-The GSI-OpenSSH development team announces the release of version 3.1 of
-the GSI-Enabled OpenSSH software distribution. GSI-OpenSSH 3.1 is based
-on OpenSSH 3.8p1 and NCSA's latest GSI patch for that version of
-OpenSSH. A summary of the major changes found in this version is given
-at the end of this document.
+GSI-OpenSSH 3.8, based on OpenSSH 4.3p2, is now available from:
-GSI-OpenSSH 3.1 is available for download from
+ <http://grid.ncsa.uiuc.edu/ssh/download.html>
- <ftp://ftp.ncsa.uiuc.edu/aces/gssapi-openssh/bundle/3.0/>
-
-For installation instructions, please see
+For installation instructions, please see:
<http://grid.ncsa.uiuc.edu/ssh/install.html>
We appreciate your feedback and help in testing this version. Please
-use our bugzilla system to report GSI-OpenSSH bugs to the GSI-OpenSSH
-team. This bugzilla system is located at:
+use our bugzilla system to report GSI-OpenSSH bugs:
- <https://bugzilla.ncsa.uiuc.edu/index.cgi>
+ <http://bugzilla.ncsa.uiuc.edu/enter_bug.cgi?product=GSI-enabled%20OpenSSH>
-GSI-OpenSSH 3.1 Major changes
+GSI-OpenSSH 3.8 Major changes
New features
- * Moved to OpenSSH 3.8p1 codebase, including support for new
- 'gssapi-with-mic' authentication method. Compatibility with
- the older 'gssapi' authentication method is retained.
+ * Upgraded to OpenSSH 4.3p2.
- Bugs fixed
+ * Upgraded to HPN12 patch from
+ <http://www.psc.edu/networking/projects/hpn-ssh/>.
- * Fixed bug in GSI code for handling case when PAM support is
- built in but 'UsePam yes' is not set in the sshd_config file.
+ * Added support for Globus Authorization Callouts using service
+ name "ssh"
+ (http://bugzilla.globus.org/bugzilla/show_bug.cgi?id=4592).
+
+ Bugs fixed
- * Fixed shell syntax error in configure script.
+ * None.
+
+Please note that the configure script included in OpenSSH 4.3p2 checks
+ZLIB_VERSION in zlib.h for zlib versions with known vulnerabilities.
+See <http://www.zlib.net/> for details on zlib vulnerabilities. The
+current acceptable versions of zlib are 1.1.4 and 1.2.3. In cases
+where your vendor has not provided a secure version of zlib, please
+install the latest version of zlib in an alternate path and set the
+--with-zlib GSI_OPENSSH_GPTMACRO option. For example:
+
+ gpt-build -verbose gsi_openssh_bundle-3.8-src.tar.gz gcc32dbg \
+ GSI_OPENSSH_GPTMACRO="--with-zlib=/usr/local/zlib-1.2.3"
+
+MD5 checksums:
+126f907d2a02954743ff9141712fe812 gsi_openssh-3.8-src.tar.gz
+3a86e18fe34f4239dacd89f02e7bdf0b gsi_openssh_bundle-3.8-src.tar.gz
+b7d4b30a59282dd81d5e615802b6b293 gsi_openssh_compat-3.8-src.tar.gz
+d2d61e3d8289c17068aab8e0c74253d6 gsi_openssh_setup-3.8-src.tar.gz
+
+SHA1 checksums:
+0ff6e4678532466e858f72f172fe614ec9923e5a gsi_openssh-3.8-src.tar.gz
+06a045a02236347fb577bac0ec499ee5fccf8bdc gsi_openssh_bundle-3.8-src.tar.gz
+9aa786ac0f85c2f2dde9cfdc4e49e15c4e9dc33d gsi_openssh_compat-3.8-src.tar.gz
+9255eb5e90e934339609a69490e8b3685174cf9f gsi_openssh_setup-3.8-src.tar.gz