[csw-users] WARNING: upgrading ssh will kill ssh connections under Solaris 10

Yann Rouillard yann at pleiades.fr.eu.org
Tue Sep 11 22:30:18 CEST 2007


A new openssh package will soon land in the unstable repository but due
to a bug in SMF support, upgrading to this package will kill all
previous sshd processes 60 seconds after the previous package is
removed, thus closing all sshd connections. 
This problem only affects Solaris >= 10.

You are then strongly advised to perform this upgrade with no user
logged by ssh, and it is also recommended to use a console or a non-ssh
remote access to perform the upgrade. 

If you run pkg-get from a ssh connection, the connection will be closed
60s after the previous pakages removal, this could lead in the new ssh
package incorrectly installed, if it happens before the upgrade is
finished
Also, if the ssh service has problem being restarted correctly, you
would not be able to reconnect to your computer remotely.

If you have only a ssh access avaible, you could launch another ssh
daemon on non-standard port:
        /opt/csw/sbin/sshd -p 2022

and then connect to your computer daemon using this port:
        ssh -p 2022 yourcomputer

This connection will not be monitored by SMF and hence will not be
closed by the upgrade process.


This new package solves this issue and next upgrades will not suffer
from this problem.

Yann





More information about the users mailing list