Helpful and a bit weird all at the same time. Wouldn't it have been easier to just fix the PRNG issue in the first place by creating a ssh_rand_helper that used an assembler module to gather entropy.. than creating an option to deal with the slow PRNG with OpenSSH?
Rob Schramm On Thu, May 5, 2011 at 10:23 AM, Mullen, Patrick <[email protected]>wrote: > Using the hardware is optional, there's a software implementation too. > Some smaller lpars may not have enough cpu share to drive the software > process though in Ported Tools 1.1, I know that this was the case with > some of our sandbox lpars that experienced chronic timeouts. IBM > remedied this in Ported Tools 1.2 with the new variable > _ZOS_SSH_PRNG_CMDS_TIMEOUT. > > > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[email protected]] On > Behalf Of Paul Gilmartin > Sent: May 5, 2011 8:55 AM > To: [email protected] > Subject: Re: "Under z/OS Unix" > > > On Thu, 5 May 2011 08:55:15 -0400, Rob Schramm wrote: > > >I might understand (due to "I don't want to set it up") not setting up > >SSH. But are there any installations not running TCP/IP these days? > > > I should add we have SSH installed but not successfully configured on > some of our systems because we lack the (separately priced? Am I > correct?) hardware feature required for /dev/random. The mind boggles; > z/OS /dev/random uses a PRNG, and for that specialized hardware is > necessary? > > -- gil > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to [email protected] with the message: GET IBM-MAIN INFO Search > the archives at http://bama.ua.edu/archives/ibm-main.html > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html > -- Rob Schramm Senior Systems Engineer w: 513.305.6224 ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
