HDTenEightyP/NetNews huggingface dataset:
Newsgroups: bit.listserv.ibmtcp-l
Date:         Thu, 5 Nov 1992 10:03:12 ITA
From:         Marco Pirovano <PIROVANO@SIAM.MI.CNR.IT>
Subject:      Re: Looking for FINGERD for VM
              4 Nov 1992 17:33:55 GMT from <JL1@IBM-B.RUTHERFORD.AC.UK>

On Wed, 4 Nov 1992 17:33:55 GMT Janusz Lukasiak said:
>I believe there is a public version of FINGERD available somewhere.
>Could somebody tell me where ?
>We have VM/XA + TCP V2R1 , moving to R2 soon(ish).
>
>Many thanks
>           Janusz

Contact Chuck Lever <cel@cms1.rs.itd.umich.edu> he has written a fingerd
demon and client for VM based on REXTCPIP.
Arthur J. Ecock <eckcu@cunyvm.cuny.edu> has written a finger client based
on RXSOCKET.
This two product are public available, but I don't remember where. Sorry ...
We run it on VM/XA and TCP V2R2 and all work fine.

Ciao |
                            Marco


----------------------------------------------------------------------
 Marco Pirovano
 CNR - IFCTR/SIAM                    E-Mail:  pirovano@siam.mi.cnr.it
 Via A. M. Ampere, 56                Phone:   +39 2 7064.3272
 I-20131  MILANO - ITALY             Fax:     +39 2 266.30.30
----------------------------------------------------------------------
From: VALDIS@VTVM1.CC.VT.EDU (Valdis Kletnieks)
Newsgroups: bit.listserv.ibmtcp-l
Subject: Re: Telnet Security
Date: 5 Nov 92 21:12:29 GMT
Organization: Virginia Polytechnic Institute
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
              4 Nov 1992 16:38:26 EST from <SPOST@NASAGISS.GISS.NASA.GOV>

On Wed, 4 Nov 1992 16:38:26 EST The Postman Always ... said:
>>Can someone at an intermediate node monitor the link and pick
>>up the userid/password?
>
>Sure, they can monitor at the IP layer or the hardware layer,
>provided that they can get the required privileges at their site to
>do that.

Let us not forget that the *biggest* threat is somebody at your *own* site
who has a PC, an Ethernet card, and has FTP'ed a copy of LANWATCH...


                                  Valdis Kletnieks
                                  Computer Systems Engineer
                                  Virginia Polytechnic Institute
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.ibmtcp-l
Date:         Wed, 11 Nov 1992 19:42:00 PST
From:         Leonard D Woren <LDW@USCMVSA.BITNET>
Subject:      Re: Where, Oh Where is NFS?

On Wed, 11 Nov 1992 12:21:00 EST,
   "David F. Juraschek" <JURASCHEK@GMUVAX.BITNET> said:
> ...
> It tells me that NFSSAMP contains a GFSAPILK to link edit the NFSS.
>
> I've scanned all my TCP/IP tapes, I've scanned my ESA CBIPO tapes, but I can
> not find any files with ANFSxxxx or NFSxxxx anywhere in the file name
> anywhere.
>
> Where, Oh Where are the NFSS DLIB's kept?

On the NFSS tape.  ;-)  You only get NFSS if your order includes some
optional no-charge feature code.  If you didn't order your CBIPO this
way, then you should have your SE order a DFP CBPDO and include that
feature code.  You will get a complete set of DFP tapes.  Ignore most
of it and just
   RECEIVE S(HDP3FS1) FORFMID(HDP3FS1) .
or something like that.

> Argh.

That's a good way of putting it, once you discover that even if you
*had* put the NFSS feature code on your CBIPO, you'd still have to do
the APPLY yourself.  CBIPO ships NFSS as an un-installed function on
the SERV tape.  Plus every time you install maintenance on TCPIP,
NFSS, or C370, you have to run GFSAPILK.

/Leonard
From: CSP1DWD@UCLAMVS.BITNET (310 Denis DeLaRoca 825-4580)
Newsgroups: bit.listserv.ibmtcp-l
Subject: Re: Pascal record formats? (pgm wanted)
Date: 6 Nov 92 21:42:00 GMT
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU

>  Anyone have anything like this?  Or any suggestions?
>
>  I need to determine the storage layout of some pascal records
>  (structures).  For each field I need:
>
>   - offset to the start of the field
>   - the length of the field
>   - the base type of this field
>   - the name of the field

There are a number of Pascal to C converters which can do the job,
feed the pascal records in question to one of these converters (after
having defined some of the unique IBM Pascal types) and get C source
which when compiled with C/370 will yield complete struct information
mapping.

