Difference between revisions of "OpenSSH"

From CBLFS
Jump to navigationJump to search
m (I put telnet in bold as it should be.)
 
(17 intermediate revisions by 8 users not shown)
Line 2: Line 2:
 
|-
 
|-
 
!Download Source:
 
!Download Source:
−
| http://sunsite.ualberta.ca/pub/OpenBSD/OpenSSH/portable/openssh-4.5p1.tar.gz
+
| ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-{{OpenSSH-Version}}.tar.gz
 
|}
 
|}
  
 
----
 
----
  
−
== Introduction to OpenSSH ==
+
{{Package-Introduction|The OpenSSH package contains '''ssh''' clients and the '''sshd''' daemon. This is useful for encrypting authentication and subsequent traffic over a network. The '''ssh''' client is a secure replacement for '''telnet'''. | http://openssh.org/}}
  
−
The OpenSSH package contains '''ssh''' clients and the '''sshd''' daemon. This is useful for encrypting authentication and subsequent traffic over a network. The '''ssh''' client is a secure replacement for '''telnet'''.
+
{{Note|If you only want to use the client, you do not need to run the server and so do not need the startup script and links. In accordance with good practice, only run the server if you actually need it (and if you don't know whether you need it or not, it's likely that you don't!).}}
−
 
 
−
'''Note:'''
 
−
If you only want to use the client, you do not need to run the server and so do
 
−
not need the startup script and links. In accordance with good practice, only
 
−
run the server if you actually need it (and if you don't know whether you need
 
−
it or not, it's likely that you don't!).
 
  
 
== Dependencies ==
 
== Dependencies ==
Line 22: Line 16:
 
* [[OpenSSL]]
 
* [[OpenSSL]]
 
=== Optional ===
 
=== Optional ===
−
* [[Linux-Pam]]
+
* [[Linux-PAM]]
 
* [[TCP Wrappers]]
 
* [[TCP Wrappers]]
 
* [[X Window System]]
 
* [[X Window System]]
Line 34: Line 28:
 
== OpenSSH User/Group & PrivSep Dir ==
 
== OpenSSH User/Group & PrivSep Dir ==
  
−
  groupadd -g 50 sshd &&
+
  groupadd -g 48 sshd &&
−
  useradd -c 'sshd PrivSep' -d /var/lib/sshd -g sshd -s /bin/false -u 50 sshd &&
+
  useradd -c 'sshd PrivSep' -d /var/lib/sshd -g sshd -s /bin/false -u 48 sshd &&
 
  install -v -m700 -d /var/lib/sshd &&
 
  install -v -m700 -d /var/lib/sshd &&
 
  chown -v root:sys /var/lib/sshd
 
  chown -v root:sys /var/lib/sshd
Line 44: Line 38:
  
 
  ./configure --prefix=/usr --sysconfdir=/etc/ssh \
 
  ./configure --prefix=/usr --sysconfdir=/etc/ssh \
−
--libexecdir=/usr/sbin --with-md5-passwords \
+
    --libexecdir=/usr/sbin --with-md5-passwords \
−
--with-privsep-path=/var/lib/ssh &&
+
    --with-privsep-path=/var/lib/sshd \
 +
    --with-default-path="/bin:/usr/bin" \
 +
    --with-superuser-path="/sbin:/bin:/usr/sbin:/usr/bin" &&
 
  make
 
  make
  
Line 51: Line 47:
  
 
  make install &&
 
  make install &&
−
  install -v -m755 -d /usr/share/doc/openssh-4.4p1 &&
+
  install -v -m755 -d /usr/share/doc/openssh-{{OpenSSH-Version}} &&
−
  install -v -m644 INSTALL LICENCE OVERVIEW README* WARNING.RNG \
+
  install -v -m644 INSTALL LICENCE OVERVIEW README* \
−
  /usr/share/doc/openssh-4.4p1
+
  /usr/share/doc/openssh-{{OpenSSH-Version}}
  
 
== Multilib ==
 
== Multilib ==
 +
 
'''''This package does not provide any libraries so only one installation is needed.'''''
 
