X-Git-Url: http://andersk.mit.edu/gitweb/openssh.git/blobdiff_plain/4655fe803bf871d1ab546f5c1e4236a0587acaa4..9b363e1c9557dd5c053aa91fbd5d913a1f9b0658:/INSTALL diff --git a/INSTALL b/INSTALL index 4ff27124..9ea5a253 100644 --- a/INSTALL +++ b/INSTALL @@ -15,12 +15,24 @@ supports it. PAM is standard on Redhat and Debian Linux and on Solaris. PAM: http://www.kernel.org/pub/linux/libs/pam/ -If you wish to build the GNOME passphrase requestor, you will need the GNOME +Dante: +http://www.inet.no/dante + +OpenSSH can also use the Dante SOCKS libraries, version 1.1.1pre1 or higher, +if you have them installed on your system. + +If you wish to build the GNOME passphrase requester, you will need the GNOME libraries and headers. GNOME: http://www.gnome.org/ +Alternatly Jim Knoble has written an excellent X11 +passphrase requester. This is maintained seperatly at: + +http://www.pobox.com/~jmknoble/jmk/ + + If you are planning to use OpenSSH on a Unix which lacks a Kernel random number generator (/dev/urandom), you will need to install the Entropy Gathering Daemon (or similar). You will also need to specify the @@ -29,6 +41,11 @@ Gathering Daemon (or similar). You will also need to specify the EGD: http://www.lothar.com/tech/crypto/ +GNU Make: +ftp://ftp.gnu.org/gnu/make/ + +OpenSSH has only been tested with GNU make. It may work with other +'make' programs, but you are on your own. 2. Building / Installation -------------------------- @@ -60,10 +77,20 @@ configuration files in /etc/ssh. If you are using PAM, you will need to manually install a PAM control file as "/etc/pam.d/sshd" (or wherever your system prefers to keep them). A generic PAM configuration is included as "sshd.pam.generic", -you may need to edit it before using it on your system. +you may need to edit it before using it on your system. If you are +using a recent version of Redhat Linux, the config file in +packages/redhat/sshd.pam should be more useful. There are a few other options to the configure script: +--with-rsh=PATH allows you to specify the path to your rsh program. +Normally ./configure will search the current $PATH for 'rsh'. You +may need to specify this option if rsh is not in your path or has a +different name. + +--without-pam will disable PAM support. PAM is automatically detected +and switched on if found. + --enable-gnome-askpass will build the GNOME passphrase dialog. You need a working installation of GNOME, including the development headers, for this to work. @@ -75,17 +102,24 @@ sure of what you are doing, it is best to leave this alone. --with-egd-pool=/some/file allows you to enable Entropy Gathering Daemon support and to specify a EGD pool socket. You will need to use this if your Unix does not support the /dev/urandom device (or -similar). +similar). The file argument refers to the EGD pool file, not the +EGD program itself. Please refer to the EGD documentation. + +--with-lastlog=FILE will specify the location of the lastlog file. +./configure searches a few locations for lastlog, but may not find +it if lastlog is installed in a different place. ---without-askpass will disable X11 password requestor support in -ssh-add +--without-lastlog will disable lastlog support entirely. ---with-kerberos4 will enable Kerberos IV support. You will need to -have the Kerberos libraries and header files installed for this to -work. +--with-kerberos4=PATH will enable Kerberos IV support. You will need +to have the Kerberos libraries and header files installed for this +to work. Use the optional PATH argument to specify the root of your +Kerberos installation. ---with-afs will enable AFS support. You will need to have the Kerberos -IV and the AFS libraries and header files installed for this to work. +--with-afs=PATH will enable AFS support. You will need to have the +Kerberos IV and the AFS libraries and header files installed for this +to work. Use the optional PATH argument to specify the root of your +AFS installation. AFS requires Kerberos support to be enabled. --with-skey will enable S/Key one time password support. You will need the S/Key libraries and header files installed for this to work. @@ -96,6 +130,31 @@ support. You will need libwrap.a and tcpd.h installed. --with-md5-passwords will enable the use of MD5 passwords. Enable this if your operating system uses MD5 passwords without using PAM. +--with-utmpx enables utmpx support. utmpx support is automatic for +some platforms. + +--without-shadow disables shadow password support. + +--with-ipaddr-display forces the use of a numeric IP address in the +$DISPLAY environment variable. Some broken systems need this. + +--with-default-path=PATH allows you to specify a default $PATH for sessions +started by sshd. + +--with-pid-dir=PATH specifies the directory in which the ssh.pid file is +created. + +--with-xauth=PATH specifies the location of the xauth binary + +--with-dante[=DIR] will enable Dante SOCKS library support. If the Dante +libsocks library isn't installed in a library searched by the compiler, +add the directory name as the option. + +If you need to pass special options to the compiler or linker, you +can specify these as enviornment variables before running ./configure. +For example: + +CFLAGS="-O -m486" LFLAGS="-s" ./configure 3. Configuration ---------------- @@ -111,6 +170,20 @@ To generate a host key, issue the following command: (replacing /usr/bin/ssh-keygen -b 1024 -f /etc/ssh/ssh_host_key -N '' +Replacing /etc/ssh with the correct path to the configuration directory. +(${prefix}/etc or whatever you specified with --sysconfdir during +configuration) + +If you have configured OpenSSH with EGD support, ensure that EGD is +running and has collected some Entropy. + For more information on configuration, please refer to the manual pages for sshd, ssh and ssh-agent. +4. Problems? +------------ + +If you experience problems compiling, installing or running OpenSSH. +Please refer to the "reporting bugs" section of the webpage at +http://violet.ibs.com.au/openssh/ +