Use Archie to locate `p2c', it is a Pascal to C convert program that
is distributed under the Gnu stripe, it runs on any Unix system but
should port to C/370 real easy if you so desire...

-- Denis
From: SNORMO@MVS.SAS.COM (919 Mike Oatsvall 677-8000 X7605)
Newsgroups: bit.listserv.ibmtcp-l
Subject: 3172 ICP V3.1 & OF/2 woes
Date: 12 Nov 92 18:28:00 GMT
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU

Hello,
We recently received 2 3172-003s and ICP V3.1 to go along with them and
I'm having some trouble running the operator facility. I have installed
comm manager on top of OS/2 2.0. When I invoke the OF/2 configuration
program CSP I get a message back that file ACSNETB can not be found.
Also, noted that I'm missing a bunch of other files like LANDD.OS2,
LANDLLDD.OS2, NETBIOS.OS2,... and a few others.  Apparently these are
all part of the NETBIOS code that I though was installed along with comm
manager. I have configured the comm manager Lan & protocol stuff,
reinstalled comm manager several times and still cannot file these
files. The ICP people at IBM claim its not their problem and the comm
manager people say to re-install and everything will be fine. I did and
it aint. So, I would be eternally grateful to whomever can enlighten me
as to the secret of NETBIOS. I also have TCP/IP installed on this
machine. It no longer works of course now that comm  manager has diddled
with things. I was told if TCP/IP is installed, then comm manager does
not install properly. Is this really a factor?  As always thanks for any
assistance.

-----------------------------------------------------------------------
"Remember, maintenance is like medicine. Its supposed to make it better"
Robert M Oatsvall         SAS Institute Inc.        SNORMO@MVS.SAS.COM
MVS Systems Programmer    SAS Campus Drive          (919) 677-8000x7605
                          Cary, N.C. 27513-2414
From: SEB1525@MVS.draper.com (Steve Bacher)
Newsgroups: bit.listserv.ibmtcp-l
Subject: Re: X terminal security
Date: 6 Nov 92 21:33:00 GMT
Organization: Draper Laboratory

In article <IBMTCP-L%92110615024141@PUCC.PRINCETON.EDU>,
TROTH@RICEVM1.RICE.EDU (Rick Troth) writes:

>        I run with 'xhost +'.   As far as I'm aware,  all that lets you
>do to me is pop a window onto my X screen.   If I choose to kill it,
>too bad for you.   I don't see how it's a  "security"  hole.

It's a potentially huge security hole.  Not only can people pop up a
window on your screen, but they can execute any X client application
that can do things like peek at your window (you may be viewing some
sensitive data), simulate keyboard or mouse events (like "type" rm *
in your xterm), and do all these things to any window on your display,
regardless of what host, user or application "owns" it.

--
Steve Bacher (Batchman)                 Draper Laboratory
Internet: seb@draper.com                Cambridge, MA, USA
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.ibmtcp-l
Date:         Mon, 9 Nov 1992 16:46:37 GMT
From:         Udo Meyer <MEYER@DDAGSI1.BITNET>
Subject:      FTP get fails for tape migrated datasets...

We have just installed and put into work TCP/IP 2.2.1 for MVS/ESA.

One of the problem we experienced was, that an FTP GET from a workstation
client for a MVS dataset fails, if the file is (HSM-) migrated to tape.
The error message from the MVS server says:

    550 Non-DASD data set ...dataset name... can not be processed

AUTOmount and AUTOrecall were set true.
A DASD (Level 1) migrated dataset is properly recalled, even if AUTOrecall is
set to false (or NOAUTOrecall).
Does anybody know a circumvention or is there even a PTF available...?

Happy EARNing...Udo Meyer, GSI Darmstadt (Germany)
                           Manager Operations and Teleprocessing
From: 0003858921@MCIMAIL.COM (Robert G. Moskowitz)
Newsgroups: bit.listserv.ibmtcp-l
Subject: Re: Telnet Security
Date: 5 Nov 92 12:32:00 GMT
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU

Lionel B. Dyck Of  Rockwell asks:

>How secure is the userid and password for telnet users...?

>My concern is a user at another installation using telnet to access my local
>system.

>Is the userid/password secured in any way during the connection or is
>it in the open?

>Can someone at an intermediate node monitor the link and pick
>up the userid/password?

I have many SNIFFER traces with user logons.  If you are using TN3270, the text
is in EBCDIC, which the SNIFFER can easily convert to readable text.  Products
like LANWATCH 2.05 are not that good.  If you are using a standard TELNET and a
default applid like SIMWARE to do the ascii to 3270 conversion, then the logon
is in clear ascii text...

