blob: b7dc3f91ce5875f326aec74de5e87955174630ee [file] [log] [blame]
Darren Tucker149543e2004-02-24 16:14:41 +11001This file contains notes about OpenSSH on specific platforms.
2
3AIX
4---
5As of OpenSSH 3.8p1, sshd will now honour an accounts password expiry
6settings, where previously it did not. Because of this, it's possible for
7sites that have used OpenSSH's sshd exclusively to have accounts which
8have passwords expired longer than the inactive time (ie the "Weeks between
9password EXPIRATION and LOCKOUT" setting in SMIT or the maxexpired
10chuser attribute).
11
12Accounts in this state must have their passwords reset manually by the
13administrator. As a precaution, it is recommended that the administrative
14passwords be reset before upgrading from OpenSSH <3.8.
15
Darren Tucker691d5232005-02-15 21:45:57 +110016As of OpenSSH 4.0, configure will attempt to detect if your version
17and maintenance level of AIX has a working getaddrinfo, and will use it
18if found. This will enable IPv6 support. If for some reason configure
19gets it wrong, or if you want to build binaries to work on earlier MLs
20than the build host then you can add "-DBROKEN_GETADDRINFO" to CFLAGS
21to force the previous IPv4-only behaviour.
22
Darren Tuckere13eace2005-02-15 22:44:05 +110023IPv6 known to work: 5.1ML7 5.2ML2 5.2ML5
Darren Tucker691d5232005-02-15 21:45:57 +110024IPv6 known broken: 4.3.3ML11 5.1ML4
Darren Tucker7749c512004-04-23 18:57:13 +100025
26Cygwin
27------
28To build on Cygwin, OpenSSH requires the following packages:
29gcc, gcc-mingw-core, mingw-runtime, binutils, make, openssl,
30openssl-devel, zlib, minres, minires-devel.
31
32
Darren Tucker3eb48342006-06-23 21:05:12 +100033Darwin and MacOS X
34------------------
35Darwin does not provide a tun(4) driver required for OpenSSH-based
36virtual private networks. The BSD manpage still exists, but the driver
37has been removed in recent releases of Darwin and MacOS X.
38
39Nevertheless, tunnel support is known to work with Darwin 8 and
40MacOS X 10.4 in Point-to-Point (Layer 3) and Ethernet (Layer 2) mode
41using a third party driver. More information is available at:
42 http://www-user.rhrk.uni-kl.de/~nissler/tuntap/
43
44
Darren Tucker149543e2004-02-24 16:14:41 +110045Solaris
46-------
Darren Tuckerd9f88912005-02-20 21:01:48 +110047If you enable BSM auditing on Solaris, you need to update audit_event(4)
48for praudit(1m) to give sensible output. The following line needs to be
49added to /etc/security/audit_event:
Darren Tucker149543e2004-02-24 16:14:41 +110050
Darren Tuckerd9f88912005-02-20 21:01:48 +110051 32800:AUE_openssh:OpenSSH login:lo
52
53The BSM audit event range available for third party TCB applications is
5432768 - 65535. Event number 32800 has been choosen for AUE_openssh.
55There is no official registry of 3rd party event numbers, so if this
56number is already in use on your system, you may change it at build time
57by configure'ing --with-cflags=-DAUE_openssh=32801 then rebuilding.
58
59
Darren Tucker3a38c5a2005-11-05 16:28:35 +110060Platforms using PAM
61-------------------
62As of OpenSSH 4.3p1, sshd will no longer check /etc/nologin itself when
63PAM is enabled. To maintain existing behaviour, pam_nologin should be
64added to sshd's session stack which will prevent users from starting shell
65sessions. Alternatively, pam_nologin can be added to either the auth or
66account stacks which will prevent authentication entirely, but will still
67return the output from pam_nologin to the client.
68
69
Darren Tucker3eb48342006-06-23 21:05:12 +100070$Id: README.platform,v 1.7 2006/06/23 11:05:13 dtucker Exp $