[OpenAFS] mod_waklog

Stephen Quinney stephen@jadevine.org.uk
Wed, 4 Apr 2012 17:38:58 +0100


--20cf305e253568c4a104bcdd0fe5
Content-Type: text/plain; charset=ISO-8859-1

I've seen a few discussions on this mailing list about using
mod_waklog, particularly regarding x86_64. I've recently had the
chance to spend some time looking at it and now have it working on
RHEL6 for both i386 and x86_64.

I took the latest code from the git repository (details at
http://www.modwaklog.org/download.php) and started by applying the 3
patches from http://userpages.umbc.edu/~aaronk/waklog/ which have been
mentioned on this list before.

To get it working with Kerberos 1.8 and newer without globally setting
the allow_weak_crypto option to true I had to add a call to
krb5_allow_weak_crypto() in mod_waklog.c, I think this could be done
better as the code now won't work on machines with older versions of
Kerberos.

I also had to modify the set of libraries which are linked against so
that only libafsrpc and libafsauthent are used.

I've attached the two small patches required.

Cheers,

Stephen

--20cf305e253568c4a104bcdd0fe5
Content-Type: application/octet-stream; name="modwaklog-libs.patch"
Content-Disposition: attachment; filename="modwaklog-libs.patch"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_h0mll3q50
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--20cf305e253568c4a104bcdd0fe5
Content-Type: application/octet-stream; name="modwaklog-weakcrypto.patch"
Content-Disposition: attachment; filename="modwaklog-weakcrypto.patch"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_h0mll8tv1
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--20cf305e253568c4a104bcdd0fe5--