Re: Privilege separation user (OpenSSH 3.4) install prob.

From: Patrick Lamb (pdlambat@comcastpoint.net)
Date: 06/28/02


From: Patrick Lamb <pdlambat@comcastpoint.net>
Date: Fri, 28 Jun 2002 03:26:58 GMT

Simon Matthews wrote:
>
> I keep getting the following error message at the end of 'make install':
> id sshd || \
> echo "WARNING: Privilege separation user \"sshd\" does not exist"
> uid=5003(sshd) gid=5003(sshd) groups=5003(sshd)
>
> Yet the user exists:
> [root@postoffice openssh-3.4p1]# grep sshd /etc/passwd
> sshd:x:5003:5003:sshd privsep:/var/empty:/bin/false
>
> I even tried to change the configuration with no better result:
> [root@postoffice openssh-3.4p1]# ./configure --sysconfdir=/etc/ssh2
> --with-pam --with-privsep-user=sshd
>
> Does anyone have any ideas what I am doing wrong? The system is a RedHat
> 6.2 distro.

FWIW, you can use the source rpm for openssh with only a little extra
trouble. Install the source rpm as usual:
        rpm -ivh openssh-3.4*.src.rpm
Go into /usr/src/redhat/SPECS and edit the openssh.spec -- there is a
line about 20 lines down that says something like
        %define redhat6 0
(sorry if that's not quite right, it's from memory). Change that to
        %define redhat6 1
then rebuild from the spec file with
        rpm -ba openssh.spec
It should crank everything through, and leave your rpms in
/usr/src/redhat/RPMS/i386. They won't be signed, obviously. ;)

HTH, Pat

-- 
Apologies to those easily confused.  Address is spam-resistant.
Correct email address like pdlamb 'round-about comcast point net.



Relevant Pages

  • Re: Privilege separation user (OpenSSH 3.4) install prob.
    ... Simon Matthews wrote: ... > I keep getting the following error message at the end of 'make install': ... you can use the source rpm for openssh with only a little extra ... Install the source rpm as usual: ...
    (comp.os.linux.security)
  • Re: Privilege separation user (OpenSSH 3.4) install prob.
    ... Simon Matthews wrote: ... > I keep getting the following error message at the end of 'make install': ... you can use the source rpm for openssh with only a little extra ... Install the source rpm as usual: ...
    (comp.os.linux.security)
  • Re: Privilege separation user (OpenSSH 3.4) install prob.
    ... Simon Matthews wrote: ... > I keep getting the following error message at the end of 'make install': ... you can use the source rpm for openssh with only a little extra ... Install the source rpm as usual: ...
    (comp.security.ssh)
  • Re: startx fails
    ... Subject: startx fails ... Have you looked in the paths shown in the error message? ... configure the netscape http server. ... install, or one on which people have done lots of patches? ...
    (comp.unix.sco.misc)
  • Re: Help! NTVDM error
    ... > Or uncheck the first half of the startup items, reboot and see if you still ... If you don't get the error message, ... > [[You have used the System Configuration Utility to change the way Windows ... > spyware if installed with the sponsor program it offers to install. ...
    (microsoft.public.windowsxp.help_and_support)