1 INFO-VAX	Tue, 27 Jun 2006	Volume 2006 : Issue 354       Contents:- Re: Command Line Commands And Editor Commands ' Re: Cost of used alphas vs 8086+charron > Re: Education Ministry rethinks payroll plans (Oracle and VMS)> Re: Education Ministry rethinks payroll plans (Oracle and VMS)H Re: How to run program in background. How to list my processies and killP Re: How to run program in background. How to list my processies and kill a runni' Re: ntpdate fails after VMS 8.2 upgrade ' Re: ntpdate fails after VMS 8.2 upgrade  RDB Java install Re: RDB Java install Re: RDB Java install Re: RDB Java install Re: RDB Java install! Security Setup and Product Advice % Re: Security Setup and Product Advice % Re: Security Setup and Product Advice  Re: Vax Debugger Examples  Re: Vax Debugger Examples  Re: [ECP] OpenVMS V8  F ----------------------------------------------------------------------  % Date: Mon, 26 Jun 2006 17:54:34 -0400 3 From: "Richard B. Gilbert" <rgilbert88@comcast.net> 6 Subject: Re: Command Line Commands And Editor Commands: Message-ID: <KICdnWm6_rMByj3ZnZ2dnUVZ_tWdnZ2d@comcast.com>   Chris L wrote:   > Richard B. Gilbert wrote:  >  >>Chris L wrote: >> >>	 >>>Hello,  >>> , >>>    I used to use vax/vms for many years. >>> G >>>    I have just ordered a few books on these commands but would like I >>>links to Internet sites that list and explain the ones that I would be 3 >>>using as a programmer at the command line level.  >>>  >>>   Thank you, >>>   Christopher Lusardi  >>>  >>B >>It's not that difficult!   Use HELP to refresh your memory.  TheE >>commands you are most likely to need are EDIT, PRINT, (CC, FORTRAN, G >>COBOL, BASIC,etc to compile) LINK to link your program and RUN to run I >>it.  I still use the EDT editor but, if you have to learn an editor you K >>should probably learn EDIT.  And you will need to learn or relearn DEBUG.  >  > B > I woun't have access to a Vax system for a few months. I want to > re-learn them D > before I actually begin using the commands. Do you have any links? > 	 > Thanks,  > Christopher Lusardi  > = See http://home.comcast.net/~rgilbert88/VMS_Bibliography.html   E There is also VMS Documentation available online at HP.com.  The DCL  I Dictionary is at http://h71000.www7.hp.com/doc/732FINAL/9996/9996PRO.HTML F Suggest using Google to search for documentation on the HP site; HP's 5 search engine couldn't find its ass with both hands!!    ------------------------------  % Date: Mon, 26 Jun 2006 21:40:06 -0500 6 From: "David J. Dachtera" <djesys.no@spam.comcast.net>0 Subject: Re: Cost of used alphas vs 8086+charron0 Message-ID: <44A09A86.A5987F37@spam.comcast.net>   glen herrmannsfeldt wrote: >  > JF Mezei wrote:  >  > (snip) > E > > Intel has not named the architecture that was begun with the 8086 L > > (perhaps because it knew it was a mere toy controller and never expectedG > > it to last so long). And it has changed the product name many times   > > based on the "chip du jour". > I > The architecture changed a lot with the 32 bit extensions in the 80386. C > Many systems specified 80386 as a minimum system for a long time, B > though it will run a little slow.  Most modern systems depend onA > 32 bit registers and addressing, so calling it 8086 is a little > > strange.  If you don't like IA32, then x86 is commonly used. > L > > The "8086" is the root of that architecture and  unambiguously refers to > > that family. >  > (snip) > I > > Also, IA-32 is not commonly used. And it is ambiguous since Intel has K > > multiple 32 bit architectrures (it inherited the StrongArm from DEC and 3 > > either uses it or developped its own for PDAs.)  > + > In the places I look it is commonly used.   F Additionally, as JF says, StrongArm came from DEC. So, technically, it( is not an "IA" - _I_ntel _A_rchitecture.   --   David J Dachtera dba DJE Systems  http://www.djesys.com/  & Unofficial OpenVMS Marketing Home Page! http://www.djesys.com/vms/market/   ( Unofficial Affordable OpenVMS Home Page: http://www.djesys.com/vms/soho/   " Unofficial OpenVMS-IA32 Home Page: http://www.djesys.com/vms/ia32/   ) Unofficial OpenVMS Hobbyist Support Page: " http://www.djesys.com/vms/support/   ------------------------------    Date: 26 Jun 2006 14:29:14 -0700- From: "Doug Phillips" <dphill46@netscape.net> G Subject: Re: Education Ministry rethinks payroll plans (Oracle and VMS) C Message-ID: <1151357354.621661.157650@i40g2000cwc.googlegroups.com>    JF Mezei wrote:  > Ian Miller wrote: J > > "Those concerns have been resolved now that support for Oracle and VMSE > > has been extended and Mr Cholewa says the option of the Education 1 > > Ministry upgrading Datapay has been revived."  >  > D > Support should not have been "extended".  They should have clearlyJ > stated that there never had been any thoughts of ending support. Period. >  > F > If you want to kill rumours of VMS being desupported, you don't justH > extend support from year to year, you use the media to kill the rumourI > once and for all. They may have rescued that one account for a few more . > years, but they missed a golden opportunity.  G Hmmm. I wonder if Oracle and VMS were ever updated since 1997. Although E I don't know for sure, I suspect that version support is what expired  and was then extended.   ------------------------------    Date: 26 Jun 2006 21:30:43 -0700 From: dooleys@snowy.net.auG Subject: Re: Education Ministry rethinks payroll plans (Oracle and VMS) C Message-ID: <1151382643.609913.147620@m73g2000cwd.googlegroups.com>    Doug Phillips wrote: > JF Mezei wrote:  > > Ian Miller wrote: L > > > "Those concerns have been resolved now that support for Oracle and VMSG > > > has been extended and Mr Cholewa says the option of the Education 3 > > > Ministry upgrading Datapay has been revived."  > >  > > F > > Support should not have been "extended".  They should have clearlyL > > stated that there never had been any thoughts of ending support. Period. > >  > > H > > If you want to kill rumours of VMS being desupported, you don't justJ > > extend support from year to year, you use the media to kill the rumourK > > once and for all. They may have rescued that one account for a few more 0 > > years, but they missed a golden opportunity. > I > Hmmm. I wonder if Oracle and VMS were ever updated since 1997. Although G > I don't know for sure, I suspect that version support is what expired  > and was then extended.B Remember that the IT group in the Education Ministry also get paid using C this payroll system, so they are unlikely to make rash decisions :) D The "extended support" was probably from the supplier of the payroll	 software, C not from HP or Oracle. The payroll system may have been "certified" E (whatever that means) on vms/oracle version 7, and when these go onto @ "prior version support", the software company then has to decide whether 3 to support vms 8/oracle 10 or abandon the platform. D The vms market share and growth prospects usually make that decision easy. C Most surviving software companies that did vms applications can now  supplyF their systems with windows or browser front-ends, with server software like windows/sql server/IIS windows/oracle/apache  unix/oracle/apache linux/mySQL/apacheD I know they could also support vms/oracle/apache, but is the cost of doing  so worth the extra customer? Phil   ------------------------------    Date: 26 Jun 2006 14:20:23 -0500 From: briggs@encompasserve.orgQ Subject: Re: How to run program in background. How to list my processies and kill 3 Message-ID: <$HwRYfYSbAL2@eisner.encompasserve.org>   \ In article <44A0144C.F4A52DC2@teksavvy.com>, JF Mezei <jfmezei.spamnot@teksavvy.com> writes:D > There is also the RUN/PROC=name  image.exe  command. This will run" > IMAGE.EXE as a detached process.  < As written, that command will run IMAGE.EXE as a subprocess.  A If you logout your parent process, this will have the unfortunate ; side effect of killing your supposedly detached subprocess.   B If you want a detached process, you need to add either the /DETACH or the /UIC= qualifier.    ------------------------------    Date: 26 Jun 2006 14:13:21 -0500; From: koehler@eisner.nospam.encompasserve.org (Bob Koehler) Y Subject: Re: How to run program in background. How to list my processies and kill a runni 3 Message-ID: <12nQZcAnMr8o@eisner.encompasserve.org>   j In article <1151332961.460060.131490@i40g2000cwc.googlegroups.com>, "Chris L" <clusardi2k@aol.com> writes: > Hello, > $ >      How would I do this on a vax?  E    Generally on VMS I use the batch queue for "background" processes. 9    But the definition of "background" is wide and varied.    ------------------------------  % Date: Mon, 26 Jun 2006 15:44:41 +0300 4 From: Mike Rechtman <michael.rechtman.nospam@hp.com>0 Subject: Re: ntpdate fails after VMS 8.2 upgrade& Message-ID: <44A000E9.6485FB1A@hp.com>   Wilm wrote:  > 8 > I use "ntpdate" to synchronize time on my VMS systems. >  <..snipped...>& > *************** ALPHA 8.2 (update 3)% > ***********************************  > $ tcpip sho vers > = >   HP TCP/IP Services for OpenVMS Alpha Version V5.5 - ECO 1 9 >   on an AlphaServer 4X00 5/533 4MB running OpenVMS V8.2  >  > $ ntptrace <mynode> E > <mynode>.<mydomain>.nl: stratum 4, offset 16.350539, synch distance 	 > 0.22394 H > internet.radom.pl: stratum 3, offset 16.373182, synch distance 0.16060I > info.cyf-kr.edu.pl: stratum 2, offset 16.373374, synch distance 0.04204 F > chronos.cru.fr: stratum 1, offset 16.385843, synch distance 0.00000,
 > refid 'GPS'  >  > $ ntpdate -o 3 <mynode> + > Looking for host <mynode> and service ntp H > Error : The service passed was not recognized for the specified socket > type. 8 > 23 Jun 11:19:24 ntpdate[160]: can't find host <mynode> > ? > 23 Jun 11:19:24 ntpdate[160]: no servers can be used, exiting      $ show syst/noprocH OpenVMS V8.2  on node MIKE  26-JUN-2006 15:40:29.77  Uptime  15 23:13:40 $  $ ntpdate -d   16.55.225.1012 26 Jun 15:39:38 ntpdate[149]: ntpd version = 4.2.0. Looking for host 16.55.225.101 and service ntp host found : eyal.isr.hp.com transmit(16.55.225.101)  receive(16.55.225.101) transmit(16.55.225.101)  receive(16.55.225.101) transmit(16.55.225.101)  receive(16.55.225.101) transmit(16.55.225.101)  receive(16.55.225.101) transmit(16.55.225.101)  server 16.55.225.101, port 123, stratum 3, precision -11, leap 00, trust 0008 refid [16.55.225.101], delay 0.02805, dispersion 0.00000 transmitted 4, in filter 4C reference time:    c84a50e8.9299d883  Mon, Jun 26 2006 15:26:16.572 E originate timestamp: c84a540c.c3824d4c  Mon, Jun 26 2006 15:39:40.763 E transmit timestamp:  c84a540c.c5b238cc  Mon, Jun 26 2006 15:39:40.772 1 filter delay:  0.02805  0.02805  0.02805  0.02805 +          0.00000  0.00000  0.00000  0.00000 2 filter offset: -0.01049 -0.01049 -0.01049 -0.01049,          0.000000 0.000000 0.000000 0.000000! delay 0.02805, dispersion 0.00000  offset -0.010497   $  $ tcpip show vers   ;   HP TCP/IP Services for OpenVMS Alpha Version V5.5 - ECO 1 3   on an AlphaStation 400 4/233 running OpenVMS V8.2    $  --  E --------------------------------------------------------------------- E Usual disclaimer: All opinions are mine alone, perhaps not even that. ? Mike Rechtman                            *rechtman@tzora.co.il* F Kibbutz Tzor'a.                          Voice (home): 972-2-9908337  B   "20% of a job takes 80% of the time, the rest takes another 80%"E ---------------------------------------------------------------------  -----BEGIN GEEK CODE BLOCK-----  Version: 3.1: GCM/CS d(-)pu s:+>:- a++ C++ U-- L-- W++ N++ K? w--- V+++$6 PS+ PE-- t 5? X- tv-- b+ DI+ D-- G e++ h--- r+++ y+++@ ------END GEEK CODE BLOCK------    ------------------------------  % Date: Mon, 26 Jun 2006 21:20:23 +0200 3 From: Wilm Boerhout <w5OLD.boerhout@PAINTplanet.nl> 0 Subject: Re: ntpdate fails after VMS 8.2 upgrade6 Message-ID: <44a03376$0$17047$ba620dc5@nova.planet.nl>  ) Mike Rechtman wrote on 26-6-2006 14:44...  [snip]     > $ show syst/noprocJ > OpenVMS V8.2  on node MIKE  26-JUN-2006 15:40:29.77  Uptime  15 23:13:40 > $  > $ ntpdate -d   16.55.225.1014 > 26 Jun 15:39:38 ntpdate[149]: ntpd version = 4.2.00 > Looking for host 16.55.225.101 and service ntp > host found : eyal.isr.hp.com > transmit(16.55.225.101)  > receive(16.55.225.101) > transmit(16.55.225.101)  > receive(16.55.225.101) > transmit(16.55.225.101)  > receive(16.55.225.101) > transmit(16.55.225.101)  > receive(16.55.225.101) > transmit(16.55.225.101)   > server 16.55.225.101, port 123. > stratum 3, precision -11, leap 00, trust 000: > refid [16.55.225.101], delay 0.02805, dispersion 0.00000 > transmitted 4, in filter 4E > reference time:    c84a50e8.9299d883  Mon, Jun 26 2006 15:26:16.572 G > originate timestamp: c84a540c.c3824d4c  Mon, Jun 26 2006 15:39:40.763 G > transmit timestamp:  c84a540c.c5b238cc  Mon, Jun 26 2006 15:39:40.772 3 > filter delay:  0.02805  0.02805  0.02805  0.02805 - >          0.00000  0.00000  0.00000  0.00000 4 > filter offset: -0.01049 -0.01049 -0.01049 -0.01049. >          0.000000 0.000000 0.000000 0.000000# > delay 0.02805, dispersion 0.00000  > offset -0.010497 >  > $  > $ tcpip show vers  > = >   HP TCP/IP Services for OpenVMS Alpha Version V5.5 - ECO 1 5 >   on an AlphaStation 400 4/233 running OpenVMS V8.2  >  > $   H Implying that ntpdate will run against a V4 server but not against a V3 I server? Still seems broke to me, more so because the same system used to  ' work before I upgraded the system disk.   D So again, what has changed -and not mentioned in the release notes-   between ntpdate V54 en V5.5ECO1?   /Wilm    ------------------------------    Date: 26 Jun 2006 12:18:42 -0700! From: roland@logikalsolutions.com  Subject: RDB Java install C Message-ID: <1151349522.243296.267900@y41g2000cwy.googlegroups.com>   G Here's an odd one that I haven't seen in a long time.  Getting ready to B write the last technical chapter for "The Minimum You Need to KnowF About Java on OpenVMS   Volume 1", so I downloaded the JAVA RDB driver@ from Oracle.  Unzipped it to get the PCSI file.  PRODUCT INSTALL. refuses to recognize the file or its contents.   $ dir    Directory DKA200:[RDBJAVA]  = ADDRESS.TXT;1              1/3        26-JUN-2006 11:36:46.10 + orcl-axpvms-rdbjdbc71-v0701-4v163h-1.pcsi;2 =                        19728/19968    17-MAR-2006 00:19:30.79 = rdbjdbc7141.zip;2       6901/6903     26-JUN-2006 13:34:27.19  RDBJDBC7241_AMV.BAD_ZIP;1 =                         2862/2862     26-JUN-2006 12:44:16.48  rdbjdbc7241_amv.zip;1 =                         6947/6948     26-JUN-2006 13:00:14.47  rdbjdbc_readme.html;5 =                          177/258      29-JAN-2006 18:19:12.70   % Total of 6 files, 36616/36942 blocks.  $ product install ! _Product name (* to show list): * 5 %PCSIUI-I-NOMATCH, no products were found matching: * A %PCSIUI-E-NOPROD, no products were found on which to perform this 	 operation C %PCSIUI-E-ABORT, operation terminated due to an unrecoverable error 	 condition   D Tried downloading different versions and such.  All of them have the@ same problem.  I have all patches applied for my version of JavaG including the PRODUCT patches.  I'm wondering if they didn't build this 9 kit with the old version and need to use the new version.   
