Hi Mark, We do not have any existing weblogin servers; this test server constitutes the first presence of Cosign in our school. So I think we would fit the second scenario you described.
Knowing that, I went back to the root directory of the source and issued the following two directives: ./configure --enable-apache2=/usr/local/apache2/bin/apxs --enable-krb=/usr/local make everything Almost immediately, I ran into this problem: gcc -Wall -Wmissing-prototypes -g -O2 -c version.c cd common; make all cd libsnet; make all cd libcgi; make all cd cgi; make all gcc -Wall -Wmissing-prototypes -g -O2 -I/usr/include -I/usr/local/include -I../common -I../libsnet -I../libcgi -o logout logout.o network.o subfile.o ../common/mkcookie.o ../common/fbase64.o ../common/conf.o ../common/wildcard.o ../common/argcargv.o ../version.o -L../libsnet/.libs -L../libcgi -L/usr/lib -L/usr/local/lib -lsnet -lcgi -lssl -lcrypto -lkrb5 -lk5crypto -lcom_err /usr/lib/libkrb5.so: undefined reference to `length_PA_ENC_TS_ENC' /usr/lib/libkrb5.so: undefined reference to `length_KDC_REQ_BODY' /usr/lib/libkrb5.so: undefined reference to `free_Principal' /usr/lib/libkrb5.so: undefined reference to `bswap16' /usr/lib/libkrb5.so: undefined reference to `length_EncKrbCredPart' /usr/lib/libkrb5.so: undefined reference to `copy_Realm' /usr/lib/libkrb5.so: undefined reference to `strlwr' /usr/lib/libkrb5.so: undefined reference to `length_TGS_REQ' /usr/lib/libkrb5.so: undefined reference to `decode_TGS_REP' /usr/lib/libkrb5.so: undefined reference to `copy_PrincipalName' /usr/lib/libkrb5.so: undefined reference to `decode_EncKrbCredPart' /usr/lib/libkrb5.so: undefined reference to `length_EncryptedData' /usr/lib/libkrb5.so: undefined reference to `net_write' /usr/lib/libkrb5.so: undefined reference to `decode_Authenticator' /usr/lib/libkrb5.so: undefined reference to `free_KRB_PRIV' /usr/lib/libkrb5.so: undefined reference to `free_ETYPE_INFO' /usr/lib/libkrb5.so: undefined reference to `encode_AP_REQ' /usr/lib/libkrb5.so: undefined reference to `encode_EncKrbPrivPart' /usr/lib/libkrb5.so: undefined reference to `copy_octet_string' /usr/lib/libkrb5.so: undefined reference to `copy_HostAddress' /usr/lib/libkrb5.so: undefined reference to `length_Ticket' /usr/lib/libkrb5.so: undefined reference to `decode_AP_REQ' /usr/lib/libkrb5.so: undefined reference to `length_AuthorizationData' /usr/lib/libkrb5.so: undefined reference to `encode_TGS_REQ' /usr/lib/libkrb5.so: undefined reference to `length_KRB_ERROR' /usr/lib/libkrb5.so: undefined reference to `arg_printusage' /usr/lib/libkrb5.so: undefined reference to `free_KRB_SAFE' /usr/lib/libkrb5.so: undefined reference to `roken_gethostby_setup' /usr/lib/libkrb5.so: undefined reference to `decode_KRB_ERROR' /usr/lib/libkrb5.so: undefined reference to `length_AS_REQ' /usr/lib/libkrb5.so: undefined reference to `length_KRB_SAFE' /usr/lib/libkrb5.so: undefined reference to `encode_EncASRepPart' /usr/lib/libkrb5.so: undefined reference to `copy_EncryptionKey' /usr/lib/libkrb5.so: undefined reference to `length_EncKrbPrivPart' /usr/lib/libkrb5.so: undefined reference to `copy_Principal' /usr/lib/libkrb5.so: undefined reference to `encode_PA_ENC_TS_ENC' /usr/lib/libkrb5.so: undefined reference to `initialize_asn1_error_table_r' /usr/lib/libkrb5.so: undefined reference to `copy_EncTicketPart' /usr/lib/libkrb5.so: undefined reference to `decode_EncTGSRepPart' /usr/lib/libkrb5.so: undefined reference to `decode_EncAPRepPart' /usr/lib/libkrb5.so: undefined reference to `encode_EncAPRepPart' /usr/lib/libkrb5.so: undefined reference to `encode_AuthorizationData' /usr/lib/libkrb5.so: undefined reference to `free_Checksum' /usr/lib/libkrb5.so: undefined reference to `encode_ETYPE_INFO' /usr/lib/libkrb5.so: undefined reference to `decode_KRB_CRED' /usr/lib/libkrb5.so: undefined reference to `length_ChangePasswdDataMS' /usr/lib/libkrb5.so: undefined reference to `rk_dns_free_data' /usr/lib/libkrb5.so: undefined reference to `free_EncTGSRepPart' /usr/lib/libkrb5.so: undefined reference to `encode_EncTicketPart' /usr/lib/libkrb5.so: undefined reference to `free_Ticket' /usr/lib/libkrb5.so: undefined reference to `bswap32' /usr/lib/libkrb5.so: undefined reference to `free_KDC_REP' /usr/lib/libkrb5.so: undefined reference to `base64_encode' /usr/lib/libkrb5.so: undefined reference to `length_Authenticator' /usr/lib/libkrb5.so: undefined reference to `decode_KRB_PRIV' /usr/lib/libkrb5.so: undefined reference to `free_EncTicketPart' /usr/lib/libkrb5.so: undefined reference to `rk_dns_lookup' /usr/lib/libkrb5.so: undefined reference to `encode_EncTGSRepPart' /usr/lib/libkrb5.so: undefined reference to `crypt' /usr/lib/libkrb5.so: undefined reference to `free_AP_REQ' /usr/lib/libkrb5.so: undefined reference to `free_EncKrbPrivPart' /usr/lib/libkrb5.so: undefined reference to `encode_KRB_PRIV' /usr/lib/libkrb5.so: undefined reference to `net_read' /usr/lib/libkrb5.so: undefined reference to `encode_KRB_SAFE' /usr/lib/libkrb5.so: undefined reference to `encode_Authenticator' /usr/lib/libkrb5.so: undefined reference to `strsep_copy' /usr/lib/libkrb5.so: undefined reference to `decode_Ticket' /usr/lib/libkrb5.so: undefined reference to `encode_AS_REQ' /usr/lib/libkrb5.so: undefined reference to `issuid' /usr/lib/libkrb5.so: undefined reference to `free_HostAddress' /usr/lib/libkrb5.so: undefined reference to `encode_AP_REP' /usr/lib/libkrb5.so: undefined reference to `free_TGS_REQ' /usr/lib/libkrb5.so: undefined reference to `encode_KRB_CRED' /usr/lib/libkrb5.so: undefined reference to `free_EncAPRepPart' /usr/lib/libkrb5.so: undefined reference to `decode_EncASRepPart' /usr/lib/libkrb5.so: undefined reference to `free_METHOD_DATA' /usr/lib/libkrb5.so: undefined reference to `encode_KRB_ERROR' /usr/lib/libkrb5.so: undefined reference to `length_AP_REP' /usr/lib/libkrb5.so: undefined reference to `decode_AP_REP' /usr/lib/libkrb5.so: undefined reference to `encode_Ticket' /usr/lib/libkrb5.so: undefined reference to `TicketFlags2int' /usr/lib/libkrb5.so: undefined reference to `roken_gethostbyname' /usr/lib/libkrb5.so: undefined reference to `int2KDCOptions' /usr/lib/libkrb5.so: undefined reference to `encode_EncryptedData' /usr/lib/libkrb5.so: undefined reference to `length_KRB_CRED' /usr/lib/libkrb5.so: undefined reference to `free_Authenticator' /usr/lib/libkrb5.so: undefined reference to `decode_METHOD_DATA' /usr/lib/libkrb5.so: undefined reference to `encode_EncKrbCredPart' /usr/lib/libkrb5.so: undefined reference to `copy_HostAddresses' /usr/lib/libkrb5.so: undefined reference to `free_KRB_CRED' /usr/lib/libkrb5.so: undefined reference to `decode_EncKrbPrivPart' /usr/lib/libkrb5.so: undefined reference to `free_AS_REQ' /usr/lib/libkrb5.so: undefined reference to `length_EncAPRepPart' /usr/lib/libkrb5.so: undefined reference to `decode_AS_REP' /usr/lib/libkrb5.so: undefined reference to `copy_AuthorizationData' /usr/lib/libkrb5.so: undefined reference to `free_AuthorizationData' /usr/lib/libkrb5.so: undefined reference to `copy_Authenticator' /usr/lib/libkrb5.so: undefined reference to `getarg' /usr/lib/libkrb5.so: undefined reference to `copy_Ticket' /usr/lib/libkrb5.so: undefined reference to `decode_KRB_SAFE' /usr/lib/libkrb5.so: undefined reference to `free_KRB_ERROR' /usr/lib/libkrb5.so: undefined reference to `strupr' /usr/lib/libkrb5.so: undefined reference to `free_EncKrbCredPart' /usr/lib/libkrb5.so: undefined reference to `free_AP_REP' /usr/lib/libkrb5.so: undefined reference to `encode_KDC_REQ_BODY' /usr/lib/libkrb5.so: undefined reference to `copy_EncryptedData' /usr/lib/libkrb5.so: undefined reference to `decode_ETYPE_INFO' /usr/lib/libkrb5.so: undefined reference to `parse_time' /usr/lib/libkrb5.so: undefined reference to `length_AP_REQ' /usr/lib/libkrb5.so: undefined reference to `length_KRB_PRIV' /usr/lib/libkrb5.so: undefined reference to `free_EncryptedData' /usr/lib/libkrb5.so: undefined reference to `encode_ChangePasswdDataMS' /usr/lib/libkrb5.so: undefined reference to `rk_dns_srv_order' /usr/lib/libkrb5.so: undefined reference to `decode_EncTicketPart' *** Error code 1 Stop in /data1/cosign-3.1.1/cgi. *** Error code 1 Stop in /data1/cosign-3.1.1. We had previously installed Kerberos 5 version 1.7.1 (krb5-1.7.1), which went without a hitch. Any idea what is causing this? (I see a bunch of "undefined reference" errors coming from the Kerberos module. Should we have compiled Krb5 using certain directives?) Thanks, SC -----Original Message----- From: Mark Montague [mailto:[email protected]] Sent: Thursday, February 25, 2010 11:31 AM To: [email protected] Subject: Re: [Cosign-discuss] Cosign.conf and Active Directory configuration Are you trying to set up a cosign-protected web server that uses uses central cosign weblogin servers that your organization has already set up? In that case, cosignd and cosign.conf are already on your organizations central weblogin servers; they do not get installed on individual cosign-protected web servers. You will only need to configure Kerberos if your web application needs to receive proxied Kerberos tickets to use with some local Kerberos-enabled service (for example, if your cosign protected web application needs to connect to a mail server as the end user who is logged in via cosign). Or are you trying to set up the central weblogin servers for your organization? In that case, be sure to follow the instructions in the README.weblogin file. cosignd does not get built unless you run "make everything" instead of running "make"; and neither cosignd nor cosign.conf get installed unless you run "make install-all" instead of "make install". Information on Kerberos is also included in README.weblogin. Let us know if you have questions. Mark Montague ITS Web/Database Team The University of Michigan [email protected] On February 25, 2010 11:16 , "Simon Chang" <[email protected]> wrote: > Hello again, > > We are in the process of configuring Cosign to use our Microsoft > Active Directory service, but we are stumped. > > So far, we have downloaded the source tarball, compiled, and installed > it into a test Apache 2.2 server. The module loaded just fine with no > errors at all. We have also added Cosign-related config into > httpd.conf. > > But for some reason, even after issuing the "make install" command, we > don't see cosignd anywhere in our box. We also don't see > cosign.conf(5) anywhere in our system either. The directions in the > Wiki are spotty at best, leaving us in the dark. There is also no > hint as to how we should configure the Kerberos 5 package. > > Can anyone assist? > > Thanks, > > SC > > ======================================== > Simon Chang > Network and Systems Administrator > New England Conservatory of Music > 290 Huntington Avenue, Boston, MA 02115 > > > ---------------------------------------------------------------------- > -------- Download Intel® Parallel Studio Eval Try the new > software tools for yourself. Speed compiling, find bugs proactively, > and fine-tune applications for parallel performance. > See why Intel Parallel Studio got high marks during beta. > http://p.sf.net/sfu/intel-sw-dev > _______________________________________________ > Cosign-discuss mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/cosign-discuss > > > ------------------------------------------------------------------------ ------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Cosign-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/cosign-discuss ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Cosign-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/cosign-discuss
