| Darren Tucker | 149543e | 2004-02-24 16:14:41 +1100 | [diff] [blame] | 1 | This file contains notes about OpenSSH on specific platforms. |
| 2 | |
| 3 | AIX |
| 4 | --- |
| 5 | As of OpenSSH 3.8p1, sshd will now honour an accounts password expiry |
| 6 | settings, where previously it did not. Because of this, it's possible for |
| 7 | sites that have used OpenSSH's sshd exclusively to have accounts which |
| 8 | have passwords expired longer than the inactive time (ie the "Weeks between |
| 9 | password EXPIRATION and LOCKOUT" setting in SMIT or the maxexpired |
| 10 | chuser attribute). |
| 11 | |
| 12 | Accounts in this state must have their passwords reset manually by the |
| 13 | administrator. As a precaution, it is recommended that the administrative |
| 14 | passwords be reset before upgrading from OpenSSH <3.8. |
| 15 | |
| Darren Tucker | 691d523 | 2005-02-15 21:45:57 +1100 | [diff] [blame] | 16 | As of OpenSSH 4.0, configure will attempt to detect if your version |
| 17 | and maintenance level of AIX has a working getaddrinfo, and will use it |
| 18 | if found. This will enable IPv6 support. If for some reason configure |
| 19 | gets it wrong, or if you want to build binaries to work on earlier MLs |
| 20 | than the build host then you can add "-DBROKEN_GETADDRINFO" to CFLAGS |
| 21 | to force the previous IPv4-only behaviour. |
| 22 | |
| Darren Tucker | e13eace | 2005-02-15 22:44:05 +1100 | [diff] [blame] | 23 | IPv6 known to work: 5.1ML7 5.2ML2 5.2ML5 |
| Darren Tucker | 691d523 | 2005-02-15 21:45:57 +1100 | [diff] [blame] | 24 | IPv6 known broken: 4.3.3ML11 5.1ML4 |
| Darren Tucker | 7749c51 | 2004-04-23 18:57:13 +1000 | [diff] [blame] | 25 | |
| 26 | Cygwin |
| 27 | ------ |
| 28 | To build on Cygwin, OpenSSH requires the following packages: |
| 29 | gcc, gcc-mingw-core, mingw-runtime, binutils, make, openssl, |
| 30 | openssl-devel, zlib, minres, minires-devel. |
| 31 | |
| 32 | |
| Darren Tucker | 149543e | 2004-02-24 16:14:41 +1100 | [diff] [blame] | 33 | Solaris |
| 34 | ------- |
| Darren Tucker | d9f8891 | 2005-02-20 21:01:48 +1100 | [diff] [blame^] | 35 | If you enable BSM auditing on Solaris, you need to update audit_event(4) |
| 36 | for praudit(1m) to give sensible output. The following line needs to be |
| 37 | added to /etc/security/audit_event: |
| Darren Tucker | 149543e | 2004-02-24 16:14:41 +1100 | [diff] [blame] | 38 | |
| Darren Tucker | d9f8891 | 2005-02-20 21:01:48 +1100 | [diff] [blame^] | 39 | 32800:AUE_openssh:OpenSSH login:lo |
| 40 | |
| 41 | The BSM audit event range available for third party TCB applications is |
| 42 | 32768 - 65535. Event number 32800 has been choosen for AUE_openssh. |
| 43 | There is no official registry of 3rd party event numbers, so if this |
| 44 | number is already in use on your system, you may change it at build time |
| 45 | by configure'ing --with-cflags=-DAUE_openssh=32801 then rebuilding. |
| 46 | |
| 47 | |
| 48 | $Id: README.platform,v 1.5 2005/02/20 10:01:49 dtucker Exp $ |