INFO-VAX Wed, 16 Jan 2008 Volume 2008 : Issue 31 Contents: Free VMS 3.4 manual set binders - for pickup in ABQ Re: Marketing of operating sytems Re: Marketing of operating sytems Re: network config Re: Security level of SET PASS /GENERATE ? Re: Security level of SET PASS /GENERATE ? Re: Security level of SET PASS /GENERATE ? Re: Security level of SET PASS /GENERATE ? Re: Security level of SET PASS /GENERATE ? Re: Security level of SET PASS /GENERATE ? Re: simh VAX 11/780 UIS ARCHIVE (2000) on VMS Re: UIS ARCHIVE (2000) on VMS ---------------------------------------------------------------------- Date: Tue, 15 Jan 2008 15:00:52 -0700 From: hobgoblin Subject: Free VMS 3.4 manual set binders - for pickup in ABQ Message-ID: Free for pickup in Albuquerque, New Mexico, USA Vax/VMS 3.4 manual binder set Email if interested hobgoblin.At.hush.ai ------------------------------ Date: 15 Jan 2008 19:45:40 -0500 From: Rich Alderson Subject: Re: Marketing of operating sytems Message-ID: VAXman- @SendSpamHere.ORG writes: > In article <478CD1E6.3090403@comcast.net>, "Richard B. Gilbert" > writes: >> Ken Robinson wrote: >>> On Jan 15, 2008 9:54 AM, Richard B. Gilbert wrote: >>>>I think 10K would be a little too generous, at least for the era when I >>>>was able to attend DECUS Symposia (~1986~1992). I think 7K was as big >>>>as they got. >>> I seem to remember one West Coast DECUS that I attended got about 12K, >>> also in the mid 80's to early 90's. I believe it was in 1988 in >>> Anaheim, but I could be mis-remembering. >> Remember the "bus lady" who seemed to know us all by sight? > Kim... bundled up in her parka complaining she was freezing when I was > in t-shirt and shorts and the thermometer was in thr 50's. I was at a DECUS where Kim was officially recognized by DECUS leadership and presented with her own official credentials that allowed her to check out all the exhibits and attend any sessions (she was reported to have wondered aloud what we all did in there). -- Rich Alderson "You get what anybody gets. You get a lifetime." news@alderson.users.panix.com --Death, of the Endless ------------------------------ Date: Tue, 15 Jan 2008 23:17:58 -0500 From: "Richard B. Gilbert" Subject: Re: Marketing of operating sytems Message-ID: <478D8576.6090901@comcast.net> Rich Alderson wrote: > VAXman- @SendSpamHere.ORG writes: > > >>In article <478CD1E6.3090403@comcast.net>, "Richard B. Gilbert" >> writes: > > >>>Ken Robinson wrote: >>> >>>>On Jan 15, 2008 9:54 AM, Richard B. Gilbert wrote: >>> > >>>>>I think 10K would be a little too generous, at least for the era when I >>>>>was able to attend DECUS Symposia (~1986~1992). I think 7K was as big >>>>>as they got. >>>> > >>>>I seem to remember one West Coast DECUS that I attended got about 12K, >>>>also in the mid 80's to early 90's. I believe it was in 1988 in >>>>Anaheim, but I could be mis-remembering. >>> > >>>Remember the "bus lady" who seemed to know us all by sight? >> > >>Kim... bundled up in her parka complaining she was freezing when I was >>in t-shirt and shorts and the thermometer was in thr 50's. > > > I was at a DECUS where Kim was officially recognized by DECUS leadership and > presented with her own official credentials that allowed her to check out all > the exhibits and attend any sessions (she was reported to have wondered aloud > what we all did in there). > I'm very glad to hear that! We couldn't have honored a nicer person! ------------------------------ Date: Wed, 16 Jan 2008 03:38:26 GMT From: John Santos Subject: Re: network config Message-ID: Bob Koehler wrote: > In article <1cbf208f-02df-4fab-8109-74448e499efa@v4g2000hsf.googlegroups.com>, "=?ISO-8859-1?B?cG92b2Hn428=?