- (djm) Add Solaris package support from Rip Loomis <loomisg@cist.saic.com>
This commit is contained in:
Damien Miller
parent
681062a6b3
commit
a7f58293f7
1
CREDITS
1
CREDITS
|
|
@ -56,6 +56,7 @@ Peter Kocks <peter.kocks@baygate.com> - Makefile fixes
|
||||||
Phil Hands <phil@hands.com> - Debian scripts, assorted patches
|
Phil Hands <phil@hands.com> - Debian scripts, assorted patches
|
||||||
Phil Karn <karn@ka9q.ampr.org> - Autoconf fix
|
Phil Karn <karn@ka9q.ampr.org> - Autoconf fix
|
||||||
Phill Camp <P.S.S.Camp@ukc.ac.uk> - login code fix
|
Phill Camp <P.S.S.Camp@ukc.ac.uk> - login code fix
|
||||||
|
Rip Loomis <loomisg@cist.saic.com> - Solaris package support, fixes
|
||||||
SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp> - Multiple bugfixes
|
SAKAI Kiyotaka <ksakai@kso.netwk.ntt-at.co.jp> - Multiple bugfixes
|
||||||
Simon Wilkinson <sxw@dcs.ed.ac.uk> - PAM fixes
|
Simon Wilkinson <sxw@dcs.ed.ac.uk> - PAM fixes
|
||||||
Svante Signell <svante.signell@telia.com> - Bugfixes
|
Svante Signell <svante.signell@telia.com> - Bugfixes
|
||||||
|
|
|
||||||
|
|
@ -39,6 +39,7 @@
|
||||||
[session.c sshd.8 sshd.c]
|
[session.c sshd.8 sshd.c]
|
||||||
sshd -u len, similar to telnetd
|
sshd -u len, similar to telnetd
|
||||||
- (djm) Lastlog was not getting closed after writing login entry
|
- (djm) Lastlog was not getting closed after writing login entry
|
||||||
|
- (djm) Add Solaris package support from Rip Loomis <loomisg@cist.saic.com>
|
||||||
|
|
||||||
20000816
|
20000816
|
||||||
- (djm) Replacement for inet_ntoa for Irix (which breaks on gcc)
|
- (djm) Replacement for inet_ntoa for Irix (which breaks on gcc)
|
||||||
|
|
|
||||||
|
|
@ -0,0 +1,82 @@
|
||||||
|
README for OpenSSH Solaris packaging scripts
|
||||||
|
Rip Loomis <loomisg@saic.com> - 2000-08-02
|
||||||
|
|
||||||
|
To use, simply expand this tarball under your main
|
||||||
|
OpenSSH source directory--it will create a
|
||||||
|
contrib/solaris subdirectory. Run configure and
|
||||||
|
make in OpenSSH as before. Then, from either
|
||||||
|
that directory or the main OpenSSH source directory,
|
||||||
|
run the command "build-pkg" (specifying the
|
||||||
|
appropriate path of course.) A subdirectory
|
||||||
|
will be created as contrib/solaris/build-SSH-package,
|
||||||
|
and after the build is done the package will be
|
||||||
|
present in that build-SSH-package directory
|
||||||
|
with a name of the form
|
||||||
|
OPENssh-$SSHversion-$arch-$OSversion[-$installLocation]
|
||||||
|
|
||||||
|
The build and install scripts should take into account
|
||||||
|
most possible situations (existing SSH installation,
|
||||||
|
differences in Solaris version between build and
|
||||||
|
target systems, changes you have made to the default
|
||||||
|
configuration, etc.) I would appreciate any feedback
|
||||||
|
or comments.
|
||||||
|
|
||||||
|
Copyright information is included below, followed by the known issue list.
|
||||||
|
Both are taken verbatim from the "build-pkg" script.
