HDTenEightyP/NetNews huggingface dataset:
Newsgroups: vmsnet.networks.tcp-ip.cmu-tek
Subject: RE: IPACP-5A
From: "John F. Sandhoff" <syssand@ccvax.ccs.csus.edu>
Date: Fri, 08 Jan 1993 09:35:57 PST
Reply-To: sandhoff@csus.edu
Organization: The Internet
Return-Path: <@andrew.cmu.edu:CMU-OpenVMS-IP-Request@drycas.club.cc.cmu.edu@mccall.com>
Resent-Date: Fri, 08 Jan 1993 09:35:57 PST
X-MX-Warning: Warning -- Invalid "Resent-From" header.
Resent-From: @andrew.cmu.edu:CMU-OpenVMS-IP-Request@drycas.club.cc.cmu.edu
Resent-Message-ID: <9301081743.AA01382@depot.cis.ksu.edu>
CC: LNEWT@mdacc.mda.uth.tmc.edu, syssand@ccvax.ccs.csus.edu
Errors-To: CMU-OpenVMS-IP-Request@drycas.club.cc.cmu.edu
Resent-Reply-To: CMU-OpenVMS-IP@drycas.club.cc.cmu.edu


DISCLAIMER: I'm not the author of the -5A patches so I speak from
experience, *not* authority :-)

> I obtained the -5A modules from sacusr and rummaged through the .exe's.
> I found what looks like a reference to CMUTEK_ROOT in roughly the same area
> that -5 references CMUIP_ROOT. Is this because the 5A mods were built before
> the TEK references were removed? Do I have a good copy of the -5A mods?

The -5A mods were created while CMU/Tek was still CMU/Tek. Because of
problems in coordinating a new release, the 'new' CMU-OpenVMS product
is really just 6.6-5 with a name change applied (all references to Tek
were removed). The -5A patches have never been officially released and
thus have never made it into the official distribution code. The mods you
have are the most current.

> The message I read, says to change XEDRV to ETHER in the config file.
> Is this a name change to the entry or does it actually change the
> configuration in some way?

It changes the configuration. XEDRV is an actual chunk of separate code
that is used. Specifying ETHER tells the kernel to use internal routines
rather than the external module. The internal code has been reworked and
is judged to be better than the separate module.

    John F. Sandhoff, University Network Support
      California State University, Sacramento - USA
        sandhoff@csus.edu
Newsgroups: vmsnet.networks.tcp-ip.cmu-tek
Subject: Re: CMUIP066 INSTALLATION GUIDE ?
From: Scott Burns <burns@eisner.decus.org>
Date: 04 Jan 1993 08:15:37 -0500 (EST)
Reply-To: CMU-OpenVMS-IP@drycas.club.cc.cmu.edu
Organization: Digital Equipment Computer Users Society
Return-Path: <@andrew.cmu.edu:CMU-OpenVMS-IP-Request@drycas.club.cc.cmu.edu@mccall.com>
Errors-To: CMU-OpenVMS-IP-Request@drycas.club.cc.cmu.edu
X-Vms-To: IN%"CMU-OpenVMS-IP@drycas.club.cc.cmu.edu"
Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
Content-Transfer-Encoding: 7BIT
Mime-Version: 1.0

It is part of the documentation saveset (.D). Extract the .PS file and
print it, I think it is chapter 2 or 3.

scott...
Newsgroups: vmsnet.networks.tcp-ip.cmu-tek
Subject: Re: <no subject, but having to do with LPR to FORM=LASER>
From: "Jonathan E. Hardis" <hardis@garnet.nist.gov>
Date: Sun, 10 Jan 1993 21:55:34 EST
Reply-To: CMU-OpenVMS-IP@drycas.club.cc.cmu.edu
Organization: The Internet
Return-Path: <@andrew.cmu.edu:CMU-OpenVMS-IP-Request@drycas.club.cc.cmu.edu@mccall.com>
CC: KING@physvax.phys.utas.edu.au, hardis@garnet.nist.gov
Errors-To: CMU-OpenVMS-IP-Request@drycas.club.cc.cmu.edu

> I have been trying to get the LPR software to go in one of our
> clusters so that we can print files on our vax laser printer queue from
> IBM PC's that run the NCSA telnet et al package. The problem is that jobs
> appear to be submitted to the queue by LPR with the wrong form, and hence
> don't get printed.

