1 INFO-VAX	Sun, 18 May 2003	Volume 2003 : Issue 274       Contents:
 Re: <None>
 Re: <None>' Re: <None> ( Broken SMTP% when sending)  Re: Another newbie question ( Re: Damned power spike. Need new monitor( Re: Damned power spike. Need new monitor) Re: DEC TCP/IP Services 5.3 for Hobbyist?  Re: Error message help needed  Re: How small can VMS get ?  Re: How small can VMS get ? - Motif: how to add Mozilla icon to .html files  need help with VAX 4000-100A Re: New VMS logo ? New VMS logo ? Re: New VMS logo ?< Official gov't security cert tally: OpenVMS wins hands down!@ Re: Official gov't security cert tally: OpenVMS wins hands down!@ Re: Official gov't security cert tally: OpenVMS wins hands down!@ Re: Official gov't security cert tally: OpenVMS wins hands down!@ Re: Official gov't security cert tally: OpenVMS wins hands down!2 Re: WHICH command (was: Error message help needed)2 Re: WHICH command (was: Error message help needed)2 RE: WHICH command (was: Error message help needed)2 RE: WHICH command (was: Error message help needed)2 Re: WHICH command (was: Error message help needed)  F ----------------------------------------------------------------------   Date: 18 May 03 06:58:25 +0200) From: p_sture@elias.decus.ch (Paul Sture)  Subject: Re: <None> ) Message-ID: <kO5D9Nzm00ow@elias.decus.ch>   f In article <3EC67455.2A894F30@firstdbasource.com>, Michael Austin <maustin@firstdbasource.com> writes: > Paul Sture wrote:  >>  J >> So, VMS mail doesn't seem to work to the outside world since yesterday.H >> Never any problems before, but now it gives me this kind of response: >>   >> MAIL> send/edit, >> To:     somevalidaddress@validaddress.com >> CC: >> Subj:   Something% >> %MAIL-E-SENDABORT, no message sent , >> %TCPIP-E-SMTP_ABORT, SMTP session aborted >>  	 >> Doing:  >>   >> TCPIP STOP MAIL >> TCPIP START MAIL  >>  6 >> appears to solve the problem, but only temporarily. >>  # >> Nope, even that no longer works.  >>  1 >> Has anyone seen this, or has any ideas please?  >> -- 
 >> Paul Sture  >  > 2 > What version of VMS/TCPIP+patches are you using? >   = Compaq TCP/IP Services for OpenVMS Alpha Version V5.3 - ECO 1 =   on a Digital Personal WorkStation  running OpenVMS V7.3-1      " > Try increasing CLTPAGES to 1600. >   K Currently at the default of 256. Please do tell why you suggested this one, > as I am intrigued by it. Is it documented on DSN, for example?  J I'd rather reproduce the problem, and see if your suggestion cures it, butF given that a reboot _appears_ to have cured it for the time being, I'm" hesistant to leap in with changes.   --  
 Paul Sture   ------------------------------  % Date: Sun, 18 May 2003 09:26:27 -0500 1 From: "David J. Dachtera" <djesys.nospam@fsi.net>  Subject: Re: <None> ' Message-ID: <3EC79813.5161D0C7@fsi.net>    Paul Sture wrote:  > h > In article <3EC67455.2A894F30@firstdbasource.com>, Michael Austin <maustin@firstdbasource.com> writes: > > Paul Sture wrote:  > >>L > >> So, VMS mail doesn't seem to work to the outside world since yesterday.J > >> Never any problems before, but now it gives me this kind of response: > >> > >> MAIL> send/edit. > >> To:     somevalidaddress@validaddress.com > >> CC: > >> Subj:   Something' > >> %MAIL-E-SENDABORT, no message sent . > >> %TCPIP-E-SMTP_ABORT, SMTP session aborted > >> > >> Doing:  > >> > >> TCPIP STOP MAIL > >> TCPIP START MAIL  > >>8 > >> appears to solve the problem, but only temporarily. > >>% > >> Nope, even that no longer works.  > >>3 > >> Has anyone seen this, or has any ideas please?  > >> --  > >> Paul Sture  > >  > > 4 > > What version of VMS/TCPIP+patches are you using? > >  > ? > Compaq TCP/IP Services for OpenVMS Alpha Version V5.3 - ECO 1 = >   on a Digital Personal WorkStation  running OpenVMS V7.3-1  > $ > > Try increasing CLTPAGES to 1600. > >  > M > Currently at the default of 256. Please do tell why you suggested this one, @ > as I am intrigued by it. Is it documented on DSN, for example? > L > I'd rather reproduce the problem, and see if your suggestion cures it, butH > given that a reboot _appears_ to have cured it for the time being, I'm$ > hesistant to leap in with changes.  C There was a "recent" (within the last 18 mos. or so) VMS patch that D "broke" SMTP in third-party (Process Software) TCP/IP stacks. UppingG CTLPAGES was thought to be a ifx, but did not do so reliably. The "fix"  was to back-out the VMS patch.  B As you're running (the successor to) UCX, that shouldn't be what's troubling you.   ...but, you never know.   B Curiosity: any clues in the OPCOM log? ...the SMTP process log(s)?  5 To see where a process may be writing a log, you can:   	 $ ANA/SYS    SDA> SET PROCESS process_name    SDA> SHOW PROCESS/CHANNEL   D ...to see all the open channels in a process and what file/device is open on each channel.    --   David J. Dachtera  dba DJE Systems  http://www.djesys.com/  ( Unofficial Affordable OpenVMS Home Page: http://www.djesys.com/vms/soho/    ------------------------------   Date: 18 May 03 08:07:03 +0200) From: p_sture@elias.decus.ch (Paul Sture) 0 Subject: Re: <None> ( Broken SMTP% when sending)) Message-ID: <69D2UeNNZuU8@elias.decus.ch>   f In article <3EC6A874.33FD607D@firstdbasource.com>, Michael Austin <maustin@firstdbasource.com> writes: > JF Mezei wrote:  >>   >> Paul Sture wrote:. >> > To:     somevalidaddress@validaddress.com >> > CC: >> > Subj:   Something' >> > %MAIL-E-SENDABORT, no message sent . >> > %TCPIP-E-SMTP_ABORT, SMTP session aborted >>   >> What if you try:  >>   >> SEND/EDIT >>  O >> at what point does it fail ? before you get to the editor, or after you have / >> saved the message, expecting it to be sent ?  >>  M >> The error message you have provided would normally be issued if you CTRL-C O >> while entering the message, or if you do not save the file using the editor.  >>  N >> When you first invoke the smtp% transport for a message, a lot of files areN >> checked, so if you get past the first TO:, it works, even if the TCPIP STOPO >> MAIL has been issued. (the foreign image only queues the entries, and queing G >> work when the queue is stopped so you can still send emails to smtp% & >> destination if the mail is stopped. >>  N >> The first TO: also results in the TCPIP/SMTP control file being created. (I# >> believe in your mail directory).  >>  O >> Without the /EDIT, after you have entered The subject, it will create a file P >> in your sys$scratch: (default to sys$login). And then will write your messageN >> line by ine to that file and it is only once you have entereted ctrl-Z that  >> the processing really begins. >>  P >> If I were you, I would use SET WATCH FILE  to check to see what MAIL tries to& >> do just before you get the message. >  > Jeff,  > I > The reason for my previous question regarding versions is a known issue H > with STMP getting hung, and stopping/restarting mail and in some casesG > increasing CTLPAGES will correct it.  You can search the latest TCPIP ( > patches for the fix to this problem.   > E I have just looked at the latest TCPIP ECO and can find no mention of 4 CTLPAGES. However, I'll give the latest ECO a whirl. --  
 Paul Sture   ------------------------------   Date: 18 May 03 08:19:58 +0200) From: p_sture@elias.decus.ch (Paul Sture) $ Subject: Re: Another newbie question) Message-ID: <d$KwJngFANVt@elias.decus.ch>   [ In article <01c31cbf$15bc5060$2b8f4f3f@thegoodw>, "Glen G." <acme@aodontspamme.net> writes: I > Thanks to everyone who helped with my problem running "hello.exe."  RUN 
 > HELLO works < > like a champ!  It's good to see such an active group here. >   K LOL. Welcome to this newsgroup. You will indeed find some extremely helpful  folks here.    J > Now I'd like to know -- where are the rest of the layered products?  The > OpenVMS 7.3 CD-ROML > which I received has about 15 products, but the OpenVMS Hobbyist site says > that "over 100 of E > Compaq's OpenVMS Layered Products are available for the Hobbyist."   > Following this statement) > is a list of, well, about 100 products.  > K > Where do I find them?  I'm particularly interested in the COBOL compiler.  >   K Drop me a private email, and I'll see what I can find. Do you have a VAX or 	 an Alpha?   F A couple of things about the VMS COBOL compiler: it supports "terminalH format", meaning you don't have to stick to column numbers, can use tabsH and so on, and you don't have to write in uppercase either. Line numbersF are also unnecessary. It also has extensions for screen handling, such? as display at row n column n, function key handling, and so on.   * OK, that's more than a couple of things:-)   --  
 Paul Sture   ------------------------------  # Date: Sun, 18 May 2003 14:18:10 GMT # From: "John Smith" <a@nonymous.com> 1 Subject: Re: Damned power spike. Need new monitor J Message-ID: <CCMxa.180688$M81.135641@news02.bloor.is.net.cable.rogers.com>  7 "JF Mezei" <jfmezei.spamnot@istop.com> wrote in message # news:3EC6C12F.B2BB4AFA@istop.com...  > Antonio Carlini wrote:< > > Given that it's Saturday evening now where you are, it's= > > probably too late ... but did you check the internal fuse 1 > > that is likely to live in your monitor's psu?  > F > I replaced the externally accessible fuse (not obvious how to get to it), butC > I lack the tool to open the monitor makes it impossible for me to  open it E > without seriously damaging the casing. (the screws require a female : > screwdriver that is thin enough to fit inside the narrow cavity/hole. OK not A > as bad as the original Macintosh computers, but definitely more 
 "proprietary" C > than all others DEC monitors/terminals I have opened in the past.   9 Most hardware stores carry a wide variety of narrow shaft B screwdrivers/Torx drivers that will fit narrow holes. But as for a* 'female' driver - that's a new one for me.   ------------------------------  % Date: Sun, 18 May 2003 10:05:06 -0500 1 From: "David J. Dachtera" <djesys.nospam@fsi.net> 1 Subject: Re: Damned power spike. Need new monitor ' Message-ID: <3EC7A122.1B754A07@fsi.net>    JF Mezei wrote:  >  > Antonio Carlini wrote:< > > Given that it's Saturday evening now where you are, it's= > > probably too late ... but did you check the internal fuse 1 > > that is likely to live in your monitor's psu?  > O > I replaced the externally accessible fuse (not obvious how to get to it), but K > I lack the tool to open the monitor makes it impossible for me to open it E > without seriously damaging the casing. (the screws require a female N > screwdriver that is thin enough to fit inside the narrow cavity/hole. OK notO > as bad as the original Macintosh computers, but definitely more "proprietary" C > than all others DEC monitors/terminals I have opened in the past.   @ Do you mean like a a Torx socket of some kind? ...a hex-socket?   B I can kinda picture what you seem to be describing, I've seen themC before in other applications. Without more clues, though, I'm a bit  pressed to offer a suggestion.   --   David J. Dachtera  dba DJE Systems  http://www.djesys.com/  ( Unofficial Affordable OpenVMS Home Page: http://www.djesys.com/vms/soho/    ------------------------------  # Date: Sun, 18 May 2003 10:07:14 GMT 2 From: Mike Rechtman <michael.rechtman@digital.com>2 Subject: Re: DEC TCP/IP Services 5.3 for Hobbyist?+ Message-ID: <3EC782CE.27D70E6F@digital.com>    David J. Dachtera wrote: >  > Mike Rechtman wrote: > >  > > David J. Dachtera wrote:  > > > "Andreas W. Wylach" wrote: > > >  > > >>Hello everybody, > > >>I > > >>I am just in the process to build up my private VMS environment und < > > >>was asking myself, why the Hobbyist CD just got TCP/IP  > > >>Version 5.1 (OpenVMS VAX).R > > >>Does anybody know, when the 5.3 Version is available for the Hobbyist peops?P > > >>Or is there probably a upgrade download somewhere to get the newest TCP/IP > > >>Version? > > >  > > > N > > > hp remains rather set against downloadables. Guess LMF hacks have become > > > too well known.  > > > M > > > I posted some time ago about a bunch of DCL that I cooked up to build a M > > > hobbyists' LP distro. from the standard-issue SPL. Any interest? E-mail N > > > me privately. How to demung the reply-to should be obvious. If you don'tJ > > > get a reply, try using dls.net instead of fsi.net. Somewhere betweenK > > > forwarding and spam filtering, I think I may be losing some messages.  > > > L > > Got bounced from both versions of your email address, so NG readers will0 > > please excuse my trying to contact you here. > C > You *DID* remember to do the rather obvious de-mung thing, right?  > / > Sent myself mail from work to both addresses.  > A > ...but be advised that if your post-office's IP address doesn't 8 > back-translate, the spam filters may bounce it anyway. > > > > could you please  post the DCL OR post or email a pointer? > F > MUCH too big to post. My freeware link (if it's still) in the FAQ is > still valid: > % > http://www.djesys.com/freeware/vms/  >  > Look for hbyspl010.zip > J > Read the README file carefully. Especially, you'll need BYPASS privilegeJ > due to the way some things are done. It's not real polished, but it does > work.  > 0 > Whaddaya want fer nuthin? ...a rubber biscuit? >  > -- > David J. Dachtera  > dba DJE Systems  > http://www.djesys.com/ > * > Unofficial Affordable OpenVMS Home Page:! > http://www.djesys.com/vms/soho/  Thanks. < email failure could have had something to do with firewalls?: Got a pointer from a previous post und downloaded the kit.: I'll try to run it ASAP, time and disk space permitting...   ~Mike  --  E --------------------------------------------------------------------- E Usual disclaimer: All opinions are mine alone, perhaps not even that. ? Mike Rechtman                            *rechtman@tzora.co.il* F Kibbutz Tzor'a.                          Voice (home): 972-2-9908337  B   "20% of a job takes 80% of the time, the rest takes another 80%"E ---------------------------------------------------------------------  -----BEGIN GEEK CODE BLOCK-----  Version: 3.1: GCM/CS d(-)pu s:+>:- a++ C++ U-- L-- W++ N++ K? w--- V+++$6 PS+ PE-- t 5? X- tv-- b+ DI+ D-- G e++ h--- r+++ y+++@ ------END GEEK CODE BLOCK------    ------------------------------  % Date: Sun, 18 May 2003 13:48:26 +0200 2 From: martin@radiogaga.harz.de (Martin Vorlaender)& Subject: Re: Error message help needed; Message-ID: <3ec7730a.524144494f47414741@radiogaga.harz.de>   * Paul Sture (p_sture@elias.decus.ch) wrote:F > This is what it tells me, in action (stupidly long prompt containing% > my system and username edited out):  >  > % which login   > login: shell built-in command. > % which su
 > /usr/bin/su  > J > Really, incredibly useful. To someone somewhere, sometime, someplace :-) > G > I imagine it comes from the mentality that makes folks need to search > > their disk hierarchy to find where the hell their files are.  J It's needed for all script files, as the shell determines what interpreter$ to hand them to by the shebang line.  D For example, all 'NIX installation scripts that need to install perlE scripts use `which' to find out where the hell perl is installed, and  then munge the shebang line.   cu,    Martin --  F   OpenVMS:                | Martin Vorlaender  |  VMS & WNT programmer3    The operating system   | work: mv@pdv-systeme.de F    God runs the           |   http://www.pdv-systeme.de/users/martinv/:    earth simulation on.   | home: martin@radiogaga.harz.de   ------------------------------   Date: 18 May 2003 09:47:47 GMT From: rmk@rmkhome.com $ Subject: Re: How small can VMS get ?3 Message-ID: <3ec756c3$0$203$75868355@news.frii.net>   , Lord Isildur <isildur@andrew.cmu.edu> wrote:  M > hpux and aix drew some bits from OSF but are both basically sysV derivants. C > OSF is based on Mach, which can have RT capabilities, but anybody A > who has actually seen RTmach knows what a pig it is. DEC really < > did work wonders making a really decent os on top of mach.