, I really need Decnet IV and I don't > > know the fair way to return back from Decnet Plus to Decnet IV. What I > > found in the news group didn't show me the way ! > > Any help please ? > > D.fayaud > > This is what my system with DECnet Plus installed shows: > > $ product show product decnet* > ------------------------------------ ----------- --------- > PRODUCT KIT TYPE STATE > ------------------------------------ ----------- --------- > DEC AXPVMS DECNET_OSI V8.3 Full LP Installed > ------------------------------------ ----------- --------- > > Run the command on your system to see what you have, then use the > PRODUCT REMOVE command, e.g.: > > $ product remove DECNET_OSI I think Paul's train of thought got interrupted... You need to be sure you have the O/S installation CD's. If you do, you can do Paul's PRODUCT REMOVE command to deinstall Decnet V, then reboot, then install Decnet IV from the CDs. Obviously, if you don't have the CDs, removing Decnet V won't, by itself, get you to Decnet IV and you'll be left without any Decnet. On the other hand, Decnet V will inter-operate with Decnet IV nodes. What functions of Decnet IV do you specifically require that are not present in Decnet V? -Ken ------------------------------ Date: Fri, 11 Apr 2008 18:12:06 +0200 From: zembla7 Subject: Re: Decnet IV Message-ID: <47ff8dd6$0$24600$426a34cc@news.free.fr> Keith Parris wrote: > denis.fayaud@free.fr wrote: >> We have just received a renewed DS15A to replace an old AlphaServer >> 2100. The problem is that it has been shipped with Decnet Plus >> allready installed. In my case, I really need Decnet IV and I don't >> know the fair way to return back from Decnet Plus to Decnet IV. > > Easiest way is probably to do as I have often done: boot from the > OpenVMS installation CD, and then using the menu of options, first > remove the layered product DECnet-Plus or DECnet/OSI or whatever they > call DECnet Phase V on the CD and then again use the menus to install > the layered product DECnet Phase IV. That's what I did and it worked well ! great thanks to all four the contributions d.fayaud ------------------------------ Date: Fri, 11 Apr 2008 12:47:13 -0400 From: "Richard B. Gilbert" Subject: Re: Decnet IV Message-ID: Ken.Fairfield@gmail.com wrote: > On Apr 11, 1:24 am, "P. Sture" wrote: >> In article >> , >> >> denis.fay...@free.fr wrote: >>> We have just received a renewed DS15A to replace an old AlphaServer >>> 2100. The problem is that it has been shipped with Decnet Plus >>> allready installed. In my case, I really need Decnet IV and I don't >>> know the fair way to return back from Decnet Plus to Decnet IV. What I >>> found in the news group didn't show me the way ! >>> Any help please ? >>> D.fayaud >> This is what my system with DECnet Plus installed shows: >> >> $ product show product decnet* >> ------------------------------------ ----------- --------- >> PRODUCT KIT TYPE STATE >> ------------------------------------ ----------- --------- >> DEC AXPVMS DECNET_OSI V8.3 Full LP Installed >> ------------------------------------ ----------- --------- >> >> Run the command on your system to see what you have, then use the >> PRODUCT REMOVE command, e.g.: >> >> $ product remove DECNET_OSI > > I think Paul's train of thought got interrupted... > > You need to be sure you have the O/S installation CD's. > If you do, you can do Paul's PRODUCT REMOVE > command to deinstall Decnet V, then reboot, then > install Decnet IV from the CDs. > > Obviously, if you don't have the CDs, removing > Decnet V won't, by itself, get you to Decnet IV > and you'll be left without any Decnet. > > On the other hand, Decnet V will inter-operate > with Decnet IV nodes. What functions of > Decnet IV do you specifically require that are > not present in Decnet V? > > -Ken > Well, if he's like me, he finds NCP a real burden. The documentation for DecNet V was a real disaster. The author was so damned proud of all the layers, stacks, towers and all the rest of the garbage that I'm not sure he ever did get around to telling me how to do the basic management tasks. I wrestled with it when I absolutely had to and ran Phase IV otherwise. All I ever wanted was DECnet over Ethernet but DECnet V assumed that I needed to support everything from tin cans and string to satellite links. Among other sins, it turned a simple thing like setting the correct time into a horrendous task! I'm STILL running Phase IV, if only on my home machines. ------------------------------ Date: Fri, 11 Apr 2008 19:25:12 +0200 From: "P. Sture" Subject: Re: Decnet IV Message-ID: In article <4d8bd2ee-e844-41f9-b236-32a02a5b3961@c19g2000prf.googlegroups.com>, Ken.Fairfield@gmail.com wrote: > I think Paul's train of thought got interrupted... Thanks for being polite Ken :-) Your assessment is 100% correct, for I did get interrupted. -- Paul Sture Sue's OpenVMS bookmarks: http://eisner.encompasserve.org/~sture/ovms-bookmarks.html ------------------------------ Date: Fri, 11 Apr 2008 08:14:45 -0700 (PDT) From: Ken.Fairfield@gmail.com Subject: Re: Divining the full pathname of a file, all logicals translated Message-ID: <5c0174ba-6f4d-4c48-815b-6da8590c4a16@u12g2000prd.googlegroups.com> On Apr 10, 5:08 pm, Fred Bach wrote: [...] > Why not try the following? The idea is to translate DSK7. Note: with this > routine, I believe that DSK7 could even point to a different disk than the > one that SYS$LOGIN is on. > > We use THREE LEXICALS: f$parse, f$file_attributes, and f$fid_to_name . > > $ filename = "DSK7:[OPS.VNEWS.DEC.VNEWS]VNEWS.DOC" > $ _device = f$parse(filename,,,"DEVICE","NO_CONCEAL") > $ _id = f$file_att(filename,"FID") > $ write sys$output f$fid(_device,_id) > RAD1:[DATA.OPS.DSK7.OPS.VNEWS.DEC.VNEWS]VNEWS.DOC;1 1) To satisfy the OP, you still need to run F$Parse against this result (twice) to get the "path", i.e., device:[dir], to the file. 2) We don't have F$Fid on V7.3-2 (and earlier)... -Ken ------------------------------ Date: Fri, 11 Apr 2008 01:50:13 -0700 (PDT) From: denis.holvoet@gmail.com Subject: Forms and CDD OpenVMS I64 Message-ID: I am doing a migration from OpenVMS 7.-2 Alpha to OpenVMS 8.3 I64 I have some minor problems, but actualy I have a big problem : I use Forms and CDD/repository for Alpha forms 3.3 and CDD 7.0A for I64 forms 4.0 with ptach found in ITRC and CDD 7.2.0.2 I have not tested Forms 4.0 in Alpha The forms are created by FORMS TRANSLATE file.IFDL and in the IFDL file there are multiple Copy xxx from dictionary. VMS 7.3-2 OK VMS 8.3 I64 for the first copy it's OK and for the next one I have FORMS-E-CDDEXTRACT,error extracting record xxx from CDD/Plus The record exists, MC DMU list xxx OK If I change the order of the copy in IFDL file, it's the second and after where there is the problem. Do you know this problem and a solution ? Thanks. ------------------------------ Date: Fri, 11 Apr 2008 13:09:44 GMT From: Malcolm Dunnett Subject: Four CPU ES40 hanging Message-ID: Can someone out there refresh my memory on this. I have an ES40 with 4 CPUs. A couple of times in the last few months it has "hung". It falls out of the cluster and won't respond to the console terminal (^P doesn't do anything). Pressing the reset button on the OCP reboots it and it continues to run fine once again. I don' think it's a case of one of the CPUs failing as it never gets the CPUSPINWAIT error (yesterday it was hung for about 5 hours overnight) ISTR a report a few years ago that early versions of ES40s with multiple CPUs showed a problem like this. Does anyone recall if that sounds like the same symptoms? This system has old EV6's in it: CPU ID 0. CPU State rc,pa,pp,cv,pv,pmv,pl CPU Type EV6 Pass 2.3 (21264) PAL Code 1.98-4 Halt PC 00000000.20000000 CPU Revision .... Halt PS 00000000.00001F00 Serial Number AY92637351 Halt Code "Bootstrap or Powerfail" Console Vers V7.3-1 Halt Request "Default, No Action" IIRC you needed at least pass 2.5 to avoid the problem. I've got a set of 667MHz CPUs I can swap in there, but before I try that I'm hoping to verify that this sounds like the problem caused by the earlier CPU revs. Anyone recall? ------------------------------ Date: Fri, 11 Apr 2008 07:03:02 -0700 (PDT) From: Volker Halle Subject: Re: Four CPU ES40 hanging Message-ID: <1d5926b9-2701-48fa-a859-306c085b20d9@a70g2000hsh.googlegroups.com> Malcolm, EV6 Pass 2.3 CPUs are certainly 'suspicious', especially if they show unusual symptoms. Does the system react when pressing the OCP HALT button ? If so, type >>> CRASH to force a crash next time. Was there anything printed on the console terminal preceeding the hang ? Did the connection lost messages get printed ? If one of the CPUs would hang, you'll either get a CPUSPINWAIT or a CPUSANITY bugcheck. Consider to replace the CPUs. Volker. ------------------------------ Date: Fri, 11 Apr 2008 07:53:58 -0700 From: Malcolm Dunnett Subject: Re: Four CPU ES40 hanging Message-ID: <47ff7b88$1@flight> Volker Halle wrote: > Malcolm, > > EV6 Pass 2.3 CPUs are certainly 'suspicious', especially if they show > unusual symptoms. Does the system react when pressing the OCP HALT > button ? I didn't try that. I pressed the reset button. I was in a bit of a panic to get it back up as it's a production system. If so, type >>> CRASH to force a crash next time. Was there > anything printed on the console terminal preceeding the hang ? Nothing on the console terminal (the last thing displayed was a logout message from earlier in the day). Nothing in the OPERATOR.LOG file (last thing was a timestamp from about 1/2 hour before the hang). Did the > connection lost messages get printed ? Do you mean on the other nodes or on the hung node? No connection lost messages on the hung node, the other nodes reported the usual connect lost messages. > > If one of the CPUs would hang, you'll either get a CPUSPINWAIT or a > CPUSANITY bugcheck. That's what I thought. > > Consider to replace the CPUs. > I'll try that tonight. ------------------------------ Date: Fri, 11 Apr 2008 11:11:05 -0400 From: "Richard B. Gilbert" Subject: Re: Four CPU ES40 hanging Message-ID: Malcolm Dunnett wrote: > Volker