Leland, i rebuild the package with your flags, now a see a a difference at
least.. the cpu usage by ssh was very low...:


PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+
COMMAND

16814 root      16   0  6004 2704 2064 R   82  0.1   0:38.65 /usr/bin/ssh -x
-oForwardAgent no -oClearAllForwardings yes -lroot jbsp125 scp -t /
16813 root      18   0  5160 1612 1276 S    4  0.0   0:01.92 scp zerow
root@jbsp125 /srv/ftp/


but, i shoud be able to see some increase on Per-device successfully
completed request counts ?

Thanks for you attention :)

jbsp124:~ # cat /proc/driver/z90crypt

zcrypt version: 2.1.1
Cryptographic domain: 7
Total device count: 1
PCICA count: 0
PCICC count: 0
PCIXCC MCL2 count: 0
PCIXCC MCL3 count: 0
CEX2C count: 1
CEX2A count: 0
requestq count: 0
pendingq count: 0
Total open handles: 0


Online devices: 1=PCICA 2=PCICC 3=PCIXCC(MCL2) 4=PCIXCC(MCL3) 5=CEX2C
6=CEX2A
       0000000000000000 0000000000000000 0000500000000000 0000000000000000


Waiting work element counts
       0000000000000000 0000000000000000 0000000000000000 0000000000000000


Per-device successfully completed request counts
    00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
    00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
    00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
    00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
    00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
    00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
    00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
    00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

jbsp124:~ #



On Tue, Feb 15, 2011 at 1:40 PM, Leland Lucius <[email protected]> wrote:

> On 2/12/11 3:03 PM, Rogério Soares wrote:
> > Mike, i have installed all packages describe on paper.. appears like sshd
> is
> > not calling icalib, i just have recompile sshd with --ssl-engine, is just
> it
> > ? i do not understand very well on paper if the "PTF" is just is or
> > something more...
> >
> When I got this working, I never added "--ssl-engine".  What I did add was
> one additional define to the CFLAGS and CXXFLAGS variables in the
> openssh.spec file:
>
> LDFLAGS="-pie" CFLAGS="-DOPENSSL_LOAD_CONF=1 $RPM_OPT_FLAGS $PIEFLAGS
> -fstack-protector" CXXFLAGS="-DOPENSSL_LOAD_CONF=1 $RPM_OPT_FLAGS $PIEFLAGS
> -fstack-protector" \
>
> When OPENSSL_LOAD_CONF is set to 1, the routine that actually reads the
> config file gets called.  Otherwise, the config file is never read and ssh
> will not use the dynamic engine support.
>
> Leland
>
> ----------------------------------------------------------------------
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> ----------------------------------------------------------------------
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
----------------------------------------------------------------------
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Reply via email to