PingID Administration Guide

Installation example for HP-UX

This is an example installation of PingID Secure Shell (SSH) for HP-UX. Your installation might vary depending on your particular configuration.

About this task

The bundled C compiler on HP-UX is intended for building a kernel and is not much use for anything else. We need the HP-UX C/C++ Development Environment that includes the latest C compiler or gcc compiler. (This procedure was tested with gcc-4.2.3 32-bit Itanium 2, now deprecated.)

Steps

  1. Download depothelper and gcc to local machine from ftp://hpux.connect.org.uk/hpux/Sysadmin/depothelper-2.20/depothelper-2.20-ia64_64-11.31.depot.gz and ftp://hpux.connect.org.uk/hpux/Gnu/gcc-4.2.3/gcc-4.2.3-ia64_32-11.31.depot.gz.

  2. Copy depothelper and gcc to the hpux server:

    scp -P <port> depothelper-2.20-ia64_64-11.31.depot.gz user@server.com:/tmp
    scp -P <port> gcc-4.2.3-ia64_32-11.31.depot.gz user@server.com:/tmp
  3. As root, unzip and install depothelper and gcc:

    /usr/contrib/bin/gunzip /tmp/depothelper-2.20-ia64_64-11.31.depot.gz
    /usr/contrib/bin/gunzip /tmp/gcc-4.2.3-ia64_32-11.31.depot.gz

    and then run:

    /usr/sbin/swinstall -s /tmp/depothelper-2.20-ia64_64-11.31.depot
    /usr/sbin/swinstall -s /tmp/gcc-4.2.3-ia64_32-11.31.depot.gz
  4. As root, install curl:

    /usr/local/bin/depothelper curl
  5. Create simlinks (as root only for gcc-4.2.3 32-bit):

    mkdir /usr/local/lib/hpux32
    sudo ln -s /opt/gtk2.6/lib/libintl.so /usr/local/lib/hpux32/libintl.so
    sudo ln -s /opt/gtk2.6/lib/libiconv.so /usr/local/lib/hpux32/libiconv.so
  6. Copy the pingid tarball from the local machine to the server and unpack it:

    scp -P <port> pingid-4.0.16.tar.gz user@server.com:/home/user
    cd /home/user
    /usr/contrib/bin/gunzip pingid-4.0.16.tar.gz
    tar xvf pingid-4.0.16.tar
  7. Set up the environment and build the 64 bit version:

    For gcc-4.2.3 32-bit only:

    export CC="/usr/local/bin/gcc -mlp64"

    For all:

    cd ~/pingid-4.0.16
    aclocal
    autoreconf -i
    ./configure --with-pam
    make
    sudo make install
  8. Download the properties file. See Integrate PingID with SSH.

  9. Copy your pingid.properties file to server:

    scp -P  <port>  pingid.properties user@server.com:/home/user
    sudo cp pingid.properties /usr/local/etc/pingid/

    Do not make any changes to the contents of the file.

  10. If you do not have a collection of trusted root certification authorities on the server, you can download cacert.pem from https://curl.haxx.se/ca/cacert.pem to /usr/local/etc/pingid/ using the command:

    sudo curl https://curl.haxx.se/ca/cacert.pem -o /usr/local/etc/pingid/cacert.pem

Next steps

In the event of problems, see Troubleshooting the PingID SSH installation.