|
||||||
|
|
||||||
|
# OpenSSH solaris build script and supporting data files
|
||||||
|
# Copyright (c) 2000 Rip Loomis and
|
||||||
|
# Science Applications International Corporation (SAIC)
|
||||||
|
# (http://www.cist-east.saic.com). All rights reserved.
|
||||||
|
#
|
||||||
|
# Redistribution and use in source and binary forms, with or without
|
||||||
|
# modification, are permitted provided that the following conditions
|
||||||
|
# are met:
|
||||||
|
# 1. Redistributions of source code must retain the above copyright
|
||||||
|
# notice, this list of conditions and the following disclaimer.
|
||||||
|
# 2. Redistributions in binary form must reproduce the above copyright
|
||||||
|
# notice, this list of conditions and the following disclaimer in the
|
||||||
|
# documentation and/or other materials provided with the distribution.
|
||||||
|
# 3. The name of the author may not be used to endorse or promote products
|
||||||
|
# derived from this software without specific prior written permission.
|
||||||
|
#
|
||||||
|
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
|
||||||
|
# IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
|
||||||
|
# OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
|
||||||
|
# IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
|
||||||
|
# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
||||||
|
# NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
||||||
|
# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
||||||
|
# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
||||||
|
# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
||||||
|
# THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
|
|
||||||
|
# Obviously, without all the hard work of the OpenBSD OpenSSH developers
|
||||||
|
# and the OpenSSH Portability Team, these scripts would be pointless...
|
||||||
|
# so thanks again folks!
|
||||||
|
#=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
|
||||||
|
|
||||||
|
#### Known issues
|
||||||
|
# These methods are generally based on a "default" compilation of
|
||||||
|
# OpenSSH on Solaris--so the more things that you change from the default,
|
||||||
|
# the greater the chance that something in the script won't be able to
|
||||||
|
# handle the changes. In general, though, most things should be determined
|
||||||
|
# from your compile environment--the architecture, SSH version, and
|
||||||
|
# other related data should all get picked up by this script. The script
|
||||||
|
# and data files were last updated to match OpenSSH 2.1.1p4.
|
||||||
|
#
|
||||||
|
# All building and packaging is done under a temporary directory that is
|
||||||
|
# itself created under the contrib/solaris directory--so there shouldn't
|
||||||
|
# be any special security issues (or need for root access during the
|
||||||
|
# packaging process). The temporary directory is defined below as
|
||||||
|
# ${BUILDDIR}.
|
||||||
|
#
|
||||||
|
# The permissions on the installed files are based on how we prefer to
|
||||||
|
# do things here--so nothing is installed SetUID to root.
|
||||||
|
#
|
||||||
|
# The post-install script makes a good-faith attempt to install a
|
||||||
|
# functional configuration on your system. I would be interested in hearing
|
||||||
|
# of any failure modes that are found, as I tried to compensate for all
|
||||||
|
# the ones that showed up here when we started replacing all the
|
||||||
|
# different installed versions of SSH.
|
||||||
|
|
||||||
|
|
@ -0,0 +1,207 @@
|
||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
# OpenSSH solaris build script and supporting data files
|
||||||
|
# Copyright (c) 2000 Rip Loomis and
|
||||||
|
# Science Applications International Corporation (SAIC)
|
||||||
|
# (http://www.cist-east.saic.com). All rights reserved.
|
||||||
|
#
|
||||||
|
# Redistribution and use in source and binary forms, with or without
|
||||||
|
# modification, are permitted provided that the following conditions
|
||||||
|
# are met:
|
||||||
|
# 1. Redistributions of source code must retain the above copyright
|
||||||
|
# notice, this list of conditions and the following disclaimer.
|
||||||
|
# 2. Redistributions in binary form must reproduce the above copyright
|
||||||
|
# notice, this list of conditions and the following disclaimer in the
|
||||||
|
# documentation and/or other materials provided with the distribution.
|
||||||
|
# 3. The name of the author may not be used to endorse or promote products
|
||||||
|
# derived from this software without specific prior written permission.
|
||||||
|
#
|
||||||
|
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
|
||||||
|
# IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
|
||||||
|
# OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
|
||||||
|
# IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
|
||||||
|
# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
||||||
|
# NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
||||||
|
# DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
||||||
|
# THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
||||||
|
# (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
||||||
|
# THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
|
|
||||||
|
# Obviously, without all the hard work of the OpenBSD OpenSSH developers
|
||||||
|
# and the OpenSSH Portability Team, these scripts would be pointless...
|
||||||
|
# so thanks again folks!
|
||||||
|
#=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
|
||||||
|
|
||||||
|
#### Known issues
|
||||||
|
# These methods are generally based on a "default" compilation of
|
||||||
|
