Syncing sshd/krb GetAFSToken change to Portable: help wanted

Darren Tucker dtucker at zip.com.au
Thu Jan 1 16:54:15 EST 2004


Hi All.

	Recently a change was merged from OpenBSD's sshd into Portable that 
implements a KerberosGetAFSToken option (patchset attached).

	This change causes compile errors with both MIT Kerberos and Heimdal 
(errors when compiled with MIT Kerberos below).

	I've figured out that the functions called in the new code are in 
Heimdal's libkafs, so adding -lkafs to the start for the Heimdal CFLAGS 
in configure.ac makes it compile.  Presumably the equivalent code for 
MIT Kerberos needs to be written?  Does it even have an equivalent, or 
can the new block just be wrapped inside an #ifdef HEIMDAL?

	Since I know approximately zero about Kerberos, any assistance would be 
appreciated.

	Thanks,
		-Daz.

gcc -o sshd [snip objs] -L. -Lopenbsd-compat/  -L/usr/kerberos/lib -lssh
-lopenbsd-compat -lwrap  -lresolv -lskey -lutil -lz -lnsl  -lcrypto
-lcrypt -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err
session.o: In function `do_child´:
/home/builder/gate/openssh-tinderbox/session.c:1427: undefined reference
to `k_hasafs´
/home/builder/gate/openssh-tinderbox/session.c:1433: undefined reference
to `k_setpag´
/home/builder/gate/openssh-tinderbox/session.c:1435: undefined reference
to `k_afs_cell_of_file´
/home/builder/gate/openssh-tinderbox/session.c:1436: undefined reference
to `krb5_afslog´
/home/builder/gate/openssh-tinderbox/session.c:1439: undefined reference
to `krb5_afslog_home´
collect2: ld returned 1 exit status

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
       Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.


-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: openssh-kerberosafstoken.patch
Url: http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20040101/35e4c604/attachment.ksh 


More information about the openssh-unix-dev mailing list