[OpenAFS] kth-krb, openssh w. afs support on fedora core
David Botsch
dwb7@ccmr.cornell.edu
Wed, 8 Oct 2003 18:04:35 -0400
Hi.
Suggestions appreciated.
Have tried the OPENSSL_DES_LIBDES_COMPATIBILITY define, and that seems
to fix the previous error, tho, compilation now crashes with:
In file included from krb.h:355,
from krb_locl.h:126,
from krb_check_auth.c:34:
krb-protos.h:175: warning: `struct des_ks_struct' declared inside
parameter list
krb-protos.h:175: warning: its scope is only this definition or
declaration, which is probably not what you want
krb-protos.h:456: warning: `struct des_ks_struct' declared inside
parameter list
krb-protos.h:540: warning: `struct des_ks_struct' declared inside
parameter list
krb-protos.h:576: warning: `struct des_ks_struct' declared inside
parameter list
krb-protos.h:590: warning: `struct des_ks_struct' declared inside
parameter list
krb_check_auth.c:55: warning: `struct des_ks_struct' declared inside
parameter list
krb_check_auth.c:56: error: conflicting types for `krb_check_auth'
krb-protos.h:175: error: previous declaration of `krb_check_auth'
krb_check_auth.c: In function `krb_check_auth':
krb_check_auth.c:61: warning: passing arg 3 of `krb_rd_priv' from
incompatible pointer type
make: *** [krb_check_auth.lo] Error 1
They look the same, unless I've just been staring at this way too long..
from krb-protos.h:
int KRB_LIB_FUNCTION
krb_check_auth __P((
KTEXT packet,
u_int32_t checksum,
MSG_DAT *msg_data,
des_cblock *session,
struct des_ks_struct *schedule,
struct sockaddr_in *laddr,
struct sockaddr_in *faddr));
from krb_check_auth.c:
int
krb_check_auth(KTEXT packet,
u_int32_t checksum,
MSG_DAT *msg_data,
des_cblock *session,
struct des_ks_struct *schedule,
struct sockaddr_in *laddr,
struct sockaddr_in *faddr)
{
On 2003.10.08 14:29 Chaskiel M Grundman wrote:
>
>
> --On Wednesday, October 08, 2003 12:33:27 -0400 David Botsch
> <dwb7@ccmr.cornell.edu> wrote:
>
> > Then, moved on to trying to get openssh going w. afs token passing
> > support.
> IIRC, The afs code was disabled in openssh 3.6 and removed in 3.7 (it
> didn't work with privsep, it was insecure. etc. etc.)
>
> The new way to accomplish the same task is with GSSAPI credential
> delegation. Also IIRC, openssh 3.7 includes a partial but usable
> implementation of the GSSAPI code.
>
> > Ran into the can't compile in afs w/o krb4, so, went to try and
> > compile kth-krb 1.2.2, which fails with:
> >
> > encrypt_ktext.c: In function `encrypt_ktext':
> > encrypt_ktext.c:45: error: incompatible types in initialization
> The easy way to fix this is to not compile krb4 against openssl and
> let it
> use it's own des library. However, doing so may cause you problems in
> the
> long run. The other thing you can do is define
> OPENSSL_DES_LIBDES_COMPATIBILITY before <openssl/des.h> is included,
> although supposedly that code is going away at some point.
>
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>
--
********************************
David William Botsch
Consultant/Advisor II
CCMR Computing Facility
dwb7@ccmr.cornell.edu
********************************