<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>System Adm &#187; suse</title>
	<atom:link href="http://www.system.adm.br/tag/suse/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.system.adm.br</link>
	<description>Some IT Tips (Linux, Unix, HP-UX, AIX, Solaris, etc).</description>
	<lastBuildDate>Wed, 19 May 2010 20:11:00 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Installing OpenSSH from source on SuSe 10</title>
		<link>http://www.system.adm.br/2009/04/installing-openssh-from-source-on-suse-10/</link>
		<comments>http://www.system.adm.br/2009/04/installing-openssh-from-source-on-suse-10/#comments</comments>
		<pubDate>Tue, 07 Apr 2009 14:13:35 +0000</pubDate>
		<dc:creator>Lincoln Zuljewic Silva</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[openssh]]></category>
		<category><![CDATA[suse]]></category>

		<guid isPermaLink="false">http://www.system.adm.br/?p=3</guid>
		<description><![CDATA[The current version of my SuSe is: # cat /etc/SuSE-release SUSE Linux Enterprise Server 10 (i586) VERSION = 10 PATCHLEVEL = 1 1 &#8211; Download OpenSSH: # cd /usr/src # wget http://anga.funkfeuer.at/ftp/pub/OpenBSD/OpenSSH/portable/openssh-5.2p1.tar.gz 2 &#8211; Unpack it: # tar zxvf openssh-5.2p1.tar.gz 3 &#8211; Check if you have the necessary packages: automake-1.9.6-2.i586.rpm cpp-4.0.2_20050901-3.i586.rpm gcc-4.0.2_20050901-3.i586.rpm gcc-c++-4.0.2_20050901-3.i586.rpm glibc-2.3.5-40.i586.rpm glibc-devel-2.3.5-40.i586.rpm [...]]]></description>
			<content:encoded><![CDATA[<p>The current version of my SuSe is:<br />
	<span style="font-size: 12px;"><code># cat /etc/SuSE-release<br />
	SUSE Linux Enterprise Server 10 (i586) VERSION = 10 PATCHLEVEL = 1</code></span></p>
<p>	1 &#8211; Download OpenSSH:<br />
	<span style="font-size: 12px;"><code># cd /usr/src<br />
	# wget http://anga.funkfeuer.at/ftp/pub/OpenBSD/OpenSSH/portable/openssh-5.2p1.tar.gz</code></span></p>
<p>	2 &#8211; Unpack it:<br />
	<span style="font-size: 12px;"><code># tar zxvf openssh-5.2p1.tar.gz</code></span></p>
<p>	3 &#8211; Check if you have the necessary packages:<br />
	<span style="font-size: 12px;"><code>automake-1.9.6-2.i586.rpm<br />
	cpp-4.0.2_20050901-3.i586.rpm<br />
	gcc-4.0.2_20050901-3.i586.rpm<br />
	gcc-c++-4.0.2_20050901-3.i586.rpm<br />
	glibc-2.3.5-40.i586.rpm<br />
	glibc-devel-2.3.5-40.i586.rpm<br />
	libselinux-1.23.11-3.i586.rpm<br />
	libstdc++-4.0.2_20050901-3.i586.rpm<br />
	libstdc++-devel-4.0.2_20050901-3.i586.rpm<br />
	openssl-devel-0.9.8a-18.15.i586.rpm<br />
	pam-devel-0.99.6.3-28.8.i586.rpm<br />
	pam_ssh-1.91-19.2.i586.rpm<br />
	sudo-1.6.8p9-2.i586.rpm<br />
	tcpd-devel-7.6-731.2.i586.rpm<br />
	zlib-devel-1.2.3-3.i586.rpm</code></span></p>
<p>	You can check it by typing:<br />
	<span style="font-size: 12px;"><code># rpm -qa (example: &quot;rpm -qa |grep openssl-devel&quot;)</code></span></p>
<p>	4 &#8211; If there are some packeage missing, I advice you search it in www.filewatcher.com and install using:<br />
	<span style="font-size: 12px;"><code># rpm -ivh (example: &quot;rpm -ivh tcpd-devel-7.6-731.2.i586.rpm&quot;)</code></span></p>
<p>	5 &#8211; Run configure:<br />
	<span style="font-size: 12px;"><code># cd /usr/src/openssh-5.2p1<br />
	# ./configure --prefix=/opt/ssh2 --with-libs=-ldl --disable-suid-ssh --with-privsep-user=sshd -with-tcp-wrappers --with-pam</code></span></p>
<p>	After some time, you should see something like this:<br />
	<span style="font-size: 12px;"><code>OpenSSH has been configured with the following options:<br />
	User binaries: /opt/ssh2/bin<br />
	System binaries: /opt/ssh2/sbin<br />
	Configuration files: /opt/ssh2/etc<br />
	Askpass program: /opt/ssh2/libexec/ssh-askpass<br />
	Manual pages: /opt/ssh2/share/man/manX<br />
	PID file: /var/run<br />
	Privilege separation chroot path: /var/empty<br />
