I'm going to re-ask a basic question here, related to the testing the new SSL cert.
I actually need to do this.
I have a new SSL 256 Sha cert, tested on my playground LPAR.
I also have the new cert install on R&D LPAR, but have yet assigned it apps.
I need a way, if possible, to test the new cert with various apps, before installing and applying this to Production.
One of the issues, is not all the apps are on the R&D LPAR.
Or, If something does not work on Production, within DCM, Update Certificate Assignment, assign that one app back to the old cert.
Paul
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
Sent: Monday, February 01, 2016 2:47 PM
To: Midrange Systems Technical Discussion
Subject: RE: Restarting Telnet
Chris,
Nothing wrong with his technique. As long as you have a fall back plan, such as:
- Remote command
- Remote console capability
- IBM i Navigator
- FTP access
or any number of other options.
Well, I guess the problem might be that you do not make yourself familiar with all the other options. That, is the real problem with the submitting job option.
Like the recent long drawn out post from the person who thought they only shutdown TCP. Only to find out they had to have powered off their system (after a day or so of working on it).
Or the other person who had a message that was causing TCP issues and tried an IPL to correct it and I think we eventually determined that they had multiple lpars with guesting going on and were so unfamiliar with the operation they couldn't bring the machine up in the right fashion.
There's just some things where it doesn't hurt to practice things on a periodic basis as a refresher.
I take refresher courses in CPR and First Aid (dual benefit with being a first responder at work and being in Scouts). Be Prepared.
At times the legendary machine that runs forever even while dry walled into a closet can be a real hindrance when you've forgotten how to do basic operations. (I understand that some may feel that there is no such thing as "basic operations" on a multi lpar machine with guesting, vios,
etc.)
Sure, there are other problems with the submitting job of a custom CL option.
- If others have to maintain it.
- The many lpars we have with no development tools loaded.
- Guessing how long a DLYJOB is needed, versus the complexity of actually checking the jobs status's.
- Downtime is increased by the writing of the program, overestimating DLYJOB times just to be safe, etc.
I think some just are so enamoured of their false god of twinax that they go into Luddite mode and will only use the Lan Console or HMC at gunpoint.
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
From: Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>
To: "'Midrange Systems Technical Discussion'"
<midrange-l@xxxxxxxxxxxx>
Date: 02/01/2016 02:17 PM
Subject: RE: Restarting Telnet
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>
And if something goes wrong with the CL, you are hosed. Web or iSeries
Access will keep you connected to the server. Any submitted jobs or home
grown programs leave a chance that the telnet server goes down and does
not restart.
Now what do you do?
Chris Bipes
Director of Information Services
CrossCheck, Inc.
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of
Buck Calabro
Sent: Monday, February 01, 2016 11:13 AM
To: midrange-l@xxxxxxxxxxxx
Subject: Re: Restarting Telnet
On 2/1/2016 1:31 PM, James H. H. Lampert wrote:
I've just changed the SSL certificate on our Telnet server.
But it just occurred to me that if shut down the Telnet server in order
to restart it, from a regular Telnet session I would be, so to speak,
"sawing off the tree limb I'm sitting on."
1. Is it even necessary to restart the Telnet server in order to have
the certificate change take effect?
2. If so, how? Batch job? LAN Console session?
I write a quick CLP that does a DLYJOB, ENDTCPSVR, DLYJOB, STRTCPSVR.
Submit it, sign off and let the machine recycle itself.
midrange.com