& > hpux is certainly _not_ BSD derived.  G As I remember, OSF started out as Mach plus a BSD/SVR2 personality. The G development of OSF/1 was mostly done on 486 boxes. A friend of mine had ) such a box sitting on his desk back then.    --  , rmk@rmkhome.com		http://www.rmkhome.com/~rmk   ------------------------------  # Date: Sun, 18 May 2003 16:26:32 GMT 2 From: "Kenneth Farmer" <kfarmer@NOSPAMopenvms.org>$ Subject: Re: How small can VMS get ?> Message-ID: <YuOxa.59295$fr6.3166047@twister.southeast.rr.com>   Unix History Timeline   ( http://www.levenez.com/unix/history.html     -- Kenneth Farmer <><  ; OpenVMS:  http://www.OpenVMS.org  |  http://dcl.OpenVMS.org = Unix:  http://www.EnterpriseUnix.org  |  http://www.Tru64.org B Linux:  http://www.EnterpriseLinux.org  |  http://www.LinuxHPC.org    " <rmk@rmkhome.com> wrote in message- news:3ec756c3$0$203$75868355@news.frii.net... . > Lord Isildur <isildur@andrew.cmu.edu> wrote: > D > > hpux and aix drew some bits from OSF but are both basically sysV
 derivants.E > > OSF is based on Mach, which can have RT capabilities, but anybody C > > who has actually seen RTmach knows what a pig it is. DEC really > > > did work wonders making a really decent os on top of mach.( > > hpux is certainly _not_ BSD derived. > I > As I remember, OSF started out as Mach plus a BSD/SVR2 personality. The I > development of OSF/1 was mostly done on 486 boxes. A friend of mine had + > such a box sitting on his desk back then.  >  > --  - > rmk@rmkhome.com http://www.rmkhome.com/~rmk    ------------------------------  % Date: Sun, 18 May 2003 10:48:20 +0200  From: Dirk Munk <munk@home.nl>6 Subject: Motif: how to add Mozilla icon to .html files2 Message-ID: <ba7hgm$v7v$1@news3.tilbu1.nb.home.nl>  Q I have added Mozilla as a Motif application to DecWindows Motif (as described in  N the release notes), but now I would like to see a Mozilla icon too with .html / .shtml files etc. in the File Manager of Motif.   $ Can someone tell me how to do this ?   ------------------------------  + Date: Sun, 18 May 2003 15:53:26 +0000 (UTC) P From: helbig@astro.multiCLOTHESvax.de (Phillip Helbig---remove CLOTHES to reply)% Subject: need help with VAX 4000-100A $ Message-ID: <ba8a9l$sr3$1@online.de>  I I'm experimenting with some old hardware which I think was OK when I got  . it but which I have never properly brought up.  F One piece is a 4000-100A.  It apparently has a DSSI controller as wellE as a SCSI controller.  There is a DSSI disk and a SCSI CD inside.  It 5 has a HUGE connection block on the back with a 50-pin D Centronics---presumably SCSI---as well as male and female connectorsH with three rows of pins (otherwise about the same size as the CentronicsE connector) and three male plugs which look like the small 50 (or 68?) F pin SCSI connectors but almost certainly aren't.  It came with a BA350C with a cable connecting it to one of the small plugs.  In the BA350 E there is some sort of module which I suspect is a DSSI-SCSI converter A (since almost certainly only SCSI disks can go into the BA 350).    I Anyway, the default boot device is non-existent.  When I tell it to boot  H from the DSSI disk inside, it comes up saying VMS 5.5-2H4, asks for the E date and time and then says it has booted standalone backup!  I then  B have a "$" prompt, but it's not a DCL prompt.  Probably it is the G standalone-backup prompt, since BACKUP seems to be the only command it   recognises.   H I'm not very familiar with standalone backup.  Does anyone know if thereH is anyway to tell whether the DSSI disk inside is bootable and if so howG to boot from it (from the console prompt) rather than have it boot into  standalone backup?    C Another piece is a 4000-90.  At power up, the four LEDs on the left G (1--4) stay lit all the time.  At first, the leftmost two in the group  H on the right (5--6) stay lit, then 5 stays on while 6 goes out, 7 comes G up and stays lit and 8 flashes very rapidly.  Any idea what this means?   H Another piece is a 3100-38.  It appears to have a SCSI connector on the E back, but a broad, narrow one (talking about the physical dimensions  I here) with small pins.  Will this work with DEC SCSI disks from the same  I error (keeping in mind the 1.07 GB limitation for a boot disk) if I have   the appropriate connector?   ------------------------------    Date: 18 May 2003 06:23:01 -0500- From: Kilgallen@SpamCop.net (Larry Kilgallen)  Subject: Re: New VMS logo ? 3 Message-ID: <lP5QDpSnmoji@eisner.encompasserve.org>   G In article <3EC7616F.1040908@home.nl>, Dirk Munk <munk@home.nl> writes: I > A couple of days ago we had a session with some HP reps. They had some  Q > powerpoint presentations, and there I noticed a new OpenVMS logo, although the  L > idea is not new. It looks like the old Digital logo, but now with HP blue * > squares instead of Digital burgundy red.  ) Blue ?  Oh, like the _old_ Digital logo !   B > I wonder if this is a new official logo, maybe Sue can tell us ?   ------------------------------  % Date: Sun, 18 May 2003 12:33:19 +0200  From: Dirk Munk <munk@home.nl> Subject: New VMS logo ? & Message-ID: <3EC7616F.1040908@home.nl>  G A couple of days ago we had a session with some HP reps. They had some  O powerpoint presentations, and there I noticed a new OpenVMS logo, although the  J idea is not new. It looks like the old Digital logo, but now with HP blue ( squares instead of Digital burgundy red.  @ I wonder if this is a new official logo, maybe Sue can tell us ?   ------------------------------  % Date: Sun, 18 May 2003 09:45:28 -0500 1 From: "David J. Dachtera" <djesys.nospam@fsi.net>  Subject: Re: New VMS logo ? ' Message-ID: <3EC79C88.AC67689A@fsi.net>    Dirk Munk wrote: > H > A couple of days ago we had a session with some HP reps. They had someP > powerpoint presentations, and there I noticed a new OpenVMS logo, although theK > idea is not new. It looks like the old Digital logo, but now with HP blue * > squares instead of Digital burgundy red. > B > I wonder if this is a new official logo, maybe Sue can tell us ?  , ...like the one at http://www.openvms.org/ ?   --   David J. Dachtera  dba DJE Systems  http://www.djesys.com/  ( Unofficial Affordable OpenVMS Home Page: http://www.djesys.com/vms/soho/    ------------------------------    Date: 18 May 2003 07:13:14 -0700( From: bob@instantwhip.com (Bob Ceculski)E Subject: Official gov't security cert tally: OpenVMS wins hands down! = Message-ID: <d7791aa1.0305180613.4c460536@posting.google.com>   2 well Andrew, these are official gov't numbers that0 definitively prove OpenVMS is the most secure OS in the world ...    ( http://www.sans.org/rr/start/openvms.php  4 here's a paragragh with those results from the above article ...    How Secure is VMS?  E Before anything else, I would like capture your attention by starting E with a subjective indicator of how secure VMS really is. To date, the @ U.S Department of Energy's Computer Incident Advisory CapabilityF (DOE-CIAC) lists a total of 22 VMS security advisories; of these, onlyC 3 have been issued since November 1994. A search of CERT advisories B with keywords VMS, VAX, or OpenVMS yielded a total of less than 25E unique advisories whereas Solaris yielded 266, Linux 313, and Windows  451 respectively.   @ More recently, several members from the Dallas-Fort Worth CompaqC User's Group (DFWCUG), one of the most active local VMS user groups F nationwide, entered a bastion host Alpha box running VMS into the 2001A DEFCON hackers Mecca. The VMS box was game to 5000+ hackers whose A objective was to hack the various boxes entered in the contest in E order to score points. According to Opcom's report of the events "The D VMS machine on the Green team was configured with Apache web server.C As we are aware, VMS is an extremely secure operating system. While > many other boxes in the room, mostly Unix, Linux, and forms of@ windows, and even a Macintosh, were compromised and subsequentlyB attended to by their masters, the VMS system remained intact". TheC article closes with "During the closing session at 4 PM Sunday, the C Ghetto Hackers, which are the most respected and skillful, gave the E Green team props' because our stuff stayed up and our root' was the F only one they did not get. We consider this a positive note and a high6 compliment, coming from this well-accomplished group".  A In summary, VMS is an extremely secure operating system. Of equal B importance, however, is the care and meticulous attention most VMSF System Administrators pay towards the security management of their box or cluster of boxes.   ------------------------------  % Date: Sun, 18 May 2003 10:12:22 -0500 1 From: "David J. Dachtera" <djesys.nospam@fsi.net> I Subject: Re: Official gov't security cert tally: OpenVMS wins hands down! ' Message-ID: <3EC7A2D6.B4C27466@fsi.net>    Bob Ceculski wrote:  > [snip]C > In summary, VMS is an extremely secure operating system. Of equal D > importance, however, is the care and meticulous attention most VMSH > System Administrators pay towards the security management of their box > or cluster of boxes.  G I've tried to "properly" secure a number of systems in my time, only to A find myself effectively thwarted at every turn by the application H vendor's inability to provide a securable system. Seems their answer, byH and large, to "Insufficient privilege or object protect violation" is toE simply grant the users dangerous privileges (or just clone the SYSTEM D account to create general users) rather than to actually resolve the issue.  " Profit before propriety, y'know...   --   David J. Dachtera  dba DJE Systems  http://www.djesys.com/  ( Unofficial Affordable OpenVMS Home Page: http://www.djesys.com/vms/soho/    ------------------------------  # Date: Sun, 18 May 2003 15:25:50 GMT ) From: bob smith <sfmc68@bellatlantic.net> I Subject: Re: Official gov't security cert tally: OpenVMS wins hands down! / Message-ID: <3EC7A629.4080803@bellatlantic.net>   ? And there are no hits on any fault related to TOPS10 or TOPS20.      Bob Ceculski wrote: 4 > well Andrew, these are official gov't numbers that2 > definitively prove OpenVMS is the most secure OS > in the world ...=20  >=20* > http://www.sans.org/rr/start/openvms.php >=206 > here's a paragragh with those results from the above
