RE: MINA SSHD question
Hi, Do you have any idea about that? We found when we consume some buffer to get traffic, it's very slow. BRs/Faxin -Original Message- From: FaXin Zhong Sent: Wednesday, November 07, 2012 10:55 PM To: dev@mina.apache.org Subject: RE: MINA SSHD question Hi Guillaume, We are doing MINA sshd server performance test, found traffic throughput over sshd decrease 30% compared with Telnet connection, we know the security will generate some overload, but is it normal for 30% decreasement? thanks. BRs/Faxin From: Guillaume Nodet [gno...@gmail.com] Sent: Wednesday, November 07, 2012 6:01 PM To: dev Subject: Re: MINA SSHD question The SSHD public key authentication delegates the real authentication to a PublickeyAuthenticator object which you need to implement and provide in order for public key authentication to work. https://github.com/apache/mina-sshd/blob/trunk/sshd-core/src/main/java/org/apache/sshd/server/PublickeyAuthenticator.java On Wed, Nov 7, 2012 at 10:44 AM, FaXin Zhong faxin.zh...@ericsson.comwrote: So I think it just provide framework, instead of providing API for us to consume the public key directly etc... then tell us auth is ok or not. We seems we need find another 3PP to do the public key authentication method and integrate it into mina framework? BRs/Faxin -Original Message- From: Guillaume Nodet [mailto:gno...@gmail.com] Sent: Wednesday, November 07, 2012 5:15 PM To: dev Subject: Re: MINA SSHD question You need to implement org.apache.sshd.server.UserAuth Look for example at the password authentication https://github.com/apache/mina-sshd/blob/trunk/sshd-core/src/main/java /org/apache/sshd/server/auth/UserAuthPassword.java You can configure the auth factories using sshd.setUserAuthFactories(Arrays.NamedFactoryUserAuthasList(new AuthPassword.Factory())); On Wed, Nov 7, 2012 at 10:02 AM, FaXin Zhong faxin.zh...@ericsson.com wrote: Hi, Can you help me where I can use it (mina class)? Very appreciated indeed, we just want to shorten the lead time because project is so urgent! BRs/Faxin -Original Message- From: Guillaume Nodet [mailto:gno...@gmail.com] Sent: Wednesday, November 07, 2012 4:48 PM To: dev Subject: Re: MINA SSHD question Mina SSHD supports password, public key and gss authentication (plus no authentication), but it's quite easy to add your own mechanism if you need or to replace an existing one. On Wed, Nov 7, 2012 at 7:57 AM, FaXin Zhong faxin.zh...@ericsson.com wrote: Hi Guillaume and all, We also need support standard SSH authentications like key store, SSH user/password (not application own authentication), does MINA support it? since our designer find MINA only support authentication framework, if you want to support ssh key, you need find another way, is that the case? Thanks. BRs/Faxin -Original Message- From: Guillaume Nodet [mailto:gno...@gmail.com] Sent: Friday, November 02, 2012 3:19 PM To: dev@mina.apache.org Subject: Re: MINA SSHD question You can create your own PasswordAuthenticator implementation that will delegate to your external system and use that one when configuring the sshd server. On Fri, Nov 2, 2012 at 6:46 AM, FaXin Zhong faxin.zh...@ericsson.com wrote: Hi, Thanks for your proposal. Another question is: when we login into our system, we need authenticate user towards the external centralized server, e.g. Diameter. Currently it seems we must use MINA internal ssh authentication mechanism, is there any way to bypass it? BRs/Faxin -Original Message- From: Guillaume Nodet [mailto:gno...@gmail.com] Sent: Thursday, November 01, 2012 3:55 PM To: dev@mina.apache.org Subject: Re: MINA SSHD question The client is in control, you can't change anything on the server side for that. You need to modify putty and recompile it to suit your needs I suppose. On Thu, Nov 1, 2012 at 3:31 AM, FaXin Zhong faxin.zh...