"../openbsd-compat/port-aix.h", line 92.44: 1506-046 (S) Syntax error. openssh-5.3p1 on aix 5.3

phoebus phoebus frphoebus at yahoo.fr
Thu Feb 25 03:38:06 EST 2010


Darren,

This is the last and final update, i received from IBM.

<quote>First of all, let me summup some of the facts:
ld: 0706-006 Cannot find or open library file: -l k5crypto
ld:open(): No such file or directory
ld: 0706-006 Cannot find or open library file: -l com_err
ld:open(): No such file or directory
With our expansion pack we dont provide this libraries as we statically link them in our code wherever its needed." 
 
So at this point, we cannot supply these files. Maybe the expansion pack team / open source team can if you really need them:
There is no support for the packages of the AIX Toolbox 
 ml
As this document states the issue needs to be reported by eMail to the following address: aixtoolbox-list at lists.sourceforge.net
 
But I like to comment on the original issue and hopefully the following is helping you to achieve what you need. You can transfer this "quite 
old" manual to current openssh / kerberos releases:
------------------------------------------------------------------------
Customer needs to just download the latest version of OpenSSH 4.1p1 from He would be required to install openssl- 0.9.7d-2 as a prereq to install this version of OpenSSH. Customer also needs to install the
latest version of kerberos 1.4.0.3(NAS package). After setting up the kerberos server and client, he needs to edit sshd_config file in
"/etc/ssh" to set "KerberosAuthentication yes". Now he's all set to useOpenSSH with kerberos.
Instead of linking the libraries directly using cc or using -l option in the Makefile, we have used "dlopen" and "dlsym" in the source code to
dynamically load the kerberos library. This way we can do away with supporting two versions of OpenSSH one with kerberos support and the
other without the support.
------------------------------------------------------------------------

I'll try to build openssh against the MIT kerberos in first step. For the second point, about using "dlopen" and "dlsym" it's an Herculean task for a system administrator which is not a C developper.

I'll kept you in touch. I think that's can be useful for any people who have same issue one days and look for in the forum archive.

Regards,
Frphoebus


________________________________
De : phoebus phoebus <frphoebus at yahoo.fr>
À : Darren Tucker <dtucker at zip.com.au>
Cc : openssh-unix-dev at mindrot.org
Envoyé le : Mar 23 Février 2010, 17 h 15 min 32 s
Objet : Re : Re : Re : Re : Re : Re : "../openbsd-compat/port-aix.h", line 92.44: 1506-046 (S) Syntax error. openssh-5.3p1 on aix 5.3

Hi Darren,

I opended a PMR to IBM support to find the libraries.

The first IBM answer was:
"There is no support for the packages of the AIX Toolbox, neither for OpenSSL not for any other package. Please refer to the following document that explicitly mentions this:                                     
                                                                           
http://www-03.ibm.com/systems/power/software/aix/linux/toolbox/altlic.html 
                                  
As this document states the issue needs to be reported by eMail to the following address: aixtoolbox-list at ists.sourceforge.net".   

After asked one more times my question because the first answer, it's not the answer of my question. Kerberos is part of the media "Expansion pack" and not "AIX Toolbox". I had a second answer:
"The libraries are not part of the regular AIX delivery.                                                                      
Please make sure the problem is reported to the eMail address I mentioned in my previous update".

I push one more time to have more information from IBM support. I'll kept you in touch.

Regards,
Thierry Bertaud




----- Message d'origine ----
De : phoebus phoebus <frphoebus at yahoo.fr>
À : Darren Tucker <dtucker at zip.com.au>
Cc : openssh-unix-dev at mindrot.org
Envoyé le : Ven 19 Février 2010, 13 h 57 min 00 s
Objet : Re : Re : Re : Re : Re : "../openbsd-compat/port-aix.h", line 92.44: 1506-046 (S) Syntax error. openssh-5.3p1 on aix 5.3

