Damien,
As you probably realize, i solved those problems in order to be able to
create a new DCE patch. I kept those changes out of the DCE patch though.
An explanation on what needs to be done to log on to DCE was included in my
response to 'Food for thought regarding PAM'.
Some background to why you need special actions for DCE:
On systems where you use DCE and DFS, you replace the whole authentication
system with DCE. The authentication is kerberos 5 based, with some extra
whohah. Local users are just local users, and have no credentials
what-so-ever to access DFS (distributed filesystem)
For establishing a working login you need a thing called network
credentials. Those are established by fetching a TGT (ticket granting
ticket) from a security server, who holds all account information, and
validates your password. Holding the TGT you can aquire a credential ticket,
giving you network credentials (access to the local machine, and access to
DFS)
All the network traffic is encrypted, and the whole thing is hidden in the
dce runtime libraries. All you have to do in an application is call some DCE
runtime routines and take care of the login context this gives you. The
login context is invisibly attached to your process, until you either purge
it or do a setuid().
For more information, see e.g the online DCE documentation at
http://www.tks.buffalo.edu/dce/Trandocs/online-doc/dce/
Feel free to forward this to the mailinglist if you think there are people
that might find interest in this.
Regards,
Tor-?ke
>From: Damien Miller <djm at mindrot.org>
>To: Tor-Ake Fransson <torake at hotmail.com>
>CC: openssh-unix-dev at mindrot.org
>Subject: Re: openssh-1.2pre15 on AIX
>Date: Tue, 30 Nov 1999 10:12:12 +1100 (EST)
>
>On Mon, 29 Nov 1999, Tor-Ake Fransson wrote:
>
> > Hi.
> >
> > Pre15 compiles out-of-the-box on AIX 4.3.2 ...almost.
> >
> > No patch included this time, but the following were the gotchas:
> >
> > - The __P() prototyping doesn't work (as discussed earlier)
> > - bsd-daemon.o wasn't linked into libssh.a (though configure
seemed to
> > detect the need for it)
>
>These are both fixed in the next release. For now, add:
>
>#ifndef __P
># define __P(x) x
>#endif
>
>to the end of config.h.in and add 'bsd-daemon.o' to the
'libssh.a:' line
>of Makefile.in and re-run configure.
>
> > DCE patch will follow shortly.
>
>Can you explain this to a DCE-illiterate (me!)?
>
>Thanks,
>Damien
>
>--
>| "Bombay is 250ms from New York in the new world order" - Alan
Cox
>| Damien Miller - http://www.mindrot.org/
>| Email: djm at mindrot.org (home) -or- djm at ibs.com.au (work)
>
>
>
>
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com