INFO-VAX Mon, 03 Sep 2007 Volume 2007 : Issue 484 Contents: cannot ssh login with expired password Re: cannot ssh login with expired password Re: cannot ssh login with expired password Re: cannot ssh login with expired password Re: cannot ssh login with expired password Re: DCL command length and CSWS Re: Here's one for Bob (hope it makes your head spin) Re: Here's one for Bob (hope it makes your head spin) Re: Here's one for Bob (hope it makes your head spin) Re: Here's one for Bob (hope it makes your head spin) Re: Here's one for Bob (hope it makes your head spin) Re: Here's one for Bob (hope it makes your head spin) Re: If PL/I is the king of languages... ---------------------------------------------------------------------- Date: Mon, 3 Sep 2007 12:26:51 +0100 From: Anton Shterenlikht Subject: cannot ssh login with expired password Message-ID: <20070903112651.GA48190@mech-aslap33.men.bris.ac.uk> I've a VMS user with PWDLIFETIME of 90 days. When the password is expired I cannot login via ssh. No error is given, the output is identical to the case of wrong password, i.e. after 3 attempts, the login process is aborted. I have to login via console, where I'm informed that the password is expired and I have to change it. Is this the expected behaviour? thanks anton -- Anton Shterenlikht Room 2.6, Queen's Building Mech Eng Dept Bristol University University Walk, Bristol BS8 1TR, UK Tel: +44 (0)117 928 8233 Fax: +44 (0)117 929 4423 ------------------------------ Date: Mon, 03 Sep 2007 05:59:33 -0700 From: Jose Baars Subject: Re: cannot ssh login with expired password Message-ID: <1188824373.671963.275030@50g2000hsm.googlegroups.com> It is expected behaviour ( known bug?) on older versions of TCPIP services. On TCP/IP 5.6 (probably since 5.5) it will allow you to login with an expired password by default, but you should check SSHD2_CONFIG which says in TCPIP 5.6: # V5.5-04: Correct default for AllowVmsLoginWithExpiredPw # AllowVmsLoginWithExpiredPw yes # AllowNonvmsLoginWithExpiredPw no # UserLoginLimit -1 Regards, jose ------------------------------ Date: Mon, 03 Sep 2007 07:46:55 -0700 From: Neil Rieck Subject: Re: cannot ssh login with expired password Message-ID: <1188830815.404849.163670@r29g2000hsg.googlegroups.com> On Sep 3, 7:26 am, Anton Shterenlikht wrote: > I've a VMS user with PWDLIFETIME of 90 days. When the password is > expired I cannot login via ssh. No error is given, the output is > identical to the case of wrong password, i.e. after 3 attempts, > the login process is aborted. I have to login via console, where > I'm informed that the password is expired and I have to change it. > > Is this the expected behaviour? > > thanks > anton > It depends on which TCP/IP stack you are using as well as what client s/w you are using. We ran into this problem in March-2007 while running TCPware-5.7-2 on OpenVMS along with Reflection-14 on Windows-XP. To fix this problem we needed to apply SSH patches for TCPware along with patch 14.2-1 for Reflection. Neil Rieck Kitchener/Waterloo/Cambridge, Ontario, Canada. http://www3.sympatico.ca/n.rieck/ ------------------------------ Date: Mon, 3 Sep 2007 16:49:24 +0100 From: Anton Shterenlikht Subject: Re: cannot ssh login with expired password Message-ID: <20070903154924.GA48876@mech-aslap33.men.bris.ac.uk> On Mon, Sep 03, 2007 at 05:59:33AM -0700, Jose Baars wrote: > It is expected behaviour ( known bug?) on older versions of TCPIP > services. > On TCP/IP 5.6 (probably since 5.5) it will allow you to login with an > expired password by default, > but you should check SSHD2_CONFIG which says in TCPIP 5.6: > > # V5.5-04: Correct default for AllowVmsLoginWithExpiredPw > # AllowVmsLoginWithExpiredPw yes > # AllowNonvmsLoginWithExpiredPw no > # UserLoginLimit -1 Jose, many thanks Yes I'm running TCPIP 5.6 on VMS 8.3. I uncommented these lines # V5.5-04: Correct default for AllowVmsLoginWithExpiredPw AllowVmsLoginWithExpiredPw yes AllowNonvmsLoginWithExpiredPw yes UserLoginLimit -1 but still no luck. Now I'm