1 INFO-VAX	Fri, 26 Nov 2004	Volume 2004 : Issue 656       Contents:  Determining source of connection$ Re: Determining source of connection$ Re: Determining source of connectionP Re: interesting take on Olsen's "no reason for any individual tohave acomputer iP Re: interesting take on Olsen's "no reason for any individual tohave acomputer i* Re: Newbie questions about Advanced Server  F ----------------------------------------------------------------------    Date: 25 Nov 2004 18:58:16 -0800# From: sinobato@yahoo.com (Sinobato) ) Subject: Determining source of connection = Message-ID: <ec657b64.0411251858.4160d71a@posting.google.com>    Hi all,   F I am currently investigating a problem on one of our nodes (DEC 3000 -D M900, OVMS v6.2-1H3, UCX v4.2) wherein our operator.log file startedE to suddenly increase in size. Investigating further, I found out that E it was being filled up by this similar message (different process IDs  for each message):  8 %%%%%%%%%%%  OPCOM  25-NOV-2004 16:11:13.54  %%%%%%%%%%%( Message from user AUDIT$SERVER on NODE01B Security alarm (SECURITY) and security audit (SECURITY) on NODE01,
 system id: 51 6 Auditable event:        Detached process login failure/ Event time:             25-NOV-2004 16:11:13.54 ( PID:                    001CFC59        F Username:               SYSTEM          Parent username:        SYSTEM: Status:                 %RMS-E-CRE, ACP file create failed  C This is also filling up our console, and currently, I have disabled F auditing for detached process login failures and our operator.log seemF to have stopped growing, but the message still appears on our console.  E I have been trying to determine what the root cause of this, but with D this very limited error message, I have already exhausted whatever IA know of in determining the source of this problem. I have already E looked at for system log files that has reached the version limit but  found none.   ? Is there a way how I can determine what process is causing this E problem? Again, each message is giving a different process ID so that E when I try to check on the process ID on the message, it is no longer 	 existing.     Thanks in advance for your help!   Regards, Sinobato   ------------------------------  % Date: Thu, 25 Nov 2004 22:20:47 -0500  From: norm.raphael@metso.com- Subject: Re: Determining source of connection Q Message-ID: <OFF444CE91.67B9FA96-ON85256F58.00123A79-85256F58.00129ED8@metso.com>   + This is a multipart message in MIME format. " --=_alternative 00129ED485256F58_=, Content-Type: text/plain; charset="US-ASCII"  % Have you checked the accounting file? ) Do you have a full disk or quota problem?   > sinobato@yahoo.com (Sinobato) wrote on 11/25/2004 09:58:16 PM:  	 > Hi all,  > H > I am currently investigating a problem on one of our nodes (DEC 3000 -F > M900, OVMS v6.2-1H3, UCX v4.2) wherein our operator.log file startedG > to suddenly increase in size. Investigating further, I found out that G > it was being filled up by this similar message (different process IDs  > for each message): > : > %%%%%%%%%%%  OPCOM  25-NOV-2004 16:11:13.54  %%%%%%%%%%%* > Message from user AUDIT$SERVER on NODE01D > Security alarm (SECURITY) and security audit (SECURITY) on NODE01, > system id: 51 8 > Auditable event:        Detached process login failure1 > Event time:             25-NOV-2004 16:11:13.54 # > PID:                    001CFC59  H > Username:               SYSTEM          Parent username:        SYSTEM< > Status:                 %RMS-E-CRE, ACP file create failed > E > This is also filling up our console, and currently, I have disabled H > auditing for detached process login failures and our operator.log seemH > to have stopped growing, but the message still appears on our console. > G > I have been trying to determine what the root cause of this, but with F > this very limited error message, I have already exhausted whatever IC > know of in determining the source of this problem. I have already G > looked at for system log files that has reached the version limit but 
