3. Installing Secure Shell

This section gives you basic information on how to install the Secure Shell distribution from SSH Communications Security. Click here for the contents of this section.

3.1. What is the latest version of Secure Shell?

The latest version of SSH1 is 1.2.27, and SSH2 is 2.2.0. If you are not using the latest version, you may run into problems.

The latest version of lsh is 0.9.14, and be aware that lsh is still in testing mode and is not ready for prime-time yet.

3.2. How do I install Secure Shell?

To install Secure Shell (either SSH1 or SSH2), download the tar files and place in a directory (either /tmp or /usr/local/src). Then do the following:

# gzip -dc ssh-2.2.0.tar.gz | tar -xvf -
# cd ssh-2.2.0
# ./configure
# make
# make install

Please read the INSTALL file for more specifc instructions on SSH1, and for SSH2, please read the README.

If you run into any problems, check out the troubleshooting section before sending it to the Secure Shell mailing list.

Note: You may have to use specific options with configure to get Secure Shell to work the way you want (with certain ciphers, using TCP Wrappers, socks support, etc.).

3.3 Does it make sense to install Secure Shell as a non-root user on UNIX?

If you run the server, sshd or sshd2, as a user other than root then you can only login as that user.

If you install the client, ssh or ssh2, non setuid root you will still be able to connect and login to remote servers, but you will not be able to use hostbased authentication.

You can also start up sshd yourself as non-root, supplying the -p option so it binds to a non-privileged port (port number higher than 1024), and then connect from another system with ssh -p. This will only allow connections to your own account, and sshd will, as a rule, not be restarted when your machine reboots.

You will have to decide whether this is useful for you or not.

3.4 Where do I get pre-compiled binaries for Secure Shell?

Redhat RPMs:

Solaris 2.6, 2.7:

SSH Communications Security and F-Secure also include binaries for several flavors of UNIX.

| Previous Chapter | | Next Chapter |

| Table of contents of this chapter | | General table of contents | | Beginning of this section |

This SSH FAQ mirror is made available by Brian Hatch and Onsight, Inc. Contact the FAQ maintainers if you have changes or comments on this material.