The "Class" parameter of the lpr protocol is used as the form parameter in
the VAX PRINT command.  Some PC implementations, such as PC/TCP, send a
class parameter (-Cxxxxx) by default.  In such cases, you have to
explicitly enter a class on the lpr command line that matches the VAX queue
form name.  I don't know about the NSCA program, but one way around your
problem would be to specify -C LASER on the command line, if allowed.
Better, can you not define /DEFAULT=(FORM=LASER) for the LASER queue?

> I have only one entry in my printcap file
>
> !Local queue LASER
> laser "mpvax1.phys.utas.edu.au" "mpvax1.phys.utas.edu.au" mpvax1:: laser define-logicals

Unless I'm confused, you don't need this, _at all_.  This is to define
queues for printers on _other_ hosts, not local hosts.  This, in fact, may
be what's screwing up the queue definition of LASER.
Newsgroups: vmsnet.networks.tcp-ip.cmu-tek
Subject: Re: <no subject, but having to do with LPR to FORM=LASER>
From: Lord Wodehouse <w0400@ggr.co.uk>
Date: 11 Jan 93 15:01:00 GMT
Reply-To: CMU-OpenVMS-IP@drycas.club.cc.cmu.edu
Organization: The Internet
Return-Path: <@andrew.cmu.edu:CMU-OpenVMS-IP-Request@drycas.club.cc.cmu.edu@mccall.com>
CC: KING@physvax.phys.utas.edu.au
Errors-To: CMU-OpenVMS-IP-Request@drycas.club.cc.cmu.edu
Via: uk.co.ggr; Mon, 11 Jan 1993 15:05:48 +0000

There is another version of CMUwhatever/IP LPR. This sloves the problem
with the extra parameters passed to the postscript printer.

I think I giot it from John Clement at Rice, but don't hold me to it.
All I can say is that it is much better than the version with 6.6-5 and -5A.
However it is not yet on general release.


Lord John - The Programming Peer        mail - w0400@ggr.co.uk
                                        tlx  - 8951942 GLXPRI G
Have network - will mail!               fax  - +44 81 423 4070
Newsgroups: vmsnet.networks.tcp-ip.cmu-tek
Subject: Re:  Server example in C???
From: brian.t.carcich@cuspif.tn.cornell.edu
Date: 8 Jan 1993 17:09:36 EST
Reply-To: CMU-OpenVMS-IP@drycas.club.cc.cmu.edu
Organization: The Internet
Return-Path: <@andrew.cmu.edu:CMU-OpenVMS-IP-Request@drycas.club.cc.cmu.edu@mccall.com>
Errors-To: CMU-OpenVMS-IP-Request@drycas.club.cc.cmu.edu
X-Vms-Original-To: 


My socket package has a simple test where the server (called slave) and client
(called master) xfer a few bytes back and forth.  you can find it on
moe.tn.cornell.edu in pub/inet*.
-brian carcich
From: wewila@vulcan.resmel.bhp.com.au
Newsgroups: vmsnet.networks.tcp-ip.ucx
Subject: Re: Multithreading and subprocesses in UCX
Date: 12 Jan 93 12:29:14 +1000
Organization: BHP Information Technology

In article <7121@m1.cs.man.ac.uk>, mzagsaa@v4.cgu.mcc.ac.uk (Tony Arnold) writes:
> 
> In article <1993Jan5.081451.30@iwsd01.itwol.bhp.com.au>,
> wewila@iwsd01.itwol.bhp.com.au (Alan Wilkie) writes:
> |>
> |>There are a couple of options then for handling a connection.  If you
> |>have
> |>a standalone process listening for the incoming connection, you just
> |>accept
> |>the connection and spawn/create another process passing the device UCX
> |>gives
> |>you as the input/output channel for the process.  I think this is how
> |>the
> |>REXEC/TELNET/etc type servers do it.
> 
> Can this be done using the BSD style interface to TCP/IP? I can
> appreciate it being possible with the $QIO interface, but I've not
> figured it out for the other. Any further information on this would be
> most appreciated.
> 
> Tony Arnold.