 > found none.  > A > Is there a way how I can determine what process is causing this G > problem? Again, each message is giving a different process ID so that G > when I try to check on the process ID on the message, it is no longer  > existing.  > " > Thanks in advance for your help! > 
 > Regards,
 > Sinobato  " --=_alternative 00129ED485256F58_=+ Content-Type: text/html; charset="US-ASCII"     O <br><font size=2 face="sans-serif">Have you checked the accounting file?</font> S <br><font size=2 face="sans-serif">Do you have a full disk or quota problem?</font>  <br>F <br><font size=2><tt>sinobato@yahoo.com (Sinobato) wrote on 11/25/2004 09:58:16 PM:<br> <br> &gt; Hi all,<br>	 &gt; <br> I &gt; I am currently investigating a problem on one of our nodes (DEC 3000  -<br> M &gt; M900, OVMS v6.2-1H3, UCX v4.2) wherein our operator.log file started<br> N &gt; to suddenly increase in size. Investigating further, I found out that<br>F &gt; it was being filled up by this similar message (different process IDs<br>  &gt; for each message):<br> 	 &gt; <br> P &gt; %%%%%%%%%%% &nbsp;OPCOM &nbsp;25-NOV-2004 16:11:13.54 &nbsp;%%%%%%%%%%%<br>1 &gt; Message from user AUDIT$SERVER on NODE01<br> K &gt; Security alarm (SECURITY) and security audit (SECURITY) on NODE01,<br>  &gt; system id: 51<br>G &gt; Auditable event: &nbsp; &nbsp; &nbsp; &nbsp;Detached process login  failure<br> F &gt; Event time: &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 25-NOV-2004 16:11:13.54<br> H &gt; PID: &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;. &nbsp;001CFC59 &nbsp; &nbsp; &nbsp; &nbsp;<br>F &gt; Username: &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; SYSTEMG &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Parent username: &nbsp; &nbsp; &nbsp;  &nbsp;SYSTEM<br>P &gt; Status: &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; %RMS-E-CRE, ACP file create failed<br>	 &gt; <br> L &gt; This is also filling up our console, and currently, I have disabled<br>F &gt; auditing for detached process login failures and our operator.log seem<br>O &gt; to have stopped growing, but the message still appears on our console.<br> 	 &gt; <br> N &gt; I have been trying to determine what the root cause of this, but with<br>G &gt; this very limited error message, I have already exhausted whatever  I<br> J &gt; know of in determining the source of this problem. I have already<br>F &gt; looked at for system log files that has reached the version limit but<br>  &gt; found none.<br>	 &gt; <br> H &gt; Is there a way how I can determine what process is causing this<br>N &gt; problem? Again, each message is giving a different process ID so that<br>N &gt; when I try to check on the process ID on the message, it is no longer<br> &gt; existing.<br>	 &gt; <br> ) &gt; Thanks in advance for your help!<br> 	 &gt; <br>  &gt; Regards,<br>  &gt; Sinobato<br>  </tt></font>$ --=_alternative 00129ED485256F58_=--   ------------------------------  % Date: Thu, 25 Nov 2004 22:37:59 -0500 - From: JF Mezei <jfmezei.spamnot@teksavvy.com> - Subject: Re: Determining source of connection , Message-ID: <41A6A507.A2E2F6D0@teksavvy.com>   Sinobato wrote: 8 > Auditable event:        Detached process login failure" > PID:                    001CFC59H > Username:               SYSTEM          Parent username:        SYSTEM< > Status:                 %RMS-E-CRE, ACP file create failed  I The detached process is created with /OUTPUT or /ERROR destinations which > failed, hence the process failed before it can actually start.   Common causes:> -one of the output files already exists at version limit 32768  I -the output files exist in a directory with a version limit of say 2, and H there are already 2 processes running, so when you try to create the 3rdN output file, it fails because it is unable to delete the oldest log file since* it is still in use by the other processes.      : pipe show dev/files/nosys <disk> | search sys$input SYSTEM  L for each device. Look for files where more than one version is in use at theM same time, then find out which files are opened by those processes and you'll  have a clue.   ------------------------------  % Date: Thu, 25 Nov 2004 21:05:25 -0500 # From: "John Smith" <a@nonymous.com> Y Subject: Re: interesting take on Olsen's "no reason for any individual tohave acomputer i , Message-ID: <vOCdnSRq0pn7EjvcRVn-rQ@igs.net>   Richard Tomkins wrote: > I am Richard Tomkins. F > I worked in the Digital Equipment Corporation manufacturing plant in/ > Kanata, Ontario Canada, from 1986 until 2001. E > My jobs were, Manufacturing Support Technologist, Product Engineer, E > Process Engineer, Trainer, Consultant and CSS Technology Architect.  > E > The plant was very diverse when I joined, making backplanes for PDP D > and VAX computer systems and building various VAX computer sytems,D > such as the 11/750, 11/780, 9250, 8350, 8550. We had a development > laboratory that F > designed all the backplanes used in all the VAX computers, including	 > the ill F > timed VAX 9000 backplane modules. Over time we added the manufacture > of> > boards for VAX computers and OEM models and also took on the > maufacture of  > boards for the network gear. > B > I worked in an elite technology group that oversaw, designed andD > managed the technology used in the manufacturing operations, there > were 8 of us. WeG > designed, installed and managed the network that drove our operations  > inH > boards and systems. We designed and managed the computing complex (VAXA > cluster) that performed automated testing of all our VAX and PC  > systems, and boards. > F > The VAX Fault Tolerant Computers were maufactured exclusively in our > plant. > C > The early forays into the PC world happened under customer single  > sourceH > demands. Lots of things were tried, the VT100 thingy, the DECmate, theG > Rainbow and others. Oue first real foray into PC's on a serious level  > was E > with Tandy as a partner. We also did a partner ship with Ollivetti, G > low end desktops and laptops and notebooks. The Ollivetti laptops and  > notebooks were > all recalled.  > G > As the corporation consolidated its manufacturing operations over the  > years,, > more and more product was built in Kanata. > F > We did our own low cost PC's by going to a one of our disk plants in	 > Tainwan @ > and go tthem to cook up a strong little groups of systems, the > so-called  > Tiger series.  > G > I was the Product Engineer for the MicroVAX 3100 model 10 and 20, the  > InfoServer 100, and 150. > F > We also built products for Apple Computer in Kanata, desktops, laser > printers and sub-assemblies. > + > The last VAX shipped from Kanata in 1999.  > D > The Kanata plant was the sole source plant in North America for PC$ > production from about 1996 onward. > G > I was a member of the Technical Group ATF (Advanced Technology Forum) B > that designed and developed FIS (Factory Installed Software) forD > ULTRIX, OpenVMS, OSF/1, then Tru64 UNIX and of course, Windows and > company, NextStep, Novell,F > SCO Unix and others. This was an interplant group that met every two > monthsA > or so for a few days at different sites worlwide. I secured the  > budget forD > the group one year in a presentation to the corporate folks. I was > told IF > had 15 minutes for my presentation and money was tight, I'd be luckyB > to see $250k. I spent almost 2 hours in the presentation and was > given $1.2
 > million. > G > We paid a Royalty to Microsoft on every computer sold if it could run  > a MSG > OS. About 40% of the product was shipped without a Microsoft product,  > but weD > still paid the Royalty. Take it or find another Windows source wasC > Microsofts argument. Of course, there was no negotiation on this. > > When the Netscape guy said that dealing with MS was like the > Godfather, one day youF > expect to wake up with a horses head in your bed, we all nodded with
 > experience.  > F > Windows NT development on Alpha was paid for entirely by Digital and > employed Digital staff.  > A > Module production was an exclusive domain of the Albeququre New  > Mexico plantB > at one time. Some bright weenie got the idea that oyu coudl make > modules inE > Mexco cheaper. It took almost two years to move the entire assembly 	 > line to C > Mexico and the close the Alebququere plant. After struggling with G > sub-standard quality for 6 months, we moved the entire operation from  > Mexco F > to Kanata in 3 months and substantially rasied the quality levels toF > where Albequequere had them before. Mexico was a stupid idea. Graft,