# OpenSSH on Solaris--so the more things that you change from the default,
|
||||||
|
# the greater the chance that something in the script won't be able to
|
||||||
|
# handle the changes. In general, though, most things should be determined
|
||||||
|
# from your compile environment--the architecture, SSH version, and
|
||||||
|
# other related data should all get picked up by this script. The script
|
||||||
|
# and data files were last updated to match OpenSSH 2.1.1p4.
|
||||||
|
#
|
||||||
|
# All building and packaging is done under a temporary directory that is
|
||||||
|
# itself created under the contrib/solaris directory--so there shouldn't
|
||||||
|
# be any special security issues (or need for root access during the
|
||||||
|
# packaging process). The temporary directory is defined below as
|
||||||
|
# ${BUILDDIR}.
|
||||||
|
#
|
||||||
|
# The permissions on the installed files are based on how we prefer to
|
||||||
|
# do things here--so nothing is installed SetUID to root.
|
||||||
|
#
|
||||||
|
# The post-install script makes a good-faith attempt to install a
|
||||||
|
# functional configuration on your system. I would be interested in hearing
|
||||||
|
# of any failure modes that are found, as I tried to compensate for all
|
||||||
|
# the ones that showed up here when we started replacing all the
|
||||||
|
# different installed versions of SSH.
|
||||||
|
|
||||||
|
#### Body of the script (finally!)
|
||||||
|
# We expect to be building the solaris package under the contrib/solaris
|
||||||
|
# directory--but the build-package script might be run with a relative
|
||||||
|
# path by a user in the main SSH directory...so we try to handle this
|
||||||
|
# case. Note that this is still a quick and dirty solution, not robust.
|
||||||
|
|
||||||
|
if [ -f sshd.c ]; then
|
||||||
|
cd contrib/solaris >/dev/null
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Locations of standard binaries
|
||||||
|
UNAME=/usr/bin/uname
|
||||||
|
SED=/usr/bin/sed
|
||||||
|
PWD=/usr/bin/pwd
|
||||||
|
CUT=/usr/bin/cut
|
||||||
|
STRIP=/usr/ccs/bin/strip
|
||||||
|
PKGMK=/usr/bin/pkgmk
|
||||||
|
PKGTRANS=/usr/bin/pkgtrans
|
||||||
|
GREP=/usr/bin/grep
|
||||||
|
DATE=/usr/bin/date
|
||||||
|
|
||||||
|
CURRDIR=`${PWD}`
|
||||||
|
BUILDDIR=${CURRDIR}/build-SSH-package
|
||||||
|
# If you really want to name the package "ssh" then go ahead, but the
|
||||||
|
# Sun convention is that the first 2-4 characters are supposed to be
|
||||||
|
# uppercase representing the company or organization that produced the
|
||||||
|
# software, and the next 3-5 characters are supposed to be lowercase
|
||||||
|
# identifying the specific software. The best package names I could
|
||||||
|
# come up with were "OBSDssh" or "OPENssh", given those constraints.
|
||||||
|
PKGNAME="OPENssh"
|
||||||
|
# PSTAMP is a standard setting in the 'pkginfo' file that helps to identify
|
||||||
|
# the time and location that the packaging was done.
|
||||||
|
PSTAMP="`${UNAME} -n`-`${DATE} +%Y-%m-%d-%H%M`"
|
||||||
|
# The several lines below are designed to pull the relevant information
|
||||||
|
# out of the Makefile. It may be simpler to hard-code this if you have
|
||||||
|
# made changes and these lines don't find them.
|
||||||
|
prefix=`${GREP} "^prefix=" ../../Makefile | ${CUT} -d = -f 2`
|
||||||
|
execprefix=`${GREP} "^execprefix=" ../../Makefile | ${CUT} -d = -f 2`
|
||||||
|
INSTROOT=${prefix:=/usr/local}
|
||||||
|
ETCDIR=`${GREP} "^ETCDIR=" ../../Makefile | ${CUT} -d = -f 2`
|
||||||
|
PIDDIR=`${GREP} "^piddir=" ../../Makefile | ${CUT} -d = -f 2`
|
||||||
|
|
||||||
|
if [ ! -f ../../sshd ]; then
|
||||||
|
echo "Unable to locate sshd binary where I expected, and can't continue."
|
||||||
|
echo "Verify that the SSH configure/make has been completed, and that"
|
||||||
|
echo " this script is being run from within the SSH source tree."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
VERSION=`${GREP} "SSH_VERSION" ../../version.h | ${CUT} -f 2 | sed -e 's/"//g' -e 's/OpenSSH_//g'`
|
||||||
|
# Extra shenanigans to compensate for Sun marketeer tricks with Solaris
|
||||||
|
# version numbering...
|
||||||
|
OSMINOR=`${UNAME} -r | ${CUT} -f 2 -d .`
|
||||||
|
if [ $OSMINOR -gt 6 ]; then
|
||||||
|
OSVERSION=$OSMINOR
|
||||||
|
else
|
||||||
|
OSVERSION=`${UNAME} -r | ${SED} 's/5/2/'`
|
||||||
|
fi
|
||||||
|
ARCH=`$UNAME -p`
|
||||||
|
SHORTINSTROOT=""
|
||||||
|
if [ "$INSTROOT" = "/usr/local" ]; then
|
||||||
|
SHORTINSTROOT="-local"
|
||||||
|
else
|
||||||
|
if [ "$INSTROOT" = "/opt" ]; then
|
||||||
|
SHORTINSTROOT="-opt"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
DESTFILE="${PKGNAME}-${VERSION}-sol${OSVERSION}-${ARCH}${SHORTINSTROOT}"
|
||||||
|
|
||||||
|
echo "Building Solaris package of OpenSSH ${VERSION} in\n\t${BUILDDIR}."
|
||||||
|
echo "Binaries were compiled for Solaris ${OSVERSION} (${ARCH})"
|
||||||
|
echo "The installable package will be named ${DESTFILE}."
|
||||||
|
echo "When installed, the package will be located under ${INSTROOT}."
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
echo "Cleaning up old build files..."
|
||||||
|
rm -rf $BUILDDIR
|
||||||
|
mkdir $BUILDDIR
|
||||||
|
cd $BUILDDIR
|
||||||
|
|
||||||
|
echo "Setting up build directories..."
|
||||||
|
mkdir -p ${BUILDDIR}/man/man1
|
||||||
|
# Need manpages for sshd_config(5) and ssh_config(5), but we don't yet have.
|
||||||
|
#mkdir -p ${BUILDDIR}/man/man5
|
||||||
|
mkdir -p ${BUILDDIR}/man/man8
|
||||||
|
mkdir -p ${BUILDDIR}/etc
|
||||||
|
mkdir -p ${BUILDDIR}/bin
|
||||||
|
mkdir -p ${BUILDDIR}/sbin
|
||||||
|
|
||||||
|
echo "Populating build directories..."
|
||||||
|
cp -p ../../../sshd sbin
|
||||||
|
cp -p ../../../ssh-keygen bin
|
||||||
|
cp -p ../../../ssh bin
|
||||||
|
cp -p ../../../ssh-add bin
|
||||||
|
cp -p ../../../ssh-agent bin
|
||||||
|
cp -p ../../../scp bin
|
||||||
|
cp -p ../../../scp.1 man/man1/scp.1
|
||||||
|
cp -p ../../../ssh-add.1 man/man1/ssh-add.1
|
||||||
|
cp -p ../../../ssh-agent.1 man/man1/ssh-agent.1
|
||||||
|
cp -p ../../../ssh-keygen.1 man/man1/ssh-keygen.1
|
||||||
|
cp -p ../../../ssh.1 man/man1/ssh.1
|
||||||
|
cp -p ../../../sshd.8 man/man8/sshd.8
|
||||||
|
cp -p ../../../sshd_config.out etc/sshd_config.default
|
||||||
|
cp -p ../../../ssh_config.out etc/ssh_config.default
|
||||||
|
cp -p ../../../ssh_prng_cmds etc/ssh_prng_cmds.default
|
||||||
|
|
||||||
|
# One of the annoying things about the Solaris packaging process is that
|
||||||
|
# there's no simple way to prototype on the fly--so make sure you edit
|
||||||
|
# the prototype file if you add/subtract files from the mix.
|
||||||
|
cp -p ../prototype .
|
||||||
|
cp -p ../preremove .
|
||||||
|
|
||||||
|
echo "Creating compile-dependent files from their prototypes"
|
||||||
|
$SED -e "s/%%PKGNAME%%/${PKGNAME}/g" -e "s|%%BASEDIR%%|${INSTROOT}|g" -e "s/%%VERSION%%/${VERSION}/g" -e "s/%%ARCH%%/${ARCH}/g" -e "s/%%OSVERSION%%/${OSVERSION}/g" <../pkginfo.in >./pkginfo
|
||||||
|
$SED -e "s/%%PKGNAME%%/${PKGNAME}/g" -e "s/%%OSMINOR%%/${OSMINOR}/g" -e "s/%%OSVERSION%%/${OSVERSION}/g" <../checkinstall.in >./checkinstall
|
||||||
|
$SED -e "s|%%PIDDIR%%|${PIDDIR}|g" <../postinstall.in >./postinstall
|
||||||
|
$SED -e "s|%%PIDDIR%%|${PIDDIR}|g" <../sshd-initscript.in > etc/sshd-initscript
|
||||||
|
|
||||||
|
echo "Stripping binaries"
|
||||||
|
${STRIP} bin/ssh
|
||||||
|
${STRIP} bin/ssh-add
|
||||||
|
${STRIP} bin/ssh-agent
|
||||||
|
${STRIP} bin/ssh-keygen
|
||||||
|
${STRIP} sbin/sshd
|
||||||
|
${STRIP} bin/scp
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
echo "Building Package"
|
||||||
|
|
||||||
|
cd ${BUILDDIR}
|
||||||
|
$PKGMK -o -r . -p ${PSTAMP} -d ${BUILDDIR}
|
||||||
|
|
||||||
|
if [ $? -gt 0 ]; then
|
||||||
|
echo "Error performing pkgmk--cannot continue."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
echo "Translating Package Tree into Installable Image"
|
||||||
|
$PKGTRANS -s ${BUILDDIR} ${BUILDDIR}/${DESTFILE} OPENssh
|
||||||
|
|
||||||
|
if [ $? -gt 0 ]; then
|
||||||
|
echo "Error performing pkgtrans--cannot continue."
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "Done. Package is in ${BUILDDIR}/${DESTFILE} !"
|
||||||
|
|
@ -0,0 +1,37 @@
|
||||||
|
#!/bin/sh
|
||||||
|
echo "Checking SunOS revision..."
|
||||||
|
MINOR=`/bin/uname -r | /bin/cut -d "." -f 2`
|
||||||
|
if [ ${MINOR} -lt %%OSMINOR%% ]; then
|
||||||
|
echo "This package was created on Solaris %%OSVERSION%%, and will probably"
|
||||||
|
echo " not function correctly on older versions of Solaris."
|
||||||
|
echo "** Unable to continue. **"
|
||||||
|
exit 3
|
||||||
|
fi
|
||||||
|
echo "\t...revision okay."
|
||||||
|
|
||||||
|
echo "Checking for existing SSH installation..."
|
||||||
|
if [ -f /etc/sshd_config -o -f /usr/local/etc/sshd_config ]; then
|
||||||
|
UPDATE=1
|
||||||
|
fi
|
||||||
|
if [ -f /etc/ssh_host_key -o -f /usr/local/etc/ssh_host_key ]; then
|
||||||
|
UPDATE=1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ ${UPDATE} -eq 1 ]; then
|
||||||
|
echo "Performing an \"update\" installation of %%PKGNAME%%"
|
||||||
|
else
|
||||||
|
echo "Performing a \"fresh\" installation of %%PKGNAME%%"
|
||||||
|
fi
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
# We derive these at install time in case the package is relocated.
|
||||||
|
CONFDIR="${BASEDIR}/etc"
|
||||||
|
DESTBIN="${BASEDIR}/bin"
|
||||||
|
|
||||||
|
# make parameters available to installation service, and
|
||||||
|
# so to any other packaging scripts
|
||||||
|
cat >$1 <<!
