[OpenAFS] Re: Kerberos V and xscreensaver/xlock

[Henry B. Hotz]

At 9:08 AM +0100 11/5/02, Balazs GAL wrote:
>2002-11-05, k keltez=E9ssel Henry B. Hotz ezt =EDrta:
>  > So, if I understand you properly you are using versions that are "new
>>  enough" they should solve the libtool problem I pointed out, even
>>  though they may be older than the versions bundled with OSX.2.
>
>Yes. E.g It seems, that you have automake 1.6, but I have 1.4.

Configure now appears to work as expected, but see below.

>  > >Please try pam_krb5_snap-2002.11.04.tar.gz.
>>
>  > Hmmm...
>>
>  > I now have pam_krb5.{la,o,lo} and some stuff in .libs, but no
>>  pam_krb5afs* even though pam_krb5afs.c was compiled.
>
>As You see there is not pam_krb5.c because the source of pam_krb5 is
>pam_krb5afs.c.
>If You dont have a pam_krb5afs.{la,o,lo} then you dont
>have the krbafs library (use --with-krbafs=3Ddir if configure cant find
>it) if you use MIT-krb5 or your heimdal wasn't
>compiled with afs support(libkafs) (or configure is broken).
>./configure must warn you with "AFS token-grabbing disabled"
>if it cant find libkrbafs or libkafs.
>
>  > sudo make install does something plausable.
>  > I'll try some more when I have a chance.
>
>Thanks.

OK, I did it two ways.  First I took the default install location 
which was /usr/local/lib/.  I put /usr/local/lib/pam in the 
/etc/pam.d/sshd file though and got some errors indicating it 
couldn't load.

After a false start I redid it with ./configure --with-krb5 
--libdir=3D/usr/lib/pam and got the pam_krb5.{la,so} files installed 
there.  Now it crashes with the following traceback recorded:
>Thread 0 Crashed:
>  #0   0x8fe01280 in halt
>  #1   0x8fe106b4 in link_in_need_modules
>  #2   0x8fe12230 in _dyld_link_module
>  #3   0x900171c8 in NSLinkModule
>  #4   0x93ef53d0 in _pam_dlopen
>  #5   0x93ef35e4 in _pam_init_handlers
>  #6   0x93ef2fd4 in _pam_dispatch
>  #7   0x93ef3170 in _pam_init_handlers
>  #8   0x93ef2258 in pam_start
>  #9   0x0000a9b0 in 0xa9b0
>  #10  0x000152f4 in 0x152f4
>  #11  0x00014a2c in 0x14a2c
>  #12  0x000146f4 in 0x146f4
>  #13  0x000034cc in 0x34cc
>  #14  0x000050dc in 0x50dc
>  #15  0x000027c0 in 0x27c0
>  #16  0x00002640 in 0x2640

I just did the configure over again and there is no reference to 
libkafs or libkrbafs and there are no warnings of the type you 
mention.  You can look at 
/afs/jpl/home/h/hotz/public/pam/pam_krb5_snap/configure.log.  Also 
neither of those libraries exist in the base install.

So I just dl'd/installed the krbafs library from the MIT site pointed 
at by the Arla site.  Then I did "./configure 
--with-krb4=3D/usr/include/kerberosIV --with-krb5=3D/usr/include 
--with-krbafs=3D/usr/local/lib --libdir=3D/usr/lib/pam > & 
configure.log3" and there is still no mention of krbafs by configure.

I believe there is a configure bug here.  However I'm more concerned 
about the pam crash in the module I did build above.  FWIW a file of 
pam_krb5 says Mach-O bundle, just like the other pam modules.  That's 
the limit of my knowledge of the file type it needs to create.
-- 
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu