1 INFO-VAX	Wed, 28 Jul 2004	Volume 2004 : Issue 415       Contents:, Re: =?ISO-8859-1?Q?OT:_Sun=B4s_AMD_Opteron?=, Re: =?ISO-8859-1?Q?OT:_Sun=B4s_AMD_Opteron?=0 =?iso-8859-1?Q?RE=3A_OT=3A_Sun=B4s_AMD_Opteron?= AlphaPC LX164 and VMS 7.3-2 ! Re: DVDwrite Version 4.0 released  Re: ES40 NIC's inactive state  Re: ES40 NIC's inactive state  Re: ES40 NIC's inactive state  Re: ES40 NIC's inactive state 8 How to find libraries associated to message facilities ?# Re: HP World, OpenVMS Bootcamp, etc # Re: HP World, OpenVMS Bootcamp, etc # Re: HP World, OpenVMS Bootcamp, etc # Re: HP World, OpenVMS Bootcamp, etc ) Is it decnet problem or Thruway problem ? - Re: Is it decnet problem or Thruway problem ? & Re: Konvertierung OpenVMS 6.2 -- Linux& Re: Konvertierung OpenVMS 6.2 -- Linux& Re: Konvertierung OpenVMS 6.2 -- Linux& Re: Konvertierung OpenVMS 6.2 -- Linux. Re: Looking for KLESI controller documentation7 Re: Need to recreate production system on backup system  Re: OpenVMS Backup Failure) Re: OpenVMS Management Station -  HSZTERM ) Re: OpenVMS Management Station -  HSZTERM  remove Re: SMTP setup for rank newbie Re: SMTP setup for rank newbie Re: SMTP setup for rank newbie Re: SMTP setup for rank newbie Re: SMTP setup for rank newbie Re: SMTP setup for rank newbie Re: SMTP setup for rank newbie Re: SMTP setup for rank newbie Re: SMTP setup for rank newbie Re: SMTP setup for rank newbie Re: SMTP setup for rank newbie Re: SMTP setup for rank newbie Re: SMTP setup for rank newbie Re: SMTP setup for rank newbie Re: SMTP setup for rank newbie' Re: SMTP setup for rank newbie  SOLVED? ' Re: SMTP setup for rank newbie  SOLVED? ' Re: SMTP setup for rank newbie  SOLVED? " SOLVED: SMTP setup for rank newbie& Re: SOLVED: SMTP setup for rank newbie$ StorageWorks EVA to Windows Question Re: Supported Options 
 test - ignore 3 Re: Time to patch OpenVMS - DCE-RPC buffer overflow 3 Re: Time to patch OpenVMS - DCE-RPC buffer overflow 3 Re: Time to patch OpenVMS - DCE-RPC buffer overflow  US Government IT spending O Re: [TCPware, V73_MGMTAGENTS] Does anyone have a working installation running ? O Re: [TCPware, V73_MGMTAGENTS] Does anyone have a working installation running ? O Re: [TCPware, V73_MGMTAGENTS] Does anyone have a working installation running ? O Re: [TCPware, V73_MGMTAGENTS] Does anyone have a working installation running ? O Re: [TCPware, V73_MGMTAGENTS] Does anyone have a working installation running ?   F ----------------------------------------------------------------------    Date: 28 Jul 2004 05:03:35 -0700. From: fabiopenvms@yahoo.com.br (Fabio Cardoso)5 Subject: Re: =?ISO-8859-1?Q?OT:_Sun=B4s_AMD_Opteron?= = Message-ID: <f30679fb.0407280403.5114af90@posting.google.com>   a JF Mezei <jfmezei.spamnot@teksavvy.com> wrote in message news:<41068655.F98CE3BB@teksavvy.com>...  > Fabio Cardoso wrote:G > > I am saying to run OS-X (for Integrity) like a Scientific Computing 9 > > Operating System. Like those X-Serve are used for....  > O > IA64 is ill suited for blades and large numbers of processors in a huge room. P > It eats too much electriity and generates too much heat. Even that Apple superI > cluster required special cooling equipment to handle such a large load.  > 3 > Google refused IA64 due to power and heat issues.  > P > Yes, I know, Intel has managed to get its IA64 in a few "supercomputer" sites.L > But I wouldn't be surprised if those sites were given a deal they couldn'tF > refuse by Intel/HP/whatever in exchange for bragging right by Intel. > J > > So its time to rethink the model to develop servers. May be in slices8 > > or bladening them instead of a huge piece of metal.  > L > Blades are a wintel thing due to windows inability to scale up to have one$ > instance handle many applications. > L > For real operating systems, you are far better off having one large systemO > with multiple CPUs since it is far easier to manage and the OS automatically, H > thourgh the magic of pre-emtptive multitasking, will give allocate CPU > resources on demand. > K > And then, when you get into Galaxy class machines, you can also move CPUs O > between OS instances to give one instance more power if needed. This is stuff P > "blades" can't handle. And blades don't have stuff such as shared memory which1 > makes intel-instance communications far easier.   E There was a misunderstanding from my comments: I am imagining a blade F not like a complete CPU system but like a "standalone processor blade"B connecting it with others through a high-speed bus, based in fiberB for example.  To create a pool of processors, not connected to the+ ineternal cabinet switch ! Do you copy it ?        []s   Fabio    ------------------------------    Date: 28 Jul 2004 06:44:49 -0700. From: fabiopenvms@yahoo.com.br (Fabio Cardoso)5 Subject: Re: =?ISO-8859-1?Q?OT:_Sun=B4s_AMD_Opteron?= = Message-ID: <f30679fb.0407280544.21aa62ea@posting.google.com>   a JF Mezei <jfmezei.spamnot@teksavvy.com> wrote in message news:<41068655.F98CE3BB@teksavvy.com>...  > Fabio Cardoso wrote:G > > I am saying to run OS-X (for Integrity) like a Scientific Computing 9 > > Operating System. Like those X-Serve are used for....  > O > IA64 is ill suited for blades and large numbers of processors in a huge room. P > It eats too much electriity and generates too much heat. Even that Apple superI > cluster required special cooling equipment to handle such a large load.  > 3 > Google refused IA64 due to power and heat issues.     " So NASA should take care about it:  j http://news.com.com/Space+agency+taps+SGI%2C+Intel+for+supercomputer/2100-1010_3-5286156.html?tag=nefd.top    / "Space agency taps SGI, Intel for supercomputer ) Last modified: July 27, 2004, 5:35 PM PDT  By Ed Frauenheim   Staff Writer, CNET News.com                    B NASA has picked computer maker Silicon Graphics Inc. and chipmakerA Intel to develop a major supercomputer based on Linux to simulate D space exploration and conduct other research, SGI announced Tuesday.  < The computer company said the National Aeronautics and Space@ Administration plans to integrate twenty 512-processor SGI AltixC systems using Intel's Itanium 2 processors. With an eventual 10,240 E processors, the Space Exploration Simulator will be among the world's ? largest supercomputers based on the Linux operating system, the 
 company said.    (...)"  P > Yes, I know, Intel has managed to get its IA64 in a few "supercomputer" sites.L > But I wouldn't be surprised if those sites were given a deal they couldn'tF > refuse by Intel/HP/whatever in exchange for bragging right by Intel. > J > > So its time to rethink the model to develop servers. May be in slices8 > > or bladening them instead of a huge piece of metal.  > L > Blades are a wintel thing due to windows inability to scale up to have one$ > instance handle many applications. > L > For real operating systems, you are far better off having one large systemO > with multiple CPUs since it is far easier to manage and the OS automatically, H > thourgh the magic of pre-emtptive multitasking, will give allocate CPU > resources on demand. > K > And then, when you get into Galaxy class machines, you can also move CPUs O > between OS instances to give one instance more power if needed. This is stuff P > "blades" can't handle. And blades don't have stuff such as shared memory which1 > makes intel-instance communications far easier.    ------------------------------  % Date: Wed, 28 Jul 2004 10:17:35 -0400 ' From: "Main, Kerry" <kerry.main@hp.com> 9 Subject: =?iso-8859-1?Q?RE=3A_OT=3A_Sun=B4s_AMD_Opteron?= R Message-ID: <FD827B33AB0D9C4E92EACEEFEE2BA2FB395353@tayexc19.americas.cpqcorp.net>   > -----Original Message-----9 > From: JF Mezei [mailto:jfmezei.spamnot@teksavvy.com]=20  > Sent: July 27, 2004 12:44 PM > To: Info-VAX@Mvb.Saic.Com & > Subject: Re: OT: Sun=B4s AMD Opteron >=20 > Fabio Cardoso wrote:G > > I am saying to run OS-X (for Integrity) like a Scientific Computing 9 > > Operating System. Like those X-Serve are used for....  >=20B > IA64 is ill suited for blades and large numbers of processors=20 > in a huge room. B > It eats too much electriity and generates too much heat. Even=20 > that Apple super@ > cluster required special cooling equipment to handle such a=20
 > large load.  >=203 > Google refused IA64 due to power and heat issues.  >=20< > Yes, I know, Intel has managed to get its IA64 in a few=20 > "supercomputer" sites.A > But I wouldn't be surprised if those sites were given a deal=20  > they couldn't F > refuse by Intel/HP/whatever in exchange for bragging right by Intel. >=20B > > So it=B4s time to rethink the model to develop servers. May=20 > be in slices: > > or bladening them instead of a huge piece of metal.=20 >=20@ > Blades are a wintel thing due to windows inability to scale=20 > up to have one$ > instance handle many applications. >=20B > For real operating systems, you are far better off having one=20 > large system@ > with multiple CPUs since it is far easier to manage and the=20 > OS automatically, H > thourgh the magic of pre-emtptive multitasking, will give allocate CPU > resources on demand. >=20? > And then, when you get into Galaxy class machines, you can=20  > also move CPUs< > between OS instances to give one instance more power if=20 > needed. This is stuff ? > "blades" can't handle. And blades don't have stuff such as=20  > shared memory which 1 > makes intel-instance communications far easier.  >=20   JF -  F The are environments good for scale out solutions as well as scale up.  J Blades are typically Windows/Linux platform options toady because of the = x86 nature of blades.   J However, Itanium blades are in the works (see following url's) and could =G open up all sorts of new opportunities for any platform that supports = + Itanium based servers. Think clustering ...    :-)   
 Reference:C http://www.eweek.com/article2/0,1759,1610153,00.asp (June 10, 2004) J "Hewlett-Packard Co. is developing blade servers that will be powered by =I Intel Corp.'s Itanium chip, another push by the company to bring 64-bit = % capability to the dense form factor."   / http://www.nec.co.jp/press/en/0406/0901.html=20 J "NEC Releases Blade Server "Express5800/1020Ba" with the latest Intel(R) = Itanium(R)2 Processor"   Regards   
 Kerry Main Senior Consultant  HP Services Canada Voice: 613-592-4660  Fax: 613-591-4477  Email: kerryDOTmainAThpDOTcom . (remove the DOT's and AT for email address)=20  $ "OpenVMS has always had integrity .. Now, Integrity has OpenVMS .."   ------------------------------  % Date: Wed, 28 Jul 2004 15:59:08 +0200 7 From: Robert Trawinski <robert.trawinski@softax.com.pl> $ Subject: AlphaPC LX164 and VMS 7.3-2+ Message-ID: <ce8bgt$5s3$1@bozon2.softax.pl>    Is it possible?    Robert   ------------------------------  % Date: Wed, 28 Jul 2004 13:57:57 +0100 + From: "Tom Wade" <nospam@picard.eurokom.ie> * Subject: Re: DVDwrite Version 4.0 released0 Message-ID: <e%MNc.5660$Z14.6766@news.indigo.ie>  6 "Barry Treahy, Jr." <Treahy@MMaz.com> wrote in message! news:4105B618.7010507@MMaz.com... G > Arg, revisionist!  Why couldn't the coin a different prefix or phrase L > for the ten power versions rather than redefining two power definitions...  A Because power of ten prefixes have been part of the daily life of L measurement of people throughout the world with the notable exception of theL United States.  Kilo means 1000 as in kilometer, kilogram etc - something asE familiar and in constant use to us as mile and pound might be to you.   C (time to get with the program guys - it's the 21st century already)   ? --------------------------------------------------------------- < Tom Wade             | EMail: tee dot wade at eurokom dot ie? EuroKom              | X400:  g=tom;s=wade;o=eurokom;p=eurokom; / Unit A2              |        a=eirmail400;c=ie / Nutgrove Office Park | Tel:   +353 (1) 296-9696 / Rathfarnham          | Fax:   +353 (1) 296-9697 < Dublin 14            | Disclaimer:  This is not a disclaimerC Ireland              | Tip:   "Friends don't let friends do Unix !"    ------------------------------    Date: 28 Jul 2004 04:42:04 -0700, From: jefflanka@volcanomail.com (Jeff Lanka)& Subject: Re: ES40 NIC's inactive state= Message-ID: <8201ded0.0407280342.6ecb4d69@posting.google.com>   v koehler@eisner.nospam.encompasserve.org (Bob Koehler) wrote in message news:<$mmhiAqkfySS@eisner.encompasserve.org>...n > In article <8201ded0.0407270259.664fe993@posting.google.com>, jefflanka@volcanomail.com (Jeff Lanka) writes:E > > I have a number of ES40's running 7.3-1 or 2.  All of them have 2  > > NIC's EWA-0 and EWA-1  > > I > > We are trying to develop a com file which will switch from one NIC to H > > the other (DECnet phase 4) in the case of a problem with the switch. > >  > > We are trying the command: > > # > > ncp>set circuit ewa-0 state off   > > ncp>set line ewa-0 state off > > ncp>set line ewa-1 state on " > > ncp>set circuit ewa-1 state on > > E > > on most of the machines we will get the error INVADDR and the new E > > (EWA-1) circuit will be "synchronizing" forever.  It won't switch H > > unless we reboot.  These machines have steady green (link) lights onH > > both NIC's and the data (amber) lights are both blinking (indicating	 > > data)  > K >    If you aleady have other protocols, such as TCP/IP, running on the NIC F >    DECnet probably won't be able to start because it needs to change >    the MAC address.    We're only running DECnet    ------------------------------    Date: 28 Jul 2004 04:44:24 -0700, From: jefflanka@volcanomail.com (Jeff Lanka)& Subject: Re: ES40 NIC's inactive state= Message-ID: <8201ded0.0407280344.2b8c39bb@posting.google.com>   d Paul Repacholi <prep@prep.synonet.com> wrote in message news:<87r7qx2s6k.fsf@k9.prep.synonet.com>...0 > jefflanka@volcanomail.com (Jeff Lanka) writes: > E > > I have a number of ES40's running 7.3-1 or 2.  All of them have 2  > > NIC's EWA-0 and EWA-1  >   F > > We are trying to develop a com file which will switch from one NICC > > to the other (DECnet phase 4) in the case of a problem with the  > > switch.  >    > > We are trying the command: >   # > > ncp>set circuit ewa-0 state off   > > ncp>set line ewa-0 state off > > ncp>set line ewa-1 state on " > > ncp>set circuit ewa-1 state on >   E > > on most of the machines we will get the error INVADDR and the new E > > (EWA-1) circuit will be "synchronizing" forever.  It won't switch H > > unless we reboot.  These machines have steady green (link) lights onH > > both NIC's and the data (amber) lights are both blinking (indicating	 > > data)  > F > You need the cards to be on independant segments or they will not beA > inited with the correct Hware address. You need a decnet router  > between them.   / The are on fully redundent independent segments  > B > Once other protocols start using the card, the address is pretty1 > well locked down, so you can't chop and change.    Only DECnet  > F > What problem are you trying to fix? If you have a switch problem andH > both cards go to the switch it is a good bet you will lose both lines,C > so there is little if any gain there. You really need to have two G > seperate nets with their own switch, and optionaly a router or bridge  > between the segments.   D We're trying to give operators the ability to run a "switch_nic" com= file in case of failure on the active LAN.  The com file will + basically perform the commands given above.    ------------------------------    Date: 28 Jul 2004 08:16:15 -0700, From: jefflanka@volcanomail.com (Jeff Lanka)& Subject: Re: ES40 NIC's inactive state= Message-ID: <8201ded0.0407280716.32c07be2@posting.google.com>   e David J Dachtera <djesys.nospam@comcast.net> wrote in message news:<410702C7.F4B3AF08@comcast.net>...  > Jeff Lanka wrote:  > > E > > I have a number of ES40's running 7.3-1 or 2.  All of them have 2  > > NIC's EWA-0 and EWA-1  > > I > > We are trying to develop a com file which will switch from one NIC to H > > the other (DECnet phase 4) in the case of a problem with the switch. > >  > > We are trying the command: > > # > > ncp>set circuit ewa-0 state off   > > ncp>set line ewa-0 state off > > ncp>set line ewa-1 state on " > > ncp>set circuit ewa-1 state on > ! > From distant, vague memories...  > G > Try DEFINE-ing both LINEs as "state on", but one circuit "state off", J > and make sure to start DECnet before anything else (other than SCS) thatJ > tries to access the NICs. I think that might grab the NICs and set their > MAC address at startup time. > D.J.D.  8 This fixed the problem!  Thanks very much for your help.   ------------------------------  # Date: Wed, 28 Jul 2004 15:29:58 GMT + From: Ryan Moore <rmoore@rmoore.dyndns.org> & Subject: Re: ES40 NIC's inactive state; Message-ID: <Pine.LNX.4.60.0407280827200.6156@jaipur.local>   J Starting in OpenVMS v7.3-2, there is a new feature where you can tell the H operating system to use two different NICs in a LAN "failover" set.  If K the link on one of the cards fails, VMS will automatically failover to the  @ other card.  You wouldn't need to have any operator intevention.  H Check out the 7.3-2 New Features manual.  And I believe the changes are C also documented in the LANCP utility docs in the System Management   Utilities Guide.  & On Wed, 28 Jul 2004, Jeff Lanka wrote:F > We're trying to give operators the ability to run a "switch_nic" com? > file in case of failure on the active LAN.  The com file will - > basically perform the commands given above.    ------------------------------    Date: 28 Jul 2004 01:56:51 -0700- From: macareux_joyeux@yahoo.fr (Denis Capart) A Subject: How to find libraries associated to message facilities ? = Message-ID: <40621c4f.0407280056.5840b862@posting.google.com>   F One of our software generates warning and info messages with different@ facilities but we can't determine which function call could have generated these exceptions.   B The first one is "%MAT-I-PFMBSY" (page fault monitor busy) and theE second one is "%CJATK-W-NOMSG, Message number <an hexa code>". Though D those are "Info" and "Warning" as they are not "Success" our programB comes into the exception management part of the code and we have aC problem in this part. The problem is that we have many places where F such error could occure so we would like which function call generated these exceptions.   E In a more general point of view, is there a way to know the functions D library associated to a message facility code ? How comes that there? is no way to find in the doccumentation or on the Internet what  "CJATK" stands for ???      Denis Capart    ------------------------------  % Date: Wed, 28 Jul 2004 05:23:40 -0400 # From: "John Smith" <a@nonymous.com> , Subject: Re: HP World, OpenVMS Bootcamp, etc, Message-ID: <RrydnbEJ4ssG7ZrcRVn-pw@igs.net>   JF Mezei wrote: , > Alan Winston - SSRL Admin Cmptg Mgr wrote:E >> There are just limits to how cheap you're going to be able to make F >> something at that site, and there aren't too many other sites whereD >> the engineers can come without getting travel authorization, etc. > F > Yes, I am aware that there are a limited number of hotels capable of? > holding the event near enough the engineer's natural habitat. C > Nevertheless, the one hotel, if you are filling it near capacity, 2 > should have sufficient flexibility in its menus. > G > If you have a function of only 25 folks in a hotel capable of holding D > 500, then you.'ll get their standard banquet menu offering. But ifF > you fill the hotel to capacity, you can generally customize meals toF > get something more affordable. Some chefs/hotels may refuse to lowerG > standards in order to maintain their image.  The chef at a Ritz hotel C > may not accept to compromise his menus to lower standards because 4 > that would reflect poorly on him and/or the hotel. > C > It could also be that the one hotel near DEC facilities considers ? > DEC/HP to be a cash cow and doesn't even think of catering to  > cost-conscious customers.   I Time for you to consider building and operating a hotel in Nashua and run K the risk of over-providing for the town on all other days of the year other  than Boot Camp. ;-)   K Don't think that moving Boot Camp to a nearby large city like Boston, where I there is more hotel & restaurant competition, would necessarily result in I lower out-of-pocket costs to attendees. Airfare *might* be a bit cheaper.    ------------------------------  # Date: Wed, 28 Jul 2004 13:54:09 GMT ! From: Nigel Barker <nigel@hp.com> , Subject: Re: HP World, OpenVMS Bootcamp, etc8 Message-ID: <pqbfg0lfvnjct4nmf1firmbudhphcn6ote@4ax.com>  K On Tue, 27 Jul 2004 22:36:33 -0400, JF Mezei <jfmezei.spamnot@teksavvy.com>  wrote:  O >It could also be that the one hotel near DEC facilities considers DEC/HP to be K >a cash cow and doesn't even think of catering to cost-conscious customers.   L There are at least two other hotels in Nashua with similar size & facilitiesK capable of hosting a VMS bootcamp sized event. They are just a few miles up P Route 3 & I am sure that they offer competitive prices to the Sheraton or ratherO that they keep the Sheraton prices reasonable as it is not a monopoly supplier.    -- Nigel Barker Live from the sunny Cote d'Azur    ------------------------------    Date: 28 Jul 2004 07:26:03 -0700) From: "Ken Robinson" <kenrbnsn@rbnsn.com> , Subject: Re: HP World, OpenVMS Bootcamp, etc/ Message-ID: <ce8d1r$fun@odak26.prod.google.com>    JF Mezei wrote (in part): , > Alan Winston - SSRL Admin Cmptg Mgr wrote:C > > I think I can say that if the engineer's time is charged to the  event G > > (especially the time spent _preparing_ presentations and so on), it - > > would cost us more than $1295 for a week.  > F > The $1295 cost seems on par with "commercial" courses. It seems very	 high when 9 > you compare it to DECUS functions (when DECUS existed).  >   D I don't know which DECUS functions you're talking about or when. The@ last two Encompass Symposia I attended (Sept 2001 (Yes, I was inG Anaheim on 9/11), and Fall 2002 in St. Louis both had registration fees G in the $1500 to $1700 range. Yes, there were discounts, but at the time E I was paying my own way and it was still a BIG bite out of my monthly  income at the time.   C I, too, remember the years when the cost of the DECUS Symposium was C less, but remember inflation has upped the price of most things.  I @ don't remember what the registration fee was for the first DECUSE Symposium I attended (Spring, 1981 in Miami Beach), but the company I F then worked for paid for everything (registration fee, airfare, hotel,D transportation) and the total cost must have been much less than the last one I attended.  D Now, that I'm working again as an employee, I'm hoping to be able to' get to at least the bootcamp next year.    Ken Robinson   ------------------------------  % Date: Wed, 28 Jul 2004 11:49:59 -0400 - From: JF Mezei <jfmezei.spamnot@teksavvy.com> , Subject: Re: HP World, OpenVMS Bootcamp, etc, Message-ID: <4107CB25.3AF83A4D@teksavvy.com>   Ken Robinson wrote: F > I don't know which DECUS functions you're talking about or when. TheB > last two Encompass Symposia I attended (Sept 2001 (Yes, I was inI > Anaheim on 9/11), and Fall 2002 in St. Louis both had registration fees  > in the $1500 to $1700 range.    2 Ok, then. the only response I can give is "OUCH !"  K Seems to me like conferences held in the USA are far more expensive. If Sue K conference is at $1295 and DECUS (or whetever the sname is this week) is at N $1500, then I guess there can be no complaints about price since it would be a going rate in the USA.  J In which case, the comment becomes: "because it is held in a country whereK conferences are expensive, it makes it very expensive for people from other  countries to attend".   I But since Sue is unwilling to package and ship her engineers to a cheaper L location, then there is really nothing that can be done, except perhaps make# materials available electronically.   L (or videoconference either with other HP offices worldwide or via internet).   ------------------------------    Date: 28 Jul 2004 03:14:34 -07004 From: jignesh_vyas@hotmail.com (Jignesh Vyas 'Jigs')2 Subject: Is it decnet problem or Thruway problem ?= Message-ID: <908a2e17.0407280214.41287a24@posting.google.com>    Hi,   C I have defined two decnet proxy on remote note and tried to perform D thruway connect, on SYADM account it went fine but on POPR_x account it login failure error..  
 Any clue ?   Config and   *********** * TEST$> mc authorize show /proxy test01::*   &  Default proxies are flagged with (D)    test01::POPR_PENG 
     TAPESYSNP    test01::SYSADM1     SYSADM (D)                             SYSTEM      OPCOM message on both try. **************************  8 %%%%%%%%%%%  OPCOM  15-JUL-2004 17:58:40.89  %%%%%%%%%%%( Message from user AUDIT$SERVER on TEST01A Security alarm (SECURITY) and security audit (SECURITY) on TEST01   ' Auditable event:          Network login 1 Event time:               15-JUL-2004 17:58:40.88 * PID:                      2BC1B689        * Process name:             FAL_1421002C    * Username:                 SYSADM          ) Process owner:            [SYS_GP,SYSADM]  Image name:               0 $1$DGA3035:[SYS0.SYSCOMMON.][SYSEXE]LOGINOUT.EXE( Remote nodename:          TEST           Remote node fullname:     TEST  Remote username:          SYSADM      8 %%%%%%%%%%%  OPCOM  15-JUL-2004 17:54:24.61  %%%%%%%%%%%( Message from user AUDIT$SERVER on TEST01A Security alarm (SECURITY) and security audit (SECURITY) on TEST01   / Auditable event:          Network login failure 1 Event time:               15-JUL-2004 17:54:24.61 * PID:                      2BC00819        * Process name:             NET$ACP         * Username:                 DNA$SessCtrl    ! Remote node id:           0 (0.0)  Remote node fullname:     TEST# Remote username:          POPR_PENG ? Status:                   %LOGIN-F-NOTVALID, user authorization  failure   8 %%%%%%%%%%%  OPCOM  15-JUL-2004 17:54:24.64  %%%%%%%%%%%" Message from user SYSTEM on SINA00@ Event: Access Control Violation from: Node LOCAL:.TEST01 Session Control,-         at: 2004-07-15-17:54:24.638+08:00Iinf           NSAP Address=/A32583F0, %         Source=UIC = [0,0]POPR_PENG,  "         Destination=number = 140,          Destination User="",            Destination Account="",          Node Name=LOCAL:.TEST 7         eventUid   0216E1E0-D688-11D8-AD34-53494E413030 7         entityUid  3E5A8860-D34E-11D8-81C2-AA0004003464 7         streamUid  4EC4F4B0-D34E-11D8-8294-AA0004003464    -Jigs    ------------------------------    Date: 28 Jul 2004 07:52:49 -0500; From: koehler@eisner.nospam.encompasserve.org (Bob Koehler) 6 Subject: Re: Is it decnet problem or Thruway problem ?3 Message-ID: <Q$GnTQyuovc7@eisner.encompasserve.org>   t In article <908a2e17.0407280214.41287a24@posting.google.com>, jignesh_vyas@hotmail.com (Jignesh Vyas 'Jigs') writes: > Hi,  > E > I have defined two decnet proxy on remote note and tried to perform F > thruway connect, on SYADM account it went fine but on POPR_x account > it login failure error.. >  > Any clue ?  B    It looks like your using Phase V.  There's an NCL flush commandE    which gets your proxy updates read in from the file UAF maintains. A    (NCP has an equivalent command under Phase IV).  Rebooting has )    the same effect, but is not necessary.       Have you done this?   ------------------------------  % Date: Wed, 28 Jul 2004 09:39:00 +0200 # From: Jan Wilm <jan.wilm@ch.tum.de> / Subject: Re: Konvertierung OpenVMS 6.2 -- Linux 0 Message-ID: <ce7j45$mf3$1@wsc10.lrz-muenchen.de>   Nigel Barker wrote:   J > On Tue, 27 Jul 2004 12:13:58 +0200, Jan Wilm <jan.wilm@ch.tum.de> wrote: > 	 >>Hi all,  >>; >>I have a dec3000 with tons of scasi harddrives to attach. K >>Now i am looking for a way to get the files onto a linux /windows system.  >>$ >>The DEC is connected to a network. >>D >>Is there a way to transfer the files and directories? Doing ftp isI >>possible but the problem is that it is a deep directory structure and i  >>want to conserve it. >>L >>My try was using nfs, but i could not mount the nfs directory that i opend@ >>on the dec with bind to a linux system, it refused to read it. >>K >>Anyone knows a way? Either archiving the files so i can unarchive it (can E >>transfer single files), transfering all files with dir structure or % >>mounting the dec drives to linux ?? 
 >>ciao jan > G > The best way of preserving the directory structure is to use BACKUP & L > create a save set of the required files. Then use zip "-V" to create a zipG > file. Now ftp the zipped save set to the other machine & use unzip to J > extract the save set from the zip archive. Now use BACKUP to restore the9 > save set. Zip & unzip are available on the freeware CD.  >  > -- > Nigel Barker! > Live from the sunny Cote d'Azur   L Sounds good. Where do i find a version of BACKUP that runs on linux? Or with what can i unarchive them?   ciao jan   ------------------------------  % Date: Wed, 28 Jul 2004 09:44:24 +0200 # From: Jan Wilm <jan.wilm@ch.tum.de> / Subject: Re: Konvertierung OpenVMS 6.2 -- Linux 0 Message-ID: <ce7jea$mo3$1@wsc10.lrz-muenchen.de>   Bob Koehler wrote:  ; > In article <ce57r1$g3c$1@wsc10.lrz-muenchen.de>, Jan Wilm  > <jan.wilm@ch.tum.de> writes:
 >> Hi all, >>  < >> I have a dec3000 with tons of scasi harddrives to attach.L >> Now i am looking for a way to get the files onto a linux /windows system. >>  % >> The DEC is connected to a network.  > C >    It's going to depend on what kind of software your DEC 3000 is > >    running.  Since you post to comp.os.vms, I'll assume VMS. > D >    Probably the easiest thing for you to do is get one of the freeF >    tar programs for VMS, tar up the directory tree, transfer the tarH >    file over the network, and untar it there.  You could even compress6 >    it first with a free copy of gzip if you want to. > G >    If you tell us what's going on:  what software, what version, what F >    error messages, ... (see the FAQ) we could help you with your NFSD >    problem.  Be aware that there is more than one popular IP stackH >    in use on VMS, so you'll need to tell us which one and what version >    for that, too. 5 It is running openVMS 6.2, as indicated in the title. L Ip stack i am not sure how its called, but started with ucx. Then using BIND$ and MOUNT for nfs server and client.J But when i try to mount a linux nfs drive it says "Drive dnfc0: not found"J When i try to bind a drive and try to mount that one in linux it says "Rpc call time out"  @ i managed to gzip files, but the -r option does not work on vms.K When i run TAR it misses a symbol, i assume i miss a librar. I will look up 
 which one.  I In the other post someone recomends zip -V ... does zip work recursive on  VMS?     ciao jan   ------------------------------    Date: 28 Jul 2004 09:46:00 +0200. From: huber@NOBODY-mppmu.mpg.de (Joseph Huber)/ Subject: Re: Konvertierung OpenVMS 6.2 -- Linux + Message-ID: <0LxQm4aPguiW@vms.mppmu.mpg.de>   V In article <ce7jea$mo3$1@wsc10.lrz-muenchen.de>, Jan Wilm <jan.wilm@ch.tum.de> writes:7 > It is running openVMS 6.2, as indicated in the title. N > Ip stack i am not sure how its called, but started with ucx. Then using BIND& > and MOUNT for nfs server and client.L > But when i try to mount a linux nfs drive it says "Drive dnfc0: not found"L > When i try to bind a drive and try to mount that one in linux it says "Rpc > call time out"  G To NFS serve a VMS disk via UCX, the drive must be MAPped and EXPORTed. 9 Show us what is defined in UCX> SHOW MAP and SHOW EXPORT. @ Finally for write access to remote NFS disks, the VMS UID's mustB be mapped via UCX PROXY entries (unless the Unix side is open for  user "nobody"). H The responses of the clients also indicate the UCX side client seems not  configured, and/or not started. 3 What is the output of UCX show service nfs /full  ?    B > i managed to gzip files, but the -r option does not work on vms.@ VMS gzip compresses single files only as far I know, to compress: whole directory trees on VMS, archive ZIP is the best way.   M > When i run TAR it misses a symbol, i assume i miss a librar. I will look up  > which one.G It may well be Your vmstar.exe is linked to a newer version of VMS than $ V6.2 (this system is 10 years old!).5 A source for older binaries of the archivers is e.g.  3 the VMS SIG "tape" archive at ftp://mvb.saic.com/ . H Look into one of the *vmslt directories in the first half of the 90ties:E e.g. ftp://mvb.saic.com/93bvmslt/tools/ , it contains vmstar and zip.n  K > In the other post someone recomends zip -V ... does zip work recursive onn > VMS?1 Yes, use VMS directory syntax for the files list:i    ZIP -"V" myarchive [...]*.*  N -- i6    Joseph Huber, Muenchen  http://www.huber-joseph.de/   ------------------------------  # Date: Wed, 28 Jul 2004 13:27:52 GMTr! From: Nigel Barker <nigel@hp.com>s/ Subject: Re: Konvertierung OpenVMS 6.2 -- LinuxW8 Message-ID: <l75fg0hph4i0r704rfp4313kg778nqhait@4ax.com>  H On Wed, 28 Jul 2004 09:39:00 +0200, Jan Wilm <jan.wilm@ch.tum.de> wrote:  H >> The best way of preserving the directory structure is to use BACKUP &M >> create a save set of the required files. Then use zip "-V" to create a zipiH >> file. Now ftp the zipped save set to the other machine & use unzip toK >> extract the save set from the zip archive. Now use BACKUP to restore thet: >> save set. Zip & unzip are available on the freeware CD. >> a >> --S >> Nigel Barker " >> Live from the sunny Cote d'Azur >TM >Sounds good. Where do i find a version of BACKUP that runs on linux? Or withe >what can i unarchive them?   E Whoops, I didn't read the original post carefully enough:-) There aresP applications for linux that can read & write VMS backup save sets do a Google on
 VMSbackup.  M Best of all you could run the VAX emulator SIMH on linux or Windows & restoree+ your files into a proper VMS environment:-)P   -- Nigel Barker Live from the sunny Cote d'Azure   ------------------------------  + Date: Wed, 28 Jul 2004 15:58:14 +0000 (UTC)M* From: Etienne Vogt <vogt@siolinb.obspm.fr>7 Subject: Re: Looking for KLESI controller documentationr2 Message-ID: <slrncgfj8b.nbf.vogt@siolinb.obspm.fr>  N In article <pan.2004.07.26.17.12.05.36699@celigne.co.uk>, Paul Williams wrote:9 > On Mon, 26 Jul 2004 17:02:26 +0000, Etienne Vogt wrote:t > K > I don't know whether this is the right document, because I don't know howuL > many variants of KLESI there are, but have you seen that "KLESI-SF Q22-bus/ > Adapter Option Installation Guide" is online?eG > Manx points to http://vt100.net/mirror/antonio/klesiin1.pdf (7.4 MiB)n  & Thanks, strange google didn't find it.  A Now the card shows up once set to the correct CSR, but fails initGE sequence and PTB0: stays offline. Maybe it's because the TU81+ isn't   plugged in yet.o   -- n 		Etienne Vogt.i   ------------------------------  % Date: Wed, 28 Jul 2004 09:07:30 +0200-* From: Paul Sture <nospam@sture.homeip.net>@ Subject: Re: Need to recreate production system on backup system* Message-ID: <2mp1lnFo9rtvU1@uni-berlin.de>   Wayne Sewell wrote:0) >>From: rcwood0000@yahoo.com (Roy C Wood)m >>X-Newsgroups: comp.os.vmso> >>Subject: Need to recreate production system on backup system" >>Date: 27 Jul 2004 06:53:33 -0700 >>G >>We plan on getting a backup system to our vax. I need to recreate the G >>production environment on the new vax. I have backup images (includes G >>system disk) from vax1 on tape that I need to port to vax2. Whats theeG >>simplest way to recreate the mirror environment on the new vax? Oh, IrD >>can't create a cluster because nobody wants the the production vax >>changed in any way.f >> >  > D > Easiest way is just to do image restores onto the backup system.   >  > Then:  >  > 1.  do a conversational boot0 > 2.  change the scs node name and id on the fly > 3.  set startup_p1 to minu) > 4.  after boot, change decnet node nameg > 5.  reboot normally  > I > And then change any places where hard node names are used, which is why / > f$getsyi("NODENAME") is the preferred method.t  C See the VMS FAQ: "5.6  How do I change the node name of an OpenVMS  @ System?" for a more complete list of things to check and change.   -- a
 Paul Sture  - OS X: "It's Unix, Jim, but not as we know it"    ------------------------------    Date: 28 Jul 2004 02:53:45 -0700# From: axica_nopub@yahoo.com (Safir)e# Subject: Re: OpenVMS Backup Failureo< Message-ID: <2b49c9e0.0407280153.9ba13db@posting.google.com>  H "Yong Boon, Lim" <y0ngb00n@yahoo.com> wrote in message news:<ce4tvd$rh7, > L >         l've recently done the image backup of my SCSI harddisk to tape by > the following command,
 >        i.e.a1 >             $ BACKUP/IMAGE/LOG/VERIFY DKA200: -i0 >             _$ MKB800:S1AP040726.BCK/LABEL=SMC > G >         When the backup almost closed to the end, the following errorl > message occurs, i.e.H >         %BACKUP-F-CLOSEOUT, error closing nkb800:[]S1AP040726.BCK;0 as > output9 >         %SYSTEM-F-INSFARG, insufficient call arguments.t > G [OpenVMS] BACKUP-F-CLOSEOUT & SYSTEM-F-INSFARG During BACKUP Operation -  D Copyright (c) Compaq Computer Corporation 1999. All rights reserved.  - PRODUCTS:   DIGITAL OpenVMS VAX, All VersionsR/             DIGITAL OpenVMS Alpha, All Versionss   COMPONENT:  BACKUP Utility  ' SOURCE:     Compaq Computer Corporationf     SYMPTOM:  G The following errors are displayed as a BACKUP operation is completing:         .      .      .9      DKA100:[dirname]TEST.COM;20 %BACKUP-S-COPIED, copiedo9      DKA100:[dirname]TEST1.COM;2 %BACKUP-S-COPIED, copied ;      DKA100:[dirname]TESTUAF.COM;7 %BACKUP-S-COPIED, copiedrA      DKA100:[dirname]filnam.txt %BACKUP-F-CLOSEOUT, error closing G      MKB100:[]TEST.BCK;0 as output -SYSTEM-F-INSFARG, insufficient calll         arguments.  A If you then attempt to obtain a listing of the saveset, the errora message below is displayed:   ,      $ BACKUP/LIST MKB100: TEST.BCK/SAVE_SET      Listing of save set(s)t  E      %BACKUP-F-NOTSAVESET, MKB100:[000000].; is not a BACKUP save sete  F If you MOUNT the tape FILES-11 and then perform a DIRECTORY command on' it, the following errors are displayed:r  ,      $ MOUNT/OVERRIDE=IDENTIFICATION MKB100:      $ DIRECTORY MKB100:<      %DIRECT-E-OPENIN, error opening MKB100:[]*.*;* as input5      ? RMS-E-FND, ACP file or directory lookup failed 2      ? SYSTEM-F-OPINCOMPL, operation is incomplete    	 ANALYSIS:c  F The tape that is the target of a BACKUP save operation must be mountedD /FOREIGN.  The above errors occur if you do an explicit MOUNT of theC tape drive in a command procedure prior to the BACKUP operation andt) accidentally omit the /FOREIGN qualifier.a     SOLUTION 1:e  B Make sure the /FOREIGN qualifier is in place on the MOUNT command. For example:        $ MOUNT/FOREIGN MKB100:     SOLUTION 2:s  A Remove the MOUNT command from the command procedure and allow ther5 BACKUP Utility to perform the mount operation itself.e   ------------------------------  % Date: Wed, 28 Jul 2004 08:08:29 +0200n From: Dirk Munk <munk@home.nl>2 Subject: Re: OpenVMS Management Station -  HSZTERM1 Message-ID: <ce7ft0$6v$1@news5.tilbu1.nb.home.nl>h   David J Dachtera wrote:y > Dave Baxter wrote: > g >>David J Dachtera <djesys.nospam@comcast.net> wrote in message news:<40FDCAB0.9F6BD4BF@comcast.net>...  >>J >>>No, However, it is no longer supported. It never did ship with OpenVMS. >>>t" >>>You can find a kit for it here: >>>t& >>>http://www.djesys.com/freeware/vms/1 >>>http://www.djesys.com/freeware/vms/hszterm.zipg >>>tC >>>However, I do not assume *ANY* responsibility for the product orcJ >>>anyone's use of it. I just have the kit available for folks who want toH >>>try to use it. It is not supported by OpenVMS Engineering, hp Storage' >>>Engineering or anyone else. Y.O.Y.O.r >>> 	 >>>D.J.D.- >>O Not only is it not supported, but AFAIK you are strongly discouraged to use it rF by OpenVMS engineering, since using it may result in data corruption !   ------------------------------  # Date: Wed, 28 Jul 2004 13:53:15 GMTa/ From: brooks@cuebid.zko.dec.nospam (Rob Brooks) 2 Subject: Re: OpenVMS Management Station -  HSZTERM- Message-ID: <EgBdqVvNxNvh@cuebid.zko.dec.com>o    Dirk Munk <munk@home.nl> writes: > David J Dachtera wrote:0 >>>aK >>>>No, However, it is no longer supported. It never did ship with OpenVMS.i >>>># >>>>You can find a kit for it here:t >>>>' >>>>http://www.djesys.com/freeware/vms/ 2 >>>>http://www.djesys.com/freeware/vms/hszterm.zip  : > Not only is it not supported, but AFAIK you are strongly > discouraged to use it H > by OpenVMS engineering, since using it may result in data corruption !  M That's news to me; who said that, and what was the full context of the quote?a   -- s  M Rob Brooks    VMS Engineering -- I/O Exec Group     brooks!cuebid.zko.dec.como   ------------------------------  % Date: Wed, 28 Jul 2004 09:38:09 -0500e+ From: Chuck Aaron <caaron@ceris.purdue.edu>P Subject: removea/ Message-ID: <4107BA51.4080604@ceris.purdue.edu>=   remove   ------------------------------  % Date: Wed, 28 Jul 2004 08:31:59 -0400e& From: Jim Moseby <nospam@nottoday.com>' Subject: Re: SMTP setup for rank newbie 9 Message-ID: <pan.2004.07.28.12.31.58.186726@nottoday.com>n  3 On Tue, 27 Jul 2004 19:35:36 -0400, JF Mezei wrote:a   > Jim Moseby wrote:aM >> I logged in as system, and used UCX set commands to configure SMTP as bestrL >> as I could from the help systems information, but it still does not work. > 7 > $TCPIP STOP MAIL  to undo anything you may have done.n   HYDRA:::\>  $ tcpip stop mailyK %DCL-W-MAXPARM, too many parameters - reenter command with fewer parametersS  \MAIL\s $   e > @SYS$MANAGER:TCPIP$SETUP   $ @SYS$MANAGER:TCPIP$SETUPJ %DCL-E-OPENIN, error opening SYS$SYSROOT:[SYSMGR]TCPIP$SETUP.COM; as input -RMS-E-FNF, file not found $t   > N > then choose the "servers" option, and then SMTP. Follow the pompts. There isK > more than just the TCPIP (UCX) commands. (creating the right VMS accounstf% > under which the software runs etc).  > M >> I want to relay outgoing mail through an MSExchange server (EXCHANGE) that)L >> has exposure to the internet.  Specifying this server as the mail gateway >> works for my Linux boxes. > O > If this option is not available in the TCPIP$SETUP menus, you can then modufy1( > this inside the TCPIP (UCX) commands.  > 7 > (HELP SET CONF SMTP ,. look under /ZONE and /GATEWAY)y    F Thanks for the reply.  I don't seem to have the menus that many peopleG have referred to.  I have managed to use the UCX help system to set thee; /GATEWAY parameter to what I think are the correct values. /   JM   ------------------------------  % Date: Wed, 28 Jul 2004 08:48:06 -0400a& From: Jim Moseby <nospam@nottoday.com>' Subject: Re: SMTP setup for rank newbie79 Message-ID: <pan.2004.07.28.12.48.05.524675@nottoday.com>T  5 On Tue, 27 Jul 2004 22:01:10 +0100, John Laird wrote:t   >>UCX> start mailh0 >>%UCX-E-STARTERROR, Error starting SMTP service8 >>-UCX-E-QUEUE, Error processing queue UCX$SMTP_HYDRA_01 > J > No error message after this point ?  If the queue manager isn't running,H > there'll be a further explanatory message to that effect, for example.   No.  Thats all.-   > > > Presumably UCX itself is started ?  (Dumb question, I know.)  I (Leave the dumb questions to me.  I'm the newbie here.  :o)  I assume UCX G is started, but I wouldn't know.  UCX is the facility by which VMS usesT* TCP/IP, right?  If so, then it is started.   >>(snip)A >>Log file:           SYS$SPECIFIC:[UCX_SMTP]UCX$SMTP_LOGFILE.LOGt > $ > Have you had a look in this file ?   Here it is:h   $ type ucx$smtp_logfile.logi  D %%%%%%%%%%%%                   28-JUL-2004 08:36:12.84  %%%%%%%%%%%%C %UCX-I-SMTP_LOGSUC, Using log file SYS$MANAGER:UCX$SMTP_LOGFILE.LOGe  D %%%%%%%%%%%%                   28-JUL-2004 08:36:13.25  %%%%%%%%%%%% %RMS-E-RNF, record not found  D %%%%%%%%%%%%                   28-JUL-2004 08:36:13.30  %%%%%%%%%%%%( %SYSTEM-F-IVLOGNAM, invalid logical name  N > Is there a queue UCX$SMTP_HYDRA_01 on this node - the configuration commands > should have created it ?  J I issued a "start /que UCX$SMTP_HYDRA_01" command. After a few seconds theD prompt returned with no message to the contrary.  I assume the queue exists and was started.a  |I > You should also check you have a host entry for EXCHANGE (UCX SHOW HOST E > EXCHANGE), but by the look of things, the smtp server is failing to 4 > start, so that is your first problem to deal with.  J "ucx sho host exchange" returns a proper host entry for exchange, and "ucx( ping exchange" reports that it is alive.   Thanks for your help.'   JM   ------------------------------  % Date: Wed, 28 Jul 2004 15:04:41 +0200 - From: "Martin Vorlaender" <mv@pdv-systeme.de>K' Subject: Re: SMTP setup for rank newbieS* Message-ID: <2mpmj9FpirjmU1@uni-berlin.de>  & "Jim Moseby" <nospam@nottoday.com> ... > JF Mezei wrote:@ > > @SYS$MANAGER:TCPIP$SETUP >e > $ @SYS$MANAGER:TCPIP$SETUPL > %DCL-E-OPENIN, error opening SYS$SYSROOT:[SYSMGR]TCPIP$SETUP.COM; as input > -RMS-E-FNF, file not found   What he meant to say was:    @SYS$MANAGER:TCPIP$CONFIGe  1 > I don't seem to have the menus that many peoplesI > have referred to.  I have managed to use the UCX help system to set the-< > /GATEWAY parameter to what I think are the correct values.  G The /GATEWAY=ALTERNATE qualifier is only meaningful in combination withfC the /ZONE (be which SMTP determines whether a mail is to be locally  delivered).b   cu,h   Martin -- e@                           | Martin Vorlaender  |  OpenVMS rules!3  Cetero censeo            | work: mv@pdv-systeme.dedF  Redmondem delendam esse. |   http://www.pdv-systeme.de/users/martinv/:                           | home: martin@radiogaga.harz.de   ------------------------------  % Date: Wed, 28 Jul 2004 09:05:39 -0400 & From: Jim Moseby <nospam@nottoday.com>' Subject: Re: SMTP setup for rank newbie-9 Message-ID: <pan.2004.07.28.13.05.39.274033@nottoday.com>f  D On Tue, 27 Jul 2004 21:58:42 +0000, Peter 'EPLAN' LANGSTOEGER wrote:  7 > In article , Jim Moseby <nospam@nottoday.com> writes:eL >>My first exposure to VMS has been to figure out why our programmers cannotK >>send mail from their programs.  Having a networking background, I quicklyi< >>found that there was no SMTP service running on this node. > 8 > Why do you need a SMTP service for sending mails OUT ?  H Good question.  Maybe I'm chasing the wrong problem.  Is it possible forF me to define an external SMTP server for outgoing mail?  Incoming mail& is not needed at all in this instance.  1 > 	$ TCPIP SET SERVICE SMTP/ACCEPT=HOST=127.0.0.1   . $ TCPIP SET SERVICE SMTP/ACCEPT=HOST=127.0.0.1K %DCL-W-MAXPARM, too many parameters - reenter command with fewer parameterse
  \SERVICE\ $r   > " > Why don't you use TCPIP$CONFIG ?I > It creates the TCPIP accounts, directories and (template) procedures ast > well.m  H If I issue the TCPIP$CONFIG command at the $ prompt, I get several pagesG of TCPIPtrace information.  I don't seem to have, or do not know how tocG invoke the menu driven configuration utilities that so many people have # suggested be used to set up SMTP.  n   >  > Are you really running UCX ?E > You know TCPIP V5.4 is current (with V5.5 coming end of the year) ?s  G I know we are running UCX, but I have no clue as to why.  I walked intotI this network set up as it is.  I have little VMS experience, and wouldn'tx: know how to go about getting the upgrade or installing it.  G >>I want to relay outgoing mail through an MSExchange server (EXCHANGE)nH >>that has exposure to the internet.  Specifying this server as the mail# >>gateway works for my Linux boxes.i > H > With the keyword "relaying" you really mean incoming mail on the box ?H > Why can't the applications which then obviously send SMTP out not sendC > directly to Exchange (without using the local machine as a relay)- > instead ?-  C We have no need for incoming mail on this box.  I would much rathermF configure it to use an external SMTP server for outgoing mail, but theH MAIL facility complains that there is no SMTP service running, and shuts down immediately.s  G > btw: Exchange has "exposure to the internet" ? That's not the perfectnF > way. VMS to the internet and Exchange behind it. Much more secure...  A I agree.  I, as a rule, never expose any Microsoft product to the I internet. I walked into this network set up as it is, though. And so, forC3 the time being, will have to work with it as it is..  	 > I woulde > 1) enter a domainn > 2) enable EIGHT_BITi > 3) enable TOP_HEADERS ! > 4) enable RELAYing if I have to , > 5) Use a FQDN in the gateway specification  F Can you elaborate a bit?  Remember that I have, just yesterday, logged into my first VMS box.   Thanks!t   JM   ------------------------------  % Date: Wed, 28 Jul 2004 09:09:41 -0400(& From: Jim Moseby <nospam@nottoday.com>' Subject: Re: SMTP setup for rank newbies9 Message-ID: <pan.2004.07.28.13.09.41.710548@nottoday.com>   < On Wed, 28 Jul 2004 15:04:41 +0200, Martin Vorlaender wrote:   > ( > "Jim Moseby" <nospam@nottoday.com> ... >> JF Mezei wrote: >> > @SYS$MANAGER:TCPIP$SETUP. >> >> $ @SYS$MANAGER:TCPIP$SETUP'M >> %DCL-E-OPENIN, error opening SYS$SYSROOT:[SYSMGR]TCPIP$SETUP.COM; as input  >> -RMS-E-FNF, file not foundh >  > What he meant to say was:n >  > @SYS$MANAGER:TCPIP$CONFIGs > H I get the same error.  I get the feeling that we are on an older releaseE of VMS than most people have. (In fact, I'd be really surprised if weu weren't)   $ @SYS$MANAGER:TCPIP$CONFIGoK %DCL-E-OPENIN, error opening SYS$SYSROOT:[SYSMGR]TCPIP$CONFIG.COM; as input  -RMS-E-FNF, file not found  I > The /GATEWAY=ALTERNATE qualifier is only meaningful in combination withlE > the /ZONE (be which SMTP determines whether a mail is to be locallyt
 > delivered)._   Thanks!    JM   ------------------------------  % Date: Wed, 28 Jul 2004 14:16:04 +0100r- From: Roy Omond <Roy.Omond@BlueBubble.UK.Com>-' Subject: Re: SMTP setup for rank newbie:* Message-ID: <2mpnc9Fphc97U1@uni-berlin.de>   Jim Moseby wrote::  > > On Wed, 28 Jul 2004 15:04:41 +0200, Martin Vorlaender wrote: >  > [...huge snip...]6  >  From all the previous exchanges, it's become obvious that you> are using UCX (think of it as a very old version of the TCP/IP Services for VMS).   In this case, you need to:   	$ @sys$manager:UCX$config                         ^^^a  	 Roy Omondt Blue Bubble Ltd.   ------------------------------  + Date: Wed, 28 Jul 2004 13:35:08 +0000 (UTC)  From: david20@alpha2.mdx.ac.uk' Subject: Re: SMTP setup for rank newbiee) Message-ID: <ce8a2c$c0d$1@news.mdx.ac.uk>w  b In article <pan.2004.07.28.13.09.41.710548@nottoday.com>, Jim Moseby <nospam@nottoday.com> writes:= >On Wed, 28 Jul 2004 15:04:41 +0200, Martin Vorlaender wrote:o >  >> n) >> "Jim Moseby" <nospam@nottoday.com> ...a >>> JF Mezei wrote:n >>> > @SYS$MANAGER:TCPIP$SETUP >>>a >>> $ @SYS$MANAGER:TCPIP$SETUPN >>> %DCL-E-OPENIN, error opening SYS$SYSROOT:[SYSMGR]TCPIP$SETUP.COM; as input >>> -RMS-E-FNF, file not found >> - >> What he meant to say was: >> e >> @SYS$MANAGER:TCPIP$CONFIG >>  I >I get the same error.  I get the feeling that we are on an older releasemF >of VMS than most people have. (In fact, I'd be really surprised if we	 >weren't)n >n  G To confirm what version of VMS and UCX / TCPIP services you are runninge type:-    
 sh sys/noproc    andt  
 UCX sh ver      You should get something like :-   Alpha2:sh sys/noprocM OpenVMS V7.3-1  on node ALPHA2  28-JUL-2004 14:28:42.52  Uptime  106 03:56:45  Alpha2:e   andl   Alpha2:ucx sh verl  ?   Compaq TCP/IP Services for OpenVMS Alpha Version V5.3 - ECO 2l4   on a AlphaServer 2100 5/300 running OpenVMS V7.3-1  C There was a rewrite at UCX 5.x where the product name changed from  M UCX to TCPIP services. A lot of the command files had their names changed at d2 that point from UCX$xxxxx.com  to TCPIP$xxxxx.com       
 David Webb Security Team Leader CCSS Middlesex University     >$ @SYS$MANAGER:TCPIP$CONFIGL >%DCL-E-OPENIN, error opening SYS$SYSROOT:[SYSMGR]TCPIP$CONFIG.COM; as input >-RMS-E-FNF, file not founda > J >> The /GATEWAY=ALTERNATE qualifier is only meaningful in combination withF >> the /ZONE (be which SMTP determines whether a mail is to be locally >> delivered). >a >Thanks! >h >JM    ------------------------------  # Date: Wed, 28 Jul 2004 14:03:58 GMT'! From: Nigel Barker <nigel@hp.com>t' Subject: Re: SMTP setup for rank newbie 8 Message-ID: <ggcfg0p5lpr96d1p989bd9goorcgnmlf25@4ax.com>  K On Wed, 28 Jul 2004 09:09:41 -0400, Jim Moseby <nospam@nottoday.com> wrote:   = >On Wed, 28 Jul 2004 15:04:41 +0200, Martin Vorlaender wrote:a >  >>  ) >> "Jim Moseby" <nospam@nottoday.com> ...e >>> JF Mezei wrote:i >>> > @SYS$MANAGER:TCPIP$SETUP >>>o >>> $ @SYS$MANAGER:TCPIP$SETUPN >>> %DCL-E-OPENIN, error opening SYS$SYSROOT:[SYSMGR]TCPIP$SETUP.COM; as input >>> -RMS-E-FNF, file not found >> r >> What he meant to say was: >> u >> @SYS$MANAGER:TCPIP$CONFIG >> mI >I get the same error.  I get the feeling that we are on an older release F >of VMS than most people have. (In fact, I'd be really surprised if we	 >weren't)  >l >$ @SYS$MANAGER:TCPIP$CONFIGL >%DCL-E-OPENIN, error opening SYS$SYSROOT:[SYSMGR]TCPIP$CONFIG.COM; as input >-RMS-E-FNF, file not founds  + You are on an old version you need to entert @SYS$MANAGER:UCX$CONFIGr& also check which version you have with UCX SHOW VERSION   -- Nigel Barker Live from the sunny Cote d'Azurm   ------------------------------  # Date: Wed, 28 Jul 2004 13:57:33 GMTt! From: Nigel Barker <nigel@hp.com>a' Subject: Re: SMTP setup for rank newbie 8 Message-ID: <d3cfg0tblkcakudq2h27j7fqb7ejtn2dkn@4ax.com>  K On Wed, 28 Jul 2004 09:05:39 -0400, Jim Moseby <nospam@nottoday.com> wrote:n  I >If I issue the TCPIP$CONFIG command at the $ prompt, I get several pagessH >of TCPIPtrace information.  I don't seem to have, or do not know how toH >invoke the menu driven configuration utilities that so many people have$ >suggested be used to set up SMTP.    M TCPIP$CONFIG is not a command but a script. At the command prompt you need to,# enter @SYS$STARTUP:TCPIP$CONFIG.COM9   -- Nigel Barker Live from the sunny Cote d'Azurh   ------------------------------  # Date: Wed, 28 Jul 2004 14:01:53 GMTU! From: Nigel Barker <nigel@hp.com> ' Subject: Re: SMTP setup for rank newbiey8 Message-ID: <77cfg09qg0ipi22egtf1cenv292blqthhg@4ax.com>  K On Wed, 28 Jul 2004 09:05:39 -0400, Jim Moseby <nospam@nottoday.com> wrote:.   >> Are you really running UCX ? F >> You know TCPIP V5.4 is current (with V5.5 coming end of the year) ? > H >I know we are running UCX, but I have no clue as to why.  I walked intoJ >this network set up as it is.  I have little VMS experience, and wouldn't; >know how to go about getting the upgrade or installing it.e  D UCX is the old name for TCP/IP Services on OpenVMS (it's actually anO abbreviation of VMS Ultrix Connection but that's probably more information thann you need:-).  P The UCX command has been superseded by TCPIP but the old command still works forM backwards compatibility reasons. It may well be that you are running a recenttH version. To establish which version you are running enter at the command prompt:-   UCX SHOW VERSION or TCPIP SHOW VERSIONK or given that VMS allows you to abbreviate commands then more cryptically:-F TCPI SH VERe   -- Nigel Barker Live from the sunny Cote d'AzurV   ------------------------------  % Date: Wed, 28 Jul 2004 10:07:32 -0400s& From: Jim Moseby <nospam@nottoday.com>' Subject: Re: SMTP setup for rank newbiee8 Message-ID: <pan.2004.07.28.14.07.32.83861@nottoday.com>  2 On Wed, 28 Jul 2004 13:35:08 +0000, david20 wrote:  I > To confirm what version of VMS and UCX / TCPIP services you are runningn > type:- >     F Thanks David.  For completeness of the thread I'll add the versions as& displayed by the commands you suggest:   $ sh sys/noprocdH OpenVMS V7.1  on node HYDRA  28-JUL-2004 10:08:32.86  Uptime  8 15:16:08   $ ucx sh ver  8   Digital TCP/IP Services for OpenVMS Alpha Version V4.17   on a AlphaServer 2100A 5/300 running OpenVMS V7.1    s   ------------------------------  % Date: Wed, 28 Jul 2004 15:26:17 +0100s- From: John Laird <nospam@laird-towers.org.uk>"' Subject: Re: SMTP setup for rank newbieg8 Message-ID: <7mcfg05tjgh2kssvv10mmlq6j9n2beoihk@4ax.com>  K On Wed, 28 Jul 2004 08:48:06 -0400, Jim Moseby <nospam@nottoday.com> wrote:    >Here it is: >  >$ type ucx$smtp_logfile.log >tE >%%%%%%%%%%%%                   28-JUL-2004 08:36:12.84  %%%%%%%%%%%%-D >%UCX-I-SMTP_LOGSUC, Using log file SYS$MANAGER:UCX$SMTP_LOGFILE.LOG >(E >%%%%%%%%%%%%                   28-JUL-2004 08:36:13.25  %%%%%%%%%%%%? >%RMS-E-RNF, record not found2 >4E >%%%%%%%%%%%%                   28-JUL-2004 08:36:13.30  %%%%%%%%%%%% ) >%SYSTEM-F-IVLOGNAM, invalid logical namea  C Jim, I'm going to take a wild guess and suggest that not all of thenI configuration needed is complete.  Certainly, if you started entering UCXhG commands with a bit of reading of the help (which is truly terrible and I nowhere near normal VMS standards), it is easy to miss out key steps.  As D Roy Omond pointed out, the correct configuration file to execute is: $ @sys$manager:ucx$config.com%  E Follow the steps for configuring the SMTP *client*.   VMS MAIL is notEL SMTP-aware, but can route mail via external agents which conform to its own,K proprietary, interface.  The one provided with UCX knows how to receive VMS5L mail and add entries to the queues you observed, which are then processed byH a mail client/server which does know how to pass mail on to genuine SMTPJ servers.  Without this, you do not have a hope of getting VMS MAIL to talkJ directly to EXCHANGE, so ignore suggestions that you can.  However, if youD have an application which understands SMTP (ie. it has a mail clientI built-in), then by all means point it straight at EXCHANGE.  UCX can also L provide an SMTP server itself which listens on port 25 as expected.  I thinkI this also adds queue entries either for forwarding or local delivery, nota sure.   C Most likely, you will get messages saying things are not defined or B configured in perhaps SYSUAF or UCX$SERVICE database or somewhere.I Hopefully the ucx$config.com file will sort out missing bits for you.  (I0C tried on my home Vax however, just to remind me of the prompts, andNK unfortunately I seem to have some account mismatch which it refuses to sort  out.  Sigh.)  5 As you can ping your mail server, UCX has started :-)r   --  . Talk is cheap, because supply exceeds demand.    Mail john rather than nospam...    ------------------------------  % Date: Wed, 28 Jul 2004 15:36:54 +0100e- From: John Laird <nospam@laird-towers.org.uk>P' Subject: Re: SMTP setup for rank newbie 8 Message-ID: <ubefg09ugtp83kt2d4s0665qld2j5p20j5@4ax.com>  D On Wed, 28 Jul 2004 14:01:53 GMT, Nigel Barker <nigel@hp.com> wrote:  Q >The UCX command has been superseded by TCPIP but the old command still works for N >backwards compatibility reasons. It may well be that you are running a recent	 >version.-  K Other way round, as I read the error messages.  When only UCX is available,pG there is a single command verb starting with TCPIP which is TCPIPTRACE.pJ This takes just one parameter at most, hence the complaints about too many3 parameters, as well as unrecognised qualifiers etc.i   -- y3 The mailman bringeth...  The trashman taketh away!     Mail john rather than nospam...x   ------------------------------  % Date: Wed, 28 Jul 2004 11:33:12 -0400 - From: JF Mezei <jfmezei.spamnot@teksavvy.com>f' Subject: Re: SMTP setup for rank newbie , Message-ID: <4107C737.9ABD4E91@teksavvy.com>   Jim Moseby wrote:iK > (Leave the dumb questions to me.  I'm the newbie here.  :o)  I assume UCX I > is started, but I wouldn't know.  UCX is the facility by which VMS uses , > TCP/IP, right?  If so, then it is started.  J UCX is an old product which has been replaced/renamed to "TCPIP Services".  ' Have you tried @sys$manager:UCX$SETUP ?j  M The commands inside the UCX utility are insufficient to get any of the server-H components running. There are command prodecures that need to exicute toM perform the proper setup, generate config files and also define logical names0 that point to the right places.    ------------------------------  % Date: Wed, 28 Jul 2004 11:39:26 -0400w- From: JF Mezei <jfmezei.spamnot@teksavvy.com>w' Subject: Re: SMTP setup for rank newbiee, Message-ID: <4107C8AC.12CD0156@teksavvy.com>  : > > Why do you need a SMTP service for sending mails OUT ?   The way the software works:>  F From VMSmail, thge message is submitted to a bacth queue with the SMTPN software running as a batch queue symbiont. It is the one which will take yourN message and attempt to deliver it over TCPIP, and if it fails, it will requeueT it a certain number of times before sending back to you a non delivery notification.  K The "receiving mail" portion is just a stub added which listens to port 25,sD receives a message and then submits it to the queue for processing.   N The software is designed such that to get either part working, you need to runM prodcedures which setup all the right logical names and start the queue. OnceuL this is done, you could use TCPIP DISABLE SERVICE SMTP which would result inK calls to your port 25 being rejected but wouldn't affect the mail queue andsM mail processing. (this is different from the STOP MAIL command which performsn far more "shutdown").i  S Note that if you have the old UCX product, these command may be slightly different.m  M And apologies for having use the TCPIP$SETUP or UCX$SETUP when I really meant @ TCPIP$CONFIG  or UCX$CONFIG (as someone else kindly pointed out)   ------------------------------  % Date: Wed, 28 Jul 2004 09:56:55 -0400j& From: Jim Moseby <nospam@nottoday.com>0 Subject: Re: SMTP setup for rank newbie  SOLVED?9 Message-ID: <pan.2004.07.28.13.56.54.280024@nottoday.com>f  4 On Wed, 28 Jul 2004 14:16:04 +0100, Roy Omond wrote:@ >  From all the previous exchanges, it's become obvious that you@ > are using UCX (think of it as a very old version of the TCP/IP > Services for VMS). >  > In this case, you need to: >  > 	$ @sys$manager:UCX$config >                         ^^^m    C Thanks Roy.  This gets me a configuration menu.  I took the "Cliente8 Components" option and noticed that SMTP says "Enabled".  F I then took the option that said "Configure Options 1 - 7"  and walked through all the components.f  I After I exited out of this menu, having changed nothing, I am now able toe send outgoing mail.   J NOW:  The question is, are the changes I have made over the last couple ofG days permanent?  That is, if I shut this machine down and bring it backrG up, will it remember what I have done?  If not, what do I need to do tos+ make the running config the default config?d   Thanks!!   JM   ------------------------------  % Date: Wed, 28 Jul 2004 15:44:29 +0100i- From: John Laird <nospam@laird-towers.org.uk> 0 Subject: Re: SMTP setup for rank newbie  SOLVED?8 Message-ID: <ujefg0lvhlk5voeg1us1ejek3be77isu6n@4ax.com>  K On Wed, 28 Jul 2004 09:56:55 -0400, Jim Moseby <nospam@nottoday.com> wrote:s  K >NOW:  The question is, are the changes I have made over the last couple ofsH >days permanent?  That is, if I shut this machine down and bring it backH >up, will it remember what I have done?  If not, what do I need to do to, >make the running config the default config?  L UCX STOP MAIL followed by UCX START MAIL, will test the queue operation.  ToI test the SMTP services as part of UCX's startup, run UCX$CONFIG.COM againWK and select option 5, then option 6.  Sometimes the shutdown(5) option failsnH to complete if there is anything hanging onto sockets.  So, er, don't doK this if you've telnet'd in !  UCX is a layered product which can be stoppedtL and started in isolation.  If you can do this successfully manually, then it, should reliably start when the system boots.  G Most likely the configure-all option found a small missing piece of theeJ jigsaw and popped it back in for you.  I'd hazard a guess that there was aK missing account from the "record-not-found" message when the queue tried tou start.   -- i Give me patience!  RIGHT NOW!    Mail john rather than nospam...y   ------------------------------  % Date: Wed, 28 Jul 2004 11:44:19 -0400n- From: JF Mezei <jfmezei.spamnot@teksavvy.com>h0 Subject: Re: SMTP setup for rank newbie  SOLVED?+ Message-ID: <4107C9D1.3C252DD@teksavvy.com>e   Jim Moseby wrote:ML > NOW:  The question is, are the changes I have made over the last couple of > days permanent?   M When you use the ***$CONFIG menus, it writes some config file that flags eachsG component that is configured on that system. When the system boots, theiE TCPIP$STARTUP (or UCX$STARTUP) looks at that config file to call each I component's startup command prodedure which sets up all the right logical @ names and issue the required UCX commands to enable the service.  - So yes, it SHOULD now be a "permanent" thing.    ------------------------------  % Date: Wed, 28 Jul 2004 10:34:57 -0400 & From: Jim Moseby <nospam@nottoday.com>+ Subject: SOLVED: SMTP setup for rank newbiee9 Message-ID: <pan.2004.07.28.14.34.56.643061@nottoday.com>V  H Thanks to all who have patiently endured my ignorance of VMS to steer meG to the solution.  It seems that the @sys$manager:UCX$config utility has:J sorted out whatever was keeping this from working.  I made no changes, butJ upon exit I got a flood of test emails that I had previously sent, and now* I can send outgoing email.  Thanks again!!  J NOW:  The question is, are the changes I have made over the last couple ofG days permanent?  That is, if I shut this machine down and bring it backlG up, will it remember what I have done?  If not, what do I need to do tos+ make the running config the default config?t   JM   ------------------------------   Date: 28 Jul 2004 14:49:49 GMT+ From: "Doc." <doc.cypher@openvms-rocks.com>r/ Subject: Re: SOLVED: SMTP setup for rank newbiev7 Message-ID: <Xns9534ABDF48EB1dcovmsrox@212.100.160.123>i  # %NEWS-I-NEWMSG, Jim Moseby wrote inl1 news:pan.2004.07.28.14.34.56.643061@nottoday.com o  B > NOW:  The question is, are the changes I have made over the lastE > couple of days permanent?  That is, if I shut this machine down andoG > bring it back up, will it remember what I have done?  If not, what dol= > I need to do to make the running config the default config?n  K You need to check in SYS$STARTUP:SYSTARTUP_VMS.COM to see that UCX will be -J started.  Look for UCX$STARTUP and make sure the line isn't commented out L (line starts $!).  I'd guess your system should already have this active if 3 you've been using UCX for other things like telnet.b     Doc. -- nG OpenVMS:     Eight out of ten hackers prefer *other* operating systems.tG http://www.openvms-rocks.com    Deathrow Public-Access OpenVMS Cluster.o   ------------------------------  % Date: Wed, 28 Jul 2004 09:10:23 -0400a# From: "Hal Kuff" <kuff@comcast.net>a- Subject: StorageWorks EVA to Windows Questionp- Message-ID: <ce88j2$6k7@library1.airnews.net>i  K Rather than run Securepath per se, we're intertested in using a rack switchgL (maxann, San valley?) to present EVA storage to the Windows boxes... that isK to say present 1TB of raw storage to the fibre channel switch and have that8G small switch with its internal 8 port swicth present the storage to the-; individual Windows boxes... anyone doing this? Or know how?m   ------------------------------  % Date: Thu, 29 Jul 2004 00:24:33 +0800c, From: Paul Repacholi <prep@prep.synonet.com> Subject: Re: Supported Options0 Message-ID: <87acxk2j7i.fsf@k9.prep.synonet.com>  1 ghazan@ghazan.haider.name (Ghazan Haider) writes::  A > Just for the record (to help someone else googling for this), I2  > tried the Adaptec 29160 today.  C > SRM=5.8 machine=164lx. Tried adaptec 29160 and 2940uw. Both didntcF > work... ie show dev didnt show anything beside the floppy device andC > show config|more in the PCI didnt seem to show a boot config like> > dqa0.xxx etc.e  C A 39160 *may* work. What model is your machine? A Qlogic ISP1040 isc0 a good pick, they where a standard card pre EV6.   -- n< Paul Repacholi                               1 Crescent Rd.,7 +61 (08) 9257-1001                           Kalamunda. @                                              West Australia 6076* comp.os.vms,- The Older, Grumpier Slashdot. Raw, Cooked or Well-done, it's all half baked.F EPIC, The Architecture of the future, always has been, always will be.   ------------------------------  # Date: Wed, 28 Jul 2004 17:40:02 GMTd From: r <ted@ted.com>" Subject: test - ignore* Message-ID: <41080dd3$1@news.peakpeak.com>   ignore   ------------------------------  % Date: Wed, 28 Jul 2004 09:23:46 +0200n* From: Paul Sture <nospam@sture.homeip.net>< Subject: Re: Time to patch OpenVMS - DCE-RPC buffer overflow* Message-ID: <2mp2k7FouvfaU1@uni-berlin.de>   Undisclosed wrote: > David J Dachtera wrote:e > ? >> ITRC is "login required"; so, I can't explore that just now.n >>= >> Anyway VMS *IS* immune to *ALL* buffer-overflow attacks...r >>K >> ...until you startup a network stack, and then the vulnerability lies inmB >> the network stack and/or related facilities/utilities, not VMS. >  > I > ObClintonianRemark "I guess it depends on how you define VMS". I don't u' > know what the official definition is.  > K > technically, only the Linux kernel is "Linux", but people generally call 0K > the core GNU software required to have a usable operating system + Linux a > Kernel "Linux" as well.S > K > I figured the DCE-RPC bit was included with OVMS, since it sez it's HP's   > software.e >   F DCE and RPC are separately installed products. Looking at my Hobbyist 5 licenses, DCE also appears to be separately licensed.r   ------------------------------  % Date: Wed, 28 Jul 2004 08:47:19 +0100t& From: Nic Clews <spamthis@[127.0.0.1]>< Subject: Re: Time to patch OpenVMS - DCE-RPC buffer overflow' Message-ID: <ce7lks$lil$1@lore.csc.com>T   Undisclosed wrote:E > http://www4.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBOV01056e > ? > http://www.atstake.com/research/advisories/2004/a072204-1.txt  > @ > patch here - http://www2.itrc.hp.com/service/patch/mainPage.do >  > ---T > ; > hmm... seems that OVMS is NOT immune to buffer overflows.r > H > I'll be interested in reading the Nessus NASL script to check for the $ > vuln when it comes out in 30 days. > = > damn DCE-RPC... that's the bane of Windows systems as well.s > 7 > is the DCED installed as system or kernel on OpenVMS?A  ) That is the key, only if it is installed.-  F As a reference to buffer overflows, work is taking place, not just in B VMS I hasten to add, but basically if you've knowledge of the way C program sections work, and you mark them as data areas, writeable,  F executable or non executable (etc.), that is what is being applied to G the stacks where buffer overflows target, i.e. that stack area outside t5 the used (legal) area of the stack is not executable.u  C As to VMS, the real issue here is that you end up with an imported tD vulnerability (if XYZ is used/installed), you're vulnerable if that E system is in such an area someone can use that attack, but the other eE issue which applies, is that VMS is very fussy when it comes to code mG integrity, and more often than not either the active process will fail TB (most common) or, well to be honest I've never seen it bugcheck a @ system, but, if you know different, then post here, and include H references ["my friend has heard that.." or "I think there's a cover-up  over..." is not valid here].  G If you've generally followed other discussions about protection modes, .C but also understood how VMS deals with data integrity (and program  ? integrity), you should have vague understanding that, actually AH manipulating the stack execution to perform some task or other which, I E honestly think you've of the opinion can "burst the bubble" of VMS's hI reputation, you're taking on what can only be described as a non trivial mH task. Most people tend to lose interest (and effort) in even attempting H to understand the normal running operation, turning that into an attack H which can penetrate a system whilst remaining covert is in a completely  different league.   G We'll take your reason to remain anonymous as a cautious indication of  D your inexperience with OpenVMS. Posting to this newsgroup trying to E imply that every single installation now requires an immediate patch oC won't do anything to earn respect, let alone be any measure of the 4 reality of the situation.s  I HP have made the appropriate notifications, we have already done what we  G need to do with respect to our client base, I quite expect others have mA been appropriately informed and taken appropriate actions, where eG necessary, but, just in case you're wondering, no, we don't lose sleep >> over it, and hopefully I've given you a little hint as to why.   -- eE Regards, Nic Clews a.k.a. Mr. Car Park Charges, CSC Computer Sciences  nclews at csc dot comd   ------------------------------  % Date: Wed, 28 Jul 2004 11:19:36 +0100e* From: "Richard Brodie" <R.Brodie@rl.ac.uk>< Subject: Re: Time to patch OpenVMS - DCE-RPC buffer overflow+ Message-ID: <ce7ujp$pgs@newton.cc.rl.ac.uk>r  A "Craig A. Berry" <craigberry@mac.com.spamfooler> wrote in messageoC news:craigberry-F17D3A.23182027072004@news-east.dca.giganews.com...0  ? > Tru64 and OpenVMS very likely share a DCE implementation, butm? > almost certainly have no common code in this area with HP-UX.   F I don't believe that is correct. Almost all of the DCE implementations@ are derived from the OSF codebase, so I would have thought there( would be large chunks of code in common.  H > It's quite common for exploits that yield root access on other systems% > to have only DOS impact on OpenVMS.   