openssh unix dev - Aug 2001 - [PATCH] some patches for Fujitsu-Siemens ReliantUNIX, minor fixes and XXXes

Hi,

attached please find some patches for ReliantUNIX. This was tested under 
Reliant UNIX V5.43C40 with Compiler CDSDEV V2.0C00.

Here is what I did:

- there is a common misunderstanding how to use /usr/libucb/libucb.a:

There are some library functions only in libucb.a under ReliantUNIX, so 
one needs to bind it. The problem is: there are some other functions in 
this library you should never bind from there (i.e. fopen()). The trick 
is to first search through libc.so and then through libucb.a. Don't let 
ld search in /usr/ucblib, it will virtually always produce nonsense.

- often found mistake with libsocket and libnsl:

Especially libsocket MUST be bound before libc. Otherwise you will get 
lots of messages like

    unix: syslog: 7784 sshd:_accept: SIOCGPGRP failed errno 22

- -ldl not choosen by configure:

Something in OpenSSH (I did not find) needs libdl. configure checks for 
dlopen() only when it finds PAM. No PAM on ReliantUNIX, so not libdl, 
thus no binding. Ouch! :-)

I made an XXX fix for ReliantUNIX and left it for someone else to 
de-nest the dlopen() check in configure.in. Sorry, but it's beyond my 
understanding of autoconf. BTW: Why does autoconf-2.50 bounce on 
configure.in?

- --with-mantype

configure tells about --with-mantype, but checked for --with-catman

- /etc/default/login

There is a file /etc/default/login on Solaris  2.x and ReliantUNIX. See

   http://docs.sun.com/ab2/coll.40.6/REFMAN1/@Ab2PageView/171170

for a description. It handles things like setting a different PATH for 
root and normal users at login time, quite a convenient feature for 
administrators.

This was handled in SSH 1 since at least 1998. I rewrote some of the old 
code to gather at least PATH. Rest will be done at a later time (when I 
better understand the code :-).

I added a paranoia check to have always a minimum PATH set but take 
care! I fear this changed the semantics of --with-default-path.


Regards,
        Robert


-- 
Robert.Dahlem at ffm2.siemens.de
Siemens Business Services - FS CBS KORDOBA-Outsourcing
Tel: +49-69-797-6530  Fax: +49-69-797-6599
----------------------------------------------------------------------
Sent using PMMail (http://www.pmmail2000.com) - fast, decent, email
software; far better than Outlook. Try it sometime.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/octet-stream
Size: 4669 bytes
Desc: not available
Url :
http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20010820/ed90e5e2/attachment.obj

On Mon, Aug 20, 2001 at 06:33:39PM +0200, Robert Dahlem
wrote:
> - -ldl not choosen by configure:
> 
> Something in OpenSSH (I did not find) needs libdl. configure checks for 
> dlopen() only when it finds PAM. No PAM on ReliantUNIX, so not libdl, 
> thus no binding. Ouch! :-)
> 
> I made an XXX fix for ReliantUNIX and left it for someone else to 
> de-nest the dlopen() check in configure.in. Sorry, but it's beyond my 
> understanding of autoconf. BTW: Why does autoconf-2.50 bounce on 
> configure.in?
I'll give it a guess. The 'engine' release of OpenSSL requires
dynamic
loading, while the normal release does not.
You therefore won't see any relation to OpenSSH.
One could add -ldl (-ldld for some platforms) to the OpenSSH build process:
the next major release of 0.9.7 will use dynamic loading anyway.
0.9.7 shared libraries will be built against -ldl, so this problem will
not pop up too often. I am not sure whether I should recommend adding
-ldl (or -ldld) generally.

Best regards,
	Lutz
-- 
Lutz Jaenicke                             Lutz.Jaenicke at aet.TU-Cottbus.DE
BTU Cottbus               http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik                  Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus              Fax. +49 355 69-4153

On Mon, Aug 20, 2001 at 06:33:39PM +0200, Robert Dahlem
wrote:
> - -ldl not choosen by configure:
you can try to build openssl w/o DSO support

Hi,

attached please find some patches against SNAP-20011026 for ReliantUNIX. 
This was tested under ReliantUNIX V5.43C40 with Compiler CDSDEV V2.0C00 
and works with other versions I have access to: 5.43C30, 5.44C20, 
5.45A10, 5.45A30, 5.45B00

I posted some patches like these in August but unfortunately they didn't 
make it into CVS. The configure patch is essential for ReliantUNIX, so 
please put it in. 

The /etc/default/login patch is some kind of convenience stuff and tries 
to follow the principle of always producing the least surprise: 
administrators of systems with /etc/default/login are used to change 
global (SU)PATH settings only there. If this one is not going to make it 
into the source: please tell me so and I will no longer bother anyone 
with this.

Here is what I did:

- there is a common misunderstanding of how to use /usr/libucb/libucb.a 
under ReliantUnix:

There are some library functions only in libucb.a under ReliantUNIX, so 
one needs to bind it. The problem is: there are some other functions in 
this library you should never bind from there (i.e. fopen()). The trick 
is to first search through libc.so and then through libucb.a. Don't let 
ld search in /usr/ucblib, it will virtually always produce nonsense.

- often found mistake with libsocket and libnsl under ReliantUNIX:

Especially libsocket _must_ be bound before libc. Otherwise you will get 
lots of messages like

    unix: syslog: 7784 sshd:_accept: SIOCGPGRP failed errno 22

- /etc/default/login

There is a file /etc/default/login on Solaris 2.x and ReliantUNIX. See

   http://docs.sun.com/ab2/coll.40.6/REFMAN1/@Ab2PageView/171170

for a description. It handles things like setting a different PATH for 
root and normal users at login time and the umask setting, quite a 
convenient feature for administrators.

This was handled in SSH 1 since at least 1998. I rewrote some of the old 
code to gather at least PATH and UMASK. Rest will be done at a later 
time (when I better understand the code :-).

I added a paranoia check to have always a minimum PATH set but take 
care! I fear this changed the semantics of --with-default-path.

Regards,
        Robert

BTW: Thanks to Markus for patching the "bad exit code 255" problem. I 
have been heavily bitten by this one. :-)


-- 
Robert.Dahlem at siemens.com
Siemens Business Services - FS CBS KORDOBA-Outsourcing
Tel: +49-69-797-6530  Fax: +49-69-797-6599
----------------------------------------------------------------------
Sent using PMMail (http://www.pmmail2000.com) - fast, decent, email
software; far better than Outlook. Try it sometime.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/octet-stream
Size: 4691 bytes
Desc: not available
Url :
http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20011026/a3852df3/attachment.obj

On Mon, 20 Aug 2001, Robert Dahlem wrote:
> Hi,
>
> attached please find some patches for ReliantUNIX. This was tested under
> Reliant UNIX V5.43C40 with Compiler CDSDEV V2.0C00.
>
> Here is what I did:
>
> - there is a common misunderstanding how to use /usr/libucb/libucb.a:
>
> There are some library functions only in libucb.a under ReliantUNIX, so
> one needs to bind it. The problem is: there are some other functions in
> this library you should never bind from there (i.e. fopen()). The trick
> is to first search through libc.so and then through libucb.a. Don't let
> ld search in /usr/ucblib, it will virtually always produce nonsense.
>
I suspect you could remove the libucb stuff altogether and it would work.
Do you really need -ldl ?

Please try this patch.

-------------------------< cut here >------------------
--- configure.ac.old	Thu Oct 25 10:01:31 2001
+++ configure.ac	Fri Oct 26 11:24:05 2001
@@ -187,12 +187,11 @@
 	;;
 *-sni-sysv*)
 	CPPFLAGS="$CPPFLAGS -I/usr/local/include"
-	LDFLAGS="$LDFLAGS -L/usr/local/lib -L/usr/ucblib"
+	LDFLAGS="$LDFLAGS -L/usr/local/lib"
 	IPADDR_IN_DISPLAY=yes
 	AC_DEFINE(USE_PIPES)
 	AC_DEFINE(IP_TOS_IS_BROKEN)
 	AC_DEFINE(HAVE_BOGUS_SYS_QUEUE_H)
-	LIBS="$LIBS -lgen -lnsl -lucb"
 	;;
 *-*-sysv4.2*)
 	CPPFLAGS="$CPPFLAGS -I/usr/local/include"
-------------------------< end cut >------------------


-- 
Tim Rice				Multitalents	(707) 887-1469
tim at multitalents.net