 Any thoughts?    ------------------------------  # Date: Mon, 26 Jun 2006 19:53:46 GMT , From: Hoff Hoffman <hoff-remove-this@hp.com> Subject: Re: RDB Java install 2 Message-ID: <eXWng.2253$nT2.1614@news.cpqcorp.net>   Jean-Franois Pironne wrote:  > [snip]. >> orcl-axpvms-rdbjdbc71-v0701-4v163h-1.pcsi;2	 > [snip]>  >> Any thoughts?; > You can try to rename the kit using uppercase characters.   G    The above is correct -- PCSI expects the kit file name to (only) be  C in uppercase, and unzip can generate lowercase file names when the  ' target disk volume is ODS5/EFS-capable.    ------------------------------  % Date: Mon, 26 Jun 2006 21:45:51 +0200 1 From: =?ISO-8859-1?Q?Jean-Fran=E7ois_Pi=E9ronne?=  Subject: Re: RDB Java install 4 Message-ID: <44a03972$0$857$ba4acef3@news.orange.fr>   [snip]- > orcl-axpvms-rdbjdbc71-v0701-4v163h-1.pcsi;2  [snip]>  > Any thoughts?  >   9 You can try to rename the kit using uppercase characters.    JF   ------------------------------  + Date: Mon, 26 Jun 2006 15:31:30 -0500 (CDT) * From: sms@antinode.org (Steven M. Schweda) Subject: Re: RDB Java install 2 Message-ID: <06062615313030_2024476F@antinode.org>  , From: Hoff Hoffman <hoff-remove-this@hp.com>  = > [...] and unzip can generate lowercase file names when the  ) > target disk volume is ODS5/EFS-capable.   F    In fact, for better UNIX (esthetic) compatibility, Zip 2.x convertsC all VMS file names to lower case as it stores them in the archive.  E When UnZip restores them, it uses unchanged the (lower-case) names in I the archive, and the results then depend on the destination file system.  > That is, case is preserved for the lower-case names on an ODS5 destination.  G    There's no plan to change the normal behavior of Zip 2.x, but in Zip F 2.31 (and up), there's a C macro, VMS_PRESERVE_CASE, which, if defined: when Zip is built, will inhibit the lower-case conversion.  =    On the bright side, in Zip 3.x, the plans include some new - command-line options for case control on VMS:   A   -C   preserve case of file names  -C-  down-case all file names O   -C2  preserve case of ODS2 names  -C2- down-case ODS2 file names* (*=default) B   -C5  preserve case of ODS5 names* -C5- down-case ODS5 file names  H    While it's still in pre-release beta condition, a small-file build ofF Zip 3.0e should produce a Zip program which has the fancy case-controlG options, and which is perfectly compatible (so far as we know) with Zip  2.x.  <       ftp://ftp.info-zip.org/pub/infozip/OLD/beta/zip30e.zip    C    In unrelated news, Zip 2.32 should be ready.  There should be no B major changes for VMS.  The only significant VMS-specific behaviorA change involves better handling of a Zip archive destination in a G search-list logical name destination directory.  The Web pages have not @ been updated yet, but the source kit appears to be available at:  8       http://ftp.info-zip.org/pub/infozip/src/zip232.zip  = VMS binary kits should appear in the usual places eventually.   H ------------------------------------------------------------------------  3    Steven M. Schweda               sms@antinode-org 4    382 South Warwick Street        (+1) 651-699-9818    Saint Paul  MN  55105-2547    ------------------------------  % Date: Mon, 26 Jun 2006 18:53:17 -0400 3 From: "news.newshosting.com" <n.rieck@sympatico.ca>  Subject: Re: RDB Java install < Message-ID: <44a064f1$0$18490$9a6e19ea@news.newshosting.com>  / <roland@logikalsolutions.com> wrote in message  = news:1151349522.243296.267900@y41g2000cwy.googlegroups.com... I > Here's an odd one that I haven't seen in a long time.  Getting ready to D > write the last technical chapter for "The Minimum You Need to KnowH > About Java on OpenVMS   Volume 1", so I downloaded the JAVA RDB driverB > from Oracle.  Unzipped it to get the PCSI file.  PRODUCT INSTALL0 > refuses to recognize the file or its contents. >  [...snip...] > K We ran into the same thing two weeks back. We needed to rename the file to  I uppercase before doing the install. If memory serves, we also ran into a  J case problem in the JDBC connect string. (one of my colleagues posted the  solution here)  
