search for: etcdir

Can someone else from the Solaris realm that uses our package system verify that this should be done? It looks right, but I want another opinion before commiting. - Ben > On Wed, 27 Feb 2002, Antonio Navarro wrote: > >> Hi Ben, >> >> I have made some modifications to the buildpkg.sh script that is >> distributed with openssh. >> >> I am sending it to

...:31:59 2000 +++ Makefile.in Sun Sep 3 06:23:06 2000 @@ -26,10 +26,12 @@ BINDIR = @bindir@ # we don't use sbindir because we want full compatibility with # the previous releases of Samba -SBINDIR = @bindir@ +SBINDIR = @sbindir@ LIBDIR = @libdir@ VARDIR = @localstatedir@ MANDIR = @mandir@ +ETCDIR?= $(BASEDIR)/etc +LOGDIR?= $(BASEDIR)/log SAMBABOOK = @sambabook@ # The permissions to give the executables @@ -38,12 +40,12 @@ # set these to where to find various files # These can be overridden by command line switches (see smbd(8)) # or in smb.conf (see smb.conf(5)) -SMBLOGFILE = $(VARDI...

...cause anyone any grief? --- opensshd.in.old Sun Oct 21 16:42:02 2001 +++ opensshd.in Mon Jul 15 19:34:16 2002 @@ -3,11 +3,8 @@ # # Stripped PRNGd out of it for the time being. -AWK=/usr/bin/awk CAT=/usr/bin/cat KILL=/usr/bin/kill -PS=/usr/bin/ps -XARGS=/usr/bin/xargs prefix=%%openSSHDir%% etcdir=%%configDir%% @@ -20,12 +17,6 @@ HOST_KEY_DSA=$etcdir/ssh_host_dsa_key HOST_KEY_RSA=$etcdir/ssh_host_rsa_key -killproc() { - _procname=$1 - _signal=$2 - ${PS} -u root | ${AWK} '/'"$_procname"'$/ {print $1}' | ${XARGS} ${KILL} -} - checkkeys() { if [ ! -f $H...

Hello BSDers, I'm running Apache in a chroot jail with suPHP. It needs an /etc/ passwd in the chroot so that suPHP can setuid to the owner of the PHP script, but there's nothing that requires the passwords to be valid. Does anyone have a script strips passwords out of master.passwd, sets all shells to nologin, etc and writes it to the chroot etc dir? I've looked around but

...ssh-2.9.9p2/Makefile.in Tue Oct 16 15:29:27 2001 *************** *** 12,29 **** piddir=@piddir@ srcdir=@srcdir@ top_srcdir=@top_srcdir@ DESTDIR= VPATH=@srcdir@ ! SSH_PROGRAM=@bindir@/ssh ! ASKPASS_PROGRAM=$(libexecdir)/ssh-askpass ! SFTP_SERVER=$(libexecdir)/sftp-server PATHS= -DETCDIR=\"$(sysconfdir)\" \ -D_PATH_SSH_PROGRAM=\"$(SSH_PROGRAM)\" \ -D_PATH_SSH_ASKPASS_DEFAULT=\"$(ASKPASS_PROGRAM)\" \ -D_PATH_SFTP_SERVER=\"$(SFTP_SERVER)\" \ ! -D_PATH_SSH_PIDDIR=\"$(piddir)\" CC=@CC@ LD=@LD@ --- 12,31 ---- piddi...

...O, the LIBDIR and VARDIR layout violates the FHS. In fact, I never have seen a samba installation that kept the settings from the original Make file. Since every user installs the files where he wants them to be, samba installations usually are the pure chaos. I'd suggest changing the layout. ETCDIR (/etc) smb.conf lmhosts printers.def smbpasswd (password file) LIBDIR (/usr/local/samba/lib) codepages/ (code pages) VARDIR (/var/log/samba) log.smb (maybe renamed to smblog) log.nmb (maybe renamed to nmblog) /var/lock/[samba?] (lock files) Would this layout prove sensible as a stand...

...64 += --bindir=$(CONFIGURE_PREFIX)/bin/$(MACH64) CONFIGURE_OPTIONS.64 += --sbindir=$(CONFIGURE_PREFIX)/sbin/$(MACH64) CONFIGURE_OPTIONS.64 += --libdir=$(CONFIGURE_PREFIX)/$(MACH64) CONFIGURE_OPTIONS.64 += --with-privatelibdir=$(CONFIGURE_PREFIX)/private/$(MACH64) CONFIGURE_OPTIONS += --sysconfdir=$(ETCDIR)/samba CONFIGURE_OPTIONS.64 += --with-pammodulesdir=$(CONFIGURE_PREFIX)/security/$(MACH64) CONFIGURE_OPTIONS += --datarootdir=$(CONFIGURE_PREFIX) CONFIGURE_OPTIONS += --mandir=$(USRSHAREMANDIR) CONFIGURE_OPTIONS += --htmldir=/usr/share/samba/swat/help CONFIGURE_OPTIONS += --includedir=$(USRINCDIR)/...