Halle wrote: >> Malcolm, >> >> EV6 Pass 2.3 CPUs are certainly 'suspicious', especially if they show >> unusual symptoms. Does the system react when pressing the OCP HALT >> button ? > > I didn't try that. I pressed the reset button. I was in a bit of a > panic to get it back up as it's a production system. > It takes a while to write a crash dump but it's worthwhile when your system has crashed. Without that dump, you may never understand WHY it crashed. So two weeks later BOOM! Down you go again. ISTR it's possible to tailor what gets written to a dump and what does not. I wouldn't tailor the dumps until at least one full dump has been saved and analyzed. Most system managers have neither the training, the experience nor the resources to interpret a dump quickly and accurately. It requires a good knowledge of system internals, access to the source listings, and a lot of practice. I used to see about one dump per year with seven systems running. I can do a VERY superficial reading of the dump. I hand the job to the dump weenies in Colorado whenever possible. When you analyze three or four dumps per day, you either get good at it or get another job! ------------------------------ Date: Fri, 11 Apr 2008 11:13:30 -0400 From: "Jilly" Subject: Re: Four CPU ES40 hanging Message-ID: <47ff802f$0$6106$ec3e2dad@news.usenetmonster.com> "Richard B. Gilbert" wrote in message news:qc2dnYdEg7QA4mLanZ2dnUVZ_remnZ2d@comcast.com... > I hand the job to the dump weenies in Colorado whenever possible. When > you analyze three or four dumps per day, you either get good at it or get > another job! > Weenies-R-Us ;*) ------------------------------ Date: Fri, 11 Apr 2008 11:17:04 -0400 From: "Richard B. Gilbert" Subject: Re: Four CPU ES40 hanging Message-ID: Jilly wrote: > > "Richard B. Gilbert" wrote in message > news:qc2dnYdEg7QA4mLanZ2dnUVZ_remnZ2d@comcast.com... >> I hand the job to the dump weenies in Colorado whenever possible. >> When you analyze three or four dumps per day, you either get good at >> it or get another job! >> > > Weenies-R-Us ;*) Do you still work for DEC/Compaq/HP/whatever it will be called next month? ------------------------------ Date: Fri, 11 Apr 2008 08:47:32 -0700 (PDT) From: Ken.Fairfield@gmail.com Subject: Re: Four CPU ES40 hanging Message-ID: On Apr 11, 6:09 am, Malcolm Dunnett wrote: > Can someone out there refresh my memory on this. I have an ES40 with 4 > CPUs. A couple of times in the last few months it has "hung". It falls > out of the cluster and won't respond to the console terminal (^P doesn't > do anything). Pressing the reset button on the OCP reboots it and it > continues to run fine once again. I don' think it's a case of one of the > CPUs failing as it never gets the CPUSPINWAIT error (yesterday it was > hung for about 5 hours overnight) > > ISTR a report a few years ago that early versions of ES40s with multiple > CPUs showed a problem like this. Does anyone recall if that sounds like > the same symptoms? This system has old EV6's in it: > > CPU ID 0. CPU State rc,pa,pp,cv,pv,pmv,pl > CPU Type EV6 Pass 2.3 (21264) > PAL Code 1.98-4 Halt PC 00000000.20000000 > CPU Revision .... Halt PS 00000000.00001F00 > Serial Number AY92637351 Halt Code "Bootstrap or > Powerfail" > Console Vers V7.3-1 Halt Request "Default, No Action" > > IIRC you needed at least pass 2.5 to avoid the problem. I've got a set > of 667MHz CPUs I can swap in there, but before I try that I'm hoping to > verify that this sounds like the problem caused by the earlier CPU revs. > > Anyone recall? I agree with Volker, that the CPUs are suspicious. At my former employer, we had many ES40 clusters in the company, mine was the earliest one purchased (I'm told), and so had early pass EV6's (as did a few other clusters). We did a lot of debug work with HP over precisely the same symptoms: system hangs, no crash dump written, nothing in the error log. We were given extensive instructions on things to capture when this happened (reading LED's, going into the RMC and dumping some registers, etc.). HP finally acknowledged the bug in the CPUs and we put a program in place to upgrade all of them (which eliminated the problem). -Ken ------------------------------ Date: Fri, 11 Apr 2008 12:27:21 -0400 From: "David Turner, Island Computers" Subject: Re: Four CPU ES40 hanging Message-ID: Malcolm Where did you get the memory from? This sounds very much like the memory buffer problems. Bad date codes on the buffer chip (small chip about 2cm long in the middle of the dimm) between 1998 and 38th week of 2001. Caused many weird problems with the ES40 and ES45... Nothing in error log - just hangs and requires reboot. Very strange. -- David B Turner ============================================= Island Computers US Corp PO Box 86 Tybee GA 31328 Toll Free: 1-877 636 4332 x201, Mobile x251 Email: dturner@islandco.com International: 001 706 993 1787 Fax: 912 786 8505 Web: www.islandco.com ============================================= "Malcolm Dunnett" wrote in message news:sqJLj.58936$_v3.25824@edtnps90... > Can