1 INFO-VAX	Sun, 06 Apr 2003	Volume 2003 : Issue 190       Contents:+ Re: Announcing HP Availability Manager V2.3 ; Re: Apache %SYSTEM-F-NOPRIV on RIGHTSLIST.DAT after upgrade   Re: Disappearing CR/LF in editor Re: More about Alpha emulator  Re: Multinet 4.4 patches RE: Multinet 4.4 patches  Re: national moratorium...thread' Re: OpenVMS and Security - REALLY !!!!! ' Re: OpenVMS and Security - REALLY !!!!! ' Re: OpenVMS and Security - REALLY !!!!! 7 RE: VMS Software Product & Online Documentation Library   F ----------------------------------------------------------------------  $ Date: Sun, 6 Apr 2003 11:00:48 +0200$ From: Michael Unger <unger@decus.de>4 Subject: Re: Announcing HP Availability Manager V2.3* Message-ID: <00A1DFB4.3E647ABF.9@decus.de>  3 "Douglas Hoeger" <Douglas.Hoeger@compaq.com> wrote:   < > The HP Availability Manager Team is pleased to announce HPE > Availability Manager (AM) V2.3. HP Availability Manager is a system ? > management tool that, from an OpenVMS Alpha or a Windows 2000 B >  or XP node, enables you to monitor one or more OpenVMS Alpha orA > VAX nodes on a local area network (LAN). This tool helps system F > managers and analysts target a specific node or process for detailed > analysis.  > H > This release includes both new features and bug fixes. See the release: > notes for details. A short list of the new features is:  > 4 > 1.	AM has reached functional parity with DECamds. E > 2.	The Data Analyzer has a moderate performance improvement on both ( >         OpenVMS and Windows platforms.5 > 3.	The window turn rate for disks is now supported. = > 4.	The NOPROC, LOVOTE, and LOVLSP events are now supported. H > 5.      A new display, the CPU Process State Summary Display, has been >         added.   > F > Kits and documentation can be downloaded from the following website: > 7 > http://h71000.www7.hp.com/openvms/products/availman/    E Apparently the client part is (apart from OpenVMS) only supported on   Win2k _SP3_ or WinXP Pro.   ) Why isn't it supported on Win2k _SP2_ ???   I SP3 (the current SP) is the one "phoning home" and allowing MacroShit to  H install "updates" and "fixes" automatically without asking the user for F permission. (According to the EULA -- "end user license agreement" -- I you have to "acknowledge and agree ... and accept automatic downloads".)  > I can't imagine many people accepting that -- at least in the  professional area.   Michael    ------------------------------   Date: 6 Apr 03 09:03:18 +0200 ) From: p_sture@elias.decus.ch (Paul Sture) D Subject: Re: Apache %SYSTEM-F-NOPRIV on RIGHTSLIST.DAT after upgrade) Message-ID: <TaAWspbGiggl@elias.decus.ch>   \ In article <3e8b35f9$1_3@hpb10302.boi.hp.com>, "Rick Barry" <barry@star.zko.dec.com> writes: > Paul,  > J > If you could define the logical name apache$config_verbose to 'true' andJ > re-run the startup procedure, it should point us to where the startup is
 > failing.   Thanks for picking this one up.   F The startup doesn't fail, but it does put the following message in theJ audit file, for each Apache process (repeat for APACHE$00000, APACHE$00001M etc). Please note that this is RIGHTSLIST.DAT, not one of the files belonging 
 to Apache.  K Security alarm (SECURITY) and security audit (SECURITY) on DINA, system id:  55418 ' Auditable event:          Object access 1 Event time:                6-APR-2003 08:40:24.39 " PID:                      20C00EE1# Process name:             APACHE$00 $ Username:                 APACHE$WWW/ Process owner:            [AP_HTTPD,APACHE$WWW]  Image name:               @ $1$DKA0:[SYS0.SYSCOMMON.APACHE.][000000]APACHE_HTTPD.EXE_ALPHA;1 Object class name:        FILEF Object name:              _$1$DKA0:[VMS$COMMON.SYSEXE]RIGHTSLIST.DAT;1" Object owner:             [SYSTEM]B Object protection:        SYSTEM:RWED, OWNER:RWED, GROUP:R, WORLD: Access requested:         READL Status:                   %SYSTEM-F-NOPRIV, insufficient privilege or object.                           protection violation     9 Here's my audit setting (not the out of the box default):   
