openssh and kerb 1.4.1 not so happy together

[Douglas E. Engert]

Phil Dibowitz wrote:

> On Thu, Jul 07, 2005 at 01:02:05PM -0700, Phil Dibowitz wrote:
> 
>>On Thu, Jul 07, 2005 at 10:20:29AM +0100, sxw at inf.ed.ac.uk wrote:
>>
>>>On Wed, 6 Jul 2005, Phil Dibowitz wrote:
>>>
>>>
>>>>Turns out that makes the error clear:
>>>>
>>>>ld.so.1: /usr/lsd/openssh/default/sbin/sshd: fatal: relocation error: file
>>>>/usr/lsd/openssh/default/sbin/sshd: symbol krb5_init_ets: referenced symbol
>>>>not found
>>>>Killed
>>>>
>>>>Of course, that's not the recompiled version.... but the recompiled version
>>>>has the same external symptoms. Hmmm.
>>>
>>>You need to do a make distclean, and then re-run ./configure. I would 
>>>imagine that the soname didn't change because krb5_init_ets isn't part of 
>>>MIT's officially exported API.
>>>
>>>We should probably just pull the call to krb5_init_ets - its been years 
>>>since any version of Kerberos required it.
>>
>>Tried that, same symptom, different problem. the sshd -ddd gives:
>>
>>Assertion failed: i->did_run != 0, file
>>../../../../src/lib/krb5/../../include/k5-pla
>>tform.h, line 232
> 
> 
> OK, well this isn't entirely accurate.
> 
> The full recompile with make distclean fixes Solaris 8 and Solaris 9 machines.
> I only get the above on Solaris 2.6.

Since Solaris 2.6 is old, you may want to compile krb5-1.4.1. On Solaris 7
we compile with --disable-thread-support and CPPFLAGS = -D_TS_ERRNO

We also compiled OpenSSH-4.1 with -DUNSUPPORTED_POSIX_THREADS_HACK

krb5-1.4.1 with OpenSSH-4.1 works on Solaris, 7, 8, 9 and 10.
(10 is still under testing, and we are trying to use the Sun version.)


> 
> Further, I get it in other apps as well.
> 
> Which leads me to believe it's a kerb issue. I'll drop them an email. Thanks.
> 
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> openssh-unix-dev mailing list
> openssh-unix-dev at mindrot.org
> http://www.mindrot.org/mailman/listinfo/openssh-unix-dev

-- 

  Douglas E. Engert  <DEEngert at anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444