View previous topic :: View next topic |
Author |
Message |
sadistikal n00b
Joined: 18 Sep 2003 Posts: 14 Location: Cambridge MA
|
Posted: Thu Sep 18, 2003 11:43 pm Post subject: openssh? |
|
|
I've got my Ultra"-slow" 2 up and running with gentoo...works nicely. However I need openssh installed. When I try to emerge it I get the following error:
!!! all ebuilds that could satisfy "app-crypt/mit-krb5" have been masked.
!!! (dependency required by "net-misc/openssh-3.7.1_p1" [ebuild])
Now I can just download it by hand and install it without a problem. But I'm curious why mit-krb5 is masked...is there any way to emerge ssh without it?
Thanks in Advance,
Gary |
|
Back to top |
|
|
bmichaelsen Veteran
Joined: 17 Nov 2002 Posts: 1277 Location: Hamburg, Germany
|
Posted: Fri Sep 19, 2003 12:03 am Post subject: |
|
|
This may be related to the recent critical bug in ssh, which is why openssh was pushed to the next release in portage faster than usual, although there are still problems with the deps. A
Code: | env USE="-kerberos" emerge -p openssh
|
Should do the job.
Greetz, Björn |
|
Back to top |
|
|
Weeve Retired Dev
Joined: 30 Oct 2002 Posts: 641
|
Posted: Fri Sep 19, 2003 2:13 am Post subject: |
|
|
openssh-3.7.1p1-r1 fixes this issue. however there are issues building it against openssl-0.9.7 (if you are using ACCEPT_KEYWORDS=~sparc). |
|
Back to top |
|
|
sadistikal n00b
Joined: 18 Sep 2003 Posts: 14 Location: Cambridge MA
|
Posted: Fri Sep 19, 2003 6:58 pm Post subject: |
|
|
Much apprieciated...worked great _________________ In the future everything will be artificial |
|
Back to top |
|
|
frpet n00b
Joined: 22 Sep 2003 Posts: 6 Location: Stockholm, Sweden
|
Posted: Tue Sep 23, 2003 10:49 am Post subject: |
|
|
Weeve wrote: | openssh-3.7.1p1-r1 fixes this issue. however there are issues building it against openssl-0.9.7 (if you are using ACCEPT_KEYWORDS=~sparc). |
I guess you are refering to this, since i have the problem then emerge-ing openssh on my system that uses the "~sparc".
Output from emerge:
gcc -o sshd sshd.o auth-rhosts.o auth-passwd.o auth-rsa.o auth-rh-rsa.o sshpty.o sshlogin.o servconf.o serverloop.o uidswap.o auth.o auth1.o auth2.o auth-options.o session.o auth-chall.o auth2-chall.o groupaccess.o auth-skey.o auth-bsdauth.o auth2-hostbased.o auth2-kbdint.o auth2-none.o auth2-passwd.o auth2-pubkey.o monitor_mm.o monitor.o monitor_wrap.o monitor_fdpass.o kexdhs.o kexgexs.o auth-krb5.o auth2-gss.o gss-serv.o gss-serv-krb5.o loginrec.o auth-pam.o auth-sia.o md5crypt.o -L. -Lopenbsd-compat/ -lssh -lopenbsd-compat -lwrap -lpam -ldl -lutil -lz -lnsl -lcrypto -lcrypt
./libssh.a(rsa.o)(.text+0x364): In function `rsa_generate_additional_parameters':
: undefined reference to `BN_mod'
./libssh.a(rsa.o)(.text+0x3a4): In function `rsa_generate_additional_parameters':
: undefined reference to `BN_mod'
collect2: ld returned 1 exit status
make: *** [ssh] Error 1
make: *** Waiting for unfinished jobs....
auth-rsa.o(.text+0x90): In function `auth_rsa_generate_challenge':
: undefined reference to `BN_mod'
./libssh.a(rsa.o)(.text+0x364): In function `rsa_generate_additional_parameters':
: undefined reference to `BN_mod'
./libssh.a(rsa.o)(.text+0x3a4): In function `rsa_generate_additional_parameters':
: undefined reference to `BN_mod'
collect2: ld returned 1 exit status
make: *** [sshd] Error 1
!!! ERROR: net-misc/openssh-3.7.1_p1-r1 failed.
!!! Function src_compile, Line 102, Exitcode 2
!!! compile problem
Is there a workaround to this problem?
(Beside setting ACCEPT_KEYWORDS to "sparc" and downgrade openssl-0.9.7b)
TIA
/P |
|
Back to top |
|
|
Weeve Retired Dev
Joined: 30 Oct 2002 Posts: 641
|
Posted: Tue Sep 23, 2003 10:22 pm Post subject: |
|
|
Oh, sorry for not getting back to you
Short answer
rm /usr/lib/gcc-lib/sparc-unknown-linux-gnu/3.2.3/include/openssl/bn.h
emerge openssh
long answer
https://bugs.gentoo.org/show_bug.cgi?id=13795 |
|
Back to top |
|
|
bazik Retired Dev
Joined: 22 Jul 2002 Posts: 277 Location: Behind you.
|
|
Back to top |
|
|
erik.crouch n00b
Joined: 24 Aug 2003 Posts: 44 Location: Wichita, KS USA -- United Kingdom
|
Posted: Thu Sep 25, 2003 5:42 am Post subject: |
|
|
Yeah that makes 4 upgrades, and this one wont compile correctly on my Ultra 5. It panics with an error, I will post the error after I generate it again. (forgot to do it when I saw it)
Erik
Edit: and nevermind I saw the above, pays to read the whole thread (i'm getting tired) |
|
Back to top |
|
|
frpet n00b
Joined: 22 Sep 2003 Posts: 6 Location: Stockholm, Sweden
|
Posted: Thu Sep 25, 2003 7:34 am Post subject: |
|
|
No worries mate... thanks for the answers!
Just out of curiousity: Why keep a copy of the "bn.h" file under /usr/lib/gcc-lib/sparc-unknown-linux-gnu/3.2.3/include/openssl/
All the other openssl includes (including bn.h) are kept under /usr/include/openssl as usual...
/P |
|
Back to top |
|
|
Weeve Retired Dev
Joined: 30 Oct 2002 Posts: 641
|
Posted: Thu Sep 25, 2003 8:28 am Post subject: |
|
|
Not sure, you'd have to ask the GCC folks on that. |
|
Back to top |
|
|
appetitus Apprentice
Joined: 28 Sep 2003 Posts: 210
|
Posted: Sun Jan 25, 2004 10:12 pm Post subject: |
|
|
Why are people using openssh?? That group shows up far too often on bugtraq, gotta be crazy to be running stuff from them on serious boxes....maybe gentoo isn't serious stuff?
Note to the illiterate: SSH license is satisfied merely by running linux, regardless of end use. _________________ Being a Gentoo user means living in a house inhabited by a family of crazed carpenters. When you wake up, the house is different. Maybe there is a new turret, or some walls have moved, or perhaps someone has removed the floor under your bed. |
|
Back to top |
|
|
ciaranm Retired Dev
Joined: 19 Jul 2003 Posts: 1719 Location: In Hiding
|
Posted: Mon Jan 26, 2004 12:41 am Post subject: |
|
|
appetitus wrote: | Why are people using openssh?? That group shows up far too often on bugtraq, gotta be crazy to be running stuff from them on serious boxes....maybe gentoo isn't serious stuff? |
Maybe because openssh are more honest about their vulnerability reporting than certain other groups? |
|
Back to top |
|
|
Simon631 n00b
Joined: 14 Jul 2003 Posts: 3
|
Posted: Thu Jan 29, 2004 12:24 am Post subject: |
|
|
I was having some similar problems with an openSSH emerge. I had tried just re-emerging GCC with the previous version of openSSH on, but it still wouldn't let me emerge OpenSSH. I kept getting
Code: |
gcc -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o sshconnect1.o sshconnect2.o -L. -Lopenbsd-compat/ -lssh -lopenbsd-compat -lutil -lz -lnsl -lcrypto -lcrypt
./libssh.a(rsa.o)(.text+0x2a4): In function `rsa_generate_additional_parameters':
: undefined reference to `BN_mod'
./libssh.a(rsa.o)(.text+0x2d6): In function `rsa_generate_additional_parameters':
: undefined reference to `BN_mod'
collect2: ld returned 1 exit status
make: *** [ssh] Error 1
make: *** Waiting for unfinished jobs....
!!! ERROR: net-misc/openssh-3.7.1_p2-r1 failed.
!!! Function src_compile, Line 101, Exitcode 2
!!! compile problem
|
I resolved my issues by unmerging openSSH remeging gcc and then emerging openSSH.
Hope that helps. |
|
Back to top |
|
|
inode77 Veteran
Joined: 20 Jan 2004 Posts: 1303 Location: Heart of Europe
|
Posted: Tue Feb 10, 2004 2:33 am Post subject: |
|
|
>Why are people using openssh?? That group shows up far too often on >bugtraq, gotta be crazy to be running stuff from them on serious >boxes....maybe gentoo isn't serious stuff?
You didn't understand a thing if you really think what you wrote!
OpenSSH is VERY serious piece of software. (Gentoo too ) What do you use for remoteshell program if not OpenSSH ?
And beside if you use the binaries from e.g. www.ssh.com (closed source) you get a lot more vulnerabilities just nobody knows about them. |
|
Back to top |
|
|
|