 > corruption, G > staff being threatened with harm, arbitrary jail terms for not paying G > off government officials, poor workers, bad work ethic, no concept of & > ISO 9000 standards. Need I say more. > D > I probably could fill a book with what I know and what I have been
 > privy toE > hear. Like the time Larry Ellison wanted us out of the Video Server F > business, so he'd stop making RDB for OpenVMS if we didn't clear out > of > town.. > H > Digital had an open door policy, or so they claimed. I have personanlyC > communicated with Bob Plamer on a number of issues while I worked 
 > there. ID > may or may not have positively influenced products to some degree. > G > The HiNote Laptops were made by Citizen Watch Company. We moved in to B > their production facility right after Comapq beat a retreat from > them. Left most F > of thier stuff behind and wrote it off, we brought the Citizen Watch	 > Company 2 > into the world of Quality Product Manufacturing. > G > Digital invented the Water Wash systems for Electronic Modules and as G > a good corporate citizen of the world gave the technology to everyone  > for free.     K Amongst the lessons in your time is that if you are a hardware manufacturer L and you don't do your own software too, you run the risk of being toasted by your erstwhile 'partners'.   ------------------------------  % Date: Thu, 25 Nov 2004 18:24:30 -0500 - From: JF Mezei <jfmezei.spamnot@teksavvy.com> Y Subject: Re: interesting take on Olsen's "no reason for any individual tohave acomputer i , Message-ID: <41A669AD.63D9DD76@teksavvy.com>   jmfbahciv@aol.com wrote:H > Palmer was supposed to strip the company of cash and all product linesD > that had nothing to do with the customer support piece of the biz.H > This is an educated guess based on what happened inside the company; I > saw no documents.   M No, Palmer was SUPPOSED to take a big fat Digital from Olsen and trim the fat N and turn it into a lean and mean competitive company. He didn't know how to doI this, and instead of admitting he was incompetant, he decided to sell off 5 assets untl company was small enough to be purchased.    ------------------------------    Date: 25 Nov 2004 15:32:11 -0800< From: michael.o'connor@bluescopesteel.com (Michael O'Connor)3 Subject: Re: Newbie questions about Advanced Server = Message-ID: <9865a1d6.0411251532.10bfa4c3@posting.google.com>   _ "Brad McCusker" <brad.mccuskerNOSP@Mhp.com> wrote in message news:<zkkpd.870$LT.47@fe05.lga>... 3 > Some quick responses to try to get you moving....  > L > "Michael O'Connor" <michael.o'connor@bluescopesteel.com> wrote in message 9 > news:9865a1d6.0411241757.152ec2b1@posting.google.com... J > > What I really want to do is use Microsoft Visual C++ on a Windows 2000H > > PC to edit C source files that reside on an Alpha. Until now, I haveI > > FTP'ed the files between PC and Alpha, but that is such a pain that I 5 > > am now trying to use Advanced Server (Pathworks).  > > F > > I have installed Advanced Server V7.3A on an Alpha running OpenVMSH > > 7.3-2, with "Advanced Server and OpenVMS" as the security model, and > L > My Advanced Server seminars used to teach people that only those with the K > tightest security concerns, and a prior OpenVMS security implimentation,  N > need to use VMS and Advanced Server model.  Advanced Server security should  > be sufficent.  >   > > the following configuration: > > - > >   1.  Run the License Server:          NO - > >   2.  Enable Timesource service:       NO - > >   3.  Enable Alerter service:          NO . > >   4.  Enable Netlogon service:         YES4 > >   5.  Advanced Server domain:          MY_DOMAIN2 > >   6.  Advanced Server role:            PRIMARY2 > >   7.  Advanced Server computer name:   MY_NODEG > >   8.  Server announce comment:    Advanced Server V7.3A for OpenVMS 8 > >   9.  