From: Douglas C. Stephens (stephens@ameslab.gov)
Date: Mon Mar 22 2004 - 11:18:31 EST
I tried this solution on my Tru64 4.0G systems using C2 enhanced security mode, and
it didn't work. I think that is because Openssh requires the code segements
activated by -with-osfsia in order to link in the correct libraries for accessing
the protected password database, as well as for properly initiating SIA sessions
required by the C2 ENHANCED security mode.
Here are the before and after config phase summary screens comparing the effect
of changing this configuation flag:
--with-osfsia
-------------
OpenSSH has been configured with the following options:
User binaries: /usr/local/bin
System binaries: /usr/local/sbin
Configuration files: /etc
Askpass program: /usr/local/libexec/ssh-askpass
Manual pages: /usr/local/man/manX
PID file: /var/run
Privilege separation chroot path: /var/empty
sshd default user PATH: /usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin
Manpage format: man
PAM support: no
KerberosV support: no
Smartcard support: no
S/KEY support: no
TCP Wrappers support: yes
MD5 password support: no
IP address in $DISPLAY hack: no
Translate v4 in v6 hack: no
BSD Auth support: no
Random number source: OpenSSL internal ONLY
Host: alpha-dec-osf4.0g
Compiler: cc
Compiler flags: -O4 -tune host -arch host
Preprocessor flags: -I/usr/local/include -I/usr/local/include
Linker flags: -L/usr/local/lib -L/usr/local/lib
Libraries: -lwrap -lcrypto -lrt -lz -lsecurity -ldb -lm -laud
--without-osfsia
----------------
OpenSSH has been configured with the following options:
User binaries: /usr/local/bin
System binaries: /usr/local/sbin
Configuration files: /etc
Askpass program: /usr/local/libexec/ssh-askpass
Manual pages: /usr/local/man/manX
PID file: /var/run
Privilege separation chroot path: /var/empty
sshd default user PATH: /usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin
Manpage format: man
PAM support: no
KerberosV support: no
Smartcard support: no
S/KEY support: no
TCP Wrappers support: yes
MD5 password support: no
IP address in $DISPLAY hack: no
Translate v4 in v6 hack: no
BSD Auth support: no
Random number source: OpenSSL internal ONLY
Host: alpha-dec-osf4.0g
Compiler: cc
Compiler flags: -O4 -tune host -arch host
Preprocessor flags: -I/usr/local/include -I/usr/local/include
Linker flags: -L/usr/local/lib -L/usr/local/lib
Libraries: -lwrap -lcrypto -lrt -lz
At 10:34 AM 3/19/2004, Minkov, Ross wrote:
>Thanks to all that replied. Here is the solution I used.
>
>========================================
>
>-----Original Message-----
>From: Joerg Lehners [mailto:Joerg.Lehners@Informatik.Uni-Oldenburg.DE]
>Sent: Friday, March 19, 2004 4:08 AM
>To: Minkov, Ross
>Subject: Re: openssh build problem: Unresolved: xcrypt shadow_pw ***
>Exit 1 Stop.
>
>
>Use --without-osfsia in the ./configure phase
>
> Sincerely,
> Joerg
>
>
>=====================================
>
> Thanks Joerg. That worked.
>
>
>Regards,
>Ross
>
>
>-----Original Message-----
>From: tru64-unix-managers-owner@ornl.gov
>[mailto:tru64-unix-managers-owner@ornl.gov] On Behalf Of Minkov, Ross
>Sent: Friday, March 19, 2004 1:04 AM
>To: tru64-unix-managers@ornl.gov
>Subject: openssh build problem: Unresolved: xcrypt shadow_pw *** Exit 1
>Stop.
>
>
>
>I tried to compile OpenSSH 3.8p1 on Tru64 UNIX V5.1B and ran into the
>following problem:
>
>ld:
>Unresolved:
>xcrypt
>shadow_pw
>*** Exit 1
>Stop.
