Beta version of SAM kernel configuration

[SAM TEAM]

Greetings,

We have been working on a new GUI for SAM and
have started with the Kernel Configuration
area. The product is not done yet but it is
getting close.

Some new features are:
Web based interface
Historical graphs of usage data
The ability to set alarms before
kernel limits are reached
Parameters described in man pages

The new GUI is being designed for HP-UX 11.22
but we have a beta copy for 11i. You can
download a beta version from:

http://software.hp.com/products/KCWEB/index.html

After downloading and installing the depot
you can run the command "kcweb" or start it
from SAM.

kcweb only works on 11i, and you must have
Apache (version 1.3.19.22) installed on the
system.

Try it out and let us know what you think.
There is still time for us to incorporate
your feedback into this first release.
Your input will also influence how other
parts of SAM are redone.

Feedback can be sent to kcweb@fc.hp.com,
or you can reply to this posting.

SAM-TEAM

[harry d brown jr · Accepted solution]

I'll try it tomorrow, if you guy's can steer me to a MUX/Modem Expert (pci_mux0 on an A-class, getty, and cu). I'll email you tomorrow if I get it up and running.

Is it ok on a Virtual Partitioned Mackine, I guess we'll find out tomorrow?

live free or die
harry

[Michael Tully]

We'll have a go with it too....

Just one thing... I hope that it looks nothing like the abomination done to the OmniBack version 4 GUI.....

[support_5]

here here to that!

The new OB4 windows like gui is exactly as has already been said: an abomination! It's really difficult and convoluted, inconsistent, contradictory (one thing says something, but another thing says something different about the same thing. eg protection on tapes, one place says permanent, another says 28 days?????) and it's just not intuitive. It's not often I say that the old GUI is better about a product, but this is one such product. I reall miss the old gui!

I am however, looking forward to the new SAM gui! Thanks for keeping us informed in what you are doing in HP, and the developments you are making. Also thank you for asking for our input! Much appreciated!

Cheers,

- Andy Gray

[John Bolene]

Only works with a web server installed and configured?

Interesting, this will cause a few problems with folks having to learn new things and have Apache running on all servers.

I have to assume that this is for remote administration and a replacement for the X protocol gui currently used.

[Bill McNAMARA_1]

Hi,

Can you make it so that non sam releases can modify
/usr/sam/lib/kc/params.tx

because it's kindov ugly to have unknown parameters all over the place (and I'm sure you guys won't want to push patches for minor tipos)

Later,
Bill

[SAM TEAM]

Thanks for all your interest.

We hope this works with virtual partitions. This beta has a known bug where we know that it does not work with trusted systems.

This beta only covers kernel parameters. No other parts of SAM have been rewritten.

I have never seen the Omniback GUI so you can be sure we were not inspired by it. I'll look at it to insure we did not accidently repeat the same mistakes.

It is true that you have to install the Apache web server. Hopefully you don't have to do any configuration. We ship our own Apache configuration file so you don't have to configure anything. This also allows you to configure the default Apache configuration file any way you want without breaking our GUI.

We no longer use the params.tx file. You should never have a parameter without a one line description. Some parameters are missing a man page at this time.

Sam I Am

[Patrick Wallek]

Not bad.... Not bad at all.

So far I am fairly impressed. The installation was straightforward and I didn't have any problems. When you invoke kcweb, it came right up with the browser interface. I like that it forces you to log in as root. The fact that this is going over a secure connection is great as well.

It definitely has some very nice features.

[HP-UX SYSTEM MANAGER]

We just got in a system with KCWeb installed by default (it's an Itanium system with HPUX 11.22). However, KCWeb doesn't work. It seems to fail to load it's own configuration file. All the cgi scripts are in place, but it always fails to run.

Is there a depot to re-install this? I can only find the beta for 11i. We need to be able to tune kernel parameters, and having to use the command line is not why we use SAM!

[Steven E. Protter]

My systems are all trusted, Sam I am...

Please make a another post notfiying when that bug is fixed, and I'll test it out for you.

SEP

[Radhakrishnan Venkatara]

hi ,

it is very good easy installation and very useful.Alarms,modules everything seems to be good.

Looking for release version.



radhakrishnan

[Yogeeraj_1]

hello,

Looks very interesting indeed.

have downloaded the deopt and was trying to install and got the following messages..

When copying to my depot (/depot):

The software item "Casey,r=B.00.03,a=HP-UX_B.11.11_32/64,v=HP" is a
bundle (or a product, subproduct or fileset contained within a
bundle). This item was successfully marked, but difficulties were
encountered while marking some items that it depends on. The messages
below show which software items encountered difficulties and exactly
what these difficulties were:
The software "KernelConfig,r=B.00.03,a=HP-UX_B.11.11_32/64,v=HP" was
successfully marked, but it depends on the following software items
which could not be found in the source. However, these items may
already be in the target. This will be checked during the Analysis
Phase: EMS-Core.EMS-CORE,r>=A.03.20 EMS-Core.EMS-CORE,r>=A.03.20


and when trying to install:

..
NOTE: The fileset "EMS-Core.EMS-CORE,r=A.03.20.01" is already
installed. If you wish to reinstall this fileset, change the
"reinstall" option to "true".
* Reading source for file information.
* Executing preDSA command.

...
NOTE: Could not install the bundle "B7609BA,r=A.03.20.01" because
none of its filesets could be installed.
...


is it safe to continue?

i don't want to mess up with my existing installations.

please advise.

Best regards
Yogeeraj

[Pete Randall]

I must admit I went into this with a rather negative attitude. I don't want to have to run apache on all my servers. I don't want a web based SAM at all.

But - trying to be open minded, I download, installed and received the following error on invocation:

Creating server certificates...
/usr/lbin/wacertificate[272]: openssl: not found.
Error: attempt to generate certificate failed.
'openssl genrsa -des3 -out /var/webadmin/certificates/serverkey.pem -passout pas
s:willberemoved 1024' returned '127'

I figured it must be because I never installed apache so I downloaded that, installed, and now I get:

Attempting to start server...
ERROR: attempt to start '/opt/apache/bin/httpd' failed.


I have no idea how to trouble shoot this and am completely unimpressed and disgusted. Thanks, but no thanks.


Pete

[Ravi_8]

Hi,

Installation went cool,
since we don't want apache to run on nay machine. I opened an explorer and given the address as
https://corphp1:1188/cgi-bin/kcweb/top.cgi

(corphp1 is my host name)

Interface looks good:

You have given the option only to increase the value, It's even better if you could have the option to decrease the value(keeping default value as minimum)

when we clicked on "Modify parameter" it opens another window by closing existing window.
My recommendation is to open the same window in the existing screen itself.

Thank you

[Pete Randall]

Ok, I finally got everything installed and functioning and it looks OK. It takes forever to load, the kernel build is slow (I thought it had locked up for a while there), my system hung on the shutdown (had to give up and do the simulated power failure - with my fingers crossed).

My bottom line is it's OK and I'll get used to it but WHY?


Pete

[Bob_Vance]

IMO, this is a big step backward -- and just flat sucks.

It's waaaay too sloooooow (like *all* of the "new" GUI interfaces under HP-UX).

Imagine my shock when I tried to do a lean-and-mean, curses-based kernel config to add a driver and the kernel option wasn't there!!! What normally takes about 30 seconds to do (not counting the compile) took me many, many minutes.

Please put the curses-based terminal interface back in (I don't really care whether the Motif interface is there or not).

bv

[Donny Jekels]

Just downloaded the depot, will install it tomorrow and give you feedback.

interresting enhancemnets. look forward playing with it. :-)

[Tim Adamson_1]

Downloaded and installed without a hitch.

Changed a kernel parameter (dbc_max_pct). Didn't like the way the screen updated but it did work. I think it will be something to get used to.

Oops, reboot is required and I haven't told users. This is a vpar too. I delayed the reboot. :)~


Tim

[Bill Hassell]

While everything seems to be going to a GUI or web-ified interface, SAM just doesn't make much sense. After all, SAM's primary purpose is to make rather significant low-level changes to the opsystem and requiring a huge number of software products to all play together (Apache, Perl, JavaJunk, networking, keyoard maps, etc) just doesn't lend itself to easy system administration. Indeed, in today's lights-out admin scenarios, the ability to access the machine with absolutely minimal functionality (ie, a serial console) is becoming very important. Adding a web server to dozens to hundreds of servers is not a good option and in many production environments, unless the code is HP's (not open source, even when shipped from an HP site), stability rules will forbid the addition of a server (and the security folks don't like web servers either).

As many data centers are finding, the only truly secure and reliable interface is a serial interface perhaps connected to a terminal server (such as HP's Central Web Console software or hardware servers from BlackBox or Cisco servers) using an isolated subnet with secure access and a backup lowspeed (modem) cpnnection if all else fails. Believe me, waiting for a SAM gui or even a Java page load over a 22Kb connection from a hotel is pure misery. The curses-style interface is fast (because only text flows back and forth) and easy to navigate when using something smarter than vt100.

I would much rather have effort devoted to stabilizing kernel builds than spend time on a web interface. The number of admins that make some kernel changes or patches, then build a kernel only to find that something is wrong with libraries or some other build error...and the poor admin is stuck with a dead system or at least one that not usable in production.

[Bill McNAMARA_1]

For a Beta, I have to go against the flow and say I like it!! I work extensively with 30 or so DLKMs and find that addition very useful.
The first remote central management web based SAM I saw via SCM was also something I liked way back in 2001. I think this is a good step forward. I not certain about localization from a support point of view - I often wake up in a cold sweat after dreaming of debugging Xterminals with 16 bit fonts... anyways, as I've always said, for the new UX admin, this tool is the first window into the world of HP-UX.. for the die hard consultants change isn't always welcome... especially if it works as expected!

Good work and thanks for involving us.
I've got more interested parties taking a look and will feedback their input.

Some things they ask straight away is how easy is it to plug in their own modules - they seem to be opting for webmin for the moment..

[H.Merijn Brand (procura]

After reading all the above comments, I'll wait for an ASCII GUI or an X11 GUI to test it on my 11i. The D370 with only 256Meg might not be very happy with such load increase :/

Enjoy, have FUN! H.Merijn

[Bob_Vance]

I agree wholeheartedly with Bill H. who said it a little more eloquently than I.
He also pointed out an issue that I had overlooked -- requiring the GUI means that you can't do it at all on the console anymore, serial or network. You're not thinking of moving the networking setup to GUI only, are you ;>)

Fortunately, the command line method will always work :>)

bv

[Bob_Vance]

In response to Bill M's note (since I fall into the category he mentioned ;>), I will say that it has *nothing* to with with not liking change.

Personally speaking, change for the *better* is always welcomed. In fact, one of my mottoes is:

"If it ain't broke -- let's make it better!"

Maybe *adding* a Web interface is a step forward (BTW, did I mention that all JAVA interfaces on HP-UX are waaaaay toooo sloooow?), but getting rid of the curses interface is a step backward.

bv

[Pete Randall]

SAM-TEAM,

How does one revert to the "old SAM"? Can I just swremove KCWEB?


Pete

[Ross Minkov]

I have Apache version 2.0.47.

Where can I download Apache 1.3.19.22 and is it safe to install it over the existing one?

Thanks,
Ross