|
||||||
|
CONFDIR='$CONFDIR'
|
||||||
|
DESTBIN='$DESTBIN'
|
||||||
|
UPDATE='$UPDATE'
|
||||||
|
!
|
||||||
|
|
@ -0,0 +1,17 @@
|
||||||
|
CLASSES=none
|
||||||
|
BASEDIR="%%BASEDIR%%"
|
||||||
|
PATH=/sbin:/usr/sbin:/usr/bin:/usr/sadm/install/bin
|
||||||
|
OAMBASE=/usr/sadm/sysadm
|
||||||
|
PKG=%%PKGNAME%%
|
||||||
|
NAME="OpenSSH %%VERSION%% %%ARCH%%"
|
||||||
|
DESC="Secure Shell remote access utility; replaces telnet and rlogin/rsh. OpenBSD version ported to Solaris. Compiled on Solaris %%OSVERSION%%"
|
||||||
|
ARCH="%%ARCH%%"
|
||||||
|
VERSION="%%VERSION%%"
|
||||||
|
CATEGORY=utility,application
|
||||||
|
VENDOR="Software produced by OpenSSH Portability Team, http://www.openssh.com/portable.html"
|
||||||
|
EMAIL="OpenSSH Development List <openssh-unix-dev@mindrot.org>"
|
||||||
|
PKGINST=%%PKGNAME%%
|
||||||
|
PKGSAV=/var/sadm/pkg/%%PKGNAME%%/save
|
||||||
|
ISTATES="S s 1 2 3"
|
||||||
|
RSTATES="S s 1 2 3"
|
||||||
|
UPDATE=0
|
||||||
|
|
@ -0,0 +1,198 @@
|
||||||
|
# PostInstall script for OPENssh
|
||||||
|
INSTALLF="/usr/sbin/installf"
|
||||||
|
|
||||||
|
instbackup() {
|
||||||
|
_DIRECTORY=$1
|
||||||
|
_FILEBASE=$2
|
||||||
|
$INSTALLF $PKGINST ${_DIRECTORY}/${_FILEBASE}
|
||||||
|
_SUFFIX=`/usr/bin/date +%Y-%m-%d-%H%M`
|
||||||
|
if [ -f ${_DIRECTORY}/${_FILEBASE} ]; then
|
||||||
|
echo " Backing up file ${_FILEBASE}..."
|
||||||
|
if [ -f ${_DIRECTORY}/${_FILEBASE}.orig ]; then
|
||||||
|
$INSTALLF $PKGINST ${_DIRECTORY}/${_FILEBASE}.orig.${_SUFFIX}
|
||||||
|
cp -p ${_DIRECTORY}/${_FILEBASE} ${_DIRECTORY}/${_FILEBASE}.orig.${_SUFFIX}
|
||||||
|
echo " Saved as ${_DIRECTORY}/${_FILEBASE}.orig.${_SUFFIX}."
|
||||||
|
else
|
||||||
|
$INSTALLF $PKGINST ${_DIRECTORY}/${_FILEBASE}.orig
|
||||||
|
cp -p ${_DIRECTORY}/${_FILEBASE} ${_DIRECTORY}/${_FILEBASE}.orig
|
||||||
|
echo " Saved as ${_DIRECTORY}/${_FILEBASE}.orig."
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
cp -p ${_DIRECTORY}/${_FILEBASE}.default ${_DIRECTORY}/${_FILEBASE}
|
||||||
|
echo "Installed new ${_DIRECTORY}/${_FILEBASE} configuration file."
|
||||||
|
}
|
||||||
|
|
||||||
|
### Main body of script
|
||||||
|
|
||||||
|
echo ""
|
||||||
|
echo "Beginning postinstall script--this script should leave you with a"
|
||||||
|
echo "functional and operational configuration of OpenSSH."
|
||||||
|
echo ""
|
||||||
|
|
||||||
|
if [ ! "${UPDATE}" = "1" ]; then
|
||||||
|
echo "Performing a \"fresh\" installation of OpenSSH."
|
||||||
|
### Install init script and create symlinks
|
||||||
|
$INSTALLF $PKGINST ${PKG_INSTALL_ROOT}/etc/init.d/sshd f 0500 root sys || exit 2
|
||||||
|
cp -p ${CONFDIR}/sshd-initscript ${PKG_INSTALL_ROOT}/etc/init.d/sshd
|
||||||
|
$INSTALLF $PKGINST ${PKG_INSTALL_ROOT}/etc/rc2.d/S72local_sshd=/etc/init.d/sshd s || exit 2
|
||||||
|
$INSTALLF $PKGINST ${PKG_INSTALL_ROOT}/etc/rc1.d/K30local_sshd=/etc/init.d/sshd s || exit 2
|
||||||
|
$INSTALLF $PKGINST ${PKG_INSTALL_ROOT}/etc/rc0.d/K30local_sshd=/etc/init.d/sshd s || exit 2