This is why we need KERBEROS!

Bob Moskowitz
Chrylser
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
X-Acknowledge-To: <SPOST@NASAGISS>
Newsgroups: bit.listserv.ibmtcp-l
Date:         Wed, 4 Nov 1992 16:38:26 EST
From:         "The Postman Always ..." <SPOST@NASAGISS.GISS.NASA.GOV>
Subject:      Re: Telnet Security

On Wed, 4 Nov 1992 08:50:14 PST you said:
>How secure is the userid and password for telnet users...?

If you don't watch inbound tcp traffic, a user can repeatedly attempt
to logon (i.e., to crack a password) without the usual CP journaling
notices about bad passwords.  To monitor this, I wrote a REXX exec that
uses NETSTAT MODULE to keep system group folks apprised of when logical
lines (incoming Telnet sessions) become enabled; lots of "enables"
without matching logons would signal a breakin attempt.  If you're
interested to see my "solution", you can get MONET VMARC (and VMARC
MODULE if you don't already have it) via anonymous ftp to
nasagiss.giss.nasa.gov.  Remember to do TYPE E MODE B (assuming that
you're ftping from a VM host, which is the only type of host that you
can use VMARC MODULE on anyhow ;->) so the module comes across OK.

>My concern is a user at another installation using telnet to access my local
>system.

Obviously, but there's nothing to prevent Telnet from being used by a
local user intent on undiscovered breakin also.

>Is the userid/password secured in any way during the connection or is
>it in the open?

There is no encryption/decryption, as in most Telnet/rlogin implementations.

>Can someone at an intermediate node monitor the link and pick
>up the userid/password?

Sure, they can monitor at the IP layer or the hardware layer,
provided that they can get the required privileges at their site to
do that.

---
Ken Bell (SYKLB@NASAGISS * SYKLB@NASAGISS.GISS.NASA.GOV * 212-678-5545)
Newsgroups: bit.listserv.ibmtcp-l
From: alan@curta.cc.columbia.edu (Alan Crosswell)
Subject: Re: Telnet Security
Organization: Columbia University
Date: Thu, 5 Nov 1992 15:12:38 GMT

In article <9211041652.AA0444@osreq48.rockwell.com>  writes:
> How secure is the userid and password for telnet users...?
You've already seen the other responses.  I wanted to throw in a couple
of items that I find need repeating in the IBM mainframe environment when
this comes up:

SNA over LANs (e.g. Token Rings) can also be sniffed just as trivially
as TELNET.  It is no more or less secure in that respect.  Traditional
SNA over point-to-point SDLC links, is more secure of course since it
is more difficult to passively tap a point-to-point.  Of course, you
could engineer your TCP/IP network this way too:-)

The solution, as pointed out by Robert Moskowitz, is Kerberos, or more
specifically, implementation of the TELNET AUTHENTICATION option
negotiation which extensibly supports a variety of authentication
protocols, described on nic.ddn.mil in

internet-drafts/draft-ietf-telnet-authentication-04.txt
internet-drafts/draft-ietf-telnet-authker-v4-01.txt
internet-drafts/draft-ietf-telnet-authker-v5-00.txt
internet-drafts/draft-ietf-telnet-authspx-00.txt

Also, end-to-end telnet session encryption is described in:

internet-drafts/draft-ietf-telnet-encryption-01.txt

Server and client implementations of these drafts are freely available
for Unix (in the MIT Kerberos distribution) so there is a base of code
to test against.  Client implementations are sorely needed for DOS, .5(OS),
Macs, etc.
/a

Newsgroups: bit.listserv.ibmtcp-l
From: man@magwien.gv.at (Andreas Manessinger)
Subject: SAS-C 5.01 and SUN-RPC on TCP/IP 2.2
Organization: Gemeinde Wien, MD-ADV/Md Ref. EPS
Distribution: bit
Date: Wed, 11 Nov 1992 12:20:28 GMT

Hello folks,

I have very nasty problems with the combination of SAS-C Version 5.01
and IBM TCP/IP Version 2.2. Some people around here have to write
SUN-RPC servers under MVS. 

First of all, SAS-C converts underscores (`_') in the names of library
functions to number signs (`#'), whereas the names of those members in
the TCP/IP library from IBM contain at signs (`@'). Therefore the
linker is not able to find e.g. `xdr_char()'.

The second problem is, that some of our guys suspect, that even if that
works, SAS-C would probably not work with the IBM RPC library. They
tried to install a newsreader some month ago and had to use an
SAS-supplied TCP library (or at least an additional one).

