Update openssh in HP -UX 11i

[Harikrishnan L]

I need to update the open ssh version 3.7 to 5.3.

My current system settings are

$ uname -a
HP-UX xxxxx B.11.23 U ia64 xxx unlimited-user license
$ ssh -V
OpenSSH_3.7, SSH protocols 1.5/2.0, OpenSSL 0.9.7c 30 Sep 2003
HP-UX_Secure_Shell-A.03.71.006.%ic71N, HP_UX Secure Shell version
$

Kindly help to update the open ssh.Where i can download the install file and steps to install the package.

[Horia Chirculescu · Accepted solution]

Hello,

You should check the porting page for openssh:

http://hpux.connect.org.uk/hppd/hpux/Networking/Admin/openssh-5.3p1/

Horia.

[Robert-Jan Goossens_1]

Hi,

HP-UX Secure Shell is based on openssh, you can download it for free using below link.

https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

https://h20392.www2.hp.com/portal/swdepot/displayInstallInfo.do?productNumber=T1471AA
[Moderator edit: Removed the broken links. Please refer to https://support.hpe.com]
Regards,
Robert-Jan

[Harikrishnan L]

Thanks for your answers..

I am not able to install the open ssh output attached here help me to get open ssh 5.3..


# pwd
/glodist/ssh
# swlist -s /glodist/ssh/T1471AA_A.05.30.007_HP-UX_B.11.11_32_64.depot
# Initializing...
# Contacting target "DISTHPIT"...
#
# Target: DISTHPIT:/glodist/ssh/T1471AA_A.05.30.007_HP-UX_B.11.11_32_64.depot
#

#
# Bundle(s):
#

T1471AA A.05.30.007 HP-UX Secure Shell
#
# swinstall -s /glodist/ssh/T1471AA_A.05.30.007_HP-UX_B.11.11_32_64.depot T1471AA
WARNING: The logfile, "/var/adm/sw/swinstall.log" is in use by process
"12853". The log information will be intermixed unless a
different logfile is given. To select a new logfile, specify
the "-x logfile=" option on the command line.

------- 02/17/10 18:09:38 IST BEGIN swinstall SESSION
(non-interactive) (jobid=DISTHPIT-0040)

* Session started for user "root@DISTHPIT".

* Beginning Selection
WARNING: "DISTHPIT:/": There are other sessions in progress on this
host that may affect the results of the Disk Space Analysis
calculation.
* Target connection succeeded for "DISTHPIT:/".
ERROR: Could not apply the software selection "T1471AA" because it
refers to a bundle or to a product, subproduct or fileset
within a bundle but no compatible bundles meeting the
specification were found.
* Software selection failed for
"DISTHPIT:/glodist/ssh/T1471AA_A.05.30.007_HP-UX_B.11.11_32_64.depot".

ERROR: No software has been selected.
ERROR: Cannot continue the "swinstall" task.
* Selection had errors.



------- 02/17/10 18:09:39 IST END swinstall SESSION (non-interactive)
(jobid=DISTHPIT-0040)

# ssh -V
OpenSSH_3.7, SSH protocols 1.5/2.0, OpenSSL 0.9.7c 30 Sep 2003
HP-UX_Secure_Shell-A.03.71.006.%ic71N, HP_UX Secure Shell version
#

[Jupinder Bedi]

you can download it from here

http://hpux.connect.org.uk/hppd/hpux/Networking/Admin/openssh-5.3p1/

[Horia Chirculescu]

>ERROR: Could not apply the software selection "T1471AA" because it
refers to a bundle or to a product, subproduct or fileset within a bundle but no compatible bundles meeting the specification were found.


As always, you should check for run time dependencies. Read the documentation for minimal required versions needed to install that depot.

Horia.

[Robert-Jan Goossens_1]

Hi again,

You are trying to install the HPUX 11.11 secure shell depot on your HPUX 11.23 server.

Download the correct version

T1471AA_A.05.30.008_HP-UX_B.11.23_32_64.depot

Regards,
Robert-Jan

[WayneHP]

software.hp.com

search

HP-UX Secure Shell

Get the version for your o/s

[Steven E. Protter]

Shalom,

There are a few problems with earlier responses.

The only place you should go to get openssh is Core OS or Application Media or http://software.hp.com and search for secure shell.

The porting and archive center is not a good place to go for that. The QA of HP is needed for this important product.

The good news with Secure shell is that you can update it while the server is running and there is no loss of service from reboot.

SEP

[Harikrishnan L]

Hi thanks for all your replys.

how to check the fileset and related pre installation for open ssh 5.3

swinstall -s /glodist/ssh/openssh-5.3p1-hppa-11.23.depot openssh

======= 02/18/10 11:28:45 IST BEGIN swinstall SESSION
(non-interactive) (jobid=DISTHPIT-0049)

* Session started for user "root@DISTHPIT".

* Beginning Selection
* Target connection succeeded for "DISTHPIT:/".
NOTE: The software "openssh" was successfully marked, but it depends
on the following software items which could not be found in
the source. However, these items may already be in the target.
This will be checked during the Analysis Phase:
openssl.openssl-SHLIBS
* Source:
/glodist/ssh/openssh-5.3p1-hppa-11.23.depot
* Targets: DISTHPIT:/
* Software selections:
openssh.openssh-MAN,r=5.3p1,a=HP-UX_B./800
openssh.openssh-RUN,r=5.3p1,a=HP-UX_B./800
* Selection succeeded.


* Beginning Analysis and Execution
* Session selections have been saved in the file
"/.sw/sessions/swinstall.last".
ERROR: "DISTHPIT:/": The software dependencies for 1 products or
filesets cannot be resolved.
* The analysis phase failed for "DISTHPIT:/".


WARNING: Exiting due to keyboard interrupt.
WARNING: The task will continue in unattended mode on host "DISTHPIT".

======= 02/18/10 11:29:07 IST END swinstall SESSION (non-interactive)
(jobid=DISTHPIT-0049)

[Horia Chirculescu]

>how to check the fileset and related pre installation for open ssh 5.3

Read the release docs! On the porting page I sent to you on my previous post, you will find a list called "Run-time dependencies:".

All the utilities from that page must exist on your system. More, sometimes there are required at least some versions numbers for this software to be installed.

Once again, read the documentation on every program you want to install/upgrade on your system.

Horia.

[Harikrishnan L]

hi thanks,

after installed the depot it is available on swlist -l priduct but not showin in ssh -V

output given below


# swlist -l product | grep open
mysql 3.23.54a.01 MySQL open-source database
openssh 5.3p1 openssh
openssl A.00.09.07-d.011 Secure Network Communications Protocol
openssl 0.9.8k openssl
# ssh -V
OpenSSH_3.7, SSH protocols 1.5/2.0, OpenSSL 0.9.7c 30 Sep 2003
HP-UX_Secure_Shell-A.03.71.006.%ic71N, HP_UX Secure Shell version
#

[Horia Chirculescu]

You can search for ssh in order to find the newly installed version.

find / -name ssh -print

Afther that you can make a soft link to the newly installed version (see $PATH) or you can uninstall the old version.

Horia.

[Harikrishnan L]

thanks,

How do i redirect the path of the ssh.


# find / -name ssh -print
/etc/opt/ssh
/opt/ssh
/opt/ssh/bin/ssh
/opt/ssh/newconfig/opt/ssh
/opt/ssh/src/ssh
/opt/ssh/src/ssh/pa20_32/ssh
/usr/bin/ssh



# ssh -V
OpenSSH_3.7, SSH protocols 1.5/2.0, OpenSSL 0.9.7c 30 Sep 2003
HP-UX_Secure_Shell-A.03.71.006.%ic71N, HP_UX Secure Shell version
# ps -eaf | grep ssh
root 12892 1 0 18:04:57 ? 0:00 /opt/ssh/sbin/sshd
sshd 16872 16871 0 11:36:24 ? 0:00 sshd: itanium [net]
itanium 16878 16876 0 11:36:47 ? 0:00 sshd: itanium@pts/0

[Horia Chirculescu]

Issue a:

which ssh

Let's say that you get:

/usr/bin/ssh

The command:

/opt/ssh/bin/ssh -V

should show show that this ssh is the new binary (just installed).

