similar to: passphrase & keymgr load/unload

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/zfs-crypto-gate Latest revision: ec659b717bdb149af4dc7a2ac1bc1c152d859b02 Total changesets: 1 Log message: Fix mismerge for libcryptoutil & libpkcs11 Files: update: usr/src/lib/libcryptoutil/common/cryptoutil.h update: usr/src/lib/libcryptoutil/common/mapfile-vers update:

Author: Anthony Scarpino <Anthony.Scarpino at Sun.COM> Repository: /hg/zfs-crypto/zfs-crypto-gate Latest revision: a0c27b788e58b5f338e8518ce77fa548bb59c62d Total changesets: 1 Log message: missing new passphrase files Files: create: usr/src/lib/libcryptoutil/common/mechkeygen.c create: usr/src/lib/libcryptoutil/common/passutils.c

Here''s my comments for the preliminary ZFS Crypto review. - Dan Webrev: http://cr.opensolaris.org/~darrenm/zfs-crypto-gate/webrev/ General comments: DEA-1 - SCCS keywords need to be removed DEA-2 - Copyright updated ------------------------------------------------------------------ usr/src/lib/libcryptoutil/common/keyfile.c pkcs11_read_data() This code in pkcs11_read_data() scares

has anybody worked with support for the ibutton? i've come across keymgr (http://www.rcpt.to/keymgr/), but it seems to be dead (or playing possum). i've also come across ramblings about integrating ibutton support into openssl, but i dunno how pertinent that is, or even whether the work still exists. i just want to get rid of my passwds (or lock them up in a safe), and the ibutton seems

Author: Anthony Scarpino <Anthony.Scarpino at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 04f168232992beb7ebec3b25a69735bb3e2ab678 Total changesets: 1 Log message: zpool create now loads/prompts for key. Use random salt instead of guid. Fix 654 Files: update: usr/src/cmd/zfs/zfs_main.c update: usr/src/cmd/zoneadm/zfs.c update: usr/src/cmd/zpool/zpool_main.c update:

Author: izick Repository: /hg/zfs-crypto/gate Revision: f7c96af91f148327ba792c8fbcb9e49897664f9c Log message: PSARC 2005/572 PKCS#11 v2.20 4920408 PKCS#11 v2.20 support for the Crypto Framework 6287425 residual bzero''s in hmac part of sha2 6287428 add sha2 to the i.kcfconfbase upgrade script Files: create: usr/src/common/crypto/blowfish/blowfish_cbc_crypt.c create:

Author: Anthony Scarpino <Anthony.Scarpino at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: a2a39602f5d2629c170434c6b35e4b6512d33744 Total changesets: 1 Log message: fix pam module to use zpool_load_key property. Add some better error reporting Files: update: usr/src/lib/libzfs/common/libzfs_crypto.c update: usr/src/lib/pam_modules/zfs_key/zfs_key.c

I'm testing both sunfreeware and official sun (sfw) samba on Solaris 10. For some reason since yesterday, the smbd process just "hangs" at the start. No log is generated on server side Where smbd is started, I can't find any open port on 139 or 145 My OS is Solaris 10 # uname -a SunOS labo2 5.10 Generic_142900-13 sun4v sparc SUNW,SPARC-Enterprise-T5120 #

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/zfs-crypto-gate Latest revision: 0ca188d105065cb1c7a7575e3c3c86d173b8b7ed Total changesets: 1 Log message: dskek value isn''t the pool name clean up one XXX note Files: update: usr/src/cmd/zpool/zpool_main.c update: usr/src/lib/libzfs/common/libzfs_pool.c

Author: Anthony Scarpino <Anthony.Scarpino at Sun.COM> Repository: /hg/zfs-crypto/zfs-crypto-gate Latest revision: 8f164ec4380058ccbc31e7c8ab05c85d0c3d85c5 Total changesets: 1 Log message: aes cbc pad added to kernel software provider Files: update: usr/src/common/crypto/aes/aes_cbc_crypt.c update: usr/src/common/crypto/aes/aes_cbc_crypt.h update: usr/src/uts/common/crypto/io/aes.c

