[OpenAFS] gssklog

[Wyllys Ingersoll]

Douglas E. Engert wrote:
> These would be in the gss libraries supplied by MIT, Hiemdal or the Sun SEAM.
> 
> You will need to add when you run configure:
> 
> --with-gss-lib-dir=/usr/lib
> --with-gss-lib-name=gss
> 
> I don't have SEAM setup on any systems but this compiles and links 
> on a 5.8 system:
> 
> ../src/configure \
>   --with-gss-lib-dir=/usr/lib \
>   --with-gss-lib-name=gss \
>   --with-tcp-wrappers=/afs/anl.gov/appl/wrapper-7.6/@sys \
>   --enable-server \
>   --enable-pam \
>   --with-server-extra-ldflags=/usr/afsws/lib/libdes.a 
> 
> This will use the /etc/gss configuration files to select which mech to try.
> There maybe a way to use the Kerberos only version. 
> See "man mech"

Correct.  Put the Kerberos_V5 entry first in the list (/etc/gss/mech)
and it will be used by default.

> 
> Maybe someone who has imlemented SEAM could say something here.
> 
>  
> 
> Chris McClimans wrote:
> 
>>I'm trying to get the gssklog to compile and I appear to be missing a
>>library... linking against sasl2 doesn't seem to help.
>>Where are the gss_*status/buffer functions defined?
>>-chris
>>
>>gcc  -o gssklog gssklog.o gssklog_afs.o \
>>gssklog_gss.o gssklog_comm.o \
>>-Wl,--noinhibit-exec,-rpath,:/usr/lib:/lib  -L/usr/afsws/lib
>>-L/usr/afsws/lib/afs -lprot -lubik -lauth -lcmd -lsys -lrxkad -lrx
>>-llwp /usr/afsws/lib/libdes.a /usr/afsws/lib/afs/util.a
>>/usr/afsws/lib/afs/libcom_err.a \
>>  \
>>-L -l -lresolv -lnsl


The link command (above) does not include "-lgss".  Thats why you are
getting all of the unresolved symbol errors below.  Tweak the makefile
so it adds "-lgss" to the list of libraries.

If using Solaris 8, also be sure to download the Solaris Encryption Pack
for Solaris 8 (free download from http://www.sun.com/software/solaris/encryption)
in order to get the correct encryption algorithms for Kerberos and GSSAPI.
By default, the SEAM package for Solaris 8 includes a "neutered" kerberos
implementation because at the time that the packages were created, we
were bound by much stricter export control laws.  Also get the latest
patches from sunsolve.sun.com.

In Solaris 9, the Kerberos crypto is installed by default.

-Wyllys


>>gssklog_gss.o: In function `gssklog_gss_acquire_cred':
>>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:96: undefined reference
>>to `gss_acquire_cred'
>>gssklog_gss.o: In function `gssklog_gss_doit':
>>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:200: undefined reference
>>to `gss_import_name'
>>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:205: undefined reference
>>to `gss_release_buffer'
>>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:226: undefined reference
>>to `gss_init_sec_context'
>>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:279: undefined reference
>>to `gss_release_buffer'
>>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:368: undefined reference
>>to `gss_release_name'
>>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:372: undefined reference
>>to `gss_delete_sec_context'
>>gssklog_gss.o: In function `gssklog_gss_wrap':
>>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:396: undefined reference
>>to `gss_wrap'
>>gssklog_gss.o: In function `gssklog_gss_unwrap':
>>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:420: undefined reference
>>to `gss_unwrap'
>>gssklog_gss.o: In function `gssklog_gss_display_status':
>>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:447: undefined reference
>>to `gss_display_status'
>>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:456: undefined reference
>>to `gss_release_buffer'
>>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:467: undefined reference
>>to `gss_display_status'
>>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:476: undefined reference
>>to `gss_release_buffer'
>>gssklog_gss.o: In function `gssklog_gss_release_buffer':
>>/home/mccliman/src/gssklog-0.8/./gssklog_gss.c:490: undefined reference
>>to `gss_release_buffer'
>>
>>_______________________________________________
>>OpenAFS-info mailing list
>>OpenAFS-info@openafs.org
>>https://lists.openafs.org/mailman/listinfo/openafs-info
> 
> 


-- 

Wyllys Ingersoll
Sun Microsystems, Inc
PGP Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xAF353913
Fingerprint: 92CD E875 59A0 798E ED9A  D75B 303A 57F0 AF35 3913