Syncing sshd/krb GetAFSToken change to Portable: help wanted

Darren Tucker dtucker at
Thu Jan 1 16:54:15 EST 2004

Hi All.

	Recently a change was merged from OpenBSD's sshd into Portable that 
implements a KerberosGetAFSToken option (patchset attached).

	This change causes compile errors with both MIT Kerberos and Heimdal 
(errors when compiled with MIT Kerberos below).

	I've figured out that the functions called in the new code are in 
Heimdal's libkafs, so adding -lkafs to the start for the Heimdal CFLAGS 
in makes it compile.  Presumably the equivalent code for 
MIT Kerberos needs to be written?  Does it even have an equivalent, or 
can the new block just be wrapped inside an #ifdef HEIMDAL?

	Since I know approximately zero about Kerberos, any assistance would be 


gcc -o sshd [snip objs] -L. -Lopenbsd-compat/  -L/usr/kerberos/lib -lssh
-lopenbsd-compat -lwrap  -lresolv -lskey -lutil -lz -lnsl  -lcrypto
-lcrypt -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err
session.o: In function `do_child´:
/home/builder/gate/openssh-tinderbox/session.c:1427: undefined reference
to `k_hasafs´
/home/builder/gate/openssh-tinderbox/session.c:1433: undefined reference
to `k_setpag´
/home/builder/gate/openssh-tinderbox/session.c:1435: undefined reference
to `k_afs_cell_of_file´
/home/builder/gate/openssh-tinderbox/session.c:1436: undefined reference
to `krb5_afslog´
/home/builder/gate/openssh-tinderbox/session.c:1439: undefined reference
to `krb5_afslog_home´
collect2: ld returned 1 exit status

Darren Tucker (dtucker at
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
       Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: openssh-kerberosafstoken.patch

More information about the openssh-unix-dev mailing list