-The GSI-OpenSSH development team announces the release of version 3.0 of
-the GSI-Enabled OpenSSH software distribution. GSI-OpenSSH 3.0 is based
-on OpenSSH 3.7.1p2 and NCSA's latest GSI patch for that version of
-OpenSSH. A summary of the major changes found in this version is given
-at the end of this document.
+GSI-OpenSSH 3.8, based on OpenSSH 4.3p2, is now available from:
-In response to interest members of the user community have shown in
-a mode where GSI-OpenSSH does not override a previously-installed system
-SSH, we have redesigned the main package so that the default behaviour is
-to make available in $GLOBUS_LOCATION/bin/ only the commands 'gsissh',
-'gsisftp', and 'gsiscp'. Those users who wish for GSI-OpenSSH to also
-install 'ssh' and the rest of the standard SSH commands into
-$GLOBUS_LOCATION/bin/ should add the new "compatibility package"
-onto their installation.
+ <http://grid.ncsa.uiuc.edu/ssh/download.html>
-It is our understanding that OpenSSH 3.8 will soon be released. We would
-solicit feedback on our package's new structure and will incorporate
-useful comments and suggestions (perhaps when we address moving to OpenSSH
-3.8).
-
-GSI-OpenSSH 3.0 is available for download from
-
- <ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/bundle/3.0/>
-
-For installation instructions, please see
+For installation instructions, please see:
<http://grid.ncsa.uiuc.edu/ssh/install.html>
We appreciate your feedback and help in testing this version. Please
-use our bugzilla system to report GSI-OpenSSH bugs to the GSI-OpenSSH
-team. This bugzilla system is located at:
+use our bugzilla system to report GSI-OpenSSH bugs:
- <https://bugzilla.ncsa.uiuc.edu/index.cgi>
+ <http://bugzilla.ncsa.uiuc.edu/enter_bug.cgi?product=GSI-enabled%20OpenSSH>
-GSI-OpenSSH 3.0 Major changes
+GSI-OpenSSH 3.8 Major changes
New features
- * Moved to OpenSSH 3.7.1p2 codebase.
+ * Upgraded to OpenSSH 4.3p2.
- * Removed GSSAPI support for protocol 1.
+ * Upgraded to HPN12 patch from
+ <http://www.psc.edu/networking/projects/hpn-ssh/>.
- * Added NCSA_GSSAPI comment in version string to help identify
- OpenSSH versions with NCSA patches for debugging purposes.
-
- * Added gsisftp install target.
-
- * Enable -static to link statically with Globus GSI libraries.
- YMMV.
+ * Added support for Globus Authorization Callouts using service
+ name "ssh"
+ (http://bugzilla.globus.org/bugzilla/show_bug.cgi?id=4592).
Bugs fixed
- * Fixed bug where client would attempt external-keyx even when
- GSSAPI key exchange was not performed, causing compatibility
- problems between GSSAPI mechanisms.
-
- * Fixed misleading "Protocol error: didn't expect packet type 34"
- message. Changed to "packet type 35".
+ * None.
+
+Please note that the configure script included in OpenSSH 4.3p2 checks
+ZLIB_VERSION in zlib.h for zlib versions with known vulnerabilities.
+See <http://www.zlib.net/> for details on zlib vulnerabilities. The
+current acceptable versions of zlib are 1.1.4 and 1.2.3. In cases
+where your vendor has not provided a secure version of zlib, please
+install the latest version of zlib in an alternate path and set the
+--with-zlib GSI_OPENSSH_GPTMACRO option. For example:
+
+ gpt-build -verbose gsi_openssh_bundle-3.8-src.tar.gz gcc32dbg \
+ GSI_OPENSSH_GPTMACRO="--with-zlib=/usr/local/zlib-1.2.3"
+
+MD5 checksums:
+126f907d2a02954743ff9141712fe812 gsi_openssh-3.8-src.tar.gz
+3a86e18fe34f4239dacd89f02e7bdf0b gsi_openssh_bundle-3.8-src.tar.gz
+b7d4b30a59282dd81d5e615802b6b293 gsi_openssh_compat-3.8-src.tar.gz
+d2d61e3d8289c17068aab8e0c74253d6 gsi_openssh_setup-3.8-src.tar.gz
+
+SHA1 checksums:
+0ff6e4678532466e858f72f172fe614ec9923e5a gsi_openssh-3.8-src.tar.gz
+06a045a02236347fb577bac0ec499ee5fccf8bdc gsi_openssh_bundle-3.8-src.tar.gz
+9aa786ac0f85c2f2dde9cfdc4e49e15c4e9dc33d gsi_openssh_compat-3.8-src.tar.gz
+9255eb5e90e934339609a69490e8b3685174cf9f gsi_openssh_setup-3.8-src.tar.gz
andersk / gssapi-openssh.git / blobdiff