[Gt-eos] gct and gsissh

[Brian Lin]

Hi Mischa et al.,

I think forking Mattias' version into the gridcf organization makes 
sense for maintaining version control history.

- Brian

On 09/07/2018 07:31 AM, Mischa Salle wrote:
> Hi Frank, others,
>
> I think it's probably good to focus on the version maintained by
> Mattias, but that's probably for Mattias to answer (-;
> What we could do is host that version under https://github.com/gridcf or
> alternatively adapt the current gridcf/gct version to the one maintained
> by Mattias.
>
> Concerning GSI-OpenSSH itself, I think it's use is not really in the
> same situations as GridFTP clients are typically used: although you can
> run quite some commands over GridFTP, it's not the same as SSH.
> When transferring real™ data I would use GridFTP and certainly not
> gsis{cp,ftp}. AFAIK (some) of the German supers use gsissh for
> kickstarting access.
>
> For the further future (don't remember whether I mentioned this before),
> one could probably make a different patch based on the adapted OpenSSH
> versions as shipped by RedHat and Debian, which have proper GSSAPI
> support (i.e. not just Kerberos, those patches were pushed by the
> Moonshot people which also requires a proper GSSAPI, and I think were
> based on the GSI-OpenSSH patch). It probably still requires a patched
> server, but might be able to use a stock client with just some extra
> modules installed (if I'm not mistaken).
>
>      Cheers,
>      Mischa
>
> On Thu, Sep 06, 2018 at 05:56:33PM +0200, Frank Scheiner wrote:
>> Hi all,
>>
>> ...and Christmas came in between...
>>
>> I think we never really finished this discussion.
>>
>> And recently the question about the status of GSI-OpenSSH came up in PRACE.
>> The GSI-OpenSSH repo on Github ([1]) is still based on OpenSSH 7.5p1 and no
>> commit has been made there since September 2017. Consequently the current
>> GCT still builds a source package for GSI-OpenSSH based on OpenSSH 7.5.p1
>> where OpenSSH 7.8p1 is already out.
>>
>> [1]: https://github.com/globus/gsi-openssh
>>
>> I'll try to summarize the points so far - please correct me if I'm wrong
>> somewhere:
>>
>> * Trying to get the GSI patch upstream into OpenSSH is a lost cause. Same
>> for the other patches.
>>
>> * The current version of GSI-OpenSSH "available from" the Globus Toolkit and
>> the current GCT is based on OpenSSH 7.5p1 and includes (1) the HPN patches,
>> (2) the iSSHD patches on top of the HPN patches, (3) the GSI patches on top
>> of the iSSHD patches and (4) the Fedora OpenSSL 1.1 support patch on top of
>> it all.
>>
>> * The EPEL/Fedora versions of GSI-OpenSSH that Mattias maintains are based
>> on the OpenSSH versions used in the respective EPEL/Fedora release and
>> contain all of the above minus the HPN and iSSHD patches and minus the parts
>> of the GSI patch that are already included in the EPEL/Fedora versions of
>> OpenSSH.
>>
>> * Jim proposed to focus on the EPEL/Fedora version(s) of Mattias
>>
>> ****
>>
>> So what are the next steps?
>>
>> Should we remove GSI-OpenSSH from the GCT? Although I personally consider
>> gsiscp and gsisftp (even with HPN patches) inferior to GridFTP clients, they
>> are certainly useful and users are usually already familiar with the non-GSI
>> versions.
>>
>> Should we switch to Mattias' version(s)? But how can we include this, as the
>> development happens in Fedora I assume?
>>
>> Where should we point users for the GSI-OpenSSH source and for support in
>> the future?
>>
>> Cheers,
>> Frank
>>
>> -- 
>> Frank Scheiner
>>
>> High Performance Computing Center Stuttgart (HLRS)
>> Department Project User Management & Accounting
>>
>> Email: scheiner at hlrs.de
>> Phone: +49 711 685 68039
>>
>
>
>> _______________________________________________
>> Gt-eos mailing list
>> Gt-eos at mailman.egi.eu
>> http://mailman.egi.eu/mailman/listinfo/gt-eos
>
>
>
> _______________________________________________
> Gt-eos mailing list
> Gt-eos at mailman.egi.eu
> http://mailman.egi.eu/mailman/listinfo/gt-eos

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.egi.eu/pipermail/discuss/attachments/20180907/f5583866/attachment.html>