Advanced Server language:        English (USA)- > >   10. Enable NT style printing:        NO  > >  > N > Everything there looks good.  You even got the license server part correct, ! > which most 'newbies' get wrong.  > J > > With Advanced Server running, I created a local user "USER1" (the sameI > > user name as my VMS account), and created a share on some directories J > > with the options /NOPERMISSIONS/PERMISSIONS=(USER1=FULL). Logging intoI > > Windows as the the user "USER1", I can access the share, and can open 7 > > files, but cannot save them - the Windows error is:  > >  > > "Cannot access this file. 0 > > Check security privileges over the network." > >  > N > You've told me what the file permissions are from the Advanced Server point O > of view, but, not from the VMS point of view.  From VMS, who owns the files,  K > and what are the file permissions?  Then, you need to make sure that the  K > Advanced Server user "USER1" really does map to VMS "USER1" (or some VMS  I > user that in fact has VMS access to the file).  I don't recall if that  O > should happen by default or not, but, you can force the issue with a command  J > "$ ADMINISTER ADD HOSTMAP ...".  There is also some lanman.ini/registry O > parameters to control some of the deafult mappings such as when the networks  O > username matches the VMS user name, but, I don't recall the exact parameters   > right now. > H > > If I change the security model to "Advanced Server" only, I can saveI > > and create files. Why is this, and do I need to worry about it from a  > > security point of view?  > >  > O > See above, and, I don't think you need to worry about it.  But, that depends  O > on your security needs in your environemnt.  Hopefully I've given you enough  ! > information to figure this out.  > O > The point of my "don't need to use AS and VMS mode" statement is that if you  L > choose that mode, you need to worry about two levels of security, all the < > time.  Your statement above only considers one level (AS). > D > (Actually, there is 3 levels.  You didn't mention the share level 2 > permissions, but, by default they are wide open) > G > > Another question - when a file is edited and saved from the Windows C > > end, it retains its original version number on the OpenVMS file G > > system, and the "date modified" attribute of the file is updated. I J > > would much prefer it if a new version was created, as happens when theE > > file is edited and saved in OpenVMS. Can I change this behaviour?  > N > Not from Advanced Server's point of view.  Maybe someone else knows a trick  > to effect the same behavior? > G > > Also, is there any way to see the different versions of a file from  > > the Windows end? > " > File versions in Windows?  Nope. >  > > H > > While I'm at it, I vaguely recall hearing that there is some kind ofE > > DEC C "add-in" for Microsoft Visual C++. Does anyone know where I 3 > > could find some information about this product?  > O > Its called Enterprise Toolkit for VMS.  Sounds like it might be a good match  E > for you.  See http://h71000.www7.hp.com/commercial/et/et_index.html  > 
 > Regards, >  > Brad McCusker ' > Transition Engineering and Consulting  > HP > Nashua NH USA 5 > (former Advanced Server Engineering Project Leader)   B When I login to VMS from a terminal, I have full access to all theF files in the shared directories. I am either the owner, or in the same$ group as the owner, for those files.  B I read somewhere in the AS documentation that there is an implicitF mapping between VMS and Advanced Server users, so I did not explicitlyC map USER1 at the time. I have just tried the ADMINISTER ADD HOSTMAP > USER1 USER1 command, with "Advanced Server and OpenVMS" as theE security model, and now I can edit and create files. My understanding F of implicit mapping is obviously incomplete. Perhaps it is because the: AS user was created as a local, rather than a global user.  @ I still can't get Advanced Server to create a file with the next@ version number, when a file is saved. Any other ideas out there?   ------------------------------   End of INFO-VAX 2004.656 ************************