@ericsson.com wrote: Hi Again, Either removing the login as and password or changing them to username and password are both OK for us. We have realized letting customer input username and password on the screen, but the login as and password are still printed there, which is ugly for us. BRs/Faxin -Original Message- From: FaXin Zhong Sent: Thursday, November 01, 2012 10:25 AM To: dev@mina.apache.org Cc: Led Xu Subject: RE: MINA SSHD question Hi, We are using mina sshd server. We create default ssh server instance, start it with my own port. Then we use putty to login our sshd server, the login as and password are printed in putty terminal. Now we need change
Re: Mina 3.0 Sonar Profile
We did. Julien did committed some code. Lets see if we those changes. On Thu, Nov 8, 2012 at 2:41 PM, Emmanuel Lécharny elecha...@gmail.comwrote: Le 11/8/12 10:01 AM, Ashish a écrit : Does anyone know why our Sonar profile hasn't been updated since Sept 30th 2012? http://nemo.sonarsource.org/**dashboard/index/387414?did=1http://nemo.sonarsource.org/dashboard/index/387414?did=1 I guess we haven't added any code since last september... -- Regards, Cordialement, Emmanuel Lécharny www.iktek.com -- thanks ashish Blog: http://www.ashishpaliwal.com/blog My Photo Galleries: http://www.pbase.com/ashishpaliwal
Re: MINA SSHD question
I have no numbers sorry. A long time ago I did some performance experiments on sshd by tranferring large amount of data and the perfs were only slightly slower than using a native ssh / sshd client, so I did not experiment much further.You can try experimenting by compating mina sshd with openssh, but comparing with telnet will just give you a lower number without good indication. On Thu, Nov 8, 2012 at 10:16 AM, FaXin Zhong faxin.zh...@ericsson.comwrote: Hi, Do you have any idea about that? We found when we consume some buffer to get traffic, it's very slow. BRs/Faxin -Original Message- From: FaXin Zhong Sent: Wednesday, November 07, 2012 10:55 PM To: dev@mina.apache.org Subject: RE: MINA SSHD question Hi Guillaume, We are doing MINA sshd server performance test, found traffic throughput over sshd decrease 30% compared with Telnet connection, we know the security will generate some overload, but is it normal for 30% decreasement? thanks. BRs/Faxin From: Guillaume Nodet [gno...@gmail.com] Sent: Wednesday, November 07, 2012 6:01 PM To: dev Subject: Re: MINA SSHD question The SSHD public key authentication delegates the real authentication to a PublickeyAuthenticator object which you need to implement and provide in order for public key authentication to work. https://github.com/apache/mina-sshd/blob/trunk/sshd-core/src/main/java/org/apache/sshd/server/PublickeyAuthenticator.java On Wed, Nov 7, 2012 at 10:44 AM, FaXin Zhong faxin.zh...@ericsson.com wrote: So I think it just provide framework, instead of providing API for us to consume the public key directly etc... then tell us auth is ok or not. We seems we need find another 3PP to do the public key authentication method and integrate it into mina framework? BRs/Faxin -Original Message- From: Guillaume Nodet [mailto:gno...@gmail.com] Sent: Wednesday, November 07, 2012 5:15 PM To: dev Subject: Re: MINA SSHD question You need to implement org.apache.sshd.server.UserAuth Look for example at the password authentication https://github.com/apache/mina-sshd/blob/trunk/sshd-core/src/main/java /org/apache/sshd/server/auth/UserAuthPassword.java You can configure the auth factories using sshd.setUserAuthFactories(Arrays.NamedFactoryUserAuthasList(new AuthPassword.Factory())); On Wed, Nov 7, 2012 at 10:02 AM, FaXin Zhong faxin.zh...@ericsson.com wrote: Hi, Can you help me where I can use it (mina class)? Very appreciated indeed, we just want to shorten the lead time because project is so urgent! BRs/Faxin -Original Message- From: Guillaume Nodet [mailto:gno...