Linux openssh升级方案

《Linux openssh升级方案》由会员上传分享，免费在线阅读，更多相关内容在应用文档-天天文库。

1、Openssh升级方案一、准备安装包1、确定操作系统uname-acat/etc/redhat-release2、将安装包和系统ISO镜像上传服务器zlib-1.2.8.tar.gzopenssl-1.0.1p.tar.gzopenssh-7.1p1.tar.gzrhel-server-6.5-x86_64-dvd.iso修改yum配置文件vi/etc/yum.repos.d/local.repo粘贴以下内容并保存[Server]name=Serverbaseurl=file:///xxxx/iso/Ser

2、ver(xxxx/iso为新建的iso目录来存放挂载后的操作系统镜像)enabled=1gpgcheck=0挂载redhat6.5的iso安装包(在xxxx目录下新建iso文件夹)mount–tiso9660/dev/cdrom/xxxx/iso安装必要的软件包gcc、telnet、xinetd、make、pam-devel、zlib等yum–yinstall*gcc*yum–yinstall*telnet*yum–yinstall*xinetd*yum–yinstall*make*yum–yinstall

3、*pam-devel*yum–yinstall*zlib*3、准备其他远程方式telnet或者vnc修改telnet配置文件vi/etc/xinetd.d/telnetdisable=yes改成noservicexinetdrestart重启服务创建telnet远程用户userdelweihupasswdweihucqep1234或者修改配置保证root用户可以telnet,保证后续远程配置正常进行vi/etc/pam.d/login文件注释掉：#auth[user_unknown=ignoresucces

4、s=okignore=ignore#auth_err=diedefault=bad]pam_securetty.so测试telnet正常登录后进行下一步4、拷贝安装包至/usr/local/src目录，并解压修改权限cpzlib-1.2.8.tar.gz/usr/local/srccpopenssh-6.8p1.tar.gz/usr/local/srccpopenssl-1.0.2a.tar.gz/usr/local/srccd/usr/local/src/tarzxvfopenssh-6.8p1.tar.

5、gztarzxvfopenssl-1.0.2a.tar.gztarzxvfzlib-1.2.8.tar.gzchmod777-Ropenssh-6.8p1chmod777-Ropenssl-1.0.2achmod777–Rzlib-1.2.81、检查系统是否缺包rpm-qa

6、egrep"gcc

7、make

8、perl

9、pam

10、pam-devel"如缺包请自行设置本地Yum源进行安装yum-yinstallgcc*makeperlpampam-devel如果报publickeyforsinjdoc-0.5-9.1

11、.el6.x86_64.rpmisnotinstalled这样的错误，则执行如下命令：（需要导入rpm的签名信息）#rpm--import/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release二、程序升级1、停止ssh服务servicesshdstop2、备份脚本和程序cp/etc/init.d/sshdroot3、卸载原openssh#rpm-qa

12、grepopenssh//查询系统原安装的openssh包全部卸载。根据查出的结果使用如下进行删除。（#rpm-eopenss

13、h--nodeps#rpm-eopenssh-server--nodeps#rpm-eopenssh-clients--nodeps#rpm-eopenssh-askpassrpm-eopenssl--nodeps）或rpm-e--nodeps`rpm-qa

14、grepopenssh`4、安装zlib包cd/usr/local/src/zlib-1.2.8./configuremakemakeinstall5、安装openssl包cd/usr/local/src/openssl-1.0.1p./configs

15、haredzlibmakemaketestmakeinstallmv/usr/bin/openssl/usr/bin/openssl.OFFmv/usr/include/openssl/usr/include/openssl.OFF//该步骤可能提示无文件，忽略即可ln-s/usr/local/ssl/bin/openssl/usr/bin/opensslln-s/usr/local/ssl/include/op