hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant
Help - Search - Member List - Calendar
GovernmentSecurity.org > System Security > Linux & Unix Systems
Salvia
Jul 6 2005, 02:39 AM
what is the difference between FreeBSD's base OpenSSH and OpenSSH portable?
myth
Jul 6 2005, 06:30 AM
OpenSSH Portable is basically the version for non-*bsd (net/free/open) systems like linux. When you install openssh onto a linux system, for example, OpenSSH Portable is actually installed.

When you install OpenSSH onto NetBSD, OpenBSD, FreeBSD (are there more ?) you install the OpenSSH for base FreeBSD.....


Why ? Well one of the reasons is, PAM. FreeBSD doesnt use PAM ... But Linux boxes do, so they get the portable version....
Salvia
Jul 6 2005, 06:33 AM
the base install does support pam, but the question comes to mind because the portable version is also available in the ports tree of freeBSD
myth
Jul 6 2005, 06:41 AM
the base install, from what i can now tell from a couple google searches, does not support PAM. I maybe interpretting wrong - but thats what i've gathered. And thats why you will find OpenSSH-Portable in the FreeBSD port tree

Correct me if i'm wrong, http://taosecurity.blogspot.com/2004/10/last-freebsd-5.html

QUOTE
1. OpenSSH is part of the base FreeBSD operating system.
2. OpenSSH exists as the security/openssh port. This version is like OpenSSH for OpenBSD due to the similarity between FreeBSD and OpenBSD's code.
3. OpenSSH exists as the openssh-portable port. This version is specifically for non-OpenBSD systems.

Confused? According to this thread, OpenBSD's lack of support for PAM means the OpenBSD native version (option 2) doesn't offer PAM. Since FreeBSD does use PAM, options 1 and 3 make use of PAM.

This means that if you want your OpenSSH authentication to use PAM on FreeBSD, you can use the OpenSSH integrated into the FreeBSD base (like using integrated BIND) or you can install the openssh-portable port (like using the BIND port).


(Take note though, that website is dated October 2004 - things may have changed.)
Salvia
Jul 6 2005, 06:45 AM
QUOTE
Confused? According to this thread, OpenBSD's lack of support for PAM means the OpenBSD native version (option 2) doesn't offer PAM. Since FreeBSD does use PAM, options 1 and 3 make use of PAM.



But thank you the rest of that did answer my question smile.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
 
Invision Power Board © 2001-2005 Invision Power Services, Inc.