Howdie,
Is there a way to get the default BSD 5.3 openssh to compile against
the MIT kerberos libraries? I have set NO_KERBEROS=yes in /etc/make.conf so
that the heimdal kerberos is not built, and rebuilt world, then installed
/usr/ports/security/krb5 and rebuilt world again. sshd is however not being
built against MIT at all.
[root@foobar] ~ # ldd /usr/sbin/sshd
/usr/sbin/sshd:
libssh.so.2 => /usr/lib/libssh.so.2 (0x28098000)
libutil.so.4 => /lib/libutil.so.4 (0x280c7000)
libz.so.2 => /lib/libz.so.2 (0x280d3000)
libwrap.so.3 => /usr/lib/libwrap.so.3 (0x280e3000)
libpam.so.2 => /usr/lib/libpam.so.2 (0x280eb000)
libcrypto.so.3 => /lib/libcrypto.so.3 (0x280f2000)
libcrypt.so.2 => /lib/libcrypt.so.2 (0x281e7000)
libc.so.5 => /lib/libc.so.5 (0x281ff000)
Thanks
---
Gareth Hopkins
Server Operations
UUNET South Africa
Howdie,
Is there a way to get the default BSD 5.3 openssh to compile
against the MIT kerberos libraries? I have set NO_KERBEROS=yes in /etc/make.conf
so
that the heimdal kerberos is not built, and rebuilt world, then installed
/usr/ports/security/krb5 and rebuilt world again. sshd is however not being
built
against MIT at all.
[root@foobar] ~ # ldd /usr/sbin/sshd
/usr/sbin/sshd:
libssh.so.2 => /usr/lib/libssh.so.2 (0x28098000)
libutil.so.4 => /lib/libutil.so.4 (0x280c7000)
libz.so.2 => /lib/libz.so.2 (0x280d3000)
libwrap.so.3 => /usr/lib/libwrap.so.3 (0x280e3000)
libpam.so.2 => /usr/lib/libpam.so.2 (0x280eb000)
libcrypto.so.3 => /lib/libcrypto.so.3 (0x280f2000)
libcrypt.so.2 => /lib/libcrypt.so.2 (0x281e7000)
libc.so.5 => /lib/libc.so.5 (0x281ff000)
Thanks
---
Gareth Hopkins
Server Operations
UUNET South Africa
Gareth Hopkins writes:> > Howdie, > > Is there a way to get the default BSD 5.3 openssh to compile against > the MIT kerberos libraries? I have set NO_KERBEROS=yes in /etc/make.conf so > that the heimdal kerberos is not built, and rebuilt world, then installed > /usr/ports/security/krb5 and rebuilt world again. sshd is however not being > built against MIT at all.This is a very bad idea. You may get the compile to work, but you will then have a non-standard confuguration, and all assistance bets are off. I'm still working your problem (sorry about the delay!) and I'll get back to you as soon as I have something. Please rebuild _without_ NO_KERBEROS. Thanks! M -- Mark Murray iumop ap!sdn w,I idlaH