[herm ernst]

Has anyone had further experience in replacing their VPN tunnels?  Here at my hospital we are once again searching for an alternative to VPNs and the exposure it creates to a node outside our network. We use VPNs for our TCP/IP interfaces but are still looking for an elegant alternative to the VPNs they utilize. Have experimented Cloverleaf Secure Courier and also with TLS connections. Neither have proven to be a completely satisfactory replacement due to a variety of reasons.  Any advice would be appreciated!

[herm ernst]

Max,

Love your scripts for SMAT files! Do you have equivalents for SMATDBs?

We are migrating to SMATDBs from SMATs when we install Cloverleaf 6.1.2 and were wondering if there’s similar scripts for use from the command line to process messages stored in SMATDBs?

[herm ernst]

Also is there a work around for AIX 6.1?

We are also contemplating an upgrade to v6 and are hoping a patch will be made available soon.

[herm ernst]

Hey McLeod,

We’ve just upgraded to 5.8 from 5.3 and noticied the %A parameter now also lists all threads being checked in the alert, not just the offending thread.

print “%A” | mail -s “Alert from Cloverleaf” IFteam@peacehealth.org

5.8:

Thread outbound queue depth (1) of tjmcafee has been more than or equal to 1 for 5 seconds, currently {tinterpth 0} {tiwell 0} {tjmcafee 1}

5.3:

Thread outbound queue depth (1) of tjmcafee has been more than or equal to 1 for 5 seconds

How would we create a 5.8 alert email message to only display the offending thread name as in 5.3?

I

[herm ernst]

Max,

Would you have a windows versions of your msgParser, msgReader and msgExtract scripts?

Been using them on *nix and they’ve been great!

Now a client is moving to windows 2003server  and it would be great to have these available.

[herm ernst]

Russ,

We are looking to upgrade from 3.8.1 to 5.7

Would your scripts in this post still be valid or would additional updates need to be made to them?

[herm ernst]

What about errror messages and recovery messages that are several years old, do the threads have to be shutdown first also?

What cleanup, if any can be performed with the threads up and running?

[herm ernst]

If all threads are up and functioning correctly, is it OK to delete all messages from the recovery DB?

Couldn’t determine from my quick glance thru the online documentation.

[herm ernst]

Is there a way to just delete messages older than a certain date?

Don’t want to delete any recovery db messages from current activity.

I’ve tried the -E option but can’t seem to figure out the date/time format.

Anyone have an example?

[herm ernst]

Further note: Most of these messages in the error and recovery database are several years old and the site personnel do not monitor it.

Since it’s an old version 3.8.1 of Cloverleaf just curious if there’s any side effects I need to be aware of.

[herm ernst]

I’m doing the same as Kathy but creating the file hourly with a tcl proc in TPS Outbound Data

What would be the easiest way make a copy of the file to an archive location and then ftp it to a remote server?

Would you have example tcl procs for the copy and ftp?

[herm ernst]

What wildcard statment would you use in the Name field to catch all messages that do not have a route defined?

I’ve tried * and it routes nothing. Then I troed ORM.* but that catches  the ORM_O01 which already has a route defined.

[herm ernst]

where would you find the port numbers used for RMI?

[herm ernst]

Enabling port 13015 on the firewall fixed earlier problem. Now I’m getting following error when trying to connect to the Linux host server from my laptop:

An unexpected exception occurred during the login process.

The exception shown below was caught.

Connection refused to host: 10.129.176.32; nested exception is:

java.net.ConnectException: Connection timed out: connect

[herm ernst]

I can ping but not telnet to the Linus host server.

but can connect with Putty tool using SSH.

Below are the contents of my laptop client.ini file and various server .ini files and directories.

#### xp laptop client.ini

$type client.ini

general]

doc_base_dir=C:quovadxqdx5.6integrator

debug=false

[logs]

### certs directory on Linux host is empty.

$cd /quovadx/qdx5.6/integrator/client/certs

$ls -la

$

### contents of client.ini on Linux host server

$cd /quovadx/qdx5.6/integrator/client

$ cat client.ini

[general]

doc_base_dir=/quovadx/qdx5.6/integrator

debug=false

[logs]

### contents of linux host server.ini file

$cd /quovadx/qdx5.6/integrator/server

$ cat server.ini

[general]

[exports]

environs=/quovadx/qdx5.6/integrator/mgh00sv0p0lwe

[logging]

cloverleaf_server_category=info

cloverleaf_server_level=brief

host_server_category=info

host_server_level=brief

ticket_server_category=info

ticket_server_level=brief

log_rmi_calls=false

debug_ssl=false

[security]

audit_server_used=false

ticket_life=16

customer_ca_file_name=CUSTOMER_NAME-cert.der

customer_ca_key_name=enc-CUSTOMER_NAME-key.der

host_cert_chain=HOSTNAME-clserver-cert.der;CUSTOMER_NAME-cert.der;hie-cert.der

host_private_key=enc-HOSTNAME-clserver-key.der

password=PASSWORD

security_server_host=FULLLY.QUALIFIED.HOSTNAME

security_server_used=false

security_anonymous=false

basic_security_enabled=false

[audit]

auto_trim=true

auto_trim_count=16000

[ihb]

ihb_sync_url=http://localhost:20210/IB/servlet/runHXML?action=IBgetNetConfig.xsp

ihb_soap_port=20217

ihb_email_port=20218

### license file exists on Linux host server

$ pwd /quovadx/qdx5.6/integrator/vers

$ ls

db  license.dat

Would firewalls need to be adjusted to allow traffice on 13015?

[Author]

Replies