From allen at ua.edu Mon Jun 15 07:29:41 2015 From: allen at ua.edu (Beddingfield, Allen) Date: Mon, 15 Jun 2015 13:29:41 +0000 Subject: [sles-beta] SLES 12 SP1 program Message-ID: <98183D81-B072-442F-BA31-C481432060F8@ua.edu> Have I missed something? I didn?t see any announcement about 12 SP1 beta? Slightly confused? -- Allen Beddingfield Systems Engineer The University of Alabama From: > on behalf of Garry Wong Date: Monday, June 15, 2015 at 2:02 AM To: "beta-programs at lists.suse.com", "beta-programs at list.suse.com", "sles-beta at lists.suse.com", "fcrozat at suse.com" Subject: [sles-beta] SLES 12 SP1 program Dear all, Would you provide the link to join SLES 12 SP1 program and down load SLES12 SP1 for testing ? Here are my information: 1. Company: Foxconn 2. Name: Garry Wong 3. E-mail: garry.wong at foxconn.com 4. Product: SLES 12 SP1 program Thanks and best regards, Garry -------------- next part -------------- An HTML attachment was scrubbed... URL: From kukuk at suse.de Mon Jun 15 07:32:28 2015 From: kukuk at suse.de (Thorsten Kukuk) Date: Mon, 15 Jun 2015 15:32:28 +0200 Subject: [sles-beta] SLES 12 SP1 program In-Reply-To: <98183D81-B072-442F-BA31-C481432060F8@ua.edu> References: <98183D81-B072-442F-BA31-C481432060F8@ua.edu> Message-ID: <20150615133227.GA28883@suse.de> On Mon, Jun 15, Beddingfield, Allen wrote: > Have I missed something? I didn?t see any announcement about 12 SP1 beta? Slightly confused? No, you haven't missed anything. Some people are only far too early. Thorsten > -- > Allen Beddingfield > Systems Engineer > The University of Alabama > > > From: > on behalf of Garry Wong > Date: Monday, June 15, 2015 at 2:02 AM > To: "beta-programs at lists.suse.com", "beta-programs at list.suse.com", "sles-beta at lists.suse.com", "fcrozat at suse.com" > Subject: [sles-beta] SLES 12 SP1 program > > Dear all, > > Would you provide the link to join SLES 12 SP1 program and down load SLES12 SP1 for testing ? > > Here are my information: > 1. Company: Foxconn > 2. Name: Garry Wong > 3. E-mail: garry.wong at foxconn.com > 4. Product: SLES 12 SP1 program > > Thanks and best regards, > > Garry > _______________________________________________ > sles-beta mailing list > sles-beta at lists.suse.com > http://lists.suse.com/mailman/listinfo/sles-beta -- Thorsten Kukuk, Senior Architect SLES & Common Code Base SUSE LINUX GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany GF: Felix Imend?rffer, Jane Smithard, Dilip Upmanyu, Graham Norton, HRB 21284 (AG N?rnberg) From fcrozat at suse.com Mon Jun 15 07:54:41 2015 From: fcrozat at suse.com (Frederic Crozat) Date: Mon, 15 Jun 2015 15:54:41 +0200 Subject: [sles-beta] SLES 12 SP1 program In-Reply-To: <20150615133227.GA28883@suse.de> References: <98183D81-B072-442F-BA31-C481432060F8@ua.edu> <20150615133227.GA28883@suse.de> Message-ID: <1434376481.12377.3.camel@par-r81vxc7.par.novell.com> Le lundi 15 juin 2015 ? 15:32 +0200, Thorsten Kukuk a ?crit : > On Mon, Jun 15, Beddingfield, Allen wrote: > > > Have I missed something? I didn?t see any announcement about 12 SP1 beta? Slightly confused? > > No, you haven't missed anything. Some people are only far too early. Indeed. SLE12 SP1 beta test hasn't started yet. We will send survey soon to current SP4 beta testers for SLE12 SP1 beta test application. Don't worry :) -- Frederic Crozat Enterprise Desktop Release Manager SUSE From allen at ua.edu Mon Jun 15 08:35:12 2015 From: allen at ua.edu (Beddingfield, Allen) Date: Mon, 15 Jun 2015 14:35:12 +0000 Subject: [sles-beta] SLES 12 SP1 program In-Reply-To: <1434376481.12377.3.camel@par-r81vxc7.par.novell.com> References: <98183D81-B072-442F-BA31-C481432060F8@ua.edu> <20150615133227.GA28883@suse.de> <1434376481.12377.3.camel@par-r81vxc7.par.novell.com> Message-ID: <84F6079F-A998-43C2-A8F9-DF35E6687A2D@ua.edu> Ah, good to know. I thought it may be a bit early yet! -- Allen Beddingfield Systems Engineer The University of Alabama On 6/15/15, 8:54 AM, "sles-beta-bounces at lists.suse.com on behalf of Frederic Crozat" wrote: >Le lundi 15 juin 2015 ? 15:32 +0200, Thorsten Kukuk a ?crit : >> On Mon, Jun 15, Beddingfield, Allen wrote: >> >> > Have I missed something? I didn?t see any announcement about 12 SP1 beta? Slightly confused? >> >> No, you haven't missed anything. Some people are only far too early. > >Indeed. > >SLE12 SP1 beta test hasn't started yet. > >We will send survey soon to current SP4 beta testers for SLE12 SP1 beta >test application. > >Don't worry :) > > >-- >Frederic Crozat >Enterprise Desktop Release Manager >SUSE > > >_______________________________________________ >sles-beta mailing list >sles-beta at lists.suse.com >http://lists.suse.com/mailman/listinfo/sles-beta From Joel.Barbieri at merge.com Mon Jun 15 15:32:58 2015 From: Joel.Barbieri at merge.com (Joel Barbieri) Date: Mon, 15 Jun 2015 21:32:58 +0000 Subject: [sles-beta] SLES 11 SP4 sshd/fips Message-ID: <1E287A5DDB506E478DE9CAE3C8492D01010132C65A@BRDC-MBX-1.network.internal> Has anyone fips'd their kernel [via boot param] and openssl [OPENSSL_FORCE_FIPS_MODE in /etc/profile.local] and had a happy sshd? From an strace of /usr/sbin/sshd, it seems like it might be looking for /usr/sbin/sshd.hmac possibly and getting ENOENT (no such file or directory). It's hard to include more information as I only have the console and no remote access any longer. :( This configuration worked on SLES11SP3 with the exception of utilizing DSA instead of RSA. I will submit a bug report if no one has any simple answers for me, like, hmac is dead, and you must use [fill in the blank]. Also, I did switch to RSA from DSA as this version of openssh/openssl is stricter. What is and is not FIPS acceptable still tends to remain a bit of a mystery in the openssl 0.9.8 world. Things are more specific in the >1.0 openssl world. Thanks, -Joel Joel Barbieri Merge Healthcare #grub.cfg ###Don't change this comment - YaST2 identifier: Original name: linux### title SUSE Linux Enterprise Server 11 SP4 - 3.0.101-64 root (hd0,0) kernel /boot/vmlinuz-3.0.101-64-default root=/dev/sda1 ramdisk=65536 io_delay=none resume=/dev/sda2 splash=silent crashkernel= showopts elevator=cfq fips=1 initrd /boot/initrd-3.0.101-64-default # last line of profile.local export OPENSSL_FORCE_FIPS_MODE=1 #sshd_config Port 22 Protocol 2 ListenAddress 0.0.0.0 HostKey /etc/ssh/ssh_host_rsa_key SyslogFacility AUTH LogLevel QUIET LoginGraceTime 1m PermitRootLogin without-password StrictModes yes RSAAuthentication yes PubkeyAuthentication yes AuthorizedKeysFile .ssh/authorized_keys RhostsRSAAuthentication no HostbasedAuthentication no IgnoreRhosts yes PasswordAuthentication no PermitEmptyPasswords no Ciphers aes128-ctr,aes192-ctr,aes256-ctr MACs hmac-sha1 UsePAM yes AllowTcpForwarding no X11Forwarding no #PrintMotd yes #PrintLastLog yes TCPKeepAlive yes #UseLogin no UsePrivilegeSeparation yes PermitUserEnvironment no Compression no UseDNS no MaxSessions 1 GatewayPorts no GSSAPIAuthentication no KerberosAuthentication no PermitTunnel no AllowGroups raccess #PidFile /var/run/sshd.pid #MaxStartups 10 # no default banner path Banner /etc/issue.net Subsystem sftp /usr/lib64/ssh/sftp-server From meissner at suse.de Tue Jun 16 02:10:20 2015 From: meissner at suse.de (Marcus Meissner) Date: Tue, 16 Jun 2015 10:10:20 +0200 Subject: [sles-beta] SLES 11 SP4 sshd/fips In-Reply-To: <1E287A5DDB506E478DE9CAE3C8492D01010132C65A@BRDC-MBX-1.network.internal> References: <1E287A5DDB506E478DE9CAE3C8492D01010132C65A@BRDC-MBX-1.network.internal> Message-ID: <20150616081020.GI24478@suse.de> Hi, This is a mistake in packaging/delivery, can you open a bugreport please? Ciao, MArcus On Mon, Jun 15, 2015 at 09:32:58PM +0000, Joel Barbieri wrote: > > Has anyone fips'd their kernel [via boot param] and openssl [OPENSSL_FORCE_FIPS_MODE in /etc/profile.local] and had a happy sshd? > > From an strace of /usr/sbin/sshd, it seems like it might be looking for /usr/sbin/sshd.hmac possibly and getting ENOENT (no such file or directory). It's hard to include more information as I only have the console and no remote access any longer. :( > > This configuration worked on SLES11SP3 with the exception of utilizing DSA instead of RSA. > > I will submit a bug report if no one has any simple answers for me, like, hmac is dead, and you must use [fill in the blank]. Also, I did switch to RSA from DSA as this version of openssh/openssl is stricter. What is and is not FIPS acceptable still tends to remain a bit of a mystery in the openssl 0.9.8 world. Things are more specific in the >1.0 openssl world. > > Thanks, > > -Joel > > Joel Barbieri > Merge Healthcare > > #grub.cfg > ###Don't change this comment - YaST2 identifier: Original name: linux### > title SUSE Linux Enterprise Server 11 SP4 - 3.0.101-64 > root (hd0,0) > kernel /boot/vmlinuz-3.0.101-64-default root=/dev/sda1 ramdisk=65536 io_delay=none resume=/dev/sda2 splash=silent crashkernel= showopts elevator=cfq fips=1 > initrd /boot/initrd-3.0.101-64-default > > # last line of profile.local > export OPENSSL_FORCE_FIPS_MODE=1 > > #sshd_config > Port 22 > Protocol 2 > ListenAddress 0.0.0.0 > > HostKey /etc/ssh/ssh_host_rsa_key > > SyslogFacility AUTH > LogLevel QUIET > > LoginGraceTime 1m > PermitRootLogin without-password > StrictModes yes > > RSAAuthentication yes > PubkeyAuthentication yes > AuthorizedKeysFile .ssh/authorized_keys > > RhostsRSAAuthentication no > HostbasedAuthentication no > IgnoreRhosts yes > > PasswordAuthentication no > PermitEmptyPasswords no > > Ciphers aes128-ctr,aes192-ctr,aes256-ctr > MACs hmac-sha1 > UsePAM yes > > AllowTcpForwarding no > X11Forwarding no > #PrintMotd yes > #PrintLastLog yes > TCPKeepAlive yes > #UseLogin no > UsePrivilegeSeparation yes > PermitUserEnvironment no > Compression no > UseDNS no > MaxSessions 1 > GatewayPorts no > GSSAPIAuthentication no > KerberosAuthentication no > PermitTunnel no > AllowGroups raccess > #PidFile /var/run/sshd.pid > #MaxStartups 10 > > # no default banner path > Banner /etc/issue.net > Subsystem sftp /usr/lib64/ssh/sftp-server > _______________________________________________ > sles-beta mailing list > sles-beta at lists.suse.com > http://lists.suse.com/mailman/listinfo/sles-beta > -- Marcus Meissner,SUSE LINUX GmbH; Maxfeldstrasse 5; D-90409 Nuernberg; Zi. 3.1-33,+49-911-740 53-432,,serv=loki,mail=wotan,type=real From behlert at suse.com Fri Jun 19 05:08:40 2015 From: behlert at suse.com (Stefan Behlert) Date: Fri, 19 Jun 2015 13:08:40 +0200 Subject: [sles-beta] SLE 11 SP4 GMC delayed Message-ID: <20150619110840.GM23790@suse.de> Hi all, we know you are eagerly waiting for the GMC images to be released today. Unfortunately, this will not be the case. An issue has been identified in yesterdays tests that we need to be fixed before we can call it a GMC. The issue is fixed meanwhile, and testing is in progress, but this still means we cannot release today. Currently we expect a release beginning of next week. We are sorry for any inconveniences this may cause. thanks, Your SUSE Linux Enterprise Team -- Stefan Behlert, SUSE LINUX Release Manager Enterprise Server Maxfeldstr. 5, D-90409 Nuernberg, Germany Phone +49-911-74053-173 SUSE LINUX GmbH, Nuernberg; GF: Felix Imendoerffer, Jane Smithard, Dilip Upmanyu, Graham Norton, HRB 21284 (AG Nuernberg)