someone out there refresh my memory on this. I have an ES40 with 4 > CPUs. A couple of times in the last few months it has "hung". It falls out > of the cluster and won't respond to the console terminal (^P doesn't do > anything). Pressing the reset button on the OCP reboots it and it > continues to run fine once again. I don' think it's a case of one of the > CPUs failing as it never gets the CPUSPINWAIT error (yesterday it was hung > for about 5 hours overnight) > > ISTR a report a few years ago that early versions of ES40s with multiple > CPUs showed a problem like this. Does anyone recall if that sounds like > the same symptoms? This system has old EV6's in it: > > CPU ID 0. CPU State > rc,pa,pp,cv,pv,pmv,pl > CPU Type EV6 Pass 2.3 (21264) > PAL Code 1.98-4 Halt PC 00000000.20000000 > CPU Revision .... Halt PS 00000000.00001F00 > Serial Number AY92637351 Halt Code "Bootstrap or > Powerfail" > Console Vers V7.3-1 Halt Request "Default, No Action" > > IIRC you needed at least pass 2.5 to avoid the problem. I've got a set of > 667MHz CPUs I can swap in there, but before I try that I'm hoping to > verify that this sounds like the problem caused by the earlier CPU revs. > > Anyone recall? ------------------------------ Date: Fri, 11 Apr 2008 12:28:42 -0400 From: "David Turner, Island Computers" Subject: Re: Four CPU ES40 hanging Message-ID: BTW if it turns out to be bad 500mhz cpu let me know I have hundreds of them in stock for almost $0 -- David B Turner ============================================= Island Computers US Corp PO Box 86 Tybee GA 31328 Toll Free: 1-877 636 4332 x201, Mobile x251 Email: dturner@islandco.com International: 001 706 993 1787 Fax: 912 786 8505 Web: www.islandco.com ============================================= "Malcolm Dunnett" wrote in message news:47ff7b88$1@flight... > Volker Halle wrote: >> Malcolm, >> >> EV6 Pass 2.3 CPUs are certainly 'suspicious', especially if they show >> unusual symptoms. Does the system react when pressing the OCP HALT >> button ? > > I didn't try that. I pressed the reset button. I was in a bit of a panic > to get it back up as it's a production system. > > If so, type >>> CRASH to force a crash next time. Was there >> anything printed on the console terminal preceeding the hang ? > > Nothing on the console terminal (the last thing displayed was > a logout message from earlier in the day). Nothing in the OPERATOR.LOG > file (last thing was a timestamp from about 1/2 hour before the hang). > > Did the >> connection lost messages get printed ? > > Do you mean on the other nodes or on the hung node? No connection lost > messages on the hung node, the other nodes reported the usual connect lost > messages. > >> >> If one of the CPUs would hang, you'll either get a CPUSPINWAIT or a >> CPUSANITY bugcheck. > > That's what I thought. > >> >> Consider to replace the CPUs. >> > > I'll try that tonight. ------------------------------ Date: 11 Apr 2008 08:46:57 -0500 From: koehler@eisner.nospam.encompasserve.org (Bob Koehler) Subject: Re: Longtime VMS system manager/programmer available Message-ID: <8MPmJY9CluTL@eisner.encompasserve.org> In article , =?ISO-8859-1?Q?Jan-Erik_S=F6derholm?= writes: > > Just as for any other server-OS on the planet, even 3270 > on MVS is replaced by other client tools, web based or > whatever. VMS is no different than any other server-OS > in this regard. VMS may not be any different from other server OS in this respect, but in many ways as a general purpose OS we find that it is different. ------------------------------ Date: 11 Apr 2008 16:05:11 GMT From: billg999@cs.uofs.edu (Bill Gunshannon) Subject: Re: Longtime VMS system manager/programmer available Message-ID: <669ghnF2j00mdU1@mid.individual.net> In article <7aefd$47fed525$cef8887a$16914@teksavvy.com>, JF Mezei writes: > Arne Vajhøj wrote: >> >> The question is whether it would make sense to port VMS to x86-64 >> in N years if Itanium is dropped. > > Because the installed base of VMS is shrinking, and no marketing is done > to try to grow it, the longer it takes for them to put IA64 out of its > misery, the smaller the remaining installed base will be for VMS. The > smaller it is, the easier it will be to decide to not port VMS beyond IA64. If (and that's a real big if) they decided to port VMS to x86-64, who is left to actually do it? Because of the lack of expertise in things like BLISS and MACRO how much would have to be re-written nthat dreaded "C"? If large portions were written in C by the current crop of programmers, how much of VMS's stability and integrity would be damaged or destroyed? > > It's that simple. HP is trying to give the appearance of taking good > care of VMS when in fact, it is treating it like an elderly person, > allowing it to stay stagnant in its old comfy chesterfield that is > getting narrower and narrower every year. By the time they pull the > plug, there will be very few left to mourn its passing and HP will have > succesfully gotten rid of a pesky product without killing itself in the > process (like DEC