RE: OpenSSH/kerberos compile problem.

• Previous message: Marius Huse Jacobsen: "Re: FW: No longer can connect"
• Maybe in reply to: Mark Hannessen: "OpenSSH/kerberos compile problem."
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Mon, 11 Jul 2005 15:55:31 +0800
To: "Simon Wilkinson" <simon@sxw.org.uk>, <secureshell@securityfocus.com>

Did you specify the krb5 lib path when you "./configure"?

Something like:

# RedHat, With Kerberos
./configure --with-pam --prefix=/usr \
            --sysconfdir=/etc/ssh --with-ssl-dir=/usr \
            --with-kerberos5=/usr/kerberos

# Solaris, With Kerberos
./configure --with-pam --with-zlib=/usr/local \
            --sysconfdir=/etc/ssh --with-ssl-dir=/usr/local/ssl \
            --with-kerberos5=/usr/local

Gary

-----Original Message-----
From: Simon Wilkinson [mailto:simon@sxw.org.uk]
Sent: Sunday, July 10, 2005 10:31 PM
To: secureshell@securityfocus.com
Subject: Re: OpenSSH/kerberos compile problem.

> -lcrypt -lgssapi -lkrb5 -lk5crypto -lcom_err
> gss-serv.o: In function `ssh_gssapi_getclient':
> /tmp/openssh-4.0p1/gss-serv.c:218: undefined reference to
> `gss_export_name'
> gss-serv-krb5.o: In function `ssh_gssapi_krb5_storecreds':
> /tmp/openssh-4.0p1/gss-serv-krb5.c:183: undefined reference to
> `gss_krb5_copy_ccache'
>
> anyone any idea what might cause this problem?
> I already tries reinstalling the kerberos library's and updating them
> to the
> latest version. but it didn't seem to help.

For some reason the OpenSSH configure script is finding a 'gssapi'
library on your system. The GSSAPI that comes with MIT Kerberos has a
library name of 'gssapi_krb5'. I suspect you've got the remnants of an
old Kerberos installation lurking somewhere.

Cheers,

Simon.

• Previous message: Marius Huse Jacobsen: "Re: FW: No longer can connect"
• Maybe in reply to: Mark Hannessen: "OpenSSH/kerberos compile problem."
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]