Method for keeping SSH up to date?

[Tonij]

Hi all,

I am responsible for 13+ Solaris servers, some running 8 and some
running 9.

What is the best way to keep Open SSH up to date? I need to use TCP
Wrappers so I dont think I can just install the package from
sun.freeware (or can I?) and they are all at different versions.

I don't want to have to compile it on every box, is there a way to
compile it on one box for each version and create an install package
to propgate to the other systems?

Any info helpful,

[Mikael Holm]

In article <358db3cc.0404200649.2bda1d0@posting.google.com> , Tonij wrote:

> What is the best way to keep Open SSH up to date?

Use pkg-get. Instructions and a whole lot useful info available at
[url]www.blastwave.org[/url].


--
Mr. Mikael Holm, +358505862479, +358445862479
mikael.holm(a)lut.fi, [url]http://www2.lut.fi/~holm/[/url]
Pellonmäenraitti 5 B 12, FI-53850 LAPPEENRANTA

[Dave Hinz]

On 20 Apr 2004 07:49:13 -0700, Tonij <tonij67@hotmail.com> wrote:

>
> I don't want to have to compile it on every box, is there a way to
> compile it on one box for each version and create an install package
> to propgate to the other systems?

Yes, you can either use sunfreeware's packages if you like them, or
you can roll your own, and then package it. The guy who runs sunfreeware.com
has a very good "howto" document on how to create Solaris packages. It's
not a trivial process, but it's pretty straightforward with good
instructions (which his are).

Dave Hinz

[Mark Daniels]

[email]tonij67@hotmail.com[/email] (Tonij) wrote in message news:<358db3cc.0404200649.2bda1d0@posting.google.c om>...

> Hi all,
>
> I am responsible for 13+ Solaris servers, some running 8 and some
> running 9.
>
> What is the best way to keep Open SSH up to date? I need to use TCP
> Wrappers so I dont think I can just install the package from
> sun.freeware (or can I?) and they are all at different versions.
>
> I don't want to have to compile it on every box, is there a way to
> compile it on one box for each version and create an install package
> to propgate to the other systems?
>
> Any info helpful,

Subscribe to Sun Alerts and use the patches that Sun distributes.

Mark

[Tim Skirvin]

[email]tonij67@hotmail.com[/email] (Tonij) writes:

>What is the best way to keep Open SSH up to date? I need to use TCP
>Wrappers so I dont think I can just install the package from
>sun.freeware (or can I?) and they are all at different versions.

I'm fond of having a shared /usr/local/encap tree, and building
new versions when necessary by updating my .ep files:

[url]http://www.ks.uiuc.edu/Development/Computers/docs/sysadmin/Build/files/encap/openssh-3.8p1.ep[/url]

You can then run SSH out of inetd, or just restart the daemon by
hand via script.

(I know I'm begging a lot more questions than I'm answering.)

- Tim Skirvin (tskirvin@ks.uiuc.edu)
--
Theoretical and Computational [url]http://www.ks.uiuc.edu/~tskirvin/[/url]
Biophysics, Beckman Institute, UIUC Senior Systems Administrator

[Tonij]

[email]mdhmi@yahoo.com[/email] (Mark Daniels) wrote in message news:<7ee5b960.0404200924.469e13b7@posting.google. com>...

> [email]tonij67@hotmail.com[/email] (Tonij) wrote in message news:<358db3cc.0404200649.2bda1d0@posting.google.c om>...

> > Hi all,
> >
> > I am responsible for 13+ Solaris servers, some running 8 and some
> > running 9.
> >
> > What is the best way to keep Open SSH up to date? I need to use TCP
> > Wrappers so I dont think I can just install the package from
> > sun.freeware (or can I?) and they are all at different versions.
> >
> > I don't want to have to compile it on every box, is there a way to
> > compile it on one box for each version and create an install package
> > to propgate to the other systems?
> >
> > Any info helpful,

>
>
> Subscribe to Sun Alerts and use the patches that Sun distributes.
>
> Mark

Thanks,

Does Sun supply patches for Openssh? (sorry, didnt make that clear, I
am not using Suns ssh)

>"Yes, you can either use sunfreeware's packages if you like them, or
>you can roll your own, and then package it. The guy who runs

sunfreeware.com

>has a very good "howto" document on how to create Solaris packages.

It's

>not a trivial process, but it's pretty straightforward with good
>instructions (which his are).

"

I will look into that site.

Does anyone know if Sunfreewars versions of SSH includes TCP Wrapper
support? If it does than I have my answer...if not then it is back to
the drawing board.

[Uli Link]

Mikael Holm wrote:

>
> In article <358db3cc.0404200649.2bda1d0@posting.google.com> , Tonij wrote:

> > What is the best way to keep Open SSH up to date?

>
> Use pkg-get. Instructions and a whole lot useful info available at
> [url]www.blastwave.org[/url].

