11. Prerequisites
2----------------
3
4You will need working installations of Zlib and OpenSSL.
5
6Zlib 1.1.4 or 1.2.1.2 or greater (ealier 1.2.x versions have problems):
7http://www.gzip.org/zlib/
8
9OpenSSL 0.9.6 or greater:
10http://www.openssl.org/
11
12(OpenSSL 0.9.5a is partially supported, but some ciphers (SSH protocol 1
13Blowfish) do not work correctly.)
14
15OpenSSH can utilise Pluggable Authentication Modules (PAM) if your system
16supports it. PAM is standard on Redhat and Debian Linux, Solaris and
17HP-UX 11.
18
19NB. If you operating system supports /dev/random, you should configure
20OpenSSL to use it. OpenSSH relies on OpenSSL's direct support of
21/dev/random. If you don't you will have to rely on ssh-rand-helper, which
22is inferior to a good kernel-based solution.
--- 29 unchanged lines hidden (view full) ---
52S/Key Libraries:
53
54If you wish to use --with-skey then you will need the library below
55installed. No other S/Key library is currently known to be supported.
56
57http://www.sparc.spb.su/solaris/skey/
58
59LibEdit:
60sftp now supports command-line editing via NetBSD's libedit. If your
61platform has it available natively you can use that, alternatively
62you might try these multi-platform ports:
63
64http://www.thrysoee.dk/editline/
65http://sourceforge.net/projects/libedit/
66
672. Building / Installation
68--------------------------
69
70To install OpenSSH with default options:
71
72./configure
73make
74make install
--- 33 unchanged lines hidden (view full) ---
108contrib/redhat/sshd.pam should be more useful. Failure to install a
109valid PAM file may result in an inability to use password
110authentication. On HP-UX 11 and Solaris, the standard /etc/pam.conf
111configuration will work with sshd (sshd will match the other service
112name).
113
114There are a few other options to the configure script:
115
116--with-pam enables PAM support. If PAM support is compiled in, it must
117also be enabled in sshd_config (refer to the UsePAM directive).
118
119--with-prngd-socket=/some/file allows you to enable EGD or PRNGD
120support and to specify a PRNGd socket. Use this if your Unix lacks
121/dev/random and you don't want to use OpenSSH's builtin entropy
122collection support.
123
--- 36 unchanged lines hidden (view full) ---
160--with-pid-dir=PATH specifies the directory in which the ssh.pid file is
161created.
162
163--with-xauth=PATH specifies the location of the xauth binary
164
165--with-ssl-dir=DIR allows you to specify where your OpenSSL libraries
166are installed.
167
168--with-4in6 Check for IPv4 in IPv6 mapped addresses and convert them to
169real (AF_INET) IPv4 addresses. Works around some quirks on Linux.
170
171--with-opensc=DIR
172--with-sectok=DIR allows for OpenSC or sectok smartcard libraries to
173be used with OpenSSH. See 'README.smartcard' for more details.
174
175If you need to pass special options to the compiler or linker, you
--- 27 unchanged lines hidden (view full) ---
203
204For more information on configuration, please refer to the manual pages
205for sshd, ssh and ssh-agent.
206
2074. (Optional) Send survey
208-------------------------
209
210$ make survey
211[check the contents and make sure there's no sensitive information]
212$ make send-survey
213
214This will send configuration information for the currently configured
215host to a survey address. This will help determine which configurations
216are actually in use, and what valid combinations of configure options
217exist. The raw data is available only to the OpenSSH developers, however
218summary data may be published.
219
2205. Problems?
221------------
222
223If you experience problems compiling, installing or running OpenSSH.
224Please refer to the "reporting bugs" section of the webpage at
225http://www.openssh.com/
226
227
228$Id: INSTALL,v 1.70 2005/04/24 07:52:23 dtucker Exp $
2----------------
3
4You will need working installations of Zlib and OpenSSL.
5
6Zlib 1.1.4 or 1.2.1.2 or greater (ealier 1.2.x versions have problems):
7http://www.gzip.org/zlib/
8
9OpenSSL 0.9.6 or greater:
10http://www.openssl.org/
11
12(OpenSSL 0.9.5a is partially supported, but some ciphers (SSH protocol 1
13Blowfish) do not work correctly.)
14
15OpenSSH can utilise Pluggable Authentication Modules (PAM) if your system
16supports it. PAM is standard on Redhat and Debian Linux, Solaris and
17HP-UX 11.
18
19NB. If you operating system supports /dev/random, you should configure
20OpenSSL to use it. OpenSSH relies on OpenSSL's direct support of
21/dev/random. If you don't you will have to rely on ssh-rand-helper, which
22is inferior to a good kernel-based solution.
--- 29 unchanged lines hidden (view full) ---
52S/Key Libraries:
53
54If you wish to use --with-skey then you will need the library below
55installed. No other S/Key library is currently known to be supported.
56
57http://www.sparc.spb.su/solaris/skey/
58
59LibEdit:
60sftp now supports command-line editing via NetBSD's libedit. If your
61platform has it available natively you can use that, alternatively
62you might try these multi-platform ports:
63
64http://www.thrysoee.dk/editline/
65http://sourceforge.net/projects/libedit/
66
672. Building / Installation
68--------------------------
69
70To install OpenSSH with default options:
71
72./configure
73make
74make install
--- 33 unchanged lines hidden (view full) ---
108contrib/redhat/sshd.pam should be more useful. Failure to install a
109valid PAM file may result in an inability to use password
110authentication. On HP-UX 11 and Solaris, the standard /etc/pam.conf
111configuration will work with sshd (sshd will match the other service
112name).
113
114There are a few other options to the configure script:
115
116--with-pam enables PAM support. If PAM support is compiled in, it must
117also be enabled in sshd_config (refer to the UsePAM directive).
118
119--with-prngd-socket=/some/file allows you to enable EGD or PRNGD
120support and to specify a PRNGd socket. Use this if your Unix lacks
121/dev/random and you don't want to use OpenSSH's builtin entropy
122collection support.
123
--- 36 unchanged lines hidden (view full) ---
160--with-pid-dir=PATH specifies the directory in which the ssh.pid file is
161created.
162
163--with-xauth=PATH specifies the location of the xauth binary
164
165--with-ssl-dir=DIR allows you to specify where your OpenSSL libraries
166are installed.
167
168--with-4in6 Check for IPv4 in IPv6 mapped addresses and convert them to
169real (AF_INET) IPv4 addresses. Works around some quirks on Linux.
170
171--with-opensc=DIR
172--with-sectok=DIR allows for OpenSC or sectok smartcard libraries to
173be used with OpenSSH. See 'README.smartcard' for more details.
174
175If you need to pass special options to the compiler or linker, you
--- 27 unchanged lines hidden (view full) ---
203
204For more information on configuration, please refer to the manual pages
205for sshd, ssh and ssh-agent.
206
2074. (Optional) Send survey
208-------------------------
209
210$ make survey
211[check the contents and make sure there's no sensitive information]
212$ make send-survey
213
214This will send configuration information for the currently configured
215host to a survey address. This will help determine which configurations
216are actually in use, and what valid combinations of configure options
217exist. The raw data is available only to the OpenSSH developers, however
218summary data may be published.
219
2205. Problems?
221------------
222
223If you experience problems compiling, installing or running OpenSSH.
224Please refer to the "reporting bugs" section of the webpage at
225http://www.openssh.com/
226
227
228$Id: INSTALL,v 1.70 2005/04/24 07:52:23 dtucker Exp $