Pending OpenSSH release: contains Kerberos/GSSAPI changes

Darren Tucker dtucker at
Fri Jan 23 12:13:27 EST 2004

Douglas E. Engert wrote:
> Since kafs.h is not defined in MIT Kerberos, I change the #ifdef
> to match the #ifdef used with the code that needed kafs.h.
> --- ,session.c  Tue Jan 20 18:00:46 2004
> +++ session.c   Thu Jan 22 08:40:34 2004
> @@ -58,7 +58,7 @@
>  #include "session.h"
>  #include "monitor_wrap.h"
> -#ifdef KRB5
> +#if defined(HEIMDAL) && defined(AFS)
>  #include <kafs.h>
>  #endif

Thanks for the testing, and that's a good point.  Currently the other 
code in session.c has "#if defined(KRB5) && defined(AFS)" (it was 
changed yesterday, and was intended for if someone carried out the 
threat of porting libkafs to MIT krb5).

Does anything else define "AFS" in your includes?  Should we change the 
"AFS" symbol in OpenSSH to "HAVE_AFS" or "USE_AFS" or something?

Darren Tucker (dtucker at
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

More information about the openssh-unix-dev mailing list