RE: GSSAPI authentication

[de Jong, Mark]

Derek, I am running K5 release 1.1 from MIT. I found gssapi.h and have tried
to compile using your current version of CVS (1.11). I want to get this to
work before moving on to your new release. :) I get a series of errors while
compiling:

Undefined symbol '_valid_enctype' referenced from text segment

I get the same for _krb5_c_decrypt, krb5_c_encrypt_length, krb5_c_encrypt,
_valid_entype, _krb5_random_seed, blah blah blah...

gssapi.h is located in /usr/local/lib/gssapi

I ran ./configure --with-gssapi=/usr/local and configure does find gssapi.h.

The libraries are located in /usr/local/lib

Any ideas?


Thanks,
Mark

-----Original Message-----
From: Derek R. Price [mailto:address@hidden
Sent: Friday, February 16, 2001 11:53 PM
To: de Jong, Mark
Subject: Re: GSSAPI authentication


"de Jong, Mark" wrote:

> I think I acted in haste.. I have Kerberos 5 installed. I take is GSSAPI
> runs on top of that?

I think that is the basic idea, but the necessary headers and libraries seem
to
install with Kerberos 5 distributions on other systems.


> I am running CVS 1.11 on OpenBSD 2.8 with Kerberos 5.1
> installed.

Who is vendor of your K5?  I don't recognize the 5.1 version number.


> If I do need to install GSSAPI, once I have done so, I'd be happy
> to test the new source.

Um, here's two tests...  I'm using a broad find command to implement them,
but
once you find gssapi.h (should be */include/gssapi.h or
*/include/gssapi/gssapi.h), the lib dir should be parallel to the include
dir.
e.g. finding /usr/kerberos/include/gssapi/gssapi.h means that the necessary
libraries should be installed in /usr/kerberos/lib.


     find / -name gssapi.h -print 2>/dev/null

That should find the header for you and print the path.  Once you have that,
determine <libdir> as above and run the following:


     nm -A <libdir>/*.a |grep gss_import_name

and send me the output (I really only need the name of the library you found
the gss_import_name function in, but nm output can be hard to decipher - the
function definition will probably have a type code of 'T', but you'll have
to
man your nm to be sure).  I'll send you a tar ball or a patch against the
current dev version of the source and you can attempt to compile.  Please
let
me know your 2.5MB tar ball/smaller patch preference.

Derek

--
Derek Price                      CVS Solutions Architect (
http://CVSHome.org )
mailto:address@hidden     OpenAvenue ( http://OpenAvenue.com )
--
I cannot live without books.

                        - Thomas Jefferson