Hi,
I've installed openssl-0.9.7 and now am testing current openssh-cvs.
The kerberosIV installation has it's own libdes.a. I'm quite please
openssh built successfully, congratulations! Unfortunately, kerberos
autentication is not tried at all. As far as I remeber, Ja Iven who wrote
some patch, which as he said got into 3.5p1 also removed the ifdef's that
--with-privsep no longer disable kerberos. Was this reverted recently?
As a feedback, I'd like to send you the warning I got, I think few of
them might be really important:
OpenSSH has been configured with the following options:
User binaries: /usr/local/bin
System binaries: /usr/local/sbin
Configuration files: /usr/local/etc
Askpass program: /usr/local/libexec/ssh-askpass
Manual pages: /usr/local/man/manX
PID file: /var/run
Privilege separation chroot path: /var/empty
sshd default user PATH:
/usr/bin:/bin:/sbin:/usr/local/bin:/usr/local/sbin:/software/@sys/usr/bin:/software/@sys/usr/sbin:/usr/bin/X11:/usr/afs/bin:/usr/athena/bin:/usr/local/openssl/bin:/usr/opt/svr4/bin:/usr/opt/svr4/sbin
Manpage format: man
PAM support: no
KerberosIV support: yes
KerberosV support: no
Smartcard support: no
AFS support: yes
S/KEY support: no
TCP Wrappers support: yes
MD5 password support: no
IP address in $DISPLAY hack: no
Use IPv4 by default hack: no
Translate v4 in v6 hack: no
BSD Auth support: no
Random number source: OpenSSL internal ONLY
Host: alphaev67-dec-osf5.1
Compiler: cc
Compiler flags: -O2 -arch ev6
Preprocessor flags: -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include
-I/software/@sys/usr/include/freetype2 -I/usr/athena/include
-I/usr/afsws/include
Linker flags: -L/usr/local/openssl/lib -Lyes -L/usr/local/lib
-L/software/@sys/usr/lib -L/usr/local/openssl/lib -L/usr/lib -L/usr/athena/lib
-L/usr/afsws/lib
Libraries: -lwrap -lkafs -lresolv -ldes -lkrb -lz -L/usr/local/lib
-L/software/@sys/usr/lib -L/usr/local/openssl/lib -L/usr/lib -lsecurity -ldb -lm
-laud -lcrypto -ldes
bash-2.05b# ls -la /usr/athena/lib
total 1593
drwxr-xr-x 2 root system 8192 Dec 8 04:03 .
drwxr-xr-x 9 root system 8192 Dec 8 04:03 ..
-rw-r--r-- 1 root system 17312 Dec 8 04:03 libacl.a
-rwxr-xr-x 1 root system 781 Dec 8 04:03 libacl.la
-rw-r--r-- 1 root system 9924 Dec 8 04:03 libcom_err.a
-rwxr-xr-x 1 root system 741 Dec 8 04:03 libcom_err.la
-rw-r--r-- 1 root system 140506 Dec 8 04:03 libdes.a
-rwxr-xr-x 1 root system 729 Dec 8 04:03 libdes.la
-rw-r--r-- 1 root system 67610 Dec 8 04:03 libeditline.a
-rwxr-xr-x 1 root system 744 Dec 8 04:03 libeditline.la
-rw-r--r-- 1 root system 48882 Dec 8 04:03 libkadm.a
-rwxr-xr-x 1 root system 815 Dec 8 04:03 libkadm.la
-rw-r--r-- 1 root system 47690 Dec 8 04:03 libkafs.a
-rwxr-xr-x 1 root system 817 Dec 8 04:03 libkafs.la
-rw-r--r-- 1 root system 55244 Dec 8 04:03 libkdb.a
-rwxr-xr-x 1 root system 782 Dec 8 04:03 libkdb.la
-rw-r--r-- 1 root system 368800 Dec 8 04:03 libkrb.a
-rwxr-xr-x 1 root system 755 Dec 8 04:03 libkrb.la
-rw-r--r-- 1 root system 209950 Dec 8 04:03 libotp.a
-rwxr-xr-x 1 root system 788 Dec 8 04:03 libotp.la
-rw-r--r-- 1 root system 276378 Dec 8 04:03 libroken.a
-rwxr-xr-x 1 root system 741 Dec 8 04:03 libroken.la
-rw-r--r-- 1 root system 260128 Dec 8 04:03 libsia_krb4.so
-rw-r--r-- 1 root system 31926 Dec 8 04:03 libsl.a
-rwxr-xr-x 1 root system 767 Dec 8 04:03 libsl.la
-rw-r--r-- 1 root system 38928 Dec 8 04:03 libss.a
-rwxr-xr-x 1 root system 797 Dec 8 04:03 libss.la
bash-2.05b# make
[...]
