Mantis - openssh
Viewing Issue Advanced Details
5054 regular use minor always 2013-03-05 09:47 2013-03-11 17:27
jh  
yann  
normal  
closed  
unable to reproduce  
none    
none  
0005054: smf service of cswopenssh kills all connections on disbale
Post from IRC:
[ 04:01:18 ] [ bwilson_ ] hmm, even with the csw openssh svc scripts/manifest, a `svcadm disable openssh`, kills all currently established processes.

Looking at http://sourceforge.net/apps/trac/gar/browser/csw/mgar/pkg/openssh/trunk/files/sshd.smf_wrapper [^] and http://sourceforge.net/apps/trac/gar/browser/csw/mgar/pkg/openssh/trunk/files/cswopenssh.xml [^] this seems to be true. As a stop is just a :kill which probably kills all connections.
The "old" init script is more advanced: http://sourceforge.net/apps/trac/gar/browser/csw/mgar/pkg/openssh/trunk/files/cswopenssh [^]

even though looking at the solaris ssh it does the same thing.
So maybe I'm wrong here:
       <exec_method
                type='method'
                name='stop'
                exec=':kill'
                timeout_seconds='60' />
Issue History
2013-03-05 09:47 jh New Issue
2013-03-11 17:23 yann Note Added: 0010282
2013-03-11 17:23 yann Assigned To => yann
2013-03-11 17:23 yann Status new => feedback
2013-03-11 17:27 jh Note Added: 0010283
2013-03-11 17:27 jh Status feedback => closed
2013-03-11 17:27 jh Resolution open => unable to reproduce

Notes
(0010282)
yann   
2013-03-11 17:23   
Hi jh,

I don't reproduce your problem.

openssh is compiled with the "--with-solaris-contracts" option which should avoid the behavior you are describing when the master daemon is killed by smf.

I tested with the version available in testing and unstable.

Can you give me more information about you reproduce this problem and the versions of Solaris / Openssh you are using ?

Thanks in advance.

Yann
(0010283)
jh   
2013-03-11 17:27   
Hi,
I can't :) I just picked it up on irc and look at the code for a few seconds :)
And thought maybe this is a problem. But since you can't reproduce it I will close the bug. Since the guy is gone on irc so I can't reach him