topic Re: OpenSSH build w/ tcpwrappers fails in Operating System - Linux

OpenSSH build w/ tcpwrappers fails

Denver Osborn — Wed, 28 Dec 2005 11:53:31 GMT

Maybe someone has seen this before. I'm trying to build openssh w/ tcpwrappers support and the configure fails when checking for libwrap.a. TCP-WRAPPERS is installed and libwrap.a and tcpd.h are on the box. Here's my syntax

CC=gcc ./configure --prefix=/usr/local/ssh \
--with-pam \
--with-ssl-dir=/usr/local/ssl \
--with-tcp-wrappers \
--with-zlib=../zlib \
--with-kerberos5 \
--with-rand-helper \
--with-md5-passwords \
--with-4in6 \
--build=hppa2.0n-hp-hpux11.11

fails with "checking for libwrap... configure: error: *** libwrap missing"

What am I missing?

-denver

Re: OpenSSH build w/ tcpwrappers fails

Zinky — Wed, 28 Dec 2005 12:05:46 GMT

Why don't you just use HP's SecureShell build? It is fully supported by HP.

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

Re: OpenSSH build w/ tcpwrappers fails

Denver Osborn — Wed, 28 Dec 2005 12:09:31 GMT

That would be too easy :)

I'm looking to support a build of OpenSSH that will do logging for both sftp and scp file xfers. HP's patched for sftp logging, but their build won't handle scp logging.

-denver

Re: OpenSSH build w/ tcpwrappers fails

Zinky — Wed, 28 Dec 2005 12:14:06 GMT

Then use the sources that comes with it:

/opt/ssh/src

Both TCP wrappers and SSH sources are shipped with HP's build.

I'll see if I can compile it with HP's C Compiler...

Re: OpenSSH build w/ tcpwrappers fails

Sameer_Nirmal — Wed, 28 Dec 2005 12:28:15 GMT

Hi,

It looks like the path problem. You need to ensure the "tcpd.h" is included from the "include" directory and the library file
"libwrap.a" path is given in the lib path or attribute to gcc "with-tcp-wrappers=

Re: OpenSSH build w/ tcpwrappers fails

Sameer_Nirmal — Wed, 28 Dec 2005 13:59:05 GMT

Hi again,

Refer this url for required changes for "configure"

http://www.ssh.com/support/documentation/online/ssh/adminguide/32/Configuring_SSH_Secure_Shell_for_TCP_Wrappers_Support.html

Re: OpenSSH build w/ tcpwrappers fails

Steven E. Protter — Wed, 28 Dec 2005 15:22:51 GMT

Shalom Denver,

Two ideas:

1) Make a change request to HP because I think scp should be logged. I'll be contacting HP Israel on this and other nagging issues in a few weeks.
2) Make sure the components you are trying to compile are on both the PATH and SHLIB_PATH

SEP

Re: OpenSSH build w/ tcpwrappers fails

Zinky — Wed, 28 Dec 2005 15:26:07 GMT

David,

If you can give me the snippet of code or needed changes - I can try to compile for you. I'll compile HP's sources. We've HP supported versions of Zlib, TCP wrappers - so I am confident my build -- which will be using HP's C compiler mightjust do the trick...

I am also interesetd in sftp and scp logging ;^)

BTW, have you tried if the current HP Secure Shell build has this functionality already?

Re: OpenSSH build w/ tcpwrappers fails

Denver Osborn — Wed, 28 Dec 2005 20:23:56 GMT

thanks SEP, when I have time I'll ask HP about getting an enhancement request to add scp logging.

for anyone interested, here are the patches I use... http://www.sweb.cz/v_t_m/ His patch is based on the sftp logging patch that hp uses for their build.

I'd supported another custom openssh build before and used these same patches. I don't have my notes from that build process... but I didn't need krb5 or tcp-wrappers either.

If anyone gets bored and has the time to fiddle with it, please post your notes. :)

-denver

Re: OpenSSH build w/ tcpwrappers fails

Arunvijai_4 — Wed, 28 Dec 2005 22:52:01 GMT

Hi Denver, Can you do the following ?

# make distclean
# CC=gcc ./configure --prefix=/usr/local/ssh \
--with-pam \
--with-ssl-dir=/usr/local/ssl \
--with-zlib=../zlib \
--with-kerberos5 \
--with-rand-helper \
--with-md5-passwords \
--with-4in6 \
--build=hppa2.0n-hp-hpux11.11

I have just taken --with-tcp-wrappers as you said, you don't require. It should be OK now.

-Arun

Re: OpenSSH build w/ tcpwrappers fails

Muthukumar_5 — Thu, 29 Dec 2005 02:32:10 GMT

Change library search path to the libwrap.a alsp and include path to tcpd.h more as,

-L/ with compiler. It will work.

It is usual that it will generate when not seeing libraries and header files in the path.

-Muthu

Re: OpenSSH build w/ tcpwrappers fails

Arunvijai_4 — Thu, 29 Dec 2005 02:38:06 GMT

Hello Denver, you can check in config.log to find out where exactly it checks for libwrap.a or libwrap.sl and edit your configure script accordingly. Or you can export LD_LIB_PATH to point to libwrap.a or libwrap.sl

-Arun

Re: OpenSSH build w/ tcpwrappers fails

Muthukumar_5 — Thu, 29 Dec 2005 03:04:27 GMT

Based on the platform change the setting of, SHLIB_PATH or LD_LIBRARY_PATH(64 bit only). (It is needed for run time.)

Just add the path of library to library inclusion path and header files to header file inclusion path. It will work.

-Muthu

Re: OpenSSH build w/ tcpwrappers fails

Denver Osborn — Fri, 30 Dec 2005 08:03:50 GMT

I tried setting path to lib and header for tcp-wrappers, but configure script still failed. Then decided to download source for tcp-wrappers from hpux porting and archive centre and built my own libwrap. pointing lib path and include header to my libwrap seemed to do it.

Could be my /usr/lib/libwrap.a or /usr/include/tcpd.h files were corrupt. I'll have to look into that later, but for now the build went fine.

thanks to all who responded!
-denver