I have tried reading through the documentation for setting up TCP/IP on
my AXP but it seems way too complicated for what I need it to do.

I simply want to configure it to use DHCP to get the IP off my router,
and configure SSH so I can access it from Linux, job done.

Any resources to point me in the right direction?

Many thanks
Alex
--
Tactical Nuclear Kittens

Den 2022-07-28 kl. 17:33, skrev Single Stage to Orbit:
> I have tried reading through the documentation for setting up TCP/IP on
> my AXP but it seems way too complicated for what I need it to do.
>
> I simply want to configure it to use DHCP to get the IP off my router,
> and configure SSH so I can access it from Linux, job done.
>
> Any resources to point me in the right direction?
>
> Many thanks
> Alex

First, it is highly uncommon to let a VMS system get it's
IP address from DHCP. I have never done that. Just pick one
fixed address in our network (best is an address outside of
your routers DCHP area, of course) and set the AXP network
interface to that address. There is a menu system to help you.

On 2022-07-28 15:33:48 +0000, Single Stage to Orbit said:

> I have tried reading through the documentation for setting up TCP/IP on
> my AXP but it seems way too complicated for what I need it to do.
>
> I simply want to configure it to use DHCP to get the IP off my router,
> and configure SSH so I can access it from Linux, job done.

For configuration, @SYS$MANAGER:TCPIP$CONFIG.COM is the tool used, and
you will need some familiarity with IP networking to use it.

In my experience, OpenVMS isn't good at DHCP dynamic addressing in
general, and I'd tend to avoid that feature with OpenVMS.

Set your IP address to an IP outside the DHCP address pool and use
static addressing with no DHCP, or set the DHCP server to issue a
static address from within the DHCP address pool based on the OpenVMS
server MAC and set that same IP address on OpenVMS.

Servers aren't all that fond of DHCP dynamic addressing more generally
and that particularly around certificate-based connection security,
absent better DNS support (and shorter TTLs) than are usually found
with OpenVMS configurations.

Once you have the core components configured within TCP/IP Services,
ssh client and ssh server are switches to be enabled.

Getting ssh to work usually involves downgrading security to match that
expected by OpenVMS, assuming you don't have the OpenSSH kit.

Reposting from a few days ago:
https://groups.google.com/g/comp.os.vms/c/DhT_TWepPJ8/m/ReiPhF25CAAJ

This is a sanitized-for-publication version of the sethost bash shell
script I use to downgrade ssh security to connect into OpenVMS, or for
connections into an Integrity iLO.

I haven't installed the OpenSSH kit as yet, though that should address
most or all of the usual issues with ssh connectivity around encryption
and key exchange support; the reasons why connection security needs to
be downgraded.

I'll leave aside getting certificate-based passphrase-security going, for now.

Startup, shutdown, network configuration, certificate security,
software and patch kit installations and updates and kit-related
notifications and downloads, there are a number of inter-related areas
of server management that really need an overhaul within OpenVMS.

--
Pure Personal Opinion | HoffmanLabs LLC

On Thu, 2022-07-28 at 12:02 -0400, Stephen Hoffman wrote:
> > I simply want to configure it to use DHCP to get the IP off my
> > router, and configure SSH so I can access it from Linux, job done.
>
> For configuration, @SYS$MANAGER:TCPIP$CONFIG.COM is the tool used,
> and you will need some familiarity with IP networking to use it.

[ snip ]

Thanks, I'll make a good start with that. You are quite right, since
this is OpenVMS it should get an IP address that should never change.
Good advice.
--
Tactical Nuclear Kittens

Den 2022-07-28 kl. 22:06, skrev Single Stage to Orbit:
> On Thu, 2022-07-28 at 12:02 -0400, Stephen Hoffman wrote:
>>> I simply want to configure it to use DHCP to get the IP off my
>>> router, and configure SSH so I can access it from Linux, job done.
>>
>> For configuration, @SYS$MANAGER:TCPIP$CONFIG.COM is the tool used,
>> and you will need some familiarity with IP networking to use it.
>
> [ snip ]
>
> Thanks, I'll make a good start with that. You are quite right, since
> this is OpenVMS it should get an IP address that should never change.
> Good advice.

I think "since this is a server" is more correct...

On Thu, 2022-07-28 at 22:56 +0200, Jan-Erik Söderholm wrote:
> > Thanks, I'll make a good start with that. You are quite right,
> > since this is OpenVMS it should get an IP address that should never
> > change/ Good advice.
>
> I think "since this is a server" is more correct...

I'm now up and running with TCPIP. Life is good!
--
Tactical Nuclear Kittens

On 7/28/2022 11:33 AM, Single Stage to Orbit wrote:
> I have tried reading through the documentation for setting up TCP/IP on
> my AXP but it seems way too complicated for what I need it to do.
>
> I simply want to configure it to use DHCP to get the IP off my router,
> and configure SSH so I can access it from Linux, job done.
>
> Any resources to point me in the right direction?
>
> Many thanks
> Alex
>

Set up a gateway IP address, pointing to your router. I believe it is option 3
in the core settings. It's been a while.

--
David Froble Tel: 724-529-0450
Dave Froble Enterprises, Inc. E-Mail: davef@tsoft-inc.com
DFE Ultralights, Inc.
170 Grimplin Road
Vanderbilt, PA 15486

On Thu, 2022-07-28 at 19:58 -0400, Dave Froble wrote:
>  Any resources to point me in the right direction?
>
>
> Set up a gateway IP address, pointing to your router.  I believe it
> is option 3 in the core settings.  It's been a while.

All is good. I can use SSH to access OpenVMS and it works well. The
only issue is that using scp to copy files over to it from Linux
doesn't work.

I then installed FTP server (I know, I really shouldn't) but even
though I could FTP in and list directory contents, uploading files
hangs. Most vexing.
--
Tactical Nuclear Kittens

On 7/29/22 2:38 PM, Single Stage to Orbit wrote:
> On Thu, 2022-07-28 at 19:58 -0400, Dave Froble wrote:
>>  Any resources to point me in the right direction?
>>
>>
>> Set up a gateway IP address, pointing to your router.  I believe it
>> is option 3 in the core settings.  It's been a while.
>
> All is good. I can use SSH to access OpenVMS and it works well. The
> only issue is that using scp to copy files over to it from Linux
> doesn't work.
>
> I then installed FTP server (I know, I really shouldn't) but even
> though I could FTP in and list directory contents, uploading files
> hangs. Most vexing.

OpenSSH for OpenVMS I64 and Alpha is supposed to be available soonish.
In the meantime, install PuTTY on your Linux box and use pscp rather
than scp.

On 2022-07-29 19:38:17 +0000, Single Stage to Orbit said:

> On Thu, 2022-07-28 at 19:58 -0400, Dave Froble wrote:
>>  Any resources to point me in the right direction?
>>
>> Set up a gateway IP address, pointing to your router.  I believe it is
>> option 3 in the core settings.  It's been a while.
>
> All is good. I can use SSH to access OpenVMS and it works well. The
> only issue is that using scp to copy files over to it from Linux
> doesn't work.

"Doesn't work" isn't an error code listed in HELP /MESSAGE, or in the
TCP/IP Services documentation. Put slightly differently, your ability
to ask a technical question is lacking—asking a question is harder than
it initially seems, and takes some time and thought and skill to become
good at that. In general? Details help. Commands used, error messaged
received, versions of relevant tools in use, etc.

> I then installed FTP server (I know, I really shouldn't) but even
> though I could FTP in and list directory contents, uploading files
> hangs. Most vexing.

FTP is older than IP, completely and utterly and catastrophically
insecure, and its network socket connection patterns are fundamentally
incompatible with modern network security—absent firewalls capable of
and configured for sniffing FTP traffic.

I'm going to take another guess here about the cause of this problem,
and that the required network services have yet to be enabled. This as
was mentioned in my previous reply. These network clients and these
network servers are controlled in the previously-references
TCPIP$CONFIG configuration tool. The TCP/IP Services documentation can
help understand the rather different world that is OpenVMS, and also
better understand its increasingly-unique separately-installed
networking support.

https://docs.vmssoftware.com

Which of those documents particularly? Concepts and Planning, and
Installation and Configuration.

--
Pure Personal Opinion | HoffmanLabs LLC

On 2022-07-29 19:49:22 +0000, Craig A. Berry said:

> OpenSSH for OpenVMS I64 and Alpha is supposed to be available soonish.

The OpenSSH V8.9 kits for OpenVMS Alpha and OpenVMS I64 were announced
a few weeks back, including details of the provided SSH migration
mechanisms.

--
Pure Personal Opinion | HoffmanLabs LLC

> [...] using scp to copy files over to it from Linux doesn't work.

"doesn't work" is not a useful problem description. It does not say
what you did. It does not say what happened when you did it. As usual,
showing actual actions (commands) with their actual results (error
messages, ...) can be more helpful than vague descriptions or
interpretations.

tcpip show version

I thought that old/lame versions of TCPIP didn't have a useful
implementation of SCP. The usual result here is:

scp1 compatibility mode is not supported.
protocol error: expected control record

ITS $ tcpip show version

HP TCP/IP Services for OpenVMS Industry Standard 64 Version V5.7 - ECO 5
on an HP rx2600 (1.50GHz/6.0MB) running OpenVMS V8.4-2L3

The results seem to be better with an x86 field-test system (with
newer everything):

V86 $ tcpip show version

VSI TCP/IP Services for OpenVMS x86_64 Version X6.0
on a VMware, Inc. VMware7,1 running OpenVMS E9.2

V86 $ prod show prod *ssh* ! (Now a separate product.)
------------------------------------ ----------- ---------
PRODUCT KIT TYPE STATE
------------------------------------ ----------- ---------
VSI X86VMS OPENSSH V8.9-1A Full LP Installed
------------------------------------ ----------- ---------
1 item found

sms@deb74:~$ uname -a
Linux deb74 5.10.0-16-amd64 #1 SMP Debian 5.10.127-1 (2022-06-30) x86_64 GNU/Linux

sms@deb74:~$ scp system@v86:login.com .

@ SYS$MANAGER:ANNOUNCE.TXT
system@v86's password:
login.com 100% 8319 414.9KB/s 00:00

> [...] Most vexing.

Not when compared with an information-free problem description.

> V86 $ prod show prod *ssh* ! (Now a separate product.)

V86 $ ssh "-V"
OpenSSH_8.9p1, OpenSSL 1.1.1n 15 Mar 2022

By the way:

V86 $ ssh -V
usage: ssh [-46AaCfGgKkMNnqsTtVvXxYy] [-B bind_interface]
[-b bind_address] [-c cipher_spec] [-D [bind_address:]port]
[-E log_file] [-e escape_char] [-F configfile] [-I pkcs11]
[-i identity_file] [-J [user@]host[:port]] [-L address]
[-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port]
[-Q query_option] [-R address] [-S ctl_path] [-W host:port]
[-w local_tun[:remote_tun]] destination [command [argument ...]]
%NONAME-F-NOMSG, Message number 0764CFBC

V86 $ sysmsg %X0764CFBC
(SYS$COMMON:[SYSMSG]TCPIP$MSG.EXE;1:)
%TCPIP-F-SSH_FATAL, non-specific fatal error condition

One of my SSH-related field-test complaints concerned its failure to
set "DECC$ARGV_PARSE_STYLE". (Even _my_ programs do that.)

On 7/29/22 4:51 PM, Stephen Hoffman wrote:
> On 2022-07-29 19:49:22 +0000, Craig A. Berry said:
>
>> OpenSSH for OpenVMS I64 and Alpha is supposed to be available soonish.
>
> The OpenSSH V8.9 kits for OpenVMS Alpha and OpenVMS I64 were announced a
> few weeks back, including details of the provided SSH migration mechanisms.

They were announced on July 13, but the links were dead then and still
are. Maybe it's an extra-cost product and our existing support contract
doesn't include it? Dunno, and haven't had the bandwidth to chase down
VSI support about it.

On 7/29/22 5:11 PM, Steven Schweda wrote:

> The usual result here is:
>
> scp1 compatibility mode is not supported.
> protocol error: expected control record

Which is why I suggested he install PuTTY and use pscp instead of scp;
that completely sidesteps the problem by using a client that can deal
with the long-broken VMS server.

On 2022-07-29 22:30:24 +0000, Craig A. Berry said:

> On 7/29/22 4:51 PM, Stephen Hoffman wrote:
>> On 2022-07-29 19:49:22 +0000, Craig A. Berry said:
>>
>>> OpenSSH for OpenVMS I64 and Alpha is supposed to be available soonish.
>>
>> The OpenSSH V8.9 kits for OpenVMS Alpha and OpenVMS I64 were announced
>> a few weeks back, including details of the provided SSH migration
>> mechanisms.
>
> They were announced on July 13, but the links were dead then and still
> are. Maybe it's an extra-cost product and our existing support
> contract doesn't include it? Dunno, and haven't had the bandwidth to
> chase down VSI support about it.

Logged into a VSI support account, and the OpenSSH V8.8 (‽) kit is
posted and available for download. And it downloads.

Seems it'll also be available to everybody via the VSI open-source
website, but that clearly hasn't happened yet.

Yeah, seems there was a premature announcement or an engineering hold
or a staff vacation or some other such wrinkle.

--
Pure Personal Opinion | HoffmanLabs LLC

On 7/29/2022 3:38 PM, Single Stage to Orbit wrote:
> On Thu, 2022-07-28 at 19:58 -0400, Dave Froble wrote:
>> Any resources to point me in the right direction?
>>
>>
>> Set up a gateway IP address, pointing to your router. I believe it
>> is option 3 in the core settings. It's been a while.
>
> All is good. I can use SSH to access OpenVMS and it works well. The
> only issue is that using scp to copy files over to it from Linux
> doesn't work.
>
> I then installed FTP server (I know, I really shouldn't) but even
> though I could FTP in and list directory contents, uploading files
> hangs. Most vexing.
>

If using FTP, you may need to SET PASSIVE or SET PASSIVE ON.

--
David Froble Tel: 724-529-0450
Dave Froble Enterprises, Inc. E-Mail: davef@tsoft-inc.com
DFE Ultralights, Inc.
170 Grimplin Road
Vanderbilt, PA 15486

> If using FTP, you may need to SET PASSIVE or SET PASSIVE ON.

If both ends are on one LAN, then I wouldn't expect PASSIVE to
matter. Going through a NAT router can change that.

On Fri, 2022-07-29 at 17:51 -0400, Stephen Hoffman wrote:
> > OpenSSH for OpenVMS I64 and Alpha is supposed to be available
> > soonish.
>
> The OpenSSH V8.9 kits for OpenVMS Alpha and OpenVMS I64 were
> announced a few weeks back, including details of the provided SSH
> migration mechanisms.

Can't wait. That should be useful, thanks.
--
Tactical Nuclear Kittens

On Fri, 2022-07-29 at 17:46 -0400, Stephen Hoffman wrote:
> On 2022-07-29 19:38:17 +0000, Single Stage to Orbit said:

[ snip ]

> "Doesn't work" isn't an error code listed in HELP /MESSAGE, or in the
> TCP/IP Services documentation. Put slightly differently, your ability
> to ask a technical question is lacking—asking a question is harder
> than it initially seems, and takes some time and thought and skill
> to become good at that. In general? Details help. Commands used,
> error messaged received, versions of relevant tools in use, etc.

That goes without saying. I didn't have time to spare, but I will get
more details into a post later in the week, probably at the weekend.

> > I then installed FTP server (I know, I really shouldn't) but even
> > though I could FTP in and list directory contents, uploading files
> > hangs. Most vexing.
>
> FTP is older than IP, completely and utterly and catastrophically
> insecure, and its network socket connection patterns are
> fundamentally incompatible with modern network security—absent
> firewalls capable of and configured for sniffing FTP traffic.

That is true, and I wouldn't use it for anything other than trying to
get files copied over. I'd disable it afterwards.

[ snip]

Thanks.
--
Tactical Nuclear Kittens

On Monday, August 1, 2022 at 10:01:41 PM UTC+1, Single Stage to Orbit wrote:
> On Fri, 2022-07-29 at 17:51 -0400, Stephen Hoffman wrote:
> > > OpenSSH for OpenVMS I64 and Alpha is supposed to be available
> > > soonish.
> >
> > The OpenSSH V8.9 kits for OpenVMS Alpha and OpenVMS I64 were
> > announced a few weeks back, including details of the provided SSH
> > migration mechanisms.
> Can't wait. That should be useful, thanks.
> --
> Tactical Nuclear Kittens

Watch this space https://vmssoftware.com/products/openssh/

On Tue, 2022-08-02 at 02:23 -0700, Ian Miller wrote:
> On Monday, August 1, 2022 at 10:01:41 PM UTC+1, Single Stage to Orbit
> wrote:
> > On Fri, 2022-07-29 at 17:51 -0400, Stephen Hoffman wrote:
> > > > OpenSSH for OpenVMS I64 and Alpha is supposed to be available
> > > > soonish.
> > >
> > > The OpenSSH V8.9 kits for OpenVMS Alpha and OpenVMS I64 were
> > > announced a few weeks back, including details of the provided SSH
> > > migration mechanisms.

> > Can't wait. That should be useful, thanks.

[ snip ]

> Watch this space https://vmssoftware.com/products/openssh/ 

Watching it most eagerly.
--
Tactical Nuclear Kittens