Comments (2)
fscheiner
commented on July 29, 2024
@rapier1
Hi Chris,
not sure if my email from late September reached you, so I'll put the content here, too:
First, I wanted to let you know that I put out a new patch set for OpenSSH 8.7p1 at github/rapier1/openssh-portable.
That's great news! I assume Mattias (@ellert) will pick it up when Fedora starts to use OpenSSH 8.7p1, they're currently still on 8.6p1.
Second, I'm working on some debian packaging. The default deb packages include the gssapi extension which, as far as I can tell, are these patches with the hpnssh code stripped out.
With "these patches", do you mean the GSI patches? Because I think Debian is actually just using the GSSKEX patches from here instead. Or did you mean the patches that were used to create the GSI-OpenSSH sources that are included in the GCT since v6.2.20210826? This GSI-OpenSSH is based on gsi-openssh-8.6p1-2 from Fedora 34 (see #154) which is itself based on the respective OpenSSH version there and not related to any specific OpenSSH version from Debian.
Since I'm trying to recreate their setup do you have a version of gsissh without the hpn patch applied? If so can you point it out to me?
Not sure for Debian, because IIC we don't have any GSI-OpenSSH packages built because IIRC Debian doesn't want to have two versions of OpenSSH in their package repositories. GSI and Kerberos auth can't be compiled together AFAIK.
But for EPEL/Fedora, the hpn patch comes on top of all other patches IIRC, so you could take any GSI-OpenSSH source RPM from EPEL/Fedora and just remove the hpn patch from the RPM spec file. The sources for these RPMs are maintained on 2.
Cheers,
Frank
from gct.
rapier1
commented on July 29, 2024
I'm sorry I haven't replied. There have been a cascading series of
family emergencies over the past 10 months and there are times where I
simply lose the ability to keep up with anything else.
On 10/7/21 1:31 PM, fscheiner wrote:
@rapier1 <https://github.com/rapier1>
Hi Chris,
not sure if my email from late September reached you, so I'll put the
content here, too:
First, I wanted to let you know that I put out a new patch set for
OpenSSH 8.7p1 at github/rapier1/openssh-portable.
That's great news! I assume Mattias ***@***.***
<https://github.com/ellert>) will pick it up when Fedora starts to use
OpenSSH 8.7p1, they're currently still on 8.6p1.
Excellent. Of course they already released 8.8. I haven't ported to that
yet.
Second, I'm working on some debian packaging. The default deb
packages include the gssapi extension which, as far as I can tell,
are these patches with the hpnssh code stripped out.
With "these patches", do you mean the GSI patches? Because I think
Debian is actually just using the GSSKEX patches from here
<https://github.com/openssh-gsskex/openssh-gsskex/> instead. Or did you
mean the patches that were used to create the GSI-OpenSSH sources that
are included in the GCT since v6.2.20210826? This GSI-OpenSSH is based
on gsi-openssh-8.6p1-2 from Fedora 34 (see #154
<#154>) which is itself based on the
respective OpenSSH version there and not related to any specific OpenSSH
version from Debian.
You are right, it's just the GSSKEX patches. I gotta be honest I hate
the packaging process when I'm building off of current packages.
Probably because I don't have a lot of experience with it and the
learning curve isn't necessarily gentle. That said, turns out a lot of
people want that and I want to boost adoption.
Since I'm trying to recreate their setup do you have a version of
gsissh without the hpn patch applied? If so can you point it out to me?
Not sure for Debian, because IIC we don't have any GSI-OpenSSH packages
built because IIRC Debian doesn't want to have two versions of OpenSSH
in their package repositories. GSI and Kerberos auth can't be compiled
together AFAIK.
Yeah, I looked into that and from what I heard they don't want to even
consider it. That's why I'm working on setting up PPAs for debian,
fedora, etc.
But for EPEL/Fedora, the hpn patch comes on top of all other patches
IIRC, so you could take any GSI-OpenSSH source RPM from EPEL/Fedora and
just remove the hpn patch from the RPM spec file. The sources for these
RPMs are maintained on 2 <https://src.fedoraproject.org/rpms/gsi-openssh/>.
Cool, thank you for that. I'll take a look.
Also, I appreciate the follow up. I just have way too many things
falling off of my plate lately.
Chris
from gct.
Related Issues (20)
- fail to compiler gct-6.2 because of openssl HOT 3
- Can't install gct-toolkit release gct-6.2.20210826 HOT 13
- fail to globus-job-run becasue of no permission to access tmp directory on execution node
- globus-gridftp, globus-gram5 and globus-gsi not found HOT 1
- globus_gsi_cert_utils_error.c:42: possible missing "," ? HOT 5
- globus-job-run fails because the job manager failed to create an internal script argument file HOT 2
- where is MDS in GT6 HOT 2
- globus-job-run fails because of no permission to tmp directory HOT 2
- DNS error on repo.gridcf.org HOT 3
- TLSv1.3 handling incorrectly assumes exactly two tickets will be sent
- Weak GSSAPIKexAlgorithms ciphers detected HOT 5
- grid-proxy-init w/OpenSSL 3.x: Weakly encrypted PKCS#12 keystores can't be processed HOT 1
- pipeline doesn't work: ERROR: too many url strings specified HOT 6
- Typo in globus_gsi_system_config.c HOT 1
- autoreconf failure: files not found HOT 1
- Build error: undefined reference to `FIPS_mode' HOT 9
- confusion between ASN1_UTCTIME and ASN1_GENERALIZEDTIME HOT 5
- Lack of IO error checks generate incorrect file checksums HOT 4
- Unknown/unsupported OpenSSL version ("30100040 (OpenSSL 3.1.4 24 Oct 2023)") HOT 9
- RHEL9 clients and dCache on java-17 compatibility HOT 22
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from gct.