Re: Need help with compiling gss-api into patched openssh
Douglas == Douglas E Engert [EMAIL PROTECTED] writes: Douglas Sam Hartman wrote: Douglas == Douglas E Engert [EMAIL PROTECTED] writes: Douglas That may be true. But just getting the OpenSSH people to Douglas add the the gssapi authenticaiton to OpenSSH-3.8 was a Douglas big step forward. Sure but when people want to go for the whole solution don't discourage them and tell them to use stock openssh. Douglas OK, then what is party line on the usability of Douglas OpenSSH-3.8, and how to obtain the additional parts of Douglas the gssapi mods that where not included in 3.8. As you Douglas know I have sent Simon a note on this. I was not aware the patches were so out of date. I think I'll wait until Simon gets the new patch out to start recommending people use it;) Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos
Re: Need help with compiling gss-api into patched openssh
OpenSSH-3.8 released yesterday contains the gssapi patch. It also contains changes to use the krb5-config, which loks like your problem. Scott Ehrlich wrote: I just upgraded my Cygwin installation on my XP laptop, downloaded the gssapi patch from www.sxw.org.uk, obtained the corresponding openssh/portable from ftp.openbsd.org, patched without error, downloaded the Krb5 source and compiled, pointing to the kerb5 source directory, and, towards the end of ./configure in the openssh directory, receive: checking for gss_init_sec_context in -lgssapi_krb5... no configure: WARNING: Cannot find any suitable gss-api library - build may fail [then] checking for gssapi.h... no configure: WARNING: Cannot find any suitable gss-api header - build may fail What am I missing? Doesn't the patch take care of that? Thanks for any help. Scott Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos
Re: Need help with compiling gss-api into patched openssh
On Wed, 25 Feb 2004, Douglas E. Engert wrote: Date: Wed, 25 Feb 2004 09:56:53 -0600 From: Douglas E. Engert [EMAIL PROTECTED] To: Scott Ehrlich [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: Need help with compiling gss-api into patched openssh OpenSSH-3.8 released yesterday contains the gssapi patch. It also contains changes to use the krb5-config, which loks like your problem. I just ran configure on it with --with-kerberos5=/home/scott/krb5-1.3.1 (Kerb source downloaded from MIT's site) and still got the same failure mode. Other ideas? Thanks. Scott Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos
Re: Need help with compiling gss-api into patched openssh
Scott Ehrlich wrote: On Wed, 25 Feb 2004, Douglas E. Engert wrote: Date: Wed, 25 Feb 2004 09:56:53 -0600 From: Douglas E. Engert [EMAIL PROTECTED] To: Scott Ehrlich [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: Need help with compiling gss-api into patched openssh OpenSSH-3.8 released yesterday contains the gssapi patch. It also contains changes to use the krb5-config, which loks like your problem. I just ran configure on it with --with-kerberos5=/home/scott/krb5-1.3.1 (Kerb source downloaded from MIT's site) and still got the same failure mode. Is this the install path? The krb5-config will return the locations of the libs and includes. Try runing the installpath/bin/krb5-config to see what it outputs. You may have to add add a link or copy the installpath/include/gssapi/gssapi.h to installpath/include/gssapi.h Other ideas? Thanks. Scott -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos
Re: Need help with compiling gss-api into patched openssh
Douglas == Douglas E Engert [EMAIL PROTECTED] writes: Douglas OpenSSH-3.8 released yesterday contains the gssapi Douglas patch. It also contains changes to use the krb5-config, Douglas which loks like your problem. Doug, OpenSSH does not contain support for gss-keyex, which is really what you want to be using if you want Kerberos support for Openssh. Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos
Re: Need help with compiling gss-api into patched openssh
Douglas == Douglas E Engert [EMAIL PROTECTED] writes: Douglas That may be true. But just getting the OpenSSH people to Douglas add the the gssapi authenticaiton to OpenSSH-3.8 was a Douglas big step forward. Sure but when people want to go for the whole solution don't discourage them and tell them to use stock openssh. Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos
Re: Need help with compiling gss-api into patched openssh
Sam Hartman wrote: Douglas == Douglas E Engert [EMAIL PROTECTED] writes: Douglas That may be true. But just getting the OpenSSH people to Douglas add the the gssapi authenticaiton to OpenSSH-3.8 was a Douglas big step forward. Sure but when people want to go for the whole solution don't discourage them and tell them to use stock openssh. OK, then what is party line on the usability of OpenSSH-3.8, and how to obtain the additional parts of the gssapi mods that where not included in 3.8. As you know I have sent Simon a note on this. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos