Building openssh-3.5p1 with new DES functions

Martin MOKREJŠ mmokrejs at natur.cuni.cz
Thu Jan 9 19:43:25 EST 2003


Hi,
  I've installed openssl-0.9.7 and now am testing current openssh-cvs.
The kerberosIV installation has it's own libdes.a. I'm quite please
openssh built successfully, congratulations! Unfortunately, kerberos
autentication is not tried at all. As far as I remeber, Ja Iven who wrote
some patch, which as he said got into 3.5p1 also removed the ifdef's that
--with-privsep no longer disable kerberos. Was this reverted recently?

  As a feedback, I'd like to send you the warning I got, I think few of
them might be really important:


OpenSSH has been configured with the following options:
                     User binaries: /usr/local/bin
                   System binaries: /usr/local/sbin
               Configuration files: /usr/local/etc
                   Askpass program: /usr/local/libexec/ssh-askpass
                      Manual pages: /usr/local/man/manX
                          PID file: /var/run
  Privilege separation chroot path: /var/empty
            sshd default user PATH: /usr/bin:/bin:/sbin:/usr/local/bin:/usr/local/sbin:/software/@sys/usr/bin:/software/@sys/usr/sbin:/usr/bin/X11:/usr/afs/bin:/usr/athena/bin:/usr/local/openssl/bin:/usr/opt/svr4/bin:/usr/opt/svr4/sbin
                    Manpage format: man
                       PAM support: no
                KerberosIV support: yes
                 KerberosV support: no
                 Smartcard support: no
                       AFS support: yes
                     S/KEY support: no
              TCP Wrappers support: yes
              MD5 password support: no
       IP address in $DISPLAY hack: no
          Use IPv4 by default hack: no
           Translate v4 in v6 hack: no
                  BSD Auth support: no
              Random number source: OpenSSL internal ONLY

              Host: alphaev67-dec-osf5.1
          Compiler: cc
    Compiler flags: -O2 -arch ev6
Preprocessor flags: -I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2 -I/usr/athena/include -I/usr/afsws/include
      Linker flags: -L/usr/local/openssl/lib -Lyes -L/usr/local/lib -L/software/@sys/usr/lib -L/usr/local/openssl/lib -L/usr/lib -L/usr/athena/lib -L/usr/afsws/lib
         Libraries: -lwrap  -lkafs -lresolv -ldes -lkrb -lz -L/usr/local/lib -L/software/@sys/usr/lib -L/usr/local/openssl/lib -L/usr/lib -lsecurity -ldb -lm -laud -lcrypto -ldes

bash-2.05b# ls -la /usr/athena/lib
total 1593
drwxr-xr-x    2 root     system       8192 Dec  8 04:03 .
drwxr-xr-x    9 root     system       8192 Dec  8 04:03 ..
-rw-r--r--    1 root     system      17312 Dec  8 04:03 libacl.a
-rwxr-xr-x    1 root     system        781 Dec  8 04:03 libacl.la
-rw-r--r--    1 root     system       9924 Dec  8 04:03 libcom_err.a
-rwxr-xr-x    1 root     system        741 Dec  8 04:03 libcom_err.la
-rw-r--r--    1 root     system     140506 Dec  8 04:03 libdes.a
-rwxr-xr-x    1 root     system        729 Dec  8 04:03 libdes.la
-rw-r--r--    1 root     system      67610 Dec  8 04:03 libeditline.a
-rwxr-xr-x    1 root     system        744 Dec  8 04:03 libeditline.la
-rw-r--r--    1 root     system      48882 Dec  8 04:03 libkadm.a
-rwxr-xr-x    1 root     system        815 Dec  8 04:03 libkadm.la
-rw-r--r--    1 root     system      47690 Dec  8 04:03 libkafs.a
-rwxr-xr-x    1 root     system        817 Dec  8 04:03 libkafs.la
-rw-r--r--    1 root     system      55244 Dec  8 04:03 libkdb.a
-rwxr-xr-x    1 root     system        782 Dec  8 04:03 libkdb.la
-rw-r--r--    1 root     system     368800 Dec  8 04:03 libkrb.a
-rwxr-xr-x    1 root     system        755 Dec  8 04:03 libkrb.la
-rw-r--r--    1 root     system     209950 Dec  8 04:03 libotp.a
-rwxr-xr-x    1 root     system        788 Dec  8 04:03 libotp.la
-rw-r--r--    1 root     system     276378 Dec  8 04:03 libroken.a
-rwxr-xr-x    1 root     system        741 Dec  8 04:03 libroken.la
-rw-r--r--    1 root     system     260128 Dec  8 04:03 libsia_krb4.so
-rw-r--r--    1 root     system      31926 Dec  8 04:03 libsl.a
-rwxr-xr-x    1 root     system        767 Dec  8 04:03 libsl.la
-rw-r--r--    1 root     system      38928 Dec  8 04:03 libss.a
-rwxr-xr-x    1 root     system        797 Dec  8 04:03 libss.la
bash-2.05b# make
[...]
cc -O2 -arch ev6 -I. -I.. -I. -I./.. -I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2 -I/usr/athena/include -I/usr/afsws/include -DHAVE_CONFIG_H -c bsd-cray.c
cc: Warning: bsd-cray.c, line 797: Source file does not contain any declarations. (emptyfile)
#endif
------^
[...]
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2 -I/usr/athena/include -I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\" -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\" -D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H -c packet.c
cc: Warning: packet.c, line 142: In this statement, the referenced type of the pointer value """" is "char", which is not compatible with "const unsigned char" because they differ by signed/unsigned attribute. (ptrmismatch1)
        cipher_init(&send_context, none, "", 0, NULL, 0, CIPHER_ENCRYPT);
-----------------------------------------^
cc: Warning: packet.c, line 143: In this statement, the referenced type of the pointer value """" is "char", which is not compatible with "const unsigned char" because they differ by signed/unsigned attribute. (ptrmismatch1)
        cipher_init(&receive_context, none, "", 0, NULL, 0, CIPHER_DECRYPT);
--------------------------------------------^
[...]
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2 -I/usr/athena/include -I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\" -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\" -D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H -c monitor_wrap.c
cc: Info: /usr/athena/include/krb-protos.h, line 175: The type "struct des_ks_struct" has been declared within and is limited to a function prototype scope.  It will not be compatible with an identical type declared in another scope.  This might not be what you intended. (protoscope)
krb_check_auth __P((
---------------^
cc: Info: /usr/athena/include/krb-protos.h, line 456: The type "struct des_ks_struct" has been declared within and is limited to a function prototype scope.  It will not be compatible with an identical type declared in another scope.  This might not be what you intended. (protoscope)
krb_mk_priv __P((
------------^
cc: Info: /usr/athena/include/krb-protos.h, line 540: The type "struct des_ks_struct" has been declared within and is limited to a function prototype scope.  It will not be compatible with an identical type declared in another scope.  This might not be what you intended. (protoscope)
krb_rd_priv __P((
------------^
cc: Info: /usr/athena/include/krb-protos.h, line 576: The type "struct des_ks_struct" has been declared within and is limited to a function prototype scope.  It will not be compatible with an identical type declared in another scope.  This might not be what you intended. (protoscope)
krb_recvauth __P((
-------------^
cc: Info: /usr/athena/include/krb-protos.h, line 590: The type "struct des_ks_struct" has been declared within and is limited to a function prototype scope.  It will not be compatible with an identical type declared in another scope.  This might not be what you intended. (protoscope)
krb_sendauth __P((
-------------^
[...]
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2 -I/usr/athena/include -I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\" -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\" -D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H -c sshconnect1.c
cc: Warning: /usr/local/openssl/include/openssl/des.h, line 104: The redefinition of the macro "DES_KEY_SZ" conflicts with a current definition because the replacement lists differ.  The redefinition is now in effect. (macroredef)
#define DES_KEY_SZ      (sizeof(DES_cblock))
--------------------------------^
cc: Warning: /usr/local/openssl/include/openssl/des.h, line 105: The redefinition of the macro "DES_SCHEDULE_SZ" conflicts with a current definition because the replacement lists differ.  The redefinition is now in effect. (macroredef)
#define DES_SCHEDULE_SZ (sizeof(DES_key_schedule))
--------------------------------^
[...]
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2 -I/usr/athena/include -I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\" -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\" -D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H -c sshd.c
cc: Info: /usr/athena/include/krb-protos.h, line 175: The type "struct des_ks_struct" has been declared within and is limited to a function prototype scope.  It will not be compatible with an identical type declared in another scope.  This might not be what you intended. (protoscope)
krb_check_auth __P((
---------------^
cc: Info: /usr/athena/include/krb-protos.h, line 456: The type "struct des_ks_struct" has been declared within and is limited to a function prototype scope.  It will not be compatible with an identical type declared in another scope.  This might not be what you intended. (protoscope)
krb_mk_priv __P((
------------^
cc: Info: /usr/athena/include/krb-protos.h, line 540: The type "struct des_ks_struct" has been declared within and is limited to a function prototype scope.  It will not be compatible with an identical type declared in another scope.  This might not be what you intended. (protoscope)
krb_rd_priv __P((
------------^
cc: Info: /usr/athena/include/krb-protos.h, line 576: The type "struct des_ks_struct" has been declared within and is limited to a function prototype scope.  It will not be compatible with an identical type declared in another scope.  This might not be what you intended. (protoscope)
krb_recvauth __P((
-------------^
cc: Info: /usr/athena/include/krb-protos.h, line 590: The type "struct des_ks_struct" has been declared within and is limited to a function prototype scope.  It will not be compatible with an identical type declared in another scope.  This might not be what you intended. (protoscope)
krb_sendauth __P((
-------------^
[...]
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2 -I/usr/athena/include -I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\" -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\" -D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H -c auth-rhosts.c
cc: Warning: auth-rhosts.c, line 116: In this statement, the referenced type of the pointer value "hostname" is const, but the referenced type of the target of this assignment is not. (notconstqual)
                        if (!innetgr(host + 1, hostname, NULL, NULL) &&
-----------------------------------------------^
cc: Warning: auth-rhosts.c, line 117: In this statement, the referenced type of the pointer value "ipaddr" is const, but the referenced type of the target of this assignment is not. (notconstqual)
                            !innetgr(host + 1, ipaddr, NULL, NULL))
-----------------------------------------------^
cc: Warning: auth-rhosts.c, line 124: In this statement, the referenced type of the pointer value "client_user" is const, but the referenced type of the target of this assignment is not. (notconstqual)
                        if (!innetgr(user + 1, NULL, client_user, NULL))
-----------------------------------------------------^
[...]
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2 -I/usr/athena/include -I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\" -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\" -D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H -c auth-sia.c
cc: Warning: auth-sia.c, line 63: In this statement, the referenced type of the pointer value "host" is const, but the referenced type of the target of this assignment is not. (notconstqual)
        if (sia_ses_init(&ent, saved_argc, saved_argv, host, user, NULL, 0,
-------------------------------------------------------^
cc: Warning: auth-sia.c, line 88: In this statement, the referenced type of the pointer value "host" is const, but the referenced type of the target of this assignment is not. (notconstqual)
        if (sia_ses_init(&ent, saved_argc, saved_argv, host, user, tty, 0,
-------------------------------------------------------^
[...]
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2 -I/usr/athena/include -I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\" -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\" -D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H -c servconf.c
cc: Warning: /usr/local/openssl/include/openssl/des.h, line 104: The redefinition of the macro "DES_KEY_SZ" conflicts with a current definition because the replacement lists differ.  The redefinition is now in effect. (macroredef)
#define DES_KEY_SZ      (sizeof(DES_cblock))
--------------------------------^
cc: Warning: /usr/local/openssl/include/openssl/des.h, line 105: The redefinition of the macro "DES_SCHEDULE_SZ" conflicts with a current definition because the replacement lists differ.  The redefinition is now in effect. (macroredef)
#define DES_SCHEDULE_SZ (sizeof(DES_key_schedule))
--------------------------------^
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2 -I/usr/athena/include -I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\" -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\" -D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H -c serverloop.c
cc: Warning: /usr/local/openssl/include/openssl/des.h, line 104: The redefinition of the macro "DES_KEY_SZ" conflicts with a current definition because the replacement lists differ.  The redefinition is now in effect. (macroredef)
#define DES_KEY_SZ      (sizeof(DES_cblock))
--------------------------------^
cc: Warning: /usr/local/openssl/include/openssl/des.h, line 105: The redefinition of the macro "DES_SCHEDULE_SZ" conflicts with a current definition because the replacement lists differ.  The redefinition is now in effect. (macroredef)
#define DES_SCHEDULE_SZ (sizeof(DES_key_schedule))
--------------------------------^
[...]
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2 -I/usr/athena/include -I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\" -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\" -D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H -c monitor.c
cc: Warning: /usr/local/openssl/include/openssl/des.h, line 104: The redefinition of the macro "DES_KEY_SZ" conflicts with a current definition because the replacement lists differ.  The redefinition is now in effect. (macroredef)
#define DES_KEY_SZ      (sizeof(DES_cblock))
--------------------------------^
cc: Warning: /usr/local/openssl/include/openssl/des.h, line 105: The redefinition of the macro "DES_SCHEDULE_SZ" conflicts with a current definition because the replacement lists differ.  The redefinition is now in effect. (macroredef)
#define DES_SCHEDULE_SZ (sizeof(DES_key_schedule))
--------------------------------^
cc: Warning: monitor.c, line 1377: Non-void function "mm_answer_term" does not contain a return statement. (missingreturn)
int
^
[...]
cc -o ssh-keygen ssh-keygen.o -L. -Lopenbsd-compat/ -L/usr/local/openssl/lib -Lyes -L/usr/local/lib -L/software/@sys/usr/lib -L/usr/local/openssl/lib -L/usr/lib -L/usr/athena/lib -L/usr/afsws/lib -lssh -lopenbsd-compat -lkafs -lresolv -ldes -lkrb -lz -L/usr/local/lib -L/software/@sys/usr/lib -L/usr/local/openssl/lib -L/usr/lib -lsecurity -ldb -lm -laud -lcrypto -ldes
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2 -I/usr/athena/include -I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\" -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\" -D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H -c ssh-keyscan.c
cc: Warning: ssh-keyscan.c, line 324: Non-void function "hostjump" does not contain a return statement. (missingreturn)
static int
^
[...]


---------------------------------------------------------------
I tried to configure openssh without privsep, but then configure failed to
detect kerberos!:

[...]
checking whether getopt has optreset support... no
checking if libc defines sys_errlist... yes
checking if libc defines sys_nerr... yes
configure: WARNING: AFS requires Kerberos IV support, build may fail
checking for "/dev/ptmx"... yes
[...]

OpenSSH has been configured with the following options:
                     User binaries: /usr/local/bin
                   System binaries: /usr/local/sbin
               Configuration files: /usr/local/etc
                   Askpass program: /usr/local/libexec/ssh-askpass
                      Manual pages: /usr/local/man/manX
                          PID file: /var/run
  Privilege separation chroot path: /var/empty
            sshd default user PATH: /usr/bin:/bin:/sbin:/usr/local/bin:/usr/local/sbin:/software/@sys/usr/bin:/software/@sys/usr/sbin:/usr/bin/X11:/usr/afs/bin:/usr/athena/bin:/usr/local/openssl/bin:/usr/opt/svr4/bin:/usr/opt/svr4/sbin
                    Manpage format: man
                       PAM support: no
                KerberosIV support: no
                 KerberosV support: no
                 Smartcard support: no
                       AFS support: yes
                     S/KEY support: no
              TCP Wrappers support: yes
              MD5 password support: no
       IP address in $DISPLAY hack: no
          Use IPv4 by default hack: no
           Translate v4 in v6 hack: no
                  BSD Auth support: no
              Random number source: OpenSSL internal ONLY

              Host: alphaev67-dec-osf5.1
          Compiler: cc
    Compiler flags: -O2 -arch ev6
Preprocessor flags: -I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2 -I/usr/afsws/include
      Linker flags: -L/usr/local/openssl/lib -Lyes -L/usr/local/lib -L/software/@sys/usr/lib -L/usr/local/openssl/lib -L/usr/lib -L/usr/afsws/lib
         Libraries: -lwrap  -lkafs -lz -L/usr/local/lib -L/software/@sys/usr/lib -L/usr/local/openssl/lib -L/usr/lib -lsecurity -ldb -lm -laud -lcrypto


config.log says:
configure:15304: checking if libc defines sys_errlist
configure:15327: cc -o conftest -O2 -arch ev6 -I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include -I/usr/local/include
-I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2 -L/usr/local/openssl/lib -Lyes -L/usr/local/lib -L/software/@sy
s/usr/lib -L/usr/local/openssl/lib -L/usr/lib conftest.c -lz -L/usr/local/lib -L/software/@sys/usr/lib -L/usr/local/openssl/lib -L/
usr/lib -lsecurity -ldb -lm -laud -lcrypto >&5
configure:15330: $? = 0
configure:15333: test -s conftest
configure:15336: $? = 0
configure:15349: result: yes
configure:15359: checking if libc defines sys_nerr
configure:15382: cc -o conftest -O2 -arch ev6 -I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include -I/usr/local/include
-I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2 -L/usr/local/openssl/lib -Lyes -L/usr/local/lib -L/software/@sy
s/usr/lib -L/usr/local/openssl/lib -L/usr/lib conftest.c -lz -L/usr/local/lib -L/software/@sys/usr/lib -L/usr/local/openssl/lib -L/
usr/lib -lsecurity -ldb -lm -laud -lcrypto >&5
configure:15385: $? = 0
configure:15388: test -s conftest
configure:15391: $? = 0
configure:15404: result: yes
configure:16398: WARNING: AFS requires Kerberos IV support, build may fail
configure:16518: checking for "/dev/ptmx"
configure:16533: result: yes
configure:16548: checking for "/dev/ptc"
configure:16563: result: no
configure:16602: checking for nroff
configure:16620: found /usr/bin/nroff
configure:16632: result: /usr/bin/nroff


I've decided to compile anyway and specify kerberos headers and libs manually on each command-line after the build fails because of missing kerberos headers or libs. Unfortunately, in thisrd cases it did not help much:

cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include -I/usr/athena/include -I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\" -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\" -D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\" -D_PATH_SSH_PIDDIR=\"/var/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\" -DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H -c sshconnect1.c
cc: Error: radix.h, line 27: Error parsing parameter list. Found "*" when expecting one of: ",", ")". (notexpecting)
int      creds_to_radix(CREDENTIALS *, u_char *, size_t);
------------------------------------^
cc: Error: radix.h, line 28: Ill-formed parameter type list. (parmtyplist)
int      radix_to_creds(const char *, CREDENTIALS *);
--------------------------------------^
cc: Error: sshconnect1.c, line 786: In this declaration, "CREDENTIALS" must specify a type. (badparsedecl)
        CREDENTIALS creds;
--------^
cc: Error: sshconnect1.c, line 736: In this statement, "CREDENTIALS" is not declared. (undeclared)
        CREDENTIALS *creds;
--------^
cc: Error: sshconnect1.c, line 736: In this statement, "creds" is not declared. (undeclared)
        CREDENTIALS *creds;
---------------------^
cc: Error: sshconnect1.c, line 738: In the declaration of "pname", "ANAME_SZ" is not declared. (undeclared)
        char buffer[4096], pname[ANAME_SZ], pinst[INST_SZ], prealm[REALM_SZ];
---------------------------------^
cc: Error: sshconnect1.c, line 738: In the declaration of "pinst", "INST_SZ" is not declared. (undeclared)
        char buffer[4096], pname[ANAME_SZ], pinst[INST_SZ], prealm[REALM_SZ];
--------------------------------------------------^
cc: Error: sshconnect1.c, line 738: In the declaration of "prealm", "REALM_SZ" is not declared. (undeclared)
        char buffer[4096], pname[ANAME_SZ], pinst[INST_SZ], prealm[REALM_SZ];
-------------------------------------------------------------------^
cc: Warning: sshconnect1.c, line 742: In this statement, "tkt_string(...)" of type "int", is being converted to "pointer to const char". (cvtdiftypes)
        if (stat(tkt_string(), &st) < 0)
-----------------^
cc: Error: sshconnect1.c, line 747: In this statement, "TKT_FILE" is not declared. (undeclared)
        problem = krb_get_tf_fullname(TKT_FILE, pname, pinst, prealm);
--------------------------------------^
cc: Error: sshconnect1.c, line 756: In this statement, "RD_AP_EXP" is not declared. (undeclared)
                problem = RD_AP_EXP;
--------------------------^
cc: Error: sshconnect1.c, line 779: In this statement, "krb_err_txt" is not declared. (undeclared)
        debug("Kerberos v4 TGT passing failed: %s", krb_err_txt[problem]);
----------------------------------------------------^
cc: Error: sshconnect1.c, line 804: In this statement, "creds" is not declared. (undeclared)
                memcpy(&creds.ticket_st.length, p, sizeof(u_int));
------------------------^
cc: Error: sshconnect1.c, line 805: In this statement, "MAX_KTXT_LEN" is not declared. (undeclared)
                if (creds.ticket_st.length > MAX_KTXT_LEN)
---------------------------------------------^
cc: Error: sshconnect1.c, line 824: In this statement, "REALM_SZ" is not declared. (undeclared)
                strlcpy(creds.realm, server_cell, REALM_SZ);
--------------------------------------------------^




Tested on Tru64 Unix 5.1A, kerberos-1.2.1 configured with --without-openssl option.

-- 
Martin Mokrejs <mmokrejs at natur.cuni.cz>, <m.mokrejs at gsf.de>
PGP5.0i key is at http://www.natur.cuni.cz/~mmokrejs
MIPS / Institute for Bioinformatics <http://mips.gsf.de>
GSF - National Research Center for Environment and Health
Ingolstaedter Landstrasse 1, D-85764 Neuherberg, Germany
tel.: +49-89-3187 3683 , fax: +49-89-3187 3585



More information about the openssh-unix-dev mailing list