similar to: Samba and AFS+Kerberos

I am having problems compiling ssh 3.1.p1 under IRIX 6.5.15. I can get ssh to compile but it does not seem to be able to authenticate using afs passwords. Some details: gcc 3.0.1 ssl-0.9.6c zlib-1.1.4. I am configuring with: ./configure --with-kerberos4=/usr/kerberos --with-afs=/usr/afsws \ --with-tcp-wrappers=/usr/local Straight out of the box, this fails with: gcc -g -O2 -Wall

With a little help, I managed to get ssh to compile. (original post 05.02.02) Now, I can login using an account that is local to the target machine but logins with AFS accounts fail. The details: IRIX 6.5.15 ssh 3.1.p1 gcc 3.0.1 ssl-0.9.6c zlib-1.1.4. I am configuring with: env CC=gcc CFLAGS=-g LDFLAGS=-Wl,-rpath,/usr/local/krb4/lib,-rpath,/usr/local/ssl/lib ./configure

Hello all, If you don't compile in Kerberos, AFS etc. support, the ssh/sshd man page still mentions them as valid options, and ssh/sshd complains loudly and refuses to run if you set options about them in ssh_config or sshd_config. I'm not sure if this is the intended (or good?) behaviour. Should it be better to modify the man pages when ./configuring too? Like, adding a small sentence

Dear OpenSSH developers, Hello, I strongly support this suggestion ie. adding the sentence "This option has been disabled at compile time" as appropriate. It would be even more helpful if you said how to enable it (krb) at compile time. Remember, this is the only documentation available. I spent some time wondering about this before searching the archives. Ok, while we are on the

Hello, I going to use ssh with Kerberos V5 support along with support for AFS. I don't want to use Kerberos V4 or AFS token passing. The only thing I need from AFS is creating an AFS token (using appropriate function from krb5 API) after user's authentication. It seems to me that such scenario is not much supported by the current code. Rather it is assumed only Kerberos 4 will be used

I am trying to build openssh-3.2.3p1 on solaris8 with support for afs token passing. I have the KTH-kerberos 4.1.1.1 libraries installed. The configure script generates the following warnings checking krb.h usability... no checking krb.h presence... yes configure: WARNING: krb.h: present but cannot be compiled configure: WARNING: krb.h: check for missing prerequisite headers? configure:

I have been trying to compile samba with afs. I did as the book suggested the first time and ran samba without afs. Now i am trying to compile it with afs. It has not been successful. I have added all the afs libraries to the makefile. These are the errors i am still getting, can you please help me find away around this. Linking bin/smbd

Hi! I've noticed that openssh always does a do_setpag() if compiled with AFS-support no matter which authentication method is used. Maybe I'm missing something but shouldn't it only get a pag, if AFS-token-passing is used? If password authentication is used, an AFS-pam-module (or the authenticate function on AIX) will do the job, otherwise, no token can be obtained and therefore no

For some reasons the afs tokenforwarding stuff has changed siginificantly from v 2.9p2 to 2.9.9p2. This makes it impossible to use public key authenticication in a standart AFS environment. I don't know the reasons for these changes. In any case attached is a patch which restores the old behaviour. Regards Serge -- Serge Droz Paul Scherrer Institut mailto:serge.droz at

Could people who have been having issues with Portable OpenSSH and Kerberos 4 please try the following patch. You will need to run "autoreconf" (i.e you will need autoconf installed) and then run ./configure again. Index: configure.in =================================================================== RCS file: /var/cvs/openssh/configure.in,v retrieving revision 1.267 diff -u -r1.267

Here is an example of a couple of macros that help me where I have a SOHO with a home phone line and a work phone line. If I pick up line 2 my work line I would prefer the call I make to go out my office phone line same with if I pick up line 1 my home phone line I would prefer it go out my home line but want it to roll if needed. So with this little macro it is possible for that to happen.

I think I have come across what seems to be a bug in the interplay between Samba and AFS. I'm running 1.9.16p11 on an IBM RS/6000 (AIX 4.1.5) with the AFS support included (AFS 3.4a). The client machine is running Windows 95. I've created an AFS area which is writeable (rlidwk) to an AFS protection group. The group contains two AFS users, say user1 and user2. If user1 creates a file in

http://bugzilla.mindrot.org/show_bug.cgi?id=326 Summary: Bug in AFS token forwarding Product: Portable OpenSSH Version: -current Platform: ix86 OS/Version: Linux Status: NEW Severity: normal Priority: P4 Component: ssh AssignedTo: openssh-unix-dev at mindrot.org ReportedBy: alfw at

> I do not know how to proceed. I tried to comment out the line in the spec file to no avail. this is bad idea ;) > Any suggestions? OpenAFS is not supplied directly by CentOS/RHEL. You would have had to get it from a 3rd party repo such as ATrpms/DAG or install from http://openafs.org/release/1.4.12/index-rhel5.html # cd /tmp/ # wget http://samba.org/samba/ftp/stable/samba-3.4.8.tar.gz

Hi all, I'm going nuts. Ken Weiss and Steve Holstead have been very nice to me and supplied me with info on how to set my configure files and such. It helped me a lot but I still get stuck a bit later in the process. Namely during pass_check.c. I'm on a AIX 4.1.5 box. Using the export version of AFS 3.4. Help is appreciated. I wouldn't ask you all this if I hadn't already spent

Hi folks, I've ran many circles about this topic, read tons of documents. But have not found a working solution. Here is the scenario: There is a network contains around 350+ nodes, mixed Win98 and Win2k. There are four mars_nwe servers they use. We'd like to migrate that 4 servers into an AFS cell and offer it thru Samba which should be acting as a PDC. So far it seems not too

Hi all! Just wondering whether anybody has any idea on configuration for accessing AFS volume using current version of Samba. The issue is how to get Samba pass correct kerberos ticket on opening the AFS volume. Having Samba to have root access over AFS is not an option as we need the AFS permission to still apply. Upon searching, the most recent info I can get is this thread from OpenAFS

There is a bug in the code for getting AFS tokens in function send_afs_tokens() in sshconnect1.c Here is how the bug manifests itself: If I have an AFS token that is still valid _and_ one that was valid but is now expired then AFS token forwarding ignores both tokens instead of forwarding the still valid one. I can reproduce this problem on Red Hat Linux 7.2 systems with OpenSSH-3.4p1 (and

http://bugzilla.mindrot.org/show_bug.cgi?id=547 Summary: Missing radix.o in makefile for AFS Product: Portable OpenSSH Version: 3.6p1 Platform: ix86 OS/Version: Linux Status: NEW Severity: minor Priority: P3 Component: Build system AssignedTo: openssh-unix-dev at mindrot.org ReportedBy:

Dear all, I've tried to install openssh-3.0.2p1 with AFS-support on a Irix 6.5.12 Maschine. I can login as a local user, but I can't login as AFS-User. The message is : AFS token for cell lrz-muenchen.de rejected. and then : Permission denied. I have installed krb4-1.1, openssl-0.9.6c, zlib-1.1.4, prngd-0.9.24 and I've compiled all that with ggc and mabi=n32. The configure options