SUMMARY: OpenSSH 3.8p1 bug and 5.1B issues

From: David Nillesen (dnillese_at_pobox.une.edu.au)
Date: 06/01/04

  • Next message: Stephane.Moser_at_gs-vbs.admin.ch: "SUMMARY: TruCluster won't boot (quorum disk in use)"
    Date: Tue, 01 Jun 2004 16:41:59 +1000
    To: "Tru64 Group (Tru64 Group)" <tru64-unix-managers@ornl.gov>
    
    
    

    Two gotchas recently discovered which may be of interest.

    When compiling OpenSSH 3.8p1 on Tru64 there is a bug that prevents it
    from linking against neccesary libraries.

    Symptoms are this when making:

    unresolved:
    xcrypt
    shadow_pw

    Solution:
    Apply patch from here to source to fix. Apprently already fixed in CVS
    for next release.
    http://bugzilla.mindrot.org/show_bug.cgi?id=802

    Next problem was that 5.1B installs the commercial SSH by default
    (apparently). We upgraded from 5.1A pk5 to 5.1B pk3 and scp dissapeared.

    It is caused by OpenSSH on the server executing the firct scp program it
    finds in its path which is the /usr/bin/scp installed during the
    upgrade. Tru64 scp doesnt speak OpenSSH scp.

    Solution:
    Configure with:
    ./configure --prefix=/usr/local/ --with-cppflags=-I/usr/local/include \
    --with-osfsia --without-privsep \
    --with-default-path='/usr/local/bin:/bin:/usr/bin'

    Setting the server path to look in /usr/local/bin solves the issue.

    Also assumes you have zlib installed from OSS rpm and OpenSSL installed.

    Apparently privilege seperation doesnt work on Tru64 anyway, as it needs
    root access to get the OSF SIA to work?

    Regards,
    Dave

    -- 
    David Nillesen
    Systems Administrator
    University of New England
    Phone: +61 2 6773 2112
    Fax:   +61 2 6773 3424
    
    



  • Next message: Stephane.Moser_at_gs-vbs.admin.ch: "SUMMARY: TruCluster won't boot (quorum disk in use)"

    Relevant Pages

    • VNC, OpenSSH tunnelling on Windows XP Issue
      ... OpenSSH on 2 PC's located on the same lan segment ... I then downloaded TightVNC and installed full installs (Sever and ... TightVNC viewer and connect to the other PC using localhost:1. ...
      (comp.security.ssh)
    • Re: how to turn on scp1 compatibility mode in RH9 ?
      ... Your OpenSSH install is somewhat outdated; ... The -t option is not valid for the scp I'm using here; ... debug1: Doing password authentication. ...
      (comp.os.linux.misc)
    • Re: Assistence with OpenSSH build/config on Red Hat 7.2
      ... > I've been working with OpenSSH for several years now and find it ... installs and source builds go fairly ... expect, and will find, all sorts of nastiness based on PATH settings finding ... I really urge you to do wholesale updates to avoid the potential ...
      (comp.security.ssh)
    • [Full-disclosure] [ GLSA 200602-11 ] OpenSSH, Dropbear: Insecure use of system() call
      ... A flaw in OpenSSH and Dropbear allows local users to elevate their ... privileges via scp. ... Security is a primary focus of Gentoo Linux and ensuring the ...
      (Full-Disclosure)
    • Re: Does OpenSSH use RCP?
      ... > with someone about the difference between OpenSSH and SFTP. ... > SFTP) than SCP will fail. ... OpenSSH uses an implementation that is compatible to the original SSH ...
      (comp.security.unix)