February 05, 2016
Number, Please: Finding the 3000 Set
When I started in this line of work in 1984, writing about the Hewlett-Packard community, I had a directory. Literally, a perfect-bound directory of HP staff that worked in the company headquarters and labs in California. HP shared it with me as HP Chronicle editor, updating it every year. When someone's number at HP came up missing, you'd call up company HQ and ask for the division operator. It was the 411 of the middle 1980s. It's obvious the 3000 world needs something similar today.
As it turns out, the community does have it. The most dynamic directory resource is the 3000-L, still in use this month to locate information about contacting experts. What makes it powerful is the wetware behind the bits. Knowing which of the 3000-L posters are customers, rather than consultants, is one example of the power of that wetware.
As the week began, Bob from Ideal Computer was searching for Brian Edminster, he of Applied Technologies. Bob slipped a message under the door of 3000-L, then got an answer back about a current email address. I followed up today, just to make sure Bob got something useful. Brian's on the lookout for consulting opportunities, as well as longer engagements.
Yesterday Al Nizzardini was seeking an email address for Vesoft. A couple of replies on the L misinformed Al that Vesoft doesn't use email. That might have been true 10 years ago, but the address firstname.lastname@example.org lands in the offices of Vladimir Volokh and his team. Vladimir far prefers to use the phone, but he's old-school enough to enjoy an in-person visit, too.
In another update, 3K Associates and Chris Bartram are now at 3kAssociates.com. Bartram, one of the very first of the 3000 community to set up shop in the Internet, sold his two-character domain name 3k.com for a tidy sum. "We continue to sell and support our entire like of HP 3000-based software products from 3kAssociates.com," he reported on the L.
The community is moving outward like a starburst, all getting older and ever more dispersed. But the 3000-L remains a good place to post a "number, please" request on how to find someone who knows the 3000. If you're like me and archive all those messages (more than 9,000 over the last 10 years), you can search your email client and find the latest communique from someone like Brian. Many of us don't include phone numbers in our email signatures, but the email is always there.
And if you don't have 10-plus years of emails archived, the server at the University of Tennessee at Chattanooga does. It hosts the L, as it has for two decades, and you can search it via the Web.
If you're counting up such things, more than 450 people still subscribe to 3000-L today. There's also a directory of vendors and consultants here on the NewsWire site. If you're offering services or solutions to the community, I'd be glad to take down your number.
Get e-mail notice when the NewsWire blog gets a new entry. Just say "Blog Me" in a message to email@example.com.
December 29, 2015
Choosing antivirus via test sites, cloud AV
Editor's note: 3000 managers do many jobs, work that often extends outside the MPE realm. In Essential Skills, we cover the non-3000 skills for multi-talented MPE experts.
By Steve Hardwick, CISSP
In an allied article I describe the elements needed for any effective virus attack: motive, means and opportunity. A suitable anti-virus program must provide the following capabilities.
- Be able to detect a vast array of malware
- Be able to update the virus definitions as quickly as possible after the virus signature has been isolated
- Provide the capability to quarantine and remove viruses after infection. This must include the ability to prevent any spread of the virus after contamination.
- Run with minimal load on the operating system. This includes both foreground (interactively scanning files as they are downloaded) and background (scanning existing files and computer activity)
- Have plug-ins for the various methods to download the viruses, via web browsers or email applications
The following websites provide ratings for anti-virus products. Some websites' evaluations are are geared towards a consumer user. Others are more aligned to commercial certification of AV products. I've also included a note on how cloud-base AV is changing antivirus options.
Provides a good set of tests that cover all of the five areas outlined above. Updates their reviews on a monthly basis. Covers Windows, Mac and mobile devices. Includes a special section for home users.AV Comparatives
Provides a good set of testing that covers all of the five areas outlined above. Provides additional, more detailed testing. Only certain tests are updated monthly. Testing is not broken down by operating system.
Only provides the ability to detect viruses and not provide false positives. Only covers Windows and Linux.
Using cloud AV
One approach that minimizes the impact of running an AV program locally is to run the software in two parts, one locally on the machine and one in the cloud. A new set of cloud-based solutions are being offered. These provide a small scanning application running on the operating system and do the heavy lifting in the cloud. Panda, a provider that scored best in the AV Comparatives evaulations, is one example of cloud AV.
The local application scans files and provides file signatures, then uploads them to the cloud counterpart for analysis. This removes the need to update the local definitions on the computer and increases the ability to react to new threats.
This benefit comes at a price. The capabilities are limited by the lightweight application, the services the operating system provides to that application, and connectivity to the Internet. Many of the rating websites are slow to rate these products, especially those focused on consumers. As they become more popular, this cloud AV will be included in the traditional testing suites.
December 28, 2015
Hello, who's still out there? Permanent 404s
2015 has seen comings in the 3000 world, but more goings. Some MPE veterans have signed off of the 3000 mailing list, headed to retirement or the new work on commodity platforms like Linux or Windows. There was a singular departure, too, as Jeff Kell passed away after leaving a legacy of the mailing list-newsgroup of HP3000-L.
Kell was so notable that the iconic tech website Slashdot devoted a front page article to him late last month. Tracy Johnson reported that "I cobbled together a few links from the 3000 mailing lists and managed to get a Slashdot headline accepted for Jeff. The message below is Slashdot's report."
Congratulations, your Slashdot submission was featured on the front page! Every day we review hundreds of submissions, but we can only post a few to the front page.
There have also been also the comings, goings and migrations of Web resources. Stromasys posted a case study about one of its new 3000 emulator customers. There have been other outposts that have gone quiet, or at reported missing, during this year. One of the temporary absences was one portal to the NewsWire. Another community resource is unavailable this week. Client Systems's website is off the radar, notable because it's the resting place for the HP Jazz resources including MPE utilities and tech reports.
In the meantime, those Jazz resources remain available on the Web at the HP Migration server of Fresche Legacy, formerly Speedware. Heading to hpmigrations.com/ HPe3000_resources/HP_jazz/ gets you third party utilities, software, as well as a link to Papers and Training. Speedware licensed everything that was stored on Jazz when HP closed off its server at the end of 2008.We're still on the lookout for the whereabouts of Client Systems, a company that once licensed the stories of the NewsWire. Those were the days when the dot-com boom hadn't gone bust yet. Client Systems was the exclusive North American HP 3000 distributor, during the era when Hewlett-Packard's Enterprise business needed somebody to prep and ship servers loaded with MPE and subsystem software.
While the clientsystems.com domain is pointing at a Network Solutions "website not available" parking page this week, it may not be a permanent goodbye. We know about these misdirections. Back in October, 3000newswire.com landed you at a parking page operated by rascally Russians. The front door to the NewsWire these days is our blog page. However, access to the stories of 1996-2005, presented as printed issues and online updates, became limited to our search engine.
Our Latest News list of links to our blog articles fell out of service during that domain name theft. 3k Associates caught the cold that caused the NewsWire's sniffles, as 3k.com got hijacked for a little while. Those Latest News posts get created at 3k.com. 3k's domain theft meant our main domain went missing awhile.
It didn't look good. It's common to see such a domain theft go un-recovered, so we were happy to see 3k.com get back into its rightful hands. 3000newswire.com never got snatched, but we found a couple of community members who wondered if we were still around. When I mentioned to Vladimir Volokh our front door was being barred, it looked like everything we had was hijacked. His wife Anne, helping me with a story about masters who were improving MPE manufacturing software, sent her condolences.
Vladimir told me about the hijacking of your website--incredible! I'm wondering what developments will follow regarding the 3000 Newswire, if any. What a story!
Anne wasn't the only one who figured we'd gone offline. Prolific commenter Tim O'Neill worried for our health, too. These are too-common comings and goings on the Web, but you can't be certain what they genuinely mean until there's an obituary, or an email. (We'd say a phone call, but that's so 1995.) In the weeks when Chris Bartram of 3k did his mighty work to wrest his domain back from the Russians, it looked like the NewsWire was out of business. Or at least to anybody who doesn't use our 3000newswire.com/blog address.
3k is making a Web move now, a byproduct of seeing value rise in Bartram's two-character domain name. He's been one of our most precious resources here at the NewsWire since before our beginning. In the years before we started our news service, 3k Associates used our business communications expertise for data sheets, advertising, even Interex conference giveaways.
You'll still be able to say hello at 3kassociates.com, Bartram told me today.
The folks wanting to buy 3k.com want it for something un-HP3000 related (I don't know what). But the fact that it's a 2-letter domain name (which they haven't allowed for many years) makes it valuable. DNS appraisal services appraise it as high as six figures.
I went looking for 3k.com resources while I researched Command Interface scripts, since scripting has become a topic of interest to 3000 members. Either they've got 3000 scripts like JCL jobstreams they need to replace, or there's a desire to automate things so less management is required. The 3000 always needed less hand-holding than other servers. But people are the expensive resource today, so as they retire and interim help takes their place, automation keeps things running. In a new era where a veteran's :BYE doesn't mean goodbye to MPE, scripting can minimize maintenance.
There's been more permanent goodbyes to the Hewlett-Packard stewardship of 3000 information. Oh, you can get hits for HP 3000 at Hewlett-Packard Enterprise's hpe.com site. But they're a collection of the StoreEasy 3000 storage gateway, or network switches. The HP 3000-24G-PoE+ Wireless Switch comes closest to matching a 3000 search.
The byproduct of that HP goodbye is that some links from the up-and-running web resources like 3kassociates and hpmigration.com point at missing Hewlett-Packard pages. So it continues to go, these resources which help 3000 homesteading or assist in migrations. I give thanks for our sponsors, who keep us from going all 404 on you. The lesson to carry out of here is that appearances on the web can be deceiving -- or as we noted earlier this month, reports of a death can be exaggerated. Instead of wondering, you can call, all '95-style.
November 16, 2015
Webinars set courses for future operations
The next three days each contain a webinar that can help a 3000 manager decide how to best use their IT resources. One of the presentations covers a new cloud-based ERP migration solution, explained in detail, while the other two come from a long-time provider of data solutions for HP 3000s.
On Nov. 17 (Tuesday) Kenandy demos its cloud-based, Salesforce-driven ERP stack. It's a new performance of the overview show broadcast at the end of September. Kenandy has enough features to replace more than a few MPE/iX apps, for any sites which are looking for replacement solutions on the way to migration. Registration is here on the Web, and the program starts at 1 PM Central Time, US.
Over the following two days, MB Foster airs a pair of Q&A, webinar-driven broadcasts about best practices for data management. The company is serving customers beyond MPE/iX sites now, from the experience of carrying out a migration as well as the integration of its software and practices in non-3000 customer sites.
Wednesday Nov 18th's Webinar covers Data Migrations Best Practices. IT operations generate opportunity and challenges to organize data into useable information for the business. The Webinar will deliver practical methodologies to help you prevent costly disruptions and solve challenges. "A data migration project may not be your specialty," says CEO Birket Foster. "We are offering an opportunity to learn from our successes and minimize the business impacts of data migration, through best practices." The Webinar begins at 1 PM Central US, and registration is here on the Web.
Thursday Nov. 19th's Webinar (a 1 PM Central start time; register here) from MB Foster explains the strategy and experience needed to employ Operational Data Stores in a datacenter. An ODS requires integration, Foster says.
"Essentially you’re changing what and why you deliver information, and where that information resides for end-users decision support and reporting," he says. "You would also change ongoing management and operations of the environment."
The meeting will deliver insights into MB Foster’s ODS and DataMart services, its technology, and best practices including:
1. What an Operational Data Store and DataMart are
2. How actionable data can be delivered, quickly
3. Why investing in an ODS and DataMarts are smart choices
October 28, 2015
Compliance rule pipes MPE app to emulator
Racine Water & Wastewater, a municipal utility in Wisconsin, ran an HP 3000 and associated billing applications for decades. The organization even made the shift to final-generation HP hardware with an A-Class server. After the utility shifted IT operations to another platform in 2008, the Hewlett-Packard hardware for MPE/iX chugged along in archival mode. But the risk in running on drives more than a decade old grew serious. The organization that serves 100,000 customers in the communities around Lake Michigan reached out to an emulation platform from Stromasys to keep its archives vital.
The utility needed to maintain a legacy system in order to access archived data. After they had migrated their primary billing system to a newer system, only four years of archived data could be migrated to the new environment. More than 25 years of records remained on the HP 3000. By 2014, they knew they needed a solution to continue to access billing records stored on the HP 3000.
The State of Wisconsin mandates access to billing history records. To meet those compliance needs, the utility engaged with an independent consultant to research archival solutions. Mike York of Assertive Systems in Wisconsin began his due diligence and demo testing. Charon HPA came in for review, and while retrieving that A-Class server's HPSUSAN number, the HP hardware suffered a disk failure. Stromasys was able to help recover the system, even before the utility had adopted the Charon emulator.According to a case study on the Stromasys website, a DDS-1 backup tape failed to load. Recovery was stalled. Ken Scolaro, administrative manager for the utility, was working with York to try to bring HP's 3000 hardware back online.
Scolaro and York sent a backup tape to the Stromasys engineer providing support on the project. Stromasys purchased a DDS-1 tape drive for the data recovery, and utilizing Oracle Box, built a Virtual Machine and recovered the HP 3000 system. After recovering the tape data and configuring the virtual HP 3000 with MPE/iX 7.5, the virtual machine was exported and sent via thumb drive to the customer. The utility then imported that VM to its local server.
The Stromasys sales representative provided a proof of concept for us," York said. "He accomplished this from an old and very questionable backup tape. Amazing."
The Racine utility replaced the Hewlett-Packard iron with Intel-based hardware. Twenty years of data is now available via Charon. "Utility staff did not even notice this change was made," Scolaro said. "The system installed easily without any unexpected problems," the case study on the Stromasys website reports. "It has run flawlessly ever since."
August 05, 2015
Steady steed of Invent3k saddled up again
After a couple of months offline, the shared development and archive 3000 server Invent3K is back once more, carrying its saddle bags of software and sandbox spaces. The system was put online at first by OpenMPE's volunteers after HP closed down the Invent3K hosted at the 3000 division.
Tracy Johnson, a member on the final board of directors, supplied an update last night.
The Invent3k machine is back online after almost two months of being down; it's now at invent3k.openmpe.com. Also after a few years, it is back in Texas where it belongs with HPSUSAN 0. (The DR machine that it has been running on is no longer accessible.)
It may be riding rough at first. There might be some bugs to iron out due to a big tape restore. But most of it is there. It was a group effort. Thanks to
- Rob Gordon at Black River Computer for donating the hardware and man-hours to fix it. (It all centered on fixing LDEV 1.)
- Terry and David Floyd with the Support Group for putting it back online and hosting the hardware
- Keven Miller with 3kranger.com for fixing the Web pages.
- Steve Cooper at Allegro for pointing the domain name to the new IP number.
In keeping with the spirit of HP's original Invent3k, the new INVENT3K offering is for the use of member accounts to compile and test their own programs.
More than a decade ago, Hewlett-Packard believed that a 3000 for public use would help the 3000 community. The server was dubbed Invent3K, because its mission was to further the 3000's lifespan through the invention of software. HP stocked it with subsystems, offered accounts for free, and let development commence. Some useful products came out of Invent3K. The first that comes to mind is a version of perl ready for MPE/iX. That's a version of Perl that continues to work.
July 15, 2015
How to Keep Cloud Storage Fast and Secure
Editor's Note: HP 3000 managers do many jobs, work that often extends outside the MPE realm. In our series of Essential Skills, we cover the non-3000 skillset for multi-talented MPE pros.
By Steve Hardwick, CISSP
One of the many cloud-based offerings is storage. It moves data from the end device to a remote server that hosts massive amounts of hard disk space. While this saves local storage, what are some of the challenges and risks associated with the type of account?
Cloud data storage applications have been compromised through different weaknesses. Firstly, there is the straight hack. The hacker gains administrative access into the server containing the data and then can access multiple user accounts. The second one is obtaining a set of usernames and passwords from another location. Many people use the same usernames and passwords for multiple accounts. So a hack into an email server can reveal passwords for a cloud storage service. What are the ways to defend against this level of attack?
Encryption is always a good option to protect data from unauthorized users. Many service providers will argue that they already provide encryption services. However, in a lot of cases this is what is called bulk encryption. The data from various users is bundled together in a single data store. Then the whole data store is encrypted with the same password. This gives a certain level of protection, for example of the disk is stolen. But, if administrative access is gained, these systems can be compromised. A better solution is to choose a service that offers encryption at the account level.Another option is to encrypt the data before it is stored.This is probably the safest method, as the encryption application is not part of the cloud server, and neither is the password. There is a penalty of performance and time in creating and restoring the file, as it has to be encrypted/decrypted. Today's computer systems normally make short work of this task.
Finally, there is a common misconception that an encrypted file is bigger than the original. For good encryption they should be about the same size. The only challenge with any encryption is to make sure the password is safe.
If you use the same username and password, the best solution is not to do it. But the difficulty is having 20 different usernames and passwords and remembering them all. One option is to let the browser do the remembering. Browsers have the option of remembering passwords for different websites. The browser creates its own local store of the passwords. However, if the computer's hard drive crashes, so does the password storage.
The next option is to use an on-line password account. The bad news is that they have the same weakness as other types of on-line storage. LastPass was recently hacked, so many users were worried that their password lists were compromised. I use a password vault that locally encrypts the vault file. That file can then be stored in online data storage safely. Plus, if you chose the right password application, the vault is shared across multiple devices. This way, different accounts and passwords can be used for each account and still be available from a secure, but available location.
Online storage, offline access
Most of the time many of us have access to the cloud. But there are times when I would like to have access to my data, but I don't have Internet access. The best example of this is on the plane. Although Internet service is available on many planes, not everyone has access. So it is good to choose a service that has a client application to synchronize the data. This will allow copies of the same file to be kept locally and in the cloud. This can be important when looking at mobile solutions.
In many cases, mobile storage is preserved by moving the data into an online storage location. Storing all the music files in the cloud, and then finding that they are not available offline, can be very infuriating on a plane ride.
Compression to be free
Free storage on-line services are limited to a set amount of storage. One way to get around this is to use data compression. Most raw data files can be compressed to some extent. But bear in mind that most media formats, such as mpeg, mp4, or jpeg, have already been created using compression. Many other files, though, can be compressed before they are stored. Some applications — for example back-up apps — will give the user a choice to compress the file before it is stored. Not only does this reduce the amount of space the data takes in the online storage, it is also faster to upload and download.
July 10, 2015
User group manufactures new website
CAMUS is the Computer Applications for Manufacturing User Society that now has a fresh website to go with its quaint name. While Computer Aided Manufacturing pretty much describes everything outside of the tiny Chinese enterprises doing piecework for the world, CAMUS is unique. It's devoted to a significant interest of the remaining HP 3000 homesteaders. Manufacturing remains an HP 3000 heartland.
Keeping a website up to date is no small feat. In the face of declining use of HP 3000-related products, some websites have disappeared. The legendary Jazz server from the Hewlett-Packard labs went dark long ago. The full retreat of HP's 3000 knowledge seems more obvious all the time. The old www.hp.com/go/e3000 address, once HP's portal for things MPE-related, now returns the message above.
Which is why the camus.org update is heartening. Terri Glendon Lanza reports that the site serves MANMAN, MK, MAXCIM, and migrated manufacturing companies.
Members will now be able to edit their profiles and search the membership for others with similarities such as geographics, software modules and platforms, or associate supplier services.
Our free membership still includes upcoming webinar meetings, connecting with 'birds of a feather', a listserv for questions to the community, and photo gallery of former events.
Society members receive access credentials to a members-only section. Just about anybody can become a member. Pivital Solutions and Stromasys are Associate members, which will tell you about the 3000 focus the group can count upon.
July 09, 2015
Throwback: When IMAGE Got Its SQL Skin
During the current Wikipedia project to document IMAGE, Terry O'Brien of DISC asked where he might find resources that point to IMAGE facts. Wikipedia is all about facts that can be documented by outside sources, especially articles. O'Brien was searching for InterACT articles, perhaps thinking of the grand series written by George Stachnik for that Interex user group magazine.
While the user group and its website are gone, many of those articles are available. 3K Associates has an archive of more than a dozen of them, including several on IMAGE. (That website has the most comprehensive collection of MPE and 3000 lore, from tech how-to's to an HP 3000 FAQ.) As part of his introductory article in the database subset of The HP 3000 For Novices, Stachnik notes how IMAGE got its SQL interface, as well as why it was needed.
Most new client-server applications that were developed in the 1980s made extensive use of the SQL language. In order to make it possible for these applications to work with the HP 3000, HP literally taught TurboIMAGE a new language--the ANSII standard SQL.
The resulting DBMS was named IMAGE/SQL -- which is the name that is used today. IMAGE/SQL databases can be accessed in two ways: either using the traditional proprietary interfaces (thus protecting customers' investments in proprietary software) or using the new industry standard SQL interface (thus enabling standard client-server database tools to access the data stored on HP 3000s).
The enhanced IMAGE came to be called TurboIMAGE/SQL, to fully identify its roots as well as its new prowess. Stachnik wrote the article in an era when he could cite "new technologies such as the World Wide Web."
HP removed many of the restrictions that had pushed developers away from the HP 3000, making it possible to access the HP 3000's features (including its database management system) through new industry standard interfaces, while continuing to support the older proprietary interfaces. In the final months of the 20th century, interest in the IMAGE database management system and sales of the HP 3000 platform are both on the rise.
That rise was a result of user campaigning that started in earnest 25 years ago this summer, at an Interex conference. Old hands in this market call that first salvo the Boston Tea Party because it happened in a Boston conference meeting room. More than nine years later, Stachnik wrote that "interest in the IMAGE database management system and sales of the HP 3000 platform are both on the rise."There are many places to discover the history and deep, elegant engineering of IMAGE. Adager's website contains the greatest concentration of writing about IMAGE. It's possible that references from adager.com articles will make their way in the new Wikipedia entry. They wouldn't be relevant without that rebellion of 25 years ago, because HP wanted to release IMAGE from its pairing with the 3000. The users wouldn't permit it, bad press from the meeting ensued, and an IMAGE-free HP 3000 became much harder to purchase.
SQL arrived about three years later. The story had a happy ending when Stachnik wrote his article.
Any HP 3000 application that used IMAGE/3000 (and virtually all HP 3000 applications did) was locked into the HP 3000 platform. It couldn't be ported to another platform without some fairly major rework. This was almost the kiss of death for the HP 3000 in the open-systems-obsessed 1990s. In fact, many platforms did "go under" in the UNIX shakeout that took place in the early part of the decade.
Many industry observers expected that Hewlett-Packard would choose to jettison its proprietary HP 3000 platform in favor of its faster growing younger brother, the UNIX-based HP 9000. Fortunately, these observers did not understand a very basic fact about the company.
HP was (and is) very focussed on protecting its customers' investments. Instead of jettisoning the HP 3000 platform, the company chose to invest in it.
Whatever HP intended for the fate of the computer, the investment in SQL remains a way to keep the heartbeat of the 3000 pumping data to the world of non-MPE machines.
July 06, 2015
Work launches on TurboIMAGE Wiki page
History is a major element in the HP 3000's everyday life. A computer that received its last vendor-released enhancement in 2009 is not in need of a lot of tracing of new aspects. But a serious chronicle of its features and powers is always welcome for homesteading customers. A new effort on Wikipedia will help one of its longer-standing database vendors, one who's moved onward to Windows.
Terry O'Brien still holds management reins at DISC, makers of the Omnidex indexing tool for TurboIMAGE. He's begun a distinct entry on Wikipedia for the database that's been the heartbeat of MPE almost since the server's beginning. O'Brien is enlisting the memory of the user community to take the page from stub status to full entry. "My original intent was to create an Omnidex page, since DISC is ramping up marketing efforts in the Windows and Linux space for Omnidex 6.0," he said.
During my ramp up within Wikipedia, I noticed the TurboImage article had little information and had no cited references. Although I have been a heavy utilizer of Wikipedia the past several years, I had never looked behind the covers. Wikipedia has a rich culture with a lot of information to digest for new authors. It is a bit daunting for new authors.
I originally was just going to add some general information and mention Fred White. Needing to cite references led me to an article Bob Green wrote on the history of the HP 3000 as well as numerous other articles from Robelle that I am citing. That let me to articles on 3000 NewsWire, so thanks Ron for your prolific prose on all things HP 3000.
Journalism, however, is not the best entry point for a Wikipedia entry. The most dispassionate prose conceivable is best-suited for Wikipedia. Think of software manual language and you're closest to what's accepted. A broad-interest topic like yoga gets a good deal more Wiki Editor scrutiny than a chronicle on a minicomputer's database. That doesn't mean there's not a wealth of accuracy that can be supplied for the current TurboIMAGE stub, however. O'Brien is asking for help
His posts to the 3000 newsgroup include such a request. "I also need to solicit other unbiased parties to collaborate. And what better place to get feedback on TurboIMAGE then from HP3000L!"
"So if there are any Wikipedia authors interested in added to the article or debating anything I stated, please do so in the TurboIMAGE talk page."
Wikipedia authors will know exactly how Talk works to get a page written and improved. And it's dead-simple to become a Wikipedia author. As O'Brien suggests, creating a page is much more complex than improving an existing one.
June 24, 2015
OpenSSL: Still working, but falling behind
This month the OpenSSL project released a new version of the software, updated to protect sites from attacks like Heartbleed. The release coincides with some interest from the 3000 community about porting this 1.0.2 version to MPE/iX. These cryptographic protocols provide security for communications over networks.
Heartbleed never had an impact on the 3000, in part because it was OpenSSL was so rarely used. Developer Gavin Scott said that last year's Heartbleed hack "does point out the risks of using a system like MPE/iX, whose software is mostly frozen in time and not receiving security fixes, as a front-line Internet (or even internal) server. Much better to front-end your 3000 information with a more current tier of web servers. That's actually what most people do anyway I think."
But native 3000 support of such a common networking tool remains on some wish lists. 3000s can use SSL to encrypt segments of network connections at the Application Layer, to ensure secure end-to-end transit at the Transport Layer. It's an open source standard tool, but deploying it on an HP 3000 can be less than transparent.
Consider the following question from Adrian Hudson in the UK.
Does anyone know anything about putting OpenSSL on a HP 3000? I've seen various websites referring to people who have succesfully ported the software, but with the HP 3000s being used less and less, I'm finding lots of broken links and missing pages. My ultimate intention is to try and get Secure FTP (SFTP) running from Posix on the HP 3000.
HP placed the OpenSSL pieces in its WebWise MPE/iX software, and that software is part of the 7.5 Fundamental Operating System. Cathlene McRae, while still working at HP in 3000 support, confirmed that "WebWise is the product you are looking for. This has OpenSSL." She's shared a PowerPoint document of 85 slides written in 2002, one of the last years that WebWise (and its OpenSSL) was updated for the HP 3000. (You can download these slides as a PDF file.)Keven Miller of 3K Ranger has detailed his notes from installing OpenSSL on a 3000.
"I'd be happy to talk with whomever has interest," he said. I'd like to do the "port" again with notes, so others can reproduce, and place it on my website."
I'm looking on my HP 918 (MPE/iX 6.0 PowerPatch 2)
OpenSSL 0.9.6a 5 Apr 2001
I believe AFTP did build and run. That would be from OpenSSH. As I recall, the process is
1. install zlib
2. install openssl
3. install openssh
usage: sftp [-vC1] [-b batchfile] [-o ssh_option] [-s subsystem | sftp_server]
[-B buffer_size] [-F ssh_config] [-P sftp_server path]
[-R num_requests] [-S program]
Connecting to hpux-1...
Couldn't connect to PRNGD socket "/tmp/egd-pool": Can't assign requested address
Entropy collection failed
ssh-rand-helper child produced insufficient data
As I recall, I need to stream a job for this EGDPOOL. I hope to get back to this and other porting things. But work gets in the way.
June 01, 2015
Older laptops find current use for 3000s
By Brian Edminster
Back in the MPE-III, MPE-IV, and MPE-V days, I often advocated using a printing terminal as a console (i.e. an HP 2635), in order to leave a permanent hardcopy audit trail. A little loud, sometimes, but it made it hard to hide what was going on, and allowed you to flip back through prior 'pages' of history. And unlike PCs, the messages were persistent (that's to say they would survive a power-fail).
Since then, I've been an advocate for using PCs as a system console workstation -- often ones that would otherwise be ready for retirement.
Actually, I prefer to use laptop PCs, as they're typically smaller and lighter, have a battery in them that can act as a short-term UPS, and many can be configured to allow folding the screen closed while leaving them turned on and active. A laptop saves space, and if the system's been configured to shut off the display and spin down the drives when there's little to no activity, it can save power as well.
Key documentation and/or other useful info can also be kept on the laptop as well -- so you don't have to look things up on paper. If the laptop is old enough, either it (or a docking station for it) will have a serial port, or you can also go the USB to Serial adapter route, if necessary. Something like this Compaq Armada is quite old, but it does include a serial port.On the laptop, the freeware QCTerm terminal emulator is a perfect choice for use as a system console, and has a 15000-line memory. That beats the heck out of any CRT I've ever seen! You can still get copies of this emulator from the Internet archives. I also plan to make QCTerm available, along with associated documentation, on my website.
I've provided a working URL that'll take you right to the old download page for the latest version of QCTerm (v3.1a). Just click here. From that page, you can also search 'backwards' through time, to find earlier versions of QCTerm as well.
May 29, 2015
Retrieve What's Lost With Wayback
Even when things go dark on the Web, their history doesn't. The Internet Wayback Machine is always watching and recording, taking snapshots of sites or their content that's been removed. So long as there's a Wayback, there's a way back, so to speak.
I discovered this yesterday when checking on freeware from AICS Research. The company still supports its HP 3000 users of QueryCalc, but at the moment the feature-rich website has nothing on its face but a static graphic. AICS did business long ago as a tax service, and all the website reports is a gaggle of details about that enterprise.
As 3000 users know, a lot more resided at aics-research.com. In years past, there was a 3000 Relative Performance Chart, an essay to guide users on remaining on the 3000 indefinitely (called Plan B at the time), as well as a rich history of early Hewlett-Packard computing products. But most of all, there was QCTerm, the free 3000 emulator that AICS created for the 3000 community. QCTerm has always been "freely distributed to all users for their personal and corporate use, without time limit or any form of obligation being incurred by any party."
QCTerm is a full-function HP700/92 terminal emulator, very similar to other terminal emulators, running in Windows. The only difference is that QCTerm carries no cost "and may be freely distributed to as many users as you wish."
QCTerm was not constructed as a precise mimic of an HP700/92 terminal, although it identifies itself as such. "Rather, we wanted to make QCTerm simpler, more browser-like, and more intuitive, while retaining the full functionality that would be expected of an HP terminal," the software's description reports.
March 30, 2015
Contractor-Consultant Resources for 3000s
We're opening up a new page for the NewsWire's site as part of our all-digital transition. The community's consultants and contractors have been posted for more than five years at the OpenMPE News blog, which I've maintained and administered. Now the listing of independent and company-based consultants from that website is online at this page at the NewsWire's site.
The list gained a new member recently, so there are still computer pros emerging who seek places to help the homesteading community members. If you're a consultant and you're not on our page, we'd be happy to extend you a place there, or update your listing from the OpenMPE News site. Email us your particulars, or include them in a comment below. Be sure to give us the snail-mail and phone contacts, since location can be important to some customers seeking expertise. A few lines on what you do will be helpful.
We've also got some unverified listings from prior to 2013 among the resources on the page. If you're in that category and would like to update us, send a note and any changes.
Some companies have wide-ranging nets of engagements they'd like to attract. But among our community, there's no one writing support contracts who focuses exclusively on the 3000 but Pivital Solutions. "It's our only business," says president Steve Suraci.
Some individuals are on the lookout for full-time, part-time, or temporary jobs at 3000-using companies. For example, we heard from one 3000 pro who offered his listing to the OpenMPE blog earlier this year.
Stephen Baumgart (firstname.lastname@example.org)
I seek a full-time, permanent or temporary position where my talent and experience will provide value to an organization. I have 40 years of design and system development experience, 35 of those years in development on HP 3000, and 30 years in Powerhouse and eight years of COBOL experience. I have managed the MIS department, managed projects, and performed many system and data migrations. I have a BS in Computer Science from Purdue University.
November 06, 2014
Throwback: Today's Empire of Invent3K
Five years ago today we watched for notice about a fresh 3000 resource on the Web. Invent3K, a public access development server created by HP in 2001, was searching out a new home in November 2009. The vendor shut off Invent3K in November 2008, along with the Jazz website that hosted shareware utilities created by HP and the user community.
Invent3K was an OpenMPE adoption project five years ago. The community probably didn't need a public access development web server by the end of 2009. But replacing HP's withdrawn assets seemed important. Invent3K harkened back to a more hopeful time. 3000 developers were first offered access to MPE accounts on that HP server only about six months before the vendor announced it would end its 3000 programs.
Invent3K was unique in the 3000's history. The server was the first and only place that hosted free, development-use-only subsystem software from HP. Working from an Invent3K account, a developers employed COBOL II, TurboStore, and other HP-branded products while building apps or utilities.
For a time, OpenMPE wanted to sell $99 yearly development accounts on its replacement Invent3K. The community was not accustomed to paying for public access, so sales were slow. OpenMPE was trying to generate revenues for operating things like a Jazz replacement host where contributed tools could be accessed. By that time, much of Jazz had been re-hosted at servers owned by Client Systems and Speedware. Things were not hosted quite the same as on Jazz, though. HP insisted that those two vendors make users click through an End User License Agreement before using the contributed tools re-hosted from Jazz.
Last month, two of the replacement servers for delivering Jazz and Invent3K had online glitches. Speedware's server went offline for a weekend, so its hpmigrations.com website that hosts Jazz delivered only an error. The HP 3000 where Invent3K was headed in 2009 had a small hiccup, too: the 3000-based Empire 3.9 game server lost use of its domain name for awhile in October. Tracy Johnson is the caretaker for the Empire server and its parent -- Invent3K, whose domain name is invent3k.openmpe.com.
But Invent3K is operating today, at least for anyone who had an account established before OpenMPE curtailed its operations. Access is through any terminal emulator with Telnet or VT/Mgr protocol. Once you've configured your terminal emulator, connect to the address invent3k.empire.openmpe.com.After years of reduced 3000 development -- the result of many systems frozen to maintain stability -- Invent3K is more than a testament to shared effort of the community. It's a solution in search of a problem. Free access to the 3000's subsystem products for development wasn't much of a problem by 2010. Invent3K was devised as a means to deliver new software for MPE. The community was encouraged to help, back in 2001.
Advocates for MPE/iX waited longer than expected for invent3k.openmpe.com to come online. The wait was so lengthy that a dispute over who would control the server arose in the OpenMPE group. Ultimately the original openmpe.org domain was locked up, kept out of the hands of the OpenMPE board members. Allegro Consultants stepped up to donate the openmpe.com domain, which it had purchased long before Invent3K was up for adoption.
As a result of moving a consolidated version of Jazz out of HP's labs, the community now faces good news and bad for the Jazz web resources. The good news is there's plenty of redundancy, with Fresche Legacy (nee Speedware), Client Systems, and OpenMPE's volunteers like Johnson all hosting the programs.
The bad news is there are three sets of programs and command files and UDCs, some overlapping, and some not, among those redundant resources. Every host gets to use their own organizational map, so finding something specific probably requires a visit to all three sites. And some tools aren't on any of the servers, like the bash shell program for MPE/iX. Bash was the focus of the recent Shellshock hack, one that had administrators examining their servers for security vulnerability.
For the time being, the Jazz portals are located at:
OpenMPE Jazz: invent3k.openmpe.com/jazz/
Client Systems Jazz: www.clientsystems.com/jazzmain.html
Fresh Legacy/Speedware Jazz: hpmigrations.com/HPe3000_resources/HP_jazz
There is only one Invent3K, however. One might be enough, considering it's an HP 3000.
October 29, 2014
Security experts try to rein in POODLE
Sometimes names can be disarming ways of identifying high-risk exploits. That's the case with POODLE, a new SSL-based security threat that comes after the IT community's efforts to contain Heartbleed, and then the Shellshock vulnerability of the bash shell program. HP 3000s are capable of deploying SSL security protocols in Web services. Few do, in the field; most companies assign this kind of service to a Linux server, or sometimes to Windows.
The acronym stands for Padding Oracle on Downgraded Legacy Encryption. This oracle has nothing to do with the database giant. A Wikipedia article reports that such an attack "is performed on the padding of a cryptographic message. The plain text message often has to be padded (expanded) to be compatible with the underlying cryptographic primitive. Leakage of information about the padding may occur mainly during decryption of the ciphertext."
The attack can also be performed on HP's Next Generation Firewall (NGFW), a security appliance that is in place protecting thousands of networks around the world. Other firewalls are at risk. Just this week HP released a security patch to help the NGFW appliances withstand the attack. External firewalls are a typical element in modern web service architectures.
A POODLE attack takes a bite out of SSL protections by fooling a server into falling back to an older SSLv3 protocol. HP reported that its Local Security Manager (LSM) software on the NGFW is at risk. But a software update is available at the HP TippingPoint website, the home of the TippingPoint software that HP acquired when it bought 3Com in 2010. TippingPoint rolled out the first HP NGFW firewalls last year.The TippingPoint experts seem to understand that older protocols -- a bit like the older network apps installed in servers like the 3000 -- are going to be indelibile.
The most effective mitigation is to completely disable the SSLv3 protocol. If this is not possible because of business requirements, alternately the TLS_FALLBACK_SCSV flag can be enabled so that attackers can no longer force the downgrade of protocols to SSLv3.
What's at risk in your data pool? HP says it likely to be sensitive, short strings of data such as session IDs and cookie values, "which can then be used to hijack the users' sessions, etc."
Et cetera indeed. The added challenge which enterprise managers assume once they move into open networks are the POODLEs, shocks to a shell and the bleeding hearts of newer operating environments. The security expertise to meet these challenges is a well-spent investment -- whether it's through a 3000-savvy services provider, or the vendor of the migration target system that's just replaced a 3000.
Basic information on these threats is always provided for free. Implementation savvy can be a valuable extra expense. For example, HP adds this nuance about disabling protocols.
An important note: both the client and server must be updated to support that TLS_FALLBACK_SCSV flag. If both allow for SSLv3 and one of them has not been updated to support the flag, the attack will remain possible.
August 29, 2014
Finding the Labor Your 3000 Site Needs
Homesteading on the HP 3000 — whether it's the bridge until migration, archival operation where little changes except backup tapes, or unlimited future-style — takes labor to maintain. Labor is on our minds here at the NewsWire this weekend, when much of the US has taken a few days off from the office or away from the computer keyboard to celebrate the American labor movement.
We're taking those days off, too. And we'll be back on Sept. 2, like a lot of you with work to do. There's a printed issue for the Fall for me to edit and write for, after all. We're flying in the face of advice that says it's a ticking clock to produce paper based information. We're betting you still count yourself as a pro who knows the movement to digital is not yet complete. When we started the NewsWire, we flew in the face of advice that said, 19 years ago, there was little future for the MPE user.
Your community has been experiencing that much movement, so any tools to track the travels of skilled 3000 pros can be useful. Let me recommend LinkedIn once again. The HP 3000 Community Group at the website -- and LinkedIn has started to specialize in finding people prospects for work -- well, the 3000 group began with a couple of questions that can still kickstart discussions. Again, the LinkedIn advantage is connecting to pros to share with specific work experience details, plus the chance to draw on others' networks through introductions.
Anybody can join for free. Since I launched the HP 3000 group in 2008, we've added 600 members in the group, and there are many others in the LinkedIn network with 3000 experience. Michael Boritz commented on our Group question back at the beginning about who's doing what with the HP 3000 these days.
Of course, this social networking stuff works, if you can just keep at it a few minutes a day. Us journalists are being told it's now essential if we want to keep our jobs in our field. Boritz tells of his stops along the way:
I’m still working on the 3000. I’ve been working on 3000s since the 1980s, at J.D. Abrams at that time. Since leaving JDA, I worked at Tivoli in Austin (i.e., Unison-Tymlabs) for a couple of years. Since then, I have moved four times — all for new HP 3000 positions.
I am currently in the Cleveland area, working at a Law firm, Weltman, Weinberg, and Reis, supporting their two legacy 3000s. I’ve been here since December, starting as a contractor, and becoming permanent in March. My current position is basically a programming position, supporting the legal documents created for the courts. It’s definitely different — I've never worked in the legal industry before.
Like most other shops, they are talking about migrating off the 3000 platform. It’s getting harder and harder to find 3000 jobs out there.
Put a little light labor into connecting with your community on LinkedIn. Staying in touch can make easier work of traveling between career stops.
August 15, 2014
The 3000's got network printing, so use it
Ten years ago this summer, HP's 3000 lab engineers were told that 3000 users wanted networked printing. By 2005 it was ready for beta testing. This was one of the last enhancements demanded as Number 1 by a wide swath of the 3000 community, and then delivered by HP. The venerable Systems Improvement Ballot of 2004 ranked networked printing No. 1 among users' needs.
MPEMXU1A is the patch that enables networked printing, pushed into General Release in Fall, 2005. In releasing this patch's functionality, HP gave the community a rather generic, OS-level substitute for much better third party software from RAC Consulting (ESPUL). It might have been the last time that an independent software tool got nudged by HP development.
The HP 3000 has the ability to send jobs to non-HP printers over a standard network as a result of the enhancement. The RAC third party package ties printers to 3000 with fewer blind spots than the MPEMXU1A patch. HP's offering won't let Windows-hosted printers participate in the 3000 network printing enhancement. There's a Windows-only, server-based net printing driver by now, of course, downloadable from the Web. The HP Universal Print Driver Series for Windows embraces Windows Server 2012, 2008, and 2003.
Networked printing for MPE/iX had the last classic lifespan that we can recall for a 3000 enhancement. The engineering was ready to test less than a year after the request. This software moved out of beta test by November, a relatively brief five-month jaunt to general release. If you're homesteading on 3000s, and you don't need PCL sequences at the beginning and end of a spool file, you should use it. Commemorate the era when the system's creator was at least building best-effort improvements.MPE/iX 6.5 was still being patched when networked printing rolled out. That's a release still in some use at homesteading shops. In contrast, plenty of later patches were only created and tested for the 7.0 and 7.5 PowerPatch kits.
Deep inside the Web is a white paper that former HP staffer Jeff Vance wrote, a guide he called "Communicator-like" after the classic HP technical documents. HP's taken down its Jazz repository of tech papers where NWPrinting.html once was available. But our open source software expert Brian Edminster tracked down that gem at the Client Systems website -- the company which was one of two to license HP's tech papers. You could check in with your independent support provider, to see if they've got the paper.
Networked printing was never as comprehensive as the indie solutions for the 3000, but at least it was delivered on the OS level via patches. The vendor still warned that adding new printers was going to be an uneven process.
HP will support this enhancement on a "best-effort" basis, meaning we will attempt to duplicate and resolve specific spooler problems -- but we cannot guarantee that all ASCII based printers are supported by this enhancement.
Of course, HP's support is long gone. But while best-effort might sound like a show-stopper so many years later, you'd be surprised how many printers of that 6.5 era are still attached at homesteading 3000 sites.
Where do you get the patch? That's where HP's still doing its work. These MPE/iX patches were given special dispensation from the pay-for-patches edict of 2010. They're still free by calling HP. That non-Windows printer and MPE might seem like old technology. But HP's still using telephones to enable the delivery of patches, so there's that Throwback -- and one you can find on days which are not Thursdays, too.
July 08, 2014
That MPE spooler's a big piece to replace
Migration transitions have an unexpected byproduct: They make managers appreciate the goodness that HP bundled into MPE/iX and the 3000. The included spooler is a great example of functionality which has an extra cost to replace in a new environment. Unlike in Windows with MBF Scheduler, Unix has to work very had to supply the same abilities -- and that's the word from one of the HP community's leading Unix gurus.
Bill Hassell spread the word about HP-UX treasures for years from his own consultancy. While working for SourceDirect as a Senior Sysadmin expert, he noted a migration project where the project's manager noted Unix tools weren't performing at enterprise levels. Hassell said HP-UX doesn't filter many print jobs.
MPE has an enterprise level print spooler, while HP-UX has very primitive printing subsystem. hpnp (HP Network Printing) is nothing but a network card (JetDirect) configuration program. The ability to control print queues is very basic, and there is almost nothing to monitor or log print activities similar to MPE. HP-UX does not have any print job filters except for some basic PCL escape sequences such as changing the ASCII character size.
While a migrating shop might now be appreciating the MPE spooler more, some of them need a solution to replicate the 3000's built-in level of printing control. One answer to the problem might lie in using a separate Linux server to spool, because Linux supports the classic Unix CUPS print software much better than HP-UX.The above was Glen Kilpatrick's idea as a Senior Response Center Engineer at Hewlett-Packard. Like a good support resource, Kilpatrick was a realist in solving the "where's the Unix spooler?" problem.
The "native" HP-UX scheduler / spooler doesn't use (or work like) CUPS, so if you implement such then you'll definitely have an unsupported solution (by HP anyway). Perhaps you'd be better off doing "remote printing" (look for that choice in the HP-UX System Administration Manager) to a Linux box that can run CUPS.
This advice shovels in a whole new environment to address an HP-UX weakness, however. So there's another set of solutions available from independent resources -- third-party spooling software. These extra-cost products accomodate things like default font differences between print devices, control panels, orientation and more. Michael Anderson, the consultant just finishing up a 3000 to Unix migration, has pointed out these problems that rose up during the migration.
My client hired a Unix guru (very experienced, someone I have lots of respect for) to set this up a year or more ago. They recreated all the old MPE printer LDEVs and CLASS names in CUPS, and decided on the "raw" print format so the application can send whatever binary commands to the printers. Now they have some complaints about the output not being consistent. My response was, "Absolutely! There were certain functions that the MPE spooler did for you at the device class/LDEV level, and you don't have that with CUPS on HP-UX."
Anderson has faith that learning more about CUPS will uncover a solution. "One plus for CUPS, it does make the applications more portable," he added.
There's one set of tasks can solve the problem without buying a commercial spooler for Unix, but you'll need experience with adding PCL codes and control of page layouts. Hassell explains:
Yes, [on HP-UX] it's the old, "Why doesn't Printer 2 print like Printer 3?" problem. So unlike the Mighty MPE system, where there is an interface to control prepends and postpends, in HP-UX you'll be editing the model.orig directory where each printer's script is located. It just ASMOS (A Simple Matter of Scripting). The good news is that you already have experience adding these PCL codes and you understand what it takes to control logical page layouts. The model.orig directory is located in /etc/lp/interface/model.orig
What Anderson needs to accomplish in his migration is the setup of multiple config environments for each printer, all to make "an HP-UX spooler send printer init/reset instructions to the printer, before and after the print job. In other words: one or more printer names, each configured differently, yet all point to the same device."
You won't get that for HP-UX without scripting, the experts are saying, or an external spooling server under Linux, or a third party indie spooler product.
3000 managers who want third party expertise to support a vast array of print devices are well served to look at ESPUL and PrintPath spooling software from veteran 3000 developer Rich Corn at RAC Consulting. Corn's the best at controlling spoolfiles for 3000s, and he takes networked printing to a new level with PrintPath. Plenty of 3000 sites never needed to know all that his work could do, however -- because that MPE spooler looks plenty robust compared to what's inside the Unix toolbox.
July 02, 2014
Co-op works out CHARON IO differences
Editor's note: Starting tomorrow it's a business holiday week's-end here in the US, so we are taking a few days to relax in a family reunion on the waters of a very well known Bay. We'll be back at our reporting on Monday.
At the Dairylea Cooperative in the Northeastern US, moving away from classic HP 3000 hardware to CHARON meant a bit of a learning curve. But the changes were something that even had a few blessings in disguise.
Moving files via FTP from the retired HP 3000 would be quicker and easier, said IT Director Jeff Elmer, "but of course it would require the physical box to be on the network. Getting our DLT 8000s to work with the emulator required some research, and some trial and error, but once you know the quirks and work around them, it’s actually quite reliable,” he said.
A new disaster recovery server had to be acquired. Dairylea purchased a ProLiant server identical to the one running what Elmer calls “our production emulator,” The DR emulator is installed it in the same city where the physical HP 3000 DR box was, complete with tape drives. Stromasys supplies a USB key for the DR emulator as part of the support fees; the key contains HPSUSAN and HPCPUNAME codes required to boot up MPE and other software. The key is good for 360 hours of DR operation “and it expires at the same time our annual support does.”Dairylea’s HP-branded 3000 was a 969 KS/100, but its CHARON install emulates an A500-200 model, “so in general our performance experience is about the same. There are some times in the month when we have enough going on that things seem a bit slower than the physical box was, but overall our experience with the emulator has been very positive.”
The company has had enough computing bandwidth to experiment using that ProLiant DR box, since it’s not in day-to-day use. This work has expanded the virtual capability of that system’s VMware installation.
“We did a physical-to-virtual conversion of the Red Hat environment for the HP 3000 emulator, so our DR emulator is now running under VMware and we shut down the dedicated ProLiant server,” Elmer said. VMware handles making the USB key available to the emulator. “While you do not want to vMotion a running HP 3000 emulator, it seems to be quite happy under VMware. We can access the remote ESX hosts via vSphere, start the Red Hat host, start the HP 3000 emulator, and do a restore of the most recent full backup, all without getting out of a chair.
Elmer noted that all of the 3000 backups go to disk since moving to the emulator. This has eliminated the need to have a tape mounted by IT staff.
“We store to a virtual tape drive that is a file in the Red Hat space,” he said. “Those full backups are automatically copied off to an FTP server that is automatically replicated to our DR site — so we now have two copies of each full backup, one at the production site and one at the DR site.”
June 30, 2014
Update: Open source, in 3000 ERP style
An extensive product roadmap is part of the OpenBravo directions for this open source ERP commercial solution
Five years ago today, we chronicled the prospects of open source software for HP 3000s. We mentioned the most extensive open source repository for MPE systems, curated by Brian Edminster and his company Applied Technologies. MPE-OpenSource.org has weathered these five years of change in the MPE market and still serves open source needs. But in 2009 we also were hopeful about the arrival of OpenBravo as a migration solution for 3000 users who were looking for an ERP replacement of MANMAN, for example -- without investing in the balky request-and-wait enhancement tangle of proprietary software.
Open source software is a good fit for the HP 3000 community member, according to several sources. Complete app suites have emerged and rewritten the rules for software ownership. An expert consulting and support firm for ERP solutions is proving that a full-featured ERP app suite, Openbravo, will work for 3000 customers by 2010.
[Editor's note: "We meant work for 3000 customers" in the sense of being a suitable ERP replacement for MPE-based software].
A software collective launched in the 1990s by the University of Navarra which has evolved to Openbravo, S.L., Openbravo is utilized by manufacturing firms around the world. Openbravo is big stuff. So large that it is one of the ten largest projects on the SourceForge.net open source repository, until Openbravo outgrew SourceForge. The software, its partners and users have their own Forge running today. In 2009, Sue Kiezel of Entsgo -- part of the Support Group's ERP consulting and tech support operations -- said, “We believe that within six to nine months, the solution will be as robust as MANMAN was at its best.”
From the looks of its deep Wiki, and a quick look into the labs where development is still emerging for advanced aspects such as analytics, Entsgo's premonition has come to fruition. Managing manufacturing is easily within the pay-grade of open source solutions like OpenBravo.What we reported on five years ago is no less true today. Open source is an essential part of enterprise IT by now, though. Entsgo's predictions were spot-on.
Open source solutions can span a wide range of organization, from code forges with revisions and little else to the one-stop feel of a vendor, minus the high costs and long waits. Openbravo is in the latter category, operating with hundreds of employees after having received more than $18 million in funding. If that doesn't sound much like the Apache and Samba open source experience, then welcome to Open Source 2.0, where subscription fees have replaced software purchases and partner firms join alongside users to develop the software.
Openbravo says the model is "commercial open source business model that eliminates software license fees, providing support, services, and product enhancements via an annual subscription." Entsgo says you have a company that supports it, and you can subscribe to it and verifies it, upgrades it and maintains it — all of that under one company name.
“In the 3000 community, we’re used to the independence of the open source model,” said Kiezel. “We’re used to tools that are intuitive, and if you look at us, we should be able to embrace open source more than any other community.”
Open source practices turn the enhancement experience upside down for an application. In the traditional model, a single vendor writes software at a significant investment for high profits, then accepts requests for enhancements and repairs. A complex app such as ERP might not even get 10 percent of these requests fulfilled by the average vendor.
The open source community around Openbravo operates like many open source enterprises. Companies create their own enhancements, license them back to the community, and can access bug fixes quickly—all because the ownership is shared and the source code for the app is open.
May 12, 2014
3000 world loses dauntless Dunlop carrier
Dunlop Tires are a brand from England known for their breakthrough as tires which bore their weight on air. The pneumatic tire was crafted by John Dunlop to prevent headaches for bicycle riders. All tires to that point -- the British call them tyres -- used solid rubber instead of inflated designs. The 3000 and MPE community had its own Dunlop for decades: John Dunlop, founder of the headache-busting HP3000links.com website. Dunlop is an HP 3000 pro of more than 30 years standing, and more than 20 of it he spent posting to and reading the wisdom on the 3000-L mailing list. Last week, Dunlop reported he's moving out of the world of the 3000, since his server at work has been decommissioned.
Yesterday I turned off the HP3000 918 for the final time. It became surplus to requirements, finally.
It had been humming away quite happily for the last several years without much in the way of maintenance, and it did what it does best, being one of the best and most reliable online transaction processors ever built. For durability and reliability, it was without peer.
A rather sad event seeing as I have been working on HP3000's for the last 30-plus years, although very little in the last year or so.
Dunlop has only retired his HP 3000 career, and retains his life as an IT pro. But for more than a good decade of his 30-plus years in the community, he carried vital links to 3000 information and technique from his labor-of-love website. HP3000links.com pumped up the skill level of MPE owners and managers. Dunlop dedicated his career to the 3000 in other ways as well.
In the middle of the prior decade, Dunlop served as the webmaster for the OpenMPE advocacy group. This was a time when that group was proposing paid membership. That website would have been essential to providing service to paid members. In the middle of the last decade, openmpe.com still had one of the most extensive lists of 3000 owners. Even without the paid membership, Dunlop was posting meeting minutes on the site during a period when there was close scrutiny of OpenMPE developments.
His own site was a lively circus-page of links to technical papers as well as a gateway to many 3000 websites of the past decade. "In spite of all the discussion about dwindling HP 3000 resources, the links I have pulled together and maintained are still available," Dunlop said in 2006, "and demonstrate that there is still a lot out there for the HP 3000 user." Dunlop acted as an editor while he maintained the site for more than a decade.
Four years ago he wondered why HP wanted to hang on to control of the 3000's configuration software after the vendor left the MPE market.
"There is software out there which will change HPSUSAN numbers," he said. "Surely HP would not be interested in chasing up anyone who used this software now, seeing as they have lost all interest in the HP3000?" Told that HP had just restated its forever-more control of SS_UPDATE -- the only 3000 support it will do on the record -- Dunlop replied, "I can't see why HP wants to retain control of this still, unless it's to try and milk a few more dollars out of the HP 3000 community."
The loss of a community member who knew the 3000 from the 1970s can feel like a death in the family, even though that person remains very much alive. The demise of HP3000links.com is very real, of course. Original material that it referenced is still alive on the web, in many cases. We did a survey of its vendor list during 2012, simply amazed at that time that it could have been so comprehensive.
Dunlop was signing off of 3000-L with his report. For years he's shared his wisdom while managing systems at Polimeri Europa UK Ltd. The company manufactures, among other things, synthetic rubber.
For many years, I have been mostly a lurker on this list but have benefitted greatly from the massed HP3000 knowledge so amptly demonstrated by the other members of this list. To all the contributors, much thanks for all your help over the years.
So, sadly, this will be my final post to the list as I will no longer be seeking help in HP3000-land. To all, best of luck. Cheerio!
One of his most notable contributions we could find in the 18-plus years of Newswire archives appeared in a 1999 article describing Posix startups under MPE/iX. The namespace for MPE which behaves most like Unix didn't always work properly on older systems:
Some sites are completely missing all of the HFS files (this is usually caused by an “incorrect” reload). From the MPE CI, try :LISTFILE /bin/. If no files are found, you will need to restore them from the FOS tape.
1. Restore the following from the tape:
2. :STREAM I0036431.USL.SYS
3. After I0036431 finishes,
All of the HP-supplied HFS files will be restored, and the directory structure and permissions set to the defaults.
Note: if you just want to restore all HFS files on a backup tape, try “:RESTORE /-@.@.@;SHOW;KEEP;OLDDATE;CREATE”.
May 01, 2014
3000 mailing list notes becoming fainter
Have you ever been down to your mailbox with anticipation, pulled open the door and find nothing new? The HP3000-L listserve, which we variously call the 3000 newsgroup and the 3000 mailing list, is having that kind of dry spell. Like the rainfall that we yearn for in Texas this spring, it's been close to two weeks since a single new note has been in that mailbox.
There's little point in comparisons but being the thieves of joy. However, the days of 1,500 messages a month were more joyful for the prospect of MPE and 3000 wisdom in those times, a torrent shared and shaped by a larger community. A goodly share of those messages, even in the heyday, covered the flotsam of politics, as well as more scandalous off-topic notes on climate science and treason. You could shop for a car or camera off of the advice, in those days.
The message count has drawn down despite a stable subscriber tally reported by the hosting system, servers at the University of Tennessee at Chatanooga. A little less than 600 readers are now receiving 3000-L mail. That is, however, the number of subscribers who were tallied nine years ago. And at least all of today's mail -- well, nearly all -- is related directly to HP 3000s. Off-topic noise has been all but eliminated.
We have a slavish devotion to the 3000-L, as the community veterans call it. Thousands subscribed to its messages for free, and I read that rich frontier of information in the early 1990s and could believe in a monthly newsletter for 3000s and MPE. We even devoted a column to summarizing and commentary about its traffic, for many years. John Burke was columnist for many years of those reports; the columns ran for more than 9 years in the printed edition of the Newswire. (Find them at the classic archives of the Newswire Tech Features, or type net.digest in our search page off the link at left.) Our caveat in passing along that expertise was "Advice offered from the messages here comes without warranty; test before you implement." If not for 3000-L, our last 18 years of work here might not have emerged.
A similar dry spell for the "L" took place in February, but the current one is the longest we've measured so far. It's simple enough to break the drought, simpler than what we face in Texas, anyway. Ask a question online -- you can do it via a web browser -- if you're subscribed (or sign up, from the website.) Then watch the wisdom echo back. In some ways, the L is like a canyon wall that won't speak until you shout out to it. Or futuristic drone robots, waiting for a command.In years past, the mailing list was also a newsgroup. By using newsgroup reading software, and then later using a browser, readers of comp.sys.hp.mpe could enjoy all the wisdom, and wince or chuckle at the chaff. Alas, the synchronizing of listserv and newsgroup has broken down by now. You could not get a specific number in those days about readers. You knew how many subscribed via emails. But comp.sys.hp.mpe could be read and used by countless others.
After the previous dry spell, readers could learn how to lock a KSAM file in PowerHouse Quick, or get advice on how to rebuild a 3000's filesystem. The former is an arcane bit of technical knowledge, yes, but the latter is everyday wisdom. And the L offers a dialogue process, to follow up with additional questions.
Like the drone robots Huey and Dewey from the sci-fi classic Silent Running -- a movie so old that Bruce Dern was young while he starred in it -- the L is likely to run long after most people will find an everyday use for it. In an apt coincidence, Silent Running made its premeire the same year that HP did its first Series 3000 launch, in 1972. The 3000-L looks back for its wisdom, while the direction in which that film looked gave a view of one kind of future. Nobody can be certain when either of these stories will see their final showing. The Web, after all, remembers all.
April 21, 2014
A week-plus of bleeds, but MPE's hearty
There are not many aspects of MPE that seem to best the offerings from open source environments. For anyone who's been tracking the OpenSSL hacker-door Heartbleed, though, the news is good on 3000 vulnerability. It's better than more modern platforms, in part because it's more mature. If you're moving away from mature and into migrating to open source computing, then listen up.
Open source savant Brian Edminster of Applied Technologies told us why MPE is in better shape.
I know that it's been covered other places, but don't know if it's been explicitly stated anywhere in MPE-Land: The Heartbleed issue is due to the 'heartbeat' feature, which was added to OpenSSL after any known builds for MPE/iX.
That's a short way of saying: So far, all the versions of OpenSSL for MPE/iX are too old to be affected by the Heartbleed vulnerability. Seems that sometimes, it can be good to not be on the bleeding edge.
However, the 3000 IT manager -- a person who usually has a couple of decades of computing experience -- may be in charge of the more-vulnerable web servers. Linux is used a lot for this kind of thing. Jeff Kell, whose on-the-Web servers deliver news of 3000s via the 3000-L mailing list, outlined repairs needed and advice from his 30-plus years of networking -- in MPE and all other environments.About 10 days after the news rocked the Web, Kell -- one of the sharpest tools in the drawer of networking -- posted this April 17 summary on the challenges and which ports to watch.
Unless you've had your head in the sand, you've heard about Heartbleed. Every freaking security vendor is milking it for all it's worth. It is pretty nasty, but it's essentially "read-only" without some careful follow-up.
Most have focused on SSL/HTTPS over 443, but other services are exposed (SMTP services on 25, 465, 867; LDAP on 636; others). You can scan and it might show up the obvious ones, but local services may have been compiled against "static" SSL libraries, and be vulnerable as well.
We've cleaned up most of ours (we think, still scanning); but that just covers the server side.
There are also client-side compromises possible.
And this stuff isn't theoretical, it's been proven third-party...
Lots of folks say replace your certificates, change your passwords, etc. I'd wait until the services you're changing are verified secure.
Most of the IDS/IPS/detections of the exploits are broken in various ways. STARTTLS works by negotiating a connection, establishing keys, and bouncing to an encrypted transport. IDS/IPS can't pick up heartbleed encrypted. They're after the easy pre-authenticated handshake.
It's a mess for sure. But it’s not yet safe to necessarily declare anything safe just yet.
Stay tuned, and avoid the advertising noise.
April 04, 2014
Save the date: Apr 16 for webinar, RUG meet
April 16 is going to be a busy day for MB Foster's CEO Birket Foster.
Long known for his company's Wednesday Webinars, Foster will be adding a 90-minute prelude on the same day as his own webinar about Data Migration, Risk Mitigation and Planning. That Wednesday of April 16 kicks off with the semi-annual CAMUS conference-call user group meeting. Foster is the guest speaker, presenting the latest information he's gathered about Stromasys and its CHARON HP 3000 emulator.
The user group meet begins at 10:30 AM Central Time, and Foster is scheduled for a talk -- as well as Q&A from listeners about the topic -- until noon that day. Anyone can attend the CAMUS meeting, even if they're not members of the user group. Send an email to CAMUS leader Terri Lanza at email@example.com to register, but be sure to do it by April 15. The conference call's phone number will be emailed to registrants. You can phone Lanza with questions about the meeting at 630-212-4314.
Starting at noon, there's an open discussion for attendees about any subject for any MANMAN platform (that would be VMS, as well as MPE). The talk in this soup tends to run to very specific questions about the management and use of MANMAN. Foster is more likely to field questions more general to MPE. The CHARON emulator made its reputation among the MANMAN users in the VMS community, among other spots in the Digital world. You don't have to scratch very deep to find satisfied CHARON users there.
Then beginning at 1 PM Central, Foster leads the Data Migration, Risk Mitigation and Planning webinar, complete with slides and ample Q&A opportunity.Registration for the webinar is through the MB Foster website. Like all of the Wednesday Webinars, it runs between 1-2 PM. The outline for the briefing, as summed up by the company:
Data migration is the process of moving an organization’s data from one application to another application—preferably without disrupting the business, users or active applications.
Data migration can be a routine part of IT operations in today’s business environment providing service to the whole company – giving users the data they need when they need it, especially for Report, BI (Business Intelligence) or analytics (including Excel spreadsheets) and occasionally for a migration to a new application. How can organizations minimize impacts of data migration downtime, data loss and minimize cost?
In this webinar we outline the best way to develop a data conversion plan that incorporates risk mitigation, and outlines business, operational and technical challenges, methodology and best practices.
The company has been in the data migration business since the 1980s. Data Express was its initial product to extracting and controlling data. It revamped the products after Y2K to create the Universal Data Access (UDA) product line. MBF-UDACentral supports the leading open source databases in PostgreSQL and MySQL, plus Eloquence, Oracle, SQLServer, DB2, and TurboIMAGE, as well as less-common databases such as Progress, Ingres, Sybase and Cache. The software can migrate any of these databases' data between one another.
April 01, 2014
New MPE 8.0 includes cutting-edge remotes
Almost 10 years after the last update to MPE/iX -- the PowerPatch 2 of release 7.5 -- a new version of the operating system is emerging. What's being called MPE/iX 8.0 by the World OS ID board has begun to surface from the rogue collective of open source coders known as ReBoot.me, which has a website based in Macedonia.
It's not known as this point how ReBoot.me got its hands on MPE/iX source code, but the modifications to the OS appeared to be demonstrated on an HP L-Class server. The new version was captured in a video released for a few hours on YouTube, but removed from North American, Asian, African, European and all Middle Eastern YouTube users. This 8.0 MPE/iX can still be viewed in a demo from viewers in the Bahamas, or any location that employs the domain .bs.
The secrecy appears to stem from some first-ever features on any operating system. Much like the groundbreaking memory space allocation of MPE/XL, the 8.0 release -- ReBoot.me calls it New MPE -- supports cloud hang time, self-repairing line breaks, and the manipulation of drone clusters. Seynor Blachboxe, the code-named spokesperson for the open sourcers, said the drone support was a late addition, one that helped fund the entire project.Drone manipulation is a nascent computer science, even in 2014, Blachboxe said. His claims echo those of AeroVironment, a US defense contractor building bird-sized drones to extend government surveillance. With its roots running back to the real-time capabilities of RTE, the MPE DNA made it ready for the surveillance of hundreds of thousands of Drone Jobs simultaneously. ReBoot called these instances Hand Offs.
The cloud hang time feature automates and monitors any service interruptions that may be caused by meterological impacts, according to the ReBoot team. The New MPE does a constant rebuild of its accounts structure while handling intensive IO requests, making the software able to restore to its latest stateless image in a matter of millseconds during an interruption.
"You won't be able to see the downtime, and you won't be able to see the drones, either," Blachboxe said on the YouTube video. "This entire release is really about not seeing anything new that's happening within MPE." Licensing battles look like they may be highly visible, however, since ReBoot was not among the eight licensed owners of the MPE/iX source code released during 2010.
The open sourcers appeared to be unfazed by the prospect of battling Hewlett-Packard over rights to a product it no longer sells or supports. Citing a list of legal projects and management efforts tied to more critical needs for the vendor, the coding group said it doesn't expect a challenge that will be recognized in its sovereign nations.
"Winning that lawsuit wouldn't contribute enough to HP's bottom line to make their investors happy with the legal expense," Blachboxe said.
Eager beta testers managed to download a handful of builds for the New MPE during the hours that the YouTube video was first visible. These releases could only be activated -- by use of an HP 792 terminal attached to an HP Cloud partition -- during the rolling 24 hour period of 04-01-14, as recognized in the vicinity of coordinates -49.591071, 69.497378, (click on map at right for detail) using the UTC +5:30 as a base. A beta-test version of 8.0 includes the first access to GPS coordinates, to locate a user's system and authorize the download, Blachboxe explained.
"If a user can't figure that out, they won't be of the caliber of computer professional we'd like to test this release," he said. "It's New MPE, after all."
March 03, 2014
Cloudy night shows that it's Magic Time
Server drives churn, routers flash, and time machines transport us through the power of stories. In our own community we are connected by wires and circuits and pulses of power. We always were, from days of black arts datacomm pushing data on cards of punched paper. We’ve lived through a glorious explosion of ideas and inspiration and instruction. It’s the movie that always has another story in waiting, this Internet. So ubiquitous we’ve stopped calling it by that name. In 2014, 40 years after MPE became viable and alive, the World Wide Web is named after an element common throughout the physical world: The Cloud.
And through the magic of these clouds come stories that lead us forward and allow us to look back at solved challenges. My partner Abby and I sit on the sofa these days and play with paper together, crossword puzzles, especially on weekends with the New York Times and LA Times puzzles. We look up answers from that cloud, and it delivers us stories. The Kingston Trio’s hit BMT leads us to The Smothers Brothers, starting out as a comic folksinger act. After video came alive for the HP 3000 in HP strategy TV broadcasts via satellite, there were webinars. Today, YouTube holds stories of the 3000’s shiniest moment, the debut of the ultimate model of that server.
Last night we sat on another couch in the house and watched the splashiest celebration of stories in our connected world, the Academy Awards. Despite racking up a fistful and more of them, Gravity didn’t take the Best Picture prize. You can have many elements of success, parts of being the best, and not end up named the winner of the final balloting. The 3000 saw a similar tally, a raft of successes, but the light began to fade. In the movies they call the last light of the day magic time, because it casts the sweetest shades on the players and settings.
It’s magic time for many of the 3000’s stalwart members of its special academy. The 3000’s remaining a time machine in your reaches of space. Data is like gravity, a force to unify and propel. MPE systems contain ample gravity: importance to users, plus the grounding of data. It becomes information, then stories, and finally wisdom.
And in our magic time, we are blessed with the time machine of the Web, the cloud. You can look up earlier wisdom of this community online, written in stories, illustrated in video, told via audio. Find it in the cloud at the following resources:
Plus, the companies that have kept websites stocked with stories about how to keep the magic lantern light of your system flashing onto screens. I’m grateful to have been part of that set of producers, directors and writers for the screen. It’s an exciting time to be able to move paper, as well as move beyond it with the speed of electrons. We’ve all grasped the tool of the Web with our whole hearts — even while we remember how to gather in a room like all those moviemakers did, to remember. There are many ways to honor the art of our story.
February 12, 2014
How Shaved Sheep Help Macs Link to 3000s
The HP 3000 never represented a significant share of the number of business servers installed around the world. When the system's highest census was about 50,000, it was less than a tenth of the number of Digital servers, or IBM System 36-38s. Not to mention all of the Unix servers, or the Windows that began to run businesses in the 1990s.
If you'd be honest, you could consider the 3000 to have had the footprint in the IT world that the Macintosh has in the PC community. Actually, far less, considering that about 1 in 20 laptop-desktops run Apple's OS today. Nevertheless, the HP 3000 community never considered Macs a serious business client to communicate with the 3000. The desktops were full of Windows machines, and MS-DOS before that. Walker, Richer & Quinn, Tymlabs, and Minisoft took the customers into client-server waters. All three had Mac versions of their terminal emulators. But only one, from Minisoft, has survived to remain on sale today.
That would be Minisoft 92 for the Mac, and Doug Greenup at Minisoft will be glad to tell a 3000 shop that needs Mac-to-3000 connectivity how well it hits the mark, right up to the support of the newest 10.9 version of the OS X. "Minisoft has a Macintosh version that supports the Maverick OS," Greenup said. "Yes, we went to the effort to support the latest and greatest Apple OS."
But there were also fans of the WRQ Reflection for Mac while it was being sold, and for good reason. The developer of the software came to WRQ from Tymlabs, a company that was one of the earliest converts to Apple to run the business with, all while understanding the 3000 was the main server. The first time I met anyone from Tymlabs -- much better known as vendor of the BackPack backup program -- Marion Winik was sitting in front of an Apple Lisa, the precursor to the Mac. Advertising was being designed by that woman who's now a celebrated essayist and memoir writer.
What's all that got to do with a sheep, then? That WRQ 3000 terminal emulator for the Mac ran well, executing the classic Reflection scripting, but then Apple's jump to OS X left that product behind. So if you want to run a copy of Reflection for Mac, you need to emulate a vintage Mac. That doesn't require much Apple hardware. Mostly, you need SheepShaver, software that was named to mimic the word shape-shifter -- because SheepShaver mimics many operating environments. The emulation is of the old Mac OS, though. It's quite the trick to make a current day Intel machine behave like a computer that was built around Apple's old PowerPC chips. About the same caliber of trick as making programs written in the 1980s for MPE V run on Intel-based systems today. The future of carry-forward computing is virtualization, rooted in software. But it's the loyalty and ardor that fuel the value for such classics as the 3000, or 1990-2006 Macs.Barry Lake of Allegro took note of SheepShaver as a solution to how to get Reflection for Mac to talk to an HP 3000. The question came from another 3000 vet, Mark Ranft.
I've been looking for a copy of Reflection for Mac. It is no longer available from WRQ/Attachmate. I've looked for old copies on eBay without any luck. Does anyone know where a copy may be available, and will it still run on OSX Mavericks (10.9)?
It was possible to run the "Classic" versions of Reflection under OS X up through Tiger (10.4). Sadly, Apple dropped Classic support in Leopard (10.5). The only way to run Classic apps now is in some sort of virtual environment. I've been doing this for many years, and quite happily so, using SheepShaver.
But you have to find a copy of the old Mac OS ROM somewhere, and have media (optical or digital) containing a Classic version of Mac OS.
As with so many things that were once sold and supported, the OS ROM can be had on the Web by following that link above. That Mac OS ROM "was sort of a 'mini operating system' that was embedded in all the old Macs, one which acted as an interface between the hardware and the OS," Lake explains. "It allowed a standard OS to be shipped which could run on various different physical machines.
Modern operating systems simply ship with hundreds of drivers -- most of which are never used -- so that the OS (might be Windows or linux or even Mac OS X) is able to run on whatever hardware it happens to find itself on. But this of course, has resulted in enormous bloat, so the operating systems now require gigabytes of storage even for a basic installation.
The beauty of the old Mac OS ROM is that the ROM was customized for each machine model, so that endless drivers didn't have to be included in the OS, and therefore the OS could be kept small and lean.
Lake said that althought using SheepShaver to run the favorite 3000 terminal emulator "took a modest effort to set up, it has been working beautifully for me for years. And yes, it works on the Intel Macs (the Power PC instruction set is emulated, of course)."
So here's an open source PowerPC Apple Macintosh emulator. Using SheepShaver (along with the appropriate ROM image) it is possible to emulate a PowerPC Macintosh computer capable of running Mac OS 7.5.2 through 9.0.4. Builds of SheepShaver are available for Mac OS X, Windows and Linux
February 07, 2014
Code-cutter Comparing Solutions for 3000s
When a 3000 utility goes dark — because its creator has dropped MPE/iX operations, or the trail to the support business for the tool has grown faint — the 3000 community can serve up alternatives quickly. A mature operating system and experienced users offer options that are hard to beat.
One such example was Aldon Computing's SCOMPARE development tool, once a staple for 3000-based developers. It compared source files for more than 15 years in the HP 3000 world. Eventually Aldon left the MPE business. But there are a fistful of alternatives. Allegro Consultants offers a free MPE/iX solution in SCOM, located at
At that Web page, scroll down to SCOM. Other candidates included a compare UDC from Robelle, GNU Diff, diff in the HP 3000's Posix environment, and more. If you're willing to go off the MPE reservation -- and a lot of developers work on PCs by now -- there's even a free plug-in for Notepad++, that freeware source code editor which relaces Notepad in Windows. You can download that plug-in as an open source tool at SourceForge.net
When the subject first surfaced, Bruce Collins of Softvoyage offered details on using diff in the HP 3000's Posix.
run diff.hpbin.sys;info="FILE1 FILE2"
The file names use HFS syntax so they should be entered in upper case. If the files aren't in the current account or group, they should be entered as /ACCOUNT/GROUP/FILE
Donna Hofmeister offered a tip on using Robelle's compare UDC:
Regarding Robelle's compare. Being a scripting advocate, I strongly recommend adapting their UDC into a script.... and take a few seconds to add a wee bit of help text to the script, to make life more enjoyable for all (which is the reason for scripting, yes?)
Other environments that might be operating in the 3000 datacenter provide alternatives. Former HP engineer Lars Appel brought up a Linux option in the KDE development environment:
If using KDE, you might also find Kompare handy...
http://en.wikipedia.org/wiki/Kompare (see screenshot)
On MPE, as others mentioned, there is still the Posix diff in two flavours: the HP-supplied in /bin and the GNU version that lives in /usr/local/bin. The former allows two output formats (diff and diff -c); the latter also allows “diff -u”.
Oh, regarding /bin/diff on MPE... I sometimes got “strange” errors (like “file too big”) from it when trying to compare MPE record oriented files. A workaround was to use tobyte (with -at options) to created bytestream files for diff’ing.
Appel has noted the problem of comparing numbered files, like COBOL source files, when one or both files have been renumbered.
With Posix tools, one might use cut(1) with -c option to “peel off” the line number columns before using diff(1) for comparing the “meat”. Something in the line of ... /bin/cut -c7-72 SourceFile1 > BodyText1.
February 04, 2014
Making Domain Magic, at an Efficient Cost
Five years ago, HP cancelled work on the DNS domain name services for MPE/iX. Not a lot of people were relying on the 3000 to be handling their Internet hosting, but the HP decision to leave people on their own for domain management sealed the deal. If ever there was something to be migrated, it was DNS.
But configuring DNS software on a host is just one part of the Internet tasks that a 3000-savvy manager has had to pick up. One of the most veteran of MPE software creators, Steve Cooper of Allegro, had to work out a fresh strategy to get domains assigned for his company, he reports.
We have been using Zerigo as our DNS hosting service for a number of years now, quite happily. For the 31 domains that we care for, they have been charging us $39 per year, and our current year has been pre-paid through 2014-08-07.
We received an e-mail explaining exciting news about how their service will soon be better-than-ever. And, how there will be a slight increase in costs, as a result. Instead of $39 per year, they will now charge $63 per month. A mere 1900% increase! And, they won't honor our existing contract either. They will take the pro-rated value of our contract on January 31, and apply that towards their new rates. (I don't even think that's legal.)
In any case, we are clearly in the market for a new DNS Hosting provider. Although I am not a fan of GoDaddy, their website. or their commercials, they appear to offer a premium DNS Hosting service, with DNSSEC, unlimited domains, etc. for just $2.99 per month. Sounds too good to be true.
Cooper was searching for experience with that particular GoDaddy service. GoDaddy has been a default up to now, but acquiring a domain seems to need more tech savvy from support. The 3000 community was glad to help this other kind of migration, one to an infrastructure that MPE never demanded. The solution turned out to be one from the Southern Hemisphere, from a company whose hub is in a country which HP 3000 experts Jeanette and Ken Nutsford call home.Cooper said that some 3000 vets suggested "rolling my own," self-hosting with his external DNS. Here's a few paragraphs addressing those two topics:
We have a dual-zoned DNS server inside our firewall, but we do not have it opened to the the outside world. Instead, only our DNS hosting service has access to it. The DNS hosting service sees itself as a Slave server and our internal server as the Master server. However, our registrars point to that external DNS hosting service, not our internal server, so the world only interrogates our DNS hosting service when they need to resolve an address in one of our 31 domains.
Why don't we open it up to the world? Well, we get between 200,000 and 3,000,000 DNS lookups per month. I don't want that traffic on our internal network. There are also DDoS attacks and other exploits that I want no part of. And, since some of our servers are now in the Cloud, such as our mail, webserver, and iAdmin server, I don't want to appear to disappear, if our internet connection is down. Best to offload all of that, to a company prepared to handle that.
When I need to make a change, I do it on our internal DNS server, and within a few seconds, those changes have propagated to our DNS hosting service, without the need for any special action. The best of both worlds.
Now, on to the issue from earlier in the month. Our DNS hosting service, Zerigo, announced that they were raising rates by 1900%. And, our first attempt at a replacement was GoDaddy. Although the information pages at GoDaddy sounded promising, they made us pay before we could do any testing. After three days of trying to get it to work, and several lengthy calls to GoDaddy support, they finally agreed that their service is broken, and they can't do what they advertised, and refunded our money.
The biggest problem at GoDaddy is that I (as the customer) was only allowed to talk to Customer Service. They in turn, could talk to the lab people who could understand my questions and problems. But the lab folks were not allowed to talk to me, only the Customer Service people. This is not a way to do support, as those of us in the support business know full well.
After more research, I hit upon what appears to be a gem of a company: Zonomi. They are a New Zealand based company with DNS servers in New York, Texas, New Zealand, and the UK. And, they let you set up everything and run with it for a month before you have to pay them anything. We were completely switched over with about an hour of effort.
Now, the best news: they are even cheaper than our old DNS hosting service used to be. If you have a single, simple domain, then they will host you for free, forever. If you have a more complex setup, as we do, the cost is roughly US $1 per year, which beats the $63 per month Zerigo wanted to charge. The first ten domains cost $10 per year, then you add units of five more domains for $5 per year.
The only risk I can see is if they go out of business. In that case, I could just open our firewall and point our domains to our internal server, until I could find a replacement. So, that seems reasonable.
That problem is solved. On to the next fire.
October 23, 2013
A Place to Make Plans for Transition
Websites offer a world of advice on how to move toward the future with ease. There's nothing easier than tapping a webinar to find out more about making an HP 3000 transition. And no company has even come within several leagues of teaching with webinars like MB Foster does.
Wednesdays are the regular date, with the presentations starting at 2PM Eastern US time. Today's talk, with an interactive segment as well (Birket Foster asks for questions throughout) is on Application Decommissioning. Even at a place where the 3000 is likely to run another four years, like MacLean-Fogg manufacturers, a custom MPE app will go out of production mode, someday.
Today's talk (register at the MB Foster website, and get your audio via IP or phone) focuses on the legacy data process and compliance issues in your plans for such a decommission. That data will be moving forward, just as surely as those disk packs at MacLean-Fogg moved on to the next 3000 after a flood. Data always moves onward, but it's no easy task without planning.
"In a time when cost cutting is a necessity, decommissioning legacy application data offers companies cost savings, and resource efficiencies," Foster's website proposes, "all while meeting compliance for your business and legal requirements to retain and access data."
The company's been illuminating the key issues that can serve both homesteading and migration missions. Sometimes this kind of modernization serves homesteading, and then modernization. The list of what's been covered over the last five years of webinars is impressive. There's two more on the way, November 6 and November 20.
November 6 covers Automating Windows Processes and Batch Jobs: learn how you can automate windows processes and manage data processing jobs (scripts), view output, maintain complex scheduling dependencies and relationships easily and effectively. People try to do this after a transition using Windows Task Manager, which lets you schedule many tasks. It's no substitute for the power and control you enjoyed on the HP 3000.
On November 6 the webinar covers Measuring for Meaning, KPI's, Dashboards and ODS. That last acronym stands for Operational Data Stores. KPIs provide visibility into a business’s vital signs, using metrics and dashboards. Moving to bigger-scope IT, which is usually part of a migration or modernization, introduces an IT pro to these strategies.
Many other subjects have been part of the webinar curriculum. Data migration challenges, including a live demonstration of a copy between an HP 3000 IMAGE database to a SQL Server database. Another talk shared data migration best practices. Last year you could learn about the advances in the new Eloquence database and language. The drop-in replacement for IMAGE at migrating 3000 sites gained full text search in the database.
There was a look at the elements of Big Data as they relate to IT planning. For homesteaders, issues got examined on how to transition supporting your customer applications for HP 3000s. 3000 sites are still renewing commitments to using the server for another 3-5 years. A company with experience in serving customers through applications can help companies extend the life of their systems.
There's also been scheduling challenges for Windows managers, synchronization of data. Tips on decommissioning of data. How to plan for Mean Time To Recovery of Operations. Spend about 45 minutes on some Wednesday, today or soon, and get to the place where transition planning sets up shop.
October 14, 2013
Support paywall can seem to hide manuals
We're investigating another point of confusion between HP's MPE/iX and 3000 manuals and the 3000 community. Donna Hofmeister, one of the former OpenMPE directors who heard HP's promise to keep these manuals available to the general public, emailed us this report.
It appears that HP has cut off public access to the MPE manuals. If you use HP's link through its Business Support Center, and go thru a couple of clicks... you'll eventually be asked for support credentials.
In my opinion, this shouldn't be the case for MPE manuals (since, after all, who has HP's MPE support anyhow?). HP agreed to continue to allow access to the MPE things (including patches) when they vendor was negotiating with OpenMPE.
Hofmeister noted that the patches are still available for free. The good news is that the 3000 community has been compiling the manuals outside HP's servers, just to ensure the vendor kept its promise of open access to 3000 documentation. And there is a more concealed path into the manuals today. Just not through the front door Hofmeister was using.
Straight to the point, things are changing in the HP support operations and its access for users. A support contract might be required, in HP's confusion over the 3000's place on the website, if you head in through the wrong address. Or read a recent HP email.Last week the HP enterprise computer users received an email that proclaimed the patches and other support materials for servers like the Integrity line and its operating environments would only be available to users who had a current support contract with HP. Hewlett-Packard doesn't support the 3000 or MPE anymore -- a fact the vendor reminded users about constantly in the months leading to the end of support in December, 2010.
So there's no way to pay for support that would deliver access to MPE materials. Which is why HP told OpenMPE and the 3000 community the access would be free.
Independent support companies, third parties and adept managers have been squirreling away the manuals for years by now. In addition to a core set of manuals at yet another HP website address, linked to by Applied Technologies via a direct link off mpe-opensource.org, MM Support has a wide array of these manuals for download. MM Support, a group of 3000 veterans who created the MM/3000 ERP software, says it's hosting these documents, organized by function as well as alphabetically, because of "the great love we have for the HP 3000."
The following list is a beginning. We have laid the HP 3000 MPE Manuals out in a manner that is friendly to use. We will try and have both HTML and PDF format for the HP3000 Manuals.
As we've noted, MPE patches seem to be available without support credentials. Hofmeister says you need a lot of patience. You're likely to get asked about the HP 3000 latex printer a few times.
I'm still sending people to HP to get patches. Last one was maybe a month ago. The process seems to work, although I always caution them to be prepared to be patient. Getting through the front-line call handlers can be difficult :-(
I suspect many people downloaded all the patches while the FTP site was still available. But in my opinion, they'd be well advised to at least be very careful about who they give these patches to, since HP seems to be in a litigious mood.
October 11, 2013
The Comment-y Stylings of Tim O'Neill
Comment sections of blogs are usually tar pits of abusive and misdirected retorts. I feel lucky that comments on the Newswire's blog have been otherwise, for the most part. On many tech blogs the comments that follow a story devolve at lightning pace into rants about the NSA, partisan politics, the insulting disappointments of Windows/Apple/Google, or the zen koan of climate change.
Tim O'Neill has lifted up the reputation of commenting to an enabling art. The manager of a 3000 system in Maryland, he's become prolific in his messages that echo or take a counterpoint to the stories we run here. His comment count is running at 15 over just the past five months. For our unique but modest-sized outpost of 3000 lore and learning, that's a lot. He's got a comment for almost one in every five stories.
HP's actions of 12 years ago are still a sore point with some 3000 managers. Count O'Neill among them. We ran a story yesterday about HP's best case scenario for 2014: it will lose sales more slowly than this year. Some new products will get R&D focus. Pockets of sales growth will pop up. Overall, less revenue, for yet another year.
O'Neill shot off a comment within an hour of our story.
This does not sound too hopeful, if the best they can promise is slowing the rate of revenue decline while at the same time spending $3B on R&D. At the same time, they have essentially no cutting-edge mobile products (and no WebOS,) a stagnant flagship OS (HP-UX, no new releases in about a decade) a second flagship OS sentenced to death (OpenVMS -- HP finally kills the last of the DEC that they hated for decades) and shuttered sales and support offices (relying on VARs and the Web for sales, instead of interpersonal interaction.)
O'Neill never fails to note that a retained 3000 business would be helping HP, even today. "Meanwhile, the long-ago-jilted MPE lives on, ancient LaserJets continue to crank out print jobs and make money for toner refillers (I still have LJ 2000 and 4000 series printer in service,) and digital signal generators (HP, not Agilent) still generate signals. They do still make nice new printers. Maybe they should buy Blackberry to get into the smartphone business."
It's great to have a chorus behind you when reporting on one 3000 news item after another. It's even better when there's a consistently different-sounding voice on webpages. If there was an Andy Rooney position on the 3000 Newswire's stable of contributors, O'Neill could fill that post.When my story this week noted that a few N-Class servers, to be mothballed at HP's datacenter next week, would be available for purchase, O'Neill took another tack.
Customers should not be buying cast-off 3000s if they can help it. Instead, they should be ramping up for the future and buying Stromasys-ready hardware.
O'Neill has left fat pitches for other readers to comment upon. "I wonder if anybody still has an HP 150?" Or "Does anybody remember the name of the company that was marketing a wireless 3000 terminal in the late 1980s?" Then there are these comments below, in response to articles about the HP Computer Museum needing older computers, or a new iPad app that gives the 3000 user a wireless terminal for apps or console work.
Well I think the Terminal-on-a-Tablet is a great idea, and gosh we could have really used that and a wireless link 10 years ago when we needed to constantly interact with MPE. I can see great usefulness for people who are using MPE actively, e.g for inventory. It gives one more reason to stay with MPE and one more reason to buy Stromasys boxes on which to run MPE.
Gosh, I wonder if anyone still has a HP 150? It was coolest thing! But people here only used it for a terminal!
O'Neill can also find a silver lining in a report about two 3000 experts replacing themselves (due to age) and moving off an app built long ago.
This article amply demonstrates that: 1) MPE is extremely good at OLTP and business management processes, and is not easily replaced 2) MPE is very cost-effective (e.g. this company had to increase staff after MPE, and 3) "Migration" is incorrect terminology, and vendors made a lot of money, once, by doing it. Now, "if only" a consortium such as a modern-day OpenMPE or OSF could be created, to take command!
Not too many readers remember, or can put into context, the aims of the OSF (the Open Software Foundation) as they related to the HP 3000. OSF was about putting common software platforms in place across Unix servers from many vendors. HP did hope that Posix on MPE would help port some software to the 3000. Both projects fell short of such hopes. O'Neill is hopeful in a way I've rarely seen about the prospects for a rebound of MPE.
I say that with the advent of Stromasys and the interest from application developers who wrote for the HP 3000, there is now the opportunity for the community to form a company to begin marketing MPE/iX. The world is ready for a stable, secure, alternative to the out-of-control Linuxes and the costly well-known operating systems.
He has observations on the differences in vendors serving his company, sparked by news that HP's taken a dive out of the Dow 30.
"Dive" is being kind. They were thrown out. As an example of their inablity to market themselves, the following is illustrative. Next week Dell Computer will host a technical day at our facility. This will be the second such day in the past six months. Customers go and hear the latest. HP has equal opportunity to rent the space, purvey the lunch, and pitch their wares to willing listeners. HP does not do it. Too few sales people spread too thin?
It's been nice to be noticed, but as you can see from the comment string off our front page, not all of it has been complimentary. Recent reporting on OpenMPE got rapped by a pair of principals who were onstage at the end of the organization's activity. But the rarest of things, outright praise for memories, appeared after I wrote about what we all miss from the August HP conferences of our past years.
It is poignant and evocative, meaning if I were an emotional person, it would have brought me to tears. I actually attended the [August] 1996 show in Anaheim! There I had the privilege of speaking with Fred White, who predicted the demise of MPE while on the sidewalk outside the convention center, as well as the subsequent demise of HP-UX. (When was the last new release of HP-UX? Years ago, right?) You wrote that Interex (later HP World) always left people "invigorated, rededicated or just stirred up." True. "Rededicated" rhymes with "medicated" which, nowadays, we HP 3000 people feel as though we need to be! It will be interesting to see how Stromasys emulation will work with VMWare, of which we are heavy users.
I invite you to write a comment for your own pleasure and our information. Whether you shoot this messenger or toss kudos, it will make its way into our shared story.
October 04, 2013
HP's documents for 3000s are in the open
Yesterday we bemoaned the lack of working, sensible links for 3000 documents at Hewlett-Packard websites. Links go rotten all the time on the Web. But you'd hope that an enterprise computer vendor might put a better face out there about products it still controls. Well, at least the control of the intellectual property rights.
Give thanks for your independent community, because that's where the elusive information has washed up, like a survivor from a vendor's shipwreck. Brian Edminster updated us on where those 3000 and MPE documents can be found. It's not an HP website. Yesterday I wrote, "The whereabouts of MPE manuals at HP sites is a treasure hunt with no apparent prize at the moment." Edminster replied
Edminster goes on to offer " a direct link for the menu challenged among us"
I can help with this. www.MPE-OpenSource.org has the current links to the HP MPE/iX manuals.
Navigation via the menus/pulldowns is: (from the site's homepage at MPE-OpenSource.org:)
[Manuals & Other] Documentation Materials
[MPE/iX Core Manual Sets] - which has individual links to the 6.x and 7.x manual sets, and which when clicked will open in a new window.
And when they do finally fall to the dreaded 'link-rot' (either due to lack of link forwarding, or just plain being taken offline), I have mirrored both v6.x and v7.x manual pages and content, and can make them available directly, if necessary.
There's also the HP MM Support site's copy of HP Manuals (www.hpmmsupport.com/information_links/default.aspx). Plus I'm pretty sure there's a copy at the 'Internet Archives' (www.archive.org) and/or at bitsavers (www.bitsavers.org). Of course, there's copies that individuals have in PDF format in their own archives -- or heaven forbid, in the original printed-on-paper format.
So no need to panic. There are still organizations and individuals working to make sure MPE and 3000 documentation is available, for as long as necessary.
October 03, 2013
HP's missing notes as Jazz plays on for 3000
Information that HP licensed for its Jazz support server lives on at two North American HP 3000 vendor sites. While items like white papers and instructions remain intact at Freshe Legacy (formerly Speedware) and Client Systems, the links at Hewlett-Packard references for the 3000 are playing like they're off-key notes.
Jazz is the accepted name for a collection of papers, downloads and software instructions first created by Jerri Ann Smith in the HP 3000 labs. Nicknamed after her initials JAS, Jazz grew full of free help during the 1990s as the vendor worked to sustain its MPE business and service its customers.
When HP closed down the labs that maintained Jazz, it licensed the use of these materials to Fresche and to Client Systems. Much of the material remains useful for the 3000 manager who's sustaining a server in homesteading or pre-migration missions. But a click on many links to HP drives users to a Hewlett-Packard technical documentation website where the 3000 knowledge is buried deeper than all but the most patient or seasoned owners can uncover.
Even a request to establish an HP Passport account, which might yield more information, generates an Internal Server Error from Hewlett-Packard today. Everybody's website can have this kind of problem from time to time, but standards for the maker and caretaker of an operating system should be higher than nearly everybody.At the Fresche Legacy site -- known as hpmigrations.com -- a white paper on a Posix scanner is among the software listed.
A Posix scanner? It's a toolkit "that is useful to analyze an application you may want to port to the HP3000. In two steps, external functions called by the code are collected and then reduced into a report showing which functions are or are not available on MPE/iX."
Perhaps of more use to those who aren't porting to MPE is the VT3K software, which links a 3000 with a server HP was calling an HP 9000. That 9000 should be running HP-UX 10.20, a genuinely antique release of HP's Unix.
VT3K allows you to establish a Virtual Terminal connection from a HP9000 to a HP3000. This version of VT3K is being made available to those HP3000 users that are planning on using HP OpenView IT/Operations to manage their HP3000 systems. This version of VT3K is supported on HP-UX servers running 10.20. VT3K is required in order to install the IT/Operations MPE agent on the HP3000.
Fresche isn't responsible for the condition of the links to HP's documentation on the 3000 however, those listed under Jazz at its server. www.docs.hp.com/mpeix/all returns nothing but 404 Not Found connections. The whereabouts of MPE manuals at HP sites is a treasure hunt with no apparent prize at the moment.
But at the Jazz sites you can find SETDATE, which alters the date in a current session under MPE/iX. The sell-by date for HP's links is in such a state that a support company guide might be the only way to uncover what used to be open and hosted by the 3000's creator. Any link that can deliver a document from the licensed independent companies is operative. But a wall of inscrutable web links appears in any reference to HP's own websites.
August 13, 2013
Glossary to the Future: ITIL, APM, and rank
A 3000 manager's career was once rooted in technology. In the future it will be rooted in management, even when the 3000 in the datacenter is a virtualized one. The most secure place to manage IT is on an executive team. ITIL and APM can help get you earn enough rank to get a seat at that table. (Rank, not stripes, but we'll get to that in a minute.)
Tomorrow, MB Foster offers a webinar on these two concepts. One is a standard (ITIL) and the other a strategy (Application Portfolio Management). Both are designed to make your work more essential to your employer.
"The challenge for IT is adopting a business- and customer-focused approach in terms of delivering high quality IT services," Foster's invitation explains. "Information Technology Infrastructure Library (ITIL) mitigates these challenges."
Application Portfolio Management (APM) provides IT departments and management visibility and clearly defines insight into critical applications and data with actionable information on the business value and fit and the technical condition of each application.
The webinar starts at 2PM EDT tomorrow, with an online signup at Foster's website. When combined, ITIL and APM provide guidance to organizations on how to use IT to facilitate business change, transformation, growth and benefits -- and where to focus investment. It's an interesting time for enterprise server management, with cloud and virtualization options front and center. Investment is going to be a constant wedge to get into corporate discussions.What do ITIL and APM have to do with the HP 3000? More than five years ago, the enterprise computer user group Connect said the audience it serves includes far fewer technologists, as it called them. That doesn't necessarily mean there are few technologists out there, but it's become historic thinking to believe they'll get a place in the corporate conversation.
Or as HP's CEO Meg Whitman said in a speech at a conference hosted at Disneyland last month, "Everyone in this room is no longer down in the engine room of the ship. You are all up in the bridge consulting with the captain. She added that HP "is here to help you earn your stripes," which is where her nautical metaphor broke down. (A technologist would point out that most captains of ships wear their rank on their shoulders, but only sometimes on their sleeves.)
We've written about ITIL and APM before today (The new IT library that HP reads, and writes; as well as App Portfolio Management: Get IT into the Boardroom). But six years later, these are still in the future for some 3000 managers. Foster's webinar promises to explain how these concepts can help in the following:
• Aligning IT services with business needs
• Known and manageable IT costs
• Financial savings from improved resource management
• Effective change management
• Improve time to market for new products and services
• Improved user and customer satisfaction
ITIL defines the services required by the business units and puts in place service definitions for the services provided, including SLA’s (Service Level Agreements). IT services are crucial functions that require continual investments and resources to support, deliver and maintain IT systems. The challenge for IT departments and managers is adopting, a business and customer focused approach in terms of delivering high quality IT services.
Implementation of APM and its process, measurement and framework will effect decision making, application lifecycle, current and future IT investments, upgrades, operations, replacements and budgets. Application Portfolio Management will make the current state of the application portfolio visible and quantify the current applications by business fit and IT fit.
July 25, 2013
Where Three 3000 Pros Have Gone
Jon Diercks. Jim Sartain. Jim Hawkins. Each of these pros have had a large profile for the HP 3000 community. If one of these J-Men escaped your attention, we can recap. But first, understand that all technology prowess moves on -- not just MPE's -- hungry for the next challenge.
Diercks is the author of the only professional handbook for MPE/iX. Written during the year 2000 and published less than six months before HP's 3000 exit announcement, The MPE/iX System Administrator's Handbook is virtually out of print by now, but Diercks still has his hand in 3000 administration, on the side. He raffled off author copies of his book at the 2011 HP3000 Reunion. The book remains alive on the O'Reilly Safari website, where it can be referenced through your browser via your Safari subscription.
Today he's the IT director for a tax accounting and financial services firm in Northern California. In his spare time he's managed to put the console screen for the HP 3000 emulator onto an iPad for control. First time we've ever seen that done; the 3000's native MPE/iX colon prompt has been there before, but not a BYOD interface for the Stromasys product. See for yourself, above.
Jim Sartain became the essence of IMAGE at HP while it was adding its SQL to its name. In his final work at the vendor, he ran the Open Skies division of the HP 3000 unit at Hewlett-Packard. What's that, you may ask. In the late 1990s, general manager Harry Sterling bought a software company outright to capture 3000 business and prove the server was capable of modern IT. Open Skies offered online reservations software for JetBlue, RyanAir, Virgin Express and AirTran, among others.
Today Sartain has become a VP again, this time at another software icon. After managing quality assurance for Intuit, Adobe and McAfee, he's leading the Engineering 4.0 Initiative for Symantec. As usual, Sartain is reaching for the big goal. The initiative will "transform Symantec Product Development world-wide," according to his page at LinkedIn. He's running an Engineering Services organization for the company's security, tools and shared software components.
When TurboIMAGE was facing a campaign of disrepute at Hewlett-Packard in the early 1990s -- one of the database's darkest times -- Sartain was in charge of sparking new engineering requests for the 3000 keystone. Sartain may be best-known in the 3000 community, however, for work he led in response to a customer revolt in 1990.
Once customers expressed their displeasure at a waning emphasis on IMAGE, the 3000 division of 1991 had to respond with improvements. Sartain was directly responsible for HP's offering of an SQL interface for IMAGE, the first advance that signaled CSY’s commitment to what the unit called the Customer First strategy. Sartain worked with a revived IMAGE special-interest group to revitalize the database. Dynamic detail dataset expansion and third-party interface work also began on his watch.
Another HP Jim, Hawkins, was among the last deep-technical pros to work on MPE/iX at the vendor. His name became synonymous on the 3000 newsgroup with IO expertise, and for more than six years he worked post HP-announcement to lead "various Roadmap teams to deliver on HP e3000 end-of-life roadmaps to meet basic customer and partner needs."
Hawkins can still be seen posting occassionally on the 3000 newsgroup, delivering engineering history that can be helpful for the IT pro still meeting IO issues. Today Hawkins has become HP's Integrity System Quality Program Manager, which includes programs to detect product issues earlier in the lifecycles of Proliant and rx2800 Integrity servers. He's still at the vendor after entering his 3000 era on the MPE customer and R&D support team in 1986.
These J-Men helped to build intelligence, software engineering and hardware prowess for the 3000. They're out in newer fields looking for challenges in technology. They all have worked in the era where HP wanted to be known as a 3000 customer's Trusted Advisor. You might say they're still proving that Trust Never Sleeps.
July 16, 2013
Ecometry's clan plans for JDA changes
As our At-Large columnist Birket Foster wrote in February, application vendors get acquired and trigger changes. Even vendors who've already moved many customers off of the HP 3000. Some portion of the migrated Ecometry community, as well as those still running the MPE version of the ecommerce software, are weighing their timelines for migration and changes.
The company pulling that trigger is JDA, which merged with the current Ecometry owner RedPrairie early this year. The result has been a stable of 133 software products, between the two vendors' lineups. Every one of them has a story for the customer, a report still in the making for many products. JDA recently said that nothing will be discontinued for five years. That makes 2018 something of a execution deadline for retailers using Ecometry, which is being called Escalate Retail.
"This was a merger of equals," Foster told us last week, right after the company educated some managers on data migration practices. Neither of these entities want to obsolete a product, because that would be a big loss of revenue. If nothing else, the current customers pay support fees. If there's versions to upgrade towards, there might be upgrade license fees to pay.
The greater ricochet from the trigger-pull is mapping out and planning for the use of the surround code that supports Escalate Retail, as well as the MPE-based Ecometry. More companies than we'd think have a loose track on workflows that require surround tools, such as Suprtool -- which is pretty much essential to reporting and extracting data out of their applications.
The changes in the environment of ecommerce users became evident at the JDA conference this spring. About 100 people in the Ecometry community were on hand, by Foster's estimate. When the shows were Ecometry-only -- a long while back -- more than 500 attendees was common. There were fewer sessions offered for Ecometry customers who are now looking at if, and when, they'll need to make a migration away from their bedrock application.How many fewer sessions? There were four Ecometry-specific sessions, plus the JDA super-session, to occupy the time of CIOs, IT directors and supporting third party vendors. "They were still adding content to the conference up to the last week," Foster said. As an element in last year's RedPrairie Focus conference, Ecometry sites had 10 sessions. Foster estimated that 300 people from the community were on hand.
JDA has moved its operations for the Ecometry software to India, a change that can require extra effort and patience to embrace for the customer. While the support of the product has been guaranteed for five more years, no software company will ever guarantee the quality of the support.
In the time before that support comes under review once again, a site that's moved along with the Ecometry migration path should come to understand their application's workflows. "You'll want to compare it to the new, approved solution [from JDA]," Foster said, JDA Direct Commerce. He added that documenting the current workflow is an essential step.
MB Foster's got a JDA-Ecometry update webinar set for July 17 (Wednesday) at 2 PM Eastern Time. Register at the website, especially if you're interested in surround code migration expertise, to plan and execute a migration to JDA Direct Commerce. "Attendees will learn about advantages and risk mitigation strategies that will allow you to get started and deliver a rough order of magnitude timeline to the senior management team," the website reports.
July 15, 2013
OpenSSH may get unquiet for 3000's users
Savvy HP 3000 managers who need to move files securely are finding that SFTP works under MPE/iX. But OpenSSH, the root of the open source service for encrypted communication sessions over a computer network, is still short of being fully operational for the HP 3000's environment.
Brian Edminster, the senior consultant at Applied Technologies, explains that "with a bit of work, you could get OpenSSH v 3.7.1p2 working. If I recall correctly, the issue is that 'select' is busted under MPE/iX, and that's what's required for ssh to work correctly."
The fact remains: ssh cannot connect to a remote system and execute commands that produce any output. Ken Hirsch did the original port, but he only really needed the SFTP client -- so the issue with ssh wasn't addressed.
Ken also posted on the 3000-L newsgroup in 2008, asking if there was any interest in getting an ssh and sshd/sftp-server working (server daemon) -- so the 3000 could do port forwarding, act as a SFTP server, receive inbound ssh connections, and so on. Apparently he didn't get enough response to carry forward.
Back in 2005, Hirsch posted his goal.
I could get an interactive ssh client to work on MPE/iX. I don't know how, but I know it's possible! It would not be possible to get an ssh server working in such as way that an ssh client could run any program. But it would be possible to get enough of the server running so that you could use the server to do port forwarding.
In 2008, he added the note which Edminster referenced. "If anybody knows a way to actually write to a terminal while there is a read pending, I could use OpenSSH as a server on the HP 3000. Apparently there are undocumented MPE/iX sendio() and rendezvousio() calls, of which I know nothing. There are also tread()/twrite() routines in libbsd.a that I think are intended for this, but there's no documentation for these, either."
There is another way to let SSH speak up on MPE, however.
Edminster, who keeps a repository of open source tools available for the community at his MPE-OpenSource website, said "OpenSSH isn't the only implementation of the ssh/sftp/scp protocol, although it is arguably the definitive open source one." He said he's looking for a client or two to help underwrite his R&D to port across this key encryption utility.
That said, in my 'copious' spare time, I'm working on porting the 'dropbear' ssh application. It's much simpler, and much more restrictive -- but it appears to have a much greater chance of success than having to significantly rework OpenSSH to make it work under MPE/iX.
Unfortunately, the current OpenSSH v 3.7.1p2 port meets my client's needs -- so if I want to spend any significant time on the dropbear (or other) ssh packages, I'll need a benefactor or two.
As always, if you have questions, don't be afraid to ask. If you have some spare time, try putting up SFTP (from Allegro or MPE-OpenSource) on your HP 3000. You'll find it suprisingly easy.
Hirsch said that with an interactive SSH client, an enterprising IT manager could tunnel a telnet connection over the SSH connection.
So on your PC, you would run:
ssh -L 9999:hp3k.yourcorp.com:23 firstname.lastname@example.org
Then connect Reflection (or other terminal emulator) to localhost::9999
You can do this with an ssh server running on some computer other than the HP 3000, of course. Just set up a PC or Linux system as an ssh host. There would be a secure connection between the PC and sshhost.yourcorp.com and an unencrypted connection between sshhost and the HP 3000 (presumably both behind the same firewall).
July 10, 2013
Learn about the 1 migration for all: data
At 2 PM Eastern Time today MB Foster leads a seminar on the steps to migrate data. It's the one kind of migration that every IT manager, homesteading or migrating, will have to face over and over. Birket Foster's company, having migrated data for more than 30 years, is the leader in this field.
Offer up a question about data migration, even if you can't attend. We'll act as your proxy and take note of the answer. Sign up at the MB Foster website. The interface for the webinar is smooth and interactive. You can dial in by regular phone, or use IP telephony through your laptop or PC. As Foster says about Data Migrations Made Easy
The complexity of a data migration can't be underestimated. In this presentation we will look at the steps in a data migration project.
As thought leaders we will deliver practical methodologies to help you prevent costly disruptions and solve challenges. We will demonstrate techniques to lift and shift data to popular databases, manage complex data structures and mitigate risks using MB Foster’s processes and UDACentral, a data migration solution.
Let us help you design, control, automate and implement an internal data migration factory.
June 24, 2013
Open source resource: Secure FTP on 3000
Even though FTP won't help much in transferring databases on an HP 3000, a lot of other data can be moved using File Transfer Protocol. The question of how to do this securely using SFTP just came up last week. We've covered the topic before, but a new contributor, Brian Edminster of Applied Technologies, chipped in with some advice and a new resource, built from open source.
The initial question:
I'm trying to use ftp.arpa.sys to FTP a file to a SFTP server and it just hangs. Is there a way to do a secure FTP from the HP 3000?
Brian Edminster replies:
The reason that using MPE's FTP client (ftp.arpa.sys) fails is because as similar as they sound, FTP and SFTP are VERY different animals. Fortunately, there is a SFTP client available for the 3000 -- the byproduct of work by Ken Hirsh and others.
It used to be hosted on Ken's account on Invent3K, but when that server was taken out of service, so was Ken's account. As you've no doubt already noticed, it's available from a number of sources (such as Allegro). I'd like to highlight another source: www.MPE-OpenSource.org
Edminster goes on to explain he administers that site, as well as puts together the 'pre-packaged' install available there. It's in a single store-to-disc file in Reflection 'WRQ' format, making it easy for the majority of sites to retrieve and use. Here's the URL:
I have a customer that's been using SFTP daily as part of their PCI compliance solution for several years. They push and pull data hourly from dozens of Point-of-Sale systems all over the country, and have moved lots of data this way.
The biggest caveat from that customer's implementation is that if you're moving data over a WAN, SFTP seems to be more sensitive to jitter and latency issues than conventional FTP. We ended up having to upgrade a couple of their more anemic 'last mile' circuits to accomodate that.
In all other respects, it’s quite a robust solution, and can be tightly integrated with existing legacy apps. I know; I've done it.
If you have any questions about how to use the pre-packaged install -- or how to get around any limitations you might run into,-- don't hesitate to contact me. I've used this on dozens of systems over the last decade, and have transferred many, many gigabytes of data with it.
April 23, 2013
How app portfolios increase career value
Getting an HP 3000 back into discussion at the boardroom level can be tough. In a lot of places still running MPE/iX applications, the programs that drive company computing have become invisible as the grain in a fine piece of wood that makes up a boardroom table. Application Portfolio Management (APM) can be a means to increase the visibility of HP 3000s.
And if that visibility leads to a more energized transition plan — because now the executive management sees how vital the MPE/iX application is to meeting company goals — that's a good thing as well. Retiring out with the HP 3000 is an option for some managers. For many others, outlasting the server is becoming the genuine challenge. Leaving a legacy as an IT pro, instead of the just the 3000 expert, is one way of nurturing a career.
You have to know how to treat applications as assets, to frame software as if it's as essential as cash on hand for a company. APM doesn't get cited much by the 3000 manager who's been a technologist to deliver value to a company. This is the business side of business computing. Learning more about it gives a manager a greater skill set. Best of all, these practices make it easier to justify IT acquisition and expansion and yes, even a migration with its profound expense.
Tomorrow (April 24) at 2PM Eastern Time, MB Foster is leading a 45-minute webinar with time for questions about APM as part of its bi-weekly Wednesday Webinars. "Do you want executive management to understand the condition of IT applications -- built, bought or accumulated through M&A, or acquired for a specific need -- and how they grow the business and how they affect future budgets?" The answer to that would probably be yes, just to ensure that the asset called the HP 3000 applications get their accurate valuation.
APM is a proven concept that can make a manager look more modern at an executive level. Best of all, according to CEO Birket Foster, it can be started with something as straightforward as an inventory. In 2007 when the concept was still gaining traction, he explained the introductory steps.
APM helps managers assess value to application assets. To begin, take an inventory of applications and clearly understand the current business and technology fit for each application. Publish the application portfolio so it can become a budget item visible to the management team.
I know, at first it may not be where you would like it to be, but it is what it is — there is nothing that can be done about the past. But when you start the process of APM, you can start managing a budget with the objective of aligning business needs with IT’s, with options for The Three Rs of Applications – remain, replace, or rehost. This way IT can get included at the management table and get the budget needed to renovate when required.
The APM process can have a profound effect on decision making. "It will clarify existing investments, application lifecycles, and any future investments, upgrades, operations, replacements and budgets related to the applications," Foster said in preparation for this Wednesday Webinar. "This will help the entire company know what IT needs to invest in to support the business, as well as the impact on the applications that are used by every department/business unit."
April 02, 2013
CAMUS schedules Spring webinar for April
The ERP and manufacturing user group CAMUS will host its every-springtime user group event on April 17, including discussion about the future of MANMAN led by community advocate and 3000 veteran Terry Floyd of the Support Group.
Terri Glendon Lanza, the founder of the Ask Terri ERP and manufacturing consultancy, has announced the call-in and PowerPoint meeting, which will begin at 10:30 Central US time. After an hour of talk and questions about the upcoming years for one of the oldest MPE applications -- still running in several hundred companies -- 3000 homesteading advice starts at 11:45.
Steve Suraci, owner of support and systems provider Pivital Solutions, talks first about Resources for Homesteading. Tom Bollenbeck of Ideal Computer follows up, on the same topic, at 12:05.
The user group's traditional and lively Talk Soup puts a signature on the meeting, which is free. An open discussion is scheduled to start at 12:25. You sign up at the Sign Up Genius website.
Up for discussion: MANMAN Modifications, and a possible CAMUS give-away. "Help us outline contents, actions, or a submission list for modifications with financial assistance from CAMUS," Lanza said in her April 2 announcement. "We could talk about the emulator during the open discussion if you want. Everyone is welcome."
Details for the webinar phone-in and log-on will be emailed to registrants prior to the meeting. You can send questions to Lanza at email@example.com, or call her at 630.212.4314.
CAMUS is also prepared to help support a springtime in-person 3000 Social and Stromasys Training event. This is allegedly being held in May, but we're waiting on final confirmation from Stromasys. Once again, the Bay Area's Computer History Museum in Mountain View has been proposed as the setting.
"CAMUS would consider helping sponsor events whenever it may happen, spring or fall," Lanza said. The user group was one of the sponsors the HP3000 Reunion, held at the Museum in September, 2011.
March 28, 2013
OpenMPE's afterlife lives on a live server
Eleven years ago this spring, OpenMPE was calling itself OpenMPE Inc. and proposing a business around the HP 3000. The organization was just getting on its feet, led by Jon Backus, a consultant and systems manager who ran his own business and took the first steps toward advocacy for the computer HP was cutting from its futures.
The hopes and dreams of a shell-shocked community of 3000 lovers came to the window of OpenMPE. But even in 2002, the group of volunteers' founders knew the holy grail was hardware to replace the boxes HP would stop selling in about 18 months.
A petition, in the form of customers' Letters of Intent, got presented to HP during that year's Interex 3000 Solutions Symposium.
The document is asking customers if they would support the new organization’s mission to enhance and protect the HP 3000 community’s lifespan, though software development and creation of an emulator that mimics the HP hardware on Intel processors.
And after a decade, the community got its emulator. The software that's now making ripples in the calm pond of 3000 use emerged from hard work at Stromasys, to be sure. But OpenMPE laid the first tracks to demonstrating user interest, as well as an MPE license for emulated 3000s. The HP license is one of the few that were written specifically for the emulator. (Minisoft has announced another.) The other evidence of OpenMPE's work is an HP 3000, hosted at the Support Group in Texas, where it holds software that still matters to MPE managers.
OpenMPE pays a nominal amount to maintain this server inside a hardened datacenter. That's evidence there's still a trace of business going through OpenMPE, although the Support Group volunteers more than a payment can cover. (That's the way volunteers roll, after all. Nobody got paid a dollar for working with OpenMPE, although there was plenty of pay-outs of public scorn.)
But host software on an HP 3000 and you become one of the beacons across the inky landscape of MPE in 2013. One customer wanted a copy of GCC, the Gnu C Compiler that's the bootstrap code for all 3000 open source riches. Mark Klein created an MPE/iX version of GCC to enable printer and file sharing, Internet addressing and advanced networking, perl and so much more on a 3000.
One source for GCC is on Brian Edminster's MPE Open Source server, a repository of free software. But he tipped his hat toward the OpenMPE beacon while answering a question posted on the 3000 newsgroup.
There are several third-party software support providers that could help -- you can find 'em through searching the 3000 newsgroup. And there's also a few of us that are keeping copies available for download on sites of our own.
I have a site that has it as part of a 'OpenSSH sftp client' install (which also happens to include perl as well). But at the moment, probably the best place to get GCC for MPE/iX is from a site that's a partial copy of the old 'Jazz' server at HP.
The direct URL is: http://www.openmpe.com/jazz/MarkK/gnuframe.htm
As the page notes, GCC was ported to MPE by Mark Klein. The community owes him a debt of gratitude for this, even thought the latest version available isn't quite so current anymore. In spite of that, Mark's work has made it possible to port quite a bit of software to MPE.
Klein volunteered his hours to create the MPE GCC, and more than 30 people volunteered their hours through nine years to make OpenMPE a player during the darkest era of the 3000 -- those springtime months of 2002 when it was so easy to hear the HP user group Interex trumpet the "migrate, and soon" message that HP was hawking. Plenty of sites did, although not nearly as soon as HP hoped. During that era, however, HP got to be instructed about how to curtail business for a business computer community -- hearing all the things it overlooked for the transition, denoted by OpenMPE's volunteers.
March was the time of year when OpenMPE volunteers ran for elections, starting in 2002. Although there are just three directors at the group now, it still has its friends in places like Measurement Specialties, where former director Tracy Johnson manages 3000s and a shadowed OpenMPE server. Or at Applied Technologies, where Edminster supports the ideal of free software that drove OpenMPE during its first year. Or out at the datacenter building in Texas, where the live 3000 still dishes out software that homesteaders find useful, once they search for it.
March 26, 2013
Review a plan for modernizing to migration
Many of the most dedicated HP 3000 users have plans. Not just for how to sustain a server HP hasn't built for nearly a decade. Not just for how to retain the tribal knowledge of business systems while preparing for a succession of IT expertise -- the latter in sync with MPE/iX issues. They're making plans to modernize their hardware and extend their software.
At a major healthcare provider in New England, there's an active project to bring an emulator to task, replacing the HP 3000s and their support expenses with inexpensive Intel servers. But the healthcare provider knows the long term probably won't include MPE/iX applications in production. It might be seven years, or 10. But migration -- or a lift and shift of applications -- is certainly down the road.
At another customer site, the prospect of eliminating HP 3000 applications would mean shutting off order entry, fulfillment, sales auditing. It's not impossible, of course. HP's Unix systems have taken over for a major financial module at this manufacturer. That means that somewhere deeper into the corporate calendar, those MPE/iX systems will give way to another OS. When the time is right, says MB Foster's Birket Foster.
March 27 is a Wednesday, so there's a Webinar on offer from Foster's team. Legacy Application Modernization starts at 2PM Eastern Time. Like all the others -- so many over the last three years -- signup is painless, free, and ensures a way to connect with other homesteaders who are eyeing migrations. They might need the latest strategy on what's important to succeed.
At that healthcare provider, the company is still creating development accounts on its HP 3000 N-Class servers. such organizations are often challenged to extend IT investments and modernize their applications, even as the true costs -- like power and cooling, recruiting competent professionals -- to maintaining their environments increase. Foster's webinar looks at the legacy modernization as one way to start the eventual transition.
Couple these challenges with a continual changing technology landscape, and you will find companies are researching alternatives and possibilities, but are uncertain of where to begin the migration process. During this webinar, you will be leveraging MB Foster’s certified migration specialists, who will help your team to successfully rejuvenate and modernize your legacy application.
Attendees will learn about best practices, and proven risk mitigation strategies that will allow you to get started and deliver a thought provoking synopsis to your senior management team, to drive the business forward with an eye towards moving and modernizing mission critical applications into the 21st century.
Attending these events, for just 45 minutes or so, is most enlightening because of what the 3000 owners can share. Solving a problem with new ideas is the aim for these advisory sessions.
March 25, 2013
Searching for help in all the right places
Today a long-time 3000 site in the candy business called to find out if anybody was available to help with a little contract work. Maybe about two or three years' worth, because that's how long it would take this 3000 stalwart to pull out of their existing 3000 applications.
They've already pulled out of some. Oracle Financials now takes the place of an MPE/iX app, for example. But while Oracle is more popular with the market's experts, the in-house software that it replaced performed better.
The search for 3000 expertise led us to recommend a couple of favorite webpages. The OpenMPE contractor-consultant page has added new consultants in the last few weeks. Over at LinkedIn, the HP 3000 Community is fast approaching 600 members. And while LinkedIn would like the employer prospects such as our candy company -- and its Call Center, Order Entry, Order Fulfillment and Sales Audit apps, all running on N-Class servers -- to pay $295 to list a job opening, it's not needed. You can start a discussion in several places for free about an available job.
Three months ago we dipped our line in the water to attract two dozen applicants with 3000 experience in just under 36 hours, using the redoubtable 3000-L mailing list. We heard from long-time consultants, independent contractors, and even 3000 pros who thought their current company's use of MPE/iX looked a little shaky.
LinkedIn will take on any discussion in the 3000 Community group, regardless of whether it mentions jobs or not. It's hard to describe how many of the nearly 600 are available for work there, but it's not a miniscule percentage.
There's also an HP 3000 Jobs subgroup, which is part of Bill & Dave's Excellent Machine out on LinkedIn. Apply for the Bill and Dave's membership (it's free) and the Jobs subgroup is open to your offering and your seeking, too. Bill and Dave's is another 780 members big, and it's got lots of retired HP 3000 expertise in there. You never know who will want to take on an outside contract, after leaving the good ship HP.
February 15, 2013
3000 pro uses open source version control
We've been polling the 3000 community about its choices for development tools, but the range runs wider than QUAD or versions of Notepad. One enterprising veteran has tapped the free, open source toolset git to create a batch transfer system for EDI.
The git solution is one of those software choices that seems to defy the traditional structures for care and feeding of software. Like the Joomla Content Management System, git is supported by a vast range of users, comes free of charge for any Windows, Unix or Linux-based workstation or server, and is used by very large companies as well as untold thousands of smaller ones.
One 3000 IT pro, James Byrne of the trading specialist and freight forwarder Harte & Lyne Ltd., checked in to report how git is helping him manage the development of new modules which connect to newer enterprise environments. The git techology supports Behavior Driven Developments. BDD provides developers and business analysts with shared tools and a shared process to collaborate on software development.
Last year I had to create an EDI batch transfer system from one of our suppliers into our billing system hosted on the HP 3000 and written in PowerHouse. For that project I created a git repository for the HP on our source archives' Linux host, and then transferred over all of our source code, job files, udc and cmd files -- and anything else I believed to be locally developed source -- into the git repository using the HP 3000s HFS layout.
I then checked out the specific directories and files into a working directory on my Linux workstation, wrote the new stuff and edited the old stuff in GVim, and checked everything back into the remote repository.
Byrne said he then FTP’ed the new stuff onto the HP 3000 and ran it. "If there were any bugs -- and when are there not? -- I edited the source on the workstation, checked it in to the repository, and FTP transferred it from there to the HP 3000 for the next iteration."
It seeems to me that written out it appears more cumbersome than it actually is. It all went fairly smoothly once most of the gotchas and ‘oops-I didn’t-know-that’ were gradually uncovered and weeded out the the workflow.
One of the major benefits of doing things this way was that everything was built using BDD methodology and the new systems is covered by reproducable tests. Recently a change occured external to our system that broke one of the transfer scripts. We were able to identify the exact problem in our code and fix it with remarkably little effort in an amazingly short time, all because the test suite identified exactly where the exception was occuring and in what way the new behaviour varied from what was expected.
Byrne said the next thing he expects to be writing for, if not actually on, the HP 3000 is a set of Quiz reports to extract the company's 3000 database data into XML files, for transfer and loading into a new billing system. "After that is done," he said, "it seems very likely that then we will bid adieu to our old workhorse."
February 11, 2013
What'll you do if they bring their own?
Whether you approve of outside devices or not, they are in your company. Pretty few places have no smartphone users checking their mail. Many want to tie into company mail systems. That's just the beginning of the Bring Your Own Device (BYOD) surge. It's said that PCs are pretty much considered dead tech, although that seems severe considering how many laptops you'll see. But the tablets and phones have already assumed their place, even alongside HP 3000s. What happens next is up to you.
HP pushed this message out last week in a small business newsletter article. Management of the BYOD's is their aim, a sound one for a company that's looking for business management opportunities.
Adopting a BYOD strategy can also lower your initial capital expenditures. To manage and secure a wide array of personally owned and hard-to-track devices, your IT team needs to implement clear policies, procedures and safeguards to protect applications and sensitive business data against malware, device loss and failure.
A Wednesday Webinar this week from MB Foster gives the 3000 community, migrated or homesteading, a chance to ask questions and see strategies localized for managers of these systems.Birket Foster, CEO, is your host for the Webinar at 2 PM on the 13th. You can register online. (It's a pretty nifty system that lets them call your number when you're ready to take the call. Pops up with a spiffy web app that includes a chat option as well as a way to see the slides while you listen to Birket speak.)
It is not a question of if, but when companies will embrace BYOD with confidence.
In this webinar we will outline and guide you through some of the key considerations related to the implementation of BYOD polices; including
Virtualization: Provide remote access to computing resources.
Walled garden: Contain data within a secure application so that it is segregated from personal data. Allow secure access to email, applications, and data from outside the corporation.
Limited separation: Policies to ensure minimum security controls.
January 15, 2013
Foster looks into IT crystal ball Wednesday
Journalists like me are always a sucker for trend stories. People expect a message of the future to emerge from analysis, and IT consumers look farther ahead into the future than most buyers. You're expected to be ready for change at the moment it occurs. I enjoy it when somebody else is doing the trending.
That's why it will be most interesting to see what Birket Foster and his team at MB Foster have to say about IT trends tomorrow, January 16, starting at 2 PM Eastern Time. This is the first Wednesday Webinar of the new year for the company. They're reaching out to predict what will happen in a wide array of 10 sectors:
- Big Data
- Social Media
Registration for the event is free, at the MB Foster website. The webinars usually take less than an hour, including questions and answer sessions.
Foster and his team have been on the HP 3000 scene for 35 years, starting from his work as an independent software representative and consultant in the days before Cognos was named Cognos. That's why he asks
Remember when we used Excel or Lotus spreadsheets to create sophisticated reports? Whereas today Business Intelligence (BI) and the future trend of analytics and ‘information is power’ are emerging as the norm.
We’ve got our eyes on a list of 10 Information Technology trends that should help anchor your business, present or future, and help you build a broader, more agile enterprise.
Every year we reflect on the IT world and the trends we see that will matter for the coming year. At MB Foster we have the advantage of working with customers in many industries and in different countries; this gives us a unique perspective on upcoming trends in technology.
Even though 2012 was a remarkable year for technology, we’ve got our eyes on a list of 10 Information Technology trends that should help anchor your business, present or future, and help you build a broader, more agile enterprise.
Attending will offer new understanding to tech advancements "that are sure to gain significantly greater mind and market-share over the coming year and by organizations around the globe." Birket loves this stuff and looks forward instinctively. We'll want to watch him connect the dots that lead away from the world of the 3000.
January 09, 2013
Secure the Enterprise: Understand, Pentest
Editor's Note: HP 3000 shops which are on the move will be encountering greater challenges in security. Whether it's a move to Windows, to Unix, or to Linux, all non-3000 environments carry greater risk of breaches. Certified Information Security Professional Steve Hardwick explains the investigation and penetration testing that will be needed to secure any enterprise that's migrating away from the obscure-but-less risky MPE operating environment.
By Steve Hardwick
CISPP, Oxygen Finance
First of a series
When making a move in the HP 3000 environment, your first order of business is to understand the security solutions that are currently in place. Many organizations conduct a security assessment in response to a specific regulation, such as a compliance initiative. However, using a broader risk assessment approach can result in a much stronger security posture.
For example, a HIPAA assessment — common in the 3000 healthcare billing environments — may only be directed toward healthcare information. Other users may not be included in that assessment, so would pose as a target for would be hackers. Among the wealth of information regarding how to approach a security assessment — many auditors provide security assessment services — one good free tool is a publication from NIST, a guideline for the Federal government that’s been in place for several years.
SP800-30 has just undergone a revision and a September 2012 version is now available at the NIST website. This document gives a good framework for a general risk assessment. It can form the basis of assessments for specific compliance projects. There is also SP800-63, a more in-depth overview of password and authentication methodologies and vulnerabilities.
An important part of risk assessment methodology is testing. The next countermeasure to look at is penetration testing, or pentesting. Penetration testing actively seeks vulnerabilities within a security architecture.
Unfortunately, in most cases this type of testing is limited to testing technical security countermeasures only. One common approach is network scanning. Network scanning involves presenting network data that’s specifically designed to exploit technical vulnerabilities within a network.
A second type of penetration testing is physical: trying to exploit physical weaknesses within the environment. This type of pentest launches social engineering attacks (trying to trick users into revealing password information through phishing) and searches for physical copies of password information. Pentesting, especially physical, can be a very revealing tool that highlights physical password vulnerabilities.
User training is one countermeasure that is often overlooked. What’s more, this testing can be badly delivered. A lot of user training is dedicated toward telling users what not to do, without explaining the justification for the instruction. This can easily result in users not taking any ownership in the overall security solution. The common response is that the training is viewed as a check-mark on a compliance report, and has little overall value.
IT managers show users the value of security training by showing the impact of a lax approach to security. All too often, security training is a reactive response rather than a proactive response. This results in a view that the training is punitive. When coupled with a good penetration testing philosophy, users can understand how easy it is to gain unauthorized access to their systems.
Other Physical Countermeasures
It can be fairly simple to steal usernames and passwords of individuals by shoulder-surfing. It may seem that the solution to this is fairly simple: make sure no one can see you type in your credentials. You can show your users certain steps to take that facilitate this. First, positioning the computer screen in a way that prevents this type of attack.
However, with mobile devices this may not be so straightforward. There are display solutions which limit the off-angle view from the screen, in order to help reduce shoulder surfing. User training can help prevent this type of attack. This is a key area to include in a physical pentest.
Controlling information as it leaves the corporate environment is also part of physical security. This falls into two areas. Physical transfer of information while in use, as well as decommissioning of computer equipment.
Physically transferring information is typically employed when using back-up media such as tapes. However, it can also include mobile devices, especially any with magnetic storage. One of the best tools for protection is encryption of data while it is at rest. In the case of back-up media and laptops, this involves encrypting any security data that is on the systems — not just user data.
A second option is removing the need to physically transport the data, using electronically transferred back-ups. Quite often a laptop can be lost or stolen. Even if the thief's target was not the data it contains, such a theft can surely compromise it and constitute a security breach.
One caveat regarding encryption: care needs to be taken in storage of encryption keys. The keys should be afforded the same level of protection as a password.
With regard to decommissioning equipment, prior encryption of the data significantly reduces this exposure. In many regulations, loss of encrypted data may not constitute a breach. The best policy is to have a disposal policy that renders any decommissioned machine or media useless. There are a lot of commercially available solutions that securely overwrite the data, or there are physical destruction methods.
One of my personal experiences involved receiving a replacement laptop hard drive. When I ran an unformat program, I found out that the previous owner was the CEO. I immediately returned the drive without viewing any of the data. (Incidentally, using an unformat command was not a violation of my acceptable use policy.)
Next time: Technical Countermeasures