Thread: [Sshkeychain-developers] packaging question: ssh?

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

Is there a reason that the ssh binary is included in the source code
repository?  Is /usr/bin/ssh not adequate?

Dustin

-- 
Open Source Storage Engineer
http://www.zmanda.com

Is there a reason that the ssh binary is included in the source code
repository?  Is /usr/bin/ssh not adequate?

Dustin

-- 
Open Source Storage Engineer
http://www.zmanda.com

IIRC, it's there for compatibility with Panther which lacked some of
the required options.

-Eric

On Sat, Apr 18, 2009 at 2:41 PM, Dustin J. Mitchell <dustin@v.igoro.us> wrote:
> Is there a reason that the ssh binary is included in the source code
> repository?  Is /usr/bin/ssh not adequate?
>
> Dustin
>
> --
> Open Source Storage Engineer
> http://www.zmanda.com
>
> ------------------------------------------------------------------------------
> Stay on top of everything new and different, both inside and
> around Java (TM) technology - register by April 22, and save
> $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
> 300 plus technical and hands-on sessions. Register today.
> Use priority code J9JMT32. http://p.sf.net/sfu/p
> _______________________________________________
> Sshkeychain-developers mailing list
> Ssh...@li...
> https://lists.sourceforge.net/lists/listinfo/sshkeychain-developers
>

-- 

Eric Warnke
er...@gm... / AIM:ericew
518-396-5277

"Any technology distinguishable from magic is insufficiently
advanced." - Gehm's Corollary to Clarke's Third Law

On Sat, Apr 18, 2009 at 3:56 PM, Eric Warnke <er...@gm...> wrote:
> IIRC, it's there for compatibility with Panther which lacked some of
> the required options.

Hmm, ok.  Are there licensing implications to this that we need to consider?

Dustin

-- 
Open Source Storage Engineer
http://www.zmanda.com

My personal option would be for either dropping panther support or
building openssh libs right in the main package.  Either would solve
the problem.

-Eric

On Sat, Apr 18, 2009 at 3:57 PM, Dustin J. Mitchell <dustin@v.igoro.us> wrote:
> On Sat, Apr 18, 2009 at 3:56 PM, Eric Warnke <er...@gm...> wrote:
>> IIRC, it's there for compatibility with Panther which lacked some of
>> the required options.
>
> Hmm, ok.  Are there licensing implications to this that we need to consider?
>
> Dustin
>
> --
> Open Source Storage Engineer
> http://www.zmanda.com
>

-- 

Eric Warnke
er...@gm... / AIM:ericew
518-396-5277

"Any technology distinguishable from magic is insufficiently
advanced." - Gehm's Corollary to Clarke's Third Law

On Sat, Apr 18, 2009 at 4:03 PM, Eric Warnke <er...@gm...> wrote:
> My personal option would be for either dropping panther support or
> building openssh libs right in the main package.  Either would solve
> the problem.

Arright:
  http://github.com/bartmatthaei/sshkeychain/issues/#issue/2

Dustin

-- 
Open Source Storage Engineer
http://www.zmanda.com

I'm not quite sure about dropping Panther support. I could imagine  
that one of the reasons
you want to use SSHKeychain could be that you're working on an older  
system, with no
built-in ssh-agent support. Not that this is a valid reason to keep  
Panther support, since
I imagine most OS X users update their stuff :-)

This brings us back to a question that has been asked on this  
mailinglist before: what is
the reason you want to use SSHKeychain on 10.5? It might be the extra  
security features
SSHKeychain has, or the tunnel support, but it sure isn't the basic  
ssh-agent stuff,
since that's already covered.

Personally, I think that we should make the whole 'ssh-agent' part  
optional, so you can choose
to use OS X's built-in implementation (or any other, for that matter)  
if you feel like it, and use
SSHKeychain as a helper application for tunnels and added security.

The tunnel implementation is also very rudimentary at the moment, so  
that should be improved
as well IMHO.

Any thoughts?

On Apr 18, 2009, at 10:13 PM, Dustin J. Mitchell wrote:

> On Sat, Apr 18, 2009 at 4:03 PM, Eric Warnke <er...@gm...> wrote:
>> My personal option would be for either dropping panther support or
>> building openssh libs right in the main package.  Either would solve
>> the problem.
>
> Arright:
>  http://github.com/bartmatthaei/sshkeychain/issues/#issue/2
>
> Dustin
>
> -- 
> Open Source Storage Engineer
> http://www.zmanda.com
>
> ------------------------------------------------------------------------------
> Stay on top of everything new and different, both inside and
> around Java (TM) technology - register by April 22, and save
> $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
> 300 plus technical and hands-on sessions. Register today.
> Use priority code J9JMT32. http://p.sf.net/sfu/p
> _______________________________________________
> Sshkeychain-developers mailing list
> Ssh...@li...
> https://lists.sourceforge.net/lists/listinfo/sshkeychain-developers

