OpenSSH, Kth kerberos, and Digital Unix

Kevin Sullivan ksulliva at psc.edu
Fri Jan 12 06:48:00 EST 2001


On 14 Dec 2000 16:23:32 +0100, Jan IVEN says
>>>>>> "KS" == Kevin Sullivan <ksulliva at psc.edu> writes:
>
> KS> I've compiled OpenSSH 2.3.0p1 with Kerberos 4 from Kth (1.0.4).  We use A
>FS
> KS> heavily and need the AFS token passing features.  This combo is working
> KS> great on Irix and NetBSD/{alpha,i386}, but it's dying on Digital Unix (4.
>0f
> KS> and 5.0).
>
> KS> "ssh -v hostname" dumps core in des_pcbc_encrypt() after "Trying Kerberos
> KS> authentication".  My suspicion is that the des routines from OpenSSL and
> KS> Kerberos are getting confused by the linker, but I'm not sure how to test
> KS> that or fix it.
>
> KS> Has anyone seen this before?  Any suggestions?
>
>We have trouble with the self-test for DES from openssl-0.9.6 on
>Digital boxes (OSF1 refdux40f V4.0 1229 alpha). The tests produce lots
>of "unaligned access" errors and all of them fail (despite being
>converted transparently). If you have "uac noprint sigbus" on your
>machine, this might be the same problem in disguise?

Could be, though the des tests work fine.  I've fixed the problem by
removing the des libraries from libcrypt.a and using the ones which came
with Kth-krb4.  Thanks for the pointer!

	-Kevin

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 284 bytes
Desc: not available
Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20010111/da09d7d0/attachment.bin 


More information about the openssh-unix-dev mailing list