E I don't think anyone with any sense would claim that buffer overflowsbG don't happen on VMS. It's still an open question as to whether this onen is exploitable though.   ------------------------------  % Date: Wed, 28 Jul 2004 12:54:00 -0400m- From: JF Mezei <jfmezei.spamnot@teksavvy.com>n" Subject: US Government IT spending, Message-ID: <4107DA21.60D255CE@teksavvy.com>   from a news.com snippet:   ##J Information technology-related contracts awarded by the federal government: jumped to over $23 billion in the second quarter of 2004.  ...iH data on the government market. Federal government IT awards for the same' period last year totaled $15.5 billion.a ..K The upswing was fueled by a $10 billion contract for setting up the Visitor F and Immigration Status Indication Technology System (US-Visit) for the! Department of Homeland Security. r ##    I Who benefits from these vasts sums of money being spent ? How much of theiE piece of the pie if HP getting ? are there large VMS sales in sight ?    ------------------------------  + Date: Wed, 28 Jul 2004 07:37:59 +0000 (UTC)Y6 From: peter@langstoeger.at (Peter 'EPLAN' LANGSTOEGER)X Subject: Re: [TCPware, V73_MGMTAGENTS] Does anyone have a working installation running ?1 Message-ID: <newscache$w3xj1i$shm1$1@news.sil.at>c  Z In article <2mmgkuFodjqcU1@uni-berlin.de>, "Martin Vorlaender" <mv@pdv-systeme.de> writes:< >"Peter 'EPLAN' LANGSTOEGER" <peter@langstoeger.at> wrote...B >> I tried to run V73_MGMTAGENTS V3.0-36 on TCPware V5.6-2 but the >> agents die. >  >Not on my system. >0A >> It seems that the eSNMP service isn't running or accepting theT
 >> agents. >>. >> Does anyone have this combination working ? >g7 >Did you follow the specific installation instructions?iL >http://h71000.www7.hp.com/openvms/products/mgmt_agents/install.html#tcpware  G Not this time. But the last time I did the V2.4, I did all the requiredsH changes. So most of them should be there. (And as I have TCPIP installedH in parallel, I didn't need to extract single images from the TCPIP kit).   -- o Peter "EPLAN" LANGSTOEGERc% Network and OpenVMS system specialist? E-mail  peter@langstoeger.atF A-1030 VIENNA  AUSTRIA              I'm not a pessimist, I'm a realist   ------------------------------  + Date: Wed, 28 Jul 2004 07:45:52 +0000 (UTC)t6 From: peter@langstoeger.at (Peter 'EPLAN' LANGSTOEGER)X Subject: Re: [TCPware, V73_MGMTAGENTS] Does anyone have a working installation running ?1 Message-ID: <newscache$1hxj1i$shm1$1@news.sil.at>-  Z In article <2mmh9fFo72pcU1@uni-berlin.de>, "Martin Vorlaender" <mv@pdv-systeme.de> writes:/ >OK, I'll have to clarify that statement a bit:-6 >- I'm running V72_MGMTAGENTS V3.0-22 under VMS V7.2-2G >  (sorry. When posting I thought we had already upgraded that machine)r  " Which is quite different, I think.  0 >- it doesn't work with Opera on the client side5 >  (it does with Internet Exploder and Win32 Mozilla)u  < I tried MOZILLA on VMS and Win32 and IIRC I also tried M$IE. But that was the last time. D This time, I noted the WBEM$ processes missing (but I started them).6 So I looked into the logfiles and saw they were dying.   And I found the reason, too.L In TCPWARE:TCPWARE_CONFIGURE.COM (which I almost always edit by hand insteadH of CNFNET) there was SMUX enabled and AGENTX disabled. Don't know why...  < >- I've yet to make the thresholds work. For some reason the: >  java program responsible for those doesn't accept me as >  authorized.  I With V2.4 I had success in seeing another VMS system in the WBEM display."J With V3.0-30 I had success in logging in as admin but couldn't see another: system. And with V3.0-36 I can only login as user if ever.   -- S Peter "EPLAN" LANGSTOEGERT% Network and OpenVMS system specialistt E-mail  peter@langstoeger.atF A-1030 VIENNA  AUSTRIA              I'm not a pessimist, I'm a realist   ------------------------------  + Date: Wed, 28 Jul 2004 07:49:39 +0000 (UTC)m6 From: peter@langstoeger.at (Peter 'EPLAN' LANGSTOEGER)X Subject: Re: [TCPware, V73_MGMTAGENTS] Does anyone have a working installation running ?1 Message-ID: <newscache$bnxj1i$shm1$1@news.sil.at>   Z In article <ce5ij6$h5g$1@news.process.com>, "Richard Whalen" <WhalenR@process.com> writes:E >As Martin pointed out, getting the configuration set up correctly isp >essential.d  M Yup. Maybe the V3.0 is a little bit different and need some more tweaking ;-)   4 >The web page that is correct, but missing one step: >$ @TCPWARE:CNFNET SNMP-( >and answer YES for SNMP AgentX service.  @ And this was my major bug. But I don't know why it got disabled.M It was already enabled some years ago (perhaps the V5.6 upgrade in 2002 ? ;-)    --   Peter "EPLAN" LANGSTOEGER % Network and OpenVMS system specialistn E-mail  peter@langstoeger.atF A-1030 VIENNA  AUSTRIA              I'm not a pessimist, I'm a realist   ------------------------------  + Date: Wed, 28 Jul 2004 07:56:01 +0000 (UTC)n6 From: peter@langstoeger.at (Peter 'EPLAN' LANGSTOEGER)X Subject: Re: [TCPware, V73_MGMTAGENTS] Does anyone have a working installation running ?1 Message-ID: <newscache$yxxj1i$shm1$1@news.sil.at>r  Z In article <2mn2diFoaf98U1@uni-berlin.de>, "Martin Vorlaender" <mv@pdv-systeme.de> writes: >Another machine:  >a >$ netcu show version 6 >TCPware(R) V5.6-2 Copyright (c) 2002 Process Software >I< >OpenVMS version V7.3-2   booted on 27-JUL-2004 13:43:33.00,- >        running on a AlphaStation 250 4/266.r >t! >$ product show product v73_mgmt*o= >----------------------------------- ----------- ------------r6 >PRODUCT                             KIT TYPE    STATE= >----------------------------------- ----------- ------------p: >HP AXPVMS V73_MGMTAGENTS V3.0-30    Full LP     Installed= >----------------------------------- ----------- ------------i   And what SSL version ? Time to upgrade ;-)   B >While I wouldn't say that this configuration works - I do see theA >frames but they don't don't contain any data - the agent doesn'tw@ >crash. Did you follow the special installation instructions for >TCPware onkL >http://h71000.www7.hp.com/openvms/products/mgmt_agents/install.html#tcpware  N They agents run now. But I do see nothing in the frames. And I see the browserK saying "Ok" when logging in but the frame doesn't change. And when I switch 4 pages I see me logged in as user (instead of admin).  @ >Funny enough: the thresholds don't work with TCP/IP Services on >that machine either.b  B I don't know what you mean with thresholds, but I do see no betterC behaviour with TCPIP, too. That's why I wanted to try the CIM, too.a  K So, thanks for responding (and telling me that you have some problems, too)l   -- r Peter "EPLAN" LANGSTOEGER % Network and OpenVMS system specialisti E-mail  peter@langstoeger.atF A-1030 VIENNA  AUSTRIA              I'm not a pessimist, I'm a realist   ------------------------------  % Date: Wed, 28 Jul 2004 12:16:38 +0200c- From: "Martin Vorlaender" <mv@pdv-systeme.de>iX Subject: Re: [TCPware, V73_MGMTAGENTS] Does anyone have a working installation running ?* Message-ID: <2mpco6Fpp73pU1@uni-berlin.de>  # I started a little upgrade orgy ;-)   ; "Peter 'EPLAN' LANGSTOEGER" <peter@langstoeger.at> wrote...l1 > "Martin Vorlaender" <mv@pdv-systeme.de> writes:  > >Another machine:  > >) > >$ netcu show versione8 > >TCPware(R) V5.6-2 Copyright (c) 2002 Process Software > >l> > >OpenVMS version V7.3-2   booted on 27-JUL-2004 13:43:33.00,/ > >        running on a AlphaStation 250 4/266.-  < Now updated with all current ECOs. Especially SNMPD_V562P030% (as listed on the requirements page).>  # > >$ product show product v73_mgmt*i? > >----------------------------------- ----------- ------------ 8 > >PRODUCT                             KIT TYPE    STATE? > >----------------------------------- ----------- ------------r< > >HP AXPVMS V73_MGMTAGENTS V3.0-30    Full LP     Installed? > >----------------------------------- ----------- ------------C >$ > And what SSL version ?   Was 1.1-A, now 1.1-B.h   > Time to upgrade ;-)s   Done. Now at 3.0-36.  D > >While I wouldn't say that this configuration works - I do see theC > >frames but they don't don't contain any data - the agent doesn't 	 > >crash.u >iH > They agents run now. But I do see nothing in the frames. And I see theC > browser saying "Ok" when logging in but the frame doesn't change.   D Same here. On the summary page: contact information and location allB show "N/A". The WBEM logfiles and the TCPware SNMP log files don't9 show errors. I'll try to get that information by snmpget.   H > And when I switch pages I see me logged in as user (instead of admin).  @ Did you grant WBEM$ADMIN to the VMS user you're logging in with?@ Even if you were on a V3.x before, the installation guide statesB that "Installation of the kit will revoke these rights identifiers( unconditionally as part of the upgrade."  B > >Funny enough: the thresholds don't work with TCP/IP Services on > >that machine either.t > D > I don't know what you mean with thresholds, but I do see no betterE > behaviour with TCPIP, too. That's why I wanted to try the CIM, too.a  H When it works, there are small triangles on the "File System Space Used"F and "CPU Utilization" pages above each disk/CPU bar denoting a warning" (yellow) and critical (red) level.     cu,s   Martin  A P.S.: a new step I've seen in the TCPware specific section of the1& installation guide is to create a file1 SYS$SYSDEVICE:[TCPIP$SNMP]TCPIP$VMS_SNMP_CONF.DAT   ; P.P.S.: is the entry "IDS_SNMP_WRITE_COMMUNITY=noelmginkgo"s; in the file SYS$SPECIFIC:[WBEM.WEB.IM.WEBAGENT]WEBAGENT.INIG- correct? I'd assume it has to be "elmginkgo".S --  A                            | Martin Vorlaender  |  OpenVMS rules!M4 Microsoft isn't the Borg:  | work: mv@pdv-systeme.deK the Borg have proper       |       http://www.pdv-systeme.de/users/martinv/e; networking.                | home: martin@radiogaga.harz.des   ------------------------------   End of INFO-VAX 2004.415 ************************