Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 May 2001 09:04:43 -0700 (PDT)
From:      Peter Losher <Peter.Losher@nominum.com>
To:        "Jacques A. Vidrine" <n@nectar.com>
Cc:        Peter Losher <Peter.Losher@nominum.com>, <freebsd-stable@freebsd.org>
Subject:   Re: OpenSSH and Krb5, FreeBSD style...
Message-ID:  <Pine.NEB.4.33.0105230851080.9254-100000@shell1.nominum.com>
In-Reply-To: <20010523070612.A438@shade.nectar.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 23 May 2001, Jacques A. Vidrine wrote:

> Most  Kerberos  5  applications  are compatible  at  the  source  code
> level  with  both  MIT   Kerberos  and  Heimdal.   Occassionally  some
> small  tweaks are  needed  due to  differences in  the  API (see  e.g.
> /usr/ports/security/pam_krb5).  The  libraries that must be  linked in
> are different, however.

Thanks for clearing that up.

One question I still have, when I first started configuring this box, and
installed MIT Kerberos from ports, I also compiled and installed SSH2 (ssh
v2.4.0) with '--with-kerberos5=/usr/local/krb5'

The end result was:

-=-
# ./sshd
sshd: SSH Secure Shell 2.4.0 (non-commercial version) on
i386-unknown-freebsd4.3

/usr/libexec/ld-elf.so.1:/usr/lib/libkrb5.so: Undefined symbol
"initialize_asn1_error_table_r"
-=-

First off, it shouldn't be looking at /usr/lib for any Kerberos libraries,
it should be looking at /usr/local/krb5/lib as defined in configure.  I
will go ahead and take a look at the Makefiles for SSH2, but is there any
way to prevent this 'mis-lookup'?

Best Wishes - Peter
-- 
Peter.Losher@nominum.com - [ Systems Admin. | Nominum, Inc. ]


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.4.33.0105230851080.9254-100000>