Author: Anthony Scarpino <Anthony.Scarpino at Sun.COM> Repository: /hg/zfs-crypto/gate Latest revision: 3df1f6b01f2e4234af95267b22947e416a38d4ca Total changesets: 1 Log message: removal of AES_CBC_PAD from kernel Files: update: usr/src/cmd/cmd-crypto/etc/kcf.conf update: usr/src/common/crypto/aes/aes_cbc_crypt.c update: usr/src/common/crypto/aes/aes_cbc_crypt.h update:

I have built Asterisk 1.4.4 on my Solaris 10 x86 box: LDFLAGS='-R/usr/sfw/lib -R/opt/csw/lib -L/opt/csw/lib -L/usr/sfw/lib' CPPFLAGS=-I/opt/csw/include ./configure -with-curl=/opt/csw --without-oss --without-vpb --prefix=/opt/asterisk-1.4 The build and install go fine but the asterisk executable reproducibly dumps core with a segmentation violation. If I start it as: asterisk -gc and

> Message: 1 > Date: Tue, 15 May 2007 23:01:24 -0400 > From: Frank Tarczynski <ftarz at mindspring.com> > Subject: [asterisk-users] Asterisk 1.4.4 reproducibly dumps core on > Solaris 10 > To: asterisk-users at lists.digium.com > Message-ID: <464A7404.5000706 at mindspring.com> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > I have

Author: Darren Moffat <darrenm at opensolaris.org> Repository: /hg/zfs-crypto/zfs-crypto-gate Latest revision: f2267f9eb807cc96d0d8ed72b186a4fae3490010 Total changesets: 1 Log message: merge with zfs-crypto-gate Files: delete: usr/src/lib/libcryptoutil/common/mechkeygen.c

We have a server running linux with a samba shared directory. We have sever windows xp machines that map the samba shared directory using the same user name and password. All has gone well for a couple of years. Now, on some of the machines, it won't allow the mapping of the samba share reporting "Access denied" I have made sure that the proper user name and password is used.

Hi, I am tracking down a problem and would like to know how I can follow a forked process with my dtrace script, or how I can trace a dynamic library. Here is the problem. I am tracing dtlogin, and specifically I am trying to determine what error libpkcs11`<routine> is returning. It turns out dtlogin forks a lot of processes, and I believe the second forked process is the one that winds

Hi, I'm trying the new feature "ssh-keygen(1) now supports signing certificate using a CA key that has been stored in a PKCS#11 token". According to the manpage, I should use "-D" option. And I had a problem with this option. root at ubuntu-desktop[/home/adam/temp7]#ssh-keygen -s ca_key.pub -D libpkcs11.so -I key_id id_rsa.pub dlopen libpkcs11.so failed: libpkcs11.so:

Author: darrenm Repository: /hg/zfs-crypto/gate Revision: 14d7bfad76ad917e7df568c6739d34eba6b60a33 Log message: 6368332 libpkcs11 should report that it is v2.20 not v2.11 Files: update: usr/src/lib/pkcs11/libpkcs11/common/pkcs11Conf.c update: usr/src/lib/pkcs11/libpkcs11/common/pkcs11Global.h

> ? 4. ssh-keygen with libpkcs11.so can't work (Nan) > I searched on my ubuntu server but found no libpkcs11.so. ?Also, I searched > online, and didn't find too much help. > Do I need to download the source of pkcs11, then compile and install on my > mahine? ?If yes, where could I get the source. > Or I misunderstood the new feature, and it should not be used in this

Author: eschrock Repository: /hg/zfs-crypto/gate Revision: 975fad4fa05753c23a18254797cce42bb33b4375 Log message: 6433264 crash when adding spare: nvlist_lookup_string(cnv, "path", &path) == 0 6433406 zfs_open() can leak memory on failure 6433408 namespace_reload() can leak memory on allocation failure 6433679 zpool_refresh_stats() has poor error semantics 6433680 changelist_gather()