Debug message compiled into libkrb5.a library?

Sun Apr 25 21:46:21 EDT 2004

Russ,

The errors I recieved when trying to compile SSH1 are listed in my previous
posting: "Can't compile OpenSSH (SSH1) with Kerberos5 on Linux 2.4". The
title was an error. Actually I was trying to compile SSH1 (not openSSH) with
Kerberos5.

Now I'm trying to compile OpenSSH with Kerberos5. The errors I recieved when
I tried to compile OpenSSH with Kerberos5 are shown below.

1. First here's the link command:

gcc -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o sshconnect1.o
sshconnect2.o -L. -Lopenbsd-compat/ -lssh -lopenbsd-compat -lresolv -lcrypto
 -lutil -lz -lnsl -lcrypt -L/usw/krb5/lib -lgssapi_krb5 -lkrb5 -lk5crypto -l
com_err -lresolv

2. Here's the warning (you've already seen):

/usw/krb5/lib/libkrb5.a(cc_file.o): In function `krb5_fcc_generate_new':
/tmp/krb5/krb5-1.3.1/src/lib/krb5/ccache/cc_file.c:2063: the use of `mktemp'
is dangerous, better use `mkstemp'

3. Here are the undefined references - there are more, but here is the first
screen-full:

ssh.o: In function `main':
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/ssh.c:313: undefined reference to
`SSLeay_version'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/ssh.c:471: undefined reference to
`OpenSSL_add_all_algorithms'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/ssh.c:472: undefined reference to
`ERR_load_crypto_strings'
sshconnect1.o: In function `try_agent_authentication':
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:130: undefined reference
to `BN_clear_free'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:67: undefined reference
to `BN_new'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:140: undefined reference
to `BN_clear_free'
sshconnect1.o: In function `respond_to_rsa_challenge':
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:164: undefined reference
to `BN_num_bits'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:170: undefined reference
to `BN_bn2bin'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:171: undefined reference
to `MD5_Init'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:172: undefined reference
to `MD5_Update'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:173: undefined reference
to `MD5_Update'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:174: undefined reference
to `MD5_Final'
sshconnect1.o: In function `try_rsa_authentication':
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:231: undefined reference
to `BN_new'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:283: undefined reference
to `BN_clear_free'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:295: undefined reference
to `BN_clear_free'
sshconnect1.o: In function `try_rhosts_rsa_authentication':
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:324: undefined reference
to `BN_num_bits'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:344: undefined reference
to `BN_new'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:355: undefined reference
to `BN_clear_free'
sshconnect1.o: In function `ssh_kex':
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:496: undefined reference
to `BN_num_bits'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:508: undefined reference
to `BN_num_bits'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:523: undefined reference
to `BN_num_bits'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:523: undefined reference
to `BN_num_bits'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:553: undefined reference
to `BN_new'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:555: undefined reference
to `BN_set_word'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:557: undefined reference
to `BN_lshift'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:561: undefined reference
to `BN_add_word'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:568: undefined reference
to `BN_cmp'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:570: undefined reference
to `BN_num_bits'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:570: undefined reference
to `BN_num_bits'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:572: undefined reference
to `BN_num_bits'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:572: undefined reference
to `BN_num_bits'
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:582: undefined reference
to `BN_num_bits'
sshconnect1.o:/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:582: more
undefined references to `BN_num_bits' follow
sshconnect1.o: In function `ssh_kex':
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/sshconnect1.c:624: undefined reference
to `BN_clear_free'
./libssh.a(authfd.o): In function `ssh_get_next_identity':
/tmp/openssh-3.8.1p1/openssh-3.8.1p1/authfd.c:335: undefined reference to
`BN_num_bits'
/tmp/openssh-3.8.1p
...
more errors here, then ld exit 1.

4. Here's some late-breaking news: I successfully compiled OpenSSH *without
Kerberos*. So the above errors only happen when I specify
"./configure --enable-kerbero5=/usw/krb5". Configure prints out the
following useful info:

Compiler flags: -g -O2 -Wall -Wpointer-arith -Wno-uninitialized
Preprocesor flags: -I/usw/krb5/include
Linker flags:
Libraries: -lresolv -lcrypto -lutil -lz -lcrypt -L/usw/krb5/lib -lgssapi_krb
5 -lkrb5 -lk5crypto -lcom_err -lresolv

Thanks for your reply Russ. I really do need to get the OpenSSH working with
Kerbero5, and am trying to figure it out. But these linker errors are making
my life very difficult.

BTW - I work with the guys at SLAC quite often support their workload
management system. In fact, this endeavor is related, in part, to my role
there.

Robert Stober

/----- Original Message ----- 
From: "Russ Allbery" <rra at stanford.edu>
Newsgroups: comp.protocols.kerberos
Sent: Sunday, April 25, 2004 5:12 PM
Subject: Re: Debug message compiled into libkrb5.a library?

> Robert Stober <rmstober at sbcglobal.net> writes:
>
> > I compiled krb5-1.3.1 recently, and it works fine. But when I try to
> > compile OpenSSH or SSH1 with kerberos support I get "undefined
> > reference" errors and the compile fails. (What I mean is that I've tried
> > both, each with kerberos support.) Interestingly, in each case the final
> > line before the undefined reference errors is:
>
> > /usw/krb5/lib/libkrb5.a(cc_file.o): In function `krb5_fcc_generate_new':
> > /tmp/krb5/krb5-1.3.1/src/lib/krb5/ccache/cc_file.c:2063: the use of
`mktemp'
> > is dangerous, better use `mkstemp'
>
> This is a warning and can be ignored.  What are the actual undefined
> reference errors?
>
> -- 
> Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>
"Russ Allbery" <rra at stanford.edu> wrote in message
news:871xmby4v0.fsf at windlord.stanford.edu...
> Robert Stober <rmstober at sbcglobal.net> writes:
>
> > I compiled krb5-1.3.1 recently, and it works fine. But when I try to
> > compile OpenSSH or SSH1 with kerberos support I get "undefined
> > reference" errors and the compile fails. (What I mean is that I've tried
> > both, each with kerberos support.) Interestingly, in each case the final
> > line before the undefined reference errors is:
>
> > /usw/krb5/lib/libkrb5.a(cc_file.o): In function `krb5_fcc_generate_new':
> > /tmp/krb5/krb5-1.3.1/src/lib/krb5/ccache/cc_file.c:2063: the use of
`mktemp'
> > is dangerous, better use `mkstemp'
>
> This is a warning and can be ignored.  What are the actual undefined
> reference errors?
>
> -- 
> Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>