Re: Upgrading OpenSSH

From: Vahid (NOSPAM-sunman_at_ureach.com)
Date: 06/11/04 

Date: Fri, 11 Jun 2004 02:01:04 GMT

Darren Tucker wrote:
> In article <m0vxc.18617$IQ2.9313504@news4.srv.hcvlny.cv.net>,
> Vahid <NOSPAM-sunman@ureach.com> wrote:
>
>>How would you go about upgrading OpenSSH on over 400 servers? So far, we
>>did that with an install script I wrote one by one. But now, all servers
>>have the same version of OpenSSH and I thought there might be an easier
>>way to deploy the binaries.
>
>
> That depends on what infrastructure you have available. OpenSSH ships
> with the capability of building several types of native packages (RPM,
> Solaris/SysV pkg and AIX bff/lpp). Back when I was looking after large
> numbers of hosts I used to build, test and package OpenSSH releases in
> the platform's native package format, then deploy those.
>
We are mostly Sun Solaris shop with some HP's AIX and of course Linux.
My concern is only Solaris because as I mentioned, there are over 400
servers and about that much workstations.
I did see the pkg creator for Solaris (very nice) but that requires
one-by-one installation. I have a script that pushes *any* file or
directory to a destination host, that is how we push conf files,
utilities, etc...
My question is, what would happen if I just push the individual binaries
(new version) onto the old binaries? I know HP-UX does not allow that
but Solaris does not mind, but I am not sure what will happen to the
running (in memory) sshd? Of course I have to restart the daemon.
My push script works based on ssh, so if ssh dies, I die too....
Thanks,
Vahid.

Relevant Pages