>
>==========================================
>
>I have already compiled and installed:
>OpenSSL 0.9.7d was installed in /usr/local/ssl/
>zlib was installed in /usr/local (/usr/local/include/zlib.h)
>GNU Awk (gawk) 3.1.3 was installed in /usr/local
>
>In the process I used:
>Compaq C V6.5-011 on Compaq Tru64 UNIX V5.1B (Rev. 2650)
>Compiler Driver V6.5-003 (sys) cc Driver
>&
>/usr/common/perl/bin/perl
>v5.6.0
>
>
>OpenSSH was configured with:
>
>./configure --with-ssl-dir=/usr/local/ssl --with-zlib=/usr/local/include
>
>Here is the output after configure completed:
>===============================================
>
>OpenSSH has been configured with the following options:
> User binaries: /usr/local/bin
> System binaries: /usr/local/sbin
> Configuration files: /usr/local/etc
> Askpass program: /usr/local/libexec/ssh-askpass
> Manual pages: /usr/local/man/manX
> PID file: /var/run
> Privilege separation chroot path: /var/empty
> sshd default user PATH:
>/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin
> Manpage format: man
> PAM support: no
> KerberosV support: no
> Smartcard support: no
> S/KEY support: no
> TCP Wrappers support: no
> MD5 password support: no
> IP address in $DISPLAY hack: no
> Translate v4 in v6 hack: no
> BSD Auth support: no
> Random number source: OpenSSL internal ONLY
>
> Host: alphaev6-dec-osf5.1
> Compiler: cc
> Compiler flags: -g
>Preprocessor flags: -I/usr/local/ssl/include -I/usr/local/include
> Linker flags: -L/usr/local/ssl/lib -L/usr/local/include
> Libraries: -lcrypto -lrt -lz -lsecurity -ldb -lm -laud
>
>================================================
>
>make
>...
>...
>...
>cc -g -I. -I. -I/usr/local/ssl/include -I/usr/local/include
>-DSSHDIR=\"/usr/local/etc\" -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"
>-D_PATH_SSH_ASKPASS
>_DEFAULT=\"/usr/local/libexec/ssh-askpass\"
>-D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\"
>-D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysig
>n\" -D_PATH_SSH_PIDDIR=\"/var/run\"
>-D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\"
>-DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H
> -c md5crypt.c
>cc: Warning: openbsd-compat/fake-rfc2553.h, line 136: The redefinition
>of the macro "getaddrinfo" conflicts with a current definition because
>the number
>of parameters is different. The redefinition is now in effect.
>(macroredef)
>#define getaddrinfo(a,b,c,d) (ssh_getaddrinfo(a,b,c,d))
>--------------------^
>cc -o sshd sshd.o auth-rhosts.o auth-passwd.o auth-rsa.o auth-rh-rsa.o
>sshpty.o sshlogin.o servconf.o serverloop.o uidswap.o auth.o auth1.o
>auth2.o aut
>h-options.o session.o auth-chall.o auth2-chall.o groupaccess.o
>auth-skey.o auth-bsdauth.o auth2-hostbased.o auth2-kbdint.o
>auth2-none.o auth2-passwd.o
> auth2-pubkey.o monitor_mm.o monitor.o monitor_wrap.o monitor_fdpass.o
>kexdhs.o kexgexs.o auth-krb5.o auth2-gss.o gss-serv.o gss-serv-krb5.o
>loginre
>c.o auth-pam.o auth-shadow.o auth-sia.o md5crypt.o -L. -Lopenbsd-compat/
>-L/usr/local/ssl/lib -L/usr/local/include -lssh -lopenbsd-compat
>-lcrypto -lr
>t -lz -lsecurity -ldb -lm -laud
>ld:
>Unresolved:
>xcrypt
>shadow_pw
>*** Exit 1
>Stop.
>
>
>Any help would be appreciated.
>
>Thanks,
>Ross
-- Douglas C. Stephens | Network/DNS/Unix/WinNT/VMS Administrator System Support Specialist | Postmaster / Webmaster Information Systems | Phone: (515) 294-6102 Ames Laboratory, US DOE | Email: stephens@ameslab.gov
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:54 EDT