<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2600.0" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>Hi,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>i did it this way, and the result is:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>when i try </FONT></DIV>
<DIV><FONT face=Arial size=2># ssh <ipadress> </FONT></DIV>
<DIV><FONT face=Arial size=2>i get an segmentation fault</FONT></DIV>
<DIV><FONT face=Arial size=2>but when i do </FONT></DIV>
<DIV><FONT face=Arial size=2>#strace ssh <ipadress> </FONT></DIV>
<DIV><FONT face=Arial size=2>everything works fine.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Maybe i am to stupid to understand this, can
someone explain this to me?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks, Klaas</FONT></DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=csri@sonata-software.com
href="mailto:csri@sonata-software.com">Srinivas Cheruku</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=klaas@northsailor.de
href="mailto:klaas@northsailor.de">klaas hagemann</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Cc:</B> <A title=kerberos@mit.edu
href="mailto:kerberos@mit.edu">kerberos@mit.edu</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Thursday, April 11, 2002 10:15
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> RE: ssh</DIV>
<DIV><BR></DIV>
<DIV>
<P><FONT face=Arial><FONT size=2><SPAN class=671351008-11042002>1. Apply the
Kerberos patch and t</SPAN><SPAN class=671351008-11042002>hen the
Openssh-gssapi patch.</SPAN></FONT></FONT></P>
<P><FONT face=Arial size=2><SPAN class=671351008-11042002>2. Run the
autoreconf after applying the patches. (<FONT face=Arial size=2>autoreconf
version should be later than 2.50)</FONT></P></SPAN></FONT>
<P><FONT face=Arial size=2>#autoreconf </FONT></P>
<P><FONT size=2><FONT face=Arial><SPAN class=671351008-11042002>3. </SPAN>#
./configure <SPAN class=671351008-11042002>--with-pam
</SPAN>--with-kerberos5=<MIT Kerberos Installation
path></FONT></FONT></P>
<P><FONT face=Arial size=2>--sysconfdir=/etc/ssh</FONT></P>
<P><FONT size=2><FONT face=Arial><SPAN class=671351008-11042002>4.
</SPAN>#make</FONT></FONT></P>
<P><FONT size=2><FONT face=Arial><SPAN class=671351008-11042002>5.
</SPAN>#make install</FONT></FONT></P>
<P><FONT face=Arial size=2>No need of changing the /etc/ssh/sshd_config file.
By default it makes use</FONT></P>
<P><FONT face=Arial size=2>of Kerberos Authentication.</FONT></P>
<P><FONT size=2><FONT face=Arial><SPAN class=671351008-11042002>6.</SPAN>Start
the sshd daemon.</FONT></FONT></P>
<P><FONT face=Arial size=2># /usr/local/sbin/sshd</FONT></P>
<P><FONT face=Arial size=2>#</FONT></P>
<P><FONT size=2><FONT face=Arial><SPAN class=671351008-11042002>7</SPAN>. Get
a TGT from the MIT KDC.</FONT></FONT></P>
<P><FONT face=Arial size=2>$./kinit -f user@REALM.COM</FONT></P>
<P><FONT face=Arial size=2>Extract the service key of the host principal to
keytab file.</FONT></P>
<P><FONT size=2><FONT face=Arial><SPAN class=671351008-11042002>8</SPAN>.
Connect to the sshd server using ssh client</FONT></FONT></P>
<P><FONT face=Arial size=2>$ ssh -v hostname</FONT></P>
<P><FONT face=Arial size=2>Then, the ssh client contacts MIT KDC and gets a
service ticket for host. It<SPAN class=671351008-11042002> </SPAN>also
forwards the TGT to the secure shell.</FONT></P>
<P><FONT size=2><FONT face=Arial><SPAN class=671351008-11042002>9</SPAN>. When
you type klist in the shell, then you can see the forwarded<SPAN
class=671351008-11042002> </SPAN>TGT.</FONT></FONT></P>
<P><FONT face=Arial size=2>Good Luck,</FONT></P>
<P><FONT face=Arial size=2>Srini</FONT></P></DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> klaas hagemann
[mailto:klaas@northsailor.de]<BR><B>Sent:</B> Thursday, April 11, 2002 1:36
PM<BR><B>To:</B> Srinivas Cheruku; kerberos@mit.edu<BR><B>Subject:</B> Re:
ssh<BR><BR></DIV></FONT>
<DIV><FONT face=Arial size=2>SSH Kompiling seems to be ok, i compiled it
without errors with</FONT></DIV>
<DIV><FONT face=Arial size=2>./configure --with-pam
--with-kerberos5=/usr/local </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Befort i applied the patches and ran
autoconf.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I am not sure with these configuratioen files,
is it possible für you to send me yours?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks,</FONT></DIV>
<DIV><FONT face=Arial size=2>Klaas</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV>----- Original Message ----- </DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=csri@sonata-software.com
href="mailto:csri@sonata-software.com">Srinivas Cheruku</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=kerberos@mit.edu
href="mailto:kerberos@mit.edu">kerberos@mit.edu</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Thursday, April 11, 2002 5:46
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> RE: ssh</DIV>
<DIV><BR></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=611574203-11042002>Run the ssh client in verbose