 Neil Rieck Kitchener/Waterloo/Cambridge,  Ontario, Canada.8 http://www3.sympatico.ca/n.rieck/links/cool_openvms.html: http://www3.sympatico.ca/n.rieck/links/openvms_demos.html    ------------------------------    Date: 26 Jun 2006 11:45:35 -0700% From: "ou8125150" <subasic@gmail.com> * Subject: Security Setup and Product AdviceB Message-ID: <1151347535.747961.83340@y41g2000cwy.googlegroups.com>  G I am a VMS newcomer and am seeking advice on where to look for security A lockdown advice, whitepapers, and/or products.  I am specifically  looking to be able to:  F   1. Have very granular lockdown capabilities such that if someone hasC access to the $ prompt I can allow or deny access to run particular  images or commands:   2. Log and playback entire login (telnet based) sessionsD   3. Automatically disable accounts that have n (say 3 or 4) failed, consecutive login attempts. G   4. Have the system generate and send reports based on security events  in an admin-definable way.  F >From what little I have gleaned from my reading, some or most of thisF can be accomplished via standard VMS tools.  It appears that I may notA get all I need without a separate (perhaps commercial) tool.  Any # advice will be greatly appreciated.    ------------------------------  # Date: Mon, 26 Jun 2006 19:40:28 GMT , From: Hoff Hoffman <hoff-remove-this@hp.com>. Subject: Re: Security Setup and Product Advice2 Message-ID: <MKWng.2252$Er2.1686@news.cpqcorp.net>   ou8125150 wrote:I > I am a VMS newcomer and am seeking advice on where to look for security 2 > lockdown advice, whitepapers, and/or products.    F    The specific approach I use is to identify the critical data, logs D and/or critical data access paths, and work outward from there.  Of B related interest are the retention policies and disposal policies.  * > I am specifically looking to be able to: > H >   1. Have very granular lockdown capabilities such that if someone hasE > access to the $ prompt I can allow or deny access to run particular  > images or commands  H    OpenVMS can lock down images and data files, but cannot and does not F provide effective lock-down of commands -- commands are not viewed as C security-relevant objects; OpenVMS targets objects (and the object  E accessors, of course) for protections, auditing, and for purposes of   logging.  < >   2. Log and playback entire login (telnet based) sessions  H    There are third-party products for this (the FAQ references Peek and F Spy, for instance), and the base operating system maintains extensive ) logging capabilities for audits and such.   I    Monitoring and recording sessions is something that various folks can  I and do want of course, but do realize it can generate massive quantities  I of data -- far too much than most folks really want to sort through, and  H the targets -- the security breaches -- can potentially be quite subtle H and quite buried in the data stream.  Logs containing trigger events -- E object accesses and such -- are a more common target, in other words.   F >   3. Automatically disable accounts that have n (say 3 or 4) failed, > consecutive login attempts.   E    Available via the LGI system parameters (LGI_BRK_DISUSER), though  B this is also a source for denial-of-service attacks.  The default G behaviour is evasion; attacks will cause OpenVMS to slow its responses  G to logins, or to discount even valid logins after a series of failures.   I >   4. Have the system generate and send reports based on security events  > in an admin-definable way.  G    DCL lets you do most anything you want here.  There are also add-on  ) packages that provide this sort of thing.   G >>From what little I have gleaned from my reading, some or most of this H > can be accomplished via standard VMS tools.  It appears that I may notC > get all I need without a separate (perhaps commercial) tool.  Any % > advice will be greatly appreciated.   G    The OpenVMS Security Manual is the obvious starting point here, and  . I've posted a few blog-isms on related topics:  $    http://www.hp.com/go/openvms/doc/B    http://h20325.www2.hp.com/blogs/hoffman/archive/2006/02/01.htmlG    http://h20325.www2.hp.com/blogs/hoffman/archive/2006/05/09/1037.html   E    The specific lock-down procedures are available in the appendix of  the security manual.  