 > article ...  >=20 > How Secure is VMS? >=20G > Before anything else, I would like capture your attention by starting G > with a subjective indicator of how secure VMS really is. To date, the B > U.S Department of Energy's Computer Incident Advisory CapabilityH > (DOE-CIAC) lists a total of 22 VMS security advisories; of these, onlyE > 3 have been issued since November 1994. A search of CERT advisories D > with keywords VMS, VAX, or OpenVMS yielded a total of less than 25G > unique advisories whereas Solaris yielded 266, Linux 313, and Windows  > 451 respectively.  >=20B > More recently, several members from the Dallas-Fort Worth CompaqE > User's Group (DFWCUG), one of the most active local VMS user groups H > nationwide, entered a bastion host Alpha box running VMS into the 2001C > DEFCON hackers Mecca. The VMS box was game to 5000+ hackers whose C > objective was to hack the various boxes entered in the contest in G > order to score points. According to Opcom's report of the events "The F > VMS machine on the Green team was configured with Apache web server.E > As we are aware, VMS is an extremely secure operating system. While @ > many other boxes in the room, mostly Unix, Linux, and forms ofB > windows, and even a Macintosh, were compromised and subsequentlyD > attended to by their masters, the VMS system remained intact". TheE > article closes with "During the closing session at 4 PM Sunday, the E > Ghetto Hackers, which are the most respected and skillful, gave the J > Green team =91props' because our stuff stayed up and our =91root' was t= heH > only one they did not get. We consider this a positive note and a high8 > compliment, coming from this well-accomplished group". >=20C > In summary, VMS is an extremely secure operating system. Of equal D > importance, however, is the care and meticulous attention most VMSH > System Administrators pay towards the security management of their box > or cluster of boxes.   ------------------------------    Date: 18 May 2003 10:53:46 -0500- From: Kilgallen@SpamCop.net (Larry Kilgallen) I Subject: Re: Official gov't security cert tally: OpenVMS wins hands down! 3 Message-ID: <fYFxPPrhJTiT@eisner.encompasserve.org>   [ In article <3EC7A2D6.B4C27466@fsi.net>, "David J. Dachtera" <djesys.nospam@fsi.net> writes:  > Bob Ceculski wrote: 	 >> [snip] D >> In summary, VMS is an extremely secure operating system. Of equalE >> importance, however, is the care and meticulous attention most VMS I >> System Administrators pay towards the security management of their box  >> or cluster of boxes.  > I > I've tried to "properly" secure a number of systems in my time, only to C > find myself effectively thwarted at every turn by the application J > vendor's inability to provide a securable system. Seems their answer, byJ > and large, to "Insufficient privilege or object protect violation" is toG > simply grant the users dangerous privileges (or just clone the SYSTEM F > account to create general users) rather than to actually resolve the > issue.  D An application vendor once told a consulting client of mine (outside my presence) that:  ; 	"Cobol on VMS cannot share files unless all users have the  	 BYPASS privilege."  8 At some point one has to decide to stop believing fools.   ------------------------------  % Date: Sun, 18 May 2003 11:29:02 -0500 1 From: "David J. Dachtera" <djesys.nospam@fsi.net> I Subject: Re: Official gov't security cert tally: OpenVMS wins hands down! ' Message-ID: <3EC7B4CE.AD86D51A@fsi.net>    Larry Kilgallen wrote: > ] > In article <3EC7A2D6.B4C27466@fsi.net>, "David J. Dachtera" <djesys.nospam@fsi.net> writes:  > > Bob Ceculski wrote:  > >> [snip] F > >> In summary, VMS is an extremely secure operating system. Of equalG > >> importance, however, is the care and meticulous attention most VMS K > >> System Administrators pay towards the security management of their box  > >> or cluster of boxes.  > > K > > I've tried to "properly" secure a number of systems in my time, only to E > > find myself effectively thwarted at every turn by the application L > > vendor's inability to provide a securable system. Seems their answer, byL > > and large, to "Insufficient privilege or object protect violation" is toI > > simply grant the users dangerous privileges (or just clone the SYSTEM H > > account to create general users) rather than to actually resolve the
 > > issue. > F > An application vendor once told a consulting client of mine (outside > my presence) that: > D >         "Cobol on VMS cannot share files unless all users have the >          BYPASS privilege."  > : > At some point one has to decide to stop believing fools.  G ...who expect (and receive!) many times our salary converted to hourly.    --   David J. Dachtera  dba DJE Systems  http://www.djesys.com/  ( Unofficial Affordable OpenVMS Home Page: http://www.djesys.com/vms/soho/    ------------------------------    Date: 18 May 2003 06:21:39 -0500- From: Kilgallen@SpamCop.net (Larry Kilgallen) ; Subject: Re: WHICH command (was: Error message help needed) 3 Message-ID: <OVN6425lCvSj@eisner.encompasserve.org>   U In article <OJ6a$$j2RVth@elias.decus.ch>, p_sture@elias.decus.ch (Paul Sture) writes:   F > Sorry, but I cannot resist this one. Quite apart from the relativelyC > recent DCL$PATH, VMS has had the idea of search paths since V4.0, F > which I first saw approximately 18 years ago. Not specifically aimedK > at executables, for the nitpickers out there, but search paths indeed :-)   = But those are easily investigated with the DIRECTORY command.   