Syncing sshd/krb GetAFSToken change to Portable: help wanted
Darren Tucker
dtucker at zip.com.au
Thu Jan 1 16:54:15 EST 2004
Hi All.
Recently a change was merged from OpenBSD's sshd into Portable that
implements a KerberosGetAFSToken option (patchset attached).
This change causes compile errors with both MIT Kerberos and Heimdal
(errors when compiled with MIT Kerberos below).
I've figured out that the functions called in the new code are in
Heimdal's libkafs, so adding -lkafs to the start for the Heimdal CFLAGS
in configure.ac makes it compile. Presumably the equivalent code for
MIT Kerberos needs to be written? Does it even have an equivalent, or
can the new block just be wrapped inside an #ifdef HEIMDAL?
Since I know approximately zero about Kerberos, any assistance would be
appreciated.
Thanks,
-Daz.
gcc -o sshd [snip objs] -L. -Lopenbsd-compat/ -L/usr/kerberos/lib -lssh
-lopenbsd-compat -lwrap -lresolv -lskey -lutil -lz -lnsl -lcrypto
-lcrypt -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err
session.o: In function `do_child´:
/home/builder/gate/openssh-tinderbox/session.c:1427: undefined reference
to `k_hasafs´
/home/builder/gate/openssh-tinderbox/session.c:1433: undefined reference
to `k_setpag´
/home/builder/gate/openssh-tinderbox/session.c:1435: undefined reference
to `k_afs_cell_of_file´
/home/builder/gate/openssh-tinderbox/session.c:1436: undefined reference
to `krb5_afslog´
/home/builder/gate/openssh-tinderbox/session.c:1439: undefined reference
to `krb5_afslog_home´
collect2: ld returned 1 exit status
--
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69
Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: openssh-kerberosafstoken.patch
Url: http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20040101/35e4c604/attachment.ksh
More information about the openssh-unix-dev
mailing list