search for: send_afs_tokens

....nasa.gov> To: mmokrejs at natur.cuni.cz Subject: openssh on Solaris 2.6 with AFS-krb4 Hello, I saw your post on openssh-unix-dev regarding compilation problems w/ openssh. Did you ever find a solution? I'm getting the same errors (conflicts with typedefs in ktypes.h and then the probs w/ send_afs_tokens). Any tips would be much appreciated. I'm using: openssh-2.5.1p2 openssl-0.9.6 krb4-1.0.6 Solaris 2.6 -- Martin Mokrejs - PGP5.0i key is at http://www.natur.cuni.cz/~mmokrejs <mmokrejs at natur.cuni.cz> Faculty of Science, The Charles University ---------- Forwarded message -------...

Heelo, I'm trying to copmpile openssh-2.3.0p1 against KTH-KRB dist. (ftp.pdc.kth.se/pub/krb/src) of kerberosIV and AFS 3.6. However, I get two errors: 1. redifinition of types, conflicting with krb.h (which #includes ktypes.h) - removing temporarily the u_int code from ktypes.h helped 2. send_afs_tokens() - in the sshconnect1.c show both problems, although the redefinition problems occured at the early beginning of compilation. Are there any patches available? TIA $ uname -a SunOS pf-i400 5.6 Generic_105181-23 sun4u sparc $ gcc -v Reading specs from /usr/local/lib/gcc-lib/sparc-sun-solaris2.6/2....

...r supports it. */ + + if ((supported_authentications & (1 << SSH_PASS_AFS_TOKEN)) && + options.afs_token_passing && k_hasafs()) { + if (options.cipher == SSH_CIPHER_NONE) + log("WARNING: Encryption is disabled! Token will be transmitted in the clear!"); + send_afs_tokens(); + } +#endif /* AFS */ #ifdef KRB5 if ((supported_authentications & (1 << SSH_AUTH_KERBEROS)) && @@ -1202,6 +1220,7 @@ goto success; } } + /* Try RSA authentication if the server supports it. */ if ((supported_authentications & (1 << SSH_AUTH_RSA))...

.../usr/local/include/des.h:54: conflicting types for `bit_64' DRB> /usr/local/ssl/include/openssl/des.h:259: previous declaration of `bit_64' Try to fiddle around with your include path, you probably don't want /usr/local/include to be in there. DRB> sshconnect1.c: In function `send_afs_tokens': DRB> sshconnect1.c:560: warning: implicit declaration of function `_IOW' DRB> sshconnect1.c:560: parse error before `struct' DRB> gmake: *** [sshconnect1.o] Error 1 patch to your krb-1.0.? installed include/kafs.h on Solaris: --- kafs.h~ Tue Dec 12 15:53:47 2000 +++...

...-3.6 # ../openssh-2.3.0p1/configure --prefix=/afs/eos.dk/sw/pack/openssh-2.3.0p1 --with-kerberos4=/afs/eos.dk/sw/pack/krb4-1.0.3 --with-afs --with-ssl-dir=/afs/eos.dk/sw/pack/openssl-0.9.6 To make it compile, I have to add the patch below to make sshconnect1.c line 546 compile. It states: void send_afs_tokens(void) { CREDENTIALS creds; struct ViceIoctl parms; struct ClearToken ct; int i, type, len, plen; char buf[2048], *p, *server_cell; char buffer[8192]; /* Move over ktc_GetToken, here's something leaner. */ for (i = 0; i < 100; i...

...Platform: ix86 OS/Version: Linux Status: NEW Severity: normal Priority: P4 Component: ssh AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: alfw at stanford.edu There is a bug in the code for getting AFS tokens in function send_afs_tokens() in sshconnect1.c Here is how the bug manifests itself: If I have an AFS token that is still valid _and_ one that was valid but is now expired then AFS token forwarding ignores both tokens instead of forwarding the still valid one. I can reproduce this problem on Red Hat Linux 7.2 systems with O...

...this code be integrated in the main tree? Another thing compilation on Solaris. As far as I can remember we have to add the following two lines in sshconnect1.c to get it work: #include <sys/ioctl.h> #include <sys/filio.h> Without it the following happens: sshconnect1.c: In function `send_afs_tokens': sshconnect1.c:799: warning: implicit declaration of function `_IOW' sshconnect1.c:799: parse error before `struct' It will be happy if this is fixed in one of the following versions. The last thing: in version 3.6.1 I have to add radix.o manually in the Makefile to SSHOBJS and SSHDO...

...et_tf_fullname' /home/jnfergu/openssh/sshconnect1.c:707: undefined reference to `krb_get_cred' /home/jnfergu/openssh/sshconnect1.c:711: undefined reference to `krb_life_to_time' /home/jnfergu/openssh/sshconnect1.c:735: undefined reference to `krb_err_txt' sshconnect1.o: In function `send_afs_tokens': /home/jnfergu/openssh/sshconnect1.c:783: undefined reference to `krb_time_to_life' ./libssh.a(radix.o): In function `creds_to_radix': /home/jnfergu/openssh/radix.c:129: undefined reference to `krb_life_to_time' ./libssh.a(radix.o): In function `radix_to_creds': /home/jnfergu/o...

There is a bug in the code for getting AFS tokens in function send_afs_tokens() in sshconnect1.c Here is how the bug manifests itself: If I have an AFS token that is still valid _and_ one that was valid but is now expired then AFS token forwarding ignores both tokens instead of forwarding the still valid one. I can reproduce this problem on Red Hat Linux 7.2 systems with O...

Hello, I came across an interoperability problem in OpenSSH 3.0p1 and 3.0.1p1 concerning the AFS token forwarding. That means that the new versions are not able to exchange AFS tokens (and Kerberos TGTs) with older OpenSSH releases (including 2.9p2) and with the old SSH 1.2.2x. In my opinion this problem already existed in Openssh 2.9.9p1, but I have never used this version (I only looked at the

Could people please test -current? We will be making a release fairly soon. -d -- | By convention there is color, \\ Damien Miller <djm at mindrot.org> | By convention sweetness, By convention bitterness, \\ www.mindrot.org | But in reality there are atoms and space - Democritus (c. 400 BCE)

Could everyone please test the latest snapshots as we will be making a new release soon. If you have any patches you would like us to consider, please resend them to the list ASAP. -d -- | Damien Miller <djm at mindrot.org> \ ``E-mail attachments are the poor man's | http://www.mindrot.org / distributed filesystem'' - Dan Geer

...y Kerberos v4 TGT passing if the server supports it. */ if ((supported_authentications & (1 << SSH_PASS_KERBEROS_TGT)) && options.kerberos_tgt_passing) { @@ -1270,7 +1272,7 @@ log("WARNING: Encryption is disabled! Token will be transmitted in the clear!"); send_afs_tokens(); } -#endif /* AFS */ +#endif /* AFS && KRB4 */ return; /* need statement after label */ } --- sshd.c 2002/01/23 10:41:05 1.1 +++ sshd.c 2002/01/23 12:12:42 @@ -1289,7 +1289,7 @@ if (options.kerberos_tgt_passing) auth_mask |= 1 << SSH_PASS_KERBEROS_TGT; #endif -#ifdef AF...