OpenSSH build w/ tcpwrappers fails

[Denver Osborn]

Maybe someone has seen this before. I'm trying to build openssh w/ tcpwrappers support and the configure fails when checking for libwrap.a. TCP-WRAPPERS is installed and libwrap.a and tcpd.h are on the box. Here's my syntax

CC=gcc ./configure --prefix=/usr/local/ssh \
--with-pam \
--with-ssl-dir=/usr/local/ssl \
--with-tcp-wrappers \
--with-zlib=../zlib \
--with-kerberos5 \
--with-rand-helper \
--with-md5-passwords \
--with-4in6 \
--build=hppa2.0n-hp-hpux11.11

fails with "checking for libwrap... configure: error: *** libwrap missing"

What am I missing?

-denver

[Zinky]

Why don't you just use HP's SecureShell build? It is fully supported by HP.

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

[Denver Osborn]

That would be too easy :)

I'm looking to support a build of OpenSSH that will do logging for both sftp and scp file xfers. HP's patched for sftp logging, but their build won't handle scp logging.

-denver

[Zinky]

Then use the sources that comes with it:

/opt/ssh/src

Both TCP wrappers and SSH sources are shipped with HP's build.

I'll see if I can compile it with HP's C Compiler...

[Sameer_Nirmal]

Hi,

It looks like the path problem. You need to ensure the "tcpd.h" is included from the "include" directory and the library file
"libwrap.a" path is given in the lib path or attribute to gcc "with-tcp-wrappers=

[Sameer_Nirmal]

Hi again,

Refer this url for required changes for "configure"

http://www.ssh.com/support/documentation/online/ssh/adminguide/32/Configuring_SSH_Secure_Shell_for_TCP_Wrappers_Support.html

[Steven E. Protter]

Shalom Denver,

Two ideas:

1) Make a change request to HP because I think scp should be logged. I'll be contacting HP Israel on this and other nagging issues in a few weeks.
2) Make sure the components you are trying to compile are on both the PATH and SHLIB_PATH

SEP

[Zinky]

David,

If you can give me the snippet of code or needed changes - I can try to compile for you. I'll compile HP's sources. We've HP supported versions of Zlib, TCP wrappers - so I am confident my build -- which will be using HP's C compiler mightjust do the trick...


I am also interesetd in sftp and scp logging ;^)

BTW, have you tried if the current HP Secure Shell build has this functionality already?

[Denver Osborn]

thanks SEP, when I have time I'll ask HP about getting an enhancement request to add scp logging.

for anyone interested, here are the patches I use... http://www.sweb.cz/v_t_m/ His patch is based on the sftp logging patch that hp uses for their build.

I'd supported another custom openssh build before and used these same patches. I don't have my notes from that build process... but I didn't need krb5 or tcp-wrappers either.

If anyone gets bored and has the time to fiddle with it, please post your notes. :)

-denver

[Arunvijai_4]

Hi Denver, Can you do the following ?

# make distclean
# CC=gcc ./configure --prefix=/usr/local/ssh \
--with-pam \
--with-ssl-dir=/usr/local/ssl \
--with-zlib=../zlib \
--with-kerberos5 \
--with-rand-helper \
--with-md5-passwords \
--with-4in6 \
--build=hppa2.0n-hp-hpux11.11

I have just taken --with-tcp-wrappers as you said, you don't require. It should be OK now.

-Arun