HDTenEightyP/NetNews huggingface dataset:
From: hoffman@xdelta.enet.dec.com (Stephen Hoffman)
Newsgroups: comp.os.vms
Subject: Re: /SECRECY and /INTEGRITY > SEVMS
Date: 10 Nov 92 21:51:31 GMT
Article-I.D.: nntpd.1992Nov10.215131.2582
Reply-To: hoffman@xdelta.enet.dec.com (Stephen Hoffman)
Organization: Digital Equipment Corporation, Nashua, NH


In article <1992Nov10.185815.19030@nntpd2.cxo.dec.com>, winalski@adserv.enet.dec.com (Paul S. Winalski) writes:
|>Newsgroups: comp.os.vms
|>Path: nntpd.lkg.dec.com!nntpd2.cxo.dec.com!adserv.enet.dec.com!winalski
|>From: winalski@adserv.enet.dec.com (Paul S. Winalski)
|>Subject: Re: /SECRECY and /INTEGRITY in MAIL
|>Message-ID: <1992Nov10.185815.19030@nntpd2.cxo.dec.com>
|>Lines: 12
|>Sender: usenet@nntpd2.cxo.dec.com (USENET News System)
|>Reply-To: winalski@adserv.enet.dec.com (Paul S. Winalski)
|>Organization: Digital Equipment Corporation, Nashua NH
|>References:  <01GQZHO60H7K001E1V@orbsen.ucg.ie>
|>Date: Tue, 10 Nov 1992 18:58:15 GMT
|>
|>
|>In article <01GQZHO60H7K001E1V@orbsen.ucg.ie>,
|>ELEHUMBORG@ORBSEN.UCG.IE (It's more fun to compute) asks what the /SECRECY
|>and /INTEGRITY qualifiers to various commands in VMS MAIL do.
|>
|>They are latent hooks for nondiscretionary access control support in VMS.

	Paul is correct.  The /SECRECY and /INTEGRITY qualifiers present
	on various commands, a couple of not-normally-displayed privileges,
	some fields in the file headers, some fields in various VMS data
	structures, and some system service entry points, are all part
	of the support for Security Enhanced VMS (SEVMS).

	SEVMS supplements the security and auditing available in VMS, and
	is presently involved in a National Computer Security Center (NCSC)
	evaluation for "Orange Book" Class B1 security.  (VMS is involved
	in an NCSC evaluation for Class C2 security.)

	For more information on SEVMS, consult the (little known) Digital
	Security Products Catalog, or contact your local Digital Sales
	Office.

================================================================================
Stephen R. Hoffman (Steve)          DEC enet:  xdelta::hoffman
TNSG NSM Security Engineering       Internet:  hoffman@xdelta.enet.dec.com
Digital Equipment Corporation       Telephone: 1-603-881-0629
110 Spit Brook Road  ZKO1-3/H01     Fax:       1-603-881-0120
Nashua NH 03062-2698 USA            Trauma:    NR-EMT-Basic, EOA, Defib
Newsgroups: comp.os.vms
From: mberman@Williams.EDU ()
Subject: Re: Q: UCX proxies (rlogin, NFS) (inbound? dup records?)
Reply-To: Mark.Berman@Williams.EDU
Organization: Williams College
Date: Fri, 6 Nov 1992 17:36:01 GMT


I never posted a resolution to my question so I might as well do so now. 

rlogin from remote hosts to a VMS host running UCX V2.0 currently requires 
one to enter a username and password. I consider this a bug in UCX and, 
apparently DEC does too for CSC assures me that the UCX development team is
working with the VMS team to come up with a fix. They say that VMS authentication
systems, as they stand, will not allow UCX to perform true trusted host rlogin.

I don't quite buy this, since TGV and Wollongong both manage to get this to work.

Regardless, UCX won't do it for another version or two. 

By the way, FTP and SMTP seem to be working O.K. since I applied the most 
recent patches.

 - Mark

--
*******************************************************************************
Mark Berman                                      Mark.Berman@Williams.EDU
Director, Technical Services
Williams College, Ctr. for Computing
Williamstown, MA. USA 01267                      (413) 597-2092
*******************************************************************************
From: system@doc.bmd.trw.com
Newsgroups: comp.os.vms
Subject: Serving a Remote Tape Drive Software needed
Date: 13 Nov 92 11:03:00 MST


Hello all,

At this facility our current configuration is:
VAX 6430
64 mb memory
VMS v. 5.5-1
WIN TCP 5.2

I have a need to run a tape drive (9 track type or something similar) that is
located in a remote facility. We are connected to that facility through DECNET.
We can also connect to them through Internet.

We have Imprint running here, and that makes a couple of the laser printers
look like nodes on the cluster, question: Do you need special software to run
a Tape drive remotely? I need to do everything from here, except hang and 
take-off the tape. With the network, we have capability to print
to printers remotely. We can also talk to all the Pc's and Mac's on the 
network.

I know about Remote Tape Facility from System Management Software, but before
I send for a demo copy I was wondering if there was an alternative solution.

Any help would be appreciated.
Thanks in advance.

Stan Smith			 ssmith@oz.bmd.trw.com
System Manager			 (801) 625-8163
TRW Ogden Engineering Operations Vax Cluster
From: MRL@PFC.MIT.EDU (Mark London)
Newsgroups: comp.os.vms
Subject: Mailbox full error message?
Date: 13 Nov 92 16:21:00 GMT
Organization: The Internet

A user here sent me the following question:

> $ ncp loop node cevna
> %NCP-W-OPEFAI, Operation failure
>
> %SYSTEM-W-MBFULL, mailbox is full
> -----------------
> Which mailbox limit are we exceeding?

Any ideas?  Thanks.

 
Mark London
MRL@NERUS.PFC.MIT.EDU
From: carl@SOL1.GPS.CALTECH.EDU (Carl J Lydick)
Newsgroups: comp.os.vms
Subject: Re: BACKUP Question
Date: 7 Nov 1992 07:21:34 GMT
Organization: HST Wide Field/Planetary Camera
Distribution: world
Reply-To: carl@SOL1.GPS.CALTECH.EDU
NNTP-Posting-Host: sol1.gps.caltech.edu

In article <9211062238.AA11641@hermann.barra.COM>, louis@BARRA.COM (Louis Dunne) writes:
>	Many people re-use old backup tapes, e.g.  every two weeks or so
>	the incremental tapes "come back around" to the set you used two
>	weeks ago. Now this tape has data from two weeks ago on it. Of
>	course your sysop loads it into the drive, and goes home for the evening.
>	Then someone else *ANYONE* (unless you do something to stop them - see
>	below) mounts that tape device and starts reading data off the tape.

Fine.  Fire that sysop.  You should NEVER load media until the drive's been
allocated, if you care about access to the data on that media.  If the nightly
BACKUP's not supposed to run until the wee hours of the morning, have the batch
job allocate the tape then WAIT until it's time to start the BACKUP.

[More nonsense based on the mistaken impression that without physical security
ACLs and device protections can prevent a user from reading your tapes deleted]

If you permit users physical access to your computer, then (with the exception
of some of the newer VAXen which, if I remember correctly, have a console
password), they CAN subvert any sort of software security you've got in place.
For that matter, if they can get to the tapes, what's to stop them from
carrying them to another machine to read them?
--------------------------------------------------------------------------------
Carl J Lydick | INTERnet: CARL@SOL1.GPS.CALTECH.EDU | NSI/HEPnet: SOL1::CARL

Disclaimer:  Hey, I understand VAXen and VMS.  That's what I get paid for.  My
understanding of astronomy is purely at the amateur level (or below).  So
unless what I'm saying is directly related to VAX/VMS, don't hold me or my
organization responsible for it.  If it IS related to VAX/VMS, you can try to
hold me responsible for it, but my organization had nothing to do with it.
From: jmeinke@dcs.simpact.com
Newsgroups: comp.os.vms
Subject: Questions about DEC TCP/IP
Date: 5 Nov 92 09:04:35 PDT
Organization: Simpact Associates, San Diego CA

We have a Berkeley socket-based application which runs on
Unix, and in a slightly modified form, also runs on VMS with
Process Software's socket library.  Now we have a potential
customer who requires that the application also run on VMS
with DEC's TCP/IP.  We don't have this package yet, or the
documentation, and I'd like to do some planning. 