Hmmmm....  Unfortunately, I haven't used the socket library much, so I can't
really offer a decent answer.  It should be possible to spin off subprocesses
from servers using the socket library.  As far as I can tell, the socket number
provided by the library when you create a socket is just a normal VMS channel
number, and since open channels can be inherited by subprocesses, it should
work.

I presume that UNIX systems do this sort of thing using fork/exec which can
also (sort of) be done in VMS, but I've never actually seen the source code
for a UNIX style server process, so I don't know for sure.

Wish I knew more,
-- 
-------------------------------------------------------------------/\/\---
Alan Wilkie, Analyst/Programmer, Process & Engineering Section    / / /\
                BHP Information Technology, Wollongong Australia / / /  \
Mail      :     P.O. Box 261, Warrawong 2502                    / / / /\ \
Telephone :     +61 42 755667 Fax: +61 42 755215                \ \/ / / /
Internet  :     wewila@vulcan.resmel.bhp.com.au                  \  / / /
------------------------------------------------------------------\/\/\/--
From: anderson@Williams.EDU ()
Newsgroups: vmsnet.networks.tcp-ip.ucx
Subject: Need help on limiting Telnet and FTP access
Date: 7 Jan 1993 14:39:07 GMT
Organization: Williams College
Distribution: world
Reply-To: anderson@Williams.EDU ()
NNTP-Posting-Host: spinnaker.cc.williams.edu


  I need some help/advice on limiting Telnet and FTP access to my machines
under 2.0.  Basically what I want to do is allow only those users coming in from
a "trusted" host (for the most part, our domain, only) access to the machines.
I think I have the Telent taken care of by putting some code into sylogin
and grabbing tt_accpornam.  I then do a search against a file of valid inet
addresses and if there isn't a match, the user is logged out.
  My problem is getting FTP to do the same thing.  tt_accpornam is never filled
by the ftpd process and I have come up with no other way to solve this problem.
Has anyone out there in netland done any "filtering" like this?  Any input
would be greatly appreciated.

Jim

--
********************************************************************************
Jim Anderson						Williams College
Systems Manager						Center for Computing
janderson@williams.edu (Internet)			Jesup Hall
janderson@williams.bitnet				Williamstown, MA 01267
							413-597-2082
********************************************************************************
Newsgroups: vmsnet.networks.tcp-ip.ucx,comp.os.vms
From: a866700@hp9000.csc.cuhk.hk (Wong Siu To)
Subject: "Nothing" in the burst page of remote print request (UCX 2.0)
Organization: The Chinese University of Hong Kong
Date: Thu, 7 Jan 1993 10:44:33 GMT

Hi there,

I apologize if this's a FAQ :-)

Have installed UCX 2.0 on VMS 5.5-1.  I configured the LPD and it works
fine, except there's no information about the job, e.g. job id, user id,
hostname, etc.  The burst page contains the daemon name UCX_LPD and the
print job id (local) only.  I wonder if LPD can be configured to print
the job information mentioned before on the burst page.

Any help will be appreciated.

Regards,

-- 
----------------------------------------------------------------------
S.T. Wong             	            [] BITNET: A866700@CUCSC.BITNET      
Computer Services Centre            [] Internet: st-wong@cuhk.hk 
The Chinese University of Hong Kong [] Tel. No: (852) 609 8825
From: terry@spcvxb.spc.edu (Terry Kennedy, Operations Mgr.)
Newsgroups: vmsnet.networks.tcp-ip.ucx
Subject: Re: Need help on limiting Telnet and FTP access
Date: 7 Jan 93 17:17:16 GMT
Organization: St. Peter's College, US

In article <1ihfabINNibt@savoy.cc.williams.edu>, anderson@Williams.EDU writes:
>   My problem is getting FTP to do the same thing.  tt_accpornam is never filled
> by the ftpd process and I have come up with no other way to solve this problem.
> Has anyone out there in netland done any "filtering" like this?  Any input
> would be greatly appreciated.

  If you're using V2.0, the security screening stuff should do what you need.
Here's an example of a SHOW SERVICE for a service with screening set up to
only allow local access:

| Security
|  Reject msg:  Service not allowed from off-campus hosts.
|  Accept host: 0.0.0.0
|  Accept netw: 192.107.46.0:255.255.255.0

  Note that the documentation and help are both wrong on the format of the
screening parameters. Here's the correct syntax:

| UCX> SET SERVICE service/accept=(net:(a.b.c.d:e.f.g.h))

  where a.b.c.d is the net number and e.f.g.h is the net mask.

  Lastly, you should only define the reject message for services where a
message makes sense - FTP should be Ok, but (for example) NFS wouldn't. In
the NFS case, the mount will fail due to the security screening anyway, so
the user should get the idea.

	Terry Kennedy		Operations Manager, Academic Computing
	terry@spcvxa.bitnet	St. Peter's College, Jersey City, NJ USA
	terry@spcvxa.spc.edu	+1 201 915 9381
Newsgroups: vmsnet.networks.tcp-ip.ucx
From: FILIPSEN_BMF@tde.dk (Bent Filipsen)
Subject: LPD-errors?
Organization: Tele Danmark EDB
Date: Mon, 4 Jan 1993 21:16:39 GMT
X-News-Reader: VMS NEWS 1.24



	Hi,

	Can anyone give me a summary list of knows errors/problems with
	UCX LPD ?
	 
	Sincerely
         
	Bent Filipsen
	Tele Danmark EDB
From: wewila@iwsd01.itwol.bhp.com.au (Alan Wilkie)
Newsgroups: vmsnet.networks.tcp-ip.ucx
Subject: Multithreading and subprocesses in UCX
Date: 5 Jan 93 08:14:51 +1000
Organization: BHP Information Technology

In article <1992Dec24.100456.1@hfrd.dsto.gov.au>, daniel@hfrd.dsto.gov.au writes:
> Using UCX2.0 under VMS5.5-2.
> 
> When writing TCP/IP servers, is there an elegant method of having VMS sub/det
> processes handle multiple server connections, a'la U**x fork/exec.
> 
> Is multi-threading the server (QIOs and ASTs) the only method?  In which case
> how are Telnet (etc.) connections, that create network processes under a
> different UIC, handled?
> 
> Questions, questions, and so little documentation.  The usual apolgies (FAQ,
> etc.)  With thanks in advance.  Mark Daniel.

I may be overlooking something in your question here, but it should be fairly
easy to create a sub/det process to handle a connection.  UCX creates a device
socket to listen on the designated port, and when you actually want to accept
a connection, it creates another device socket for each connection (hence
allowing multithreaded servers because you can have a QIO outstanding on
each device with an AST to handle completion).

There are a couple of options then for handling a connection.  If you have
a standalone process listening for the incoming connection, you just accept
the connection and spawn/create another process passing the device UCX gives
you as the input/output channel for the process.  I think this is how the
REXEC/TELNET/etc type servers do it.

Alternatively, you can let UCX handle the connection initiation for you.
If you create a service (UCX command "CREATE SERVCE xxxxx") you can specify
a (.COM) file to execute to accept the connection.  When the service is
enabled, UCX starts listening to the specified port and starts a new process
for each incoming connection.  The process executes the .COM file to run the
appropriate server software.  There is also a logical called SYS$NET defined
which is set to the name of the device UCX has created for the connection,
so you then access/read/write/deaccess that device.  This is all fairly
similar to transparent DECnet.

Hope this has helped,
-- 
-------------------------------------------------------------------/\/\---
Alan Wilkie, Analyst/Programmer, Process & Engineering Section    / / /\
                BHP Information Technology, Wollongong Australia / / /  \
Mail      :     P.O. Box 261, Warrawong 2502                    / / / /\ \
Telephone :     +61 42 755667 Fax: +61 42 755215                \ \/ / / /
Internet  :     wewila@iwsd01.itwol.bhp.com.au                   \  / / /
------------------------------------------------------------------\/\/\/--
From: mzagsaa@v4.cgu.mcc.ac.uk (Tony Arnold)
Newsgroups: vmsnet.networks.tcp-ip.ucx
Subject: Re: Multithreading and subprocesses in UCX
Date: 6 Jan 93 10:29:46 GMT
Reply-To: A.C.Arnold@mcc.ac.uk
Organization: Manchester Computing Centre


