SSH is another product that Fermilab has taken and modified to work correctly.
Jim Fromm has worked hard to make sure that not only does it have all the
security holes patched up, but that it works with kerberos and/or afs as well.
As each new security hole and bug get's patched, the release get's imcremented with a
letter, instead of a number. As of this writting we are at 1.2.27g.
NOTE: There used to be three seperate rpm's. One for normal SSH, one for kerberized ssh, and one for AFS ssh. They were combined into one. Read on to see how it works
ssh
If there is a rpm that I feel is a work of art, it's this one. This is because
it answers the many problems that users where having in deciding which rpm to use.
Everything is put just where the Fermilab's ssh product puts them, that is in /usr/krb5.
Then a network of links is made to make sure that ssh is found in all of it's usual
places. In addition, we also make sure you get /usr/krb5 in your path.
At the heart of this rpm is the sshd startup script. It figures out if you
have AFS and if you have kerberos. It then starts up the appropriate sshd depending
on what is found. It is dynamic, in that it does this check everytime the sshd is
started.
ssh-server
This was made specifically for Fermi Linux 7.3.1, but it still is the exact same binaries,
just compiled into a different rpm. For more details on if you even want this rpm, please see
my SSH / OpenSSH on Fermi Linux 7.3.1 web page.
Where do you get the rpm?
We have gotten permission to finolly export our version of ssh. You can now find it at
ftp://linux.fnal.gov/linux/contrib/ssh/
Back to RPM's
Back Home
September 10, 2002