and Compaq). I do not think there would be a shortage of people mourning the demise of VMS. I am not what you would call one of the more rabid VMS fanatics, but I would certainly mourn it's passing just as I mourn it's disappearance from academia. bill -- Bill Gunshannon | de-moc-ra-cy (di mok' ra see) n. Three wolves billg999@cs.scranton.edu | and a sheep voting on what's for dinner. University of Scranton | Scranton, Pennsylvania | #include ------------------------------ Date: 11 Apr 2008 13:26:54 -0400 From: brooks@cuebid.zko.hp.nospam (Rob Brooks) Subject: Re: Longtime VMS system manager/programmer available Message-ID: billg999@cs.uofs.edu (Bill Gunshannon) writes: > If (and that's a real big if) they decided to port VMS to x86-64, who is > left to actually do it? Because of the lack of expertise in things like > BLISS and MACRO how much would have to be re-written nthat dreaded "C"? > If large portions were written in C by the current crop of programmers, > how much of VMS's stability and integrity would be damaged or destroyed? IF a port to a different architecture was done, it's almost a given that we would need to call in some hired guns to do things like port the BLISS compiler. It's not clear why this bizarre notion that only new, inexperienced VMS engineers program in C. Some of the more experienced members of VMS engineering are strong advocates of C. Anyone remember "Writing OpenVMS Alpha Device Drivers in C"? And that's a 12-year old book! Nonetheless, a complete rewrite of BLISS and MACRO into C would not likely be the best solution should the likely-never-to-happen port to a different architecture be undertaken. -- Rob Brooks MSL -- Nashua brooks!cuebid.zko.hp.com ------------------------------ Date: Fri, 11 Apr 2008 07:24:25 -0700 (PDT) From: Sue Subject: OpenVMS Boot Camp Update Message-ID: <114bfc3a-5f3b-48c3-8384-dce6ddc484aa@8g2000hsu.googlegroups.com> As promised here is the Boot Camp update for this week which we are happy with. Session Abstracts, Keynotes are on the web site. http://h71000.www7.hp.com/symposium/index.html Current Registration is 135 Scholarships Available HP 5 Scholarship Available Partners 2 Seats remaining 58 Pre-Seminars Thursday - Friday DT Pr-Seminar - two seats - 18 People Monday and Tuesday DT seminar (same session) - 9 seats CIFs Seminar - one seat remaining - Thursday and Friday TCP/IP -Wed Friday - 5 seats remaining Storage session - plenty of seats RTR - plenty of seats. Where are the customers coming from Sweden 20 Russia 19 Netherlands 7 Switzerland 7 England 6 Germany 6 Austria 3 Canada 3 France 2 Ireland 2 Argentina 1 Australia 1 Barbados 1 Belgium 1 Lithuania 1 Norway 1 Scotland 1 US - everyone else ------------------------------ Date: Fri, 11 Apr 2008 14:11:56 +0200 From: Jur van der Burg <"lddriver at digiater dot nl"> Subject: Re: Orange Light on SCSI drive Message-ID: <47ff558c$0$14355$e4fe514c@news.xs4all.nl> The key here is what kind of controller is inside the box. 4100's were fr= equently used with a Mylex raid controller (DR devices) that can show the yellow l= ight, meaning it needs some attention. There are online utilites to check such = a controller. So how are these devices called? (Show dev/full will show more info). Jur. Cross Michael C Mr CIV USAF 53 CSS/SCO wrote: > I have a Vax Alphastation 4100. It has 14 hard drives and one of them = > is showing an orange light. I don=92t have a failure at this point but= =20 > the light has been on for at least a year. When I do a =93show dev/pag= e=94=20 > no errors get reported. Does anyone have advice on what the error migh= t=20 > be? Are the different levels of errors associated with different light= s=20 > on the hard drives? >=20 > I looked at HP and could not find any documentation on the Vax=20 > Alphastation 4100. Anyone else had any luck? >=20 > =20 >=20 > Mike Cross >=20 > =20 >=20 ------------------------------ Date: Fri, 11 Apr 2008 07:33:53 -0700 (PDT) From: sampsal@gmail.com Subject: Re: Orange Light on SCSI drive Message-ID: On Apr 11, 1:11=A0pm, Jur van der Burg <"lddriver at digiater dot nl"> wrote: > The key here is what kind of controller is inside the box. 4100's were fre= quently > used with a Mylex raid controller (DR devices) that can show the yellow li= ght, > meaning it needs some attention. There are online utilites to check such a= > controller. > I've got an Alphaserver 4100 with a KZPAC Mylex 960 controller, and AFAIK the amber (blinking) light on a drive in the RAID came on, it meant that Bad Things. The utility I used for configuring/rebuilding the RAID was called ARCCF.EXE. ------------------------------ Date: Fri, 11 Apr 2008 08:52:59 -0700 From: "Tom Linden" Subject: Re: Php invented by a former DECcie ? Message-ID: On Thu, 10 Apr 2008 20:33:38 -0700, Richard B. Gilbert wrote: > Arne Vajhøj wrote: >> Simon Clubley wrote: >>> On 2008-04-08, Arne Vajhøj wrote: >>>> Simon Clubley wrote: >>>>> AIUI, it's not so much the fact that it's a easy to use language for >>>>> beginners that's the problem, but the fact that it's a