search for: kerberos4

...RCS file: /var/cvs/openssh/configure.in,v retrieving revision 1.267 diff -u -r1.267 configure.in --- configure.in 2001/03/18 23:09:28 1.267 +++ configure.in 2001/03/27 06:16:46 @@ -404,75 +404,6 @@ ] ) - - -# Check whether user wants Kerberos support -KRB4_MSG="no" -AC_ARG_WITH(kerberos4, - [ --with-kerberos4=PATH Enable Kerberos 4 support], - [ - if test "x$withval" != "xno" ; then - - if test "x$withval" != "xyes" ; then - CPPFLAGS="$CPPFLAGS -I${withval}/include" - LDFLAGS="$LDFLAGS -L${withval}/lib" - if...

With the help of Jan Iven I have been able to compile openssh-2.9.9p2 on Solaris 2.6 with AFS/kerb4 support using gcc. ./configure --sysconfdir=/etc/ssh --with-tcp-wrappers \ --with-egd-pool=/var/run/egd-pool \ --with-kerberos4=/usr/athena --with-afs=/usr/afsws to do this I modified the resulting Makefile, from: CPPFLAGS=-I. -I$(srcdir) -I/usr/local/ssl/include -I/usr/local/include -I/usr/athena/include -I/usr/afsws/include $(PATHS) -DHAVE_CONFIG_H to: CPPFLAGS=-I. -I$(srcdir) -I/usr/local/ssl/include -I/usr/athena/...

Hi, I have the following problem. I think it's arising from the fact, that DES algorithms are fetched from libcrypto and not from libdes anymore. But, some types still clash. I use krb4-1.2.1 from http://www.pdc.kth.se/kth-krb cc -O2 -n32 -TARG:platform=IP22 -OPT:Olimit=0 -I/usr/local/include -I/software/@sys/usr/include -I/usr/local/BerkeleyDB.4.0/include -I/usr/local/openssl/include

...Best regards, Faheem Mitha. ---------- Forwarded message ---------- Date: Thu, 14 Sep 2000 00:36:57 -0400 (EDT) From: Faheem Mitha <faheem at email.unc.edu> To: ssh at clinet.fi Subject: Re: modifying Openssh config script for KTH-KRB Just after I sent this message, I decided to see whether Kerberos4 support would work anyway, even without the krb.h. I get ssh -v sun gives... ******************************************* debug: Trying Kerberos authentication. debug: Kerberos V4 authentication accepted. debug: Kerberos V4 challenge successful. ******************************************* This is...

Dear developers, recently I tried to compile kerberos4 authentization support in openssh-3.5p1 on Redhat 8.0, unfortunately autentization against kerberos server in a kerberos4 realm doesn't work well, probably due to the bug in auth-krb4.c. My colleague David Komanek wrote patch to this file solving the problem, so credits goes to him. I'm sen...

Hi, I've seen that openssh will have different function names for des, I think thats great. As kerberos4 nor kerbero5 from KTH in Sweden support those new calls yet, I thought it would be best for me to switch back to the old behaviour, i.e. have kerberized libkrb and other libs with disabled support for openssl (which means libdes is compiled). Then, compile openssh-3.5p1 with kerberos4 and afs su...

Has xdelta (in ports under misc/xdelta) ever been considered as a means of delivering binary patches for security updates? It seems to be a pretty neat. -- Regards, Michael Nottebrock -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 187 bytes Desc: signature Url :

Hi, I'm unable to get Kerberos4 authentication working with openssh-3.4p1. I'm getting a message that privsep is not available on my platform (Irix 6.5.15) and another message stating that compression and privsep are mutually exclusive. But, ssh decided to turn off compression, I think because of servconf.c. I think it would...

...expect that RCurl also has the capability, but I have not been able to find the correct options to set. listCurlOptions() does not return anything with negotiate, and searching the source of RCurl, the only thing I found was ./RCurl/R/curlInfo.S:names(CurlFeatureBits) = c("ipv6", "kerberos4", "ssl", "libz", "ntlm", "gssnegotiate", but e.g. getURL("http://my.web.service",.opts=curlOptions(username=":",httpauth="gssnegotiate")) does not work. Does anybody know if RCurl or another package is able to negotiate t...

I'm sorry, but I've been looking in the archives, and I can't find an answer to this question. I believe OpenSSH supports AFS, but I can't seem to make it work. I've tried to install krb5-devel, but it doesn't work. I've made configure --with-kerberos4 --with-afs, and it says it can't find krb.h. Did anyone manage to compile openssh 2.3.0 with AFS? Which kerberos (since I'm using RedHat, an RPM would be great :) )? Thanks for any help, -- nneves at di.fc.ul.pt Dept. Informatica, Fac. Ciencias, |\ |...