Darren,

ca06:/#  lslpp -L -b'Kerberos_5'
  Fileset                      Level  State  Type  Description (Uninstaller)
  ----------------------------------------------------------------------------
  krb5.client.rte            1.4.0.8    C     F    Network Authentication Service
                                                   Client

ca06:/# lslpp -L  krb5.*
  Fileset                      Level  State  Type  Description (Uninstaller)
  ----------------------------------------------------------------------------
  krb5.client.rte            1.4.0.8    C     F    Network Authentication Service
                                                   Client
  krb5.client.samples        1.4.0.8    C     F    Network Authentication Service
                                                   Samples
  krb5.doc.en_US.html        1.4.0.8    C     F    Network Auth Service HTML
                                                   Documentation - U.S. English
  krb5.doc.en_US.pdf         1.4.0.8    C     F    Network Auth Service PDF
                                                   Documentation - U.S. English
  krb5.msg.en_US.client.rte  1.4.0.8    C     F    Network Auth Service Client
                                                   Msgs - U.S. English
  krb5.toolkit.adt           1.4.0.8    C     F    Network Authentication Service
                                                   App. Dev. Toolkit

I don't find these library. There aren't included in the fileset kbr5.server.rte.

In attachement the listing of the filesets (filesetKbr5.txt) installed.
FYI: packages inclsdes in the AIX Expansion pack are listed in the file  ExpansionPackAix53-112008.txt (screen copy from smit).

I don't know how to find the IBM libraries and i don't sure is possible to use MIT kb5 library for the compilation in AIX platfrom.

Regards,
Frphoebus


----- Message d'origine ----
De : Darren Tucker <dtucker at zip.com.au>
À : phoebus phoebus <frphoebus at yahoo.fr>
Cc : openssh-unix-dev at mindrot.org
Envoyé le : Ven 19 Février 2010, 12 h 39 min 43 s
Objet : Re: Re : Re : Re : Re : "../openbsd-compat/port-aix.h", line 92.44: 1506-046 (S) Syntax error. openssh-5.3p1 on aix 5.3

phoebus phoebus wrote:
> Dareen,
> 
> I use openssl version: OpenSSL 0.9.7l 28 Sep 2006. Openss is from  2 rpm packages openssl-0.9.7l-2, openssl-devel-0.9.7l-2 from the Linux tool box for AIX 5.3
> 
[...]
> When i run make, i have the following erros:
> 
> include -I/usr/local/include/gssapi -DSSHDIR=\"/usr/local/etc/ssh\"  -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"  -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\"  -D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\"  -D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\"  -D_PATH_SSH_PIDDIR=\"/var/run\"  -D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\"  -DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H -c roaming_common.c
> "roaming_common.c", line 58.60: 1506-280 (W) Function argument assignment between types "unsigned long*" and "int*" is not allowed.
> "roaming_common.c", line 70.60: 1506-280 (W) Function argument assignment between types "unsigned long*" and "int*" is not allowed.
>        cc -qlanglvl=extc89 -o ssh ssh.o readconf.o clientloop.o sshtty.o  sshconnect.o sshconnect1.o sshconnect2.o mux.o  roaming_common.o -L. -Lopenbsd-compat/ -L/opt/freeware/lib -L/usr/local/lib -L/opt/freeware/lib -L/opt/freeware/lib/ -L/usr/local/lib -L/usr/local/lib -blibpath:/usr/lib:/lib:/usr/local/lib -lssh -lopenbsd-compat -lcrypto -lz  -lkrb5 -lk5crypto -lcom_err
> ld: 0706-006 Cannot find or open library file: -l k5crypto
>        ld:open(): A file or directory in the path name does not exist.
> ld: 0706-006 Cannot find or open library file: -l com_err
>        ld:open(): A file or directory in the path name does not exist.
> make: 1254-004 The error code from the last command is 255.
> 
> Thanks for advices. I'm looking for the libraries k5crypto and com_err. I installed kerberos5 filesets but not improvement.
> I 'm now continuing my investigation.

I would guess either the native kerberos doesn't have the library files openssh is looking for, or they're located someplace the linker can't find them.  Can you list the files in the kerberos filesets (I vaguely recall "lslpp -l" but it's been a while) and does it contain the libk5crypto and libcom_err files?  If so, where?

-- Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.


      
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev at mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
</quote>http://sourceforge.net/projects/openssh-aixhttp://www-03.ibm.com/systems/power/software/aix/linux/toolbox/altlic.ht


      


More information about the openssh-unix-dev mailing list