Pending OpenSSH release, call for testing.
William R. Knox
wknox at mitre.org
Fri Aug 13 22:12:07 EST 2004
Passes all tests on Solaris 8, including the ability to reset expired
passwords both with UsePAM on and off. One oddity in the configure
was the following message:
checking sys/ptms.h usability... no
checking sys/ptms.h presence... yes
configure: WARNING: sys/ptms.h: present but cannot be compiled
configure: WARNING: sys/ptms.h: check for missing prerequisite headers?
configure: WARNING: sys/ptms.h: see the Autoconf documentation
configure: WARNING: sys/ptms.h: section "Present But Cannot Be Compiled"
configure: WARNING: sys/ptms.h: proceeding with the preprocessor's result
configure: WARNING: sys/ptms.h: in the future, the compiler will take precedence
configure: WARNING: ## ------------------------------------------ ##
configure: WARNING: ## Report this to the AC_PACKAGE_NAME lists. ##
configure: WARNING: ## ------------------------------------------ ##
checking for sys/ptms.h... yes
Built with the following options:
OpenSSH has been configured with the following options:
User binaries: /usr/local/bin
System binaries: /usr/local/sbin
Configuration files: /usr/local/etc
Askpass program: /usr/local/libexec/ssh-askpass
Manual pages: /usr/local/man/manX
PID file: /var/run
Privilege separation chroot path: /var/empty
sshd default user PATH:
/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin
(If PATH is set in /etc/default/login it will be used instead. If
used, ensure the path to scp is present, otherwise scp will not work.)
Manpage format: man
PAM support: yes
KerberosV support: no
Smartcard support: no
S/KEY support: no
TCP Wrappers support: yes
MD5 password support: no
IP address in $DISPLAY hack: no
Translate v4 in v6 hack: no
BSD Auth support: no
Random number source: OpenSSL internal ONLY
Host: sparc-sun-solaris2.8
Compiler: gcc
Compiler flags: -g -O2 -Wall -Wpointer-arith -Wno-uninitialized
Preprocessor flags:
Linker flags:
Libraries: -lwrap -lpam -ldl -lresolv -lcrypto -lrt -lz -lsocket
-lnsl
SVR4 style packages are supported with "make package"\n
PAM is enabled. You may need to install a PAM control file
for sshd, otherwise password authentication may fail.
Example PAM control files can be found in the contrib/
subdirectory
WARNING: the operating system that you are using does not
appear to support either the getpeereid() API nor the
SO_PEERCRED getsockopt() option. These facilities are used to
enforce security checks to prevent unauthorised connections to
ssh-agent. Their absence increases the risk that a malicious
user can connect to your agent.
Bill Knox
Lead Operating Systems Programmer/Analyst
The MITRE Corporation
On Thu, 12 Aug 2004, Darren Tucker wrote:
> Date: Thu, 12 Aug 2004 23:55:20 +1000
> From: Darren Tucker <dtucker at zip.com.au>
> To: openssh-unix-dev at mindrot.org
> Subject: Pending OpenSSH release, call for testing.
>
> Hi All.
> OpenSSH is getting ready for a release soon, so we are asking for all
> interested parties to test a snapshot.
>
> Changes include:
>
> * sshd will now re-exec itself for each new connection (the "-e" option
> is required when running sshd in debug mode).
>
> * PAM password authentication has been (re)added.
>
> * Interface improvements to sftp(1)
>
> * Many bug fixes and improvements, for details see the ChangeLog and
> http://bugzilla.mindrot.org/show_bug.cgi?id=822
>
> The OpenBSD version is available in CVS HEAD:
> http://www.openbsd.org/anoncvs.html
>
> Portable snapshots are available at:
> ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/snapshot/
> or one of its mirrors listed at http://www.openssh.com/portable.html#ftp
>
> Please test! Running the regression tests supplied with Portable does
> not require installation and is a simply:
> $ ./configure && make tests
>
> Testing on suitable non-production systems is also appreciated. Please
> send reports of success or failure to openssh-unix-dev.
>
> Thanks,
> -Daz.
>
> --
> Darren Tucker (dtucker at zip.com.au)
> GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
> Good judgement comes with experience. Unfortunately, the experience
> usually comes from bad judgement.
>
> _______________________________________________
> openssh-unix-dev mailing list
> openssh-unix-dev at mindrot.org
> http://www.mindrot.org/mailman/listinfo/openssh-unix-dev
>
More information about the openssh-unix-dev
mailing list