Difference between revisions of "OpenSSH"
From CBLFS
Jump to navigationJump to search (→64Bit) |
|||
| (41 intermediate revisions by 13 users not shown) | |||
| Line 2: | Line 2: | ||
|- | |- | ||
!Download Source: | !Download Source: | ||
| − | | | + | | ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-{{OpenSSH-Version}}.tar.gz |
|} | |} | ||
---- | ---- | ||
| + | |||
| + | {{Package-Introduction|The OpenSSH package contains '''ssh''' clients and the '''sshd''' daemon. This is useful for encrypting authentication and subsequent traffic over a network. The '''ssh''' client is a secure replacement for '''telnet'''. | http://openssh.org/}} | ||
| + | |||
| + | {{Note|If you only want to use the client, you do not need to run the server and so do not need the startup script and links. In accordance with good practice, only run the server if you actually need it (and if you don't know whether you need it or not, it's likely that you don't!).}} | ||
== Dependencies == | == Dependencies == | ||
| Line 11: | Line 15: | ||
=== Required === | === Required === | ||
* [[OpenSSL]] | * [[OpenSSL]] | ||
| + | === Optional === | ||
| + | * [[Linux-PAM]] | ||
| + | * [[TCP Wrappers]] | ||
| + | * [[X Window System]] | ||
| + | * [[MIT krb5]] or [[Heimdal]] | ||
| + | * [[JDK]] | ||
| + | * [[NetTools]] | ||
| + | * [[Sysstat]] | ||
| + | * [[OpenSC]] | ||
| + | * [[libsectok]] | ||
| + | == OpenSSH User/Group & PrivSep Dir == | ||
| − | + | groupadd -g 48 sshd && | |
| − | + | useradd -c 'sshd PrivSep' -d /var/lib/sshd -g sshd -s /bin/false -u 48 sshd && | |
| − | groupadd -g | + | install -v -m700 -d /var/lib/sshd && |
| − | useradd -c 'sshd PrivSep' -d /var/lib/sshd -g sshd -s /bin/false -u | + | chown -v root:sys /var/lib/sshd |
== Non-Multilib == | == Non-Multilib == | ||
| Line 22: | Line 37: | ||
Compile the package: | Compile the package: | ||
| − | |||
| − | |||
./configure --prefix=/usr --sysconfdir=/etc/ssh \ | ./configure --prefix=/usr --sysconfdir=/etc/ssh \ | ||
| − | + | --libexecdir=/usr/sbin --with-md5-passwords \ | |
| − | + | --with-privsep-path=/var/lib/sshd \ | |
| + | --with-default-path="/bin:/usr/bin" \ | ||
| + | --with-superuser-path="/sbin:/bin:/usr/sbin:/usr/bin" && | ||
make | make | ||
Install the package | Install the package | ||
| − | make install | + | make install && |
| − | install -v -m755 -d /usr/share/doc/openssh- | + | install -v -m755 -d /usr/share/doc/openssh-{{OpenSSH-Version}} && |
| − | install -v -m644 INSTALL LICENCE OVERVIEW README* | + | install -v -m644 INSTALL LICENCE OVERVIEW README* \ |
| − | /usr/share/doc/openssh- | + | /usr/share/doc/openssh-{{OpenSSH-Version}} |
== Multilib == | == Multilib == | ||
| + | |||
'''''This package does not provide any libraries so only one installation is needed.''''' | '''''This package does not provide any libraries so only one installation is needed.''''' | ||
=== 64Bit === | === 64Bit === | ||
| − | Compile the package | + | Compile the package |
| − | |||
| − | |||
CC="gcc ${BUILD64}" ./configure --prefix=/usr --sysconfdir=/etc/ssh \ | CC="gcc ${BUILD64}" ./configure --prefix=/usr --sysconfdir=/etc/ssh \ | ||
| − | + | --libexecdir=/usr/sbin --with-md5-passwords \ | |
| − | + | --with-privsep-path=/var/lib/sshd \ | |
| + | --with-superuser-path="/sbin:/bin:/usr/sbin:/usr/bin" && | ||
make | make | ||
Install the package | Install the package | ||
| − | make install | + | make install && |
| − | install -v -m755 -d /usr/share/doc/openssh- | + | install -v -m755 -d /usr/share/doc/openssh-{{OpenSSH-Version}} && |
| − | install -v -m644 INSTALL LICENCE OVERVIEW README* | + | install -v -m644 INSTALL LICENCE OVERVIEW README* \ |
| − | /usr/share/doc/openssh- | + | /usr/share/doc/openssh-{{OpenSSH-Version}} |
| − | == | + | == Configuring == |
| − | + | === BootScript === | |
| − | + | Install the init script included in the [[bootscripts]] package. | |
| − | + | make install-sshd | |
| − | |||
| − | |||
| − | |||
| − | install - | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | + | [[Category:Servers]] | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
Latest revision as of 19:41, 13 February 2013
| Download Source: | ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-6.3p1.tar.gz |
|---|
Contents
Introduction to OpenSSH
The OpenSSH package contains ssh clients and the sshd daemon. This is useful for encrypting authentication and subsequent traffic over a network. The ssh client is a secure replacement for telnet.
Project Homepage: http://openssh.org/
Note
If you only want to use the client, you do not need to run the server and so do not need the startup script and links. In accordance with good practice, only run the server if you actually need it (and if you don't know whether you need it or not, it's likely that you don't!).
Dependencies
Required
Optional
OpenSSH User/Group & PrivSep Dir
groupadd -g 48 sshd && useradd -c 'sshd PrivSep' -d /var/lib/sshd -g sshd -s /bin/false -u 48 sshd && install -v -m700 -d /var/lib/sshd && chown -v root:sys /var/lib/sshd
Non-Multilib
Compile the package:
./configure --prefix=/usr --sysconfdir=/etc/ssh \
--libexecdir=/usr/sbin --with-md5-passwords \
--with-privsep-path=/var/lib/sshd \
--with-default-path="/bin:/usr/bin" \
--with-superuser-path="/sbin:/bin:/usr/sbin:/usr/bin" &&
make
Install the package
make install && install -v -m755 -d /usr/share/doc/openssh-6.3p1 && install -v -m644 INSTALL LICENCE OVERVIEW README* \ /usr/share/doc/openssh-6.3p1
Multilib
This package does not provide any libraries so only one installation is needed.
64Bit
Compile the package
CC="gcc ${BUILD64}" ./configure --prefix=/usr --sysconfdir=/etc/ssh \
--libexecdir=/usr/sbin --with-md5-passwords \
--with-privsep-path=/var/lib/sshd \
--with-superuser-path="/sbin:/bin:/usr/sbin:/usr/bin" &&
make
Install the package
make install && install -v -m755 -d /usr/share/doc/openssh-6.3p1 && install -v -m644 INSTALL LICENCE OVERVIEW README* \ /usr/share/doc/openssh-6.3p1
Configuring
BootScript
Install the init script included in the bootscripts package.
make install-sshd