...test "x$withval" != "$xno" ; then + if test "x$withval" != "$xyes" ; then + examplesdir=$withval + fi + fi + ], + [ + examplesdir="${sysconfdir}" + ] +) + +AC_SUBST(examplesdir) + dnl Check whether user wants Kerberos support AC_ARG_WITH(kerberos4, [ --with-kerberos4=PATH Enable Kerberos 4 support],

Hi, develop members: When I read the document INSTALL in order to install OpenSSH-3.7.1p1, I noticed that MANY obsolete descriptions do remain still now. (1) The configure options '--with-kerberos4' and '--with-afs' were obsoleted because Kerberos IV support and AFS support were removed; however the descriptions remain still now. (2) The configure option '--with-kerberos5' for Kerberos V support is missing. (3) The configure option '--with-ipv4-default&...

...UnixWare 2.x +AC_CHECK_FUNC(strcasecmp, + [], [ AC_CHECK_LIB(resolv, strcasecmp, LIBS="$LIBS -lresolv") ] +) +AC_CHECK_FUNC(utimes, + [], [ AC_CHECK_LIB(c89, utimes, LIBS="$LIBS -lc89") ] +) + +# Check whether user wants Kerberos support +KRB4_MSG="no" +AC_ARG_WITH(kerberos4, + [ --with-kerberos4=PATH Enable Kerberos 4 support], + [ + if test "x$withval" != "xno" ; then + + if test "x$withval" != "xyes" ; then + CPPFLAGS="$CPPFLAGS -I${withval}/include" + LDFLAGS="$LDFLAGS -L${withval}/lib" + i...

...le processing errors. No output written to ssh collect2: ld returned 1 exit status A conflict between /usr/athena/lib/libdes.a(set_key.o) and usr/local/ssl/lib/libcrypto.a(set_key.o). My system is Solaris 7 sun4u sparc SUNW,Ultra-5_10 and my configure params was: ./configure --prefix=/usr --with-kerberos4=/usr/athena --without-pam --with-tcp-wrappers --sysconfdir=/etc No, how can I solve this? Is there any workaround known i the community of OpenSHH? Any advice is welcome offcourse. Best Regards.... //Christer J

Hello, I have a little question and this regarding the compilation of the latest release of OpenSSH on a Linux Slackware version 8 box. We are currently using Kerberos 5 for user authentification and I saw that in SSH there is only an option to configure called: --with-kerberos4, so my question is: what do I need to do to get Kerberos 5 support into OpenSSH ? I am using the MIT kerberos version 1.2.3. Thank you in advance for your feedback. Regards Marc

Just curious. There seems to be an awful lot in the source, but no actual configure option. Please advise. -- Austin Gonyou Systems Architect, CCNA Coremetrics, Inc. Phone: 512-698-7250 email: austin at coremetrics.com "It is the part of a good shepherd to shear his flock, not to skin it." Latin Proverb

...local passwords are not accepted. CC="cc -n32" CFLAGS="-I/usr/local/include -I/usr/include" LDFLAGS="-L/usr/loca l/lib -L/usr/lib32" ./configure --prefix=/usr/local --with-tcp-wrappers=/usr/local/lib32/libwrap.a --with-ssl-dir=/usr/local/ssl --with-mantype=man --with-kerberos4=/usr/athena --with-afs=/usr/afs --with-zlib=/usr/local/lib32/libz.a --with-rand-helper CC="cc -n32" CFLAGS="-I/usr/local/include -I/usr/include" LDFLAGS="-L/usr/loca l/lib -L/usr/lib32" ./configure --prefix=/usr/local --with-tcp-wrappers=/usr/local/lib32/libwrap.a --w...

Folks: We use an old AFS cell with Kerberos 4. Our use of Kerberos 4 is fairly limited; we have never needed to implement rcmd host principals for most of our systems. Indeed, given that Kerberos 4 strips off the domain name portion of a hostname when determining the rcmd instance, we would not be able to do this, since we do have duplicate hostnames in multiple subdomains. For AFS

I've been beating myself senseless trying to build OpenSsh 3.0.1 on Solaris 2.5.1 and get AFS login working. The symptoms of the problem are: sshd builds (used --with-afs and -with-kerberos4 - there is no PAM on this box), accepts connections from non-AFS users, but does not accept a connection from an AFS user; the user sees "permission denied" after entering the password. The server (in debug mode) at this point says: debug1: attempt 2 failures 2 kerberos-iv/udp un...

...Created an attachment (id=1202) --> (http://bugzilla.mindrot.org/attachment.cgi?id=1202&action=view) (simplified patch - no config option) Given that the GSSAPI library will (unconditionally) use DNS anyway, perhaps we don't need yet another client-side config option? Btw, the old SSH1 Kerberos4/5 authentications used canonical hostnames as well for service tickets. ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.