| INSTALL (147001) | INSTALL (162852) |
|---|---|
| 11. Prerequisites 2---------------- 3 4You will need working installations of Zlib and OpenSSL. 5 6Zlib 1.1.4 or 1.2.1.2 or greater (ealier 1.2.x versions have problems): 7http://www.gzip.org/zlib/ 8 9OpenSSL 0.9.6 or greater: 10http://www.openssl.org/ 11 12(OpenSSL 0.9.5a is partially supported, but some ciphers (SSH protocol 1 13Blowfish) do not work correctly.) 14 | 11. Prerequisites 2---------------- 3 4You will need working installations of Zlib and OpenSSL. 5 6Zlib 1.1.4 or 1.2.1.2 or greater (ealier 1.2.x versions have problems): 7http://www.gzip.org/zlib/ 8 9OpenSSL 0.9.6 or greater: 10http://www.openssl.org/ 11 12(OpenSSL 0.9.5a is partially supported, but some ciphers (SSH protocol 1 13Blowfish) do not work correctly.) 14 |
| 15The remaining items are optional. 16 |
|
| 15OpenSSH can utilise Pluggable Authentication Modules (PAM) if your system 16supports it. PAM is standard on Redhat and Debian Linux, Solaris and 17HP-UX 11. 18 19NB. If you operating system supports /dev/random, you should configure 20OpenSSL to use it. OpenSSH relies on OpenSSL's direct support of 21/dev/random. If you don't you will have to rely on ssh-rand-helper, which 22is inferior to a good kernel-based solution. --- 29 unchanged lines hidden (view full) --- 52S/Key Libraries: 53 54If you wish to use --with-skey then you will need the library below 55installed. No other S/Key library is currently known to be supported. 56 57http://www.sparc.spb.su/solaris/skey/ 58 59LibEdit: | 17OpenSSH can utilise Pluggable Authentication Modules (PAM) if your system 18supports it. PAM is standard on Redhat and Debian Linux, Solaris and 19HP-UX 11. 20 21NB. If you operating system supports /dev/random, you should configure 22OpenSSL to use it. OpenSSH relies on OpenSSL's direct support of 23/dev/random. If you don't you will have to rely on ssh-rand-helper, which 24is inferior to a good kernel-based solution. --- 29 unchanged lines hidden (view full) --- 54S/Key Libraries: 55 56If you wish to use --with-skey then you will need the library below 57installed. No other S/Key library is currently known to be supported. 58 59http://www.sparc.spb.su/solaris/skey/ 60 61LibEdit: |
| 60sftp now supports command-line editing via NetBSD's libedit. If your 61platform has it available natively you can use that, alternatively 62you might try these multi-platform ports: | |
| 63 | 62 |
| 63sftp supports command-line editing via NetBSD's libedit. If your platform 64has it available natively you can use that, alternatively you might try 65these multi-platform ports: 66 |
|
| 64http://www.thrysoee.dk/editline/ 65http://sourceforge.net/projects/libedit/ 66 | 67http://www.thrysoee.dk/editline/ 68http://sourceforge.net/projects/libedit/ 69 |
| 70Autoconf: 71 72If you modify configure.ac or configure doesn't exist (eg if you checked 73the code out of CVS yourself) then you will need autoconf-2.60 to rebuild 74the automatically generated files by running "autoreconf". 75 76http://www.gnu.org/software/autoconf/ 77 78Basic Security Module (BSM): 79 80Native BSM support is know to exist in Solaris from at least 2.5.1, 81FreeBSD 6.1 and OS X. Alternatively, you may use the OpenBSM 82implementation (http://www.openbsm.org). 83 84 |
|
| 672. Building / Installation 68-------------------------- 69 70To install OpenSSH with default options: 71 72./configure 73make 74make install --- 33 unchanged lines hidden (view full) --- 108contrib/redhat/sshd.pam should be more useful. Failure to install a 109valid PAM file may result in an inability to use password 110authentication. On HP-UX 11 and Solaris, the standard /etc/pam.conf 111configuration will work with sshd (sshd will match the other service 112name). 113 114There are a few other options to the configure script: 115 | 852. Building / Installation 86-------------------------- 87 88To install OpenSSH with default options: 89 90./configure 91make 92make install --- 33 unchanged lines hidden (view full) --- 126contrib/redhat/sshd.pam should be more useful. Failure to install a 127valid PAM file may result in an inability to use password 128authentication. On HP-UX 11 and Solaris, the standard /etc/pam.conf 129configuration will work with sshd (sshd will match the other service 130name). 131 132There are a few other options to the configure script: 133 |
