SSH install error

[MikeL_4]

When installing OpenSSH I am receiving following error from swinstall:

* Beginning the Configure Execution Phase.
/usr/lib/dld.sl: Can't open shared library: /usr/ais/lib/libcrypto.sl.0.9
/usr/lib/dld.sl: No such file or directory
/var/tmp/BAAa27547/catalog/Secure_Shell/SECURE_SHELL/configure[56]: 27910
ERROR: could not generate RSA1 host key
ERROR: The "configure" script for "Secure_Shell.SECURE_SHELL" failed
(exit code "1"). The script location was
"/var/tmp/BAAa27547/catalog/Secure_Shell/SECURE_SHELL/configure"

Not sure what I am missing or what's causing the error..

[Patrick Wallek · Accepted solution]

Have you installed all required pre-requisites for OpenSSH?

Have a look at the following page for more information on everything required to install and run OpenSSH on HP-UX:

http://hpux.connect.org.uk/hppd/hpux/Networking/Admin/openssh-3.9p1/

[Sanjay_6]

Hi Mike,

download and install the HP Secure Shell which is build on openssh. It is precompiled and has the prerequisites.

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

Hope this helps.

Regds

[MikeL_4]

That is the version I am trying to install, and I've already installed it on 15 other new servers we have just installed and this is the only one giving me problems:

T1471AA_A.03.81.002_HP-UX_B.11.11_32+64.depot

[Sanjay_6]

Hi,

I believe libcrypto.sl.0.9 is part of the OpenSSL v0.9.7d fileset in the package. Check and see that you are installing all the filesets in the bundle.

Hope this helps.

Regds

[Steven E. Protter]

Pre-requisites are here:

http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPUXIEXP1111

Internet express includese the openssl and evrything else you might need.

I think the depot version of Secure shell is the way to go. I never compile unless I need to.

SEP

[Sanjay_6]

Hi,

Also check on the env variable SHLIB_PATH. setting the lib path might help.

Can root access the lib directory ?.

Hope this helps.

Regds

[MikeL_4]

I guess I'm lost on this, I've installed this depot on several other servers the same as I'm trying on this one, and receiving the above error.

If somehing is different on this server that it can't get to the libraries I'm lost as to what it is.

[Ermin Borovac]

I think this error is the key.

/usr/lib/dld.sl: Can't open shared library: /usr/ais/lib/libcrypto.sl.0.9
/usr/lib/dld.sl: No such file or directory

Secure shell configure script tries to run the following command to generate RSA1 host key.

/opt/ssh/bin/ssh-keygen -t rsa1 -f /opt/ssh/etc/ssh_host_key -N "" > /dev/null

From command line run

# ldd -v /opt/ssh/bin/ssh-keygen

Check the output to see if libcrypto.sl.0.9 appears.

For each library in the output verify that they are not linked to /usr/ais/lib/libcrypto.sl.0.9.

[Con O'Kelly]

Hi Mike

I've had exactly the same issue installing SSH 3.81 on some 11i servers.

The problem is that the configuration is looking for some shared libaries that are part of the Kerberos Client (KRB5-Client).
Do an "swlist -l product | grep -i kerberos".
On the systems where the swconfig failed the KRB5-Client was probably not installed.
I'm not sure why as I believe its part of the core OS install for 11i.

The workaround I used was to copy the shared libraries from the 11i Core OS CD (1).
They are in /cdrom/KRB5-Client/KRB5-SHLIB to /usr/lib.
Then run /usr/sbin/swconfig Secure_Shell

Cheers
Con

[Sridhar Bhaskarla]

Hi,

Do this

'echo $SHLIB_PATH' on this server and on another server where it is working fine. You may have to fix your /etc/SHLIB_PATH file. See if that file is not running out of maximum length.

-Sri

[MikeL_4]

# swlist -l product | grep -i kerberos
KRB-Support B.11.11 Kerberos Support for HP-UX and DCE
KRB5-Client B.11.11 Kerberos V5 Client Version 1.0
# ldd -v /opt/ssh/bin/ssh-keygen
find library=/usr/lib/libc.2; required by /opt/ssh/bin/ssh-keygen /usr/lib/libc.2 => /usr/lib/libc.2
find library=/usr/lib/libdld.2; required by /usr/lib/libc.2 /usr/lib/libdld.2 => /usr/lib/libdld.2
find library=/usr/lib/libc.2; required by implicit load /usr/lib/libc.2 => /usr/lib/libc.2
find library=/usr/ais/lib/libcrypto.sl.0.9.6; required by /opt/ssh/bin/ssh-keygen
/usr/lib/dld.sl: Can't open shared library: /usr/ais/lib/libcrypto.sl.0.9.6
/usr/lib/dld.sl: No such file or directory
# cat /etc/SHLIB_PATH/usr/lib:/etc/opt/resmon/lib
# echo $SHLIB_PATH sh: SHLIB_PATH: Parameter not set.

I did an: export SHLIB=`cat /etc/SHLIB_PATH`
and ran swinstall, and still received the same errors on the swinstall.

[MikeL_4]

Thanks