Building and Installing

GSI-OpenSSH is built and installed as part of a default GT 4.2.0 installation. For basic installation instructions, see Installing GT 4.2.0. No extra installation steps are required for this component.

1. Optional Build-Time Configuration

You can optionally pass build-time configure options to the GSI-OpenSSH package using the --with-gsiopensshargs option when running configure for your GT 4.2.0 installation. For example:

./configure --prefix=$HOME/globus 
      --with-gsiopensshargs="--with-pam"

No options are typically needed for client-only installations, but options are often needed for full server functionality. The following table lists suggested options for different platforms.

Table 1. GSI-OpenSSH build arguments

PlatformConfiguration
Linux--with-pam --with-md5-passwords --with-tcp-wrappers
Solaris--with-pam --with-md5-passwords --with-tcp-wrappers
Irix--with-tcp-wrappers
AIX--with-tcp-wrappers

Note: If you enable PAM support with the --with-pam configuration option, be sure to also set "UsePAM yes" in $GLOBUS_LOCATION/etc/ssh/sshd_config after installation.

If you have an already configured and installed system-wide SSHD and you would like your build of GSI-OpenSSH to behave similarly, investigate the configure options available in GSI-OpenSSH and select those options that would add the functionality that your current SSHD possesses. Be aware that since GSI-OpenSSH is based on OpenSSH, the standard set of functionality is turned on by default.

Please do not attempt to override the following options:

--prefix
--sysconfdir
--with-globus
--with-globus-flavor
--with-ssl-dir

2. Building and Installing only GSI-OpenSSH

If you wish to install GSI-OpenSSH without installing the rest of the Globus Toolkit, follow the instructions in Installing GT 4.2.0 with the following changes. First, you do not need Ant, a JDK, or a JDBC database to build only GSI-OpenSSH. Second, instead of running "make", run:

globus$ make gsi-openssh

This will install the GSI-OpenSSH client and server programs. For client-only installations, simply do not configure or use the installed server.