Re: Rebuilding OpenSSH on RedHat 7.3

From: Grant (gpg86_at_hotmail.com)
Date: 03/19/04 

Date: Thu, 18 Mar 2004 17:45:19 -0800

I compiled using a prefix of /usr instead of /usr/local, but that didn't
seem to put the daemon in /usr/sbin where the default location is for RH
7.3. Pretty sure I blew away the keys (the init script looks like it
rebuilds them if they are missing). sshd and ssh return a proper version and
the init script points at the correct sshd. As far as ssh_config its still
in /etc/ssh/ and there isn't one in plain old /etc. I can't remember if I
did something to explicitly get it there or if it was in fact a default from
the tarball.

Anyhow, everything seems to be working fine :) Its possible some of the
other binaries (like sftp?) are not in the right place because sshd that got
built was actually in /usr/local/sbin even with my change of the default
prefix. If that is the case I'm still ok All we use OpenSSH for is the
client and the daemon for remote logins.

Man, I really wish the linux distro folks would put stuff where the people
who write the software (tarballs default config scripts) put it. I mean I
understand the difference between /usr/bin and /usr/local/bin and possibly
why most tarballs default to /usr/local as a prefix but man, what a mess
that can lead to.

thanks guys

G

"Nico Kadel-Garcia" <nkadel@comcast.net> wrote in message
news:vfKdnd01n_vaXMzdRVn-iQ@comcast.com...
>
> "Darren Tucker" <dtucker@dodgy.net.au> wrote in message
> news:c2r5aq$h9q$1@gate.dodgy.net.au...
> > In article <c2r41m$phb$1@news2.symantec.com>, Grant <gpg86@hotmail.com>
> wrote:
> > >I've fixed it :) Apparently the "make install" target doesn't replace
> sshd
> > >with the newly built binary. Manually replacing it did the trick :)
> >
> > It does, but by default OpenSSH puts its binaries in
/usr/local/{bin,sbin}
> > and most vendors (including Redhat) put their binaries in
/usr/(bin,sbin}.
>
> Uh-oh. If he compiled for --prefix=/usr/local (the default) and did a
"make
> install" and installed one binary in /usr/sbin/sshd (where RedHat puts
the
> binaries), he can wind up with a world of hurt later as the SSH binaries
(in
> /usr/bin, etc.) wind up confusing things with the binaries in
> /usr/local/bin, depending on how his PATH is set.
>
> Grant? If you've got to update an RPM installed package, please actually
> update the SRPM and build from that. It's not that hard to do, and it does
a
> bunch of things like flushing away your old binaries and documentation and
> replacing them with the new stuff that you'll find useful down the road.
> Also, the default location of your sshd_config files and private keys is
> different under RedHat (in /etc/ssh/sshd_config) than it is under the
> default OpenSSH installation. (/etc/sshd_config, I think?) So you may wind
> up with some real configuration surprises if you're not careful. And the
> "make install" in the tarbal doesn't set up init scripts for you, or know
> enough to restart the daemon with the new sshd binary.
>
>

Relevant Pages

  • RE: X11 Forwarding
    ... Upon receipt of a connection request, ... the daemon forks, creating a new process. ... I guess all those forums out there saying that sshd reads the config ... First do a "ps -f" to get the PPID ...
    (SSH)
  • Re: [opensuse] What is with the script kiddies tonight??
    ... That file is used by more than just sshd. ... meaning you have already logged in to some daemon or other by the time ... mplayer was just a bit more embellishment, the icing on the cake, if you will. ... If it is just an automated dictionary attack, ...
    (SuSE)
  • Re: sshd config config file question
    ... The daemon is up and has been up for a long time. ... for instance as a test maxauthtries to 3 I also ... sshd_config file change and reloading. ... also check to see if sshd is running by using "ps". ...
    (freebsd-questions)
  • Re: Dictionary sshd attacks
    ... >little daemon in perl to deal with it. ... >running my rc.iptables startup script to set things back to the baseline ... Have you tried moving sshd to a non-standard port? ...
    (comp.os.linux.security)
  • X11 forwarding not working through ssh
    ... I have installed opensshd on an HP-UX 11.0 computer. ... the Xforwarding on in the sshd_config file, but when I try to run a ... is something wrong with the sshd setup on the unix machine, ... I also installed the binaries for openssl-0.9.6 and zlib-1.1.4 from ...
    (comp.security.ssh)