topic Re: DECNET Phase IV in Operating System - OpenVMS

DECNET Phase IV

Peter Quodling — Mon, 13 Jun 2005 02:26:27 GMT

Just did a VMS 7.3-2 upgrade (from 7.3-1) and all went well, except... DECNET Plus was selected rather than Phase IV (something about HP strongly recommends going to DECnetplus).

It would appear that most everything is working, but the network objects for osu keep barfing...

We have now found that a couple of things have broken, most importantly our OSU web server. I have been reading the Decnetplus documentation all day, and am gouing cross-eyed - can anyone give a quick (how-to) on DECnet plus migration from Phase IV.

Failing that, we will have to revert, which will be either a) restore from backups, or b) remove decnet plus using PCSI and install DECNET Phase IV - I see indications that the kits are unbundled on this, and this should be doable from the V7.3-2 distribution media.

Re: DECNET Phase IV

Joseph Huber_1 — Mon, 13 Jun 2005 02:47:01 GMT

My suspicion is that name resolution is not working, and depending on that, DECNET proxies are not working.
Use MCR DECNET_REGISTER to populate the node-names and aliases for all nodes involved.

Re: DECNET Phase IV

Karl Rohwedder — Mon, 13 Jun 2005 02:58:55 GMT

If my memory serves me right, when 1st running
NET$CONFIGURE after installing PhaseV, there should be a question regarding an old Phase IV
configuration and if the configure should convert this to PhaseV, incl. populating the node database.

regards Kalle

Re: DECNET Phase IV

David B Sneddon — Mon, 13 Jun 2005 03:03:00 GMT

Peter,

Don't know anything about OSU, but if the problem
was introduced going from Phase IV to Phase V, is
it possible that OSU doesn't know about the correct
syntax for Phase V to define the network objects
and is still trying to use NCP to create the objects?
Is there anything in the OSU installation that asks
about DECnet?

Dave

Re: DECNET Phase IV

Karl Rohwedder — Mon, 13 Jun 2005 03:14:30 GMT

PhaseV understands NCP and its syntax for manipulating objects, see SYSY$MANAGER:NET$NCP_APPLICATIONS.COM.

regards Kalle

Re: DECNET Phase IV

Joseph Huber_1 — Mon, 13 Jun 2005 03:21:30 GMT

Ah davids question reminds me:
OSU is not defining an object, but calling the DECnet TASK object using a proxie to itself.
So the TASK object has to be defined, and I think net$configure doesn't do it automatically.
In sys$manager:net$application_startup.ncl look if TASK is defined, if not, add it to net$application_local.ncl. It should look like this:
CREATE NODE 0 SESSION CONTROL APPLICATION TASK
SET NODE 0 SESSION CONTROL APPLICATION TASK ADDRESSES = {NAME=TASK} -
,CLIENT = -
,INCOMING ALIAS = TRUE -
,INCOMING PROXY = TRUE -
,OUTGOING ALIAS = FALSE -
,OUTGOING PROXY = TRUE -
,NODE SYNONYM = TRUE -
,INCOMING OSI TSEL =

Re: DECNET Phase IV

Peter Quodling — Mon, 13 Jun 2005 03:28:23 GMT

osu under phase IV creates a number of decnet objects.

most importantly www_init

mc ncp def obj www_init number 0 file sys$manager:http_startup.com user httpd password 'p1 proxy both

and then a set obj etc...

and a mc ncp set known proxies all for good measure...

In Decnet plus I am issuing a
mc ncl
create node 0 sesion control application wwwinit
set node session control application wwwinit addresses = (name=wwwinit) -
,client= -
,incoming alias=true -
,incoming proxy=true -
,outgoing alias=false -
,outgoing proxy=true -
,imagename=sys$manager:http_startup.com -
,incoming osi tsel

The log file for the failed osu startup says...

$! DECnet-based scripting.
$!
$ define/sys www_init DISK01:[WWW1.SYSTEM]HTTP_STARTUP.COM;2
%DCL-I-SUPERSEDE, previous value of WWW_INIT has been superseded
$ open/write/read net 0"WWW_DEV pr0t3ct"::"0=WWW_INIT"
%DCL-E-OPENIN, error opening 0"WWW_DEV password"::"0=WWW_INIT" as input
-RMS-E-ACC, ACP file access failed
-SYSTEM-F-LINKABORT, network partner aborted logical link

q

Re: DECNET Phase IV

Peter Quodling — Mon, 13 Jun 2005 03:32:38 GMT

re Karl, there is no sys$manager:net$ncp_applications.com (or any where on the system disk, for that matter....)

q

Re: DECNET Phase IV

Peter Quodling — Mon, 13 Jun 2005 03:36:56 GMT

Joseph

there is a task definition in blah.ncl but it's.
SET NCL DEFAULT ENTITY NODE 0
!%
CREATE SESSION CONTROL APPLICATION TASK
SET SESSION CONTROL APPLICATION TASK ADDRESSES = {NAME = TASK} -
,NODE SYNONYM = TRUE -
,USER NAME = "ILLEGAL"

I'll try changing it.

Re: DECNET Phase IV

Karl Rohwedder — Mon, 13 Jun 2005 03:38:45 GMT

Peter,

if you use NCP to SET an object, the mentioned file is created.

regards Kalle

Re: DECNET Phase IV

Karl Rohwedder — Mon, 13 Jun 2005 03:40:55 GMT

Peter,

the last error messgae states WWW_INIT as
task object, but you define WWWINIT, may be
just a typo?

regards Kalle

Re: DECNET Phase IV

Joseph Huber_1 — Mon, 13 Jun 2005 03:52:07 GMT

No Peter, keep the ,USER NAME = "ILLEGAL",
it's a security measure, i.e. it allows only PROXY access to the object, and OSU HTTPD makes a proxy access.
Look at the opcom messages when OSU starts, it should show the access (and why it fails).

Re: DECNET Phase IV

Volker Halle — Mon, 13 Jun 2005 04:02:40 GMT

Peter,

NCP DEFINE commands on DECnet-Plus will be converted to appropriate NCL commands and written (appended) to sys$manager:net$ncp_applications.com - you would need to invoke that procedure during SYSTARTUP_VMS.COM to actually have those objects (DECnet-Plus calls them: session control applications) defined during startup.

See docu about NCP emulator:

http://h71000.www7.hp.com/doc/72final/6499/6499pro_002.html#ncp_emul_tcl

Volker.

Re: DECNET Phase IV

Peter Quodling — Mon, 13 Jun 2005 04:07:32 GMT

re karl (yup, I typed the posting by hand - it is as it should be, not as I wrote.

re .last -

Reset the task definition in NCL, restarted the web server, failed same-same nothing coming up in opcom... (yes, I did type reply/enable. )

Re: DECNET Phase IV

Joseph Huber_1 — Mon, 13 Jun 2005 04:40:04 GMT

... nothing coming up in opcom...
That's very strange.
To find out the general problem, test it independently from OSU:
create some test.com in Your home directory
doing nothing. Then
open/read/write net 0"user passwd"::"0=TEST"
This either succeds or gets an error seen in opcom. Is audit enabled (to see messages in opcom) ?
set audit/alarm/class=security/enable

Re: DECNET Phase IV

Peter Quodling — Mon, 13 Jun 2005 05:03:39 GMT

set audit/alarm/ena=logfailure=net

because...
Dev> set audit/audit/class=security_class/alarm/enable
%SET-W-NOEVENTS, no valid auditing events specified; command ignored

open/read/write net 0"quodling passwordxx"::"0=fart"
%DCL-E-OPENIN, error opening 0"quodling password"::"0=fart" as input
-RMS-E-ACC, ACP file access failed
-SYSTEM-F-LINKABORT, network partner aborted logical link

%%%%%%%%%%% OPCOM 13-JUN-2005 19:58:09.78 %%%%%%%%%%%
Message from user AUDIT$SERVER on INFAC2
Security alarm (SECURITY) and security audit (SECURITY) on INFAC2, system id: 43030
Auditable event: Security alarm state set
Event time: 13-JUN-2005 19:58:09.75
PID: 00000584
Username: QUODLING
Alarm flags: LOGFAIL: (NETWORK)

Re: DECNET Phase IV

Karl Rohwedder — Mon, 13 Jun 2005 05:06:32 GMT

I assume, that no NET$SERVER.LOG is created in your home directory?

Re: DECNET Phase IV

Peter Quodling — Mon, 13 Jun 2005 05:14:48 GMT

Correct...

Re: DECNET Phase IV

Volker Halle — Mon, 13 Jun 2005 05:29:25 GMT

Peter,

try: $ set audit/alarm/ena=conn

and then rety your DECnet connection.

Volker.

Re: DECNET Phase IV

Peter Quodling — Mon, 13 Jun 2005 07:55:14 GMT

It occured to me, on the way home, (as it does after a long day in the office), that a couple of things come into play here... And now that I have a glass of wine, and calmed my weary nerves.

1. I don't know why I was talking about www_init it should be wwwexec that I am worrying about.

2. There are multiple instances of the web server each running under different user accounts, and even though everything web related is IP, they need a decnet connection - I noticed that there are proxies in the uaf that align to the names under which this is activated,

3. I also notice that there is a recommendation I came across, either in the startup script for OSU, or somewhere that says to "mc ncp set known proxies all" - I tried this under decnet-plus and got a message about. not being compatible with management interface or such like. Is there a decnet-plus equivalent?

Peter Q