similar to: OpenSSH Compilation problems while enabling AFS support

I haven't (yet) tried your patch, but here's some information you may find useful: There exists a "krbafs" library, which is in effect a port of KTH Kerberos's libkafs to MIT Kerberos V (http://web.mit.edu/openafs/krbafs/). But KTH-krb is (of course) a clone of Kerberos 4, so libkrbafs requires Kerberos 4 credentials. (I've only built krbafs on OS X, and its "home

Would OpenSSH be willing to accept a modification similar to the one below to replace the kafs modification to get an AFS PAG and token? The nice features of this are that it can be compiled in even if OpenAFS is not available. At runtime if the dynamic library is present, it can be loaded and called. A dynamic lib is used so the setpag is in the same process. It has been reported that the

-- | Damien Miller <djm at mindrot.org> \ ``E-mail attachments are the poor man's | http://www.mindrot.org / distributed filesystem'' - Dan Geer ---------- Forwarded message ---------- Date: Tue, 6 Mar 2001 22:28:52 +0100 (MET) From: "[iso-8859-2] Martin MOKREJ?" <mmokrejs at natur.cuni.cz> To: openssh at openssh.com Subject: Re: Problem compiling

http://bugzilla.mindrot.org/show_bug.cgi?id=547 Summary: Missing radix.o in makefile for AFS Product: Portable OpenSSH Version: 3.6p1 Platform: ix86 OS/Version: Linux Status: NEW Severity: minor Priority: P3 Component: Build system AssignedTo: openssh-unix-dev at mindrot.org ReportedBy:

Jan, maybe I should check the /afs information that you pointed me at in a subsequent email first, but I wanted to update you on what happened following this path: I did get some mileage out of both of your suggestions below, but still did not make it through (now working with openssh-2.9p2): gcc -o ssh ssh.o sshconnect.o sshconnect1.o sshconnect2.o sshtty.o readconf.o clientloop.o -L.

- I'm not really sure if this is a bug in openssh or in Kth's krb4-1.1. Anyway, if you define --with-afs=/usr/athena[1] and --with-kerberos4=/usr/athena on Solaris 2.7, you need to apply this minor patch to get the client to build. - You could argue that kafs.h should include these sys files since it uses macros inside them. - Booker C. Bense [1]- Where kth installs by default. diff

http://bugzilla.mindrot.org/show_bug.cgi?id=326 Summary: Bug in AFS token forwarding Product: Portable OpenSSH Version: -current Platform: ix86 OS/Version: Linux Status: NEW Severity: normal Priority: P4 Component: ssh AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: alfw at

There is a bug in the code for getting AFS tokens in function send_afs_tokens() in sshconnect1.c Here is how the bug manifests itself: If I have an AFS token that is still valid _and_ one that was valid but is now expired then AFS token forwarding ignores both tokens instead of forwarding the still valid one. I can reproduce this problem on Red Hat Linux 7.2 systems with OpenSSH-3.4p1 (and

Please excuse me if this was discussed before and I missed it but could someone please explain why AFS support was dropped from OpenSSH 3.7.1p1? Since OpenAFS does not seem to show any signs of going away, it seems like this kind of puts those of us who use AFS in the position of having to apply patches to and maintain our own source tree for 3.6.1p1 whenever a change is made if we want to

Hi all! Just wondering whether anybody has any idea on configuration for accessing AFS volume using current version of Samba. The issue is how to get Samba pass correct kerberos ticket on opening the AFS volume. Having Samba to have root access over AFS is not an option as we need the AFS permission to still apply. Upon searching, the most recent info I can get is this thread from OpenAFS

http://bugzilla.mindrot.org/show_bug.cgi?id=717 Summary: AFS tokens are not generated upon login Product: Portable OpenSSH Version: -current Platform: UltraSparc OS/Version: Solaris Status: NEW Severity: normal Priority: P2 Component: PAM support AssignedTo: openssh-bugs at mindrot.org

Hello, I going to use ssh with Kerberos V5 support along with support for AFS. I don't want to use Kerberos V4 or AFS token passing. The only thing I need from AFS is creating an AFS token (using appropriate function from krb5 API) after user's authentication. It seems to me that such scenario is not much supported by the current code. Rather it is assumed only Kerberos 4 will be used

Which version of openafs do I need to compile AFS support into samba. I tried compiling Samba 3.0.7 but get a setpag() undefined error, when building against OpenAFS 1.2.11. Thanks, Derek Isn't sanity just a one-trick pony anyway? I mean, all you get is that one trick, rational thinking, but when you're good and crazy, well, the sky's the limit! "The Tick (comic book)"

I've been trying to get a working version of openssh-3.7.1p2 as well. Unfortunately, afs support has been pulled, and the patch posted on the openafs list coredumps when I compile it. The new way that pam is done also introduces errors since pam_authenticate is supposedly called in a seperate thread so that the correct environmental variables are not passed. Even after applying some changes

Hello, My first problem is compilation against Heimdal. It does not work because of the following: /products/source/heimdal/heimdal-0.5.1/i386_linux24/lib/roken/../../../lib/r oken/getprogname.c(.text+0xc): multiple definition of `get_progname' openbsd-compat//libopenbsd-compat.a(bsd-misc.o)(.text+0x0):/usr1/ahaupt/open ssh-3.6.1p1/openbsd-compat/bsd-misc.c: first defined here /usr/bin/ld:

> I do not know how to proceed. I tried to comment out the line in the spec file to no avail. this is bad idea ;) > Any suggestions? OpenAFS is not supplied directly by CentOS/RHEL. You would have had to get it from a 3rd party repo such as ATrpms/DAG or install from http://openafs.org/release/1.4.12/index-rhel5.html # cd /tmp/ # wget http://samba.org/samba/ftp/stable/samba-3.4.8.tar.gz

Rather then implementing kafs in MIT Kerberos, I would like to suggest an alternative which has advantages to all parties. The OpenSSH sshd needs to do two things: (1) sets a PAG in the kernel, (2) obtains an AFS token storing it in the kernel. It can use the Kerberos credentials either obtained via GSSAPI delegation, PAM or other kerberos login code in the sshd. The above two

Hi there I'm still going round in circles trying to get winbindd authentication against a 2003 server working. I have what appears to be the same problem as: http://www.ssite.org/articles/view.aspx?class=2&articleid=2 There's something wrong with the SMB Packet signing on this machine. In parallel, I succcessfully built and have got working samba-devel on FreeBSD 5.1 against the

On Aug 20, 2015 6:54 AM, "ken" <gebser at mousecar.com> wrote: > > One of the build options for a laptop I'm looking at buying is DVD vs Blu-Ray. I've never used Blue-ray before, so is there some compelling reason, as a Linux guy, to want to get Blu-ray? > First of all, is this going to be your desktop or a server? If the later, can't see the point for

Sorry for the cross post, but I can't find the original mail I don't know if it was sent to the OpenAFS or the Samba list... I've managed to fix some compilation/build problems when using '--with-afs' to Samba. Something about undefined attributes: ----- s n i p ----- Linking bin/smbd lib/afs.o: In function `afs_createtoken':