RE: GSSAPI authentication

[Tracy Brown]

I had similar issues compiling CVS 1.11 -- here's what I did to fix it:

I modified the LIBS reference in the src/Makefile.

For example:

-- the configure --
./configure --with-gssapi=/usr/local/krb5 --enable-encrypt --enable-server
<...snip...>
default place for GSSAPI is /usr/local/krb5
checking for krb5.h... yes
checking for gssapi.h... no
checking for gssapi/gssapi.h... yes
checking for gssapi/gssapi_generic.h... yes
<...snip...>

The LIBS reference in src/Makefile:
-- orig --
LIBS =  -L/usr/local/krb5/lib -lgssapi_krb5 -lkrb5 -lcrypto -lcom_err

-- modified --
LIBS =  -L/usr/local/krb5/lib -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err

The problem item is the -lcrypto - it needs to be changed to -lk5crypto
since the library in the krb5 lib directory is: libk5crypto.a

to find out what library contains the symbol you desire:
nm <library name> | grep <symbol>

example:
% nm libk5crypto.a | grep krb5_c_encrypt_length
.krb5_c_encrypt_length T          0
krb5_c_encrypt_length D        364
krb5_c_encrypt_length d        364      12
.krb5_c_encrypt_length U          -

This library contains krb5_c_encrypt_length

Cheers, Tracy

-----Original Message-----
From: Derek R. Price [mailto:address@hidden
Sent: Tuesday, February 20, 2001 11:39 AM
To: de Jong, Mark
Cc: 'address@hidden'
Subject: Re: GSSAPI authentication


"de Jong, Mark" wrote:

> Derek, I am running K5 release 1.1 from MIT. I found gssapi.h and have
tried
> to compile using your current version of CVS (1.11). I want to get this to
> work before moving on to your new release. :) I get a series of errors
while
> compiling:
>
> Undefined symbol '_valid_enctype' referenced from text segment
>
> I get the same for _krb5_c_decrypt, krb5_c_encrypt_length, krb5_c_encrypt,
> _valid_entype, _krb5_random_seed, blah blah blah...

Figure out which libraries contain the undefined symbols and add them to the
LIBS variable before linking.

Derek

--
Derek Price                      CVS Solutions Architect (
http://CVSHome.org )
mailto:address@hidden     OpenAvenue ( http://OpenAvenue.com )
--
No experiment can be more interesting than that we are now trying, and which
we
trust will end in establishing the fact, that men can be governed by reason
and
truth.  Our first object should therefore be to leave open to him all the
avenues of truth.  The most effective hitherto found, is the freedom of the
press.  It is, therefore, the first shut up by those who fear the
investigation
of their actions.
                        - Thomas Jefferson




_______________________________________________
Info-cvs mailing list
address@hidden
http://mail.gnu.org/mailman/listinfo/info-cvs