ssh

[klaas hagemann]

Hi,

i did it this way, and the result is:

when i try 
# ssh <ipadress> 
i get an segmentation fault
but when i do 
#strace ssh <ipadress> 
everything works fine.

Maybe i am to stupid to understand this, can someone explain this to me?

Thanks, Klaas
  ----- Original Message ----- 
  From: Srinivas Cheruku 
  To: klaas hagemann 
  Cc: kerberos at mit.edu 
  Sent: Thursday, April 11, 2002 10:15 AM
  Subject: RE: ssh


  1. Apply the Kerberos patch and then the Openssh-gssapi patch.

  2. Run the autoreconf after applying the patches. (autoreconf version should be later than 2.50)

  #autoreconf 

  3. # ./configure --with-pam --with-kerberos5=<MIT Kerberos Installation path>

  --sysconfdir=/etc/ssh

  4. #make

  5. #make install

  No need of changing the /etc/ssh/sshd_config file. By default it makes use

  of Kerberos Authentication.

  6.Start the sshd daemon.

  # /usr/local/sbin/sshd

  #

  7. Get a TGT from the MIT KDC.

  $./kinit -f user at REALM.COM

  Extract the service key of the host principal to keytab file.

  8. Connect to the sshd server using ssh client

  $ ssh -v hostname

  Then, the ssh client contacts MIT KDC and gets a service ticket for host. It also forwards the TGT to the secure shell.

  9. When you type klist in the shell, then you can see the forwarded TGT.

  Good Luck,

  Srini

    -----Original Message-----
    From: klaas hagemann [mailto:klaas at northsailor.de]
    Sent: Thursday, April 11, 2002 1:36 PM
    To: Srinivas Cheruku; kerberos at mit.edu
    Subject: Re: ssh


    SSH Kompiling seems to be ok, i compiled it without errors with
    ./configure --with-pam --with-kerberos5=/usr/local 

    Befort i applied the patches and ran autoconf.

    I am not sure with these configuratioen files, is it possible für you to send me yours?

    Thanks,
    Klaas

    ----- Original Message ----- 
      From: Srinivas Cheruku 
      To: kerberos at mit.edu 
      Sent: Thursday, April 11, 2002 5:46 AM
      Subject: RE: ssh


      Run the ssh client in verbose mode.
      $ssh -v hostname
      From that just try to make out when it is giving the error.

      I dont know exactly why segmentation fault error is comming.
      May be some configuration and compilation issue.
        -----Original Message-----
        From: klaas hagemann [mailto:klaas at northsailor.de]
        Sent: Wednesday, April 10, 2002 7:48 PM
        To: Srinivas Cheruku; kerberos at mit.edu
        Subject: Re: ssh


        ok, i got openssh and two patches, one for gssapi and one for kerberos.
        i patched both succesfully and was able to make a new configure-file
        i configured and compiled it successfully with krb5-support (--with-krb5)
        and i can start the servrer successfully. 
        Then i try to use ssh and get 
        "segmentation fault" error.

        Do you have an idea?

        Klaas
          ----- Original Message ----- 
          From: Srinivas Cheruku 
          To: kerberos at mit.edu 
          Sent: Wednesday, April 10, 2002 1:24 PM
          Subject: RE: ssh


          You can download openssh from http://www.openssh.com/
          and the Simon's GSSAPI/Kerberos patch from http://www.sxw.org.uk/computing/patches/openssh.html

          Srini
            -----Original Message-----
            From: klaas hagemann [mailto:klaas at northsailor.de]
            Sent: Wednesday, April 10, 2002 4:44 PM
            To: kerberos at mit.edu
            Subject: ssh


            Hi,

            where can i get ssh server and client supporting kerberos auth for linux?
            i apologize if this is a faq, but i haven't found anything.

            thanks

            klaas

          ********************************************************************* Disclaimer: The information in this e-mail and any attachments is confidential / privileged. It is intended solely for the addressee or addressees. If you are not the addressee indicated in this message, you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email. Please advise immediately if you or your employer does not consent to Internet email for messages of this kind. *********************************************************************

      ********************************************************************* Disclaimer: The information in this e-mail and any attachments is confidential / privileged. It is intended solely for the addressee or addressees. If you are not the addressee indicated in this message, you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email. Please advise immediately if you or your employer does not consent to Internet email for messages of this kind. *********************************************************************

  ********************************************************************* Disclaimer: The information in this e-mail and any attachments is confidential / privileged. It is intended solely for the addressee or addressees. If you are not the addressee indicated in this message, you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply email. Please advise immediately if you or your employer does not consent to Internet email for messages of this kind. *********************************************************************

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/kerberos/attachments/20020411/951942bb/attachment.htm