In article <1993Jan5.081451.30@iwsd01.itwol.bhp.com.au>,
wewila@iwsd01.itwol.bhp.com.au (Alan Wilkie) writes:
|>
|>There are a couple of options then for handling a connection.  If you
|>have
|>a standalone process listening for the incoming connection, you just
|>accept
|>the connection and spawn/create another process passing the device UCX
|>gives
|>you as the input/output channel for the process.  I think this is how
|>the
|>REXEC/TELNET/etc type servers do it.

Can this be done using the BSD style interface to TCP/IP? I can
appreciate it being possible with the $QIO interface, but I've not
figured it out for the other. Any further information on this would be
most appreciated.

Tony Arnold.
Newsgroups: vmsnet.networks.tcp-ip.ucx
From: houseman@Turing.ORG (Carl Houseman)
Subject: Re: Need help on limiting Telnet and FTP access
Organization: The Turing Project, Public Access Internet Host
Date: Thu, 7 Jan 1993 17:20:11 GMT

In article <1ihfabINNibt@savoy.cc.williams.edu> anderson@Williams.EDU () writes:
>  I need some help/advice on limiting Telnet and FTP access to my machines
>under 2.0. Basically what I want to do is allow only those users coming in from
>a "trusted" host (for the most part, our domain, only) access to the machines.
>I think I have the Telent taken care of by putting some code into sylogin
>and grabbing tt_accpornam.  I then do a search against a file of valid inet
>addresses and if there isn't a match, the user is logged out.
>  My problem is getting FTP to do the same thing.  tt_accpornam is never filled
>by the ftpd process and I have come up with no other way to solve this problem.
>Has anyone out there in netland done any "filtering" like this?  Any input
>would be greatly appreciated.

Try this:
UCX> HELP SET SERVICE /ACCEPT
UCX> HELP SET SERVICE /REJECT

>*******************************************************************************
>Jim Anderson						Williams College
>Systems Manager					Center for Computing
>janderson@williams.edu (Internet)			Jesup Hall
>janderson@williams.bitnet				Williamstown, MA 01267
>							413-597-2082
>*******************************************************************************

Carl Houseman
GENICOM Engineering
houseman@turing.org (good through 1/8/93)
From: anderson@Williams.EDU ()
Newsgroups: vmsnet.networks.tcp-ip.ucx
Subject: Re: Need help on limiting Telnet and FTP access
Date: 7 Jan 1993 18:15:30 GMT
Organization: Williams College
Distribution: world
Reply-To: anderson@Williams.EDU ()
NNTP-Posting-Host: spinnaker.cc.williams.edu


In article <1993Jan7.121716.4845@spcvxb.spc.edu>, terry@spcvxb.spc.edu (Terry Kennedy, Operations Mgr.) writes:
|>In article <1ihfabINNibt@savoy.cc.williams.edu>, anderson@Williams.EDU writes:
|>>   My problem is getting FTP to do the same thing.  tt_accpornam is never filled
|>> by the ftpd process and I have come up with no other way to solve this problem.
|>> Has anyone out there in netland done any "filtering" like this?  Any input
|>> would be greatly appreciated.
|>
|>  If you're using V2.0, the security screening stuff should do what you need.
|>Here's an example of a SHOW SERVICE for a service with screening set up to
|>only allow local access:

	(How to setup the security stuff)

|>	Terry Kennedy		Operations Manager, Academic Computing

  We are running 2.0 and I should have mentioned that we had discovered this.
Setting up a network mask would work for some situations, but instead of going
at it from the host perspective, we'd also like to limit by user id also. 
(i.e.  Allowing faculty access from a unix host but not allowing student
access.)  Any ideas?

Jim

--
********************************************************************************
Jim Anderson						Williams College
Systems Manager						Center for Computing
janderson@williams.edu (Internet)			Jesup Hall
janderson@williams.bitnet				Williamstown, MA 01267
							413-597-2082
********************************************************************************
From: bill@bill.ab.umd.edu (Bill Bame)
Newsgroups: vmsnet.networks.tcp-ip.ucx
Subject: Re: Multithreading and subprocesses in UCX
Date: 5 Jan 93 21:22:58 GMT
Reply-To: bill@office.ab.umd.edu
Organization: M.I.E.M.S.S.