'''''This package does not provide any libraries so only one installation is needed.'''''
−
 
−
=== 32Bit ===
 
−
 
−
Compile the package:
 
−
 
−
CC="gcc ${BUILD32}" ./configure --prefix=/usr --sysconfdir=/etc/ssh \
 
−
--libexecdir=/usr/sbin --with-md5-passwords \
 
−
--with-privsep-path=/var/lib/ssh &&
 
−
make
 
−
 
−
Install the package
 
−
 
−
make install &&
 
−
install -v -m755 -d /usr/share/doc/openssh-4.4p1 &&
 
−
install -v -m644 INSTALL LICENCE OVERVIEW README* WARNING.RNG \
 
−
/usr/share/doc/openssh-4.4p1
 
−
 
−
=== N32 ===
 
−
 
−
Compile the package:
 
−
 
−
install -v -m700 -d /var/lib/sshd &&
 
−
chown -v root:sys /var/lib/sshd &&
 
−
CC="gcc ${BUILDN32} ./configure --prefix=/usr --sysconfdir=/etc/ssh \
 
−
--libexecdir=/usr/sbin --libdir=/usr/lib32 --with-md5-passwords \
 
−
--with-privsep-path=/var/lib/ssh &&
 
−
make
 
−
 
−
Install the package
 
−
 
−
make install &&
 
−
install -v -m755 -d /usr/share/doc/openssh-4.4p1 &&
 
−
install -v -m644 INSTALL LICENCE OVERVIEW README* WARNING.RNG \
 
−
/usr/share/doc/openssh-4.4p1
 
  
 
=== 64Bit ===
 
=== 64Bit ===
Line 97: Line 60:
  
 
  CC="gcc ${BUILD64}" ./configure --prefix=/usr --sysconfdir=/etc/ssh \
 
  CC="gcc ${BUILD64}" ./configure --prefix=/usr --sysconfdir=/etc/ssh \
−
--libexecdir=/usr/sbin --with-md5-passwords \
+
    --libexecdir=/usr/sbin --with-md5-passwords \
−
--with-privsep-path=/var/lib/ssh &&
+
    --with-privsep-path=/var/lib/sshd \
 +
    --with-superuser-path="/sbin:/bin:/usr/sbin:/usr/bin" &&
 
  make
 
  make
  
Line 104: Line 68:
  
 
  make install &&
 
  make install &&
−
  install -v -m755 -d /usr/share/doc/openssh-4.4p1 &&
+
  install -v -m755 -d /usr/share/doc/openssh-{{OpenSSH-Version}} &&
−
  install -v -m644 INSTALL LICENCE OVERVIEW README* WARNING.RNG \
+
  install -v -m644 INSTALL LICENCE OVERVIEW README* \
−
  /usr/share/doc/openssh-4.4p1
+
  /usr/share/doc/openssh-{{OpenSSH-Version}}
  
 
== Configuring ==
 
== Configuring ==
Line 112: Line 76:
 
=== BootScript ===
 
=== BootScript ===
  
−
Install the init script included in the [[blfs-bootscripts]] package.
+
Install the init script included in the [[bootscripts]] package.
  
 
  make install-sshd
 
  make install-sshd
 +
 +
[[Category:Servers]]

Latest revision as of 19:41, 13 February 2013

Download Source: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-6.3p1.tar.gz

Introduction to OpenSSH

The OpenSSH package contains ssh clients and the sshd daemon. This is useful for encrypting authentication and subsequent traffic over a network. The ssh client is a secure replacement for telnet.

Project Homepage: http://openssh.org/

Caution.png

Note

If you only want to use the client, you do not need to run the server and so do not need the startup script and links. In accordance with good practice, only run the server if you actually need it (and if you don't know whether you need it or not, it's likely that you don't!).

Dependencies

Required

Optional

OpenSSH User/Group & PrivSep Dir

groupadd -g 48 sshd &&
useradd -c 'sshd PrivSep' -d /var/lib/sshd -g sshd -s /bin/false -u 48 sshd &&
install -v -m700 -d /var/lib/sshd &&
chown -v root:sys /var/lib/sshd

Non-Multilib

Compile the package: 

./configure --prefix=/usr --sysconfdir=/etc/ssh \
    --libexecdir=/usr/sbin --with-md5-passwords \
    --with-privsep-path=/var/lib/sshd \
    --with-default-path="/bin:/usr/bin" \
    --with-superuser-path="/sbin:/bin:/usr/sbin:/usr/bin" &&
make

Install the package 

make install &&
install -v -m755 -d /usr/share/doc/openssh-6.3p1 &&
install -v -m644 INSTALL LICENCE OVERVIEW README* \
/usr/share/doc/openssh-6.3p1

Multilib

This package does not provide any libraries so only one installation is needed.

64Bit

Compile the package 

CC="gcc ${BUILD64}" ./configure --prefix=/usr --sysconfdir=/etc/ssh \
    --libexecdir=/usr/sbin --with-md5-passwords \
    --with-privsep-path=/var/lib/sshd \
    --with-superuser-path="/sbin:/bin:/usr/sbin:/usr/bin" &&
make

Install the package 

make install &&
install -v -m755 -d /usr/share/doc/openssh-6.3p1 &&
install -v -m644 INSTALL LICENCE OVERVIEW README* \
/usr/share/doc/openssh-6.3p1

Configuring

BootScript

Install the init script included in the bootscripts package. 

make install-sshd
Retrieved from "?title=OpenSSH&oldid=21475"