mode.</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=611574203-11042002>$ssh -v hostname</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=611574203-11042002>From that just try to make out when it is giving
the error.</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=611574203-11042002></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=611574203-11042002>I dont know exactly why segmentation fault
error is comming.</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=611574203-11042002>May be some configuration and compilation
issue.</SPAN></FONT></DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> klaas hagemann
[mailto:klaas@northsailor.de]<BR><B>Sent:</B> Wednesday, April 10, 2002
7:48 PM<BR><B>To:</B> Srinivas Cheruku;
kerberos@mit.edu<BR><B>Subject:</B> Re: ssh<BR><BR></DIV></FONT>
<DIV><FONT face=Arial size=2>ok, i got openssh and two patches, one for
gssapi and one for kerberos.</FONT></DIV>
<DIV><FONT face=Arial size=2>i patched both succesfully and was able to
make a new configure-file</FONT></DIV>
<DIV><FONT face=Arial size=2>i configured and compiled it successfully
with krb5-support (--with-krb5)</FONT></DIV>
<DIV><FONT face=Arial size=2>and i can start the servrer successfully.
</FONT></DIV>
<DIV><FONT face=Arial size=2>Then i try to use ssh and get </FONT></DIV>
<DIV><FONT face=Arial size=2>"segmentation fault" error.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Do you have an idea?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Klaas</FONT></DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=csri@sonata-software.com
href="mailto:csri@sonata-software.com">Srinivas Cheruku</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=kerberos@mit.edu
href="mailto:kerberos@mit.edu">kerberos@mit.edu</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Wednesday, April 10, 2002
1:24 PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> RE: ssh</DIV>
<DIV><BR></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=979362411-10042002>You can download openssh from <A
href="http://www.openssh.com/">http://www.openssh.com/</A></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=979362411-10042002>and the Simon's GSSAPI/Kerberos patch from <A
href="http://www.sxw.org.uk/computing/patches/openssh.html">http://www.sxw.org.uk/computing/patches/openssh.html</A></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=979362411-10042002></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=979362411-10042002>Srini</SPAN></FONT></DIV>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> klaas hagemann
[mailto:klaas@northsailor.de]<BR><B>Sent:</B> Wednesday, April 10,
2002 4:44 PM<BR><B>To:</B> <A
href="mailto:kerberos@mit.edu">kerberos@mit.edu</A><BR><B>Subject:</B>
ssh<BR><BR></DIV></FONT>
<DIV><FONT face=Arial size=2>Hi,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>where can i get ssh server and client
supporting kerberos auth for linux?</FONT></DIV>
<DIV><FONT face=Arial size=2>i apologize if this is a faq, but i
haven't found anything.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>thanks</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>klaas</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV></BLOCKQUOTE>
<P><FONT face=Arial
size=2>*********************************************************************
Disclaimer: The information in this e-mail and any attachments is
confidential / privileged. It is intended solely for the addressee or
addressees. If you are not the addressee indicated in this message,
you may not copy or deliver this message to anyone. In such case, you
should destroy this message and kindly notify the sender by reply
email. Please advise immediately if you or your employer does not
consent to Internet email for messages of this kind.
*********************************************************************</FONT></P></BLOCKQUOTE></BLOCKQUOTE>
<P><FONT face=Arial
size=2>*********************************************************************
Disclaimer: The information in this e-mail and any attachments is
confidential / privileged. It is intended solely for the addressee or
addressees. If you are not the addressee indicated in this message, you
may not copy or deliver this message to anyone. In such case, you should
destroy this message and kindly notify the sender by reply email. Please
advise immediately if you or your employer does not consent to Internet
email for messages of this kind.
*********************************************************************</FONT></P></BLOCKQUOTE></BLOCKQUOTE>
<P><FONT face=Arial
size=2>*********************************************************************
Disclaimer: The information in this e-mail and any attachments is confidential
/ privileged. It is intended solely for the addressee or addressees. If you
are not the addressee indicated in this message, you may not copy or deliver
this message to anyone. In such case, you should destroy this message and
kindly notify the sender by reply email. Please advise immediately if you or
your employer does not consent to Internet email for messages of this kind.
*********************************************************************</FONT></P></BLOCKQUOTE></BODY></HTML>