Hi Valerie, did you hear anything back about this?
There has been a bug open about it for some time: http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=6786011 looking at the other bugs it is linking to, it seems like there was some concern about how aggressively the pkcs11_softtoken was going after the objectstore. I do remember that we were running into a bug with kinit and NFS home directories in Solaris 10 Update 4 which is around the same time that sparks integrated into Solaris 10. I've never been able to track our problem down to any one single bug id but did find a collection of patches which fixed the problem. To me it does very much sound like a bug which existed back when sparks was implemented, but has gone by now. Yes, it would be *very* good to get this changed so the metaslot no longer needs disabling. Having to disable the metaslot pretty much prevents anyone from using self binding on the T-Series. :( - mo On 20 Jan 2010, at 10:37pm, Valerie Bubb Fenwick wrote: > Hi Sparks folks - > > This document was recently brought to the attention of the > crypto developers: > http://hub.opensolaris.org/bin/view/Project+sparks/install > > It mentions that metaslot must be disabled due to a bug > in pkcs11_softtoken. This doesn't fully make sense to me, > as metaslot isn't actually in pkcs11_softtoken. Nonetheless, we'd > like to know what the bug was and, most importantly, what > the bug ID is. > > If this problem no longer exists, please update the website. > > Thank you, > > Valerie > -- > Valerie Fenwick, http://blogs.sun.com/bubbva/ @bubbva > Solaris Security Technologies, Developer, Sun Microsystems, Inc. > 17 Network Circle, Menlo Park, CA, 94025. > _______________________________________________ > sparks-discuss mailing list > sparks-discuss at opensolaris.org > http://mail.opensolaris.org/mailman/listinfo/sparks-discuss -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 2196 bytes Desc: not available URL: <http://mail.opensolaris.org/pipermail/crypto-discuss/attachments/20100203/7e477410/attachment.bin>
