Compiling openssh-3.9p1 Without Kerberos

Scott Dudley scott at telesoft.com
Wed Jan 12 11:36:42 EST 2005


I'm trying to compile openssh-3.9p1 for an embedded Linux distro without 
kerberos support.  I pass the flag --without-kerberos5 to configure and 
the script output indicates that I've chosen to not link against the 
kerberos libs:

OpenSSH has been configured with the following options:
                     User binaries: /usr/local/bin
                   System binaries: /usr/local/sbin
               Configuration files: /usr/local/etc
                   Askpass program: /usr/local/libexec/ssh-askpass
                      Manual pages: /usr/local/man/manX
                          PID file: /var/run
  Privilege separation chroot path: /var/empty
            sshd default user PATH: 
/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin
                    Manpage format: doc
                       PAM support: no
                 KerberosV support: no
                 Smartcard support: no
                     S/KEY support: no
              TCP Wrappers support: yes
              MD5 password support: no
       IP address in $DISPLAY hack: no
           Translate v4 in v6 hack: yes
                  BSD Auth support: no
              Random number source: OpenSSL internal ONLY

              Host: i686-pc-linux-gnu
          Compiler: gcc
    Compiler flags: -g -O2 -Wall -Wpointer-arith -Wno-uninitialized
Preprocessor flags:
      Linker flags:
         Libraries: -lwrap  -lcrypto -lutil -lz -lnsl  -lcrypt

However, when built, it is linked against the kerberos libs:

scottspc: /usr/local/src/openssh-3.9p1 # ldd ./sftp-server
        libcrypto.so.4 => /lib/libcrypto.so.4 (0x4002e000)
        libutil.so.1 => /lib/libutil.so.1 (0x4011f000)
        libz.so.1 => /usr/lib/libz.so.1 (0x40122000)
        libnsl.so.1 => /lib/libnsl.so.1 (0x40130000)
        libcrypt.so.1 => /lib/libcrypt.so.1 (0x40145000)
        libc.so.6 => /lib/i686/libc.so.6 (0x40172000)
        libgssapi_krb5.so.2 => /usr/kerberos/lib/libgssapi_krb5.so.2 
(0x402ac000)
        libkrb5.so.3 => /usr/kerberos/lib/libkrb5.so.3 (0x402bf000)
        libcom_err.so.3 => /usr/kerberos/lib/libcom_err.so.3 (0x4031d000)
        libk5crypto.so.3 => /usr/kerberos/lib/libk5crypto.so.3 (0x4031f000)
        libresolv.so.2 => /lib/libresolv.so.2 (0x4032f000)
        libdl.so.2 => /lib/libdl.so.2 (0x40341000)
        /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)

How do I disable kerberos support?

Thanks.

-- 

Regards,

Scott Dudley




More information about the openssh-unix-dev mailing list