1 INFO-VAX	Sat, 15 Jul 2006	Volume 2006 : Issue 390       Contents:@ Re: Any Way to Validate Username & Password from an Application?@ Re: Any Way to Validate Username & Password from an Application?1 Re: Parsec webinar (2006-07-12) OpenVMS Licensing 1 Re: Parsec webinar (2006-07-12) OpenVMS Licensing  Re: SSL for SMTP tests ?E RE: VMS and HPVM (was: Parsec webinar (2006-07-12) OpenVMS Licensing) E Re: VMS and HPVM (was: Parsec webinar (2006-07-12) OpenVMS Licensing) E Re: VMS and HPVM (was: Parsec webinar (2006-07-12) OpenVMS Licensing) E Re: VMS and HPVM (was: Parsec webinar (2006-07-12) OpenVMS Licensing)  XP1000 Model question  Re: XP1000 Model question   F ----------------------------------------------------------------------    Date: 14 Jul 2006 15:00:44 -0500- From: Kilgallen@SpamCop.net (Larry Kilgallen) I Subject: Re: Any Way to Validate Username & Password from an Application? 3 Message-ID: <7rBOhK1WERiF@eisner.encompasserve.org>   \ In article <44B79BF1.1020402@picard.eurokom.ie>, Tom Wade <nospam@picard.eurokom.ie> writes: > D >> SYS$GETUAI (SALT and Algorithm and encrypted password value) and D >> SYS$HASH_PASSWORD toe generate the encrypted password value usingC >> the SALT and algorithm with the password text you query for when   >> wanting to validate the user. > C > It's very important to call the $SCAN_INTRUSION system service as F > well, if the username and password are coming from something like anC > Internet web form.  Otherwise, somebody can come up with a script C > which will try to guess passwords by brute force ($SCAN_INTRUSION ' > is called automatically by LOGINOUT).   8 The intrusion code is also called automatically by $ACM.   ------------------------------  % Date: Sat, 15 Jul 2006 08:26:14 +0800 3 From: "Richard Maher" <maher_rj@hotspamnotmail.com> I Subject: Re: Any Way to Validate Username & Password from an Application? 1 Message-ID: <e99civ$4rm$1@news-02.connect.com.au>    Hi Tom,   G Since VMS 6.2, the intrusion code is also called by Tier3 Communication F Servers at user-mode. And, following my advice, is also called by Rdb.I (Unfortunately at Exec-Mode. Boy, do I feel like a dill :-) Still, better + than an open dictionary-attack bludgeon eh?   K What is the OPs plan for maintaining "No. of failures since last successful I login" and "Last (non)interactive login time"? $getuai/$setuai are pretty / crap at locking and trapping hidden updates :-(    Regards Richard Maher   L PS. I don't wish to appear unwaveringly negative, but I personally find $ACML the most *NON* VMS System Service I have ever seen :-( Is this where all theL engineers that wrote $IPC and $DNS went to die? You know; the guys who won'tL do something with 10 SSs if they can possibly shoe-horn it all into one withJ 52 parameters, morphing-iterations and oodles of flags. (After "SeperatingI Form and Function" that was also a big thing for DECForms wasn't it? "And L FMS has just far too many routines!", bizarre!) And if you're not interestedI in Windows authentication why would you voluntarily call this routine? If H you've got the time/inclination to write a detached server process to doI just the VMS authentication bits then I'll write the UWSSs to talk to it. : (Or maybe Hoff would like to *show* you how?) Credentials?I Persona_Extensions? My big toe! (If you're $SETUAIing etc don't forget to I set the TCB bit on the process to control auditing. If someone posted the @ code from (the open source?) APACHE$PRIVILEGED that might help?)  = PPS. If anyone wants to write something really useful like: -   I Given an IP Address go out and verify that it is an NT box on the Lan and ? that someone is currently logged-in and, if so, return their NT K Usernam/domain and default VMS username that they are entitled to assume on * this node, then I'd buy that for a dollar!    