[OpenAFS] gssklog

[Douglas E. Engert]

Wyllys Ingersoll wrote:
> 
> Douglas E. Engert wrote:
> > These would be in the gss libraries supplied by MIT, Hiemdal or the Sun SEAM.
> >
> > You will need to add when you run configure:
> >
> > --with-gss-lib-dir=/usr/lib
> > --with-gss-lib-name=gss
> >
> > I don't have SEAM setup on any systems but this compiles and links
> > on a 5.8 system:
> >
> > ../src/configure \
> >   --with-gss-lib-dir=/usr/lib \
> >   --with-gss-lib-name=gss \
> >   --with-tcp-wrappers=/afs/anl.gov/appl/wrapper-7.6/@sys \
> >   --enable-server \
> >   --enable-pam \
> >   --with-server-extra-ldflags=/usr/afsws/lib/libdes.a
> >
> > This will use the /etc/gss configuration files to select which mech to try.
> > There maybe a way to use the Kerberos only version.
> > See "man mech"
> 
> Correct.  Put the Kerberos_V5 entry first in the list (/etc/gss/mech)
> and it will be used by default.
> 
> >
> > Maybe someone who has imlemented SEAM could say something here.
> >
> >
> >
> > Chris McClimans wrote:
> >
> >>I'm trying to get the gssklog to compile and I appear to be missing a
> >>library... linking against sasl2 doesn't seem to help.
> >>Where are the gss_*status/buffer functions defined?
> >>-chris
> >>
> >>gcc  -o gssklog gssklog.o gssklog_afs.o \
> >>gssklog_gss.o gssklog_comm.o \
> >>-Wl,--noinhibit-exec,-rpath,:/usr/lib:/lib  -L/usr/afsws/lib
> >>-L/usr/afsws/lib/afs -lprot -lubik -lauth -lcmd -lsys -lrxkad -lrx
> >>-llwp /usr/afsws/lib/libdes.a /usr/afsws/lib/afs/util.a
> >>/usr/afsws/lib/afs/libcom_err.a \
> >>  \
> >>-L -l -lresolv -lnsl
> 
> The link command (above) does not include "-lgss".  Thats why you are
> getting all of the unresolved symbol errors below.  Tweak the makefile
> so it adds "-lgss" to the list of libraries.

The configure --with-gss-lib-name should take cake of this. There should be no need
to change the Makefile.  


> 
> If using Solaris 8, also be sure to download the Solaris Encryption Pack
> for Solaris 8 (free download from http://www.sun.com/software/solaris/encryption)
> in order to get the correct encryption algorithms for Kerberos and GSSAPI.
> By default, the SEAM package for Solaris 8 includes a "neutered" kerberos
> implementation because at the time that the packages were created, we
> were bound by much stricter export control laws.  Also get the latest
> patches from sunsolve.sun.com.
> 
> In Solaris 9, the Kerberos crypto is installed by default.
> 
> -Wyllys
> 
> >>gssklog_gss.o: In function `gssklog_gss_acquire_cred':
> >>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:96: undefined reference
> >>to `gss_acquire_cred'
> >>gssklog_gss.o: In function `gssklog_gss_doit':
> >>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:200: undefined reference
> >>to `gss_import_name'
> >>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:205: undefined reference
> >>to `gss_release_buffer'
> >>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:226: undefined reference
> >>to `gss_init_sec_context'
> >>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:279: undefined reference
> >>to `gss_release_buffer'
> >>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:368: undefined reference
> >>to `gss_release_name'
> >>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:372: undefined reference
> >>to `gss_delete_sec_context'
> >>gssklog_gss.o: In function `gssklog_gss_wrap':
> >>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:396: undefined reference
> >>to `gss_wrap'
> >>gssklog_gss.o: In function `gssklog_gss_unwrap':
> >>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:420: undefined reference
> >>to `gss_unwrap'
> >>gssklog_gss.o: In function `gssklog_gss_display_status':
> >>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:447: undefined reference
> >>to `gss_display_status'
> >>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:456: undefined reference
> >>to `gss_release_buffer'
> >>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:467: undefined reference
> >>to `gss_display_status'
> >>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:476: undefined reference
> >>to `gss_release_buffer'
> >>gssklog_gss.o: In function `gssklog_gss_release_buffer':
> >>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:490: undefined reference
> >>to `gss_release_buffer'
> >>
> >>_______________________________________________
> >>OpenAFS-info mailing list
> >>OpenAFS-info@openafs.org
> >>https://lists.openafs.org/mailman/listinfo/openafs-info
> >
> >
> 
> --
> 
> Wyllys Ingersoll
> Sun Microsystems, Inc
> PGP Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xAF353913
> Fingerprint: 92CD E875 59A0 798E ED9A  D75B 303A 57F0 AF35 3913

-- 

 Douglas E. Engert  <DEEngert@anl.gov>
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439 
 (630) 252-5444