 $ sh audit- System security alarms currently enabled for:    ACL    Authorization    Audit:         illformed5   Breakin:       dialup,local,remote,network,detached F   Logfailure:    batch,dialup,local,remote,network,subprocess,detached   FILE access:2     Failure:     read,write,execute,delete,control  - System security audits currently enabled for:    ACL    Authorization    Audit:         illformed5   Breakin:       dialup,local,remote,network,detached F   Logfailure:    batch,dialup,local,remote,network,subprocess,detached   FILE access:2     Failure:     read,write,execute,delete,control  .                                                > H > Here is the sequence of steps to install a full Secure Web Server kit, > followed by an update kit: > < > 1. Shutdown the software ($ @sys$startup:apache$shutdown).7 > 2. Install the kit ($ PRODUCT INSTALL CSWS/DEST=...). A > 3. Run the configuration script ($ @sys$startup:apache$config). > > 4. Install the update kit ($ PRODUCT INSTALL CSWS13_UPDATE).6 > 5. Start the server ($ @sys$startup:apache$startup). > L > It's only necessary to run APACHE$CONFIG after you install a full kit. TheN > patch kits set the appropriate protection on the subset of files it overlays  > onto an existing installation. >   J So, I re-ran APACHE$CONFIG, saying YES to the enable MOD_SSL question, andJ YES to the file protection question, then ran the startup with the logical@ apache$config_verbose set to true. Here is the resulting output:   Function: START ] , [Input file: SYS$MANAGER:APACHE$CONFIG.DAT ]( [Reading SYS$MANAGER:APACHE$CONFIG.DAT ] [CNF_VERSION = 1.0 ]& [CNF_PATH_PCSI = SYS$COMMON:[APACHE] ]( [CNF_PATH_COMMON = SYS$COMMON:[APACHE] ]8 [CNF_PATH_SPECIFIC = SYS$COMMON:[APACHE.SPECIFIC.DINA] ] [CNF_HTTPD_ARGS =  ] [CNF_MOD_SSL = YES ] [CNF_SYSTEM_LOGICALS = YES ] [CNF_SERVER_TAG =  ] [CNF_SERVER_STARTUP =  ] [CNF_SERVER_SHUTDOWN =  ]  [CNF_SUEXEC = NO ]2 [Server account APACHE$WWW [AP_HTTPD,APACHE$WWW] ] [Reading running server table ]  [There are no running servers ] ? [Searching for $1$DKA0:[SYS0.SYSCOMMON.APACHE.SPECIFIC.DINA.] ] + [No matching APACHE$WWW process was found ]  [Create_lnm_table ] I Object type: LOGICAL_NAME_TABLE,  Object name: APACHE$LOGICAL_NAMES,  on   6-APR-2003 08:40:22.70>           (IDENTIFIER=[AP_HTTPD,APACHE$WWW],ACCESS=READ+WRITE): [CNF_PATH_COMMON_ROOT = $1$DKA0:[SYS0.SYSCOMMON.APACHE.] ]J [CNF_PATH_SPECIFIC_ROOT = $1$DKA0:[SYS0.SYSCOMMON.APACHE.SPECIFIC.DINA.] ]- [Define_logicals_plv /system/executive_mode ]  [Check_other_server_pid   ] . [Define_logicals_root /system/executive_mode ]0 [Define_logicals_root /process/supervisor_mode ]( [Install_images /system/executive_mode ]@ [Writing SYS$COMMON:[APACHE.SPECIFIC.DINA]APACHE$$LOGICALS.COM ]> [Writing SYS$COMMON:[APACHE.SPECIFIC.DINA]APACHE$$SERVER.COM ]' [Starting process using APACHE_CREPRC ] 
 [Input file:  D $1$DKA0:[SYS0.SYSCOMMON.][APACHE.SPECIFIC.DINA]APACHE$$SERVER.COM; ]
 [Output file: D $1$DKA0:[SYS0.SYSCOMMON.][APACHE.SPECIFIC.DINA]APACHE$$SERVER.LOG; ]@ %APACHE-S-PROC_ID, identification of created process is 20C00EE1 [Reading running server table ]  [Table entry #1 20C00EE1 ]    Process ID:         20C00EE1 Process name:       APACHE$00 * Started:            6-APR-2003 08:40:24.12B Specific directory: $1$DKA0:[SYS0.SYSCOMMON.APACHE.SPECIFIC.DINA.]4 Common directory:   $1$DKA0:[SYS0.SYSCOMMON.APACHE.]1 Config file:        SYS$MANAGER:APACHE$CONFIG.DAT >   20C00EE1 APACHE$00       COM      4      954   0 00:00:00.45  ? [Searching for $1$DKA0:[SYS0.SYSCOMMON.APACHE.SPECIFIC.DINA.] ]  [Found server #1 20C00EE1 ]    Process ID:         20C00EE1 Process name:       APACHE$00 * Started:            6-APR-2003 08:40:24.12B Specific directory: $1$DKA0:[SYS0.SYSCOMMON.APACHE.SPECIFIC.DINA.]4 Common directory:   $1$DKA0:[SYS0.SYSCOMMON.APACHE.]1 Config file:        SYS$MANAGER:APACHE$CONFIG.DAT >   20C00EE1 APACHE$00       LEF      4      964   0 00:00:00.48  - And there are more processes than that shows:    $ show sys/proc=apache* I OpenVMS V7.3-1  on node DINA   6-APR-2003 08:58:38.35  Uptime  4 11:14:30 M   Pid    Process Name    State  Pri      I/O       CPU       Page flts  Pages M 20C00EE1 APACHE$00       LEF      6     2715   0 00:00:03.09       962   1239 N 20C00EE2 APACHE$WWW_166  LEF      6     2577   0 00:00:00.77       162    105  S M 20C00EE4 apache$JServ_1  HIB      6      710   0 00:00:00.99      1747   1464  MSM 20C00EE5 APACHE$00000    LEF      6     2450   0 00:00:02.86       903   1182 M 20C00EE6 APACHE$00001    LEF      6     2419   0 00:00:03.17       915   1167 M 20C00EE7 APACHE$00002    LEF      6     2424   0 00:00:03.23       889   1167 M 20C00EE8 APACHE$00003    LEF      6     2422   0 00:00:02.60       894   1167 M 20C00EE9 APACHE$00004    LEF      6     2421   0 00:00:02.93       889   1167  $    ------------------------------   Date: 6 Apr 03 10:49:34 +0200 ) From: p_sture@elias.decus.ch (Paul Sture) ) Subject: Re: Disappearing CR/LF in editor ) Message-ID: <Y5MMrPVfVHIt@elias.decus.ch>   ^ In article <OF7B5BA7AC.88FB02E6-ON85256CFE.0081B785@metso.com>, norm.raphael@metso.com writes: > J > There is a (basic) program available on DSNLink that reads PRN files andK > puts the print control characters into the records as it copies the file. I > That means for example, a <FF> character gets added at the front of the  > recordK > that has the form-feed code in the before-printing part of the FC part of 
 > the record. J > Comments in this program, and one of the manuals, completely map out the > meaning of these two bytes.  > M > I can post that part later if it's wanted.  After this is run, you can edit  > to your heart's J > content, assuming you want to print the results or (in my case) transfer
 > the file to 0 > a platform that does not understand PRN files. >  >   - Even easier than that, as I learnt last year:    $ EDIT/TECO file.prn EX$$  C (where the $$ is two escapes - CTRL/3 on an LK keyboard or CTRL/[ )    <snip> --  
 Paul Sture   ------------------------------   Date: 6 Apr 2003 07:11:40 GMT / From: "Dave Weatherall" <djweath@attglobal.net> & Subject: Re: More about Alpha emulator5 Message-ID: <DTiotGxQ0bj6-pn2-KIvQbsTlW7So@localhost>   1 On Sat, 5 Apr 2003 18:59:03 UTC, "Timothy Stark"  # <sword7nospam@speakeasy.org> wrote:    > Hello folks, > I > Well, I read some Alpha ARM manual and some technical manuals (found on N > Digitial Documentation Library) about AlphaPC series.  I learned that systemJ > (SROM) had loaded Flash ROM image into main memory from 87.FFF8.0000 andD > started executation at the beginning of ROM image at location 0 orD > destination address in ROM header when system power was turned on.  F Best of luck with the project Tim. Just had an evil thought. An Alpha @ emulator running in a 64-bit Opteron running VMS faster than on - Itanium, which is where the evil comes in :-)    --   Cheers - Dave.   ------------------------------   Date: 6 Apr 2003 08:57:47 -0700 - From: goathunter@goatley.com (Hunter Goatley) ! Subject: Re: Multinet 4.4 patches = Message-ID: <3ff5fed3.0304060757.4b2744f5@posting.google.com>   c Dan Foster <dsf@globalcrossing.net> wrote in message news:<slrnb8t84j.l7.dsf@gaia.roc2.gblx.net>...  > Is there another mirror site  * There isn't a mirror site at this time....  L > However... file transfers from the Multinet FTP site is *agonizingly* slow  L Our ISP has had some major routing problems for the past few days, resultingL in the incredible slowdown.  (It's Genuity, which may be switching to Level3K or something like that---anyway, it's their problem and they're supposed to 