being told that the password has expired, but when I change it, the access is still denied: system@xx.xx.xx.xx's password: Your password has expired; you must set a new password to log in Enter system@xx.xx.xx.xx's old password: Enter system@xx.xx.xx.xx's new password: Retype system@xx.xx.xx.xx's new password: Permission denied (publickey). What's more, after I changed the password from the console, I cannot login via ssh at all. So in the end I had to comment the above 3 lines again. -- Anton Shterenlikht Room 2.6, Queen's Building Mech Eng Dept Bristol University University Walk, Bristol BS8 1TR, UK Tel: +44 (0)117 928 8233 Fax: +44 (0)117 929 4423 ------------------------------ Date: Mon, 03 Sep 2007 09:50:19 -0700 From: Jose Baars Subject: Re: cannot ssh login with expired password Message-ID: <1188838219.854136.103360@50g2000hsm.googlegroups.com> On Itanium, there is an ECO kit for TCPIP version 5.6 (ECO1) available, that you want to install. I'm not sure if this ECO kit is also available for Alpha, but on our Itanium WITH the eco kit changing the expired password with SSH works, I just tested it: jose's password: Your password has expired; you must set a new password to log in New password: Verification: Authentication successful. @disk:[CLUSTER_COMMON]ANNOUNCE.TXT ... ------------------------------ Date: Mon, 03 Sep 2007 12:32:53 -0400 From: JF Mezei Subject: Re: DCL command length and CSWS Message-ID: Stephen Eickhoff wrote: > DCL command length was supposed to be extended to 8192 character after 7.3-2, > but on my Alpha 8.2 system with CSWS 2.1-1 it appears to still be 1024 bytes. Even if DCL stores up to 8192 characters, the application, when calling lib$get_foreign or when using the CLI parsing routines must still provide a buffer long enough to get that 8192. If the app provides a descriptor with only 1024 bytes of storage, the routine will only fill those bytes and truncate rest of command. This is a classic example of why descriptors are good since they avoid buffer overrun problems. ------------------------------ Date: Mon, 03 Sep 2007 16:37:46 -0000 From: ultradwc@gmail.com Subject: Re: Here's one for Bob (hope it makes your head spin) Message-ID: <1188837466.761241.106970@w3g2000hsg.googlegroups.com> On Aug 30, 9:21 am, koeh...@eisner.nospam.encompasserve.org (Bob Koehler) wrote: > In article <1188473905.146346.178...@22g2000hsm.googlegroups.com>, ultra...@gmail.com writes: > > > because God requires a sacrifice for sin > > Says who? Surely an all powerfull god could change a little thing > like that. Wait a minute, that's what Jesus, is supposed to have > done and in standard Christian beleif Jesus is God. So you avoided > answering the question. http://www.neverthirsty.org/pp/corner/read2/r00614.html ------------------------------ Date: Mon, 03 Sep 2007 16:38:35 -0000 From: ultradwc@gmail.com Subject: Re: Here's one for Bob (hope it makes your head spin) Message-ID: <1188837515.503426.60060@r29g2000hsg.googlegroups.com> On Aug 31, 10:42 am, davi...@alpha2.mdx.ac.uk wrote: > In article <1188473905.146346.178...@22g2000hsm.googlegroups.com>, ultra...@gmail.com writes: > >On Aug 30, 7:12 am, davi...@alpha2.mdx.ac.uk wrote: > >> In article <1188172498.272179.37...@r34g2000hsd.googlegroups.com>, ultra...@gmail.com writes: > >> >On Aug 26, 8:12 am, Ron Johnson wrote: > >> >> On 08/26/07 06:11, Neil Rieck wrote: > > >> >> > On Aug 25, 1:03 pm, Ron Johnson wrote: > >> >> >> On 08/25/07 07:14, Neil Rieck wrote: > > >> >> > [...snip...] > >> >> >>> Talk to anyone who was an adult during World War 2 and you'll find > >> >> >>> that many common folk were anti-Semitic even though they called > >> >> >>> themselves Christians. (The people telling you these facts will always > >> >> >> "The Jews killed Jesus." > > >> >> > Christians are taught that God sent his only son to die for humanity's > >> >> > sins. So if it is necessary to blame someone, blame God. > > >> >> The *Romans* killed Jesus. Anyone who's read Matthew, and has two > >> >> neurons to rub together, knows that. > > >> >> Anyway... I could say more about Catholic tradition and theology, > >> >> but c.o.v is definitely not the place to start a huge OT flame war. > > >> >> But then, there are many atheists/agnostics and Protestants on the > >> >> list who would probably agree with me. > > >> >> -- > >> >> Ron Johnson, Jr. > >> >> Jefferson LA USA > > >> >> Give a man a fish, and he eats for a day. > >> >> Hit him with a fish, and he goes away for good! > > >> >No, Adam and Eve and you and I killed Him ... > > >> >if it was not for our sins, He would have not had > >> >to come here and die for them ... > > >> Why would an all powerful God need to go through such a pantomime ? Why did > >> Jesus need to be treated as a scapegoat for our sins ? Why couldn't an all > >> powerful God just decree that everybody was forgiven ? > > >> David Webb > >> Security team leader > >> CCSS > >> Middlesex University- Hide quoted text - > > >> - Show quoted text - > > >because God requires a sacrifice for sin > > Why ? Making your "son" mortal and getting him sacrificed by the people whose > sin he is meant to remove seems a very strange procedure. > > >... and also > >we need to change (repent) > > So were the Romans who nailed Jesus to the cross doing that as an act of > repentence ? > As far as I can see they didn't even consider themselves to be carrying out a > sacrifice - they were just executing another criminal. > > >so the sin does not > >continue and perfect ourselves because no sin is > >allowed in the kingdom of God ... God does not > >force Himself on you, or force you to convert ... > >you have to choose ... > > How does that relate to Jesus being nailed to a cross ? > > David Webb > Security team leader > CCSS > Middlesex University > > > > - Hide quoted text - > > - Show quoted text -- Hide quoted text - > > - Show quoted text - http://www.neverthirsty.org/pp/corner/read2/r00614.html ------------------------------ Date: Mon, 03 Sep 2007 16:38:54 -0000 From: ultradwc@gmail.com Subject: Re: Here's one for Bob (hope it makes your head spin) Message-ID: <1188837534.019326.175130@r34g2000hsd.googlegroups.com> On Aug 31, 11:25 am, davi...@alpha2.mdx.ac.uk wrote: > In article , Ron Johnson writes: > >On 08/30/07 06:12, davi...@alpha2.mdx.ac.uk wrote: > >[snip] > >> Why would an all powerful God need to go through such a pantomime ? Why did > >> Jesus need to be treated as a scapegoat for our sins ? Why couldn't an all > >> powerful God just decree that everybody was forgiven ? > > >Because, presumably, He cares about more than just how we act. Just > >as I care not only whether my children *do* good, but whether they > >*are* good. > > But how does having a bunch of Romans crucify his "son" make sure people *are* > good ? > > David Webb > Security team leader > CCSS > Middlesex University > > > > >This is radically different from "public" life, where it's only > >important what you do (or do not do). IOW, as long as you don't > >(try to) kill anyone, it doesn't matter whether you want to or not. > > >Of course, the question of why an omniscient/omnipresent/omnipotent > >deity needs a blood sacrifice is a different kettle of fish. > > >The only semi-reasonable answer I've every gotten is that it's > >humans who "need" the symbolism of the blood sacrifice. > > >Which, though, implies that religion is a human construct. > > >-- > >Ron Johnson, Jr. > >Jefferson LA USA > > >Give a man a fish, and he eats for a day. > >Hit him with a fish, and he goes away for good!- Hide quoted text - > > - Show quoted text - http://www.neverthirsty.org/pp/corner/read2/r00614.html ------------------------------ Date: Mon, 03 Sep 2007 16:47:07 -0000 From: ultradwc@gmail.com Subject: Re: Here's one for Bob (hope it makes your head spin) Message-ID: <1188838027.494825.150290@w3g2000hsg.googlegroups.com> On Aug 30, 9:21 am, koeh...@eisner.nospam.encompasserve.org (Bob Koehler) wrote: > In article <1188473905.146346.178...@22g2000hsm.googlegroups.com>, ultra...@gmail.com writes: > > > because God requires a sacrifice for sin > > Says who? Surely an all powerfull god could change a little thing > like that. Wait a minute, that's what Jesus, is supposed to have > done and in standard Christian beleif Jesus is God. So you avoided > answering the question. http://www.mygodshouse.com/The%20Blood.htm http://www.whyjesusdied.com/q02_jsuffer.html http://truegospel.org/index.cfm/fuseaction/Basics.tour/ID/8/Why-Was-Jesus-Christ-Crucified-for-Our-Sins.htm ------------------------------ Date: Mon, 03 Sep 2007 16:47:27 -0000 From: ultradwc@gmail.com Subject: Re: Here's one for Bob (hope it makes your head spin) Message-ID: <1188838047.764268.219100@19g2000hsx.googlegroups.com> On Aug 31, 11:25 am, davi...@alpha2.mdx.ac.uk wrote: > In article , Ron Johnson writes: > >On 08/30/07 06:12, davi...@alpha2.mdx.ac.uk wrote: > >[snip] > >> Why would an all powerful God need to go through such a pantomime ? Why did > >> Jesus need to be treated as a scapegoat for our sins ? Why couldn't an all > >> powerful God just decree that everybody was forgiven ? > > >Because, presumably, He cares about more than just how we act. Just > >as I care not only whether my children *do* good, but whether they > >*are* good. > > But how does having a bunch of Romans crucify his "son" make sure people *are* > good ? > > David Webb > Security team leader > CCSS > Middlesex University > > > > >This is radically different from "public" life, where it's only > >important what you do (or do not do). IOW, as long as you don't > >(try to) kill anyone, it doesn't matter whether you want to or not. > > >Of course, the question of why an omniscient/omnipresent/omnipotent > >deity needs a blood sacrifice is a different kettle of fish. > > >The only semi-reasonable answer I've every gotten is that it's > >humans who "need" the symbolism of the blood sacrifice. > > >Which, though, implies that religion is a human construct. > > >-- > >Ron Johnson, Jr. > >Jefferson LA USA > > >Give a man a fish, and he eats for a day. > >Hit him with a fish, and he goes away for good!- Hide quoted text - > > - Show quoted text - http://www.mygodshouse.com/The%20Blood.htm http://www.whyjesusdied.com/q02_jsuffer.html http://truegospel.org/index.cfm/fuseaction/Basics.tour/ID/8/Why-Was-Jesus-Christ-Crucified-for-Our-Sins.htm ------------------------------ Date: Mon, 3 Sep 2007 17:19:18 +0000 (UTC) From: david20@alpha2.mdx.ac.uk Subject: Re: Here's one for Bob (hope it makes your head spin) Message-ID: In article <1188837466.761241.106970@w3g2000hsg.googlegroups.com>, ultradwc@gmail.com writes: >On Aug 30, 9:21 am, koeh...@eisner.nospam.encompasserve.org (Bob >Koehler) wrote: >> In article <1188473905.146346.178...@22g2000hsm.googlegroups.com>, ultra...@gmail.com writes: >> >> > because God requires a sacrifice for sin >> >> Says who? Surely an all powerfull god could change a little thing >> like that. Wait a minute, that's what Jesus, is supposed to have >> done and in standard Christian beleif Jesus is God. So you avoided >> answering the question. > >http://www.neverthirsty.org/pp/corner/read2/r00614.html > Why can there be no forgiveness without the shedding of blood ? God is supposedly all powerful why then does he have to obey such a stupid (presumably self-imposed) rule. David Webb Security team leader CCSS Middlesex University ------------------------------ Date: Mon, 03 Sep 2007 04:41:16 -0700 From: FrankS Subject: Re: If PL/I is the king of languages... Message-ID: <1188819676.360974.235930@d55g2000hsg.googlegroups.com> On Sep 2, 10:11 pm, "Tom Linden" wrote: Tom, Just out of curiosity, what language are the PL/I compiler and run- time libraries written in? Your web site mentions that you do not have a native Itanium compiler available, but the run-time library is available as a native shared image. That suggest to me that perhaps the compiler and run-times are written in different languages. ------------------------------ End of INFO-VAX 2007.484 ************************