Can't compile OpenSSH (SSH1) with Kerberos5 on Linux 2.4

Robert Stober rmstober at sbcglobal.net
Sat Apr 24 23:35:25 EDT 2004


Hi,

I'm trying to compile OpenSSH (SSH1) with kerberos5 support on RedHat 7.3:

./configure --with-kerberos5

I have the Oreilly book "SSH The Secure Shell". In chapter 11-4 the author
dicusses how to compile SSH1 with Kerberos support.

1. He indicated that I needed to create a link in $KRB5_TOP/lib:

ln -s libk5ccrypto.a libcrypto.a

2. He also said I needed to replace all occurences of "krb5_xfree" with
"xfree" in the auth-kerberos.c file. He appears to be correct on both
counts.

But I still get the following undefined reference errors when linking:

gcc -pipe -o ssh ssh.o sshconnect.o log-client.o readconf.o hostfile.o
readpass.o tildexpand.o clientloop.o canohost.o idea.o rsa.o randoms.o md5.o
buffer.o emulate.o packet.o compress.o xmalloc.o ttymodes.o newchannels.o
bufaux.o authfd.o authfile.o crc32.o rsaglue.o cipher.o des.o match.o
arcfour.o mpaux.o userfile.o signals.o blowfish.o deattack.o \
-Lgmp-2.0.2-ssh-2 -lgmp -Lzlib-1.0.4 -lz -lnsl -lbsd -lcrypt -L/usr/local/li
b -lutil -L/usw/krb5/lib -lgssapi_krb5 -lkrb5 -lcrypto -lcom_err -lndbm
/usw/krb5/lib/libkrb5.a(cc_file.o): In function `krb5_fcc_generate_new':
/tmp/krb5/krb5-1.3.1/src/lib/krb5/ccache/cc_file.c:2063: the use of `mktemp'
is dangerous, better use `mkstemp'
/usw/krb5/lib/libkrb5.a(hst_realm.o): In function `krb5_try_realm_txt_rr':
/tmp/krb5/krb5-1.3.1/src/lib/krb5/os/hst_realm.c:146: undefined reference to
`__res_search'
/tmp/krb5/krb5-1.3.1/src/lib/krb5/os/hst_realm.c:171: undefined reference to
`__dn_expand'
/usw/krb5/lib/libkrb5.a(locate_kdc.o): In function
`krb5int_make_srv_query_realm':
/tmp/krb5/krb5-1.3.1/src/lib/krb5/os/locate_kdc.c:585: undefined reference
to `__res_search'
/tmp/krb5/krb5-1.3.1/src/lib/krb5/os/locate_kdc.c:613: undefined reference
to `__dn_expand'
collect2: ld returned 1 exit status
make: *** [ssh] Error 1

Also, when I make without kerberos support the build works fine. Can anyone
tell me how to fix this?

Any help you can provide will be greatly appreciated.

Thank you,

Robert Stober




More information about the Kerberos mailing list