On 15-Sep-00 Jeffrey Altman wrote:
> Krb5 1.1.2 is a version of 1.1.1 that contains no feature changes
> just fixes for the CERT warning that were sent out last Feb regarding
> buffer overflows. 1.1.x does not use the resolver.
>
> Krb5 1.2.1 is the current release of Krb5 that was released in June.
> 1.2.x does use the resolver. It is necessary for the implementation
> of DNS SRV and TXT record support. 1.2.x went into beta last
> January.
>
> libk5crypto. was renamed during the 1.1.x release.
This might explain Mike's problem then. I helped debug the ssh-2.3.0
release and I know it works with krb-1.1.1 based on the info I got from
Anne Carasik at SSH Secure. Mike is using a too new version of Kerberos.
If he dropped back to Krb5-1.1.2 I bet it would work. Since these versions
don't use the resolver, the ssh ./configure script won't know to add the
resolv lib into the command line. Bingo
Carl
> I know nothing about the Krb5 support in ssh.2.3.0. All my comments
> are based entirely upon reading the problem reports that Mike has sent
> to this list. This missing libraries indicate that the support does
> not work with the 1.2.x distributions. The use of the older crypto
> library name appears to indicate a pre 1.1.x distribution.
------------------------------------------------------------------------
E-Mail: Carl J. Nobile <[EMAIL PROTECTED]>
Date: 15-Sep-00 Phone: 315-453-2912 Ex. 5336
Time: 12:52:11 Fax: 315-479-0859
Software Engineering Group -- AppliedTheory Corp.
224 Harrison Street, 6th Floor, Syracuse, NY 13202
------------------------------------------------------------------------