G The transcendental meaning of WHICH seems to be for something much more C complicated, so on VMS that naturally involves the CLD/Logical Name E machinations we have discussed earlier in the product.  While many of C us are willing to discuss what it would take to make such a tool be D feature-complete in the VMS environment, nobody has even hinted they might try writing one.  6 WHICH sounds like something not really needed for VMS.   ------------------------------  % Date: Sun, 18 May 2003 09:34:34 -0500 1 From: "David J. Dachtera" <djesys.nospam@fsi.net> ; Subject: Re: WHICH command (was: Error message help needed) ' Message-ID: <3EC799FA.72B384BC@fsi.net>    Larry Kilgallen wrote: > W > In article <OJ6a$$j2RVth@elias.decus.ch>, p_sture@elias.decus.ch (Paul Sture) writes:n > H > > Sorry, but I cannot resist this one. Quite apart from the relativelyE > > recent DCL$PATH, VMS has had the idea of search paths since V4.0,eH > > which I first saw approximately 18 years ago. Not specifically aimedM > > at executables, for the nitpickers out there, but search paths indeed :-)o > ? > But those are easily investigated with the DIRECTORY command.  > I > The transcendental meaning of WHICH seems to be for something much more E > complicated, so on VMS that naturally involves the CLD/Logical NameMG > machinations we have discussed earlier in the product.  While many ofhE > us are willing to discuss what it would take to make such a tool bedF > feature-complete in the VMS environment, nobody has even hinted they > might try writing one. > 8 > WHICH sounds like something not really needed for VMS.  E Come to think of it yes - since DIRECTORY using a search-list logicalHG name will display files in the order specified in the search-list, thato
 is very true.n  B Since UN*X doesn't have the concept of a logical name, much less a> search-list, you need something like "which" to fill that gap.  G ...unless you really wanted know the difference in executor between SETlE VERIFY and SET PROCESS without having to manually analyze the commandc table...   -- t David J. Dachterao dba DJE Systemsl http://www.djesys.com/  ( Unofficial Affordable OpenVMS Home Page: http://www.djesys.com/vms/soho/N   ------------------------------  % Date: Sun, 18 May 2003 08:09:24 -0700 # From: "Tom Linden" <tom@kednos.com>l; Subject: RE: WHICH command (was: Error message help needed)%9 Message-ID: <CIEJLCMNHNNDLLOOGNJIIEHIHDAA.tom@kednos.com>   F Actually, this is getting too complicated.  I think all that is neededC is the ability to -easily- locate the particular executable in somer= reasonable fashion, whether it is in the command -, symbol -,aK logical tables or otherwise using the same precendence rules as the command E interpreter.  And it doesn't have to be 100%  -  at least not for me.e  E I am sure a DCL wizard could knock that out in short order.  ( hint )o     >-----Original Message----- 7 >From: David J. Dachtera [mailto:djesys.nospam@fsi.net]l# >Sent: Sunday, May 18, 2003 7:35 AMl >To: Info-VAX@Mvb.Saic.Com< >Subject: Re: WHICH command (was: Error message help needed) >? >  >Larry Kilgallen wrote:p >> mD >> In article <OJ6a$$j2RVth@elias.decus.ch>, p_sture@elias.decus.ch  >(Paul Sture) writes:r >> tI >> > Sorry, but I cannot resist this one. Quite apart from the relatively-F >> > recent DCL$PATH, VMS has had the idea of search paths since V4.0,I >> > which I first saw approximately 18 years ago. Not specifically aimedeD >> > at executables, for the nitpickers out there, but search paths  >indeed :-)6 >> 2@ >> But those are easily investigated with the DIRECTORY command. >> >J >> The transcendental meaning of WHICH seems to be for something much moreF >> complicated, so on VMS that naturally involves the CLD/Logical NameH >> machinations we have discussed earlier in the product.  While many ofF >> us are willing to discuss what it would take to make such a tool beG >> feature-complete in the VMS environment, nobody has even hinted theyO >> might try writing one.  >>  9 >> WHICH sounds like something not really needed for VMS.I > F >Come to think of it yes - since DIRECTORY using a search-list logicalH >name will display files in the order specified in the search-list, that >is very true. >eC >Since UN*X doesn't have the concept of a logical name, much less aC? >search-list, you need something like "which" to fill that gap.r >eI >....unless you really wanted know the difference in executor between SETnF >VERIFY and SET PROCESS without having to manually analyze the command	 >table...l >t >--  >David J. Dachtera >dba DJE Systems >http://www.djesys.com/s >a) >Unofficial Affordable OpenVMS Home Page:   >http://www.djesys.com/vms/soho/ >u >---' >Incoming mail is certified Virus Free.s; >Checked by AVG anti-virus system (http://www.grisoft.com).rA >Version: 6.0.480 / Virus Database: 276 - Release Date: 5/12/2003  >  ---c& Outgoing mail is certified Virus Free.: Checked by AVG anti-virus system (http://www.grisoft.com).