Does the DEC package support _all_ the following socket and
miscellaneous subroutines?  If so, do the services differ from
the Berkeley calls?  Do they differ in non-trivial ways? 

 CONNECT 
 GETHOSTBYADDR, GETHOSTBYNAME 
 SELECT 
 SOCKET 
 SOCKET_CLOSE 
 SOCKET_RECV 
 SOCKET_SEND 

 BCOPY 
 HTONS 
 INET_ADDR 
 
Does the DEC package provide TFTP and a boot server?

Are there any performance issues to be wary of?

Anything I should have asked but didn't?

Thanks ahead of time for any help you can provide.  Please
send mail to the address below; I'll summarize if there is any
interest. 
-- 
Jim Meinke, Simpact Associates        619-565-1865
9210 Sky Park Court                   jmeinke@dcs.simpact.com 
San Diego, CA  92123  

 "I really didn't say everything I said." -- Yogi Berra
From: GLOESENER@MENVAX.RESTENA.LU
Newsgroups: comp.os.vms
Subject: RE: setting disk quota
Date: 11 Nov 92 14:39:41 GMT
Organization: The Internet

>Does anyone know how to modify disk quotas froM  a program? I can't
>see any reference to anything like it in the system services or RTL,
>and we would like to be able to do it so that non privileged users
>could modify their quota within reason

Disk quota access and modification is made through $QIO calls using
ACP. A description of these functions can be found in the 
I/O User's: Part 1 (In our version: Section 1.6.7.4 Disk Quotas page 1-33)

I hope this can help you. If not I am ready to help you.

                                             Gasty Gloesener

-GG-
From: Dave@usppc.abb.com
Newsgroups: comp.os.vms
Subject: Re: VAX C Shared global variables
Date: 6 Nov 92 12:36:34 GMT
Organization: The Internet

Thanks, all.  I've more answers than you can shake a stick at.
Most have been mailed directly to me.  I have acknowledged
many of the responses but not all.  I do appreciate the
enthusiastic and appropriate help the INFO-VAX readers have
provided.

I had noticed but ignored the fine print about specifying shared
libraries in options files.  Must have been using SunOS "ld" too
long.  Silly me!

What puzzled me was that LINK didn't administer the deserved
beating about specifying a shared image on the command line.
Rather it started complaining about a groked input file.
Hear that, DIGITAL!

Regards,
Dave Hamby                     Dave.Hamby@Usppc.Abb.Com
ABB Power Plant Controls
From: FINLEY@NKUVAX.BITNET (Kevin Finley)
Newsgroups: comp.os.vms
Subject: Re: Easy Way to trap for Control-Z In VAX C?
Date: 10 Nov 92 15:07:20 GMT
Distribution: world
Organization: The Internet

>Netters,
>     Is there any good way to trap for a Control-Z keystroke in Vax C?  I have
>looked in manual after manual looking for some hint of what to do. A friend of
>mine has told me it was 26 in the ASCII character set. (or that is how he uses
>it in Pascal) However any attempts to use something like if (input == 26) where
>the input is of type char.
>     Any hints, and better yet samples of C source would be apprecated. Also,
>since we're on the subject, are similar ways to trap Control-Y and T possible?


>                                                 Joshua

>(****************************************************************************)
>(* *****  *   * *  *  |  Name      : Joshua J. Hart              Ack  _,_/| *)
>(* *      *  *  *  *  |  Bitnet    : STUHART@EKU;  hart%eagle@eku   \ \o.O; *)
>(* ****   * *   *  *  |  Internet  : AN984@Cleveland.Freenet.Edu     =(___)=*)
>(* *      ***   *  *  |  School    : Eastern Kentucky University        U   *)
>(* *      *  *  *  *  |  Major     : Forensic Chemistry / Computer Science  *)
>(* *****  *   *  **   |  Disclaimer: Opinions are Mine, No one else wants Em*)
>(****************************************************************************)
>%SYSTEM-W-TMNYFNGRS, too many fingers on keyboard

Yes,  I am sorry I took so long to reply.  I've been very busy.  Here is a
simple program to use.  This program takes input received, and echos it out if
it is printable or echos its ascii code if not.  This program doesn't trap
control-y/c or control-t because the Queued Input Output (QIO) services don't,
sorry.  I ran it and it traps control-z as 26 and escape as it should at 27.

I hope this helps.  Please send any replies to me personally.  I unsubscribed
to info-vax because it requires too much of my time to keep it from blowing my
disk quota.

#include <ctype.h>
#include <limits.h>
#include <iodef.h>
#include <psldef.h>
#include <ssdef.h>
#include <stdio.h>
#include <descrip.h>

#define TMPMBX 0
#define PROT_MASK 0


main()
{
  char this;
  unsigned short chan;
  int stat;

  $DESCRIPTOR ( dev_descriptor, "SYS$OUTPUT:" );

  sys$assign ( &dev_descriptor, &chan, PSL$C_USER, NULL );
loop:
  stat = sys$qiow ( SS$_NORMAL, chan, IO$_READLBLK, NULL, NULL, NULL,
                    &this, 1, NULL, NULL, NULL, NULL );
  if ( isprint ( this ) )
        printf ( "char: %c\n", this );
  else
        printf ( "code: %d\n", (int) this );
  if ( this != 'z' )
    goto loop;
}
From: tc@nynashamn.telesoft.se (Torbjorn Carlsson)
Newsgroups: comp.os.vms
Subject: Re: Bourne-Shell or C-Shell Public Domain SW for VMS??
Date: 5 Nov 92 12:58:08 GMT
Organization: Telesoft Norden AB

mjo@slee01.srl.ford.com (Mike O'Connor) writes:
: 
: Also, if you have the POSIX product, ATP@A.MSSL.UCL.AC.UK (thank
: goodness for cut-and-paste) has ported tcsh to VMS.
: 
: 						...Mike
: 

Could someone please point me to an ftp-site that carries tcsh for VMS ?
Or even better, mail me a copy.

Thanks

-- Torbjorn Carlsson
-- 
-- Torbjorn.Carlsson@nynashamn.telesoft.se
   Telesoft Norden AB, Utsiktsv{gen 10 Nyn{shamn
   Telefon +46-8 52069012 fax: +46-8 52020965
From: ARTG@LAGUNA.EPCC.EDU
Newsgroups: comp.os.vms
Subject: Problem Deleting Users from Different Disks
Date: 10 Nov 92 23:33:56 GMT
Distribution: world
Organization: The Internet


Background:  We have two DEC VAX 4200's clustered together
             running VMS 5.4-2.

I have a problem and I can't seem to find the answer.  We have 
users on several disks and I am writing a procedure to delete
them when their accounts are no longer needed on our system.  
However, I can't seem to find a way to determine if the user
is on DISK2, DISK3, or DISK4.  Is that any way of using one DCL
procedure to determine which disk the user is on?  I'd also like to have
this procedure delete that user from the appropriate disk.
I really don't want to have 3 seperate delete procedures, one for 
each of the disks.

Thanks in advance.

<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
<>  Art Gonzalez               >< Phone #  : (915) 775-6141       <>
<>  Project Manager            >< BITNET   : ARTG@EPCC            <>
<>  432 Frederick              >< INTERNET : ARTG@LAGUNA.EPCC.EDU <>
<>  El Paso, Texas  79905      >< THENET   : EPCC::ARTG           <>
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
<> Disclaimer: What I have said is my opinion and doesn't reflect <>
<>             the opinion of my employer or co-workers           <>
<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
From: leichter@lrw.com (Jerry Leichter)
Newsgroups: comp.os.vms
Subject: RE: /SECRECY and /INTEGRITY in MAIL
Date: 11 Nov 92 03:30:16 GMT
Distribution: world
Organization: The Internet


	Anyone out there know what the /SECRECY and /INTEGRITY qualifiers to
	the commands DIRECTORY, READ, SELECT and SET FOLDER in MAIL do?

	; DEFINE VERB DIRECTORY
	...
	;	QUALIFIER SECRECY, VALUE(REQUIRED,TYPE=$ACL)
	;	QUALIFIER INTEGRITY, VALUE(REQUIRED,TYPE=$ACL)
	...
	[additional definitions omitted]

They don't do anything, unless you have the SE/VMS (Security Enhanced VMS)
package.  SE/VMS supports non-discretionary access controls, which involve
marking a variety of objects with secrecy and integrity levels.  MAIL
messages are among these objects, and presumably these qualifiers allow you
to restrict commands to work only on messages at some secrecy or integrity
level.

There are any number of places in VMS where small hooks for SE/VMS exist.
The most common hook people notice is the UPGRADE and DOWNGRADE services.
In all these cases, the "guts" of the access controls only come with SE/VMS;
what you are seeing are minor surface manifestation that were more convenient
put into every shipped VMS system, rather than patching them in later.

							-- Jerry
From: alanmoore@yang.earlham.edu
Newsgroups: comp.os.vms
Subject: Drawing program for VMS/DecWindows
Date: 11 Nov 92 03:09:16 GMT
Organization: Earlham College, Richmond, Indiana

Does anyone know of a free (or inexpensive) drawing program for VMS/DecWindows? 
(Besides PAINT.)  I would like to draw a campus map and wiring diagrams.

Thanks,
Alan Moore                              alanmoore@yang.earlham.edu
System/Network Manager, Postmaster      (317)983-1437
Earlham College
Richmond, IN
Newsgroups: comp.os.vms
Subject: Problems With Mail Distribution List
From: rwood@idicl1.idi.battelle.org (Rich Wood)
Date: 5 Nov 92 15:39:50 EST
Organization: Corporate Services
Nntp-Posting-User: aschim

I have a mail distribution list containing two user names that is referenced 
by a system-level logical, i.e.:

   mylist == "@list.dis"

I recently removed one user's name from the list (user_b let's say) and
replaced it with another (user_c).  This change has brought about some
very unexpected results:

  - user_c gets somes messages addressed to the distribution list 
    but does not receive others;

  - user_b continues to receive messages addressed to the list;

We've managed to narrow the problem down to a few certain users.  When
these users send mail to the distribution list, user_c does not receive
the messages!  These users have the logical referencing the dist. list
set up the same as everyone else, and they get no errors when they send
mail to the list.  User_c's mail.mai file (and it's parent directories)
have the same file protection as all other user's mail files do.

Has anyone else ever experienced a problem like this?  Any suggestions,
hints, or ideas will be greatly appreciated!

--
Rich Wood                               Information Dimensions, Inc.
RWood@idicl1.idi.battelle.org           5080 Tuttle Crossing Boulevard
					Dublin, Ohio  43017-3569
From: bear@nuc.anu.edu.au (Bernhard Fabricius)
Newsgroups: comp.os.vms
Subject: Re: "Ctrl-PrintScreen" on X-term
Date: 5 Nov 1992 07:02:33 GMT
Organization: Nuclear Physics, ANU
Distribution: world
Reply-To: BEAR@NUC.ANU.EDU.AU
NNTP-Posting-Host: 150.203.19.14


In article <1992Nov3.091937.1@mscf.med.upenn.edu>, ross@mscf.med.upenn.edu writes:
>	We just received a Tektronics XP-11 X-Terminal and are planning to 
>buy six more (one or more with the serial port option).  Running a VMS
>application in a VT100 window, is there any way to send ascii text which
>is scrolling on the screen to a printer attached to the terminal's serial
>port.  Basically what we need is the functionality that we had with our
>real VT200 keyboards when we pressed "Ctrl-Print Screen".  Now that we
>are getting these X-terminals, the staff wants to be sure that they can
>still get the hard copies that they require.  

Buy DEC's superb VXT2000 terminals instead! Not only do they have the feature
you are looking for built in; the latest release of the software also lets you
use the serial and parallel ports via LAT from your host queues, thus saving
the cost of a terminal/printer server. These ports are standard - no "options"
needed here!

If your staff is used to DEC features and functionality they are unlikely to be
pleased with XP-11 terminals.

I'm not on DEC's pay-roll, but I know a good product when I see one...

Cheers

Bernhard
--------------------------------------------------------------------------------
Dr Bernhard Fabricius              |
Academic VAX/VMS Support           |  "I am a Bear of Very Little Brain,
Department of Nuclear Physics      |           and long words Bother me."
Australian National University     |
                                   |                           - A.A. Milne
InterNet: BEAR@NUC.ANU.EDU.AU      |
    POSTMASTER@NUC.ANU.EDU.AU      |

Newsgroups: comp.os.vms
From: collier@CERIS.Purdue.EDU (Dick Collier)
Subject: Re: Hooking VT's up with 4-wire phone line?
Organization: Center for Environmental and Regulatory Information Systems, Purdue University
Date: Wed, 11 Nov 1992 14:45:00 GMT

From article <1992Nov10.123242.5994@slcs.slb.com>, by brydon@asl.slb.com 
(Harvey Brydon (918)250-4312) writes:
> 
> What you call 4 wire telephone cable is more than likely 2 pair.  To hook up
> to RS-232, connect one wire in each pair to pins 2 and 3.  Both of the other
> wires should go to pin 7 and/or 1.  I did this satisfactorily connecting one
> to 1, the other to 7.  You won't be able to make really long cable runs.

In using twisted-pair telephone cable for RS-232 data communications it is
important that the two signal wires (those connected to pins 2 & 3) not be 
the two wires in a single pair.  Doing so leads to cross-talk between the
transmit and receive signals, which decreases reliability, maximum line 
length and maximum transmission speed.  Instead, have each pair carry a
signal line and a ground.

In many hardware systems (combination of host and terminal) it is 
unnecesary to use both pins 1 & 7.  Some manufacturers cross-connect
these pins within their equipment.  For others, shorting pins 1 & 7 in the
DB-25 connectors works well. ( However, beware of ground loops! )  The
advantage of this is that it leaves one conductor available for use as an
RS-232 hardware control signal, usually RTS.  

In using this wiring scheme I have routinely had excellent performance
over distances in the range of 100-150 feet at 9,600 baud.  I'm not sure
what the upper limit of either speed or distance is -- obviously, as one
increases, the other decreases.  (The limits might be obvious to an
electrical engineer, which I am not.)

In only two cases have I have observed interferences.  Both were when the
cable was routed adjacent to equipment which generated large, variable
electro-magnetic fields, a fume-hood motor in one case and an elevator
motor in the other.  In both cases, re-routing the cable solved the
interference problems. 
-- 

********************************************************************
Dick Collier, Director                                  317/494-6613 
Center for Environmental & Regulatory Information Systems (CERIS)
From: sbrant@npal.rn.com
Newsgroups: comp.os.vms
Subject: system tuning help request.
Date: 5 Nov 92 00:37:41 EDT
Organization: PalNet -- Indianapolis, Indiana

-- 

                                                     Steven B. Brant
________________________________________________________________________
       -->> sbrant@npal.rn.com <<--[ or ] -->> nstar!towers!npal!sbrant <<--



Newsgroups: comp.os.vms