@gmail.com] Sent: Wednesday, November 07, 2012 4:48 PM To: dev Subject: Re: MINA SSHD question Mina SSHD supports password, public key and gss authentication (plus no authentication), but it's quite easy to add your own mechanism if you need or to replace an existing one. On Wed, Nov 7, 2012 at 7:57 AM, FaXin Zhong faxin.zh...@ericsson.com wrote: Hi Guillaume and all, We also need support standard SSH authentications like key store, SSH user/password (not application own authentication), does MINA support it? since our designer find MINA only support authentication framework, if you want to support ssh key, you need find another way, is that the case? Thanks. BRs/Faxin -Original Message- From: Guillaume Nodet [mailto:gno...@gmail.com] Sent: Friday, November 02, 2012 3:19 PM To: dev@mina.apache.org Subject: Re: MINA SSHD question You can create your own PasswordAuthenticator implementation that will delegate to your external system and use that one when configuring the sshd server. On Fri, Nov 2, 2012 at 6:46 AM, FaXin Zhong faxin.zh...@ericsson.com wrote: Hi, Thanks for your proposal. Another question is: when we login into our system, we need authenticate user towards the external centralized server, e.g. Diameter. Currently it seems we must use MINA internal ssh authentication mechanism, is there any way to bypass it? BRs/Faxin -Original Message- From: Guillaume Nodet [mailto:gno...@gmail.com] Sent: Thursday, November 01, 2012 3:55 PM To: dev@mina.apache.org Subject: Re: MINA SSHD question The client is in control, you can't change anything on the server side for that. You need to modify putty and recompile it to suit your needs I suppose. On Thu, Nov 1, 2012 at 3:31 AM, FaXin Zhong faxin.zh...@ericsson.com wrote: Hi Again, Either removing the login as and password or changing them to username and password are both OK for us. We have realized letting customer input username and password
Re: Mina 3.0 Sonar Profile
I think we changed the SVN url and added a /mina/ before the /trunk. jenkins build suffered that syndrome and automatically unactivated On Thu, Nov 8, 2012 at 10:39 AM, Ashish paliwalash...@gmail.com wrote: We did. Julien did committed some code. Lets see if we those changes. On Thu, Nov 8, 2012 at 2:41 PM, Emmanuel Lécharny elecha...@gmail.com wrote: Le 11/8/12 10:01 AM, Ashish a écrit : Does anyone know why our Sonar profile hasn't been updated since Sept 30th 2012? http://nemo.sonarsource.org/**dashboard/index/387414?did=1 http://nemo.sonarsource.org/dashboard/index/387414?did=1 I guess we haven't added any code since last september... -- Regards, Cordialement, Emmanuel Lécharny www.iktek.com -- thanks ashish Blog: http://www.ashishpaliwal.com/blog My Photo Galleries: http://www.pbase.com/ashishpaliwal
Re: Mina 3.0 Sonar Profile
Le 11/8/12 12:20 PM, Julien Vermillard a écrit : I think we changed the SVN url and added a /mina/ before the /trunk. I have created a JIRA in order to have MINA being updated, and the other subprojects to be added : https://issues.apache.org/jira/browse/INFRA-5495 -- Regards, Cordialement, Emmanuel Lécharny www.iktek.com
Re: Mina 3.0 Sonar Profile
It's back ! https://analysis.apache.org/drilldown/violations/24437 Le 11/8/12 12:20 PM, Julien Vermillard a écrit : I think we changed the SVN url and added a /mina/ before the /trunk. jenkins build suffered that syndrome and automatically unactivated On Thu, Nov 8, 2012 at 10:39 AM, Ashish paliwalash...@gmail.com wrote: We did. Julien did committed some code. Lets see if we those changes. On Thu, Nov 8, 2012 at 2:41 PM, Emmanuel Lécharny elecha...@gmail.com wrote: Le 11/8/12 10:01 AM, Ashish a écrit : Does anyone know why our Sonar profile hasn't been updated since Sept 30th 2012? http://nemo.sonarsource.org/**dashboard/index/387414?did=1 http://nemo.sonarsource.org/dashboard/index/387414?did=1 I guess we haven't added any code since last september... -- Regards, Cordialement, Emmanuel Lécharny www.iktek.com -- thanks ashish Blog: http://www.ashishpaliwal.com/blog My Photo Galleries: http://www.pbase.com/ashishpaliwal -- Regards, Cordialement, Emmanuel Lécharny www.iktek.com
