Quick_Instaling_OpenSSH_for_Solaris 8.0_method-1

eric8037

Download packages at:
  http://www.sunfreeware.com/programlistsparc8.html

1. check solaris patch: if the system no have 112438-01, Must be  install patch first.

   #unzip 112438-03.zip
   
   #patchadd 112438-03  

2. unzip  package:

# gunzip openssh-3.8.1p1-sol8-sparc-local.gz

# gunzip openssl-0.9.7d-sol8-sparc-local.gz

# gunzip zlib-1.2.1-sol8-sparc-local.gz

# gunzip libgcc-3.3-sol8-sparc-local.gz  (if you don't already have gcc 3.3.2 installed)


3. install package by root :

# pkgadd -d openssh-3.8.1p1-sol8-sparc-local

# pkgadd -d openssl-0.9.7d-sol8-sparc-local

# pkgadd -d zlib-1.2.1-sol8-sparc-local

# pkgadd -d libgcc-3.3-sol8-sparc-local (if you don't already have gcc 3.3.2 installed)


4. vi /etc/profile addition following line:

LD_LIBRARY_PATH=:/usr/local/lib:/usr/local/ssl/lib:/usr/openwin/lib
PATH=$PATH:/usr/local/bin:/usr/local/sbin
export PATH LD_LIBRARY_PATH

#. /etc/profile


5. add user:

# mkdir /var/empty
# chown root:sys /var/empty
# chmod 755 /var/empty
# groupadd sshd
# useradd -g sshd -c 'sshd privsep' -d /var/empty -s /bin/false sshd

6. create host_key:

# ssh-keygen -t rsa1 -f /usr/local/etc/ssh_host_key -N ""
# ssh-keygen -t dsa -f /usr/local/etc/ssh_host_dsa_key -N ""
# ssh-keygen -t rsa -f /usr/local/etc/ssh_host_rsa_key -N ""

7. create script then start it:

#vi /etc/rc2.d/S98sshd    addition following line:
-----------------------------------------------------------------------------------
#!/bin/sh

pid=`/usr/bin/ps -e | /usr/bin/grep sshd | /usr/bin/sed -e 's/^  *//' -e 's/ .*//'`
case $1 in
'start')
        /usr/local/sbin/sshd
        ;;
'stop')
        if [ "${pid}" != "" ]
        then
                /usr/bin/kill ${pid}
        fi
        ;;
*)
        echo "usage: /etc/init.d/sshd {start|stop}"
        ;;
esac
--------------------------------------------------------------------------

#chown root:sys /etc/rc2.d/S98sshd
#chmod 755  /etc/rc2.d/S98sshd
#/etc/rc2.d/S98sshd start
＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝
如果安装第六步时出现以下提示信息，ssh无法安装成功，则按照以下步骤安装：
bash-2.03# ssh-keygen -t rsa1 -f /usr/local/etc/ssh_host_key -N ""
PRNG is not seeded
(“PRNG”：Pseudo Random Number Generator Daemon)

1、下载 prngd-0.9.25-sol8-sparc-local.gz
# gzip -d prngd-0.9.25-sol8-sparc-local.gz
# pkgadd -d prngd-0.9.25-sol8-sparc-local
# mkdir /var/spool/prngd
# egc.pl /var/run/egd-pool get
# /usr/local/sbin/prngd /var/spool/prngd/pool

execute by root !!

然后再启动ssh服务。

8. ssh usage:

    repeat the step 1-6 at server & client.
   
   8.1  secure telnet connect from solaris to solaris

        #ssh 10.199.3.70              (username is current local user)
        #ssh oracle@10.199.3.70

   8.2  secure telnet connect from window to solaris
           
               i.   install SecureCRT at window
               ii.  create a new connect use Protocal=ssh1, Cipher=3DES
               iii. or create a new connect use Protocal=ssh2

   8.3  secure ftp connect from solaris to solaris

               #sftp 10.199.3.44
        #sftp ftpuser@10.199.3.44

race

鼓励

eric8037

仔细阅读了sun网站提供的安装文档，发现写的还是不错的。有很多人问过这类的问题，也许从来没有认真读过sun提供的标准文档。虽然是英文的，但是仔细读读，收获会不少的哦！！

eric8037

Quick_Instaling_OpenSSH_for_Solaris 8.0_method-2


1. 设置sshd用户和/var/empty目录
# mkdir /var/empty
# chown root:sys /var/empty
# chmod 755 /var/empty
# groupadd sshd
# useradd -g sshd -c 'sshd privsep' -d /var/empty -s /bin/false sshd
/var/empty目录应该为空