|
||||||
|
|
||||||
|
### The initial package installation leaves default versions of
|
||||||
|
### ssh_prng_cmds, ssh_config, and sshd_config in ${CONFDIR}. Now
|
||||||
|
### we need to decide whether to install them. Since this is *not*
|
||||||
|
### an update install, we don't ask, but simply back up the old ones
|
||||||
|
### and put the new ones in their place.
|
||||||
|
instbackup ${CONFDIR} ssh_prng_cmds
|
||||||
|
instbackup ${CONFDIR} ssh_config
|
||||||
|
instbackup ${CONFDIR} sshd_config
|
||||||
|
|
||||||
|
### If no existing sshd_config and host key, then create
|
||||||
|
if [ ! -f "${CONFDIR}/ssh_host_key" ]; then
|
||||||
|
echo "Creating new RSA public/private host key pair for SSH-1."
|
||||||
|
$INSTALLF $PKGINST ${CONFDIR}/ssh_host_key
|
||||||
|
$INSTALLF $PKGINST ${CONFDIR}/ssh_host_key.pub
|
||||||
|
### If there is *anything* there then leave it, otherwise look
|
||||||
|
### in some reasonable alternate locations before giving up.
|
||||||
|
### It's worth spending some extra time looking for the old one
|
||||||
|
### to avoid a bunch of "host identification has changed" warnings.
|
||||||
|
### Note that some old keys from the commercial SSH might not
|
||||||
|
### be compatible, but we don't test for that.
|
||||||
|
if [ -f "${PKG_INSTALL_ROOT}/etc/ssh_host_key" ]; then
|
||||||
|
mv ${PKG_INSTALL_ROOT}/etc/ssh_host_key ${CONFDIR}
|
||||||
|
elif [ -f "${PKG_INSTALL_ROOT}/usr/local/etc/ssh_host_key" ]; then
|
||||||
|
mv ${PKG_INSTALL_ROOT}/usr/local/etc/ssh_host_key ${CONFDIR}
|
||||||
|
else
|
||||||
|
${DESTBIN}/ssh-keygen -b 1024 -f ${CONFDIR}/ssh_host_key -N ''
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo "Using existing RSA public/private host key pair for SSH-1."
|
||||||
|
fi
|
||||||
|
if [ ! -f "${CONFDIR}/ssh_host_dsa_key" ]; then
|
||||||
|
echo "Creating new DSA public/private host key pair for SSH-2."
|
||||||
|
$INSTALLF $PKGINST ${CONFDIR}/ssh_host_dsa_key
|
||||||
|
$INSTALLF $PKGINST ${CONFDIR}/ssh_host_dsa_key.pub
|
||||||
|
### If there is *anything* there then leave it, otherwise look
|
||||||
|
### in some reasonable alternate locations before giving up.
|
||||||
|
### It's worth spending some extra time looking for the old one
|
||||||
|
### to avoid a bunch of "host identification has changed" warnings.
|
||||||
|
### Note that some old keys from the commercial SSH2 might not
|
||||||
|
### be compatible, but we don't test for that.
|
||||||
|
if [ -f "${PKG_INSTALL_ROOT}/etc/ssh_host_dsa_key" ]; then
|
||||||
|
mv ${PKG_INSTALL_ROOT}/etc/ssh_host_dsa_key ${CONFDIR}
|
||||||
|
elif [ -f "${PKG_INSTALL_ROOT}/usr/local/etc/ssh_host_dsa_key" ]; then
|
||||||
|
mv ${PKG_INSTALL_ROOT}/usr/local/etc/ssh_host_dsa_key ${CONFDIR}
|
||||||
|
else
|
||||||
|
${DESTBIN}/ssh-keygen -d -f ${CONFDIR}/ssh_host_dsa_key -N ''
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo "Using existing DSA public/private host key pair for SSH-2."
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo "Performing an \"update\" installation of OpenSSH."
|
||||||
|
### Okay, this part *is* an update install...so we need to ensure
|
||||||
|
### we don't overwrite any of the existing files.
|
||||||
|
|
||||||
|
### Install init script and create symlinks
|
||||||
|
if [ ! -f ${PKG_INSTALL_ROOT}/etc/init.d/sshd ]; then
|
||||||
|
echo "Installing init script in ${PKG_INSTALL_ROOT}/etc/init.d/sshd"
|
||||||
|
$INSTALLF $PKGINST ${PKG_INSTALL_ROOT}/etc/init.d/sshd || exit 2
|
||||||
|
cp -p ${CONFDIR}/sshd-initscript ${PKG_INSTALL_ROOT}/etc/init.d/sshd
|
||||||
|
chown root:root ${PKG_INSTALL_ROOT}/etc/init.d/sshd
|
||||||
|
chmod 500 ${PKG_INSTALL_ROOT}/etc/init.d/sshd
|
||||||
|
fi
|
||||||
|
if [ ! -r ${PKG_INSTALL_ROOT}/etc/rc2.d/S72local_sshd ]; then
|
||||||
|
$INSTALLF $PKGINST ${PKG_INSTALL_ROOT}/etc/rc2.d/S72local_sshd=/etc/init.d/sshd s || exit 2
|
||||||
|
fi
|
||||||
|
if [ ! -r ${PKG_INSTALL_ROOT}/etc/rc2.d/K30local_sshd ]; then
|
||||||
|
$INSTALLF $PKGINST /etc/rc0.d/K30local_sshd=/etc/init.d/sshd s || exit 2
|
||||||
|
fi
|
||||||
|
|
||||||
|
### The initial package installation leaves default versions of
|
||||||
|
### ssh_prng_cmds, ssh_config, and sshd_config in ${CONFDIR}. Now
|
||||||
|
### we need to decide whether to install them. Since this is
|
||||||
|
### an update install, we only install the new files if the old
|
||||||
|
### files somehow don't exist.
|
||||||
|
NEWCONF=0
|
||||||
|
if [ ! -r "${CONFDIR}/ssh_prng_cmds" ]; then
|
||||||
|
instbackup ${CONFDIR} ssh_prng_cmds
|
||||||
|
NEWCONF=1
|
||||||
|
fi
|
||||||
|
if [ ! -r "${CONFDIR}/ssh_config" ]; then
|
||||||
|
instbackup ${CONFDIR} ssh_config
|
||||||
|
NEWCONF=1
|
||||||
|
fi
|
||||||
|
if [ ! -r "${CONFDIR}/ssh_config" ]; then
|
||||||
|
instbackup ${CONFDIR} sshd_config
|
||||||
|
NEWCONF=1
|
||||||
|
fi
|
||||||
|
if [ $NEWCONF -eq 0 ]; then
|
||||||
|
echo "Your existing SSH configuration files have not been altered."
|
||||||
|
else
|
||||||
|
echo "Your other existing SSH configuration files have not been altered."
|
||||||
|
fi
|
||||||
|
|
||||||
|
### If no existing sshd_config and host key, then create
|
||||||
|
if [ ! -f "${CONFDIR}/ssh_host_key" ]; then
|
||||||
|
echo "Creating new RSA public/private host key pair for SSH-1."
|
||||||
|
$INSTALLF $PKGINST ${CONFDIR}/ssh_host_key
|
||||||
|
$INSTALLF $PKGINST ${CONFDIR}/ssh_host_key.pub
|
||||||
|
### If there is *anything* there then leave it, otherwise look
|
||||||
|
### in some reasonable alternate locations before giving up.
|
||||||
|
### It's worth spending some extra time looking for the old one
|
||||||
|
### to avoid a bunch of "host identification has changed" warnings.
|
||||||
|
### Note that some old keys from the commercial SSH might not
|
||||||
|
### be compatible, but we don't test for that.
|
||||||
|
if [ -f "${PKG_INSTALL_ROOT}/etc/ssh_host_key" ]; then
|
||||||
|
mv ${PKG_INSTALL_ROOT}/etc/ssh_host_key ${CONFDIR}
|
||||||
|
elif [ -f "${PKG_INSTALL_ROOT}/usr/local/etc/ssh_host_key" ]; then
|
||||||
|
mv ${PKG_INSTALL_ROOT}/usr/local/etc/ssh_host_key ${CONFDIR}
|
||||||
|
else
|
||||||
|
${DESTBIN}/ssh-keygen -b 1024 -f ${CONFDIR}/ssh_host_key -N ''
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo "Using existing RSA public/private host key pair for SSH-1."
|
||||||
|
fi
|
||||||
|
if [ ! -f "${CONFDIR}/ssh_host_dsa_key" ]; then
|
||||||
|
echo "Creating new DSA public/private host key pair for SSH-2."
|
||||||
|
$INSTALLF $PKGINST ${CONFDIR}/ssh_host_dsa_key
|
||||||
|
$INSTALLF $PKGINST ${CONFDIR}/ssh_host_dsa_key.pub
|
||||||
|
### If there is *anything* there then leave it, otherwise look
|
||||||
|
### in some reasonable alternate locations before giving up.
|
||||||
|
### It's worth spending some extra time looking for the old one
|
||||||
|
### to avoid a bunch of "host identification has changed" warnings.
|
||||||
|
### Note that some old keys from the commercial SSH2 might not
|
||||||
|
### be compatible, but we don't test for that.
|
||||||
|
if [ -f "${PKG_INSTALL_ROOT}/etc/ssh_host_dsa_key" ]; then
|
||||||
|
mv ${PKG_INSTALL_ROOT}/etc/ssh_host_dsa_key ${CONFDIR}
|
||||||
|
elif [ -f "${PKG_INSTALL_ROOT}/usr/local/etc/ssh_host_dsa_key" ]; then
|
||||||
|
mv ${PKG_INSTALL_ROOT}/usr/local/etc/ssh_host_dsa_key ${CONFDIR}
|
||||||
|
else
|
||||||
|
${DESTBIN}/ssh-keygen -d -f ${CONFDIR}/ssh_host_dsa_key -N ''
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo "Using existing DSA public/private host key pair for SSH-2."
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ ! -d %%PIDDIR%% ]; then
|
||||||
|
$INSTALLF $PKGINST %%PIDDIR%%
|
||||||
|
mkdir -p %%PIDDIR%%
|
||||||
|
chown root:sys %%PIDDIR%%
|
||||||
|
chmod 755 %%PIDDIR%%
|
||||||
|
fi
|
||||||
|
|
||||||
|
$INSTALLF -f $PKGINST || exit 2
|
||||||
|
|
||||||
|
if [ "X${PKG_INSTALL_ROOT}" = "X" ]; then
|
||||||
|
### We're doing a local install, rather than an install for
|
||||||
|
### old-style diskless clients.
|
||||||
|
echo "Stopping any current sshd process, and then starting the new sshd."
|
||||||
|
/etc/init.d/sshd stop
|
||||||
|
/etc/init.d/sshd start
|
||||||
|
else
|
||||||
|
echo "Not restarting sshd, since this appears to be a remote install"
|
||||||
|
echo "for support of diskless clients."
|
||||||
|
fi
|
||||||
|
|
||||||
|
exit 0
|
||||||
|
|
@ -0,0 +1,2 @@
|
||||||
|
# pre-removal script for OPENssh
|
||||||
|
/etc/init.d/sshd stop
|
||||||
|
|
@ -0,0 +1,26 @@
|
||||||
|
i pkginfo
|
||||||
|
i checkinstall
|
||||||
|
i postinstall
|
||||||
|
i preremove
|
||||||
|
d none man 0755 root sys
|
||||||
|
d none man/man1 0755 root sys
|
||||||
|
f none man/man1/scp.1 0644 root sys
|
||||||
|
f none man/man1/ssh-add.1 0644 root sys
|
||||||
|
f none man/man1/ssh-agent.1 0644 root sys
|
||||||
|
f none man/man1/ssh-keygen.1 0644 root sys
|
||||||
|
f none man/man1/ssh.1 0644 root sys
|
||||||
|
d none man/man8 0755 root sys
|
||||||
|
f none man/man8/sshd.8 0644 root sys
|
||||||
|
d none etc 0755 root sys
|
||||||
|
f none etc/sshd_config.default 0644 root sys
|
||||||
|
f none etc/ssh_config.default 0644 root sys
|
||||||
|
f none etc/ssh_prng_cmds.default 0644 root sys
|
||||||
|
f none etc/sshd-initscript 0755 root sys
|
||||||
|
d none bin 0755 root sys
|
||||||
|
f none bin/ssh-keygen 0755 root sys
|
||||||
|
f none bin/ssh 0755 root sys
|
||||||
|
f none bin/ssh-add 0755 root sys
|
||||||
|
f none bin/ssh-agent 0755 root sys
|
||||||
|
f none bin/scp 0755 root sys
|
||||||
|
d none sbin 0755 root sys
|
||||||
|
f none sbin/sshd 0755 root sys
|
||||||
|
|
@ -0,0 +1,50 @@
|
||||||
|
#! /sbin/sh
|
||||||
|
|
||||||
|
# SSHd startup/shutdown script, based on uucp script.
|
||||||
|
|
||||||
|
PIDFILE="%%PIDDIR%%/sshd.pid"
|
||||||
|
PGREP="/usr/bin/pgrep"
|
||||||
|
HEAD="/usr/bin/head"
|
||||||
|
XARGS="/usr/bin/xargs"
|
||||||
|
KILL="/usr/bin/kill"
|
||||||
|
|
||||||
|
killproc() {
|
||||||
|
_procname=$1
|
||||||
|
_signal=$2
|
||||||
|
${PGREP} ${_procname} | ${HEAD} -1 | ${XARGS} -t -I {} ${KILL} -${_signal} {}
|
||||||
|
}
|
||||||
|
|
||||||
|
case $1 in
|
||||||
|
'start')
|
||||||
|
/usr/local/sbin/sshd
|
||||||
|
;;
|
||||||
|
|
||||||
|
'stop')
|
||||||
|
if [ -r $PIDFILE -a ! -z ${PIDFILE} ]; then
|
||||||
|
PID=`cat ${PIDFILE}`
|
||||||
|
fi
|
||||||
|
if [ ${PID:=0} -gt 1 -a ! "X$PID" = "X " ]; then
|
||||||
|
/usr/bin/kill $PID
|
||||||
|
else
|
||||||
|
echo "Unable to read PID file, killing using alternate method"
|
||||||
|
killproc sshd TERM
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
|
||||||
|
'restart')
|
||||||
|
if [ -r $PIDFILE -a ! -z ${PIDFILE} ]; then
|
||||||
|
PID=`cat ${PIDFILE}`
|
||||||
|
fi
|
||||||
|
if [ ${PID:=0} -gt 1 -a ! "X$PID" = "X " ]; then
|
||||||
|
/usr/bin/kill -HUP $PID
|
||||||
|
else
|
||||||
|
echo "Unable to read PID file, trying alternate method"
|
||||||
|
killproc sshd HUP
|
||||||
|
/usr/local/sbin/sshd
|
||||||
|
fi
|
||||||
|
;;
|
||||||
|
|
||||||
|
*)
|
||||||
|
echo "usage: /etc/init.d/sshd {start|stop|restart}"
|
||||||
|
;;
|
||||||
|
esac
|
||||||
Loading…
Reference in New Issue