H    HP and other vendors can suggest security services, and a catalog of F software security packages is available via the DSPP program software & catalog referenced in the OpenVMS FAQ:  $    http://www.hp.com/go/openvms/faq/   ------------------------------    Date: 26 Jun 2006 18:19:47 -0700) From: "Bob Gezelter" <gezelter@rlgsc.com> . Subject: Re: Security Setup and Product AdviceB Message-ID: <1151371187.325590.13580@i40g2000cwc.googlegroups.com>   ou8125150 wrote:I > I am a VMS newcomer and am seeking advice on where to look for security C > lockdown advice, whitepapers, and/or products.  I am specifically  > looking to be able to: > H >   1. Have very granular lockdown capabilities such that if someone hasE > access to the $ prompt I can allow or deny access to run particular  > images or commands< >   2. Log and playback entire login (telnet based) sessionsF >   3. Automatically disable accounts that have n (say 3 or 4) failed, > consecutive login attempts. I >   4. Have the system generate and send reports based on security events  > in an admin-definable way. > H > >From what little I have gleaned from my reading, some or most of thisH > can be accomplished via standard VMS tools.  It appears that I may notC > get all I need without a separate (perhaps commercial) tool.  Any % > advice will be greatly appreciated.   D OpenVMS has the inherant ability to control access in extremely fine= granularity. If need be, this can be on a file by file basis. ; Thankfully, this degree of granularity is not often needed.   D My presentation "Building Secure Applications on OpenVMS" (slides at@ http://www.rlgsc.com/cets/2000/444.html ) gives some examples ofG solutions and issues. Another presentation, "OpenVMS User Environments"  (a summary of the session is at @ http://www.rlgsc.com/hpworld/2004/N227.html ). That presentationF focused on how privileges can be delegated, without requiring users to9 be granted privileges which could compromise other users.   E As Hoff and Larry have mentioned, the best general place to start for E the basic information is the standard Guide to System Security, which E is available in the OpenVMS documentation kit (on hardcopy, CDROM, or E on the www via HP at http://www.hp.com/go/openvms ). Beyond that, the A most productive method starts with understanding the security and F integrity requirements of the environment, and determining the details# of implementing these requirements.   G I hope that the above is helpful. If I have been unclear, please let me  know.   $ - Bob Gezelter, http://www.rlgsc.com>   Author, "OpenVMS Security", Handbook of Information Security"   Contributing Editor, OpenVMS.org   ------------------------------    Date: 26 Jun 2006 12:48:45 -0500 From: briggs@encompasserve.org" Subject: Re: Vax Debugger Examples3 Message-ID: <5C8agnmT3iX0@eisner.encompasserve.org>   i In article <1151334024.931867.30400@p79g2000cwp.googlegroups.com>, "Chris L" <clusardi2k@aol.com> writes: E > Is there a link that can show me how to debug programs? A link that F > shows how to step through a program, how to set break points, how toF > set program variables, etc. I'm looking for all the goodies that the > vax debugger does.   Example:  
 $ type test.c  main ()  { 	    int a; 	    a = 1; 
    a = a + a;  }  $ cc test /deb /noopt  $ link test /deb $ r test  /          OpenVMS Alpha Debug64 Version V7.2-01R   + %DEBUG-I-INITIAL, Language: C, Module: TEST 1 %DEBUG-I-NOTATMAIN, Type GO to reach MAIN program    DBG> go  break at routine TEST\main      4:    a = 1; 
 DBG> type 1:6  module TEST       1: main () 	      2: {       3:    int a;       4:    a = 1;       5:    a = a + a; 	      6: }  DBG> set break %line 5 DBG> g break at TEST\main\%LINE 5      5:    a = a + a;  DBG> e a TEST\main\a:    1 	 DBG> step  stepped to TEST\main\%LINE 6	      6: }  DBG> e a TEST\main\a:    2  DBG> gH %DEBUG-I-EXITSTATUS, is '%SYSTEM-S-NORMAL, normal successful completion'	 DBG> help    DEBUG   @      The Debugger Command Dictionary contains detailed referenceC      information about all debugger commands, organized as follows:   ?      o  Command Format explains how to enter debugger commands.   ?      o  Commands Disabled in DECwindows lists commands that are >         disabled in the command/message view of the debugger's#         DECwindows Motif interface.   