From owner-freebsd-stable  Wed May 23  9: 5:36 2001
Delivered-To: freebsd-stable@freebsd.org
Received: from shell1.nominum.com (shell1.nominum.com [204.152.187.163])
	by hub.freebsd.org (Postfix) with ESMTP id EE4FA37B43C
	for <freebsd-stable@freebsd.org>; Wed, 23 May 2001 09:05:32 -0700 (PDT)
	(envelope-from Peter.Losher@nominum.com)
Received: by shell1.nominum.com (Postfix, from userid 10188)
	id CD0A022641; Wed, 23 May 2001 09:04:43 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1])
	by shell1.nominum.com (Postfix) with ESMTP
	id CB59620F01; Wed, 23 May 2001 09:04:43 -0700 (PDT)
Date: Wed, 23 May 2001 09:04:43 -0700 (PDT)
From: Peter Losher <Peter.Losher@nominum.com>
To: "Jacques A. Vidrine" <n@nectar.com>
Cc: Peter Losher <Peter.Losher@nominum.com>,
	<freebsd-stable@freebsd.org>
Subject: Re: OpenSSH and Krb5, FreeBSD style...
In-Reply-To: <20010523070612.A438@shade.nectar.com>
Message-ID: <Pine.NEB.4.33.0105230851080.9254-100000@shell1.nominum.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-stable.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-stable>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-stable>
X-Loop: FreeBSD.ORG

On Wed, 23 May 2001, Jacques A. Vidrine wrote:

> Most  Kerberos  5  applications  are compatible  at  the  source  code
> level  with  both  MIT   Kerberos  and  Heimdal.   Occassionally  some
> small  tweaks are  needed  due to  differences in  the  API (see  e.g.
> /usr/ports/security/pam_krb5).  The  libraries that must be  linked in
> are different, however.

Thanks for clearing that up.

One question I still have, when I first started configuring this box, and
installed MIT Kerberos from ports, I also compiled and installed SSH2 (ssh
v2.4.0) with '--with-kerberos5=/usr/local/krb5'

The end result was:

-=-
# ./sshd
sshd: SSH Secure Shell 2.4.0 (non-commercial version) on
i386-unknown-freebsd4.3

/usr/libexec/ld-elf.so.1:/usr/lib/libkrb5.so: Undefined symbol
"initialize_asn1_error_table_r"
-=-

First off, it shouldn't be looking at /usr/lib for any Kerberos libraries,
it should be looking at /usr/local/krb5/lib as defined in configure.  I
will go ahead and take a look at the Makefiles for SSH2, but is there any
way to prevent this 'mis-lookup'?

Best Wishes - Peter
-- 
Peter.Losher@nominum.com - [ Systems Admin. | Nominum, Inc. ]


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message