OpenSSH build w/ tcpwrappers fails

[Denver Osborn]

Maybe someone has seen this before. I'm trying to build openssh w/ tcpwrappers support and the configure fails when checking for libwrap.a. TCP-WRAPPERS is installed and libwrap.a and tcpd.h are on the box. Here's my syntax

CC=gcc ./configure --prefix=/usr/local/ssh \
--with-pam \
--with-ssl-dir=/usr/local/ssl \
--with-tcp-wrappers \
--with-zlib=../zlib \
--with-kerberos5 \
--with-rand-helper \
--with-md5-passwords \
--with-4in6 \
--build=hppa2.0n-hp-hpux11.11

fails with "checking for libwrap... configure: error: *** libwrap missing"

What am I missing?

-denver

[Zinky]

Why don't you just use HP's SecureShell build? It is fully supported by HP.

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

[Denver Osborn]

That would be too easy :)

I'm looking to support a build of OpenSSH that will do logging for both sftp and scp file xfers. HP's patched for sftp logging, but their build won't handle scp logging.

-denver

[Zinky]

Then use the sources that comes with it:

/opt/ssh/src

Both TCP wrappers and SSH sources are shipped with HP's build.

I'll see if I can compile it with HP's C Compiler...

[Sameer_Nirmal]

Hi,

It looks like the path problem. You need to ensure the "tcpd.h" is included from the "include" directory and the library file
"libwrap.a" path is given in the lib path or attribute to gcc "with-tcp-wrappers=

[Sameer_Nirmal]

Hi again,

Refer this url for required changes for "configure"

http://www.ssh.com/support/documentation/online/ssh/adminguide/32/Configuring_SSH_Secure_Shell_for_TCP_Wrappers_Support.html

[Steven E. Protter]

Shalom Denver,

Two ideas:

1) Make a change request to HP because I think scp should be logged. I'll be contacting HP Israel on this and other nagging issues in a few weeks.
2) Make sure the components you are trying to compile are on both the PATH and SHLIB_PATH

SEP

[Zinky]

David,

If you can give me the snippet of code or needed changes - I can try to compile for you. I'll compile HP's sources. We've HP supported versions of Zlib, TCP wrappers - so I am confident my build -- which will be using HP's C compiler mightjust do the trick...


I am also interesetd in sftp and scp logging ;^)

BTW, have you tried if the current HP Secure Shell build has this functionality already?

[Denver Osborn]

thanks SEP, when I have time I'll ask HP about getting an enhancement request to add scp logging.

for anyone interested, here are the patches I use... http://www.sweb.cz/v_t_m/ His patch is based on the sftp logging patch that hp uses for their build.

I'd supported another custom openssh build before and used these same patches. I don't have my notes from that build process... but I didn't need krb5 or tcp-wrappers either.

If anyone gets bored and has the time to fiddle with it, please post your notes. :)

-denver

[Arunvijai_4]

Hi Denver, Can you do the following ?

# make distclean
# CC=gcc ./configure --prefix=/usr/local/ssh \
--with-pam \
--with-ssl-dir=/usr/local/ssl \
--with-zlib=../zlib \
--with-kerberos5 \
--with-rand-helper \
--with-md5-passwords \
--with-4in6 \
--build=hppa2.0n-hp-hpux11.11

I have just taken --with-tcp-wrappers as you said, you don't require. It should be OK now.

-Arun

[Muthukumar_5]

Change library search path to the libwrap.a alsp and include path to tcpd.h more as,

-L/ with compiler. It will work.

It is usual that it will generate when not seeing libraries and header files in the path.

-Muthu

[Arunvijai_4]

Hello Denver, you can check in config.log to find out where exactly it checks for libwrap.a or libwrap.sl and edit your configure script accordingly. Or you can export LD_LIB_PATH to point to libwrap.a or libwrap.sl

-Arun

[Muthukumar_5]

Based on the platform change the setting of, SHLIB_PATH or LD_LIBRARY_PATH(64 bit only). (It is needed for run time.)

Just add the path of library to library inclusion path and header files to header file inclusion path. It will work.

-Muthu

[Denver Osborn]

I tried setting path to lib and header for tcp-wrappers, but configure script still failed. Then decided to download source for tcp-wrappers from hpux porting and archive centre and built my own libwrap. pointing lib path and include header to my libwrap seemed to do it.

Could be my /usr/lib/libwrap.a or /usr/include/tcpd.h files were corrupt. I'll have to look into that later, but for now the build went fine.

thanks to all who responded!
-denver