easy to use >>>>> language with security tacked on afterwards that's the problem. >>>> Security is not a feature in programming languages. Security depends >>>> on how the code is written. >>>> >>> >>> Strictly speaking, you are correct. >>> >>> However, I would argue that design decisions within the programming >>> language can help with how secure that code is by default. >>> >> > For example, looking at traditional languages, I would suggest that, >> > for programmers of equal capability, code written in Ada is more >> likely >> > to be secure than code written in C. >> I guess you are more talking about robustness than about security. >> A language like Ada prevents various array index out of bounds >> and wild pointers problems resulting in garbage data being >> read, data being overwritten or crashes. >> But PHP has none of those problems ! >> (the dynamically typed characteristics of PHP then creates >> new types of potential programming bugs, but they are difficult >> to compare with C) >> Arne >> > > ISTR that ADA is also strongly typed. It is not easy to store an int > into a float. It can be done but you have to first explain to the > compiler yes, I really, really, mean that. If a function takes two > arguments, you had better supply exactly two. And so on. > > It makes most of the most common screwups extremely difficult. You can > still write bad code in Ada but you really have to work at it. I have > seen exactly one shop that used it! I did a little little work for them > fourteen or fifteen years ago; installing some software > PL/I is the same in this respect, although a bit more liberal in allowing aliasing and making bounds checking programmer's choice as opposed to making it inherent. And yes you can write bad code in any language. -- PL/I for OpenVMS www.kednos.com ------------------------------ Date: 11 Apr 2008 16:18:45 GMT From: billg999@cs.uofs.edu (Bill Gunshannon) Subject: Re: Php invented by a former DECcie ? Message-ID: <669hb5F2j00mdU2@mid.individual.net> In article <47feca98$0$90264$14726298@news.sunsite.dk>, Arne Vajhøj writes: > Bill Gunshannon wrote: >> Does "C" run under an interpretor that let's outsiders run random >> pieces of code (or even just available comands) on the machines >> where it's programs are installed? Does Macro32? Fortran? Get >> the picture? The people who developed PHP built this "wonderful" >> feature into their system. > > In that sense PHP is exactly like C, Macro-32 and Fortran. If the > application gets input from the user and execute it as a command, then > it does just that. No, it's not. If you put something as inocuous as "hello world" in PHP as a CGI on your website (assuming FreeBSD as the host for simplicity) I can use the PHP intertpretor to execute the "fetch" command to download an arbitrary file (I have seen many PHP and Perl telnetd programs used this way) to your web server into any writable directory (like /tmp) and then, unless you have been smart enough to make that writebale directory "no execute", I can run the program using the exact same "hole" in the PHP interpretor. It's not a bug, it's a feature!! > >>> I've never actually used some of the newer languages like PERL, PHP, and >>> doubtless others I've either not heard of or have forgotten. If I can't >>> do it in DCL, Fortran, C, Macro-32, sh, or ksh I can't do it! Someday >>> maybe I'll encounter a problem which none of the tools I'm accustomed to >>> can handle. Then I'll learn a new tool. >>> >>> I've always thought of security being a function of the O/S which does, >>> or should, control who can access files with intent to change them, who >>> can execute a program, who can peek into memory that does not belong to >>> him, etc, etc. >> >> With the exception of ksh I see no scripting languages in your list. >> That's a good thing. I also none of the so called "rapid prototyping" >> languages. That is also a good thing. Nice to see there are still a >> few real profesional programmers left, but I fear we are a rapidly >> dying breed. > > Not at all. > > Languages as Java, C#, C, C++, VB.NET etc. are still very widely > used and will likely continue to be so for decades. > > Languages as Perl, Python, PHP, Ruby etc. are gaining popularity > though. > > Google just announced their Google Application Engine with > Python as their first language supported. And the industry goes one more step downhill. :-( bill -- Bill Gunshannon | de-moc-ra-cy (di mok' ra see) n. Three wolves billg999@cs.scranton.edu | and a sheep voting on what's for dinner. University of Scranton | Scranton, Pennsylvania | #include ------------------------------ Date: Fri, 11 Apr 2008 05:16:18 -0700 (PDT) From: Jim Subject: Re: Problem with Multinet cluster service names. Message-ID: <0cd93e3b-3fe2-413f-8347-e655dda35569@d45g2000hsc.googlegroups.com> On Apr 10, 11:59 pm, Malcolm Dunnett wrote: > I can't get multinet cluster service names to work reliably. It worked > just fine for years in older versions of multinet, but with multinet 5.2 > the domain nameserver doesn't