Re: Mina 3.0 Sonar Profile
It's 2.0.8 version.. The link I sent was different (it was for trunk). I think it might have got broken when we changed our directory structure. Anyways not priority, it's definitely helpful, but not a blocker :) On Thu, Nov 8, 2012 at 7:02 PM, Emmanuel Lécharny elecha...@gmail.comwrote: It's back ! https://analysis.apache.org/drilldown/violations/24437 Le 11/8/12 12:20 PM, Julien Vermillard a écrit : I think we changed the SVN url and added a /mina/ before the /trunk. jenkins build suffered that syndrome and automatically unactivated On Thu, Nov 8, 2012 at 10:39 AM, Ashish paliwalash...@gmail.com wrote: We did. Julien did committed some code. Lets see if we those changes. On Thu, Nov 8, 2012 at 2:41 PM, Emmanuel Lécharny elecha...@gmail.com wrote: Le 11/8/12 10:01 AM, Ashish a écrit : Does anyone know why our Sonar profile hasn't been updated since Sept 30th 2012? http://nemo.sonarsource.org/**dashboard/index/387414?did=1 http://nemo.sonarsource.org/dashboard/index/387414?did=1 I guess we haven't added any code since last september... -- Regards, Cordialement, Emmanuel Lécharny www.iktek.com -- thanks ashish Blog: http://www.ashishpaliwal.com/blog My Photo Galleries: http://www.pbase.com/ashishpaliwal -- Regards, Cordialement, Emmanuel Lécharny www.iktek.com -- thanks ashish Blog: http://www.ashishpaliwal.com/blog My Photo Galleries: http://www.pbase.com/ashishpaliwal
Re: Mina 3.0 Sonar Profile
Le 11/8/12 2:43 PM, Ashish a écrit : It's 2.0.8 version.. The link I sent was different (it was for trunk). I think it might have got broken when we changed our directory structure. Anyways not priority, it's definitely helpful, but not a blocker :) I have requested a sonar instance for both MINA 2.0 and MINA 3.0. It will be done later this afternon. Right now, the 2.0 sonar instance has been fixed and reflects the current state. -- Regards, Cordialement, Emmanuel Lécharny www.iktek.com
Re: synchronous client and sever socket messaging
On Thu, Nov 8, 2012 at 7:55 AM, daniel vettori daniel.vettori...@gmail.com wrote: Thanks ...for zookeeper..one more small problem is ...in this case one client and one server. i send one message from client to server with some properties .then i dont want second message to be sent to server till i received the reply from server(reply is some message after delimitation)..the problem is coming in present scenerio is i attach some properties with message (from client) and want the replied messsage and attach that same properties(that i'l store in session) for furthur use. rigt ow i m trying session.suspendwrite() and resume things.dont want the second message to cliet till first reply from server. how do i approach? If this is a Zookeeper question, you'll get the best support over on their lists. Bernd
RE: MINA SSHD question
Hi Guillaume, We have tested it with openssh tunneling, it doesn't lower much comparing with telnet. We don't know if we don't use correct I/O API because we have little knowledge for MINA before. Do you have some examples for us? We're even thinking about using asnc I/O interface. See our tries: sshd performance issue, basically no breakthrough so far a. identified the problem in mina - sshd 3pp, since in application layer is quite simple b. tried Compression - no improvement c. tried change ChannelOutputStream to be single thread - no improvement d. tried change session default buffer size to 2 or 4 - no improvement e. tried not echo back - get some improvement but not compliant with requirement what to do next: if time allows, we need more time for further study and understanding of mina async IO model, maybe we can hit somewhere. Actually our time is less and less. BRs/Faxin -Original Message- From: Guillaume Nodet [mailto:gno...@gmail.com] Sent: Thursday, November 08, 2012 6:11 PM To: dev Subject: Re: MINA SSHD question I have no numbers sorry. A long time ago I did some performance experiments on sshd by tranferring large amount of data and the perfs were only slightly slower than using a native ssh / sshd client, so I did not experiment much further.You can try experimenting by compating mina sshd with openssh, but comparing with telnet will just give you a lower number without good indication. On Thu, Nov 8, 2012 at 10:16 AM, FaXin Zhong faxin.zh...@ericsson.comwrote: Hi, Do you have any idea about that? We found when we consume some buffer to get traffic, it's very slow. BRs/Faxin -Original Message- From: FaXin Zhong Sent: Wednesday, November 07, 2012 10:55 PM To: dev@mina.apache.org Subject: RE: MINA SSHD question Hi Guillaume, We are doing MINA sshd server performance test, found traffic throughput over sshd decrease 30% compared with Telnet connection, we know the security will generate some overload, but is it normal for 30% decreasement? thanks. BRs/Faxin From: Guillaume Nodet [gno...@gmail.com] Sent: Wednesday, November 07, 2012 6:01 PM To: dev Subject: Re: MINA SSHD question The SSHD public key authentication delegates the real authentication to a PublickeyAuthenticator object which you need to implement and provide in order for public key authentication to work. https://github.com/apache/mina-sshd/blob/trunk/sshd-core/src/main/java /org/apache/sshd/server/PublickeyAuthenticator.java On Wed, Nov 7, 2012 at 10:44 AM, FaXin Zhong faxin.zh...@ericsson.com wrote: So I think it just provide framework, instead of providing API for us to consume the public key directly etc... then tell us auth is ok or not. We seems we need find another 3PP to do the public key authentication method and integrate it into mina framework? BRs/Faxin -Original Message- From: Guillaume Nodet [mailto:gno...@gmail.com] Sent: Wednesday, November 07, 2012 5:15 PM To: dev Subject: Re: MINA SSHD question You need to implement org.apache.sshd.server.UserAuth Look for example at the password authentication https://github.com/apache/mina-sshd/blob/trunk/sshd-core/src/main/ja va /org/apache/sshd/server/auth/UserAuthPassword.java You can configure the auth factories using sshd.setUserAuthFactories(Arrays.NamedFactoryUserAuthasList(new AuthPassword.Factory())); On Wed, Nov 7, 2012 at 10:02 AM, FaXin Zhong faxin.zh...@ericsson.com wrote: Hi, Can you help me where I can use it (mina class)? Very appreciated indeed, we just want to shorten the lead time because project is so urgent! BRs/Faxin -Original Message- From: Guillaume Nodet [mailto:gno...@gmail.com] Sent: Wednesday, November 07, 2012 4:48 PM To: dev Subject: Re: MINA SSHD question Mina SSHD supports password, public key and gss authentication (plus no authentication), but it's quite easy to add your own mechanism if you need or to replace an existing one. On Wed, Nov 7, 2012 at 7:57 AM, FaXin Zhong faxin.zh...@ericsson.com wrote: Hi Guillaume and all, We also need support standard SSH authentications like key store, SSH user/password (not application own authentication), does MINA support it? since our designer find MINA only support authentication framework, if you want to support ssh key, you need find another way, is that the case? Thanks. BRs/Faxin -Original Message- From: Guillaume Nodet [mailto:gno...@gmail.com] Sent: Friday, November 02, 2012 3:19 PM To: dev@mina.apache.org Subject: Re: MINA SSHD question You can create your own PasswordAuthenticator implementation that will delegate to your external system and use that one when configuring the