6 "Tom Wade" <nospam@picard.eurokom.ie> wrote in message* news:44B79BF1.1020402@picard.eurokom.ie... > D > > SYS$GETUAI (SALT and Algorithm and encrypted password value) andE > > SYS$HASH_PASSWORD toe generate the encrypted password value using D > > the SALT and algorithm with the password text you query for when! > > wanting to validate the user.  > C > It's very important to call the $SCAN_INTRUSION system service as F > well, if the username and password are coming from something like anC > Internet web form.  Otherwise, somebody can come up with a script C > which will try to guess passwords by brute force ($SCAN_INTRUSION ' > is called automatically by LOGINOUT).  > B > The program in ftp://picard.eurokom.ie/setpass.zip includes code$ > to validate a username & password. > ; > --------------------------------------------------------- B > Tom Wade                 | EMail: tee dot wade at eurokom dot ie5 > EuroKom                  | Tel:   +353 (1) 296-9696 5 > A2, Nutgrove Office Park | Fax:   +353 (1) 296-9697 B > Rathfarnham              | Disclaimer:  This is not a disclaimerI > Dublin 14                | Tip:   "Friends don't let friends do Unix !" 	 > Ireland    ------------------------------    Date: 14 Jul 2006 14:59:09 -0500- From: Kilgallen@SpamCop.net (Larry Kilgallen) : Subject: Re: Parsec webinar (2006-07-12) OpenVMS Licensing3 Message-ID: <ZJD3AimEFW07@eisner.encompasserve.org>   g In article <44b7796f$0$4475$9a6e19ea@news.newshosting.com>, "Neil Rieck" <n.rieck@sympatico.ca> writes: . > "Ian Miller" <ijm@uk2.net> wrote in message ? > news:1152865111.501483.188210@m73g2000cwd.googlegroups.com... ? >> These seminars are free to everybody. The presentation is at ; >> http://www.openvmsplanet.org/index.php?c=66&d=67&w=1&r=Y  >>
 > My mistake.  > L > So it looks like Parsec has posted the power point slides associated with  > each seminar. Cool.   H Why is it cool when Parsec posts VMS information in a VMS-hostile format" but unacceptable when HP does not.   ------------------------------  % Date: Fri, 14 Jul 2006 17:51:59 -0400 ) From: "Neil Rieck" <n.rieck@sympatico.ca> : Subject: Re: Parsec webinar (2006-07-12) OpenVMS Licensing; Message-ID: <44b81141$0$4535$9a6e19ea@news.newshosting.com>   ; "Larry Kilgallen" <Kilgallen@SpamCop.net> wrote in message  - news:ZJD3AimEFW07@eisner.encompasserve.org... K > In article <44b7796f$0$4475$9a6e19ea@news.newshosting.com>, "Neil Rieck"    > <n.rieck@sympatico.ca> writes: [...snip...] > J > Why is it cool when Parsec posts VMS information in a VMS-hostile format$ > but unacceptable when HP does not.  K Have I ever criticized HP? If I've left anyone with that impression then I   haven't been clear.    So here is my position:   L HP is probably the only company that could save OpenVMS. I was a big fan of H DEC until Ken Olsen was pushed aside (and he was pushed). In the Palmer F years VMS and OpenVMS were allowed to drift aimlessly (allowing DEC's L inertia to spin down) until DEC was taken over by Compaq where they totally M dropped the ball. With HP at the helm they've started marketing this product  I again. TUD (technical update days) are a welcome surprise. HP is getting  G back to doing in-house training. As a OpenVMS customer with a software  M support contract, it is obvious to everyone in my staff that this product is   coming back to life.  F Now I'm not so naive as to think that today's HP is anything like the J organization run by Hewlett and Packard; but, likewise, IBM is not at all B like the organization started by Watson; SUN is nothing like that C organization started by McNealy and Joy; Apple is nothing like the  ) organization started by Jobs and Wozniac.   L In my opinion, HP is the best foster parent to raise OpenVMS given that DEC  has passed beyond the veil.   J p.s. I'm not totally biased toward HP. They were blinded by politics when I they killed Tru64 in favor of HP-UX. It would have been easier to modify  J Tru64 and call it HP-UX than to attempt to graft Tru64 modules into HP-UX J for a year (then announce that it is not possible which everyone knew all 