...d +ln -s /etc/init.d/opensshd $FAKE_ROOT/etc/rc2.d/S98opensshd --- contrib/solaris/opensshd.in Fri Oct 12 23:52:39 2001 +++ contrib/solaris/opensshd.in Wed Oct 17 10:49:00 2001 @@ -8,6 +8,7 @@ EGREP=/usr/bin/egrep KILL=/usr/bin/kill PS=/usr/bin/ps +XARGS=/usr/bin/xargs prefix=%%openSSHDir%% etcdir=%%configDir%% @@ -21,7 +22,7 @@ killproc() { _procname=$1 _signal=$2 - ${PGREP} ${_procname} | ${HEAD} -1 | ${XARGS} -t -I {} ${KILL} -${_signal} {} + ${PS} -u root|${AWK} '/'"$_procname"'$/ {print $1}'| ${XARGS} ${KILL} -${_signal} } _______________________...

...Sun Aug 27 15:42:20 2000 +++ openssh-2.1.1p4-hein/ssh.h Sun Aug 27 17:36:02 2000 @@ -80,6 +80,10 @@ #define SSHD_PAM_SERVICE "sshd" #endif +#if defined(PAM_TIS) && ! defined(SSHD_PAM_TIS_SERVICE) +#define SSHD_PAM_TIS_SERVICE "sshd-tis" +#endif + #ifndef ETCDIR #define ETCDIR "/etc" #endif /* ETCDIR */ diff -urN -x *~ openssh-2.1.1p4/sshd.c openssh-2.1.1p4-hein/sshd.c --- openssh-2.1.1p4/sshd.c Wed Jul 12 01:45:27 2000 +++ openssh-2.1.1p4-hein/sshd.c Sun Aug 27 15:39:50 2000 @@ -1097,6 +1097,10 @@ if (options.skey_authentication == 1) a...

This patch adds the seatbelts which _only_ kill parent sshd procs... -RMallory (eg: when you ssh into a machine and pkgadd the new openssh, it will not kill your current (or anyone else's sshd session) onanother_note: the buildpkg.sh could use some exec_prefix functionality... to deal with ./configure --prefix= --exec_prefix=/usr *** bak/opensshd.in Fri Oct 19 13:36:24 2001 ---

The ulimit problem appears to have reared its head again with openssh-1.2.3, under Red Hat Linux 6.1 (kernel-2.2.12, glibc-2.1.2, egcs-1.1.2, openssl-0.9.5, pam-0.68, pwdb-0.60): $ telnet localhost 22 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. SSH-1.5-OpenSSH-1.2.3 ^] telnet> quit Connection closed. $ ssh localhost Last login: Wed Mar 29

In message <Pine.LNX.4.30.0104031615270.8678-100000 at holly.crl.go.jp>, Tom Holro yd writes: >SRP has different requirements from Diffie-Hellman. In particular, >for SRP the generator must be primitive. It turns out that the "primes" >file contains only safe primes with primitive generators, and is thus >ideal for SRP, but so far in OpenSSH it has only been used for

Folks: Thanks to all who helped me get ssh up and running on my development box. Now I want to make a distribution package to take and install on the rest of my network. I am not sure what to transfer from box to box and what to run to get started. I did the install on the dev box and all tested fine. Is there a "standard distribution" list of only files required for running ssh on

https://bugzilla.mindrot.org/show_bug.cgi?id=2119 Bug ID: 2119 Summary: SSHFP with DNSSEC ? no trust anchors given, validation always fails Product: Portable OpenSSH Version: 6.2p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component:

...================================================================== RCS file: /cvs/src/usr.bin/ssh/pathnames.h,v retrieving revision 1.16 diff -u -r1.16 pathnames.h --- pathnames.h 25 Mar 2006 22:22:43 -0000 1.16 +++ pathnames.h 15 Nov 2006 14:14:35 -0000 @@ -36,6 +36,7 @@ #define _PATH_DH_MODULI ETCDIR "/moduli" /* Backwards compatibility */ #define _PATH_DH_PRIMES ETCDIR "/primes" +#define _PATH_CA_KEY_FILE SSHDIR "/ca.pub" #define _PATH_SSH_PROGRAM "/usr/bin/ssh" Index: readconf.c ================================================================...