gssapi not enabled

Ted Creedon tcreedon at easystreet.net
Sat Apr 4 11:15:53 EST 2009


It looks like its all  there..


./configure --with-ldflags="-L/usr/lib64" --with-cflags="-ggdb3" --prefix=/
--exec-prefix=/usr --libdir=/usr/lib64 --datadir=/usr --sysconfdir=/etc/ \
--with-ssl-engine --with-pam --with-rand-helper --with-kerberos5
--with-md5-passwords --with-libedit=/usr/lib64  --with-tcp-wrappers \
--disable-strip

checking for gss_init_sec_context in -lgssapi_krb5... yes
checking gssapi.h usability... yes
checking gssapi.h presence... yes
checking for gssapi.h... yes
checking gssapi_krb5.h usability... no
checking gssapi_krb5.h presence... no
checking for gssapi_krb5.h... no
checking for gssapi.h... (cached) yes
checking gssapi/gssapi.h usability... yes
checking gssapi/gssapi.h presence... yes
checking for gssapi/gssapi.h... yes
checking for gssapi_krb5.h... (cached) no
checking gssapi/gssapi_krb5.h usability... yes
checking gssapi/gssapi_krb5.h presence... yes
checking for gssapi/gssapi_krb5.h... yes
checking gssapi_generic.h usability... no
checking gssapi_generic.h presence... no
checking for gssapi_generic.h... no
checking gssapi/gssapi_generic.h usability... yes
checking gssapi/gssapi_generic.h presence... yes
checking for gssapi/gssapi_generic.h... yes
cOpenSSH has been configured with the following options:
                     User binaries: /usr/bin
                   System binaries: /usr/sbin
               Configuration files: /etc/
                   Askpass program: /usr/libexec/ssh-askpass
                      Manual pages: //share/man/manX
                          PID file: /var/run
  Privilege separation chroot path: /var/empty
            sshd default user PATH: /usr/bin:/bin:/usr/sbin:/sbin
                    Manpage format: doc
                       PAM support: yes
                   OSF SIA support: no
                 KerberosV support: yes
                   SELinux support: no
                 Smartcard support: no
                     S/KEY support: no
              TCP Wrappers support: yes
              MD5 password support: yes
                   libedit support: yes
  Solaris process contract support: no
       IP address in $DISPLAY hack: no
           Translate v4 in v6 hack: yes
                  BSD Auth support: no
              Random number source: ssh-rand-helper
     ssh-rand-helper collects from: Command hashing (timeout 200)

              Host: x86_64-unknown-linux-gnu
          Compiler: gcc
    Compiler flags: -g -O2 -Wall -Wpointer-arith -Wuninitialized
-Wsign-compare -Wno-pointer-sign -Wformat-security -fno-builtin-memset
-fstack-protector-all -std=gnu99 -ggdb3
Preprocessor flags:  -I/usr/lib64/include -I/usr/local/include
      Linker flags: -L/usr/lib64/lib  -fstack-protector-all -L/usr/lib64
-L/usr/local/lib
         Libraries: -lcrypto -lutil -lz -lnsl  -lcrypt -lresolv -lresolv
-lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err
         +for sshd:  -lwrap -lpam -ldl




On Fri, Apr 3, 2009 at 4:57 PM, <Jason.C.Burns at wellsfargo.com> wrote:

> Perhaps you are missing the '--with-kerberos5=<path to krb5 or gssapi
> lib>' compile time option?
>
> Jason Burns
> Information Security Technology
> Cryptography Services -> Secure Communications and Data Encryption
> UnixSecure Lead Engineer
>
> > -----Original Message-----
> > From:
> openssh-unix-dev-bounces+jason.c.burns=wellsfargo.com at mindrot.org
> > [mailto:openssh-unix-dev-
> > bounces+jason.c.burns=wellsfargo.com at mindrot.org] On Behalf Of Ted
> > Creedon
> > Sent: Friday, April 03, 2009 3:56 PM
> > To: openssh-unix-dev at mindrot.org
> > Subject: gssapi not enabled
> >
> > I'm trying to get gssapi-with-mic to work but the enabled field in the
> > method struct is disabled I.e.
> >
> > The gssapi-with-mic enable field s not enabled in in the *method
> > struct; it
> > fails at:
> >
> > if (authmethod_is_enabled(method))
> >
> > in the authmethod_is_enabled(method) function call
> >
> > using ddd , OpenSSH 5.2.p1, Linux 2.6.22.5-31 (SuSE 10.2)
> >
> > Questiion - what enables gssapi-with-mic?
> >
> > Thanks
> >
> > tedc
> > _______________________________________________
> > openssh-unix-dev mailing list
> > openssh-unix-dev at mindrot.org
> > https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
>
>


More information about the openssh-unix-dev mailing list