seem to be able to reliably see it. It was > working for a while today but then it quit, eg: > > MALVM9> mu nslook vmscluster.mala.bc.ca localhost > Server: LOCALHOST > Address: 127.0.0.1 > > *** LOCALHOST can't find VMSCLUSTER.MALA.BC.CA: Non-existent host/domain > MALVM9> mu netcon domain show > Connected to NETCONTROL server on "LOCALHOST" > < malvm9.mala.bc.ca Network Control V5.2(10) at Thu 10-Apr-2008 8:49PM-PDT > < Service VMSCLUSTER.MALA.BC.CA: > < Nodename Address Rating > < -------- --------------- ------ > < MALVM3 142.25.103.73 169 > < MALVM9 142.25.103.71 169 > < End of line > > The nameserver does not show the translation of vmscluster even though > the mu netcon domain show displays that the two hosts are both > contributing entries. > > The servers are Alphaservers running VMS 8.3 > > Anyone else seen this problem. Anyone successfully using Multinet > cluster service names with Multinet 5.2? I have just now set up an VMS 8.3 I64 cluster to use DNS load balancing with the cluster service name and experience the same issue that you do. ------------------------------ Date: Fri, 11 Apr 2008 07:56:02 -0700 From: Malcolm Dunnett Subject: Re: Problem with Multinet cluster service names. Message-ID: <47ff7c03$1@flight> Jim wrote: >> >> Anyone else seen this problem. Anyone successfully using Multinet >> cluster service names with Multinet 5.2? > > I have just now set up an VMS 8.3 I64 cluster to use DNS load > balancing with the cluster service name and experience the same issue > that you do. Process Software has confirmed this is a bug. They've opened a defect report (DE 10509). ------------------------------ Date: Fri, 11 Apr 2008 17:07:36 +0100 From: Anton Shterenlikht Subject: remove expired licences from the database Message-ID: <20080411160736.GB3095@mech-aslap33.men.bris.ac.uk> How can I remove all expired licences in bulk from the licence database? The old licences expired in 2007, but I cannot get rid of them. Database, issuer and producer are the same for the old and the new licences. The authorisation is different, but it is unique for each product, so I cannot use /AUTHORIZATION qualifier for bulk removals. Perhaps I should've installed the new licences in a new database? many thanks anton -- Anton Shterenlikht Room 2.6, Queen's Building Mech Eng Dept Bristol University University Walk, Bristol BS8 1TR, UK Tel: +44 (0)117 928 8233 Fax: +44 (0)117 929 4423 ------------------------------ Date: Fri, 11 Apr 2008 16:52:34 +0000 (UTC) From: david20@alpha2.mdx.ac.uk Subject: Re: remove expired licences from the database Message-ID: In article <20080411160736.GB3095@mech-aslap33.men.bris.ac.uk>, Anton Shterenlikht writes: >How can I remove all expired licences in bulk from the licence >database? >The old licences expired in 2007, but I cannot get rid of them. > >Database, issuer and producer are the same for the old and the >new licences. The authorisation is different, but it is unique >for each product, so I cannot use /AUTHORIZATION qualifier >for bulk removals. > >Perhaps I should've installed the new licences in a new database? > Before loading the new licenses LICENSE DISABLE * ( If for some reason you need to re-enable them rather than installing new licenses you can undo this with LICENSE ENABLE * ) Install and load new licenses To clean up LICENSE DELETE */STATUS=DISABLED David Webb Security team leader CCSS Middlesex University >many thanks >anton > >-- >Anton Shterenlikht >Room 2.6, Queen's Building >Mech Eng Dept >Bristol University >University Walk, Bristol BS8 1TR, UK >Tel: +44 (0)117 928 8233 >Fax: +44 (0)117 929 4423 ------------------------------ Date: Fri, 11 Apr 2008 13:06:51 -0400 From: "Richard B. Gilbert" Subject: Re: remove expired licences from the database Message-ID: Anton Shterenlikht wrote: > How can I remove all expired licences in bulk from the licence > database? > The old licences expired in 2007, but I cannot get rid of them. > > Database, issuer and producer are the same for the old and the > new licences. The authorisation is different, but it is unique > for each product, so I cannot use /AUTHORIZATION qualifier > for bulk removals. > > Perhaps I should've installed the new licences in a new database? > > many thanks > anton > $ DELETE SYS$SYSTEM:LMF$LICENSE.LDB;* It might, however, be better to rename it. It's also possible to write an AWK script to parse the output of LICENSE LIST/FULL and generate the LICENSE DELETE commands. This only works if you have VMS GAWK; I ported it about fourteen years ago, it's really handy to have around. Likewise grep, egrep and fgrep. ------------------------------ Date: Fri, 11 Apr 2008 19:41:08 +0200 From: "P. Sture" Subject: Re: remove expired licences from the database Message-ID: In article <20080411160736.GB3095@mech-aslap33.men.bris.ac.uk>, Anton Shterenlikht wrote: > How can I remove all expired licences in bulk from the licence > database? > The old licences expired in 2007, but I cannot get rid of them. > > Database, issuer and producer are the same for the old and the > new