2010 September

CentOS5.5にopenssh-5.6をインストールのメモ

Sep 6, 2010

AD:

CentOS5.5に標準で入っているsshdが、4.*だったような気がしたので最新のソースをダウンロードして、コンパイルしてインストールしました。

既存のsshdの削除

# /etc/rc.d/init.d/sshd stop
# yum -y remove openssh

1 2	# /etc/rc.d/init.d/sshd stop # yum -y remove openssh

最新のsshdをダウンロード

参考ページ：SSHサーバー構築(OpenSSH)

# wget http://ftp.jaist.ac.jp/pub/OpenBSD/OpenSSH/portable/openssh-5.6p1.tar.gz
# tar zxvf openssh-5.6p1.tar.gz
# vi openssh-5.6p1/contrib/redhat/openssh.spec
%define no_x11_askpass 0
&darr;
%define no_x11_askpass 1&#12288;&larr;&#12288;x11_askpass&#12398;&#28961;&#21177;&#21270;
# Do we want to disable building of gnome-askpass? (1=yes 0=no)
%define no_gnome_askpass 0
&darr;
%define no_gnome_askpass 1&#12288;&larr;&#12288;gnome_askpass&#12398;&#28961;&#21177;&#21270;

%configure 
        configure --without-zlib-version-check &#12288;&larr;&#12288;&#36861;&#21152;(zlib&#12398;&#12496;&#12540;&#12472;&#12519;&#12531;&#12481;&#12455;&#12483;&#12463;&#28961;&#21177;&#21270;)
        --sysconfdir=%{_sysconfdir}/ssh 

# rm -rf openssh-5.6p1/contrib/aix/&#12288;&larr;&#12288;&#20351;&#12431;&#12394;&#12356;&#12487;&#12451;&#12473;&#12488;&#12522;&#12499;&#12517;&#12540;&#12471;&#12519;&#12531;&#12399;&#21066;&#38500;
# rm -rf openssh-5.6p1/contrib/hpux/
# rm -rf openssh-5.6p1/contrib/caldera/
# rm -rf openssh-5.6p1/contrib/suse/
# rm -rf openssh-5.6p1/contrib/cygwin/
# rm -rf openssh-5.6p1/contrib/solaris/

# wget http://ftp.jaist.ac.jp/pub/OpenBSD/OpenSSH/portable/openssh-5.6p1.tar.gz

# tar zxvf openssh-5.6p1.tar.gz

# vi openssh-5.6p1/contrib/redhat/openssh.spec

%define no_x11_askpass 0

↓

%define no_x11_askpass 1　←　x11_askpassの無効化

# Do we want to disable building of gnome-askpass? (1=yes 0=no)

%define no_gnome_askpass 0

↓

%define no_gnome_askpass 1　←　gnome_askpassの無効化

%configure

configure --without-zlib-version-check 　←　追加(zlibのバージョンチェック無効化)

--sysconfdir=%{_sysconfdir}/ssh

# rm -rf openssh-5.6p1/contrib/aix/　←　使わないディストリビューションは削除

# rm -rf openssh-5.6p1/contrib/hpux/

# rm -rf openssh-5.6p1/contrib/caldera/

# rm -rf openssh-5.6p1/contrib/suse/

# rm -rf openssh-5.6p1/contrib/cygwin/

# rm -rf openssh-5.6p1/contrib/solaris/

rpmの作成

rpmbuild -tb --clean openssh-5.6p1-final.tar.gz
&#12497;&#12483;&#12465;&#12540;&#12472;&#38306;&#20418;&#12364;&#12399;&#12356;&#12387;&#12390;&#12356;&#12394;&#12356;&#12392;&#12398;&#12371;&#12392;
# yum -y install pam-devel&#12288;openssl-devel glibc-devel krb5-devel
# rpmbuild -tb --clean openssh-5.6p1-final.tar.gz
/var/tmp/rpm-tmp.78083 &#12398;&#19981;&#27491;&#12394;&#32066;&#20102;&#12473;&#12486;&#12540;&#12479;&#12473; 
# yum install rpm-build
# rpmbuild -tb --clean openssh-5.6p1-final.tar.gz
# rpm -Uvh /usr/src/redhat/RPMS/i386/openssh-5.6p1-1.i386.rpm
# rpm -Uvh /usr/src/redhat/RPMS/i386/openssh-server-5.6p1-1.i386.rpm
# rpm -Uvh /usr/src/redhat/RPMS/i386/openssh-clients-5.6p1-1.i386.rpm
# rm-f /usr/src/redhat/RPMS/i386/openssh-*
# rm -f openssh-5.6p1-final.tar.gz

rpmbuild -tb --clean openssh-5.6p1-final.tar.gz

パッケージ関係がはいっていないとのこと

# yum -y install pam-devel　openssl-devel glibc-devel krb5-devel

# rpmbuild -tb --clean openssh-5.6p1-final.tar.gz

/var/tmp/rpm-tmp.78083 の不正な終了ステータス

# yum install rpm-build

# rpmbuild -tb --clean openssh-5.6p1-final.tar.gz

# rpm -Uvh /usr/src/redhat/RPMS/i386/openssh-5.6p1-1.i386.rpm

# rpm -Uvh /usr/src/redhat/RPMS/i386/openssh-server-5.6p1-1.i386.rpm

# rpm -Uvh /usr/src/redhat/RPMS/i386/openssh-clients-5.6p1-1.i386.rpm

# rm-f /usr/src/redhat/RPMS/i386/openssh-*

# rm -f openssh-5.6p1-final.tar.gz

SSHサーバー起動

# /etc/rc.d/init.d/sshd start
&#24120;&#26178;&#36215;&#21205;&#12395;&#35373;&#23450;
# chkconfgi sshd on

# /etc/rc.d/init.d/sshd start

常時起動に設定

# chkconfgi sshd on

sshサーバ設定

# vi /etc/ssh/sshd_config
Protocol 2
PermitRootLogin no
SyslogFacility AUTHPRIV
PasswordAuthentication no
PermitEmptyPasswords no
RSAAuthentication yes
Match Group *,!wheel
        ChrootDirectory /home/%u/./
conf&#12398;&#20877;&#35501;&#36796;
# /etc/rc.d/init.d/sshd reload

# vi /etc/ssh/sshd_config

Protocol 2

PermitRootLogin no

SyslogFacility AUTHPRIV

PasswordAuthentication no

PermitEmptyPasswords no

RSAAuthentication yes

Match Group *,!wheel

ChrootDirectory /home/%u/./

confの再読込

# /etc/rc.d/init.d/sshd reload

Twitter:
Warning: Undefined array key "Twitter" in /home/sazaeau/mizoshiri.com/public_html/blog.mizoshiri.com/wp-content/plugins/sns-count-cache/sns-count-cache.php on line 2897
0 | Facebook: 0 | Google Plus:
Warning: Undefined array key "Google+" in /home/sazaeau/mizoshiri.com/public_html/blog.mizoshiri.com/wp-content/plugins/sns-count-cache/sns-count-cache.php on line 2897
0 | Hatena: 1 | Pocket: 2 | Total: 3 | Feedly: 0