Compiling openssh-3.9p1 Without Kerberos

[Darren Tucker]

Scott Dudley wrote:
> I'm trying to compile openssh-3.9p1 for an embedded Linux distro without 
> kerberos support.  I pass the flag --without-kerberos5 to configure and 
> the script output indicates that I've chosen to not link against the 
> kerberos libs:
[...]
> However, when built, it is linked against the kerberos libs:

Your system libcrypto is probably linked against the kerberos libs. 
This is from a redhat9 box:

$ ldd /usr/lib/libcrypto.so |grep libkrb
         libkrb5.so.3 => /usr/kerberos/lib/libkrb5.so.3 (0x40120000)

> How do I disable kerberos support?

Download the OpenSSL source, build it, put it somewhere other than the 
system libcrypto (the default /usr/local/ssl is fine) then point 
OpenSSH's configure at it by with "--with-ssl-dir=/path/to/ssl"

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
     Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.