2. 需要以下软件（包括可选）
openssh-3.4p1-sol8-intel-local.gz
openssl-0.9.6d-sol8-intel-local.gz
tcp_wrappers-7.6-sol8-intel-local.gz (optional, but recommended)
(unless you are using IPV6 - see the tcp_wrappers listing for details on this issue)
zlib-1.1.4-sol8-intel-local.gz
perl-5.6.1-sol8-intel-local.gz (optional)
prngd-0.9.25-sol8-intel-local.gz (optional)
egd-0.8-sol8-intel-local.gz (optional)

3. 安装（假设已经安装配置完成tcp_wrapper7.6）
# gunzip openssl-0.9.6d-sol8-intel-local.gz
# gunzip zlib-1.1.4-sol8-intel-local.gz
# pkgadd -d openssl-0.9.6d-sol8-intel-local
# pkgadd -d zlib-1.1.4-sol8-intel-local

4. # vi /etc/profile addition following line:

LD_LIBRARY_PATH=:/usr/local/lib:/usr/local/ssl/lib:/usr/openwin/lib
PATH=$PATH:/usr/local/bin:/usr/local/sbin
export PATH LD_LIBRARY_PATH

#. /etc/profile
上面这步很重要，不能少

5.下载 openssh-3.9p1.tar.gz（或者该软件包的最新版本）
＃gzip -d openssh-3.9p1.tar.gz
#tar xvf openssh-3.9p1.tar
＃cd openssh-3.9p1
#./configure --prefix=/usr/local/ssh --with-ssl-dir=/usr/local/ssl --with-ipv4-default
# make
# make install
如果提示无make命令，则下载 gcc-3.3.2-sol8-sparc-local.gz 后，安装该包。
该包是调试程序的工具。

6. 设置tcp_wrappers
# vi /etc/hosts.deny
加入 sshd:all
# vi /etc/hosts.allow
加入
sshd:允许访问的IP清单:banners /opt/tcp_wrappers_7.6/allow-messages

7. 安装ssh和sshd（如果是源吗安装这些可以省略，因为编译安装完成会有提示）：
确保/usr/local/bin和/opt/ssh在你的环境变量中
# ssh-keygen -t rsa1 -f /opt/ssh/etc/ssh_host_key -N ""
# ssh-keygen -t dsa -f /opt/ssh/etc/ssh_host_dsa_key -N ""
# ssh-keygen -t rsa -f /opt/ssh/etc/ssh_host_rsa_key -N ""

8. 编写启动脚本：
#vi /etc/rc2.d/S98sshd
-----------------------------------------------------------------------------------
#!/bin/sh

pid=`/usr/bin/ps -e | /usr/bin/grep sshd | /usr/bin/sed -e 's/^ *//' -e 's/ .*//'`
case $1 in
'start')
/usr/local/sbin/sshd
;;
'stop')
if [ "${pid}" != "" ]
then
/usr/bin/kill ${pid}
fi
;;
*)
echo "usage: /etc/init.d/sshd {start|stop}"
;;
esac
--------------------------------------------------------------------------

#chown root:sys /etc/rc2.d/S98sshd
#chmod 755 /etc/rc2.d/S98sshd
#/etc/rc2.d/S98sshd start

9. 启动、检查、关闭
# /etc/rc2.d/S98sshd start
# ps -ef | grep sshd
# /etc/rc2.d/S98sshd stop

用ssh命令和sftp命令

jeffreyli

在10上面是不是安装方法都是一样呢？
初学者，，，，

eric8037

安装方法基本一致，只是要注意要用Solaris10的包了。

maping

原帖由 "jeffreyli" 发表：
在10上面是不是安装方法都是一样呢？
初学者，，，，

http://bbs.chinaunix.net/forum/viewtopic.php?t=471137&highlight=maping

jian-yuyu

好文章，该顶一下。

ligz79

顶一下