Operating System - OpenVMS
1828492 Members
2483 Online
109978 Solutions
New Discussion

Decnet & Proxy login question

 
SOLVED
Go to solution
Jorge Cocomess
Super Advisor

Decnet & Proxy login question

Greetings,

If I need to setup proxy login between two (2) Alpha running VMS server, do I need to have Decnet setup before I can setup the Proxy login?

If yes, how hard would it be to setup Decnet? Would you know where I find up-to-date reference materials for this? By the way, I am running OpenVMS 8.3 ia64

Thank you in advance.

Jorge
25 REPLIES 25
Steven Schweda
Honored Contributor

Re: Decnet & Proxy login question

Log in _how_? DECnet? RSH? SSH?

If you intend to use DECnet, then you'll need
to have DECnet running before any DECnet
proxy will be useful.
Hoff
Honored Contributor
Solution

Re: Decnet & Proxy login question

What might you be up to here?

Do you have somebody that can provide you with the local network information, or are you establishing a new DECnet network?

Are there existing connections or existing DECnet nodes?

As for first question, you can't use proxies until you have DECnet running. But the answer to your question is "yes", you can add proxies into the NETPROXY and NET$PROXY databases without DECnet around.

How you set up DECnet depends on whether or not you have DECnet Phase IV or DECnet-Plus.

DECnet Phase IV is documented via some manuals on the Freeware, and can largely be handled with @SYS$MANAGER:NETCONFIG.COM, and answering the questions.

DECnet-Plus configuration is somewhat more involved, and you should read the manuals before starting that process. The baseline configuration tool is NET$CONFIGURE.COM, though the DECnet-Plus environment is rather larger and more complex.

Here are the DECnet Phase IV docs:
http://www.hp.com/go/openvms/freeware
Look on Freeware V5.0 -- direct path:
http://h71000.www7.hp.com/freeware/freeware50/decnet_phase_iv/

Here is the path to the DECnet-Plus docs:
http://www.hp.com/go/openvms/doc/

Once you have DECnet configured and running, you can then add your proxies using the various AUTHORIZE commands including ADD/PROXY.

Depending on the specific requirements here, you can also avoid passwords through the use of ssh and sftp and such; you can use IP tools to provide no-password login processing.

This question seems rather odd, as it strikes me that there is additional background on the requirements as yet unstated.

Stephen Hoffman
HoffmanLabs LLC

Jorge Cocomess
Super Advisor

Re: Decnet & Proxy login question

We do have other nodes that are currently running Decnet on the othe Alpha servers (7.3-2) I wasn't sure if Decnet still exist on the OpenVMS 8.3 ia64 -- The basic things that we're trying to do is have the ability to do remote copy from one VMS server to another. I also would like to know more options for Decnet vs Decnet over IP, etc.

Thank you.

Jorge
Steven Schweda
Honored Contributor

Re: Decnet & Proxy login question

> I wasn't sure if Decnet still exist on the
> OpenVMS 8.3 ia64

You're joking, right?

> The basic things that we're trying to do
> [...]

It's always nice to get those, eventually.

> I also would like to know more options for
> Decnet vs Decnet over IP, etc.

Pretty much the same as the options you
already have on your Alpha systems.

http://h71000.www7.hp.com/doc/index.html
http://h71000.www7.hp.com/doc/decnetplus83.html
Jorge Cocomess
Super Advisor

Re: Decnet & Proxy login question

What I meant to say is the version or the naming for the new product for Decnet on ia64.

So, what would you recommend for me to use Decnet over IP or Decnet plus or something like that??

Steven Schweda
Honored Contributor

Re: Decnet & Proxy login question

If you're already using DECnet, why not
continue to use DECnet? How complicated
would you like to make your life?

> What I meant to say is the version or the
> naming for the new product for Decnet on
> ia64.

http://h71000.www7.hp.com/doc/index.html
http://h71000.www7.hp.com/doc/decnetplus83.html

According to the installation guide, your
DECnet options are about the same as before.
The version is different if the version is
different.

http://h71000.www7.hp.com/doc/83final/ba322_90045/ch01s05.html#display-option

[...]
HP I64VMS DECNET_PLUS version V8.3
HP I64VMS DECNET_PHASE_IV version V8.3
[...]
Jorge Cocomess
Super Advisor

Re: Decnet & Proxy login question

Is there a way to find out if Decnet has been installed but hasn't been configured?

Thanks,
Jorge
Steven Schweda
Honored Contributor

Re: Decnet & Proxy login question

Don't know. Never left it unconfigured for
more than a few minutes. Knowing nothing,
I'd probably try things like:

SHOW NETWORK

MCR NCP SHOW EXEC

MCR NCL SHOW IMPL
Steven Schweda
Honored Contributor

Re: Decnet & Proxy login question

Or:

PROD SHOW PROD DECNET*
Jorge Cocomess
Super Advisor

Re: Decnet & Proxy login question

Well, looks like it was installed but not configured.
------------------------------------ ----------- ---------
PRODUCT KIT TYPE STATE
------------------------------------ ----------- ---------
HP I64VMS DECNET_PLUS V8.3 Full LP Installed
------------------------------------ ----------- ---------

1 item found


I will be reading up on how to configure the DECnet.

Thanks for your help..
Jorge
Ian Miller.
Honored Contributor

Re: Decnet & Proxy login question

@SYS$MANAGER:NET$CONFIGURE BASIC

will get you the basics
____________________
Purely Personal Opinion
Verne Britton
Regular Advisor

Re: Decnet & Proxy login question

I don't want to start a war (I love Phase IV and have intentionally never installed Phase V, plus with my Multinet stack and its DECnet IP Tunnel, I connect just fine to my remote locations) ... but make sure what DECnet versions you have on your other systems.

If everything you have now is Phase IV, the argument could be made to set your new system up also with Phase IV. If you want to do this, you must first uninstall Phase V before installing Phase IV on your Integrity server.

If you will be mixing versions, read up on anything and everything that entails ... and if this will be your first Phase V box, what extra features and config items you will have to work with.

I mention this because your PRODUCT display shows Phase V being there :-)


Verne
Jorge Cocomess
Super Advisor

Re: Decnet & Proxy login question

Verne - Good point!

Here's what my other Alphas currently running:

----------------------------------- ----------- ------------
PRODUCT KIT TYPE STATE
----------------------------------- ----------- ------------
DEC AXPVMS DECNET_OSI V7.3-2 Full LP Installed
----------------------------------- ----------- ------------

1 item found


Our new Alpha server is currently in production test environment and we would like to migrate to the new environment in couple of months. What should I do in this case?

Thank you.

Jorge
Steven Schweda
Honored Contributor

Re: Decnet & Proxy login question

> HP I64VMS DECNET_PLUS V8.3 Full LP Installed

> DEC AXPVMS DECNET_OSI V7.3-2 Full LP Installed

Same stuff, different name. If you're
already using DECNET_OSI/DECNET_PLUS/Phase V
on your old systems, then it probably makes
sense to use it on your new system(s).
Jorge Cocomess
Super Advisor

Re: Decnet & Proxy login question

I need your help once again. I've configured what was installed on my Alpha server "HP I64VMS DECNET_PLUS V8.3" -- I also added the host on both of mine Alpha servers that I need both of them to talk to each other vice versa. I also added the proxy in the UFA file for myself to test the remote copy between nodes. When I tried to copy between nodes, I received this error message, "%COPY-E-OPENOUT, error opening Ronco"jorge password"::DISK5:[USER.jorge]LOGIN.C
OM;41 as output
-RMS-E-CRE, ACP file create failed
-SYSTEM-F-NOSUCHNODE, remote node is unknown
%COPY-W-NOTCOPIED, DISK5:[USER.jorge]LOGIN.COM;41 not copied


I can ping the server on either nodes without any issues. I can also FTP between nodes as well. What am I missing here??

Thanks,
Jorge
Ian Miller.
Honored Contributor

Re: Decnet & Proxy login question

did you add the remote nodename

$ MCR DECNET_REGISTER

and use the menu option to add a node.

____________________
Purely Personal Opinion
Mrityunjoy Kundu
Frequent Advisor

Re: Decnet & Proxy login question

Which protocol do you want to use for proxy??

DECNET or TCPIP

DECNET
-----
If u want to configue decnet first..
Then run
$@net$configure basic

After that you can add proxy account by
$run sys$system:authorize
$ADD/PROXY MISHA::MARCO */DEFAULT

For TCPIP
---------
ADD PROXY user { /HOST=host | /REMOTE_USER=user }

[ /PERMANENT ]
Jorge Cocomess
Super Advisor

Re: Decnet & Proxy login question

I was missing MCR DECNET_REGISTER -- As Ian suggested, I configured MCR DECNET_REGISTER and now everything is working.

Wow, what a learning session I had with DECNET.

One quick question. What would I need to setup for a user to perform remote copy between nodes without passing the "Username & Password".

Thank you very much!!

Jorge
Arch_Muthiah
Honored Contributor

Re: Decnet & Proxy login question

Jorge,

Create a proxy account at the remote node and grant proxy acount access to your account at local node... and use the following command

$copy rem_node::rem_filename local_filename
rem_file should be in the default device/dir and the remote proxy account shoud have access permission for the rem_filename.

If the file is not the default dire of proxy account, then specify the directory like this,
$copy rem_node::[rem_dir]rem_filename local_filename.


Archunan


Regards
Archie
Arch_Muthiah
Honored Contributor

Re: Decnet & Proxy login question

Jorge,

You can see the VMS HELP to create the proxy account.
or
At the remote node name - rxxx (local node is lxxx)

$mcr authorize

uaf> add prx_acct/pass=../dire=../dev=.. etc as usual

uaf> create/proxy

uaf>add/proxy lxxx::your_username rxxx/default

uaf> you can add any other username also to have proxy access with the same cmds

now you can use the above copy commands without specifying the UN and PWD


Archunan
Regards
Archie
Jorge Cocomess
Super Advisor

Re: Decnet & Proxy login question

Archunan - I must be extremely tired or just plain dumb today. I don't get the syntax from your previous posting. How do I setup the Proxy for a particular user to do remote copy without passing the string of username & password from Server_A to Server_B??

The normal syntax that I used to copy from Server_A to Server_B is:

COPY Test.OUT Server_A"Jorge PASSWORD"::DSA5:[USER.Jorge]*.* /log

Thank you!!
Ian Miller.
Honored Contributor

Re: Decnet & Proxy login question

On Server_A

MCR AUTHORIZE ADD/PROXY thisnode::remotenuser JEORGE/DEF

where remoteuser is the username on this node.

____________________
Purely Personal Opinion
Arch_Muthiah
Honored Contributor

Re: Decnet & Proxy login question

Jorge,

Assume the account jorge is in Server_A

At Server_B:
Create a proxy account named pr_jorge. A proxy login enables a user logged in at a remote node (Server_A) to be logged in automatically to a specific account (pr_jorge) at the local node (Server_B), without having to supply any access control information.

$mcr authorize !-- make sure you don't create new uaf file

uaf> add pr_jorge/pass=xxxx/device=dka100/dire=[pr_jorge].. etc as usual

uaf> create/proxy !---- give this command if you don't have the proxy database, this will create netproxy.dat (decnet phase IV) or net$proxy.dat (for decnet phase V)

uaf>add/proxy Server_A::jorge pr_jorge/default

This allows the account jorge on server_A proxy access to account pr_jorge, all his privileges and allows temporarily act as pr_jorge when he (jorge) access Server_B.

you said, you want to copy from Srver_A to Server_B, but command you've given copies to Server_A. OK, we will do the same, coping test.out from Server_B to server_A

From Server_A/jorge account, give this command
$copy Server_B::test.out test.out

$copy server_B::[not_login_dir]test.out test.out

Archunan
Regards
Archie
Jorge Cocomess
Super Advisor

Re: Decnet & Proxy login question

Archunan,

Do I still need to create an acocount on Node B if I already have an account called 'Jorge' on node A and on Node B?

So, I would only need to do this, right?

On Node A:
add/proxy Server_A::jorge jorge/default

Node B:
add/proxy Server_A::jorge jorge/default

Please let me know.

Thanks for your help.

Jorge