Wally,
That's a good qestion. We ARE running it through inetd, thus it is
compiled without libwrap. Wietse Venema, would be your best contact to
find out how ssh running standalone and compiled with libwrap "hooks up"
with tcp_wrappers. He gave me that as one option, so I'm guessing that
there must be a way to configure it. Since we have it working here now,
I'm having to move on to other items. But I am curious to learn what you
find out. Any summary you could provide would be appreciated.
Regards,
Chris
###############################################################
# Chris Vandersip #
# Computer Research Specialist/Asst. Sysadmin #
# Dept. of Meteorology #
# Florida State University #
# [EMAIL PROTECTED] (850)644-2522 #
###############################################################
On Thu, 18 Feb 1999, Auteria Wally Winzer Jr. wrote:
> Then the question is:
>
> Since you're not running sshd through inetd, and you run it as a
> standalone w/ tcp_wrappers, how is that setup if /usr/sbin/tcpd
> or /usr/local/sbin/tcpd is not enabled through inetd yet it is
> compiled with --with-libwrap?
>
> - Wally Winzer Jr.
>
> "C. Vandersip" wrote:
>
> > Greetings,
> >
> > 1. Acknowledgements: My thanks to Weitse Venema, the tcp_wrappers
> > author, for his solution, and to Sami Lehtinen for his interest and
> > adviceB.
> >
> > 2. OS/Software/Configuration: Solaris 2.5, ssh2.0.12, tcp_wrappers 7.5 -
> > ssh compiled with --with_libwrap option and running in inetd mode for
> > tcp_wrappers.
> >
> > 3. Original Problem: ssh would hang on logout from remote host. Ctrl-D
> > necessary to disconnect.
> >
> > 4. Solution: Though it was not evident to me in any installation
> > documentation, if you want to run ssh in inetd mode with tcp_wrappers
> > compatibility, you must compile ssh without enabling --with-libwrap=PATH
> > option, then setup the inetd.conf and services files to go through
> > tcp_wrappers. After recompiling without libwrap, ssh hangs no more on
> > logout :-]. Now, if you want to run ssh standalone (i.e. not in inetd
> > mode), and also want tcp_wrappers compatibility, then you DO compile ssh
> > using the --with-libwrap switch.
> >
> > The docs I read did not mention this requirement, and I'm not sure if this
> > is specific to Solaris 2.5 or more general instructions. I hope this
> > helps others.
> >
> > Regards,
> >
> > Chris
> > ###############################################################
> > # Chris Vandersip #
> > # Computer Research Specialist/Asst. Sysadmin #
> > # Dept. of Meteorology #
> > # Florida State University #
> > # [EMAIL PROTECTED] (850)644-2522 #
> > ###############################################################
>