SVR4 packaging is the first choice. It isn't trivial for the first time.
But easy to build an updated package from the previous packaging stage.

If the keys and config files are allready present, you can simply
tar/pax/cpio the bins and libs and unpack on the target machine.

---
Uli

(Reply to ulrich <dot> link <domain-delimiter> epost <dot> de)

[Darren Tucker]

In article <c63le9$7j5pa$1@ID-134476.news.uni-berlin.de>,
Dave Hinz <davehinz@spamcop.net> wrote:

>On 20 Apr 2004 07:49:13 -0700, Tonij <tonij67@hotmail.com> wrote:

>>
>> I don't want to have to compile it on every box, is there a way to
>> compile it on one box for each version and create an install package
>> to propgate to the other systems?

>
>Yes, you can either use sunfreeware's packages if you like them, or
>you can roll your own, and then package it. The guy who runs sunfreeware.com
>has a very good "howto" document on how to create Solaris packages. It's
>not a trivial process, but it's pretty straightforward with good
>instructions (which his are).

OpenSSH ships with a package builder in contrib/solaris. Building a
package is simply a matter of:
$ ./configure && make && contrib/solaris/buildpkg.sh

--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

[Dave Hinz]

On Wed, 21 Apr 2004 14:48:49 +0000 (UTC), Darren Tucker <dtucker@dodgy.net.au> wrote:

> In article <c63le9$7j5pa$1@ID-134476.news.uni-berlin.de>,
> Dave Hinz <davehinz@spamcop.net> wrote:

>>
>>The guy who runs sunfreeware.com
>>has a very good "howto" document on how to create Solaris packages. It's
>>not a trivial process, but it's pretty straightforward with good
>>instructions (which his are).

>
> OpenSSH ships with a package builder in contrib/solaris. Building a
> package is simply a matter of:
> $ ./configure && make && contrib/solaris/buildpkg.sh

Interesting, I hadn't seen that one. Thanks, will check it out. Still
good to do it by hand once or twice just so you know what goes into it,
but nice to know there's a script as well.

Dave Hinz

[Tonij]

[email]dtucker@dodgy.net.au[/email] (Darren Tucker) wrote in message news:<c661kh$ock$1@gate.dodgy.net.au>...

> In article <c63le9$7j5pa$1@ID-134476.news.uni-berlin.de>,
> Dave Hinz <davehinz@spamcop.net> wrote:

> >On 20 Apr 2004 07:49:13 -0700, Tonij <tonij67@hotmail.com> wrote:

> >>
> >> I don't want to have to compile it on every box, is there a way to
> >> compile it on one box for each version and create an install package
> >> to propgate to the other systems?

> >
> >Yes, you can either use sunfreeware's packages if you like them, or
> >you can roll your own, and then package it. The guy who runs sunfreeware.com
> >has a very good "howto" document on how to create Solaris packages. It's
> >not a trivial process, but it's pretty straightforward with good
> >instructions (which his are).

>
> OpenSSH ships with a package builder in contrib/solaris. Building a
> package is simply a matter of:
> $ ./configure && make && contrib/solaris/buildpkg.sh

I am unable to find any contrib directory on my system. I did a find
from / and turned up nothing, why would I not have it? Is it certain
versions of SSH only?

TIA

[Dave Hinz]

On 26 Apr 2004 13:56:26 -0700, Tonij <tonij67@hotmail.com> wrote:

> [email]dtucker@dodgy.net.au[/email] (Darren Tucker) wrote in message news:<c661kh$ock$1@gate.dodgy.net.au>...

>>
>> OpenSSH ships with a package builder in contrib/solaris. Building a
>> package is simply a matter of:
>> $ ./configure && make && contrib/solaris/buildpkg.sh

>
> I am unable to find any contrib directory on my system. I did a find
> from / and turned up nothing, why would I not have it? Is it certain
> versions of SSH only?

It would probably be easiest for you to download the pre-compiled package
available at sunfreeware.org and installing that.

Dave Hinz

[Darren Tucker]

In article <358db3cc.0404261256.3941446b@posting.google.com >,
Tonij <tonij67@hotmail.com> wrote:

>dtucker@dodgy.net.au (Darren Tucker) wrote in message news:<c661kh$ock$1@gate.dodgy.net.au>...

>> OpenSSH ships with a package builder in contrib/solaris. Building a
>> package is simply a matter of:
>> $ ./configure && make && contrib/solaris/buildpkg.sh

>
>I am unable to find any contrib directory on my system. I did a find
>from / and turned up nothing, why would I not have it? Is it certain
>versions of SSH only?

It's in the OpenSSH source tarball which you can get from one of the
mirrors listed at [url]http://www.openssh.com/portable.html#mirrors[/url]
It's been there since (at least) OpenSSH 3.0x.

--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.