D      o  Messages gives general information about debugger diagnosticC         messages. The Debugger Command Dictionary contains detailed :         reference information about the debugger commands.           #   Additional information available:   >   New_Features          Address_Expressions   Built_in_SymbolsH   Client-Server_Interface          Command_Format        Command_Summary7   Debugging_Configurations         DECwindows_Interface 8   Commands_Disabled_in_DECwindows  Keypad_Definitions_CIF   Keypad_Definitions_GUI           Language_Support      Logical_NamesI   Messages   Path_Names SS$_DEBUG  System_Management     VWS_Workstations K   @_(Execute_Procedure) ACTIVATE   ATTACH     CALL       CANCEL     CONNECT K   Ctrl       DEACTIVATE DECLARE    DEFINE     DELETE     DEPOSIT    DISABLE L   DISCONNECT DISPLAY    DO         DUMP       EDIT       ENABLE     EVALUATEF   EXAMINE    EXIT       EXITLOOP   EXPAND     EXTRACT    FOR        GOJ   HELP       IF         MONITOR    MOVE       PTHREAD    QUIT       REBOOTJ   REPEAT     RERUN      RUN        SAVE       SCROLL     SEARCH     SELECTD   SET        SHOW       SPAWN      STEP       SYMBOLIZE  SYNCHRONIZE   TYPE       WHILE  	 DBG> exit  $        End example   D One command that I like but which doesn't come across at all well in a text posting is:   DBG> SET MODE SCREEN  D You get a three window display with the source code up top, debugger6 output in the middle and debugger input in the bottom.  C In screen mode, program output is presented in the same window with  debugger input.   F In my experience, EXAMINE, STEP, SET BREAK and GO will do about 95% of- what you need done.  You can get fancier with   
 STEP /INTO STEP /RETURN	 SET WATCH  SET BREAK /AFTER' SET BREAK <location> WHEN ( condition ) " SET BREAK <location> DO ( action )  H And you can also interrupt execution with control-Y and put the debuggerG into control with $ DEBUG.  This is handy if you put your breakpoint at F the wrong place, if you want to see how far your program has gotten or% if you're debugging an infinite loop.    Example:   $ type test.for          integer i 
         i = 0  10      i = i + 1          goto 10          end  $ fort test /deb /noopt  $ link test /deb $ r  _File: test   /          OpenVMS Alpha Debug64 Version V7.2-01R   6 %DEBUG-I-INITIAL, Language: FORTRAN, Module: TEST$MAIN   DBG> g  Interrupt     $ debug  DBG> e i TEST$MAIN\I:    115978496  DBG>  Exit     ------------------------------    Date: 26 Jun 2006 14:14:04 -0500; From: koehler@eisner.nospam.encompasserve.org (Bob Koehler) " Subject: Re: Vax Debugger Examples3 Message-ID: <c1Olw58uAbWJ@eisner.encompasserve.org>   i In article <1151334024.931867.30400@p79g2000cwp.googlegroups.com>, "Chris L" <clusardi2k@aol.com> writes: E > Is there a link that can show me how to debug programs? A link that F > shows how to step through a program, how to set break points, how toF > set program variables, etc. I'm looking for all the goodies that the > vax debugger does.      $run/debug yourprogram     dbg> help   ------------------------------    Date: 27 Jun 2006 00:31:36 -02006 From: peter@langstoeger.at (Peter 'EPLAN' LANGSTOEGER) Subject: Re: [ECP] OpenVMS V8 , Message-ID: <44a07c68$1@news.langstoeger.at>  ` In article <U3Tng.2244$zH2.542@news.cpqcorp.net>, Hoff Hoffman <hoff-remove-this@hp.com> writes:I >   TDC is the newer package, and ECP is the older.  There is an overlap  H >in the OpenVMS versions supported.  I'll pass your report of confusion F >along to the folks that manage the resources involved for resolution.  
 Thanks, Hoff.   J Apropos Overlap. As TDC does not have an analyzer part (only an collector)J I assume that the overlap is not temporary (or is an TDC analyzer coming?)   --   Peter "EPLAN" LANGSTOEGER % Network and OpenVMS system specialist  E-mail  peter@langstoeger.atF A-1030 VIENNA  AUSTRIA              I'm not a pessimist, I'm a realist   ------------------------------   End of INFO-VAX 2006.354 ************************                                                                                                                                                                                                                                                                                                                                                                                            