 be fixing it.   M > Mind you, I am immensely appreciative of the fine folks at Process who made K > it available as a part of the Hobbyist Program, and as well as for having ' > made a very nice TCP/IP stack for VMS    Thanks, Dan!   Hunter ------9 Hunter Goatley, Process Software, http://www.process.com/ 7 goathunter@goatley.com,  http://www.goatley.com/hunter/    ------------------------------  $ Date: Sun, 6 Apr 2003 09:40:47 -0700# From: "Tom Linden" <tom@kednos.com> ! Subject: RE: Multinet 4.4 patches 9 Message-ID: <CIEJLCMNHNNDLLOOGNJICECGGPAA.tom@kednos.com>   9 This is a bit off-topic, but why use an ISP, why not hook ? directly into Sprint ot Abovenet or someone like that?  What do 8 you use an ISP for that you couldn't do better yourself?   >-----Original Message----- 5 >From: Hunter Goatley [mailto:goathunter@goatley.com] % >Sent: Sunday, April 06, 2003 8:58 AM  >To: Info-VAX@Mvb.Saic.Com" >Subject: Re: Multinet 4.4 patches >  > 5 >Dan Foster <dsf@globalcrossing.net> wrote in message / >news:<slrnb8t84j.l7.dsf@gaia.roc2.gblx.net>...  >> Is there another mirror site  > + >There isn't a mirror site at this time....  > : >> However... file transfers from the Multinet FTP site is >*agonizingly* slow  > C >Our ISP has had some major routing problems for the past few days, 
 >resultingC >in the incredible slowdown.  (It's Genuity, which may be switching 
 >to Level3L >or something like that---anyway, it's their problem and they're supposed to >be fixing it. > = >> Mind you, I am immensely appreciative of the fine folks at  >Process who made L >> it available as a part of the Hobbyist Program, and as well as for having( >> made a very nice TCP/IP stack for VMS > 
 >Thanks, Dan!  >  >Hunter  >------ : >Hunter Goatley, Process Software, http://www.process.com/8 >goathunter@goatley.com,  http://www.goatley.com/hunter/ >  >---' >Incoming mail is certified Virus Free. ; >Checked by AVG anti-virus system (http://www.grisoft.com). @ >Version: 6.0.467 / Virus Database: 266 - Release Date: 4/1/2003 >  --- & Outgoing mail is certified Virus Free.: Checked by AVG anti-virus system (http://www.grisoft.com).? Version: 6.0.467 / Virus Database: 266 - Release Date: 4/1/2003    ------------------------------  % Date: Sun, 06 Apr 2003 19:38:49 +0200 6 From: =?ISO-8859-1?Q?Arne_Vajh=F8j?= <arne@vajhoej.dk>) Subject: Re: national moratorium...thread ) Message-ID: <3E906629.6090809@vajhoej.dk>    John Smith wrote: G > To the best of my knowledge, I don't believe that any people desiring G > to move back after the shooting stopped in 1949 were denied the right D > or opportunity by the Israeli government unless they were known toG > have actively participated in the fighting against Israel. Those that D > move to avoid the shooting were allowed back to their homes/farms.   That may be true.   8 But this is not the same as if palestinians may not have been afraid of coming back.    Arne   ------------------------------   Date: 6 Apr 03 09:06:52 +0200 ) From: p_sture@elias.decus.ch (Paul Sture) 0 Subject: Re: OpenVMS and Security - REALLY !!!!!) Message-ID: <uSaGJ$sLRBAs@elias.decus.ch>   [ In article <3E8F3F13.89E5BEF6@fsi.net>, "David J. Dachtera" <djesys.nospam@fsi.net> writes:  > Phillip Helbig wrote:  >>  H >> > Yep.  You might not mistake a vacuum cleaner for a 32 bit computer,I >> > but HP OpenVMS systems and the vault system are both heavily related  >> > to computers and software.  >>  G >> Hhmmm...My VAXstations are about the size of a small vacuum cleaner, G >> they have a fan which sucks in air and with time the inside fills up 