	sshd default user PATH: /usr/bin:/bin:/usr/sbin:/sbin:/opt/ssh2/bin<br />
	Manpage format: doc<br />
	PAM support: yes<br />
	OSF SIA support: no<br />
	KerberosV support: no<br />
	SELinux support: no<br />
	Smartcard support: no<br />
	S/KEY support: no <br />
	TCP Wrappers support: yes<br />
	MD5 password support: no<br />
	libedit support: no<br />
	Solaris process contract support: no <br />
	IP address in $DISPLAY hack: no<br />
	Translate v4 in v6 hack: yes<br />
	BSD Auth support: no<br />
	Random number source: OpenSSL internal ONLY<br />
	Host: i686-pc-linux-gnu<br />
	Compiler: gcc<br />
	Compiler flags: -g -O2 -Wall -Wpointer-arith -Wuninitialized -Wsign-compare -Wno-pointer-sign -Wformat-security -fno-builtin-memset -std=gnu99 <br />
	Preprocessor flags:<br />
	Linker flags:<br />
	Libraries: -lresolv -lcrypto -lutil -lz -lnsl -ldl -lcrypt +for sshd: -lwrap -lpam</p>
<p>	PAM is enabled. You may need to install a PAM control file for sshd, otherwise password authentication may fail. Example PAM control files can be found in the contrib/ subdirectory</code></span></p>
<p>	6 &#8211; Install contrib scripts. Check into /usr/src/openssh-5.2p1/contrib some files that we can use to setup our server:<br />
	<span style="font-size: 12px;"><code># cp sshd.pam.generic /etc/pam.d/sshd<br />
	# cp rc.sshd /etc/init.d/sshd <br />
	# cp sysconfig.ssh /etc/sysconfig/ssh<br />
	# cp rc.config.sshd /etc/rc.d/sshd<br />
	# chmod 755 /etc/init.d/sshd /etc/rc.d/sshd<br />
	# ln -s /etc/init.d/sshd /etc/rc.d/rc3.d/S20-sshd</code></span></p>
<p>	7 &#8211; Configure some parameters. Edit the main SSHD configuration file<br />
	<span style="font-size: 12px;"><code># vi /opt/ssh2/etc/sshd_config<br />
	Ensure that some lines are uncommented: <br />
	Line 21: Protocol 2 -&gt; Enable just the protocol version 2 (more secure)<br />
	Line 41: PermitRootLogin no -&gt; Do not enable root login<br />
	Line 46: RSAAuthentication yes -&gt; enable authentication thru auth-keys<br />
	Line 47: PubkeyAuthentication yes -&gt; enable authentication thru auth-keys<br />
	Line 48: AuthorizedKeysFile .ssh/authorized_keys -&gt; enable authentication thru auth-keys (keys location - user&#39;s home)<br />
	Line 86: UsePAM yes -&gt; enable PAM authentication<br />
	Line 113: Subsystem sftp /opt/ssh2/libexec/sftp-server -&gt; enable the sftp subsystem (for secure file transfer - NOT SCP)</code></span></p>
<p>	8 &#8211; Start the server:<br />
	<span style="font-size: 12px;"><code># /etc/init.d/sshd start</code></span></p>
<p>	9 &#8211; Place a login test</p>
<p>	10 &#8211; Check in your /var/log/message. If you see the following message:<br />
	<span style="font-size: 12px;"><code>Apr 7 10:02:48 localhost sshd[8388]: pam_unix(sshd:setcred): Unknown option: `shadow&#39;<br />
	Apr 7 10:02:48 localhost sshd[8388]: pam_unix(sshd:setcred): Unknown option: `nodelay&#39;<br />
	Apr 7 10:02:48 localhost sshd[8390]: pam_unix(sshd:setcred): Unknown option: `shadow&#39;<br />
	Apr 7 10:02:48 localhost sshd[8390]: pam_unix(sshd:setcred): Unknown option: `nodelay&#39;</code></span></p>
<p>	Edit your /etc/pam.d/sshd and change the following lines:<br />
	<span style="font-size: 12px;"><code>auth required /lib/security/pam_unix.so shadow nodelay</code></span><br />
	to<br />
	<span style="font-size: 12px;"><code>auth required /lib/security/pam_unix.so</code></span></p>
<p>	and</p>
<p>	<span style="font-size: 12px;"><code>password required /lib/security/pam_unix.so shadow nullok use_authtok</code></span><br />
	to<br />
	<span style="font-size: 12px;"><code>password required /lib/security/pam_unix.so use_authtok</code></span></p>
<p>	Thats it!</p>
]]></content:encoded>
			<wfw:commentRss>http://www.system.adm.br/2009/04/installing-openssh-from-source-on-suse-10/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