>I may be overlooking something in your question here, but it should be fairly
>easy to create a sub/det process to handle a connection.  UCX creates a device
>socket to listen on the designated port, and when you actually want to accept
>a connection, it creates another device socket for each connection (hence
>allowing multithreaded servers because you can have a QIO outstanding on
>each device with an AST to handle completion).

This works nicely.  Anybody tried it with DECThreads yet?

>There are a couple of options then for handling a connection.  If you have
>a standalone process listening for the incoming connection, you just accept
>the connection and spawn/create another process passing the device UCX gives
>you as the input/output channel for the process.  I think this is how the
>REXEC/TELNET/etc type servers do it.

I don't know about UCX 2.0 - after reading tons of bug reports I decided
not to install it yet - but in UCX 1.3* you can't pass control of a BG
(i.e. socket) device to a subprocess.  If this is possible in UCX 2.0
it may give me extra incentive to install it - has anyone actually
tried it?

>Alternatively, you can let UCX handle the connection initiation for you.
>If you create a service (UCX command "CREATE SERVCE xxxxx") you can specify
>a (.COM) file to execute to accept the connection.  When the service is
>enabled, UCX starts listening to the specified port and starts a new process
>for each incoming connection.  The process executes the .COM file to run the
>appropriate server software.  There is also a logical called SYS$NET defined
>which is set to the name of the device UCX has created for the connection,
>so you then access/read/write/deaccess that device.  This is all fairly
>similar to transparent DECnet.

I tried this on a friend's machine (I set up a "SERVICE" for netrek :-))
and it worked fine.  I got very used to inetd on u*x - it's nice to
_finally_ have the same sort of ability on VMS!

--
--------------------------------------------------------------------------------
William P. Bame                    | sneakernet: William P. Bame
internet: bill@bill.ab.umd.edu     |             M.I.E.M.S.S.
          bbame@achi1.ab.umd.edu   |             22 South Greene Street
AT&T    : [Work] (410) 328-3062    |             Baltimore, MD 21201
CIS     : 71620,425                |             Room: T1R55
--------------------------------------------------------------------------------

Xref: sparky vmsnet.networks.tcp-ip.ucx:254 comp.os.vms:20504
From: ccdarg@dct.ac.uk (Alan Greig)
Newsgroups: vmsnet.networks.tcp-ip.ucx,comp.os.vms
Subject: Re: "Nothing" in the burst page of remote print request (UCX 2.0)
Date: 7 Jan 93 14:43:14 GMT
Organization: Dundee Institute of Technology

In article <1993Jan7.104433.14763@hp9000.csc.cuhk.hk>, a866700@hp9000.csc.cuhk.hk (Wong Siu To) writes:
> Hi there,
> 
> I apologize if this's a FAQ :-)
> 
> Have installed UCX 2.0 on VMS 5.5-1.  I configured the LPD and it works
> fine, except there's no information about the job, e.g. job id, user id,
> hostname, etc.  The burst page contains the daemon name UCX_LPD and the
> print job id (local) only.  I wonder if LPD can be configured to print
> the job information mentioned before on the burst page.
> 
> Any help will be appreciated.

Hmm, on the VMS flag page I get (this is a real example)
                       ------------------

Note: Job sumbitted by root from host brahma.dit.ac.uk

(Then banner print saying)

			UCX_LPD
		  _USR_USERS_CCDGC_
		       .LOGIN;1

(ie the file name)
                       -------------------

If you need more then the UNIX side should be confugured to print its
own banner page.
-- 
Alan Greig                            Janet: Alan@UK.AC.DUNDEE-TECH
Dundee Institute of Technology	   Internet: Alan@DCT.AC.UK
Tel: (0382) 308810                 Int: +44 382 308810
              -- There is only one true conspiracy --
Xref: sparky vmsnet.networks.tcp-ip.multinet:2621 vmsnet.mail.pmdf:2828