Re: [OpenIndiana-discuss] OpenSSH GSS-API-key-exchange

2016-12-19 Thread Jim Klimov
19 декабря 2016 г. 21:35:14 CET, "Adam Števko" пишет: >Hi, > >I would like to see this default to off, but keep it. > >Cheers, >Adam > >> On 19 Dec 2016, at 21:17, Alex Smith (K4RNT) >wrote: >> >> isn't GSSAPI the name for the Kerberized versions

Re: [OpenIndiana-discuss] OpenSSH GSS-API-key-exchange

2016-12-19 Thread Predrag Zečević - Technical Support Analyst
On 12/19/16 09:55 PM, Lou Picciano wrote: Seems like 'keep patch, make default:disabled' is the best path forward. Lou Picciano - Original Message - From: "Alexander Pyhalov" To: "Discussion list for OpenIndiana" Sent: Monday,

[OpenIndiana-discuss] OpenSSH GSS-API-key-exchange

2016-12-19 Thread Alexander Pyhalov
Hello. Currently OpenSSH in OpenIndiana supports GSSAPIKeyExchange option and enables it by default (support for authenticating server via GSSAPI - alternative to distributing server ssh keys) - http://www.sxw.org.uk/computing/patches/openssh.html . This is a separate patch (but widespread one

Re: [OpenIndiana-discuss] OpenSSH GSS-API-key-exchange

2016-12-19 Thread Till Wegmüller
+1 also for keep patch but off by default. Am 20.12.2016 um 02:47 schrieb Jim Klimov: +1 - present, but maybe off by default -- Typos courtesy of K-9 Mail on my Samsung Android ___ openindiana-discuss mailing list

Re: [OpenIndiana-discuss] OpenSSH GSS-API-key-exchange

2016-12-19 Thread Jerry Kemp
My vote is to drop the patch. If the patch is applied, my vote is to have GSSAPI options disabled by default. Jerry On 12/19/16 01:42 PM, Alexander Pyhalov wrote: Hello. Currently OpenSSH in OpenIndiana supports GSSAPIKeyExchange option and enables it by default (support for authenticating

Re: [OpenIndiana-discuss] [HEADS UP] Updated Graphics DRM code was integrated

2016-12-19 Thread Apostolos Syropoulos via openindiana-discuss
> Now OI should support generation 2/3/4/5 Intel Adapters. Great news! Congratulations to all the people involved. I have tested the experimental DVD and I have already installed in a couple of machines. A.S. -- Apostolos Syropoulos Xanthi, Greece

Re: [OpenIndiana-discuss] OpenSSH GSS-API-key-exchange

2016-12-19 Thread Alexander Pyhalov
Alex Smith (K4RNT) писал 19.12.2016 23:17: isn't GSSAPI the name for the Kerberized versions of these protocols? Yes. Note, that we speak about GSSAPI server key exchange, not about GSSAPI client authentication. --- System Administrator of Southern Federal University Computer Center

Re: [OpenIndiana-discuss] OpenSSH GSS-API-key-exchange

2016-12-19 Thread Adam Števko
Hi, I would like to see this default to off, but keep it. Cheers, Adam > On 19 Dec 2016, at 21:17, Alex Smith (K4RNT) wrote: > > isn't GSSAPI the name for the Kerberized versions of these protocols? > > " 'With the first link, the chain is forged. The first speech

Re: [OpenIndiana-discuss] OpenSSH GSS-API-key-exchange

2016-12-19 Thread Alex Smith (K4RNT)
isn't GSSAPI the name for the Kerberized versions of these protocols? " 'With the first link, the chain is forged. The first speech censured, the first thought forbidden, the first freedom denied, chains us all irrevocably.' Those words were uttered by Judge Aaron Satie as wisdom and warning...

[OpenIndiana-discuss] [HEADS UP] Updated Graphics DRM code was integrated

2016-12-19 Thread Alexander Pyhalov
Updated DRM code was integrated in OpenIndiana Hipster. On update you should get driver/graphics/agpgart@0.5.11-2016.1.1.46 driver/graphics/drm@0.5.11-2016.1.1.46 x11/library/libdrm@2.4.73-2016.1.1.46 Now OI should support generation 2/3/4/5 Intel Adapters. If you find any issues, please,

Re: [OpenIndiana-discuss] OpenSSH GSS-API-key-exchange

2016-12-19 Thread Lou Picciano
Seems like 'keep patch, make default:disabled' is the best path forward. Lou Picciano - Original Message - From: "Alexander Pyhalov" To: "Discussion list for OpenIndiana" Sent: Monday, December 19, 2016 3:35:22 PM Subject: Re:

Re: [OpenIndiana-discuss] OpenSSH GSS-API-key-exchange

2016-12-19 Thread Tim Mooney
In regard to: [OpenIndiana-discuss] OpenSSH GSS-API-key-exchange, Alexander...: Currently OpenSSH in OpenIndiana supports GSSAPIKeyExchange option and enables it by default (support for authenticating server via GSSAPI - alternative to distributing server ssh keys) -

Re: [OpenIndiana-discuss] problems iSCSI booting from clone LUN /= 0

2016-12-19 Thread Till Wegmüller
Hmm. We once had Problems with Multipathing and Networking in certain setups mostly when passing into another subnet via a Router. Try Single Path and see what happens. In the Linux Iscsi Client Multipath is only configured with a simple true/false flag. Multipathing usually does not need

Re: [OpenIndiana-discuss] problems iSCSI booting from clone LUN /= 0

2016-12-19 Thread Udo Grabowski (IMK)
On 19/12/2016 14:38, Till Wegmüller wrote: Hmm. We once had Problems with Multipathing and Networking in certain setups mostly when passing into another subnet via a Router. Try Single Path and see what happens. In the Linux Iscsi Client Multipath is only configured with a simple true/false

Re: [OpenIndiana-discuss] problems iSCSI booting from clone LUN /= 0

2016-12-19 Thread Udo Grabowski (IMK)
On 18/12/2016 14:30, Till Wegmüller wrote: Hi Udo I don't really know what the concrete problem could be but I spotted some things in you mail where I can give some pointers that might help. > It's really hard to somehow debug this, you cannot give -as single > user switch to the kernel

Re: [OpenIndiana-discuss] problems iSCSI booting from clone LUN /= 0

2016-12-19 Thread Udo Grabowski (IMK)
On 18/12/2016 14:30, Till Wegmüller wrote: ... What does the service log of the iscsi client service say when booted from the Original and what when it's booted from the Clone? Just that it starts on the original, the clients log is not touched since the OS does not get there to write

Re: [OpenIndiana-discuss] problems iSCSI booting from clone LUN /= 0

2016-12-19 Thread Till Wegmüller
Am 19.12.2016 um 14:49 schrieb Udo Grabowski (IMK): As said, we've not confifured any pathes, it finds two, but there's really only one single physical connection, the e1000g network device. I don't see how it gets two pathes out of that (something strange in scsi_vhci ?). There is also a