Leland, i rebuild the package with your flags, now a see a a difference at
least.. the cpu usage by ssh was very low...:
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+
COMMAND
16814 root 16 0 6004 2704 2064 R 82 0.1 0:38.65 /usr/bin/ssh -x
-oForwardAgent no -oClearAllForwardings yes -lroot jbsp125 scp -t /
16813 root 18 0 5160 1612 1276 S 4 0.0 0:01.92 scp zerow
root@jbsp125 /srv/ftp/
but, i shoud be able to see some increase on Per-device successfully
completed request counts ?
Thanks for you attention :)
jbsp124:~ # cat /proc/driver/z90crypt
zcrypt version: 2.1.1
Cryptographic domain: 7
Total device count: 1
PCICA count: 0
PCICC count: 0
PCIXCC MCL2 count: 0
PCIXCC MCL3 count: 0
CEX2C count: 1
CEX2A count: 0
requestq count: 0
pendingq count: 0
Total open handles: 0
Online devices: 1=PCICA 2=PCICC 3=PCIXCC(MCL2) 4=PCIXCC(MCL3) 5=CEX2C
6=CEX2A
0000000000000000 0000000000000000 0000500000000000 0000000000000000
Waiting work element counts
0000000000000000 0000000000000000 0000000000000000 0000000000000000
Per-device successfully completed request counts
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
jbsp124:~ #
On Tue, Feb 15, 2011 at 1:40 PM, Leland Lucius <[email protected]> wrote:
> On 2/12/11 3:03 PM, Rogério Soares wrote:
> > Mike, i have installed all packages describe on paper.. appears like sshd
> is
> > not calling icalib, i just have recompile sshd with --ssl-engine, is just
> it
> > ? i do not understand very well on paper if the "PTF" is just is or
> > something more...
> >
> When I got this working, I never added "--ssl-engine". What I did add was
> one additional define to the CFLAGS and CXXFLAGS variables in the
> openssh.spec file:
>
> LDFLAGS="-pie" CFLAGS="-DOPENSSL_LOAD_CONF=1 $RPM_OPT_FLAGS $PIEFLAGS
> -fstack-protector" CXXFLAGS="-DOPENSSL_LOAD_CONF=1 $RPM_OPT_FLAGS $PIEFLAGS
> -fstack-protector" \
>
> When OPENSSL_LOAD_CONF is set to 1, the routine that actually reads the
> config file gets called. Otherwise, the config file is never read and ssh
> will not use the dynamic engine support.
>
> Leland
>
> ----------------------------------------------------------------------
> For LINUX-390 subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO LINUX-390 or
> visit
> http://www.marist.edu/htbin/wlvindex?LINUX-390
> ----------------------------------------------------------------------
> For more information on Linux on System z, visit
> http://wiki.linuxvm.org/
>
----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
----------------------------------------------------------------------
For more information on Linux on System z, visit
http://wiki.linuxvm.org/