takkeybook/openssh-lpk

Can't get compiled OpenSSH 6.6 with LPK patch, to recognise LPK

Closed this issue · 4 comments

mig5 commented

Hi there,

Thank you for your LPK patch for OpenSSH 6.6!

I have been using the LPK patch since OpenSSH 5 and also 6.0 without issue.

I have just installed the OpenSSH 6.6 source from wheezy-backports and then I followed your guide to add your LPK patch.

It all seems to build successfully, however, after installing the deb packages, I get these errors:

root@example:/usr/local/src/openssh-20140711# /etc/init.d/ssh restart
/etc/ssh/sshd_config: line 99: Bad configuration option: UseLPK
/etc/ssh/sshd_config: line 101: Bad configuration option: LpkServers
/etc/ssh/sshd_config: line 103: Bad configuration option: LpkUserDN
/etc/ssh/sshd_config: line 104: Bad configuration option: LpkGroupDN
/etc/ssh/sshd_config: line 107: Bad configuration option: LpkServerGroup
/etc/ssh/sshd_config: line 108: Bad configuration option: LpkForceTLS
/etc/ssh/sshd_config: line 110: Bad configuration option: LpkBindTimelimit
/etc/ssh/sshd_config: terminating, 7 bad configuration options

It seems ironic because these are exactly the parameters that the patch should provide (and my sshd_config already had these settings because as I said I am already using OpenSSH 6.1 on Wheezy with the LPK patch, but need to upgrade for other reasons)

Is there a step missing in the guide? I added the patch filename to debian/patches/series exactly per your guide, but it is as if it compiled without it..

Thanks for any help you might be able to provide!

mig5 commented

My guess is I need to apply with --with-ldap or similar, looking at the patch?

mig5 commented

Just saw 9d452df - thanks!!

takkeybook commented

Hello,

I should add some instruction before building a package. Even though you
apply a lpk patch,
the modified code is not activated because a cpp flag, -DWITH_LDAP_PUBKEY,
is not specified
in a building process. At the same time, as you pointed out in the 2nd
message,
you have to specify -lldap flag in a linking process.

Now I modify README.md file. Please rebuild an openssh package according to
modified one.

Thank you for your attention to this matter.

Best regard

Takashi Kagimoto

2014-07-11 10:11 GMT+09:00 mig5 notifications@github.com:

Hi there,

Thank you for your LPK patch for OpenSSH 6.6!

I have been using the LPK patch since OpenSSH 5 and also 6.0 without issue.

I have just installed the OpenSSH 6.6 source from wheezy-backports and
then I followed your guide to add your LPK patch.

It all seems to build successfully, however, after installing the deb
packages, I get these errors:

root@example:/usr/local/src/openssh-20140711# /etc/init.d/ssh restart
/etc/ssh/sshd_config: line 99: Bad configuration option: UseLPK
/etc/ssh/sshd_config: line 101: Bad configuration option: LpkServers
/etc/ssh/sshd_config: line 103: Bad configuration option: LpkUserDN
/etc/ssh/sshd_config: line 104: Bad configuration option: LpkGroupDN
/etc/ssh/sshd_config: line 107: Bad configuration option: LpkServerGroup
/etc/ssh/sshd_config: line 108: Bad configuration option: LpkForceTLS
/etc/ssh/sshd_config: line 110: Bad configuration option: LpkBindTimelimit
/etc/ssh/sshd_config: terminating, 7 bad configuration options

It seems ironic because these are exactly the parameters that the patch
should provide (and my sshd_config already had these settings because
as I said I am already using OpenSSH 6.1 on Wheezy with the LPK patch, but
need to upgrade for other reasons)

Is there a step missing in the guide? I added the patch filename to
debian/patches/series exactly per your guide, but it is as if it compiled
without it..

Thanks for any help you might be able to provide!

—
Reply to this email directly or view it on GitHub
#1.

mig5 commented

Works perfectly now. Thank you again!