similar to: (no subject)

Hi All. Recently a change was merged from OpenBSD's sshd into Portable that implements a KerberosGetAFSToken option (patchset attached). This change causes compile errors with both MIT Kerberos and Heimdal (errors when compiled with MIT Kerberos below). I've figured out that the functions called in the new code are in Heimdal's libkafs, so adding -lkafs to the start for the

Here is a patch I just wrote and tested which may be of interest to those who wish to use KerberosGetAFSToken (currently requires Heimdal libkafs) in combination with GSSAPIDelegateCredentials. The patch is in the public domain and comes with no warranty whatsoever. Applies to pristine 3.8p1. Works for me on Solaris and Tru64. I'd probably have used Doug Engert's patch from 2004-01-30 if

I just wrote an email describing problems linking to libkafs in openssh 3/daily snap shot as of today, but I think I forgot to describe what the problem was- well first it says 'cannot find file or directory' on -lkafs, for some reason it wasnt reading the directory even though- even though i added the correct dir to ld.so.conf (linux) so I cp'd the files to another directory where I

My apologies if this is not the appropriate forum for this but I have posted twice to the ssh security list and have not received any replies. I would appreciated any help that anyone can offer. TIA ------- Ok, this is a repost from awhile back to which I received no replies. Originally, I was dealing with 3.4p1 but I am running into the same problem now with 3.5p1. I would greatly

(I hope this message is appropriate for these lists. If not, please tell me and I won't do it again.) Hi All. There will be a new release of OpenSSH in a couple of weeks. This release contains Kerberos and GSSAPI related changes that we would like to get some feedback about (and hopefully address any issues with) before the release. I encourage anyone with an interest in

Hi there I'm still going round in circles trying to get winbindd authentication against a 2003 server working. I have what appears to be the same problem as: http://www.ssite.org/articles/view.aspx?class=2&articleid=2 There's something wrong with the SMB Packet signing on this machine. In parallel, I succcessfully built and have got working samba-devel on FreeBSD 5.1 against the

Hi, I configured OpenSSH 3.0.2p1 with ./configure --disable-suid-ssh --with-pam --with-kerberos4=/usr/athena \ --with-afs=/usr/afsws --with-ipaddr-display \ --with-ssl-dir=/afs/bi/v/@sys/libraries/openssl/latest My "latest" OpenSSL is 0.9.6a. KTH krb4 is 1.1. When linking the binaries, the KTH krb4 libdes conflicts with the OpenSSL libdes. It seems to be possible to get around

Hi, I've installed openssl-0.9.7 and now am testing current openssh-cvs. The kerberosIV installation has it's own libdes.a. I'm quite please openssh built successfully, congratulations! Unfortunately, kerberos autentication is not tried at all. As far as I remeber, Ja Iven who wrote some patch, which as he said got into 3.5p1 also removed the ifdef's that --with-privsep no longer

Hello all, My question is how do I write a multilevel regression model of individual responses to environmental predictors that accounts for social interactions between individuals. i.e.; 1) Individual response is nested within a group response. 2) The same environmental predictors apply to both hierarchical levels but, 3) Lower level slope/intercept are also affected by high-level response.

hi, every time i enable the option "KerberosGetAFSToken yes" on a computer where the afs-client works fine i get a (/var/log/)message(s) like this: "sshd[1136]: rexec line 70: Unsupported option KerberosGetAFSToken". no one get a afs-token via ssh-login. i found this in sshd in suse9.3, suse 10.0 and fedora core 4 but i does not found any informations if this is an error or

Hi, We are trying to compile OpenSSH with AFS support to enable password-less login in a linux cluster. We are getting the error mentioned at the bottom of this mail. Also, included the information of other packages and the options used with configure. Please help us to sort out this issue. Server is running on RedHat Linux v7.3 OpenAFS Information Downloaded from

Hello all, I'd greatly appreciate a patch that will stop PAM mucking around after I log in with a Kerberos 4 ticket and forward an AFS ticket (KTH Kerberos 1.1.1 used for libkrb/libkafs). The trouble is, I need pam_krb4, so that folks, who log in with without tickets using tunnelled plaintext password, would get Kerberos 4 tickets for the box. I rebuilt sshd without PAM in order to verify

David A. Morrow wrote: >Hi all. I wonder if someone might be able to help with an issue which has recently begun plaguing >my network. All of my Linux machines are configured as domain member of a Windows 2000 Active Directory domain. Up until recently, all of these boxes were working correctly but all of a sudden, they have all stopped. All are Redhat Enterprise 3. All are using

We have serveral RHEL 3.0 Update 2 servers running Samba. These have been working flawlessly for several months.. Recently, the base upgraded all the Windows 2000 servers to Windows 2003.. NOTE: we don't have admin rights to the Domain Controllers.. (wish we did..) Previous to the Domain (and kdc) controllers to 2003 we had no issues joining a new Samba Sever to the ADS.. Using the same

I am having a problem building OpenSSH on my AIX 4.3.3 box. It fails during the make with the following error: xlc -o ssh ssh.o sshconnect.o sshconnect1.o sshconnect2.o sshtty.o readconf.o clientloop.o -L. -Lopenbsd-compat/ -L/usr/local/ssl/lib -L/usr/local/lib -L/usr/local/lib -L/usr/athena/lib -L/usr/afsws/lib -blibpath:/usr/lib:/lib:/usr/local/lib:/usr/athena/lib -lssh

Hi, I've seen that openssh will have different function names for des, I think thats great. As kerberos4 nor kerbero5 from KTH in Sweden support those new calls yet, I thought it would be best for me to switch back to the old behaviour, i.e. have kerberized libkrb and other libs with disabled support for openssl (which means libdes is compiled). Then, compile openssh-3.5p1 with kerberos4

With the help of Jan Iven I have been able to compile openssh-2.9.9p2 on Solaris 2.6 with AFS/kerb4 support using gcc. ./configure --sysconfdir=/etc/ssh --with-tcp-wrappers \ --with-egd-pool=/var/run/egd-pool \ --with-kerberos4=/usr/athena --with-afs=/usr/afsws to do this I modified the resulting Makefile, from: CPPFLAGS=-I. -I$(srcdir) -I/usr/local/ssl/include

Could people who have been having issues with Portable OpenSSH and Kerberos 4 please try the following patch. You will need to run "autoreconf" (i.e you will need autoconf installed) and then run ./configure again. Index: configure.in =================================================================== RCS file: /var/cvs/openssh/configure.in,v retrieving revision 1.267 diff -u -r1.267

Hi list, I have samba-3.0.2-2 rpm installed on Redhat Enterprise Linux 3 AS kernel version. I've been using the Samba 3 How-To and messages on various mailing lists to join Samba to an AD domain and authenticate using winbind/pam. So far Samba has successfully become a member of the AD domain and can browse file servers using smbclient but I haven't been able to get winbind working -

Dear community, I have developed a backend of new 32-bit RISC ISA, which does not have unaligned memory access instructions (e.g., LWL, LWR, SWL, and SWR in MIPS). Since char and short variables are not 32-bit alignment, these variables cannot be correctly accessed. Therefore, alignment member functions, especially getCharAlign() and getShortAlign() of TargetInfo class in