| 134--with-audit=[module] enable additional auditing via the specified module. 135Currently, drivers for "debug" (additional info via syslog) and "bsm" 136(Sun's Basic Security Module) are supported. 137 |
|
| 116--with-pam enables PAM support. If PAM support is compiled in, it must 117also be enabled in sshd_config (refer to the UsePAM directive). 118 119--with-prngd-socket=/some/file allows you to enable EGD or PRNGD 120support and to specify a PRNGd socket. Use this if your Unix lacks 121/dev/random and you don't want to use OpenSSH's builtin entropy 122collection support. 123 --- 36 unchanged lines hidden (view full) --- 160--with-pid-dir=PATH specifies the directory in which the ssh.pid file is 161created. 162 163--with-xauth=PATH specifies the location of the xauth binary 164 165--with-ssl-dir=DIR allows you to specify where your OpenSSL libraries 166are installed. 167 | 138--with-pam enables PAM support. If PAM support is compiled in, it must 139also be enabled in sshd_config (refer to the UsePAM directive). 140 141--with-prngd-socket=/some/file allows you to enable EGD or PRNGD 142support and to specify a PRNGd socket. Use this if your Unix lacks 143/dev/random and you don't want to use OpenSSH's builtin entropy 144collection support. 145 --- 36 unchanged lines hidden (view full) --- 182--with-pid-dir=PATH specifies the directory in which the ssh.pid file is 183created. 184 185--with-xauth=PATH specifies the location of the xauth binary 186 187--with-ssl-dir=DIR allows you to specify where your OpenSSL libraries 188are installed. 189 |
| 190--with-ssl-engine enables OpenSSL's (hardware) ENGINE support 191 |
|
| 168--with-4in6 Check for IPv4 in IPv6 mapped addresses and convert them to 169real (AF_INET) IPv4 addresses. Works around some quirks on Linux. 170 171--with-opensc=DIR 172--with-sectok=DIR allows for OpenSC or sectok smartcard libraries to 173be used with OpenSSH. See 'README.smartcard' for more details. 174 175If you need to pass special options to the compiler or linker, you --- 27 unchanged lines hidden (view full) --- 203 204For more information on configuration, please refer to the manual pages 205for sshd, ssh and ssh-agent. 206 2074. (Optional) Send survey 208------------------------- 209 210$ make survey | 192--with-4in6 Check for IPv4 in IPv6 mapped addresses and convert them to 193real (AF_INET) IPv4 addresses. Works around some quirks on Linux. 194 195--with-opensc=DIR 196--with-sectok=DIR allows for OpenSC or sectok smartcard libraries to 197be used with OpenSSH. See 'README.smartcard' for more details. 198 199If you need to pass special options to the compiler or linker, you --- 27 unchanged lines hidden (view full) --- 227 228For more information on configuration, please refer to the manual pages 229for sshd, ssh and ssh-agent. 230 2314. (Optional) Send survey 232------------------------- 233 234$ make survey |
| 211[check the contents and make sure there's no sensitive information] | 235[check the contents of the file "survey" to ensure there's no information 236that you consider sensitive] |
| 212$ make send-survey 213 214This will send configuration information for the currently configured 215host to a survey address. This will help determine which configurations 216are actually in use, and what valid combinations of configure options 217exist. The raw data is available only to the OpenSSH developers, however 218summary data may be published. 219 2205. Problems? 221------------ 222 223If you experience problems compiling, installing or running OpenSSH. 224Please refer to the "reporting bugs" section of the webpage at 225http://www.openssh.com/ 226 227 | 237$ make send-survey 238 239This will send configuration information for the currently configured 240host to a survey address. This will help determine which configurations 241are actually in use, and what valid combinations of configure options 242exist. The raw data is available only to the OpenSSH developers, however 243summary data may be published. 244 2455. Problems? 246------------ 247 248If you experience problems compiling, installing or running OpenSSH. 249Please refer to the "reporting bugs" section of the webpage at 250http://www.openssh.com/ 251 252 |
| 228$Id: INSTALL,v 1.70 2005/04/24 07:52:23 dtucker Exp $ | 253$Id: INSTALL,v 1.76 2006/09/17 12:55:52 dtucker Exp $ |