I've seen a few discussions on this mailing list about using
mod_waklog, particularly regarding x86_64. I've recently had the
chance to spend some time looking at it and now have it working on
RHEL6 for both i386 and x86_64.

I took the latest code from the git repository (details at
http://www.modwaklog.org/download.php) and started by applying the 3
patches from http://userpages.umbc.edu/~aaronk/waklog/ which have been
mentioned on this list before.

To get it working with Kerberos 1.8 and newer without globally setting
the allow_weak_crypto option to true I had to add a call to
krb5_allow_weak_crypto() in mod_waklog.c, I think this could be done
better as the code now won't work on machines with older versions of
Kerberos.

I also had to modify the set of libraries which are linked against so
that only libafsrpc and libafsauthent are used.

I've attached the two small patches required.

Cheers,

Stephen

Attachment: modwaklog-libs.patch
Description: Binary data

Attachment: modwaklog-weakcrypto.patch
Description: Binary data

Reply via email to