From owner-cvs-all Tue Jan 28 23:51: 0 2003 Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7758A37B401; Tue, 28 Jan 2003 23:50:59 -0800 (PST) Received: from canning.wemm.org (canning.wemm.org [192.203.228.65]) by mx1.FreeBSD.org (Postfix) with ESMTP id 24B3643FA7; Tue, 28 Jan 2003 23:50:59 -0800 (PST) (envelope-from peter@wemm.org) Received: from wemm.org (localhost [127.0.0.1]) by canning.wemm.org (Postfix) with ESMTP id 0F4ED2A89E; Tue, 28 Jan 2003 23:50:59 -0800 (PST) (envelope-from peter@wemm.org) X-Mailer: exmh version 2.5 07/13/2001 with nmh-1.0.4 To: "Jacques A. Vidrine" , "Matthew N. Dodd" , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/secure/lib/libcrypto opensslconf-alpha.h opensslconf-i386.h opensslconf-ia64.h opensslconf-powerpc.h opensslconf-sparc64.h In-Reply-To: <20030129074300.5237A2A89E@canning.wemm.org> Date: Tue, 28 Jan 2003 23:50:59 -0800 From: Peter Wemm Message-Id: <20030129075059.0F4ED2A89E@canning.wemm.org> Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Peter Wemm wrote: > "Jacques A. Vidrine" wrote: > > On Tue, Jan 28, 2003 at 09:13:12PM -0500, Matthew N. Dodd wrote: > > > On Tue, 28 Jan 2003, Peter Wemm wrote: > > > > Ok, but what does this mean in the real world? Do krb5 users need to s to > p > > > > building world? > > > > > > Krb5 users just need to use MIT Krb5. > > > > More completely: Kerberos 5 users who want support for the Kerberos > > 5 cipher suites in SSL/TLS (RFC 2712) must use OpenSSL 0.9.7 from the > > ports tree, along with MIT Kerberos 5. > > > > This shouldn't mean much to anyone, since previously there has never > > been support for RFC 2712 in the versions of OpenSSL included with > > FreeBSD. > > Well, there is an ever so slight problem on the freebsd.org cluster: > > Jan 28 23:39:40 panther sshd[76989]: in openpam_load_module(): no pam_krb5.so found > Jan 28 23:39:40 panther sshd[76989]: fatal: PAM: initialisation failed > > But not being able to log in probably doesn't mean much to anyone. > > :-( Looks like this is yet another ABI change. The new pam_krb5.so was incompatable with the running sshd+openssl libraries. *grump* :-( Cheers, -Peter -- Peter Wemm - peter@wemm.org; peter@FreeBSD.org; peter@yahoo-inc.com "All of this is for nothing if we don't go to the stars" - JMS/B5 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message