[OmniOS-discuss] A small gotcha with switching the ssh & openssh packages in OmniOS

[Josef 'Jeff' Sipek]

On Mon, Nov 16, 2015 at 03:45:06PM -0800, Paul B. Henson wrote:
> > From: Dan McDonald
> > Sent: Monday, November 16, 2015 2:15 PM
> > 
> > Off the top of my head, I can't *IMAGINE* such a change from localfs to
> fs-
> > local causing headaches in OpenSSH or ISC DHCP, but it'll require some
> > testing.  Also, will such a change into a backport situation (014 & 016)
> cause
> > more havoc than a major upgrade?
> 
> Not sure about dhcp, but given you couldn't even install openssh on 014
> until last week, I can't imagine anyone has become too dependent on the
> existing dependencies ;).
> 
> BTW, on the topic of openssh gotchas, I noticed that it does not seem to be
> compiled with GSSAPI/Kerberos support? Sunssh is, which makes the bundled
> openssh not quite a drop in replacement :(.

Agreed.  I guess I'll stick with sunssh on the server for now.

FWIW, it turns out building openssh with GSSAPI/Kerberos support is a PITA
on Illumos since our krb5-config doesn't know about "gssapi".  The libraries
still support it, but the openssh configure script doesn't know how to check
for it.  In case Dan decides to revisit this (and he should eventually ;) ),
here's the relevant patch from OI Hipster (which appears to come from
SmartOS):

https://github.com/OpenIndiana/oi-userland/blob/oi/hipster/components/openssh/patches/0028-Don-t-use-krb5-config-to-check-for-GSSAPI-on-Illumos.patch

Jeff.

-- 
Once you have their hardware. Never give it back.
(The First Rule of Hardware Acquisition)