licences. The authorisation is different, but it is unique > for each product, so I cannot use /AUTHORIZATION qualifier > for bulk removals. > > Perhaps I should've installed the new licences in a new database? > That is indeed one way to tackle the issue, but not such a good idea if you have some licenses in the mix which do not expire. The following is John Malmberg's solution. In my experience it works as advertised, but to state the obvious, please read and understand it yourself before executing it. -- Paul Sture Sue's OpenVMS bookmarks: http://eisner.encompasserve.org/~sture/ovms-bookmarks.html ------------------------------ Date: Fri, 11 Apr 2008 09:17:50 +0200 From: "P. Sture" Subject: Re: set audit/listener Message-ID: In article , Pierre wrote: > I think DCL will be to slow in case of huge flow of audit. I will > have to write a program ;) > for the language, C examples are fine, but I prefer to write Pascal Please note that if your program which reads the audit mailbox fails, the audit server will carry on writing to the mailbox. When the audit mailbox becomes full, the audit server will suspend any process which creates an audit event. The end result is that the system effectively hangs, and you won't be able log in to sort the problem out. Therefore you need to take special care developing your listener program to make sure that is it robust and if it does fail, it restarts or does a $ set audit /nolistener _before_ the mailbox has chance to fill up. Since you might run into this problem during development, $ copy audit_mbx NL can be used to clear out unread audit messages, although of course you then need to go to the audit log for the messages you have "thrown away". -- Paul Sture Sue's OpenVMS bookmarks: http://eisner.encompasserve.org/~sture/ovms-bookmarks.html ------------------------------ Date: 11 Apr 2008 11:43:44 GMT From: VAXman- @SendSpamHere.ORG Subject: Re: set audit/listener Message-ID: <47ff4ef0$0$25047$607ed4bc@cv.net> In article , "P. Sture" writes: >In article >, > Pierre wrote: > >> I think DCL will be to slow in case of huge flow of audit. I will >> have to write a program ;) >> for the language, C examples are fine, but I prefer to write Pascal > >Please note that if your program which reads the audit mailbox fails, >the audit server will carry on writing to the mailbox. > >When the audit mailbox becomes full, the audit server will suspend any >process which creates an audit event. The end result is that the system >effectively hangs, and you won't be able log in to sort the problem out. Yup. I've always considered this to be a rather clumsy interface into the VMS security audit server. >Therefore you need to take special care developing your listener program >to make sure that is it robust and if it does fail, it restarts or does >a > > $ set audit /nolistener > >_before_ the mailbox has chance to fill up. There should be a program interface into the VMS security audit server that would allow a listener to inform that server that it is no longer interested in what it has to say. Something that could be invoked in the listener's rundown handling would provide a good way to circumvent problems which arise when the listener mailbox fills. >Since you might run into this problem during development, > > $ copy audit_mbx NL > >can be used to clear out unread audit messages, although of course you >then need to go to the audit log for the messages you have "thrown away". $ COPY MBAnnn: NL: can be useful in other cases too. A good little Q&D trick to know. -- VAXman- A Bored Certified VMS Kernel Mode Hacker VAXman(at)TMESIS(dot)COM "Well my son, life is like a beanstalk, isn't it?" http://tmesis.com/drat.html ------------------------------ Date: Fri, 11 Apr 2008 13:52:46 +0100 From: Anton Shterenlikht Subject: SOLVED: Re: change password on node 1 from node 2 Message-ID: <20080411125246.GA2074@mech-aslap33.men.bris.ac.uk> On Fri, Apr 11, 2008 at 01:33:05PM +0100, Anton Shterenlikht wrote: > My password expired on node 1 in a vms cluster, so I cannot connect > with ssh (old problem). I can connect to node 2 using system account. > Can I change a system or an ordinary user password on node 1 from node 2? > > I tried SYSMAN, but cannot see how to do it. > I'm also thinking about copying SYSUAF.DAT from node 1 to node 2, > running AUTHORIZE on it to change the password, and then sending it > back to node 1. Is that a good idea? > > I can, of course, do it from the console, if everytinkg else fails. ssh from node 1 to node 2 worked. -- Anton Shterenlikht Room 2.6, Queen's Building Mech Eng Dept Bristol University University Walk, Bristol BS8 1TR, UK Tel: +44 (0)117 928 8233 Fax: +44 (0)117 929 4423 ------------------------------ Date: Fri, 11 Apr 2008 12:30:42 -0400 From: Chuck Aaron Subject: vms 8.3 openssl cert expiration Message-ID: Can someone provide me the command that will tell me what date my openssl self-signed certificate is set to expire? Thanks in advance. ------------------------------ End of INFO-VAX 2008.203 ************************