Difference between revisions of "OpenSSH"
From CBLFS
Jump to navigationJump to search| (20 intermediate revisions by 9 users not shown) | |||
| Line 2: | Line 2: | ||
|- | |- | ||
!Download Source: | !Download Source: | ||
| − | | | + | | ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-{{OpenSSH-Version}}.tar.gz |
|} | |} | ||
---- | ---- | ||
| + | |||
| + | {{Package-Introduction|The OpenSSH package contains '''ssh''' clients and the '''sshd''' daemon. This is useful for encrypting authentication and subsequent traffic over a network. The '''ssh''' client is a secure replacement for '''telnet'''. | http://openssh.org/}} | ||
| + | |||
| + | {{Note|If you only want to use the client, you do not need to run the server and so do not need the startup script and links. In accordance with good practice, only run the server if you actually need it (and if you don't know whether you need it or not, it's likely that you don't!).}} | ||
== Dependencies == | == Dependencies == | ||
| Line 12: | Line 16: | ||
* [[OpenSSL]] | * [[OpenSSL]] | ||
=== Optional === | === Optional === | ||
| − | * [[Linux- | + | * [[Linux-PAM]] |
* [[TCP Wrappers]] | * [[TCP Wrappers]] | ||
* [[X Window System]] | * [[X Window System]] | ||
| Line 24: | Line 28: | ||
== OpenSSH User/Group & PrivSep Dir == | == OpenSSH User/Group & PrivSep Dir == | ||
| − | groupadd -g | + | groupadd -g 48 sshd && |
| − | useradd -c 'sshd PrivSep' -d /var/lib/sshd -g sshd -s /bin/false -u | + | useradd -c 'sshd PrivSep' -d /var/lib/sshd -g sshd -s /bin/false -u 48 sshd && |
install -v -m700 -d /var/lib/sshd && | install -v -m700 -d /var/lib/sshd && | ||
chown -v root:sys /var/lib/sshd | chown -v root:sys /var/lib/sshd | ||
| Line 34: | Line 38: | ||
./configure --prefix=/usr --sysconfdir=/etc/ssh \ | ./configure --prefix=/usr --sysconfdir=/etc/ssh \ | ||
| − | + | --libexecdir=/usr/sbin --with-md5-passwords \ | |
| − | + | --with-privsep-path=/var/lib/sshd \ | |
| + | --with-default-path="/bin:/usr/bin" \ | ||
| + | --with-superuser-path="/sbin:/bin:/usr/sbin:/usr/bin" && | ||
make | make | ||
| Line 41: | Line 47: | ||
make install && | make install && | ||
| − | install -v -m755 -d /usr/share/doc/openssh- | + | install -v -m755 -d /usr/share/doc/openssh-{{OpenSSH-Version}} && |
| − | install -v -m644 INSTALL LICENCE OVERVIEW README* | + | install -v -m644 INSTALL LICENCE OVERVIEW README* \ |
| − | /usr/share/doc/openssh- | + | /usr/share/doc/openssh-{{OpenSSH-Version}} |
== Multilib == | == Multilib == | ||
| + | |||
'''''This package does not provide any libraries so only one installation is needed.''''' | '''''This package does not provide any libraries so only one installation is needed.''''' | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
=== 64Bit === | === 64Bit === | ||
| Line 87: | Line 60: | ||
CC="gcc ${BUILD64}" ./configure --prefix=/usr --sysconfdir=/etc/ssh \ | CC="gcc ${BUILD64}" ./configure --prefix=/usr --sysconfdir=/etc/ssh \ | ||
| − | + | --libexecdir=/usr/sbin --with-md5-passwords \ | |
| − | + | --with-privsep-path=/var/lib/sshd \ | |
| + | --with-superuser-path="/sbin:/bin:/usr/sbin:/usr/bin" && | ||
make | make | ||
| Line 94: | Line 68: | ||
make install && | make install && | ||
| − | install -v -m755 -d /usr/share/doc/openssh- | + | install -v -m755 -d /usr/share/doc/openssh-{{OpenSSH-Version}} && |
| − | install -v -m644 INSTALL LICENCE OVERVIEW README* | + | install -v -m644 INSTALL LICENCE OVERVIEW README* \ |
| − | /usr/share/doc/openssh- | + | /usr/share/doc/openssh-{{OpenSSH-Version}} |
== Configuring == | == Configuring == | ||
| Line 102: | Line 76: | ||
=== BootScript === | === BootScript === | ||
| − | Install the init script included in the [[ | + | Install the init script included in the [[bootscripts]] package. |
make install-sshd | make install-sshd | ||
| + | |||
| + | [[Category:Servers]] | ||
Latest revision as of 19:41, 13 February 2013
| Download Source: | ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-6.3p1.tar.gz |
|---|
Contents
Introduction to OpenSSH
The OpenSSH package contains ssh clients and the sshd daemon. This is useful for encrypting authentication and subsequent traffic over a network. The ssh client is a secure replacement for telnet.
Project Homepage: http://openssh.org/
Note
If you only want to use the client, you do not need to run the server and so do not need the startup script and links. In accordance with good practice, only run the server if you actually need it (and if you don't know whether you need it or not, it's likely that you don't!).
Dependencies
Required
Optional
OpenSSH User/Group & PrivSep Dir
groupadd -g 48 sshd && useradd -c 'sshd PrivSep' -d /var/lib/sshd -g sshd -s /bin/false -u 48 sshd && install -v -m700 -d /var/lib/sshd && chown -v root:sys /var/lib/sshd
Non-Multilib
Compile the package:
./configure --prefix=/usr --sysconfdir=/etc/ssh \
--libexecdir=/usr/sbin --with-md5-passwords \
--with-privsep-path=/var/lib/sshd \
--with-default-path="/bin:/usr/bin" \
--with-superuser-path="/sbin:/bin:/usr/sbin:/usr/bin" &&
make
Install the package
make install && install -v -m755 -d /usr/share/doc/openssh-6.3p1 && install -v -m644 INSTALL LICENCE OVERVIEW README* \ /usr/share/doc/openssh-6.3p1
Multilib
This package does not provide any libraries so only one installation is needed.
64Bit
Compile the package
CC="gcc ${BUILD64}" ./configure --prefix=/usr --sysconfdir=/etc/ssh \
--libexecdir=/usr/sbin --with-md5-passwords \
--with-privsep-path=/var/lib/sshd \
--with-superuser-path="/sbin:/bin:/usr/sbin:/usr/bin" &&
make
Install the package
make install && install -v -m755 -d /usr/share/doc/openssh-6.3p1 && install -v -m644 INSTALL LICENCE OVERVIEW README* \ /usr/share/doc/openssh-6.3p1
Configuring
BootScript
Install the init script included in the bootscripts package.
make install-sshd