 >> with dust.  >   > ...which is quite interesting. > J > If you've not yet seen a GS1280, the processor chassis (don't recall theJ > exact name) have a very large fan on the front. The fan can change speedI > to allow for environmental conditions. We had an A/C failure in our new 4 > datacenter and they wind up to a quite high speed. > G > What they lack, however, is any kind of screen or filter over the fan H > intake (third-party product opportunity?). So, eventually, they'll getJ > just as dirty as a VAX 6000. Hope they don't have the temperature sensorD > problems that used to cause bugchecks on the VAX 6000 (sensor gets > clogged with dust bunnies).  >   8 Yet another reason to keep printers out of server rooms.   --  
 Paul Sture   ------------------------------  $ Date: Sun, 6 Apr 2003 10:58:56 +0200$ From: Michael Unger <unger@decus.de>0 Subject: Re: OpenVMS and Security - REALLY !!!!!* Message-ID: <00A1DFB3.FBA3D19E.5@decus.de>  2 "David J. Dachtera" <djesys.nospam@fsi.net> wrote:  J > If you've not yet seen a GS1280, the processor chassis (don't recall theJ > exact name) have a very large fan on the front. The fan can change speedI > to allow for environmental conditions. We had an A/C failure in our new 4 > datacenter and they wind up to a quite high speed. > G > What they lack, however, is any kind of screen or filter over the fan H > intake (third-party product opportunity?). So, eventually, they'll getJ > just as dirty as a VAX 6000. Hope they don't have the temperature sensorD > problems that used to cause bugchecks on the VAX 6000 (sensor gets > clogged with dust bunnies).   @ The last time I have seen dust filters in front of fans (within 7 computers or at the intake) is more than ten years ago.   F Strange enough I have an electric hair dryer with a filter mat at the  air intake.   A Sometimes technical decisions are really difficult to understand.    Michael    ------------------------------  $ Date: Sun, 6 Apr 2003 19:18:10 +0200$ From: Michael Unger <unger@decus.de>0 Subject: Re: OpenVMS and Security - REALLY !!!!!* Message-ID: <00A1DFF9.B9D66811.5@decus.de>  2 "David J. Dachtera" <djesys.nospam@fsi.net> wrote:   > Michael Unger wrote: > > 	 > > [...]  > > I > > Strange enough I have an electric hair dryer with a filter mat at the  > > air intake.  > ? > Are you sure that's a filter mat and not just a collection of  > hair/debris? > E > > Sometimes technical decisions are really difficult to understand.    ;-)   @ Yes, I am really sure. The filter mat is removable and washable.   Michael    ------------------------------  $ Date: Sun, 6 Apr 2003 12:32:11 -0400' From: "Main, Kerry" <Kerry.Main@hp.com> @ Subject: RE: VMS Software Product & Online Documentation LibraryT Message-ID: <BE56C50EA024184DAF48F0B9A47F5CF403FB5BF1@kaoexc01.americas.cpqcorp.net>   JF -  G You must have mixed up the posts as the person who said that was not me  .   F Perhaps the flow of quotes was mixed up by my MS Outback mail utility?   :-)   
 Kerry Main Solutions Architect  Hewlett-Packard (Canada) Co.! Consulting & Integration Services  Voice: 613-592-4660  Fax   : 613-591-4477 Email: Kerry.Main@hp.com     -----Original Message-----: From: JF Mezei [mailto:jfmezei.spamnot@vl.videotron.ca]=20 Sent: March 30, 2003 10:18 PM  To: Info-VAX@Mvb.Saic.Com @ Subject: Re: VMS Software Product & Online Documentation Library     "Main, Kerry" wrote:F > After several years of not visiting comp.os.vms, I came back here=206 > today to ask about ... getting hold of old VMS docs!  C Mr Main, you are lying. I saw you on comp.os.vms last week. :-) :-)   = In other words, learn to configure your software to abide by:   - ftp://ftp.rfc-editor.org/in-notes/rfc1855.txt   F (Nettiquette, in particular the use of > to quote text, quoted text atH the top, and NEVER NEVER send a post with more quoted text than what you add to it.)    ------------------------------   End of INFO-VAX 2003.190 ************************