In this case you can do something like this:

mv /usr/bin/ssh /usr/bin/ssh_37
ln -sf /opt/ssh/bin/ssh /usr/bin/ssh

So, right now you will have the binary file in /opt/ssh/bin/ssh and a soft link in /usr/bin/ssh.

Now,

ssh -V

should show the new version.

Horia.

[Harikrishnan L]

-V is showing old version only after i followed you instruction.

# ssh -V
OpenSSH_3.7, SSH protocols 1.5/2.0, OpenSSL 0.9.7c 30 Sep 2003
HP-UX_Secure_Shell-A.03.71.006.%ic71N, HP_UX Secure Shell version
# which ssh
sh: v^[which: not found.
# which ssh
/usr/bin/ssh
# /usr/bin/ssh -V
OpenSSH_3.7, SSH protocols 1.5/2.0, OpenSSL 0.9.7c 30 Sep 2003
HP-UX_Secure_Shell-A.03.71.006.%ic71N, HP_UX Secure Shell version
#
# opt/ssh/bin/ssh -V
sh: opt/ssh/bin/ssh: not found.
# opt/ssh/bi /ssh -V
# /opt/ssh/bin/ssh -V
OpenSSH_3.7, SSH protocols 1.5/2.0, OpenSSL 0.9.7c 30 Sep 2003
HP-UX_Secure_Shell-A.03.71.006.%ic71N, HP_UX Secure Shell version
# ps -eaf | grep /sec
grep: [] imbalance.
# ps -eaf | grep /ssh
root 19474 1 0 15:42:27 ? 0:00 /opt/ssh/sbin/sshd
# swlist | grep open
MySQL 3.23.54a.01 MySQL open-source database
openssh 5.3p1 openssh
openssl 0.9.8k openssl

[Jupinder Bedi]

can you do one thing

give me out put of


#cd /

find / -name ssh -print -depth

and also swlist | grep -i ssh

[Jupinder Bedi]

and also one thing more , you need to find the installation directory of your ssh and than make the soft link from that directory to /usr/bin

find command I told you above will show you the ssh directory and than make the link

[Horia Chirculescu]

Which depot did you installed?

The one from HP (http://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA) or the one from the porting page (http://hpux.connect.org.uk/hppd/hpux/Networking/Admin/openssh-5.3p1/)

The one from the porting page should install the new binaries in

/usr/local/sbin

and

/usr/local/bin

Check those directories.

Also, check the log file for swinstall in order to find out any problems related to installation (if any).

Horia.

[Moderator edit: Removed the broken links.]

[Horia Chirculescu]

I assume you are not upgrading the openssh from a ssh session to the server.

If this is the case, your sshd daemon can not be installed (file in use) or the port will be in use by the previous sshd.

Horia.

[Harikrishnan L]

now i had uninstalled and reinstalled the sssh but #ssh -V dont have any out put


new location of software is /usr/local/bin/ssh

old location is /opt/ssh

whish ssh : /usr/bin/ssh

its linked to:- /usr/bin/ssh -> /opt/ssh/bin/ssh

depot: (http://hpux.connect.org.uk/hppd/hpux/Networking/Admin/openssh-5.3p1/)

[Kanagaraj]

if you uninstalled old version ssh,then that old /opt/ssh should not exist.

just rename that directory for backup and make a link /usr/bin/ssh to /usr/local/bin/ssh.

Also restart the daemon.

/sbin/init.d/secsh stop
/sbin/init.d/secsh start

I think you may accessing the server by telnet.

[Horia Chirculescu]

/usr/local/bin/ssh -V

shows anything?

[Jupinder Bedi]

so are you finally successful ? what does ssh -V shows

[Harikrishnan L]

No not yet


# usr/local/bin/ssh -V
/usr/lib/dld.sl: Can't find path for shared library: libz.sl
/usr/lib/dld.sl: No such file or directory
ARIES32: Core file for PA32 application saved to /core.ssh
Abort(coredump)
#