=" writes: > >>Can someone help me please. I know nothing about openvms and I need >>just only change the network parameter(IP, dns, gateway, route, >>etc...) Can someone point me some link or how-to this task ? > > > You can get yourself in deep trouble in a short time. You really > need to spend a few minutes reading this group's FAQ just so you > know what issues you need to ask about. > > www.hoffmanlabs.com/vmsfaq/ > Probably not :-) The same poster asked the exact same question (suitably adapted) in the DEC Unix newsgroup. I suspect a newby cracker... Have fun! ;-( -- John Santos Evans Griffiths & Hart, Inc. 781-861-0670 ext 539 ------------------------------ Date: Tue, 15 Jan 2008 23:29:01 +0000 (UTC) From: helbig@astro.multiCLOTHESvax.de (Phillip Helbig---remove CLOTHES to reply) Subject: Re: Security level of SET PASS /GENERATE ? Message-ID: In article , Kilgallen@SpamCop.net (Larry Kilgallen) writes: > In article , helbig@astro.multiCLOTHESvax.de (Phillip Helbig---remove CLOTHES to reply) writes: > > > I don't really see the point of a relatively long lifetime. Either a > > day or so, if it is for a test account or something, or infinite (which > > gives the user a chance to think of a good, long password---ONCE). In > > what situation will a lifetime of, say, a month help me? > > Password lifetimes limit the exposure to password sniffing. Yes, but, in practice, in this respect, what good is, say, a lifetime of 90 days or so? ------------------------------ Date: Tue, 15 Jan 2008 23:32:09 +0000 (UTC) From: helbig@astro.multiCLOTHESvax.de (Phillip Helbig---remove CLOTHES to reply) Subject: Re: Security level of SET PASS /GENERATE ? Message-ID: In article , briggs@encompasserve.org writes: > The primary motivation for generated passwords is to stop your users > from selecting passwords that are so weak that a brute force search > attack isn't needed. PHB: I've forgotten my password. Dogbert (wearing hist password-recovery--service hat): Is it "123"? PHB: Wow, that's spooky! ------------------------------ Date: Tue, 15 Jan 2008 19:21:03 -0500 From: "Richard B. Gilbert" Subject: Re: Security level of SET PASS /GENERATE ? Message-ID: <478D4DEF.1030001@comcast.net> Phillip Helbig---remove CLOTHES to reply wrote: > In article , > Kilgallen@SpamCop.net (Larry Kilgallen) writes: > > >>In article , helbig@astro.multiCLOTHESvax.de (Phillip Helbig---remove CLOTHES to reply) writes: >> >> >>>I don't really see the point of a relatively long lifetime. Either a >>>day or so, if it is for a test account or something, or infinite (which >>>gives the user a chance to think of a good, long password---ONCE). In >>>what situation will a lifetime of, say, a month help me? >> >>Password lifetimes limit the exposure to password sniffing. > > > Yes, but, in practice, in this respect, what good is, say, a lifetime of > 90 days or so? > What good is a lifetime of 3 days, 30 days, or 300 days? If it meets your needs, it's good. If not, forget it! I've been using the same password for five or six years now. It meets my needs! The system is physically secure, holds nothing of any great value, and is accessible only to trusted personnel (me and my wife). FWIW, enforcing too frequent password changes can actually decrease security. It increases the tendency to write them down or to use insecure passwords. Who hasn't heard a story about someone using passwords of "1january", "2february", "3march", etc? It also increases the calls to the help desk for password resets which can, in itself, be a security problem. Imagine someone loafing near the help desk and overhearing "I've set your password to "gobbledegook"! Changing passwords too infrequently can also decrease security! If you can be observed while entering your password, a lifetime of one day might be too long! ------------------------------ Date: Wed, 16 Jan 2008 04:04:02 +0100 From: "P. Sture" Subject: Re: Security level of SET PASS /GENERATE ? Message-ID: In article , helbig@astro.multiCLOTHESvax.de (Phillip Helbig---remove CLOTHES to reply) wrote: > In article , > briggs@encompasserve.org writes: > > > The primary motivation for generated passwords is to stop your users > > from selecting passwords that are so weak that a brute force search > > attack isn't needed. > > PHB: I've forgotten my password. > > Dogbert (wearing hist password-recovery--service hat): Is it "123"? > > PHB: Wow, that's spooky! I had a boss like that once. In his case it was family nicknames. It used to drive me nuts. -- Paul Sture Sue's OpenVMS bookmarks: http://eisner.encompasserve.org/~sture/ovms-bookmarks.html ------------------------------ Date: 15 Jan 2008 23:01:39 -0600 From: Kilgallen@SpamCop.net (Larry Kilgallen) Subject: Re: Security level of SET PASS /GENERATE ? Message-ID: In article <478CD254.5010901@comcast.net>, "Richard B. Gilbert" writes: > John Reagan wrote: >> I use SET PASS/GENERATE every 30 days to pick an 8-char string. I then >> control-Y out and use that 8-char core string as the passwords for most >> of my accounts. I use different (but the same everytime) prefix/suffix >> strings on various accounts. I write them all down and put them in my >> wallet. I have to look at my paper for the first day or two, but I >> eventually memorize the passwords. >> >> People still look at me like I'm crazy when I write down my passwords >> (hmmm... maybe it is something else???) >> > > Just DON'T lose your wallet! Likely John does not face National Intelligence level threats, so the chance is low that the person who steals John's wallet would know what to do with those passwords. (I presume he does not list them with full access instructions.) ------------------------------ Date: 15 Jan 2008 23:02:32 -0600 From: Kilgallen@SpamCop.net (Larry Kilgallen) Subject: Re: Security level of SET PASS /GENERATE ? Message-ID: <1wGQ3Dy8fBgD@eisner.encompasserve.org> In article , helbig@astro.multiCLOTHESvax.de (Phillip Helbig---remove CLOTHES to reply) writes: > In article , > Kilgallen@SpamCop.net (Larry Kilgallen) writes: > >> In article , helbig@astro.multiCLOTHESvax.de (Phillip Helbig---remove CLOTHES to reply) writes: >> >> > I don't really see the point of a relatively long lifetime. Either a >> > day or so, if it is for a test account or something, or infinite (which >> > gives the user a chance to think of a good, long password---ONCE). In >> > what situation will a lifetime of, say, a month help me? >> >> Password lifetimes limit the exposure to password sniffing. > > Yes, but, in practice, in this respect, what good is, say, a lifetime of > 90 days or so? If they get your password after 30 days, it will only be good for 60 days more. ------------------------------ Date: Tue, 15 Jan 2008 23:25:59 +0100 From: "Ferry Bolhar" Subject: Re: simh VAX 11/780 Message-ID: <67819$478d32f8$54718838$22349@news.chello.at> Bob Koehler: > In that case, how can you tell the behaviour from global sections and > such in non-shared memory? Just by these SYSGEN commands? Some long time ago, I wrote a utility called "SECMGR" (section manager). It allowed to create every kind of section (file-based, pagefile, PFN, read-only and shared). In addition, and unlike to INSTALL, it allowed to list sections by their name, printing out all known information which was mainly taken from the GSD, and for file-based section, from the VCB and FCB as well. In addition, it allowed to specify a shared memory name to list only sections which were created in this shared memory. And also list information about the shared memory itself, its physical address, size and the number of GSDs reserved. AFAIK there was no VMS utility which provided this information. However, due to lack of a 11/78x, I never was able to actually test this code in a shared memory environment. I "emulated" SHBs and SHDs, but those were emulations only. While SECMGR was heavy used by our programmers and operators, this part of code always was a "dark hole". It was written around 1986, and at this time, our oldest system was a VAX 8600. So, now that simh supports the 11/780 in addition to the µVAX 3900, I hope that it will support the MA780 hardware as well, so I could test the small part of my never-tested code. If so, I'll setup a 11/780 simh for these tests. If not so, I'll not. That's the reason for my question. Kind greetings, Ferry -- ------------------------------ Date: Tue, 15 Jan 2008 13:13:29 -0800 (PST) From: dcannell Subject: UIS ARCHIVE (2000) on VMS Message-ID: <677c26c0-6457-4851-8ae5-b787a8fca6e6@q39g2000hsf.googlegroups.com> I'm running an ancient cluster of VAX6600s at v5.5-2, probably not all that uncommon however. The customer has used UIS ARCHIVE as their archiving process since the beginning of time and has no intention of changing. Does anyone have any, or know of any, expertise on this product, also known as ARCHIVE2000? At various points in it's life it's been through RaxCo and MTI. The current issue is that we're trying to do a 'perform compression' and ARCHIVE is whining about "no room for file". (A 'perform compression' gathers the data from one of the tapes on a save_set (the one that's still readable) and writes it out to two new tapes thus keeping two copies of the data. Used for "refreshing" tapes or when a tape has become unreadable.) There is (was yesterday anyway) space enough on the ARCHIVE drive for the file although not double the space. There is also space on the destination disk (although this is a COMPress operation, should not be going to the disk file system but to tape). If anyone has any leads or could point me in the direction of an organization that still supports this product I'd certainly appreciate it. Thanks, Dave Cannell dcannell@csc.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Archive> perf compress %ARCH-I-INFO, licensed for use by XYZZY42 Corp %ARCH-W-RESINTCMP, resuming interrupted PERFORM COMPRESSION %ARCH-I-LOG, only requests currently marked in-progress will be performed Do you want to process outstanding restores [Yes] ? Perform compression from which save set [1] - 2 %ARCH-I-INFO, scanning queues Save media volumes required for restores ======================================== TAPE1 TAPE2 %ARCH-I-INFO, scanning queues %ARCH-I-INFO, processing restore requests from volume TAPE1 %ARCH-W-CACNOROOM, a restore to cache skipped as no room for file %ARCH-W-RESMISSED, 1 restore request missed but left in queue %ARCH-I-INFO, flushing queues %ARCH-I-LOG, process priority raised for duration of queues flush %ARCH-I-INFO, PERFORM RESTORES completed, 0 files restored %ARCH-W-NOSAVRQST, no save requests to perform at this time %ARCH-I-INFO, flushing queues %ARCH-I-LOG, process priority raised for duration of queues flush %ARCH-I-INFO, PERFORM SAVES completed, 0 files saved %ARCH-W-DONINTCMP, interrupted PERFORM COMPRESSION now completed %ARCH-I-INFO, SHOW QUEUES and PERFORM COMPRESSION again if appropriate Archive> sho que Save requests 0 Fast restore requests 0 Restore requests 0 Cache restore requests 1 1107036 blocks Warning, non empty cache queues found! Such warnings suggest an active PERFORM SAVES/RESTORES/COMPRESSION elsewhere or an interrupted PERFORM. To complete an interrupted PERFORM, re-issue the command Dave -- VMS Support at UTC 860.654.6043 Computer Sciences Corporation ------------------------------ Date: Tue, 15 Jan 2008 20:02:40 -0500 From: "Peter Weaver" Subject: Re: UIS ARCHIVE (2000) on VMS Message-ID: <12aa01c857db$7f077a70$2802a8c0@CHARONLAP> > I'm running an ancient cluster of VAX6600s at v5.5-2, probably not all > that uncommon however. > >... > The current issue is that we're trying to do a 'perform compression' > and ARCHIVE is whining about "no room for file". >... I do not know anything about that product, but you really should be looking at CHARON-VAX/6600. You would not need to worry about your disk space anymore and you would increase your CPU speed (and memory speed and disk speed). Peter Weaver www.weaverconsulting.ca CHARON-VAX CHARON-AXP DataStream Reflection PreciseMail HP Commercial Hardware ------------------------------ End of INFO-VAX 2008.031 ************************