Security
cancel
Showing results for 
Search instead for 
Did you mean: 

Tru64 5.1B / SSH / TCP Wrappers

SOLVED
Go to solution
Mark Poeschl_2
Honored Contributor

Tru64 5.1B / SSH / TCP Wrappers

The SSH now included with the V5.1B distribution does not include TCP wrappers (i.e. --with-libwrap was apparently not included when the sshd2 was built). We had been using SSH with the built-in TCP wrapper functionality. Can anybody think of a way to get the built-in TCP wrapper functionality and use the SSH product that is formally qualified with Tru64?
3 REPLIES
Peter Leddy_1
Esteemed Contributor

Re: Tru64 5.1B / SSH / TCP Wrappers

Hi Mark,

Have a look at my post in this thread, you could install the tcp_wrappers package on the Open Source CD. It's not supported though because it is Open Source.

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=697330

HTH,

Peter
Johan Brusche
Honored Contributor
Solution

Re: Tru64 5.1B / SSH / TCP Wrappers


The ssh implementation included with V5.1B provides functionality similar to tcp-wrapping.
You can configure /etc/ssh2/ssh2_config and sshd2_config to obtain per-host and per-subnet blocking. Combined with "EnforceSecureRutils yes", you obtain what most sites usually do via tcpd.

Johan
~_~

_JB_
Mark Poeschl_2
Honored Contributor

Re: Tru64 5.1B / SSH / TCP Wrappers

Thanks Johan - should have caught that myself.