make install fails if configured --with-tcp-wrappers

[Dannis 't Hart]

Hello,

I tried building OpenSSH-2.9p1 on AIX 4.3.3(ML6) with gcc.
I included the --with-tcp-wrappers flag in configure.
Configure went just fine, make went just fine, but 'make install' failed
with the following error:

exec(): 0509-036 Cannot load program ./ssh-keygen because of the following
errors:
        0509-130 Symbol resolution failed for
/usr/local/lib/libwrap.a(libwrap.so) because:
        0509-136   Symbol allow_severity (number 71) is not exported from
                   dependent module ssh-keygen.
        0509-136   Symbol deny_severity (number 72) is not exported from
                   dependent module ssh-keygen.
        0509-192 Examine .loader section symbols with the
                 'dump -Tv' command.
make: 1254-004 The error code from the last command is 255.

Checking on dejanews.com revealed that at least one other person has
stumbled on this.

Not being a programmer, but maybe a smart guesser, I was able to work around
this by including the following in the source-file ssh-keygen.c manually:

#ifdef LIBWRAP
#include <tcpd.h>
#include <syslog.h>
int allow_severity = LOG_INFO;
int deny_severity = LOG_WARNING;
#endif /* LIBWRAP */

I copied+pasted it from the source-file sshd.c :-)
My build now works fine with hosts.allow and hosts.deny as far as I can
tell...

It don't know why ssh-keygen would need this, whether it was the result of
an imperfection in configure (likely?), or even if my work-around is a
sensible way of repairing. Moreover, it might be a bug in tcp_wrappers, not
in OpenSSH?

Comments or suggestions are welcomed.

BTW, with releases 2.5.2p2 and 2.5.1p2 the same thing happened. Older I
didn't test.


Dannis 't Hart