If you think a bug might affect users in the 57 release, please set the correct tracking and status flags for Release Management.

Status

Release Engineering
General Automation
RESOLVED FIXED
4 years ago
4 years ago

People

(Reporter: catlee, Assigned: rail)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(1 attachment, 1 obsolete attachment)

(Reporter)

Description

4 years ago
One (small) reason why our command queues back up is that it takes about one second for the GSSAPI negotiation to fail when ssh'ing from the master to stage.

GSSAPI is globally enabled in /etc/ssh/ssh_config. We should probably remove it from there, or override it in ~/.ssh/config

GSSAPIAuthentication=no
(Assignee)

Comment 1

4 years ago
Is there any reason we want to have GSSAPIAuthentication=yes?
(Reporter)

Comment 2

4 years ago
Not that I know of.
Opsec folks, I think this is fine, but let us know if it's not?
Nothing that I know of from OPsec requires GSS nor depends on it.

Personally, I'm all for disabling anything that we're not explicately using, just on principle.

Go for it.  :-)
(Assignee)

Comment 5

4 years ago
Created attachment 745216 [details] [diff] [review]
kill GSSAPI
Assignee: nobody → rail
Status: NEW → ASSIGNED
Attachment #745216 - Flags: review?(dustin)
Comment on attachment 745216 [details] [diff] [review]
kill GSSAPI

Review of attachment 745216 [details] [diff] [review]:
-----------------------------------------------------------------

These should probably be explicit "no" instead of just removing them (even if the default is 'no', explicit is better than implicit)
Attachment #745216 - Flags: review?(dustin) → review-
(Assignee)

Comment 7

4 years ago
Created attachment 745222 [details] [diff] [review]
kill GSSAPI
Attachment #745216 - Attachment is obsolete: true
Attachment #745222 - Flags: review?(dustin)
Attachment #745222 - Flags: review?(dustin) → review+
(Assignee)

Comment 8

4 years ago
Comment on attachment 745222 [details] [diff] [review]
kill GSSAPI

https://hg.mozilla.org/build/puppet/rev/c356f4f8f697
Attachment #745222 - Flags: checked-in+
(Assignee)

Updated

4 years ago
Status: ASSIGNED → RESOLVED
Last Resolved: 4 years ago
Resolution: --- → FIXED
Product: mozilla.org → Release Engineering
You need to log in before you can comment on or make changes to this bug.