-- 
Bart Matthaei

Ambrero Software B.V.
http://www.ambrero.nl/

T: +31 (0)72 5626500
F: +31 (0)72 5626355

On Sun, Apr 19, 2009 at 8:33 AM, Bart Matthaei <ba...@dr...> wrote:
> I'm not quite sure about dropping Panther support. I could imagine
> that one of the reasons
> you want to use SSHKeychain could be that you're working on an older
> system, with no
> built-in ssh-agent support. Not that this is a valid reason to keep
> Panther support, since
> I imagine most OS X users update their stuff :-)

For some reason I can never remember the code-names for OS X versions,
but personally I have a system with 10.4 and a system with 10.3.  I'll
save my $80 to put toward new hardware, thankyouverymuch. :)

Since 'ssh' has been included already, and since there don't appear to
be licensing implications to including the binary, let's continue to
keep it in the build, possibly only using it for Panther.  If we come
up with a trickier issue, then dropping Panther support is fine.

> This brings us back to a question that has been asked on this
> mailinglist before: what is
> the reason you want to use SSHKeychain on 10.5? It might be the extra
> security features
> SSHKeychain has, or the tunnel support, but it sure isn't the basic
> ssh-agent stuff,
> since that's already covered.

But it is *exactly* the agent stuff I need it for in 10.4 and 10.3 :)

> Personally, I think that we should make the whole 'ssh-agent' part
> optional, so you can choose
> to use OS X's built-in implementation (or any other, for that matter)
> if you feel like it, and use
> SSHKeychain as a helper application for tunnels and added security.

This sounds like a great proposal.

> The tunnel implementation is also very rudimentary at the moment, so
> that should be improved
> as well IMHO.

No argument there.

To be honest, the thing I'm interested in chasing down is an
occasional livelock that results in SSHKeychain using up 100% CPU.
With that fixed, I'll be completely happy with the app :)

Dustin

-- 
Open Source Storage Engineer
http://www.zmanda.com

Didn't we just have this discussion?

The ssh binary is included because /usr/bin/ssh on Panther doesn't  
work right. SSHKeychain detects the current OS and uses the packaged  
ssh on Panther and /usr/bin/ssh everywhere else.

-Kevin Ballard

On Apr 18, 2009, at 10:38 AM, Dustin J. Mitchell wrote:

> Is there a reason that the ssh binary is included in the source code
> repository?  Is /usr/bin/ssh not adequate?
>
> Dustin
>
> -- 
> Open Source Storage Engineer
> http://www.zmanda.com
>
> ------------------------------------------------------------------------------
> Stay on top of everything new and different, both inside and
> around Java (TM) technology - register by April 22, and save
> $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
> 300 plus technical and hands-on sessions. Register today.
> Use priority code J9JMT32. http://p.sf.net/sfu/p
> _______________________________________________
> Sshkeychain-developers mailing list
> Ssh...@li...
> https://lists.sourceforge.net/lists/listinfo/sshkeychain-developers
>

-- 
Kevin Ballard
http://kevin.sb.org
ke...@sb...
http://www.tildesoft.com

This was a duplicate that Dustin sent from the wrong address and was  
held by mailman, apparantly.
He'd already resent the post from the correct address.

On Apr 20, 2009, at 11:03 AM, Kevin Ballard wrote:

> Didn't we just have this discussion?
>
> The ssh binary is included because /usr/bin/ssh on Panther doesn't  
> work right. SSHKeychain detects the current OS and uses the packaged  
> ssh on Panther and /usr/bin/ssh everywhere else.
>
> -Kevin Ballard
>
> On Apr 18, 2009, at 10:38 AM, Dustin J. Mitchell wrote:
>
>> Is there a reason that the ssh binary is included in the source code
>> repository?  Is /usr/bin/ssh not adequate?
>>
>> Dustin
>>
>> -- 
>> Open Source Storage Engineer
>> http://www.zmanda.com
>>
>> ------------------------------------------------------------------------------
>> Stay on top of everything new and different, both inside and
>> around Java (TM) technology - register by April 22, and save
>> $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
>> 300 plus technical and hands-on sessions. Register today.
>> Use priority code J9JMT32. http://p.sf.net/sfu/p
>> _______________________________________________
>> Sshkeychain-developers mailing list
>> Ssh...@li...
>> https://lists.sourceforge.net/lists/listinfo/sshkeychain-developers
>>
>
> -- 
> Kevin Ballard
> http://kevin.sb.org
> ke...@sb...
> http://www.tildesoft.com
>
>
> ------------------------------------------------------------------------------
> Stay on top of everything new and different, both inside and
> around Java (TM) technology - register by April 22, and save
> $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
> 300 plus technical and hands-on sessions. Register today.
> Use priority code J9JMT32. http://p.sf.net/sfu/p_______________________________________________
> Sshkeychain-developers mailing list
> Ssh...@li...
> https://lists.sourceforge.net/lists/listinfo/sshkeychain-developers

-- 
Bart Matthaei

Ambrero Software B.V.
http://www.ambrero.nl/

T: +31 (0)72 5626500
F: +31 (0)72 5626355