Re: Need help with compiling gss-api into patched openssh

2004-02-26 Thread Sam Hartman
 Douglas == Douglas E Engert [EMAIL PROTECTED] writes:

Douglas Sam Hartman wrote:
   Douglas == Douglas E Engert [EMAIL PROTECTED] writes:
 
Douglas That may be true. But just getting the OpenSSH people to
Douglas add the the gssapi authenticaiton to OpenSSH-3.8 was a
Douglas big step forward.
  Sure but when people want to go for the whole solution don't
 discourage them and tell them to use stock openssh.

Douglas OK, then what is party line on the usability of
Douglas OpenSSH-3.8, and how to obtain the additional parts of
Douglas the gssapi mods that where not included in 3.8.  As you
Douglas know I have sent Simon a note on this.

I was not aware the patches were so out of date.  I think I'll wait
until Simon gets the new patch out to start recommending people use
it;)


Kerberos mailing list   [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos


Re: Need help with compiling gss-api into patched openssh

2004-02-25 Thread Douglas E. Engert
OpenSSH-3.8 released yesterday contains the gssapi patch. It also contains
changes to use the krb5-config, which loks like your problem. 
  

Scott Ehrlich wrote:
 
 I just upgraded my Cygwin installation on my XP laptop, downloaded the
 gssapi patch from www.sxw.org.uk, obtained the corresponding
 openssh/portable from ftp.openbsd.org, patched without error, downloaded
 the Krb5 source and compiled, pointing to the kerb5 source directory, and,
 towards the end of ./configure in the openssh directory, receive:
 
 checking for gss_init_sec_context in -lgssapi_krb5... no
 configure: WARNING: Cannot find any suitable gss-api library - build may
 fail
 [then]
 checking for gssapi.h... no
 configure: WARNING: Cannot find any suitable gss-api header - build may
 fail
 
 What am I missing?   Doesn't the patch take care of that?
 
 Thanks for any help.
 
 Scott
 
 
 Kerberos mailing list   [EMAIL PROTECTED]
 https://mailman.mit.edu/mailman/listinfo/kerberos

-- 

 Douglas E. Engert  [EMAIL PROTECTED]
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439 
 (630) 252-5444

Kerberos mailing list   [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos


Re: Need help with compiling gss-api into patched openssh

2004-02-25 Thread Scott Ehrlich
On Wed, 25 Feb 2004, Douglas E. Engert wrote:

 Date: Wed, 25 Feb 2004 09:56:53 -0600
 From: Douglas E. Engert [EMAIL PROTECTED]
 To: Scott Ehrlich [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Subject: Re: Need help with compiling gss-api into patched openssh

 OpenSSH-3.8 released yesterday contains the gssapi patch. It also contains
 changes to use the krb5-config, which loks like your problem.



I just ran configure on it with --with-kerberos5=/home/scott/krb5-1.3.1
(Kerb source downloaded from MIT's site) and still got the same failure
mode.

Other ideas?

Thanks.

Scott

Kerberos mailing list   [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos


Re: Need help with compiling gss-api into patched openssh

2004-02-25 Thread Douglas E. Engert


Scott Ehrlich wrote:
 
 On Wed, 25 Feb 2004, Douglas E. Engert wrote:
 
  Date: Wed, 25 Feb 2004 09:56:53 -0600
  From: Douglas E. Engert [EMAIL PROTECTED]
  To: Scott Ehrlich [EMAIL PROTECTED]
  Cc: [EMAIL PROTECTED]
  Subject: Re: Need help with compiling gss-api into patched openssh
 
  OpenSSH-3.8 released yesterday contains the gssapi patch. It also contains
  changes to use the krb5-config, which loks like your problem.
 
 
 
 I just ran configure on it with --with-kerberos5=/home/scott/krb5-1.3.1
 (Kerb source downloaded from MIT's site) and still got the same failure
 mode.

Is this the install path? The krb5-config will return the locations
of the libs and includes.  Try runing the installpath/bin/krb5-config 
to see what it outputs.

You may have to add add a link or copy the installpath/include/gssapi/gssapi.h to
installpath/include/gssapi.h 

 
 Other ideas?
 
 Thanks.
 
 Scott

-- 

 Douglas E. Engert  [EMAIL PROTECTED]
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439 
 (630) 252-5444

Kerberos mailing list   [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos


Re: Need help with compiling gss-api into patched openssh

2004-02-25 Thread Sam Hartman
 Douglas == Douglas E Engert [EMAIL PROTECTED] writes:

Douglas OpenSSH-3.8 released yesterday contains the gssapi
Douglas patch. It also contains changes to use the krb5-config,
Douglas which loks like your problem.

Doug, OpenSSH does not contain support for gss-keyex, which is really
what you want to be using if you want Kerberos support for Openssh.


Kerberos mailing list   [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos


Re: Need help with compiling gss-api into patched openssh

2004-02-25 Thread Sam Hartman
 Douglas == Douglas E Engert [EMAIL PROTECTED] writes:


Douglas That may be true. But just getting the OpenSSH people to
Douglas add the the gssapi authenticaiton to OpenSSH-3.8 was a
Douglas big step forward.

Sure but when people want to go for the whole solution don't
discourage them and tell them to use stock openssh.


Kerberos mailing list   [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos


Re: Need help with compiling gss-api into patched openssh

2004-02-25 Thread Douglas E. Engert


Sam Hartman wrote:
 
  Douglas == Douglas E Engert [EMAIL PROTECTED] writes:
 
 Douglas That may be true. But just getting the OpenSSH people to
 Douglas add the the gssapi authenticaiton to OpenSSH-3.8 was a
 Douglas big step forward.
 
 Sure but when people want to go for the whole solution don't
 discourage them and tell them to use stock openssh.

OK, then what is party line on the usability of OpenSSH-3.8, and 
how to obtain the additional parts of the gssapi mods that where 
not included in 3.8.  As you know I have sent Simon a note on this. 


-- 

 Douglas E. Engert  [EMAIL PROTECTED]
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439 
 (630) 252-5444

Kerberos mailing list   [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos