Hi,

> I installed the openssh-3.0.2.1 package from source on my centris 650 (NetBSD 1.5.2 generic). When I do a pkg_info it looks  like the proper version is installed:s
> openssh-3.0.2.1nb1  Open Source Secure shell client and server (remote login program)

From pkgsrc, Ok...

> However, when I do a ssh -V, I get:
> OpenSSH_2.5.1 NetBSD_Secure_Shell-20010614, SSH protocols 1.5/2.0, OpenSSL 0x0090581f

This is expected. See below.

> When I slogin to a remote machine (hp unix) with the verbose options it also tells me I have the 2.5.1 version:
> debug: Remote protocol version 1.99, remote software version OpenSSH_3.0.2p1
> debug: match: OpenSSH_3.0.2p1 pat ^OpenSSH
> debug: Local version string SSH-1.5-OpenSSH_2.5.1 NetBSD_Secure_Shell-20010614
>
> Is this a bug or is versin 2.5.1 actually the last version available for mac68k?

This is because packages install into /etc/mk.conf's LOCALBASE (/usr/local
on many people's systems, /usr/pkg by default).

But because the old ssh that came with the system is still around, and
because /bin, /sbin, /usr/bin, and /usr/sbin are in your path before
/usr/(pkg|local)/bin or sbin, the old ssh gets run when you use ssh from
the command line or start sshd from /etc/rc.conf.

You can either manually change your paths (ugly, but will work), remove
the old ssh binaries or rename them, replace them with the ones from the
package, or recompile a release-1-5 source tree which has the newest
OpenSSH in it (3.0.2).

Email me if you would like a quick HOW-TO for compiling your tree from
scratch.

John Klos
Sixgirls Computing Labs