On Thu, 17 Oct 2002, Luc I. Suryo wrote:
Hi,
so finally I can conclude, that the problem is caused including -ldes
at the linking step while creating ssh-keygen. The library is picked up
from /usr/athena/lib and I just gues, that it clashes with libcrypto.
Could someone take care of the configure script make the build require
kerberos
libraries only in cases, when they are really needed.
Yes, my solution will be to delete the libdes from /usr/athena/lib,
which is there from older versions of krb4. Newer version do not have
this library anymore, as the know about libcrypto. However, the build
should (I think) resist such conditions. I'm willing to test patches. ;)
> > wget ftp://ftp.pdc.kth.se/pub/krb/src/krb4-1.2.tar.gz
> > gzip -dc krb4-1.2.tar.gz | tar xf -
> > cd krb4-1.2
> > ./configure --with-readline --with-x \
> > --with-openssl=/usr/local/openssl --enable-rxkad --enable-shared
> > make install
> > cd ../openssh-3.5p1
> > ./configure --prefix=/usr/local --with-kerberos4=/usr/athena \
> > --with-tcp-wrappers --with-ssl-dir=/usr/local/openssl --without-rsh \
> > --disable-suid-ssh --with-privsep --with-zlib --with-pam
> > make
> > ./ssh-keygen -t dsa -f /tmp/ssh_host_dsa_key -N ""
> >
> > cleanup:
> > rm -rf /usr/athena
# rm ssh-keygen
# gcc -o ssh-keygen ssh-keygen.o -L. -Lopenbsd-compat/
-L/software/@sys/usr/openssl/lib -R/software/@sys/usr/openssl/lib -Lyes -Ryes
-L/usr/local/lib -R/usr/local/lib -L/usr/athena/lib -R/usr/athena/lib -lssh
-lopenbsd-compat -lresolv -lz -lsocket -lnsl -L/usr/local/lib
-L/software/@sys/usr/lib -L/software/@sys/usr/openssl/lib -L/usr/lib -lkrb -ldes
-lcrypto
# ./ssh-keygen -t rsa -f /tmp/ssh_host_dsa_key -N ""
Generating public/private rsa key pair.
Key will be saved (private=, identity_file=, passphrase1=, comment=root@)
open failed: No such file or directory.
Saving the key failed: .
# ldd ./ssh-keygen
libresolv.so.2 => /usr/lib/libresolv.so.2
libz.so => /software/@sys/usr/lib/libz.so
libsocket.so.1 => /usr/lib/libsocket.so.1
libnsl.so.1 => /usr/lib/libnsl.so.1
libkrb.so.1 => /usr/athena/lib/libkrb.so.1
libdes.so.1 => /usr/athena/lib/libdes.so.1
libc.so.1 => /usr/lib/libc.so.1
libdl.so.1 => /usr/lib/libdl.so.1
libmp.so.2 => /usr/lib/libmp.so.2
/usr/platform/SUNW,Ultra-30/lib/libc_psr.so.1
# rm ssh-keygen
# gcc -o ssh-keygen ssh-keygen.o -L. -Lopenbsd-compat/
-L/software/@sys/usr/openssl/lib -R/software/@sys/usr/openssl/lib -Lyes -Ryes
-L/usr/local/lib -R/usr/local/lib -L/usr/athena/lib -R/usr/athena/lib -lssh
-lopenbsd-compat -lresolv -lz -lsocket -lnsl -L/usr/local/lib
-L/software/@sys/usr/lib -L/software/@sys/usr/openssl/lib -L/usr/lib -lkrb
-lcrypto
# ./ssh-keygen -t rsa -f /tmp/ssh_host_dsa_key -N ""
Generating public/private rsa key pair.
/tmp/ssh_host_dsa_key already exists.
Overwrite (y/n)? y
Key will be saved (private=, identity_file=/tmp/ssh_host_dsa_key, passphrase1=,
comment=)
Your identification has been saved in /tmp/ssh_host_dsa_key.
Your public key has been saved in /tmp/ssh_host_dsa_key.pub.
The key fingerprint is:
08:c9:e2:bd:72:c6:4f:86:bc:98:c2:d4:9c:54:f4:e0
# ldd ./ssh-keygen
libresolv.so.2 => /usr/lib/libresolv.so.2
libz.so => /software/@sys/usr/lib/libz.so
libsocket.so.1 => /usr/lib/libsocket.so.1
libnsl.so.1 => /usr/lib/libnsl.so.1
libkrb.so.1 => /usr/athena/lib/libkrb.so.1
libc.so.1 => /usr/lib/libc.so.1
libdl.so.1 => /usr/lib/libdl.so.1
libmp.so.2 => /usr/lib/libmp.so.2
/usr/platform/SUNW,Ultra-30/lib/libc_psr.so.1
# ls -la /usr/athena/lib/libkrb.*
-rw-r--r-- 1 root other 3451586 Sep 20 12:54 /usr/athena/lib/libkrb.a
-rwxr-xr-x 1 root other 753 Sep 20 12:54
/usr/athena/lib/libkrb.la
lrwxrwxrwx 1 root other 15 Sep 20 10:03
/usr/athena/lib/libkrb.so -> libkrb.so.1.1.1
lrwxrwxrwx 1 root other 15 Sep 20 10:03
/usr/athena/lib/libkrb.so.1 -> libkrb.so.1.1.1
-rw-r--r-- 1 root other 126076 Sep 13 11:18
/usr/athena/lib/libkrb.so.1.0.9
-rwxr-xr-x 1 root other 309546 Sep 20 10:03
/usr/athena/lib/libkrb.so.1.1.1
# ls -la /usr/athena/lib/libdes.*
lrwxrwxrwx 1 root other 15 Sep 13 11:18
/usr/athena/lib/libdes.so -> libdes.so.1.0.9
lrwxrwxrwx 1 root other 15 Sep 13 11:18
/usr/athena/lib/libdes.so.1 -> libdes.so.1.0.9
-rw-r--r-- 1 root other 108124 Sep 13 11:18
/usr/athena/lib/libdes.so.1.0.9
#
--
Martin Mokrejs <mmokrejs at natur.cuni.cz>, <m.mokrejs at gsf.de>
PGP5.0i key is at http://www.natur.cuni.cz/~mmokrejs
MIPS / Institute for Bioinformatics <http://mips.gsf.de>
GSF - National Research Center for Environment and Health
Ingolstaedter Landstrasse 1, D-85764 Neuherberg, Germany
tel.: +49-89-3187 3683 , fax:?+49-89-3187 3585