Mike,

Make real sure that kerberos was made with shared libs. It doesn't
really matter to ssh, either way will work fine, but a ldd sshd2 won't
find the static libs. I had to tell ./configure to make the shared libs
for kerberos. Below was my command line.

./configure --enable-shared --prefix=/usr/local/krb5-1.1.1 --without-krb4

You won't get shared libs without telling it to make them. I preferred the
shared libs for the obvious advantages--less memory usage.

Carl

On 15-Sep-00 Mike Friedman wrote:
> On Fri Sep 15 10:07:55 2000, Carl J. Nobile said:
> 
>> This might explain Mike's problem then. I helped debug the ssh-2.3.0
>> release and I know it works with krb-1.1.1 based on the info I got
>> from
>> Anne Carasik at SSH Secure. Mike is using a too new version of
>> Kerberos.
>> If he dropped back to Krb5-1.1.2 I bet it would work. Since these
>> versions
>> don't use the resolver, the ssh ./configure script won't know to add
>> the
>> resolv lib into the command line. Bingo
> 
> Well, I've actually run into several problems:
> 
> o  -lresolv is missing.  OK, that could be explained by the new
> functions
>    in 1.2.1.
> 
> o  -lk5crypto is missing.  Why should that be?
> 
> o  -lcom_err is missing.  Makes even less sense, since that library has
>    been included in Kerberos releases at least since 1.0.6.
> 
> o  When I add the above three libraries to config.status and run it,
>    I'm then able to get make to complete successfully.  But then I
>    still find no sign of Kerberos support actually being installed.
>    When I do an 'ldd' on sshd2 and ssh2, I see no Kerberos libraries
>    at all.  (Also, the man pages don't mention Kerberos at all, though
>    that could just be because they were never updated).
> 
> Mike
> 
> ------------------------------------------------------------------------
> ----
> Mike Friedman                             [EMAIL PROTECTED]
> Communication & Network Services          +1-510-642-1410
> University of California at Berkeley     
> http://ack.Berkeley.EDU/~mikef
> ------------------------------------------------------------------------
> ----

------------------------------------------------------------------------
E-Mail: Carl J. Nobile <[EMAIL PROTECTED]>
Date: 15-Sep-00                             Phone: 315-453-2912 Ex. 5336
Time: 14:38:09                                Fax: 315-479-0859

Software Engineering Group -- AppliedTheory Corp.
224 Harrison Street, 6th Floor, Syracuse, NY  13202
------------------------------------------------------------------------

Reply via email to