ssh on HP-UX

[Krishna Prasad]

Hello I am trying to install OpenSSH on HP-UX.11.0

I downloaded the tar file from openssh.
I tried to run the configure program to compile the ssh server. I get the error message that zlib is not on my machine.

Where can I get this library? All refrences to this library are for hp-lx? I would like it in HP-UX?

Can I put the zlib on my HP-UX 11.0 machine?

[Cheryl Griffin]

Why install OpenSSH when you can install the HP supported SSH:
T1471AA - HP-UX SECURE SHELL

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=T1471AA

Cheryl

[Krishna Prasad]

I didn't know HP had clone of OpenSSH.

I will give it try.

When I try to download the depot the website gets an error.

[Deshpande Prashant · Accepted solution]

Hi
Take a look at following url..

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0x49737bb04b5cd611abdb0090277a778c,00.html

http://www.atomicgears.com/papers/osshhpux.html

You can get ssh3.4 from HP porting center.
http://hpux.cs.utah.edu/hppd/hpux/Networking/Admin/openssh-3.4p1/


Thanks.
Prashant Deshpande.

[Andrew Cowan]

Installing the precompiled version of SSH from the HP Depot may seem easier, however, it is not always the latest version, and can be compiled differently than you may want/need.
It is a bit more trouble to build a GNU compiler environment, but very worthwhile. This is particularly true if, like me, you are working in a multi-platform environment and need to keep all versions at exactly the same level.

As for downloading Zlib (a compression-utilities library), you can do this from the HP Depots and then compile the code from OpenSSH. Just make sure that you download the GNU-C compiler, as the K&R compiler that builds the HP-UX kernels can yield strange results if used to compile GNU code.

[Ralph Grothe]

You can download the zlib sources from here:

http://www.gzip.org/zlib/

To those who asked, why build a SSH from sources instead of installing a precompiled binary.
With security sensitive software such as OpenSSH it is always wise to build it from the sources (even if it takes some time).
First because you should get the latest (this also refers to zlib, there was an exploit recently reported) releases.
These open source softwares are constantly patched as soon as new exploits are reported.
I have the impression that the response latency to discovered exploits is much shorter with open source software than with proprietary.
Second, only by building from sources have you got the ultimate control of what features to en/disable (run configure --help after having extracted the archives)

To build OpenSSH from sources you require these (if my memory serves me correctly):

ANSI C compiler (e.g. gcc)
Perl 5
zlib
OpenSSL (get it from http://www.openssl.org/)
OpenSSH (http://www.openssh.org/)

I know it is cumbersome and takes some time but it works (I did it with gcc), and is worthwhile

Good Luck

Ralph

[Krishna Prasad]

Well I have the zlib library and Openssh installed on my machine. The basic client commands are working fine. I have generated the normal set of keys required and put them where the ssh_config files is expecting them.

However, I am getting an odd error when starting sshd.

The error is

Privilege separation user sshd does not exist

I have Openssh running on my Linux machines and did not have to setup a sshd user?

Any ideas?