 along anyway)   
 Neil Rieck Kitchener/Waterloo/Cambridge,  Ontario, Canada." http://www3.sympatico.ca/n.rieck/    ------------------------------  % Date: Fri, 14 Jul 2006 15:19:24 -0400 - From: JF Mezei <jfmezei.spamnot@teksavvy.com> ! Subject: Re: SSL for SMTP tests ? , Message-ID: <44B7EE37.E62A3909@teksavvy.com>   david20@alpha2.mdx.ac.uk wrote: O > If the ISP is blocking port 25 then I'd hope that they would also be blocking  > port 465.   D They are not. And I don't know of many ISPs that block 465 when they	 block 25.   M > On the otherhand I'd hope they were allowing through the message submission  > port - port 587.    H I found out this particular mail server does have 587 listening for SMTP without encryption fuss.  H And with the OPENSSL utility, I also found out that their certificate isF for the primary name of the mail server (*.qnetau.com) and not for theA name given to my friend (*.quadrahosting.com.au) which is why his E clients were complaining about bad certificates that didn't match the  host he was connecting to.   ------------------------------    Date: 14 Jul 2006 11:09:42 -0500. From: brooks@cuebid.zko.hp.nospam (Rob Brooks)N Subject: RE: VMS and HPVM (was: Parsec webinar (2006-07-12) OpenVMS Licensing), Message-ID: <LL4C83NqoiZW@cuebid.zko.hp.com>  ) "Main, Kerry" <Kerry.Main@hp.com> writes:   G > The bottom layer is a customized HP-UX layer, hence it is likely more I > appropriate to think of the bottom as a UNIX based layer with HP-UX and 1 > OpenVMS being able to run as VM's on top of it.  > I > Think of VMware (Linux based kernel) with Windows, Linux, Netware being 5 > able to run as VM's on top of the UNIX based layer.   H The bottom layer is out-of-the box HP-UX.  There is a "hypervisor" layerK (the HPVM software) that sits on top of HP-UX; this hypervisor layer is the L virtualisation layer on top of which guest instances of VMS, HP-UX, Windows, and Linux can coexist.    I Folks at the boot camp last month had the chance to view my demonstration ? of a VMS guest on top of HPVM; the VMS guest was clustered with N another VMS guest and several other Alpha and I64 systems (and a VAX thrown inI for good measure).  We still have a lot of work to do, but features like  H shadowing are working with no problem.  It is expected that this will be+ shipping and supported at the end of 2007.     --    H Rob Brooks    VMS Engineering -- Exec Group     brooks!cuebid.zko.hp.com   ------------------------------  % Date: Fri, 14 Jul 2006 21:22:59 -0400 - From: JF Mezei <jfmezei.spamnot@teksavvy.com> N Subject: Re: VMS and HPVM (was: Parsec webinar (2006-07-12) OpenVMS Licensing)+ Message-ID: <44B84372.4CD834A@teksavvy.com>    Rob Brooks wrote: J > The bottom layer is out-of-the box HP-UX.  There is a "hypervisor" layer1 > (the HPVM software) that sits on top of HP-UX;      H Remember Stallard's wish that all VMS customers would eventually migrateH to HP-UX ?  My gut tells me that VMS will become an application on HP-UXG where customers can continue to run legacy apps from VSM, while running ' real apps on HP-UX on the same machine.    ------------------------------   Date: 15 Jul 2006 02:04:59 GMT( From: bill@cs.uofs.edu (Bill Gunshannon)N Subject: Re: VMS and HPVM (was: Parsec webinar (2006-07-12) OpenVMS Licensing)* Message-ID: <4hr0qbFro3qU1@individual.net>  , In article <LL4C83NqoiZW@cuebid.zko.hp.com>,1 	brooks@cuebid.zko.hp.nospam (Rob Brooks) writes: + > "Main, Kerry" <Kerry.Main@hp.com> writes:  > H >> The bottom layer is a customized HP-UX layer, hence it is likely moreJ >> appropriate to think of the bottom as a UNIX based layer with HP-UX and2 >> OpenVMS being able to run as VM's on top of it. >>  J >> Think of VMware (Linux based kernel) with Windows, Linux, Netware being6 >> able to run as VM's on top of the UNIX based layer. > J > The bottom layer is out-of-the box HP-UX.  