So, what I really want to know is: 

Is there someone out there, who works with this combination of tools
and, even better, used it successfully to write SUN-RPC programs ??

Are there any further problems to expect ?

Oh, yes, BTW, let me apologize if that questions are not as precise as
they could be, I am a UNIX-programmer and only quote what my people
told me.

        Many thanks in advance

--
    /\            | eMail: man@magwien.gv.at (Andreas Manessinger)
   /  \ndreas     | pMail: Alserstra"se. 20/6; A-1090 Wien; Austria
  /\/\ \          | Work : Gemeinde Wien MD-ADV/Ma; Ref. EPS
 / /  \anessinger | Phone: +43 222 4039584/13, FAX: 4039584/18, Home: 9350434
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.ibmtcp-l
Date:         Wed, 4 Nov 1992 08:07:01 CST
From:         "Alejandro J. Kurczyn S." <AKURCZYN@ITESMVF1.BITNET>
Subject:      Limiting the number of logical users

We have the TCP/IP product installed on a small 9370-50, and we handle near 90
"logical" users connected via TCP/IP, the performance is really bad, and I
was looking for a good way to limit the number of users that can connect this
way. I really appreciate a "SET MAXUSER x" command ala XA, but anything will
help. If anyone has a good hint, please drop me a line, thanks in advance!

-Alejandro Kurczyn S.

ps: By the way, the OS is VM/ESA-370
Organization: Penn State University
Date: Sat, 7 Nov 1992 10:54:46 EST
From: Peter M. Weiss <PMW1@psuvm.psu.edu>
Newsgroups: bit.listserv.ibmtcp-l
Subject: Re: MVS LPR Printing

>I put the LPR command into a sequential file because I was having
>problems with using quotation marks instream for the file containing
>the data to be printed.

>//STEP1 EXEC PGM=IKJEFT01
>//SYSTSPRT DD SYSOUT=A
>//SYSPRINT DD SYSOUT=A
>//SYSTSIN  DD DSN=LPR.COMMAND,DISP=SHR
>//*
>//* Contents of LPR.COMMAND something like the following:
>//*
>//* LPR 'LPR.DATA' (PRINTER prtname HOST hostname

Keith:

Having just "discovered" the LPR cmd myself, I wondered if it
worked in batch.  Thanks for sharing.

Have you done any work experimenting with return codes, or if always 0,
with interpreting the message stream?  Do you have any magic way of
re-executing/queing for temporarily unavailable servers?

/Pete (pmw1@psuvm.psu.edu)
--
Peter M. Weiss                     | not affiliated with psuvm.psu.edu|psuvm
31 Shields Bldg -- Penn State Univ.| "Connectivity is more than a Connection"
University Park, PA USA 16802-1202 | E. Michael Staman, _The Circuit_, Apr 92
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.ibmtcp-l
Date:         Wed, 4 Nov 1992 16:35:06 EST
From:         Mark Bodenstein <MAB@CORNELLC.BITNET>
Subject:      Re: Remote printing from JES2 spool

On Wed, 4 Nov 1992 11:44:00 EST David Condrey 656-2733 said:
>The foremost answer seems to be defining a remote printer to LPD.
>However there is currently no way for LPD to get output from spool
>and do the right things with it (retry on failure).

We have a solution to this for VM; if you have a VM system that your MVS
system can send output to you should be able to make it work for you.

Our solution is a VM service virtual that accepts spool files and sends
them out via LPR.  The tag on each spoolfile specifies the destination,
and various other options, such as translation from text to postscript.
The service virtual will also accept files from our MVS system and
interpret the first line of the file as a tag.

If you're interested in this drop me a note.

Mark Bodenstein  (mab@cornellc; 607-255-8059)
Cornell University
From: LDW@USCMVSA.BITNET (Leonard D Woren)
Newsgroups: bit.listserv.ibmtcp-l
Subject: Re: X terminal security
Date: 11 Nov 92 01:17:00 GMT
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU

Ok, I know about xhost, and I'm aware of xauth but don't understand
how it fits into the following.  Suppose that I have a program which
runs on TSO and copies the contents of a workstation "cut" buffer,
pasting it into an edit session.  (Please don't ask me for this
program; I didn't write it.)  How can this program be changed to not
need "xhost mvsa" on my server?  I assume the answer has something to
do with magic cookies and my .Xauthority file.  If I rlogin from my
workstation to another unix machine, I can fire up x-clients from that
system onto my workstation, even though I haven't done an xhost for
it.

