openssh unix dev - Dec 2000 - OpenSSH, Kth kerberos, and Digital Unix

I've compiled OpenSSH 2.3.0p1 with Kerberos 4 from Kth (1.0.4).  We use AFS
heavily and need the AFS token passing features.  This combo is working
great on Irix and NetBSD/{alpha,i386}, but it's dying on Digital Unix (4.0f
and 5.0).

"ssh -v hostname" dumps core in des_pcbc_encrypt() after "Trying
Kerberos
authentication".  My suspicion is that the des routines from OpenSSL and
Kerberos are getting confused by the linker, but I'm not sure how to test
that or fix it.

Has anyone seen this before?  Any suggestions?

	-Kevin

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 284 bytes
Desc: not available
Url :
http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20001214/2cf1c9c5/attachment.bin

>>>>> "KS" == Kevin Sullivan <ksulliva at
psc.edu> writes:
 KS> I've compiled OpenSSH 2.3.0p1 with Kerberos 4 from Kth (1.0.4).  We
use AFS
 KS> heavily and need the AFS token passing features.  This combo is working
 KS> great on Irix and NetBSD/{alpha,i386}, but it's dying on Digital
Unix (4.0f
 KS> and 5.0).

 KS> "ssh -v hostname" dumps core in des_pcbc_encrypt() after
"Trying Kerberos
 KS> authentication".  My suspicion is that the des routines from
OpenSSL and
 KS> Kerberos are getting confused by the linker, but I'm not sure how to
test
 KS> that or fix it.

 KS> Has anyone seen this before?  Any suggestions?

We have trouble with the self-test for DES from openssl-0.9.6 on
Digital boxes (OSF1 refdux40f V4.0 1229 alpha). The tests produce lots
of "unaligned access" errors and all of them fail (despite being
converted transparently). If you have "uac noprint sigbus" on your
machine, this might be the same problem in disguise?

Best regards
Jan