There is a "hypervisor" layerM > (the HPVM software) that sits on top of HP-UX; this hypervisor layer is the N > virtualisation layer on top of which guest instances of VMS, HP-UX, Windows, > and Linux can coexist.    H Considering that VMS and Windows don't share a common hardware platform,. how could you possibly do what you list above?   bill   --  J Bill Gunshannon          |  de-moc-ra-cy (di mok' ra see) n.  Three wolvesD bill@cs.scranton.edu     |  and a sheep voting on what's for dinner. University of Scranton   |A Scranton, Pennsylvania   |         #include <std.disclaimer.h>       ------------------------------  % Date: Fri, 14 Jul 2006 21:11:16 -0500 % From: Dan Foster <usenet@evilphb.org> N Subject: Re: VMS and HPVM (was: Parsec webinar (2006-07-12) OpenVMS Licensing)5 Message-ID: <slrnebgjm4.rt3.usenet@zappy.catbert.org>   T In article <4hr0qbFro3qU1@individual.net>, Bill Gunshannon <bill@cs.uofs.edu> wrote: >>  K >> The bottom layer is out-of-the box HP-UX.  There is a "hypervisor" layer N >> (the HPVM software) that sits on top of HP-UX; this hypervisor layer is theO >> virtualisation layer on top of which guest instances of VMS, HP-UX, Windows,  >> and Linux can coexist.  > J > Considering that VMS and Windows don't share a common hardware platform,0 > how could you possibly do what you list above?  F Actually, they do: Microsoft did a port of Windows to Itanium. And, asC you know, VMS also runs on Itanium, too. (As does HP/UX and Linux.)   A http://www.microsoft.com/windowsserver2003/64bit/ipf/default.mspx   D Granted, Microsoft is not quite aggressively pushing Windows on I64.   -Dan   ------------------------------   Date: 14 Jul 2006 18:50:55 GMT From: healyzh@aracnet.com  Subject: XP1000 Model question, Message-ID: <e98p2f01pb8@enews1.newsguy.com>  D Does anyone happen to know what the following model # translates to? 3X-E2G6W-A9    Thanks,  Zane   ------------------------------  % Date: Fri, 14 Jul 2006 15:50:50 -0400   From: "DBT" <dbturner@icusc.com>" Subject: Re: XP1000 Model question0 Message-ID: <12bftd3ac3kbm13@news.supernews.com>  % this is the 667Mhz XP1000 for OpenVMS    DT   --     David B Turner Island Computers US Corp 2700 Gregory St, Suite 180 Savannah GA 31404  Tel: 912 447 6622 X201 Cell: 912 447 6622 X251  Fax: 912 201 0402  Email: dbturner@icusc.com  Web: http://www.islandco.com% ===================================== < All orders are subject to the following terms and conditions. of sale. These should be read before ordering.% http://www.islandco.com/warranty.html   & <healyzh@aracnet.com> wrote in message& news:e98p2f01pb8@enews1.newsguy.com...F > Does anyone happen to know what the following model # translates to?
 > 3X-E2G6W-A9  > 	 > Thanks,  > Zane >  >    ------------------------------   End of INFO-VAX 2006.390 ************************                                                                                                                  8	ahF1i(XQ4Ԉ;
4fz2%雬0bE@fuæ	$LO8L$
Itv
v
唥-Dm:-gA)#lZZ_$It ωM5.wҜi:
%BO6:L	uMf0Da~I'M~dDn`
7[KkfsSm'X9w	.0wM"
K9iCb,G24E$p=A.X0æ _Ү>:*ߪTN@@
RI0$4w4$`P<k`vGΌc\P9iwτ@PAÎp88øgP{o}R2nUw}}vF- (/Y=E-ayPikCwYy;Ai;SuI9L}nJE8ODssT9}N/'9xb(xWYjXR8U.<,9i2i9;t23/z],]!Ґ'I6IXI,;EI,]owkOw;EZwS(NL(
M`ԓ[^fʆs{OFʆiԼҬ
mF
?~x؟hΥnũ_W\`~Q/>
{7cV
$a"I|ӻh	+ՃNsSE
)!e烃]"wjcd3
x+Xr=2I&JZO'iyNx	jgRw䙙<'m8KqoHG6\g/NH# ;[%{!e5su
`HK٥p>uR,I
<OHILn/!ߋGu|w߆@*8hO
YG-/~
PϠ]q  
+  3[*ϭ	Ηkdk@[oa)t.8_EBn{)<~;	WjELBfFO-M xA=A8vi})sBO԰)_&g3d[(ȸ|_|mpS/vOC=s|	r6vGo>P'۰~\O³ɒ?e:%\Qu!]]	lO	]ͬ={|gž(yV^Qu^!{f'f^2yjjEWd\ǭ>q>srh*#oR4O*yI:U~[[Z5wJ32hu:kX:Glh65Pc>ߛ
)c(6:ma`