linux-from-scratch/glfs
1
0
Fork 0
mirror of https://github.com/Zeckmathederg/glfs.git synced 2025-01-23 22:42:14 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

update openssh

Browse Source 
git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@1179 af4574ff-66df-0310-9fd7-8a98e5e911e0
This commit is contained in:
Larry Lawrence 2003-09-23 22:37:29 +00:00
parent 95079c366b
commit 1708d1e940
18 changed files with 111 additions and 53 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

50
appendices/glossary.xml
View File

@ -26,6 +26,12 @@
<glossentry id="gCORBA"><glossterm><acronym>CORBA</acronym></glossterm>
<glossdef><para>Common Object Request Broker Architecture</para></glossdef></glossentry>
<glossentry id="gCSS"><glossterm><acronym>CSS</acronym></glossterm>
<glossdef><para>Cascading Style Sheets</para></glossdef></glossentry>
<glossentry id="gCUPS"><glossterm><acronym>CUPS</acronym></glossterm>
<glossdef><para>Common UNIX Printing System</para></glossdef></glossentry>
<glossentry id="gCVS"><glossterm><acronym>CVS</acronym></glossterm>
<glossdef><para>Concurrent Versions System</para></glossdef></glossentry>
@ -35,6 +41,8 @@
<glossentry id="gDNS"><glossterm><acronym>DNS</acronym></glossterm>
<glossdef><para>Domain Name Service</para></glossdef></glossentry>
<glossentry id="gDVI"><glossterm><acronym>DVI</acronym></glossterm>
<glossdef><para>DeVice Independent</para></glossdef></glossentry>
<glossentry id="gFAM"><glossterm><acronym>FAM</acronym></glossterm>
<glossdef><para>File Alteration Monitor</para></glossdef></glossentry>
@ -60,12 +68,18 @@
<glossentry id="gGUI"><glossterm><acronym>GUI</acronym></glossterm>
<glossdef><para>Graphical User Interface</para></glossdef></glossentry>
<glossentry id="gHTML"><glossterm><acronym>HTML</acronym></glossterm>
<glossdef><para>HyperText Markup Language</para></glossdef></glossentry>
<glossentry id="gHTTP"><glossterm><acronym>HTTP</acronym></glossterm>
<glossdef><para>HyperText Transfer Protocol</para></glossdef></glossentry>
<glossentry id="gIDL"><glossterm><acronym>IDL</acronym></glossterm>
<glossdef><para>Interface Definition Language</para></glossdef></glossentry>
<glossentry id="gIMAP"><glossterm><acronym>IMAP</acronym></glossterm>
<glossdef><para>Internet Message Access Protocol</para></glossdef></glossentry>
<glossentry id="IMON"><glossterm><abbrev>IMON</abbrev></glossterm>
<glossdef><para>Inode MONitor</para></glossdef></glossentry>
@ -91,12 +105,21 @@
<glossentry id="gLZO"><glossterm><acronym>LZO</acronym></glossterm>
<glossdef><para>Lemple-Ziv-Oberhumer</para></glossdef></glossentry>
<glossentry id="gMPEG"><glossterm><acronym>MPEG</acronym></glossterm>
<glossdef><para>Moving Picture Experts Group</para></glossdef></glossentry>
<glossentry id="gMTA"><glossterm><acronym>MTA</acronym></glossterm>
<glossdef><para>Mail Transport Agent</para></glossdef></glossentry>
<glossentry id="gMUA"><glossterm><acronym>MUA</acronym></glossterm>
<glossdef><para>Mail User Agent</para></glossdef></glossentry>
<glossentry id="gNASM"><glossterm><acronym>NASM</acronym></glossterm>
<glossdef><para>Netwide ASseMbler</para></glossdef></glossentry>
<glossentry id="gNNTP"><glossterm><acronym>NNTP</acronym></glossterm>
<glossdef><para>Network News Transfer Protocol</para></glossdef></glossentry>
<glossentry id="gNFS"><glossterm><acronym>NFS</acronym></glossterm>
<glossdef><para>Network File System</para></glossdef></glossentry>
@ -107,6 +130,15 @@ otherterm="gCORBA">CORBA</glossseealso></glossdef></glossentry>
<glossentry id="gPAM"><glossterm><acronym>PAM</acronym></glossterm>
<glossdef><para>Pluggable authentication Modules</para></glossdef></glossentry>
<glossentry id="gPDF"><glossterm><acronym>PDF</acronym></glossterm>
<glossdef><para>Portable Document Format</para></glossdef></glossentry>
<glossentry id="gPOP"><glossterm><acronym>POP</acronym></glossterm>
<glossdef><para>Post Office Protocol</para></glossdef></glossentry>
<glossentry id="gPPD"><glossterm><acronym>PPD</acronym></glossterm>
<glossdef><para>PostScript Printer Description</para></glossdef></glossentry>
<glossentry id="gPPP"><glossterm><acronym>PPP</acronym></glossterm>
<glossdef><para>Point to Point Protocol</para></glossdef></glossentry>
@ -122,12 +154,21 @@ otherterm="gCORBA">CORBA</glossseealso></glossdef></glossentry>
<glossentry id="gRPC"><glossterm><acronym>RPC</acronym></glossterm>
<glossdef><para>Remote Procedure Call</para></glossdef></glossentry>
<glossentry id="gSGML"><glossterm><acronym>SGML</acronym></glossterm>
<glossdef><para>Standard Generalized Markup Language</para></glossdef></glossentry>
<glossentry id="gSMTP"><glossterm><acronym>SMTP</acronym></glossterm>
<glossdef><para>Simple Mail Transfer Protocol</para></glossdef></glossentry>
<glossentry id="gSSL"><glossterm><acronym>SSL</acronym></glossterm>
<glossdef><para>Secure Sockets Layer</para></glossdef></glossentry>
<glossentry id="gTCP"><glossterm><acronym>TCP</acronym></glossterm>
<glossdef><para>Transmission Control Protocol</para></glossdef></glossentry>
<glossentry id="gUDF"><glossterm><acronym>UDF</acronym></glossterm>
<glossdef><para>Universal Disk Format</para></glossdef></glossentry>
<glossentry id="gUDP"><glossterm><acronym>UDP</acronym></glossterm>
<glossdef><para>User Datagram Protocol</para></glossdef></glossentry>
@ -137,6 +178,15 @@ otherterm="gCORBA">CORBA</glossseealso></glossdef></glossentry>
<glossentry id="gWWW"><glossterm><acronym>WWW</acronym></glossterm>
<glossdef><para>World Wide Web</para></glossdef></glossentry>
<glossentry id="gXML"><glossterm><acronym>XML</acronym></glossterm>
<glossdef><para>eXtensible Markup Language</para></glossdef></glossentry>
<glossentry id="gXSL"><glossterm><acronym>XSL</acronym></glossterm>
<glossdef><para>eXtensible Style Language</para></glossdef></glossentry>
<glossentry id="gXSLT"><glossterm><acronym>XSLT</acronym></glossterm>
<glossdef><para>eXtensible Style Language Transformation</para></glossdef></glossentry>
<glossentry id="gXMMS"><glossterm><acronym>XMMS</acronym></glossterm>
<glossdef><para>X MultiMedia System</para></glossdef></glossentry>

4
basicnet/mailnews/fetchmail.xml
View File

@ -1,6 +1,6 @@
<sect1 id="fetchmail" xreflabel="fetchmail">
<sect1 id="fetchmail" xreflabel="Fetchmail">
<?dbhtml filename="fetchmail.html" dir="basicnet"?>
<title>fetchmail-&fetchmail-version;</title>
<title>Fetchmail-&fetchmail-version;</title>
&fetchmail-intro;
&fetchmail-inst;

2
basicnet/mailnews/fetchmail/fetchmail-config.xml
View File

@ -1,5 +1,5 @@
<sect2>
<title>Configuring <application>fetchmail</application></title>
<title>Configuring <application>Fetchmail</application></title>
<sect3><title>Config files</title>
<para><filename>~/.fetchmailrc</filename></para>

2
basicnet/mailnews/fetchmail/fetchmail-desc.xml
View File

@ -1,7 +1,7 @@
<sect2>
<title>Contents</title>
<para>The <application>fetchmail</application> package contains
<para>The <application>Fetchmail</application> package contains
<command>fetchmail</command> and <command>fetchmailconf</command>.</para>
</sect2>

6
basicnet/mailnews/fetchmail/fetchmail-exp.xml
View File

@ -3,11 +3,11 @@
<para><command>--with-ssl</command> : This enables
<acronym>SSL</acronym> if found, so that you can handle connections to
secure <acronym>POP3</acronym> and <acronym>IMAP</acronym> servers.</para>
secure <acronym>POP</acronym>3 and <acronym>IMAP</acronym> servers.</para>
<para><command>--enable-fallback=procmail</command> : This tells
<application>fetchmail</application> to hand incoming mail to
<application>procmail</application> for delivery if your port 25 mail server is
<application>Fetchmail</application> to hand incoming mail to
<application>Procmail</application> for delivery if your port 25 mail server is
not present or not responding.</para>
</sect2>

4
basicnet/mailnews/fetchmail/fetchmail-inst.xml
View File

@ -1,7 +1,7 @@
<sect2>
<title>Installation of <application>fetchmail</application></title>
<title>Installation of <application>Fetchmail</application></title>
<para>Install <application>fetchmail</application> by running the following commands:</para>
<para>Install <application>Fetchmail</application> by running the following commands:</para>
<screen><userinput><command>./configure --prefix=/usr --with-ssl --enable-fallback=procmail &amp;&amp;
make &amp;&amp;

6
basicnet/mailnews/fetchmail/fetchmail-intro.xml
View File

@ -1,7 +1,7 @@
<sect2>
<title>Introduction to <application>fetchmail</application></title>
<title>Introduction to <application>Fetchmail</application></title>
<para>The <application>fetchmail</application> package contains the
<para>The <application>Fetchmail</application> package contains the
<command>fetchmail</command> program. &quot;It
retrieves mail from remote mail servers and forwards it to your local
(client) machine's delivery system, so it can then be read by
@ -20,7 +20,7 @@ url="&fetchmail-download-ftp;"/></para></listitem>
&fetchmail-time;</para></listitem></itemizedlist>
</sect3>
<sect3><title><application>fetchmail</application> dependencies</title>
<sect3><title><application>Fetchmail</application> dependencies</title>
<sect4><title>Required</title>
<para><xref linkend="openssl"/> and a local MDA (<xref
linkend="procmail"/>) </para></sect4>

4
basicnet/mailnews/procmail.xml
View File

@ -1,6 +1,6 @@
<sect1 id="procmail" xreflabel="procmail-&procmail-version;">
<sect1 id="procmail" xreflabel="Procmail-&procmail-version;">
<?dbhtml filename="procmail.html" dir="basicnet"?>
<title>procmail-&procmail-version;</title>
<title>Procmail-&procmail-version;</title>
&procmail-intro;
&procmail-inst;

2
basicnet/mailnews/procmail/procmail-config.xml
View File

@ -1,5 +1,5 @@
<sect2>
<title>Configuring <application>procmail</application></title>
<title>Configuring <application>Procmail</application></title>
<sect3><title>Config files</title>
<para><filename>/etc/procmailrc</filename>,

4
basicnet/mailnews/procmail/procmail-desc.xml
View File

@ -1,7 +1,7 @@
<sect2>
<title>Contents</title>
<para>The <application>procmail</application> package contains <command>procmail</command>, <command>formail</command>, <command>lockfile</command> and <command>mailstat</command>.</para>
<para>The <application>Procmail</application> package contains <command>procmail</command>, <command>formail</command>, <command>lockfile</command> and <command>mailstat</command>.</para>
</sect2>
@ -21,7 +21,7 @@ use interactively or in a script.</para></sect3>
<sect3><title>mailstat</title>
<para><command>mailstat</command> prints a summary report of mail that has been
filtered by <application>procmail</application> since the last time <command>
filtered by <command>procmail</command> since the last time <command>
mailstat</command> was ran.</para></sect3>
</sect2>

4
basicnet/mailnews/procmail/procmail-inst.xml
View File

@ -1,7 +1,7 @@
<sect2>
<title>Installation of <application>procmail</application></title>
<title>Installation of <application>Procmail</application></title>
<para>Install <application>procmail</application> by running the following commands:</para>
<para>Install <application>Procmail</application> by running the following commands:</para>
<screen><userinput><command>make BASENAME=/usr install &amp;&amp;
make install-suid</command></userinput></screen>

4
basicnet/mailnews/procmail/procmail-intro.xml
View File

@ -1,7 +1,7 @@
<sect2>
<title>Introduction to <application>procmail</application></title>
<title>Introduction to <application>Procmail</application></title>
<para>The <application>procmail</application> package contains an autonomous mail processor. This
<para>The <application>Procmail</application> package contains an autonomous mail processor. This
is useful for filtering and sorting incoming mail.</para>
<sect3><title>Package information</title>

2
server/other/openssh.xml
View File

@ -1,4 +1,4 @@
<sect1 id="openssh" xreflabel="openssh-&openssh-version;">
<sect1 id="openssh" xreflabel="OpenSSH-&openssh-version;">
<?dbhtml filename="openssh.html" dir="server"?>
<title>OpenSSH-&openssh-version;</title>

24
server/other/openssh/openssh-config.xml
View File

@ -1,5 +1,5 @@
<sect2>
<title>Configuring <application>OpenSSH</application></title>
<title>Configuring <application>Open<acronym>SSH</acronym></application></title>
<sect3><title>Config files</title>
@ -7,18 +7,21 @@
<filename>/etc/ssh/sshd_config </filename></para>
<para>There are no required changes in either of these files. However
you may wish to view them to make changes for appropriate security to
your system. Configuration information can be found in the man pages for sshd, ssh and ssh-agent</para>
your system. Configuration information can be found in the man pages for
<command>sshd</command>, <command>ssh</command> and <command>ssh-agent
</command></para>
</sect3>
<sect3><title>sshd init.d script</title>
<para>Note that you only want to start the sshd server if you want to be
able to ssh <emphasis>into</emphasis> your machine. The ssh client
doesn't need this script to be used. Having said that, if you want to
run the ssh daemon, the sshd init.d script can be created using the following
<para>Note that you only want to start the <command>sshd</command> server if
you want to be able to <command>ssh</command> <emphasis>into</emphasis> your
machine. The <command>ssh</command> client doesn't need this script to be
used. Having said that, if you want to run the <command>ssh</command> daemon,
the <command>sshd</command> init.d script can be created using the following
commands:</para>
<para><screen><userinput><command>cat &gt; /etc/rc.d/init.d/sshd &lt;&lt; "EOF"</command>
<screen><userinput><command>cat &gt; /etc/rc.d/init.d/sshd &lt;&lt; "EOF"</command>
#!/bin/sh
# Begin $rc_base/init.d/sshd
@ -62,10 +65,11 @@ esac
# End $rc_base/init.d/sshd
<command>EOF
chmod 755 /etc/rc.d/init.d/sshd</command></userinput></screen></para>
chmod 755 /etc/rc.d/init.d/sshd</command></userinput></screen>
<para>Create the symbolic links to this file in the relevant <filename
class="directory">rc.d</filename> directories with the following commands:
class="directory">rc.d</filename> directories with the following
commands:</para>
<screen><userinput><command>cd /etc/rc.d/init.d &amp;&amp;
ln -sf ../init.d/sshd ../rc0.d/K30sshd &amp;&amp;
ln -sf ../init.d/sshd ../rc1.d/K30sshd &amp;&amp;
@ -73,7 +77,7 @@ ln -sf ../init.d/sshd ../rc2.d/K30sshd &amp;&amp;
ln -sf ../init.d/sshd ../rc3.d/S30sshd &amp;&amp;
ln -sf ../init.d/sshd ../rc4.d/S30sshd &amp;&amp;
ln -sf ../init.d/sshd ../rc5.d/S30sshd &amp;&amp;
ln -sf ../init.d/sshd ../rc6.d/K30sshd</command></userinput></screen></para>
ln -sf ../init.d/sshd ../rc6.d/K30sshd</command></userinput></screen>
</sect3>

9
server/other/openssh/openssh-desc.xml
View File

@ -1,7 +1,7 @@
<sect2>
<title>Contents</title>
<para>The <application>OpenSSH</application> package contains <command>ssh</command>,
<para>The <application>Open<acronym>SSH</acronym></application> package contains <command>ssh</command>,
<command>sshd</command>, <command>ssh-agent</command>,
<command>ssh-add</command>, <command>sftp</command>,
<command>scp</command>, <command>ssh-keygen</command>,
@ -22,10 +22,11 @@
<para>An authentication agent that can store private keys.</para></sect3>
<sect3><title>ssh-add</title>
<para>Tool which adds keys to the ssh-agent.</para></sect3>
<para>Tool which adds keys to the <command>ssh-agent</command>.</para></sect3>
<sect3><title>sftp</title>
<para>FTP-like program that works over SSH1 and SSH2 protocol.</para></sect3>
<para><acronym>FTP</acronym>-like program that works over
<acronym>SSH</acronym>1 and <acronym>SSH</acronym>2 protocol.</para></sect3>
<sect3><title>scp</title>
<para>File copy program that acts like rcp.</para></sect3>
@ -34,7 +35,7 @@
<para>Key generation tool.</para></sect3>
<sect3><title>sftp-server</title>
<para>SFTP server subsystem.</para></sect3>
<para><acronym>SFTP</acronym> server subsystem.</para></sect3>
<sect3><title>ssh-keyscan</title>
<para>Utility for gathering public host keys from a number of hosts.</para></sect3>

19
server/other/openssh/openssh-exp.xml
View File

@ -6,17 +6,18 @@ configuration files from going to <filename>/usr/etc</filename>.</para>
<para><command>--with-md5-passwords</command> : This is required
if you made the changes recommended by the shadowpasswd_plus lfs hint on
your ssh server when you installed the Shadow Password Suite or if you
access a ssh server that authenticates by user passwords encrypted with
md5. </para>
your <acronym>SSH</acronym> server when you installed the Shadow Password
Suite or if you access a <acronym>SSH</acronym> server that authenticates by
user passwords encrypted with md5. </para>
<para><command>--libexecdir=/usr/sbin</command> :
<application>OpenSSH</application> puts
programs called by programs in <filename class="directory">/usr/libexec</filename>. sftp-server is a sshd
utility and ssh-askpass is a ssh-add utility that is installed as a
link to X11-ssh-askpass. Both of these should go in <filename
class="directory">/usr/sbin</filename> not <filename
class="directory">/usr/libexec</filename>.</para>
<application>Open<acronym>SSH</acronym></application> puts
programs called by programs in <filename class="directory">/usr/libexec
</filename>. <command>sftp-server</command> is a <command>sshd</command>
utility and <command>ssh-askpass</command> is a <command>ssh-add</command>
utility that is installed as a link to <command>X11-ssh-askpass</command>.
Both of these should go in <filename class="directory">/usr/sbin</filename>
not <filename class="directory">/usr/libexec</filename>.</para>
</sect2>

8
server/other/openssh/openssh-inst.xml
View File

@ -1,7 +1,8 @@
<sect2>
<title>Installation of <application>OpenSSH</application></title>
<title>Installation of <application>Open<acronym>SSH</acronym></application></title>
<para><application>OpenSSH</application> runs as two processes when connecting to other
<para><application>Open<acronym>SSH</acronym></application> runs as two
processes when connecting to other
computers. The first process is a priviledged process and controls the
issuance of privileges as necessary. The second process communicates
with the network. Additional installation steps are necessary to set up
@ -13,7 +14,8 @@ chown root:sys /var/empty &amp;&amp;
groupadd sshd &amp;&amp;
useradd -c 'sshd privsep' -d /var/empty -g sshd -s /bin/false sshd</command></userinput></screen>
<para>Install OpenSSH by running the following commands:</para>
<para>Install <application>Open<acronym>SSH</acronym></application> by running
the following commands:</para>
<screen><userinput><command>./configure --prefix=/usr --sysconfdir=/etc/ssh \
&nbsp;&nbsp;&nbsp;--libexecdir=/usr/sbin --with-md5-passwords &amp;&amp;

10
server/other/openssh/openssh-intro.xml
View File

@ -1,9 +1,9 @@
<sect2>
<title>Introduction to OpenSSH</title>
<title>Introduction to <application>Open<acronym>SSH</acronym></application></title>
<para>The <application>OpenSSH</application> package contains ssh clients and the sshd daemon.
This is
useful for encrypting all traffic over a network.</para>
<para>The <application>Open<acronym>SSH</acronym></application> package
contains <command>ssh</command> clients and the <command>sshd</command> daemon.
This is useful for encrypting all traffic over a network.</para>
<sect3><title>Package information</title>
<itemizedlist spacing='compact'>
@ -14,7 +14,7 @@ useful for encrypting all traffic over a network.</para>
<listitem><para>Estimated build time: &openssh-time;</para></listitem></itemizedlist>
</sect3>
<sect3><title><application>OpenSSH</application> dependencies</title>
<sect3><title><application>Open<acronym>SSH</acronym></application> dependencies</title>
<sect4><title>Required</title>
<para><xref linkend="openssl"/></para></sect4>
<sect4><title>Optional</title>