cc -O2 -arch ev6 -I. -I.. -I. -I./.. -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include
-I/software/@sys/usr/include/freetype2 -I/usr/athena/include
-I/usr/afsws/include -DHAVE_CONFIG_H -c bsd-cray.c
cc: Warning: bsd-cray.c, line 797: Source file does not contain any
declarations. (emptyfile)
#endif
------^
[...]
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include
-I/software/@sys/usr/include/freetype2 -I/usr/athena/include
-I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\"
-D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"
-D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\"
-D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\"
-D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\"
-D_PATH_SSH_PIDDIR=\"/var/run\"
-D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\"
-DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\"
-DHAVE_CONFIG_H -c packet.c
cc: Warning: packet.c, line 142: In this statement, the referenced type of the
pointer value """" is "char", which is not
compatible with "const unsigned char" because they differ by
signed/unsigned attribute. (ptrmismatch1)
cipher_init(&send_context, none, "", 0, NULL, 0,
CIPHER_ENCRYPT);
-----------------------------------------^
cc: Warning: packet.c, line 143: In this statement, the referenced type of the
pointer value """" is "char", which is not
compatible with "const unsigned char" because they differ by
signed/unsigned attribute. (ptrmismatch1)
cipher_init(&receive_context, none, "", 0, NULL, 0,
CIPHER_DECRYPT);
--------------------------------------------^
[...]
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include
-I/software/@sys/usr/include/freetype2 -I/usr/athena/include
-I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\"
-D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"
-D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\"
-D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\"
-D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\"
-D_PATH_SSH_PIDDIR=\"/var/run\"
-D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\"
-DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\"
-DHAVE_CONFIG_H -c monitor_wrap.c
cc: Info: /usr/athena/include/krb-protos.h, line 175: The type "struct
des_ks_struct" has been declared within and is limited to a function
prototype scope. It will not be compatible with an identical type declared in
another scope. This might not be what you intended. (protoscope)
krb_check_auth __P((
---------------^
cc: Info: /usr/athena/include/krb-protos.h, line 456: The type "struct
des_ks_struct" has been declared within and is limited to a function
prototype scope. It will not be compatible with an identical type declared in
another scope. This might not be what you intended. (protoscope)
krb_mk_priv __P((
------------^
cc: Info: /usr/athena/include/krb-protos.h, line 540: The type "struct
des_ks_struct" has been declared within and is limited to a function
prototype scope. It will not be compatible with an identical type declared in
another scope. This might not be what you intended. (protoscope)
krb_rd_priv __P((
------------^
cc: Info: /usr/athena/include/krb-protos.h, line 576: The type "struct
des_ks_struct" has been declared within and is limited to a function
prototype scope. It will not be compatible with an identical type declared in
another scope. This might not be what you intended. (protoscope)
krb_recvauth __P((
-------------^
cc: Info: /usr/athena/include/krb-protos.h, line 590: The type "struct
des_ks_struct" has been declared within and is limited to a function
prototype scope. It will not be compatible with an identical type declared in
another scope. This might not be what you intended. (protoscope)
krb_sendauth __P((
-------------^
[...]
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include
-I/software/@sys/usr/include/freetype2 -I/usr/athena/include
-I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\"
-D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"
-D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\"
-D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\"
-D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\"
-D_PATH_SSH_PIDDIR=\"/var/run\"
-D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\"
-DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\"
-DHAVE_CONFIG_H -c sshconnect1.c
cc: Warning: /usr/local/openssl/include/openssl/des.h, line 104: The
redefinition of the macro "DES_KEY_SZ" conflicts with a current
definition because the replacement lists differ. The redefinition is now in
effect. (macroredef)
#define DES_KEY_SZ (sizeof(DES_cblock))
--------------------------------^
cc: Warning: /usr/local/openssl/include/openssl/des.h, line 105: The
redefinition of the macro "DES_SCHEDULE_SZ" conflicts with a current
definition because the replacement lists differ. The redefinition is now in
effect. (macroredef)
#define DES_SCHEDULE_SZ (sizeof(DES_key_schedule))
--------------------------------^
[...]
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include
-I/software/@sys/usr/include/freetype2 -I/usr/athena/include
-I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\"
-D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"
-D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\"
-D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\"
-D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\"
-D_PATH_SSH_PIDDIR=\"/var/run\"
-D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\"
-DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\"
-DHAVE_CONFIG_H -c sshd.c
cc: Info: /usr/athena/include/krb-protos.h, line 175: The type "struct
des_ks_struct" has been declared within and is limited to a function
prototype scope. It will not be compatible with an identical type declared in
another scope. This might not be what you intended. (protoscope)
krb_check_auth __P((
---------------^
cc: Info: /usr/athena/include/krb-protos.h, line 456: The type "struct
des_ks_struct" has been declared within and is limited to a function
prototype scope. It will not be compatible with an identical type declared in
another scope. This might not be what you intended. (protoscope)
krb_mk_priv __P((
------------^
cc: Info: /usr/athena/include/krb-protos.h, line 540: The type "struct
des_ks_struct" has been declared within and is limited to a function
prototype scope. It will not be compatible with an identical type declared in
another scope. This might not be what you intended. (protoscope)
krb_rd_priv __P((
------------^
cc: Info: /usr/athena/include/krb-protos.h, line 576: The type "struct
des_ks_struct" has been declared within and is limited to a function
prototype scope. It will not be compatible with an identical type declared in
another scope. This might not be what you intended. (protoscope)
krb_recvauth __P((
-------------^
cc: Info: /usr/athena/include/krb-protos.h, line 590: The type "struct
des_ks_struct" has been declared within and is limited to a function
prototype scope. It will not be compatible with an identical type declared in
another scope. This might not be what you intended. (protoscope)
krb_sendauth __P((
-------------^
[...]
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include
-I/software/@sys/usr/include/freetype2 -I/usr/athena/include
-I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\"
-D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"
-D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\"
-D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\"
-D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\"
-D_PATH_SSH_PIDDIR=\"/var/run\"
-D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\"
-DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\"
-DHAVE_CONFIG_H -c auth-rhosts.c
cc: Warning: auth-rhosts.c, line 116: In this statement, the referenced type of
the pointer value "hostname" is const, but the referenced type of the
target of this assignment is not. (notconstqual)
if (!innetgr(host + 1, hostname, NULL, NULL) &&
-----------------------------------------------^
cc: Warning: auth-rhosts.c, line 117: In this statement, the referenced type of
the pointer value "ipaddr" is const, but the referenced type of the
target of this assignment is not. (notconstqual)
!innetgr(host + 1, ipaddr, NULL, NULL))
-----------------------------------------------^
cc: Warning: auth-rhosts.c, line 124: In this statement, the referenced type of
the pointer value "client_user" is const, but the referenced type of
the target of this assignment is not. (notconstqual)
if (!innetgr(user + 1, NULL, client_user, NULL))
-----------------------------------------------------^
[...]
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include
-I/software/@sys/usr/include/freetype2 -I/usr/athena/include
-I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\"
-D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"
-D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\"
-D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\"
-D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\"
-D_PATH_SSH_PIDDIR=\"/var/run\"
-D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\"
-DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\"
-DHAVE_CONFIG_H -c auth-sia.c
cc: Warning: auth-sia.c, line 63: In this statement, the referenced type of the
pointer value "host" is const, but the referenced type of the target
of this assignment is not. (notconstqual)
if (sia_ses_init(&ent, saved_argc, saved_argv, host, user, NULL, 0,
-------------------------------------------------------^
cc: Warning: auth-sia.c, line 88: In this statement, the referenced type of the
pointer value "host" is const, but the referenced type of the target
of this assignment is not. (notconstqual)
if (sia_ses_init(&ent, saved_argc, saved_argv, host, user, tty, 0,
-------------------------------------------------------^
[...]
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include
-I/software/@sys/usr/include/freetype2 -I/usr/athena/include
-I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\"
-D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"
-D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\"
-D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\"
-D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\"
-D_PATH_SSH_PIDDIR=\"/var/run\"
-D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\"
-DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\"
-DHAVE_CONFIG_H -c servconf.c
cc: Warning: /usr/local/openssl/include/openssl/des.h, line 104: The
redefinition of the macro "DES_KEY_SZ" conflicts with a current
definition because the replacement lists differ. The redefinition is now in
effect. (macroredef)
#define DES_KEY_SZ (sizeof(DES_cblock))
--------------------------------^
cc: Warning: /usr/local/openssl/include/openssl/des.h, line 105: The
redefinition of the macro "DES_SCHEDULE_SZ" conflicts with a current
definition because the replacement lists differ. The redefinition is now in
effect. (macroredef)
#define DES_SCHEDULE_SZ (sizeof(DES_key_schedule))
--------------------------------^
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include
-I/software/@sys/usr/include/freetype2 -I/usr/athena/include
-I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\"
-D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"
-D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\"
-D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\"
-D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\"
-D_PATH_SSH_PIDDIR=\"/var/run\"
-D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\"
-DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\"
-DHAVE_CONFIG_H -c serverloop.c
cc: Warning: /usr/local/openssl/include/openssl/des.h, line 104: The
redefinition of the macro "DES_KEY_SZ" conflicts with a current
definition because the replacement lists differ. The redefinition is now in
effect. (macroredef)
#define DES_KEY_SZ (sizeof(DES_cblock))
--------------------------------^
cc: Warning: /usr/local/openssl/include/openssl/des.h, line 105: The
redefinition of the macro "DES_SCHEDULE_SZ" conflicts with a current
definition because the replacement lists differ. The redefinition is now in
effect. (macroredef)
#define DES_SCHEDULE_SZ (sizeof(DES_key_schedule))
--------------------------------^
[...]
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include
-I/software/@sys/usr/include/freetype2 -I/usr/athena/include
-I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\"
-D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"
-D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\"
-D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\"
-D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\"
-D_PATH_SSH_PIDDIR=\"/var/run\"
-D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\"
-DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\"
-DHAVE_CONFIG_H -c monitor.c
cc: Warning: /usr/local/openssl/include/openssl/des.h, line 104: The
redefinition of the macro "DES_KEY_SZ" conflicts with a current
definition because the replacement lists differ. The redefinition is now in
effect. (macroredef)
#define DES_KEY_SZ (sizeof(DES_cblock))
--------------------------------^
cc: Warning: /usr/local/openssl/include/openssl/des.h, line 105: The
redefinition of the macro "DES_SCHEDULE_SZ" conflicts with a current
definition because the replacement lists differ. The redefinition is now in
effect. (macroredef)
#define DES_SCHEDULE_SZ (sizeof(DES_key_schedule))
--------------------------------^
cc: Warning: monitor.c, line 1377: Non-void function "mm_answer_term"
does not contain a return statement. (missingreturn)
int
^
[...]
cc -o ssh-keygen ssh-keygen.o -L. -Lopenbsd-compat/ -L/usr/local/openssl/lib
-Lyes -L/usr/local/lib -L/software/@sys/usr/lib -L/usr/local/openssl/lib
-L/usr/lib -L/usr/athena/lib -L/usr/afsws/lib -lssh -lopenbsd-compat -lkafs
-lresolv -ldes -lkrb -lz -L/usr/local/lib -L/software/@sys/usr/lib
-L/usr/local/openssl/lib -L/usr/lib -lsecurity -ldb -lm -laud -lcrypto -ldes
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include
-I/software/@sys/usr/include/freetype2 -I/usr/athena/include
-I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\"
-D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"
-D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\"
-D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\"
-D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\"
-D_PATH_SSH_PIDDIR=\"/var/run\"
-D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\"
-DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\"
-DHAVE_CONFIG_H -c ssh-keyscan.c
cc: Warning: ssh-keyscan.c, line 324: Non-void function "hostjump"
does not contain a return statement. (missingreturn)
static int
^
[...]
---------------------------------------------------------------
I tried to configure openssh without privsep, but then configure failed to
detect kerberos!:
[...]
checking whether getopt has optreset support... no
checking if libc defines sys_errlist... yes
checking if libc defines sys_nerr... yes
configure: WARNING: AFS requires Kerberos IV support, build may fail
checking for "/dev/ptmx"... yes
[...]
OpenSSH has been configured with the following options:
User binaries: /usr/local/bin
System binaries: /usr/local/sbin
Configuration files: /usr/local/etc
Askpass program: /usr/local/libexec/ssh-askpass
Manual pages: /usr/local/man/manX
PID file: /var/run
Privilege separation chroot path: /var/empty
sshd default user PATH:
/usr/bin:/bin:/sbin:/usr/local/bin:/usr/local/sbin:/software/@sys/usr/bin:/software/@sys/usr/sbin:/usr/bin/X11:/usr/afs/bin:/usr/athena/bin:/usr/local/openssl/bin:/usr/opt/svr4/bin:/usr/opt/svr4/sbin
Manpage format: man
PAM support: no
KerberosIV support: no
KerberosV support: no
Smartcard support: no
AFS support: yes
S/KEY support: no
TCP Wrappers support: yes
MD5 password support: no
IP address in $DISPLAY hack: no
Use IPv4 by default hack: no
Translate v4 in v6 hack: no
BSD Auth support: no
Random number source: OpenSSL internal ONLY
Host: alphaev67-dec-osf5.1
Compiler: cc
Compiler flags: -O2 -arch ev6
Preprocessor flags: -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include
-I/software/@sys/usr/include/freetype2 -I/usr/afsws/include
Linker flags: -L/usr/local/openssl/lib -Lyes -L/usr/local/lib
-L/software/@sys/usr/lib -L/usr/local/openssl/lib -L/usr/lib -L/usr/afsws/lib
Libraries: -lwrap -lkafs -lz -L/usr/local/lib -L/software/@sys/usr/lib
-L/usr/local/openssl/lib -L/usr/lib -lsecurity -ldb -lm -laud -lcrypto
config.log says:
configure:15304: checking if libc defines sys_errlist
configure:15327: cc -o conftest -O2 -arch ev6 -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include
-I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2
-L/usr/local/openssl/lib -Lyes -L/usr/local/lib -L/software/@sy
s/usr/lib -L/usr/local/openssl/lib -L/usr/lib conftest.c -lz -L/usr/local/lib
-L/software/@sys/usr/lib -L/usr/local/openssl/lib -L/
usr/lib -lsecurity -ldb -lm -laud -lcrypto >&5
configure:15330: $? = 0
configure:15333: test -s conftest
configure:15336: $? = 0
configure:15349: result: yes
configure:15359: checking if libc defines sys_nerr
configure:15382: cc -o conftest -O2 -arch ev6 -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include
-I/usr/local/openssl/include -I/software/@sys/usr/include/freetype2
-L/usr/local/openssl/lib -Lyes -L/usr/local/lib -L/software/@sy
s/usr/lib -L/usr/local/openssl/lib -L/usr/lib conftest.c -lz -L/usr/local/lib
-L/software/@sys/usr/lib -L/usr/local/openssl/lib -L/
usr/lib -lsecurity -ldb -lm -laud -lcrypto >&5
configure:15385: $? = 0
configure:15388: test -s conftest
configure:15391: $? = 0
configure:15404: result: yes
configure:16398: WARNING: AFS requires Kerberos IV support, build may fail
configure:16518: checking for "/dev/ptmx"
configure:16533: result: yes
configure:16548: checking for "/dev/ptc"
configure:16563: result: no
configure:16602: checking for nroff
configure:16620: found /usr/bin/nroff
configure:16632: result: /usr/bin/nroff
I've decided to compile anyway and specify kerberos headers and libs
manually on each command-line after the build fails because of missing kerberos
headers or libs. Unfortunately, in thisrd cases it did not help much:
cc -O2 -arch ev6 -I. -I. -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include -I/usr/local/openssl/include
-I/usr/athena/include -I/usr/afsws/include -DSSHDIR=\"/usr/local/etc\"
-D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"
-D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\"
-D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\"
-D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\"
-D_PATH_SSH_PIDDIR=\"/var/run\"
-D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\"
-DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\"
-DHAVE_CONFIG_H -c sshconnect1.c
cc: Error: radix.h, line 27: Error parsing parameter list. Found "*"
when expecting one of: ",", ")". (notexpecting)
int creds_to_radix(CREDENTIALS *, u_char *, size_t);
------------------------------------^
cc: Error: radix.h, line 28: Ill-formed parameter type list. (parmtyplist)
int radix_to_creds(const char *, CREDENTIALS *);
--------------------------------------^
cc: Error: sshconnect1.c, line 786: In this declaration, "CREDENTIALS"
must specify a type. (badparsedecl)
CREDENTIALS creds;
--------^
cc: Error: sshconnect1.c, line 736: In this statement, "CREDENTIALS"
is not declared. (undeclared)
CREDENTIALS *creds;
--------^
cc: Error: sshconnect1.c, line 736: In this statement, "creds" is not
declared. (undeclared)
CREDENTIALS *creds;
---------------------^
cc: Error: sshconnect1.c, line 738: In the declaration of "pname",
"ANAME_SZ" is not declared. (undeclared)
char buffer[4096], pname[ANAME_SZ], pinst[INST_SZ], prealm[REALM_SZ];
---------------------------------^
cc: Error: sshconnect1.c, line 738: In the declaration of "pinst",
"INST_SZ" is not declared. (undeclared)
char buffer[4096], pname[ANAME_SZ], pinst[INST_SZ], prealm[REALM_SZ];
--------------------------------------------------^
cc: Error: sshconnect1.c, line 738: In the declaration of "prealm",
"REALM_SZ" is not declared. (undeclared)
char buffer[4096], pname[ANAME_SZ], pinst[INST_SZ], prealm[REALM_SZ];
-------------------------------------------------------------------^
cc: Warning: sshconnect1.c, line 742: In this statement,
"tkt_string(...)" of type "int", is being converted to
"pointer to const char". (cvtdiftypes)
if (stat(tkt_string(), &st) < 0)
-----------------^
cc: Error: sshconnect1.c, line 747: In this statement, "TKT_FILE" is
not declared. (undeclared)
problem = krb_get_tf_fullname(TKT_FILE, pname, pinst, prealm);
--------------------------------------^
cc: Error: sshconnect1.c, line 756: In this statement, "RD_AP_EXP" is
not declared. (undeclared)
problem = RD_AP_EXP;
--------------------------^
cc: Error: sshconnect1.c, line 779: In this statement, "krb_err_txt"
is not declared. (undeclared)
debug("Kerberos v4 TGT passing failed: %s",
krb_err_txt[problem]);
----------------------------------------------------^
cc: Error: sshconnect1.c, line 804: In this statement, "creds" is not
declared. (undeclared)
memcpy(&creds.ticket_st.length, p, sizeof(u_int));
------------------------^
cc: Error: sshconnect1.c, line 805: In this statement, "MAX_KTXT_LEN"
is not declared. (undeclared)
if (creds.ticket_st.length > MAX_KTXT_LEN)
---------------------------------------------^
cc: Error: sshconnect1.c, line 824: In this statement, "REALM_SZ" is
not declared. (undeclared)
strlcpy(creds.realm, server_cell, REALM_SZ);
--------------------------------------------------^
Tested on Tru64 Unix 5.1A, kerberos-1.2.1 configured with --without-openssl
option.
--
Martin Mokrejs <mmokrejs at natur.cuni.cz>, <m.mokrejs at gsf.de>
PGP5.0i key is at http://www.natur.cuni.cz/~mmokrejs
MIPS / Institute for Bioinformatics <http://mips.gsf.de>
GSF - National Research Center for Environment and Health
Ingolstaedter Landstrasse 1, D-85764 Neuherberg, Germany
tel.: +49-89-3187 3683 , fax:?+49-89-3187 3585
