Patching SSH

[Mike Tibor]

On Wed, 17 Sep 2003, Jon Reynolds wrote:

> I have SSH installed with the base install of 4.7. I downloaded the
> patch and followed the directions: cd /usr/src - patch < /path/to/patch.
> when I issue that command it asks me which file I would like to patch I
> type in buffer.c and it tells me this file cannot be found. What file do
> I need to patch if not buffer.c?

Hi Jon,

I may not have done it the "correct" way, but what I did was to download
openssh-3.7.1p1 from ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/
and build and install that:

tar zxf openssh-3.7.1*tar.gz
cd openssh-3.7.1*
./configure --with-md5-passwords --with-pam
make
su
make install

--with-md5-passwords *shouldn't* be necessary since we're using pam, but
I've found it necessary to include that on more than one system.  You can
always try it without and see if the resulting sshd will authenticate you
correctly, and if not include it when you rebuild it.

Note that this way will put stuff under /usr/local by default (which you
can always change of course), so any customizations you had to sshd_config
should be merged with the new /usr/local/etc/sshd_config.  Because of
this, I added the following in /etc/rc.conf:

  sshd_program="/usr/local/sbin/sshd"

Hope that helps,
Mike