/Leonard
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
Newsgroups: bit.listserv.ibmtcp-l
Date:         Fri, 13 Nov 1992 10:55:31 -0500
From:         Bill Bormann <ad2@EXPERT.CC.PURDUE.EDU>
Subject:      Server hangs with connections in Close-Wait state
              13 Nov 92 09:13:06 EST."
              <9211131413.AA14572@expert.cc.purdue.edu>

Naturally, my original post did not contain some basic information.  We are
running FAL TCP/IP 2.2 on a VM/ESA 1.1 system.  The SAS/C compiler in
question is version 5.01 with the select() zap Z5010355 applied.

Bill Bormann

expert.cc.purdue.edu!ad2 (USENET)   | Math Sciences Building
bormann@purccvm          (BITNET)   | Purdue University Computing Center
ad2@expert.cc.purdue.edu (Internet) | West Lafayette, IN 47907
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
X-Envelope-to: IBMTCP-L@PUCC.BITNET
X-VMS-To: NETMAIL::"IBMTCP-L@PUCC"
Newsgroups: bit.listserv.ibmtcp-l
Date:         Mon, 9 Nov 1992 11:28:00 EST
From:         IRVS@EARLHAM.BITNET
Subject:      I am sorry to send this to the list...

Could someone _PLEASE_ unsubcribe me from the list.  I have now sent at least
five messages to the listserv at Princeton and Rice Universities varying
somewhat in syntax requesting to be unsubscribed from this list and have
had _ALL_ of them returned with various responses.  I am sorry to resort to
sending it to the list but I must get off the list.  Thanks to whoever can take
   me off this list.
David Irving Smith
From: M20923@MBVM.Mitre.Org (Daniel Sorensen)
Newsgroups: bit.listserv.ibmtcp-l,comp.protocols.tcpip
Subject: Re: Remote printing from JES2 spool
Date: 5 Nov 92 18:57:00 GMT
Organization: The MITRE Corporation, Bedford MA 01730

In article <IBMTCP-L%92110411450390@PUCC.PRINCETON.EDU>
David Condrey 656-2733 <DAVIDC@CLEMSON.BITNET> writes:
 
>
>At the last SHARE, I brought up the fact that our TSO users are used to
>printing by releasing sysout off of spool (in addition to using a TSO
>"print" command) and that I wanted to allow these users to be able to
>use printers remote to MVS.
>
>The specific problem that we are having is that we have a plotter on
>the network that our MVS users want to plot to via SAS/GRAPH. SAS users
>run batch jobs and release the output from spool (in our case using IOF).
>
>The foremost answer seems to be defining a remote printer to LPD.
>However there is currently no way for LPD to get output from spool
>and do the right things with it (retry on failure).
>
>When I mentioned this, someone in the back stood up and said that he was
>solving this using a product called VPS (sic). Since then, we have
>bought VPS. I have not personally looked at it, but our network manager
>says that the VPS people indicated there is no solution to our problem.
>
>My question is: if you have solved this problem (or have any thoughts
>on it), I'd really like to hear them. If the person that mentioned VPS
>at the TCP/IP FFA is listening, I'd like to ask a few questions.
>
>Thanks everyone.
>-David
>-------------------------------------------------------------------------------
>|David S. Condrey           ___  ______ _____    Bitnet: DAVIDC@CLEMSON       |
>|MVS Systems Programmer     |  \ \_____ |        Internet: DAVIDC@CLEMSON.EDU |
>|Clemson University         |__/ _____/ |____    Phone: (803) 656-2733        |
>-------------------------------------------------------------------------------
 
  It seems from the responses so far that VM shops have resolved the batch
network printing problem by using service machines.  In fact, MITRE is
currently the same technique.  Our MVS machine sends the file to a VM
service machine, which in turn sends the files out using LPR.  The problem
is that we will soon be phasing out the VM machine.
 
  Has anyone found a MVS only solution to batch network printing?  Even
if VPS can use LPR in batch, it is too expensive.  If there is no TCP/IP
solution to network printing, our next solution would be to look into
NJE-type links to an RS/6000 and letting it deal with the actual printing.
Any ideas?
 
Daniel Sorensen
IBM Systems Group
The MITRE Corporation
(617) 271-2726
 
What, me speak for MITRE?  Ha!
From: TROTH@RICEVM1.RICE.EDU (Rick Troth)
Newsgroups: bit.listserv.ibmtcp-l
Subject: (no subject given)
Date: 6 Nov 92 23:24:20 GMT
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU

>LPR print.data (JOB FOR=user,PASS=password

        Nope.   V2R2 (CMS) doesn't like the JOB option.

"Republicans can't talk and Democrats can't add."     - G. H. Nerren

Rick Troth <troth@ricevm1.rice.edu>, Rice University, I/S VM Systems Support
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU