May 2009 - openSUSE Features - openSUSE Mailing Lists

[openFATE 306373] revival of openCA
by fate_noreply＠suse.de 15 Nov '10

15 Nov '10

Feature added by: Stephan Kulow (coolo) Feature #306373, revision 1, last change by Title: revival of openCA openSUSE-11.2: Unconfirmed Priority Requester: Important Requested by: Hans Witvliet (digi_hans) Description: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.3) Gecko/20060425 SUSE/1.5.0.3-7 Firefox/1.5.0.3 Any chance of reviving OpenCA? In the security manuals, chapter x509, it says that the yast-module for maintaing certificates is nice for small set-up's, but not intented for large roll-outs. OpenCA seems to be right for that job, with (poosible) seperate CA, RA, OSCP, support for smartcards and LDAP, mysql. If i'm not mistaken, Adrian maintained some time ago an old version of OpenCA for openSuSE_10.3. Hence my question: is it possible to re-create it for the 1.0.2 (ten-ten) version of openCA, preferably for openSUSE_11.1 and SLES-11 ? It seems that current verion of OpenCA does build on older versions of openSUSE, but fails to compile on 11.1. (not yet tried on sles11, but expect same results) Relations: - revival of openCA (novell/bugzilla/id: 491024) https://bugzilla.novell.com/show_bug.cgi?id=491024 Discussion: #1: Stephan Kulow (coolo) (2009-04-08 09:11:05) if you can't even get it to compile, it doesn't seem to be that well maintained. So I would think it's not good to rely on security of it. #2: Hans Witvliet (digi_hans) (2009-04-08 16:19:04) To put in perspective... I couldn't complete a compile of the latest version on 11.1. openca offers binaries for fedora, centos, ubuntu and open slowaris. I just tried it on 32/64-bit versions of 11.1, I can try it aagain on older versions. Allthough i just upgraded our whole environment, using our install server with xen farm wouldn't take too long. At work i've got a tough job keeping all the noses point to one direction. But it would be hard to defend sticking with open/sles with considerable effort if it compiles flawless (I kow: seeing is believing..) with others. It seems that OpenCA is the only opensource product in this class, comparing with CASA, yaST, tinyCA, pyCA that are only intended for small scale deployment. And for this particular assigment was specifically asked to evaluate OpenCA, regardless of the environment it runs in, though my first choice would be a sles11-cluster and secondly an open-11.1 cluster. #3: Stephan Kulow (coolo) (2009-04-08 23:58:21) you have two options: a) the openSUSE way: you're free to maintain it in openSUSE:Factory:Contrib (see en.opensuse.org/Contrib) b) the SLES way: you convince your presales contact person that there is no way around The "file an enhancement bug against openSUSE to get a SLES feature" does not work. #4: Hans Witvliet (digi_hans) (2009-04-09 15:22:41) Sorry, if i gave you the wrong impression. imho, openca looks great (from the docu and the live-version) It used to be included 10.0 - 10.3 with the distro itself, and later on it became also available on the OBS (Adrian). I presume that if you got someone who has spent some time before on it, it would be the first one to humbly ask to have a look again, instead of re-inventing the wheel. Personnaly, i work on the R&D department, only doing prototypes and prove-of-concepts and i am happy using openSuSE. Our production department however is using the official SLES-9 and now SLES-10 version. a) So if there is a version on the OBS for open_11.1 i would be happy. b) If it could be incorporated in the list of packages for SLE it would make you happy (sales) c) If the OBS could hold versions for 11.1 and SLE, you would be happier, (sales but no additional packages to officially maintain) Final word about the code: Yes, it is _old_ code, but the only thing that comes close with regards with its features, is the code that comes from AOL: http://www.redhat.com/certificate_system/ And i'm neither eager to switch to rh/fc/ct, nor to suggest a re-write of the 10MB from openCA. Hence my req to revive it on the OBS, anyone would benefit. Or do you have plans to "adopt" the above mentioned GPL-ed java code ;=) -- openSUSE Feature: https://features.opensuse.org/306373

1 3

[openFATE 306321] disk id change in fstab
by fate_noreply＠suse.de 15 Nov '10

15 Nov '10

Feature added by: Jean-Daniel Dodin (jdd_sysop) Feature #306321, revision 1, last change by Title: disk id change in fstab openSUSE-11.2: Unconfirmed Priority Requester: Important Requested by: Jean-Daniel Dodin (jdd_sysop) Description: "That basic request is that one or more simple tools be provided to allow a fstab to be automatically converted from /dev/sdaX nomenclature to one of the preferred methods." In other words, its now necessary to use YaST partitionner to change the fstab entry from /dev/sdx to the veeeeeeeeery long disk identification. This is very scary and is now nearly mandatory for updates. So it would be important to have some utility to make only this change in fstab and no other. If possible add the choice to use and set on the fly disk ID. -- openSUSE Feature: https://features.opensuse.org/306321

1 8

[openFATE 306291] ADD ability to launch YaST modules via SystemSettings
by fate_noreply＠suse.de 15 Nov '10

15 Nov '10

Feature added by: Stephan Kulow (coolo) Feature #306291, revision 1, last change by Title: ADD ability to launch YaST modules via SystemSettings openSUSE-11.2: Unconfirmed Priority Requester: Desirable Requested by: Paul Lubetsky (vegeek) Description: It would be better and simplier for novice to have only one configuration panel in the system, both for KDE and general System Administration via YaST. Similiar work was done for gnome: now opensuse has an integrated all-in-one control panel there. I propose to add an Administration tab in systemsettings, which would provide launchers for YaST`s system administration tools. Reproducible: Always Steps to Reproduce: Simply open menu: you`ll find there two different launchers for YaST and SystemSettings. Actual Results: Now SystemSettings and YaST aren`t integrated. Expected Results: User want to do some system administration tasks, he/she opens SystemSettings and opens required configuration tool. Something similiar was in SuSE 10.0 with KDE3.4. Relations: - ADD ability to launch YaST modules via SystemSettings (novell/bugzilla/id: 487611) https://bugzilla.novell.com/show_bug.cgi?id=487611 -- openSUSE Feature: https://features.opensuse.org/306291

1 7

[openFATE 306418] Bluetooth configuration via YaST
by fate_noreply＠suse.de 15 Nov '10

15 Nov '10

Feature added by: Joop Boonen (worldcitizen) Feature #306418, revision 1, last change by Title: Bluetooth configuration via YaST openSUSE-11.2: Unconfirmed Priority Requester: Important openSUSE-11.3: Unconfirmed Priority Requester: Important Requested by: Joop Boonen (worldcitizen) Description: Corrently is rather complex for a newbee to configue for instance a gps receiver that is connected via bluetooth. Configure /etc/bluetooth/rfcomm.conf rfcomm bind rfcomm0 start gpsd /dev/rfcomm0 It would be helpful is bleutooth and bluetooth devices could be configured via YaST. -- openSUSE Feature: https://features.opensuse.org/306418

1 7

[openFATE 306324] Improvements to Failsafe mode
by fate_noreply＠suse.de 15 Nov '10

15 Nov '10

Feature added by: Rajko Matovic (rajko_m) Feature #306324, revision 1, last change by Title: Improvements to Failsafe mode openSUSE-11.3: Unconfirmed Priority Requester: Important Requested by: Rajko Matovic (rajko_m) Description: Currently when kernel fails to load, user can only give up on installing openSUSE. Failsafe mode can help sometimes, but load of kernel parameters can introduce problems later. Knoppix offers alternatives that may work on particular hardware without going trough process of discovery of proper kernel parameters, and it has help pages available right from the boot screen. Both combined make booting possible with very little to no experience in kernel issues. -- openSUSE Feature: https://features.opensuse.org/306324

1 5

[openFATE 306443] change parted to use Hardware suggested sectors per track
by fate_noreply＠suse.de 05 Nov '10

05 Nov '10

Feature added by: Dean Giles (dgiles) Feature #306443, revision 1, last change by Title: change parted to use Hardware suggested sectors per track openSUSE-11.2: Unconfirmed Priority Requester: Important Requested by: Dean Giles (dgiles) Description: parted creates partitions which are automatically assigned 63 sectors per track. Hardware, such as HP raid devices, advertise that they want 32 sectors per track. It advertises that through ioctl HDIO_GETGEO. fdisk can utilize the hardware reported sectors per track. parted needs to be changed to do the same. See bug # 501152. Dean -- openSUSE Feature: https://features.opensuse.org/306443

1 20

[openFATE 306427] WLAN Driver for eeePCs
by fate_noreply＠suse.de 04 Nov '10

04 Nov '10

Feature added by: Dominik Heidler (dheidler) Feature #306427, revision 1, last change by Title: WLAN Driver for eeePCs openSUSE-11.2: Unconfirmed Priority Requester: Important openSUSE-11.3: Unconfirmed Priority Requester: Important Requested by: Dominik Heidler (dheidler) Description: When you are using openSUSE on an eeePC, only unencrypted and WEP Networks are working, because of Asus using a special Version of the Ateros WLAN chipset. You can fix this by installing the Kernel, provided at the end of this thred (http://www.pc-forum24.de/suse-treiber/10335-geloest-ralink-rt2860-unter-ope…) . -- openSUSE Feature: https://features.opensuse.org/306427

1 10

[openFATE 306308] Preview and cancel functions in openFATE edit mode
by fate_noreply＠suse.de 27 Oct '10

27 Oct '10

Feature added by: Rajko Matovic (rajko_m) Feature #306308, revision 1, last change by Title: Preview and cancel functions in openFATE edit mode openFATE: Unconfirmed Priority Requester: Desirable Requested by: Rajko Matovic (rajko_m) Description: Preview button - adds user comment, reply, usecase, testcase but leaves edit window opened, so that user can change layout. Cancel button - quits edit mode and drops all changes. -- openSUSE Feature: https://features.opensuse.org/306308

1 11

[openFATE 306194] openFATE Client
by fate_noreply＠suse.de 27 Oct '10

27 Oct '10

Feature added by: Raúl García (bgta) Feature #306194, revision 1, last change by Title: openFATE Client openFATE: Unconfirmed Priority Requester: Desirable Requested by: Raúl García (bgta) Description: It would be interesting to create a client like Bug Buddy to openFATE. With a desktop shortcut, the users can suggest new requirements for future developments. -- openSUSE Feature: https://features.opensuse.org/306194

1 6

[openFate 305690] Replace System-V init with upstart init
by fate_noreply＠suse.de 27 Oct '10

27 Oct '10

Feature added by: Vitaliy Tomin (HighwayStar) Feature #305690, revision 1, last change by Title: Replace System-V init with upstart init openSUSE-11.2: Unconfirmed Priority Requester: Important Requested by: Vitaliy Tomin (highwaystar) Partner organization: openSUSE.org Description: Upstart - an event-based init daemon. It can provide more flexible init system for more faster and effective boot and communication with the init daemon over D-Bus. upstart home page http://upstart.ubuntu.com/ -- openSUSE Feature: https://features.opensuse.org/?rm=feature_show&id=305690

1 56