Hi,
I've seen that openssh will have different function names for des, I
think thats great. As kerberos4 nor kerbero5 from KTH in Sweden support
those new calls yet, I thought it would be best for me to switch back to
the old behaviour, i.e. have kerberized libkrb and other libs with
disabled support for openssl (which means libdes is compiled).
Then, compile openssh-3.5p1 with kerberos4 and afs support. That
properly picks up -lkrb -ldes etc. Unfortunately, with this untested setup
I got (i'm not sure if this is a openssh or openssl problem):
Manpage format: man
PAM support: no
KerberosIV support: yes
KerberosV support: no
Smartcard support: no
AFS support: yes
S/KEY support: no
TCP Wrappers support: yes
MD5 password support: no
IP address in $DISPLAY hack: no
Use IPv4 by default hack: no
Translate v4 in v6 hack: no
BSD Auth support: no
Random number source: OpenSSL internal ONLY
Host: alphaev67-dec-osf5.1
Compiler: cc
Compiler flags: -I/software/@sys/usr/include -I/usr/local/include
Preprocessor flags: -I/usr/local/openssl/include -Iyes
-I/software/@sys/usr/include -I/usr/local/include
-I/usr/athena-1.2.1-no-openssl/include -I/usr/afsws/include
Linker flags: -L/usr/local/openssl/lib -Lyes -L/usr/local/lib
-L/software/@sys/usr/lib -L/usr/athena-1.2.1-no-openssl/lib -L/usr/afsws/lib
Libraries: -lwrap -lkafs -lresolv -ldes -lkrb -lz -L/usr/local/lib
-L/software/@sys/usr/lib -L/usr/local/openssl/lib -L/usr/lib -lsecurity -ldb -lm
-laud -lcrypto -ldes
I hope, that there will be no symbol clashes between ldes and lcrypto
anymore. ;-)
$ CC=cc CFLAGS="-I/software/@sys/usr/include -I/usr/local/include"
CPPFLAGS="-I/software/@sys/usr/include -I/usr/local/include"
LDFLAGS="-L/usr/local/lib -L/software/@sys/usr/lib" ./configure
--prefix=/usr/local --with-tcp-wrappers --with-ssl-dir=/usr/local/openssl
--with-prngd-socket=/var/run/egd-pool
--with-default-path=/usr/bin:/bin:/sbin:/usr/local/bin:/usr/local/sbin:/software/@sys/usr/bin:/software/@sys/usr/sbin:/usr/bin/X11:/usr/afs/bin:/usr/athena/bin:/usr/local/openssl/bin:/usr/opt/svr4/bin:/usr/opt/svr4/sbin
--with-xauth=/usr/bin/X11/xauth --with-zlib --with-osfsia
--with-login=/usr/bin/login --without-privsep --with-afs=/usr/afsws
--with-kerberos4=/usr/athena-1.2.1-no-openssl
[...]
cc -I/software/@sys/usr/include -I/usr/local/include -I. -I.
-I/usr/local/openssl/include -Iyes -I/software/@sys/usr/include
-I/usr/local/include -I/usr/athena-1.2.1-no-openssl/include -I/usr/afsws/include
-DSSHDIR=\"/usr/local/etc\"
-D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"
-D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/local/libexec/ssh-askpass\"
-D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\"
-D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysign\"
-D_PATH_SSH_PIDDIR=\"/var/run\"
-D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\"
-DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\"
-DHAVE_CONFIG_H -c sshconnect1.c
cc: Error: /usr/local/openssl/include/openssl/mdc2.h, line 79: Missing type
specifier or type qualifier. (missingtype)
DES_cblock h,hh;
--------^
make: *** [sshconnect1.o] Error 1
--
Martin Mokrejs <mmokrejs at natur.cuni.cz>, <m.mokrejs at gsf.de>
PGP5.0i key is at http://www.natur.cuni.cz/~mmokrejs
MIPS / Institute for Bioinformatics <http://mips.gsf.de>
GSF - National Research Center for Environment and Health
Ingolstaedter Landstrasse 1, D-85764 Neuherberg, Germany
tel.: +49-89-3187 3683 , fax:?+49-89-3187 3585