without-privsep?

Greetings.

I'm having an issue running "sshd -t" (test mode). It gives the error, "Privilege separation user no does not exist". Here's the details:

I'm compiling/installing openssh 3.6.1 on Solaris 8 system with current patches, including patch for random number generator. I ran configure with the following parameters, following the instructions in the Sun Bluebook article "Building OpenSSH -- Tools and Tradeoffs":

--with-pam
--disable-suid-ssh
--without-rsh
--with-lastlog=/var/adm/lastlog
--sysconfdir=/etc/openssh
--prefix=/usr/local
--without-privsep-user
--without-privsep-path
--without-prngd
--without-rand-helper

The configuration and makes went without error (except for the error I list above when "make install" tried to run "sshd -t"). The error message indicates that sshd is looking for a privilege separation user account with the username of "no" even though I specified the without-privsep arguments. I noticed that the Makefile has a check for the with-privsep args but not for the without-- args even though the comments say it checks for without as well. Also, the Makefile sets an argument defining the privilege separation user and path as no. Bug? Or just a bonehead approach by Sun Bluebook?

-ed-

Ed Maple
Systems Administrator
Mars Space Flight Facility
Arizona State University
voice: 480-727-6356
fax: 480-965-1787 Received on Fri Jun 13 01:25:39 2003