@ Version: 6.0.480 / Virus Database: 276 - Release Date: 5/12/2003   ------------------------------  % Date: Sun, 18 May 2003 08:08:40 -0700 # From: "Tom Linden" <tom@kednos.com>s; Subject: RE: WHICH command (was: Error message help needed) 9 Message-ID: <CIEJLCMNHNNDLLOOGNJIEEHIHDAA.tom@kednos.com>e  F Actually, this is getting too complicated.  I think all that is neededC is the ability to -easily- locate the particular executable in someE= reasonable fashion, whether it is in the command -, symbol -,eK logical tables or otherwise using the same precendence rules as the commandmE interpreter.  And it doesn't have to be 100%  -  at least not for me.   E I am sure a DCL wizard could knock that out in short order.  ( hint )e   >-----Original Message-----m7 >From: David J. Dachtera [mailto:djesys.nospam@fsi.net]e# >Sent: Sunday, May 18, 2003 7:35 AMg >To: Info-VAX@Mvb.Saic.Com< >Subject: Re: WHICH command (was: Error message help needed) >c >l >Larry Kilgallen wrote:s >> .D >> In article <OJ6a$$j2RVth@elias.decus.ch>, p_sture@elias.decus.ch  >(Paul Sture) writes:a >> dI >> > Sorry, but I cannot resist this one. Quite apart from the relativelyaF >> > recent DCL$PATH, VMS has had the idea of search paths since V4.0,I >> > which I first saw approximately 18 years ago. Not specifically aimedoD >> > at executables, for the nitpickers out there, but search paths  >indeed :-)  >> n@ >> But those are easily investigated with the DIRECTORY command. >> sJ >> The transcendental meaning of WHICH seems to be for something much moreF >> complicated, so on VMS that naturally involves the CLD/Logical NameH >> machinations we have discussed earlier in the product.  While many ofF >> us are willing to discuss what it would take to make such a tool beG >> feature-complete in the VMS environment, nobody has even hinted theyq >> might try writing one.s >> s9 >> WHICH sounds like something not really needed for VMS.. >>F >Come to think of it yes - since DIRECTORY using a search-list logicalH >name will display files in the order specified in the search-list, that >is very true. >eC >Since UN*X doesn't have the concept of a logical name, much less ad? >search-list, you need something like "which" to fill that gap.y >eI >....unless you really wanted know the difference in executor between SEToF >VERIFY and SET PROCESS without having to manually analyze the command	 >table...k >  >--  >David J. Dachtera >dba DJE Systems >http://www.djesys.com/  >f) >Unofficial Affordable OpenVMS Home Page:o  >http://www.djesys.com/vms/soho/ >  >---' >Incoming mail is certified Virus Free.t; >Checked by AVG anti-virus system (http://www.grisoft.com).tA >Version: 6.0.480 / Virus Database: 276 - Release Date: 5/12/2003i >r ---.& Outgoing mail is certified Virus Free.: Checked by AVG anti-virus system (http://www.grisoft.com).@ Version: 6.0.480 / Virus Database: 276 - Release Date: 5/12/2003   ------------------------------  % Date: Sun, 18 May 2003 11:48:02 -0500e1 From: "David J. Dachtera" <djesys.nospam@fsi.net>u; Subject: Re: WHICH command (was: Error message help needed)c' Message-ID: <3EC7B942.D8B86762@fsi.net>    Tom Linden wrote:t > H > Actually, this is getting too complicated.  I think all that is neededE > is the ability to -easily- locate the particular executable in someu? > reasonable fashion, whether it is in the command -, symbol -,oM > logical tables or otherwise using the same precendence rules as the command G > interpreter.  And it doesn't have to be 100%  -  at least not for me.D > G > I am sure a DCL wizard could knock that out in short order.  ( hint )   F ...except that to examine the command tables in DCL, one must save andF then parse the output of VERB. Very CPU-time consuming and kinda messy to do.  C DEFINITELY doable, but I'd question the long term value. A simpler,t8 somewhat cleaner proc. could be easily cooked up, given:  A 1. A search-list logical name, DIRECTORY will easily tell where a A selected file will be found, and in what order. F$SEARCH() is thel lexical equivalent, sort of.  F 2. If SHOW LOGICAL DCL$PATH returns "no translation for logical name",B then the file is not being found by that method. F$TRNLNM() is theH lexical equivalent of SHOW LOGICAL, sort of. If DCL$PATH is DEFINEd, butA DIRECTORY DCL$PATH:filespec returns "no files found", then you'recG probably looking at verb in the command table. Again, F$SEARCH() is the * lexical equivalent, sort of, to DIRECTORY.  ? 3. If DCL complains about "unrecognized command verb", then theN+ conclusion is the input was likely garbage.8  H 4. Using DCL$PATH, DCL appears to search first for a matching .COM, then for a matching .EXE.  G No real wizardry is involved. The rest is left as a DCL coding exercise  for the reader.    Bonus question:w  B Assuming DCL$PATH is not DEFINEd, how can DCL be made to find yourH resulting WHICH.COM, regardless of the current default device/directory?   -- c David J. Dachterac dba DJE Systemst http://www.djesys.com/  ( Unofficial Affordable OpenVMS Home Page: http://www.djesys.com/vms/soho/    ------------------------------   End of INFO-VAX 2003.274 ************************