[OpenAFS] kth-krb, openssh w. afs support on fedora core

[Chaskiel M Grundman]

--On Wednesday, October 08, 2003 12:33:27 -0400 David Botsch
<dwb7@ccmr.cornell.edu> wrote:

> Then, moved on to trying to get openssh going w. afs token passing
> support. 
IIRC, The afs code was disabled in openssh 3.6 and removed in 3.7 (it
didn't work with privsep, it was insecure. etc. etc.)

The new way to accomplish the same task is with GSSAPI credential
delegation. Also IIRC, openssh 3.7 includes a partial but usable
implementation of the GSSAPI code.

> Ran into the can't compile in afs w/o krb4, so, went to try and
> compile kth-krb 1.2.2, which fails with:
> 
> encrypt_ktext.c: In function `encrypt_ktext':
> encrypt_ktext.c:45: error: incompatible types in initialization
The easy way to fix this is to not compile krb4 against openssl and let it
use it's own des library. However, doing so may cause you problems in the
long run. The other thing you can do is define
OPENSSL_DES_LIBDES_COMPATIBILITY before <openssl/des.h> is included,
although supposedly that code is going away at some point.