f



KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2 (fwd)

I have done some research on this problem.  The host resolve code does not 
complete successfully.  I have traced the error to the routine at
/kerberos/mit/krb5-1.4/src/lib/krb5/os/dnsglue.c.   In the routine a call 
is made to res_ninit to provide dns information for the kdc.  res_ninit 
updates the structure at statbuf but overlays memory 72 bytes past the 
structure boundary.
I have opened a problem with IBM on res_ninit.  The problem is not yet 
resolved but IBM suggested using a malloc for the structure instead of 
static storage.  I am trying to get IBM to correct the error in 
res_ninit.  No resoultion yet.



>Delivery-Date: Thu, 21 Apr 2005 12:15:05 -0600
>Return-Path: <owner-kerberos@lanl.gov>
>X-Original-To: hgm@localhost.localdomain
>Delivered-To: hgm@localhost.localdomain
>Received: from localhost (localhost.localdomain [127.0.0.1])
>         by moki.lanl.gov (Postfix) with ESMTP id 15AAB68739
>         for <hgm@localhost.localdomain>; Thu, 21 Apr 2005 12:15:05 -0600 
> (MDT)
>Received: from ccn-mail.lanl.gov [128.165.4.105]
>         by localhost with POP3 (fetchmail-6.2.5)
>         for hgm@localhost.localdomain (single-drop); Thu, 21 Apr 2005 
> 12:15:05 -0600
>(MDT)
>Received: from ccn-mail.lanl.gov ([unix socket])
>         by ccn-mail.lanl.gov (Cyrus v2.2.3-Red Hat 2.2.3-6.lanl) with 
> LMTP; Thu, 21
>Apr 2005 12:11:13 -0600
>X-Sieve: CMU Sieve 2.2
>Received: from mailrelay3.lanl.gov (mailrelay3.lanl.gov [128.165.4.104])
>         by ccn-mail.lanl.gov (8.12.11/8.12.11/(ccn-5)) with ESMTP id 
> j3LIBCsV025918;
>         Thu, 21 Apr 2005 12:11:12 -0600
>Received: from maillist.lanl.gov (maillist.lanl.gov [128.165.4.102])
>         by mailrelay3.lanl.gov (8.12.11/8.12.11/(ccn-5)) with ESMTP id 
> j3LIBAs0016960;
>         Thu, 21 Apr 2005 12:11:10 -0600
>Received: from maillist.lanl.gov (localhost.localdomain [127.0.0.1])
>         by maillist.lanl.gov (8.12.10/8.12.10/(cic-5)) with ESMTP id 
> j3LIB9Sb000989
>         for <kerberos-outgoing@maillist.lanl.gov>; Thu, 21 Apr 2005 
> 12:11:09 -0600
>Received: (from majordom@localhost)
>         by maillist.lanl.gov (8.12.10/8.12.10/Submit) id j3LIB9pK000987
>         for kerberos-outgoing; Thu, 21 Apr 2005 12:11:09 -0600
>X-MimeOLE: Produced By Microsoft Exchange V6.0.6603.0
>Content-Class: urn:content-classes:message
>MIME-Version: 1.0
>Content-Type: text/plain;
>         charset="us-ascii"
>Date: Thu, 21 Apr 2005 12:59:45 -0500
>Message-ID: 
><5C066E580F0244458087CC59AC4F74E35EAF57@srvexcharl02.acf.americredi
>t.com>
>X-MS-Has-Attach:
>X-MS-TNEF-Correlator:
>Thread-Topic: KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2
>Thread-Index: AcVGm+mkkQoYbVYbTFiUpF9ELGIaOQ==
>From: <Lamar.Saxon@americredit.com>
>To: <kerberos@mit.edu>
>X-OriginalArrivalTime: 21 Apr 2005 17:59:46.0728 (UTC)
>         FILETIME=[E7792A80:01C5469B]
>X-Spam-Score: -4.74
>X-Spam-Flag: NO
>X-Scanned-By: MIMEDefang 2.42
>Content-Transfer-Encoding: 8bit
>X-MIME-Autoconverted: from quoted-printable to 8bit by pch.mit.edu id
>         j3LI00h7005195
>Subject: KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2
>X-BeenThere: kerberos@mit.edu
>X-Mailman-Version: 2.1
>List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
>List-Unsubscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
>         <mailto:kerberos-request@mit.edu?subject=unsubscribe>
>List-Archive: <http://mailman.mit.edu/pipermail/kerberos>
>List-Post: <mailto:kerberos@mit.edu>
>List-Help: <mailto:kerberos-request@mit.edu?subject=help>
>List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
>         <mailto:kerberos-request@mit.edu?subject=subscribe>
>X-Proofpoint-Spam: 0
>X-Perlmx-Spam: Gauge=XXIIIIIIIII, Probability=29%, Report="EXCUSE_16,
>NO_REAL_NAME, SPAM_PHRASE_03_05, SUPERLONG_LINE, __EVITE_CTYPE, __HAS_MIMEOLE"
>X-PMX-Version: 4.7.1.128075
>Sender: owner-kerberos@lanl.gov
>Precedence: bulk
>
>
>I was hoping someone might be able to help me fix an issue I have
>encountered.
>
>I tested KRB5 1.3.6 on AIX 5.2 using C for AIX and the installed make.
>Created a krb5.conf and krb5.keytab to talk to a Windows 2k AD Domain
>Controller.  Had no issues, connected and received tickets fine.
>
>I recently installed KRB5 1.4 on the same machine after removing the
>1.3.6 footprint.  I encountered an issue seen by others with the error:
>
>"Syntax error at line 1 : `(' is not matched"
>
>when using AIX's make; but it seems to work fine using GNU Make.
>
>After compiling and doing a make install, I consistently receive the
>following message when using kinit while using the same keytab and
>configuration as 1.3.6:
>
>"Cannot resolve network address for KDC in requested realm while getting
>initial credentials"
>
>Is there a significant change to krb5.conf between 1.3.6 and 1.4 ?  The
>binaries seem to work fine; but it does not look like it is even looking
>at the krb5.conf file.  I can change the name or move it and the message
>stays the same.  I have tried disabling DNS for realm and kdc; put
>master_kdc in the entries; but still does not even act like it is
>looking at this file.
>
>Any help is greatly appreciated.
>
>Lamar Saxon                             Lamar.Saxon@americredit.com
>Lead Server Engineer            817-525-7122
>
>//AmeriCredit
>4001 Embarcadero
>Arlington ,TX 76014
>
>Privileged and Confidential.  This e-mail, and any attachments there to, is
>intended only for use by the addressee(s) named herein and may contain
>privileged or confidential information.  If you have received this e-mail in
>error, please notify me immediately by a return e-mail and delete this 
>e-mail.
>  You are hereby notified that any dissemination, distribution or copying of
>this e-mail and/or any attachments thereto, is strictly prohibited.
>
>________________________________________________
>Kerberos mailing list           Kerberos@mit.edu
>https://mailman.mit.edu/mailman/listinfo/kerberos
>
>------- End of Forwarded Message
>
>
>--
>
>
>Harry
>
>Internet e-mail: hgm@lanl.gov       (Harry G. McGavran, Jr.)
>Los Alamos National Laboratory, Los Alamos, New Mexico 87545
>Phone: 505/667-4050
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

0
mturley (4)
4/26/2005 5:40:23 PM
comp.protocols.kerberos 5541 articles. 1 followers. jwinius (31) is leader. Post Follow

2 Replies
575 Views

Similar Articles

[PageSpeed] 47

On Apr 26, 2005, at 13:40, Milton Turley wrote:
> I have done some research on this problem.  The host resolve code does 
> not complete successfully.  I have traced the error to the routine at
> /kerberos/mit/krb5-1.4/src/lib/krb5/os/dnsglue.c.   In the routine a 
> call is made to res_ninit to provide dns information for the kdc.  
> res_ninit updates the structure at statbuf but overlays memory 72 
> bytes past the structure boundary.

If we change statbuf to something like:
   struct { struct __res_state s; char pad[72]; } statbuf;
or perhaps:
   struct { struct __res_state s; char pad[72]; } statbuf1;
   #define statbuf (statbuf1.s)
does it work then?

Do the AIX 5.2 headers declare res_ninit and indicate what type should 
be used for the first argument?

> I have opened a problem with IBM on res_ninit.  The problem is not yet 
> resolved but IBM suggested using a malloc for the structure instead of 
> static storage.  I am trying to get IBM to correct the error in 
> res_ninit.  No resoultion yet.

Well, technically, we're using automatic storage, not static, but it 
seems to me that the problem is not knowing the size and/or type to 
allocate, not stack vs heap allocation.  (Though heap allocation would 
change the failure mode caused by an overrun, it wouldn't by itself get 
rid of the overrun.)

Ken

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

0
raeburn (375)
4/26/2005 8:36:26 PM
Doing a "make distclean", then setting

krb5_cv_func_res_nsearch=no

in config.cache prior to running configure might help.  This will
force configure to think that res_nsearch() is not present, thus
preventing res_ninit() and related functions from being called in
dnsglue.c.

---Tom
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

0
tlyu (271)
4/27/2005 8:20:01 PM
Reply:

Similar Artilces:

RE: KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2 #2
Downloaded KRB5 1.4.1 and the installation worked great with GCC and AIX make. None of the problems that were encountered with 1.4.0 and the unbalanced "(". The problem with: /usr/local/kerberos/bin/kinit -V kinit(v5): Cannot resolve network address for KDC in requested realm while getting initial credentials still exist. If I force it to version 4 KRB it seems to work with the krb5.conf: /usr/local/kerberos/bin/kinit -4 xxxxxxx Password for xxxxxx@xxx.xxxxxxxxxx.xxx: kinit(v4): Can't send request (send_to_kdc) The krb5.conf file is the same file that worked with the 1.3.6 version of KRB5. It does not seem to work with KRB 1.4 or 1.4.1. Any one having similar problems or solutions ? Thanks, Lamar -----Original Message----- From: Saxon, Lamar Sent: Monday, April 25, 2005 11:08 AM To: 'Tom Yu' Cc: kerberos@mit.edu Subject: RE: KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2 The compile with CC works with no issues. The other issue still remains. "Cannot resolve network address for KDC in requested realm while getting initial credentials" I tried kinit with the -k and verbose; but not with a password. I will post the results once I get it accomplished. Thanks, Lamar -----Original Message----- From: Tom Yu [mailto:tlyu@MIT.EDU] Sent: Thursday, April 21, 2005 2:18 PM To: Saxon, Lamar Cc: kerberos@mit.edu Subject: Re: KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2 >>>>> "Lamar" == <Lamar.Saxon@americredit.com> writes: La...

KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2
I was hoping someone might be able to help me fix an issue I have encountered. I tested KRB5 1.3.6 on AIX 5.2 using C for AIX and the installed make. Created a krb5.conf and krb5.keytab to talk to a Windows 2k AD Domain Controller. Had no issues, connected and received tickets fine. I recently installed KRB5 1.4 on the same machine after removing the 1.3.6 footprint. I encountered an issue seen by others with the error: "Syntax error at line 1 : `(' is not matched" when using AIX's make; but it seems to work fine using GNU Make. After compiling and doing a make install, I consistently receive the following message when using kinit while using the same keytab and configuration as 1.3.6: "Cannot resolve network address for KDC in requested realm while getting initial credentials" Is there a significant change to krb5.conf between 1.3.6 and 1.4 ? The binaries seem to work fine; but it does not look like it is even looking at the krb5.conf file. I can change the name or move it and the message stays the same. I have tried disabling DNS for realm and kdc; put master_kdc in the entries; but still does not even act like it is looking at this file. Any help is greatly appreciated. Lamar Saxon Lamar.Saxon@americredit.com Lead Server Engineer 817-525-7122 //AmeriCredit 4001 Embarcadero Arlington ,TX 76014 Privileged and Confidential. This e-mail, and any attachments there to, is intended only for use by the addressee(s) named herein and...

RE: KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2
The compile with CC works with no issues. The other issue still remains. "Cannot resolve network address for KDC in requested realm while getting initial credentials" I tried kinit with the -k and verbose; but not with a password. I will post the results once I get it accomplished. Thanks, Lamar -----Original Message----- From: Tom Yu [mailto:tlyu@MIT.EDU] Sent: Thursday, April 21, 2005 2:18 PM To: Saxon, Lamar Cc: kerberos@mit.edu Subject: Re: KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2 >>>>> "Lamar" == <Lamar.Saxon@americredit.com> writes: Lamar> I tested KRB5 1.3.6 on AIX 5.2 using C for AIX and the installed make. Lamar> Created a krb5.conf and krb5.keytab to talk to a Windows 2k AD Domain Lamar> Controller. Had no issues, connected and received tickets fine. Lamar> I recently installed KRB5 1.4 on the same machine after removing the Lamar> 1.3.6 footprint. I encountered an issue seen by others with the error: Lamar> "Syntax error at line 1 : `(' is not matched" Lamar> when using AIX's make; but it seems to work fine using GNU Make. This was ticket #2992, which will be fixed in the upcoming krb5-1.4.1 release. Lamar> After compiling and doing a make install, I consistently receive the Lamar> following message when using kinit while using the same keytab and Lamar> configuration as 1.3.6: Lamar> "Cannot resolve network address for KDC in requested realm while getting...

RE: KRB5 1.5 or 1.6 compiled on AIX 5.2/5.3 #4
The compile likes GNU ld and GCC even worse. I move the ld link to force the use of the GNU linker. Here is the latest output using GCC 4.0.1 and ld 2.16. + gcc -shared -v -o libkrb5support.so.0.1 threads.o init-addrinfo.o plugins.o errors.o gmt_mktime.o fake-addrinfo. o -nostartfiles -Xlinker -bgcbypass:1 -Xlinker -bfilelist -Xlinker -bM:SRE -Xlinker -bE:./libkrb5support.exports - Xlinker -bernotok -Xlinker -brtl -lpthreads -lc -Wl,-binitfini::krb5int_thread_support_fini:2 Using built-in specs. Target: powerpc-ibm-aix5.3.0.0 Configured with: ../gcc-4.1.1/configure --disable-nls Thread model: aix gcc version 4.1.1 /usr/local/libexec/gcc/powerpc-ibm-aix5.3.0.0/4.1.1/collect2 -bpT:0x10000000 -bpD:0x20000000 -btextro -bnodelcsec t -bM:SRE -bnoentry -o libkrb5support.so.0.1 -L/usr/local/lib/gcc/powerpc-ibm-aix5.3.0.0/4.1.1 -L/usr/local/lib/gc c/powerpc-ibm-aix5.3.0.0/4.1.1/../../.. threads.o init-addrinfo.o plugins.o errors.o gmt_mktime.o fake-addrinfo.o -bgcbypass:1 -bfilelist -bM:SRE -bE:./libkrb5support.exports -bernotok -brtl -lpthreads -lc -binitfini::krb5int_th read_support_fini:2 -lgcc_s -lc -lgcc_s /usr/local/bin/ld: -static and -shared may not be used together collect2: ld returned 1 exit status make: 1254-004 The error code from the last command is 1. Stop. make: 1254-004 The error code from the last command is 1. Stop. make: 1254-004 The error code from the last command is 1. Stop. Again, any and all help appreciated... Lamar -----Original Message----- From:...

KRB5 1.5 or 1.6 compiled on AIX 5.2/5.3 #2
I have seen several emails from different people over the last few months on trying to get KRB5 1.5 or later to compile on AIX 5.x. And no responses that fix the problem. I have had the same problem and can only presume that Kerberos is no longer supported on AIX. Is this the case? No Kerberos on AIX? It just won't compile anymore with the changes to shared libraries. ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos >>>>> "Grant," == Grant, Martin <Martin.Grant@fmr.com> writes: Grant,> I have seen several emails from different people over the Grant,> last few months on trying to get KRB5 1.5 or later to Grant,> compile on AIX 5.x. And no responses that fix the Grant,> problem. I have had the same problem and can only presume Grant,> that Kerberos is no longer supported on AIX. Is this the Grant,> case? No Kerberos on AIX? It just won't compile anymore Grant,> with the changes to shared libraries. We no longer run AIX tests. Our donated AIX box was very old and slow, and its disk was in the process of dieing. If there's no one out there in the Kerberos development community who cares enough about AIX to get the betas, test them and send bug fixes, then yes, AIX support is going to be fairly bad. Kerberos is an open-source product; if you want it to work better on your pl...

RE: KRB5 1.5 or 1.6 compiled on AIX 5.2/5.3 #3
Thanks. The problem also exist using GNU ld on AIX too. See below: make[2]: Entering directory `/usr/sys/inst.images/MIT-Kerberos/krb5-1.6/5.3/src/lib/rpc' making all in lib/rpc/unit-test... make[3]: Entering directory `/usr/sys/inst.images/MIT-Kerberos/krb5-1.6/5.3/src/lib/rpc/unit-test' cc -L../../../lib -blibpath:/usr/local/kerberos/lib::/usr/lib:/lib -g -qhalt=e -O -D_THREAD_SAFE -o client client. o rpc_test_clnt.o \ -lgssrpc -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lkrb5support -lpthreads ld: 0706-006 Cannot find or open library file: -l k5crypto ld:open(): No such file or directory ld: 0706-006 Cannot find or open library file: -l com_err ld:open(): No such file or directory ld: 0706-006 Cannot find or open library file: -l krb5support ld:open(): No such file or directory make[3]: *** [client] Error 255 make[3]: Leaving directory `/usr/sys/inst.images/MIT-Kerberos/krb5-1.6/5.3/src/lib/rpc/unit-test' make[2]: *** [all-recurse] Error 1 make[2]: Leaving directory `/usr/sys/inst.images/MIT-Kerberos/krb5-1.6/5.3/src/lib/rpc' make[1]: *** [all-recurse] Error 1 make[1]: Leaving directory `/usr/sys/inst.images/MIT-Kerberos/krb5-1.6/5.3/src/lib' make: *** [all-recurse] Error 1 root@aoctoolbox:/usr/sys/inst.images/MIT-Kerberos/krb5-1.6/5.3/src:> whence ld /usr/local/bin/ld root@aoctoolbox:/usr/sys/inst.images/MIT-Kerberos/krb5-1.6/5.3/src:> ld -v GNU ld version 2.16 Lamar -----Original Message----- From: Russ Al...

RE: KRB5 1.5 or 1.6 compiled on AIX 5.2/5.3 #6
Wasn't really the solution I came up with; but it worked. You might be correct since now the OpenSSL binaries will not build against the Kerberos libraries currently. libssl and libcrypto build fine along with everything else; but the actual openssl binary fails. Phil, Have you successfully linked OpenSSL with the new Kerberos libraries ? Thanks, Lamar -----Original Message----- From: Sam Hartman [mailto:hartmans@mit.edu] Sent: Friday, February 09, 2007 10:18 AM To: Saxon, Lamar Cc: pgp@psu.edu; kerberos@MIT.EDU Subject: Re: KRB5 1.5 or 1.6 compiled on AIX 5.2/5.3 Do you really want rtl as a linker flag? Isn't that going to be an issue for people linking against the kerberos libraries. Why is that the right solution? Privileged and Confidential. This e-mail, and any attachments there to, is intended only for use by the addressee(s) named herein and may contain privileged or confidential information. If you have received this e-mail in error, please notify me immediately by a return e-mail and delete this e-mail. You are hereby notified that any dissemination, distribution or copying of this e-mail and/or any attachments thereto, is strictly prohibited. ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos ...

RE: KRB5 1.5 or 1.6 compiled on AIX 5.2/5.3 #2
Exact same errors specifying --without-tcl. I removed the config.cache, config.log, and etc the reran configure. From my configure line - ../configure --prefix=/usr/local/kerberos --enable-dns-for-realm --without-tcl --with-vague-errors Then after make... making all in lib/rpc/unit-test... Target "all" is up to date. cc -I../../../include -I./../../../include -I. -DKRB5_DEPRECATED=1 -DKRB5_PRIVATE=1 -g -qhalt=e -O _THREAD_SAFE -c client.c cc -I../../../include -I./../../../include -I. -DKRB5_DEPRECATED=1 -DKRB5_PRIVATE=1 -g -qhalt=e -O _THREAD_SAFE -c rpc_test_clnt.c cc -L../../../lib -blibpath:/usr/local/kerberos/lib::/usr/lib:/lib -g -qhalt=e -O -D_THREAD_SAFE -o c nt client.o rpc_test_clnt.o -lgssrpc -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lkrb5support -lpthreads ld: 0706-006 Cannot find or open library file: -l k5crypto ld:open(): A file or directory in the path name does not exist. ld: 0706-006 Cannot find or open library file: -l com_err ld:open(): A file or directory in the path name does not exist. ld: 0706-006 Cannot find or open library file: -l krb5support ld:open(): A file or directory in the path name does not exist. make: 1254-004 The error code from the last command is 255. Stop. make: 1254-004 The error code from the last command is 1. Stop. make: 1254-004 The error code from the last command is 1. Stop. make: 1254-004 The error code from the last command is 1. Stop. Any ot...

RE: KRB5 1.5 or 1.6 compiled on AIX 5.2/5.3 #5
Phil, Tested on AIX 5.3 TL05 SP4 with XLC++/XLC 8.0 and worked great ! I will be testing on AIX 5.2 TL09 SP3 and AIX 4.3 ML11 here shortly... Thanks for getting this figured out ! Also, appreciate the help from Sam and Martin who were working on it too... Lamar -----Original Message----- From: Phil Pishioneri [mailto:pgp@psu.edu] Sent: Wednesday, February 07, 2007 6:35 PM To: Saxon, Lamar Cc: kerberos@mit.edu Subject: Re: KRB5 1.5 or 1.6 compiled on AIX 5.2/5.3 I've gotten 1.5.x and 1.6 to build and run on AIX 5.2 (domain referral in 1.6 works nicely). So far I have only tested the client commands: klist, kvno, kinit, kdestroy. No 3rd party software tested yet, either. This was done with the IBM VisualAge C++ Professional / C for AIX Compiler, Version 6. The one major change: add LDFLAGS="-brtl" to configure. My configure line was (prefix edited): ./configure --without-krb4 --prefix=... CC=cc LDFLAGS=-brtl There was one problem during the 1.{5,6} builds (1.5 has a bug that's been documented already), it failed in making all in plugins/kdb/db2/libdb2/test... with ld: 0706-006 Cannot find or open library file: -l db ld:open(): A file or directory in the path name does not exist. my quick&dirty fix for that was (starting in .../krb5-1.6/src/): cd lib ln -s ../plugins/kdb/db2/libdb2/libdb.so.1.1 libdb.so.1.1 ln -s libdb.so.1.1 libdb.so -Phil Privileged and Confidential. This e-mail, and any attac...

KRB5 1.5 or 1.6 compiled on AIX 5.2/5.3
Has any been able to successfully compile KRB5 v1.5.1, v1.5.2, or v1.6 on AIX 5.2 or 5.3 ? If so, can you send me you configs ? I have posted this message before, but no one seems to be able to help. I have successfully compiled KRB5 1.4.4 on AIX 4.3 / 5.2 / 5.3; but since the release of 1.5.1 and beyond, I am cannot get it to work. All of the versions seem to error out here: making all in lib/rpc/unit-test... Target "all" is up to date. cc -L../../../lib -blibpath:/usr/local/kerberos/lib::/usr/lib:/lib -D_LARGE_FILES -DLANL -DL ANL_ICN -qhalt=e -O -D_THREAD_SAFE -o client client.o rpc_test_clnt.o -lgssrpc -lgssapi_krb5 -lkr b5 -lk5crypto -lcom_err -lkrb5support -lpthreads ld: 0706-006 Cannot find or open library file: -l k5crypto ld:open(): A file or directory in the path name does not exist. ld: 0706-006 Cannot find or open library file: -l com_err ld:open(): A file or directory in the path name does not exist. ld: 0706-006 Cannot find or open library file: -l krb5support ld:open(): A file or directory in the path name does not exist. make: 1254-004 The error code from the last command is 255. Stop. make: 1254-004 The error code from the last command is 1. Stop. make: 1254-004 The error code from the last command is 1. Stop. make: 1254-004 The error code from the last command is 1. Stop. I have tried using GCC 4.0 and IBM XLC/XLC++ 8.0 with no success and failures at the same point. My confi...

RE: KRB5 1.5 or 1.6 compiled on AIX 5.2/5.3
I currently have an install of KRB5 1.4.4 on this machine and configure finds it under /usr/local/Kerberos where it is installed as seen in the blibpath option. I am currently trying without TCL and will update on what happens. Lamar -----Original Message----- From: Russ Allbery [mailto:rra@stanford.edu] Sent: Thursday, January 25, 2007 10:38 PM To: Saxon, Lamar Cc: kerberos@mit.edu Subject: Re: KRB5 1.5 or 1.6 compiled on AIX 5.2/5.3 Lamar.Saxon@americredit.com writes: > Has any been able to successfully compile KRB5 v1.5.1, v1.5.2, or v1.6 > on AIX 5.2 or 5.3 ? If so, can you send me you configs ? I have posted > this message before, but no one seems to be able to help. I have > successfully compiled KRB5 1.4.4 on AIX 4.3 / 5.2 / 5.3; but since the > release of 1.5.1 and beyond, I am cannot get it to work. All of the > versions seem to error out here: > making all in lib/rpc/unit-test... > Target "all" is up to date. > cc -L../../../lib > -blibpath:/usr/local/kerberos/lib::/usr/lib:/lib -D_LARGE_FILES -DLANL > -DL > ANL_ICN -qhalt=e -O -D_THREAD_SAFE -o client client.o rpc_test_clnt.o > -lgssrpc -lgssapi_krb5 -lkr > b5 -lk5crypto -lcom_err -lkrb5support -lpthreads > ld: 0706-006 Cannot find or open library file: -l k5crypto You can't build the test suite until you install Kerberos. If you don't already have Kerberos installed, don't build the test suite (which I think may be impl...

Problem building krb5 v 1.6.3 on AIX 5.3 using gcc 4.2.0
Hello, I'm having a problem building krb5 v 1.6.3 on AIX 5.3 using gcc 4.2.0. configure runs OK, but make stops with the following error: gcc -L../../../lib -Wl,-blibpath:/usr/local/lib::/usr/lib:/lib -g -O2 -Wall -Wmissing-prototypes -Wcast-qual -Wcast-align -Wconversion -Wshadow -pedantic -D_THREAD_SAFE -o client client.o rpc_test_clnt.o -lgssrpc -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lkrb5support -lpthreads ld: 0706-006 Cannot find or open library file: -l gssrpc ld:open(): A file or directory in the path name does not exist. ld: 0706-006 Cannot find or open library file: -l gssapi_krb5 ld:open(): A file or directory in the path name does not exist. ld: 0706-006 Cannot find or open library file: -l krb5 ld:open(): A file or directory in the path name does not exist. ld: 0706-006 Cannot find or open library file: -l k5crypto ld:open(): A file or directory in the path name does not exist. ld: 0706-006 Cannot find or open library file: -l com_err ld:open(): A file or directory in the path name does not exist. ld: 0706-006 Cannot find or open library file: -l krb5support ld:open(): A file or directory in the path name does not exist. collect2: ld returned 255 exit status make: 1254-004 The error code from the last command is 1. Stop. make: 1254-004 The error code from the last command is 1. Stop. make: 1254-004 The error code from the last command is 1. Stop. make: 1254-004 The error code from the la...

Java 1.4.2 Vs 1.5 Vs 1.6 #2
I'm sure this question has been posted but I've not found any definitive answer. I maintain a product line that consists of a dedicated Linux system running Java to provide a GUI interface as a control system for underlying hardware. I've been working to move to jdk 1.5 (not hard but I'm busy) and now this new DST thing which is not covered by the version I've been porting to (1.5.0-b64) makes me want to rething about going to the latest 1.6. It seems every version change had problems in the beginning and I didn't even try 1.6 because of that. Now I'm thinking about it again. Can anyone give me a level of comfort about just going to the latest jdk and jre? Is there an advantage to going to the latest 1.6 versus the last 1.5? The liability of 1.6 is, of course, it's not as tested as the previous releases but, as java has matured, I think that some of that may be pretty minimal. I don't have enough data to judge. Can I get opinions? Any input is greatly appreciated. James Kimble wrote: > I'm sure this question has been posted but I've not found any > definitive answer. > > I maintain a product line that consists of a dedicated Linux system > running Java to provide a GUI interface as a control system for > underlying hardware. I've been working to move to jdk 1.5 (not hard > but I'm busy) and now this new DST thing which is not covered by the > version I've been porting to (1.5.0-b64) makes me...

Upgrade from VO 1 - 2 - 2..1 -2.2 - 2.3 -2.4 - 2.5 - 2.6 - 2.7
About upgrade 2.5 - 2.7 at $ 384.00 For most products I'm using - the updates (2.0 - 2.1 - 2.7) are free... 2.0 to 3.0 might be worth + 10-30% of the original price? VO is + full price again & again - Full program price for every minor upgrade/bug-fix? I dropped out of the money/bugs [VO] at 2.5 after starting at 1.0 more than 10 years ago. Certainly whoever is making VO have to make a living; earning moneys: - that is OK! A 10 years old VO site; - 10 years later, how much have changed? http://www.yi.com/prany/cavo/cavofront.htm Even MS is not ...

Java 1.4.2 Vs 1.5 Vs 1.6
I'm sure this question has been posted but I've not found anydefinitive answer.I maintain a product line that consists of a dedicated Linux systemrunning Java to provide a GUI interface as a control system forunderlying hardware. I've been working to move to jdk 1.5 (not hardbut I'm busy) and now this new DST thing which is not covered by theversion I've been porting to (1.5.0-b64) makes me want to rethingabout going to the latest 1.6. It seems every version change hadproblems in the beginning and I didn't even try 1.6 because of that.Now I'm thinking about it again...

Load average differences between Apache 1.3.37/PHP 4.4.6 and Apache 2.2.4/PHP 5.2.1
Hi folks, I've encountered something rather strange. This morning, I upgraded our production server, providing web services for our library website, from Apache 1.3.37/PHP 4.4.6 to Apache 2.2.4/PHP 5.2.1. The server, which normally exhibits a load average below 1 most of the time, spiked to loads that approached 100 if left alone. The interesting part of this is that this load average seems to be almost artificial - it appears to be caused by httpd processes stuck in a "closing connection" state (TIME_WAIT, in netstat). These processes are still running according t...

krb5-1.4.3 and Solaris 2.5.1
I'm having problems getting krb5-1.4.3 to compile on Solaris 2.5.1 using gcc 3.4.2. The first problem I hit were complaints about the inttypes.h set of headers, so I took these off a 2.6 server as I couldn't find them anywhere on the 2.5.1 media. I then had to change the uint_32 to be unassigned long rather than unassigned int. However now I'm a little stuck... When making the lib/rpc/unit-test I get the following error /usr/local/bin/gcc -L../../../lib -R/usr/local/lib -g -O2 -Wall -Wmissing-prototypes -Wcast-qual -Wcast-align -Wconversion -Wshadow -pedantic -L/usr/local/lib -R/usr/local/lib -o client client.o rpc_test_clnt.o \ -lgssrpc -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lkrb5support -lresolv -lsocket -lnsl Undefined first referenced symbol in file __register_frame_info /usr/local/lib/gcc/sparc-sun-solaris2.5.1/3.4.2/crtbegin.o (symbol belongs to implicit dependency /usr/local/lib/libgcc_s.so.1) __deregister_frame_info /usr/local/lib/gcc/sparc-sun-solaris2.5.1/3.4.2/crtbegin.o (symbol belongs to implicit dependency /usr/local/lib/libgcc_s.so.1) ld: fatal: Symbol referencing errors. No output written to client collect2: ld returned 1 exit status *** Error code 1 make: Fatal error: Command failed for target `client' Can anyone help? Thanks Richard Batty This e-mail and any attachment is for authorised use by the intended recipient(s) only. It ...

OpenSSH 4.2 with KRB5 1.4.1 on Solaris 2.6
We have someone running OpenSSH 4.2 with KRB5 1.4.1 on Solaris 2.6 encountering the following error: Assertion failed: i->did_run != 0, file ../../include/k5-platform.h, line 232 debug1: do_cleanup Things seem to work ok on Solaris 8 and 10 with Solaris 8 binaries. KRB5 1.4.1 was built with the Sun C compiler and linked _statically_ into the OpenSSH binary. Any ideas? Is there an easy way to find out what function is being passed to k5_call_init_function()? -- albert chin (china@thewrittenword.com) ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos On Jan 17, 2006, at 18:29, Albert Chin wrote: > We have someone running OpenSSH 4.2 with KRB5 1.4.1 on Solaris 2.6 > encountering the following error: > Assertion failed: i->did_run != 0, file ../../include/k5- > platform.h, line 232 > debug1: do_cleanup > > Things seem to work ok on Solaris 8 and 10 with Solaris 8 binaries. > > KRB5 1.4.1 was built with the Sun C compiler and linked _statically_ > into the OpenSSH binary. > > Any ideas? Is there an easy way to find out what function is being > passed to k5_call_init_function()? My first guess: The Solaris 2.6 C library probably has a function pthread_once which doesn't do anything. Our code uses weak references, finds that a definition of pthread_once has been linked in, and uses it instead of working around its l...

RE: krb5-1.4.3 and Solaris 2.5.1
Thanks for that Jeremy, I now get the following errors... Creating gssapi.h + mv -f gss28055 gssapi_krb5.h cp gssapi_krb5.h "../../../include/gssapi/gssapi_krb5.h" /usr/local/bin/gcc -fPIC -DSHARED -DPACKAGE_NAME=\"\" -DPACKAGE_TARNAME=\"\" -DPACKAGE_VERSION=\"\" -DPACKAGE_STRING=\"\" -DPACKAGE_BUGREPORT=\"\" -DHAVE_BT_RSEQ=1 -DKRB5_PRIVATE=1 -DKRB5_DEPRECATED=1 -DHAVE_LIBNSL=1 -DHAVE_LIBSOCKET=1 -DKRB5_DNS_LOOKUP_KDC=1 -DKRB5_DNS_LOOKUP_REALM=1 -DKRB5_DNS_LOOKUP=1 -DHAVE_LIBRESOLV=1 -DHAVE_RES_SEARCH=1 -DHAVE_PRAGMA_WEAK_REF=1 -DDELAY_INITIALIZER=1 -DCONSTRUCTOR_ATTR_WORKS=1 -DDESTRUCTOR_ATTR_WORKS=1 -DSTDC_HEADERS=1 -DHAVE_SYS_TYPES_H=1 -DHAVE_SYS_STAT_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 -DHAVE_MEMORY_H=1 -DHAVE_STRINGS_H=1 -DHAVE_UNISTD_H=1 -DHAVE_STDLIB_H=1 -DHAVE_SYS_TYPES_H=1 -DHAVE_LIMITS_H=1 -DHAVE_MEMORY_H=1 -DSIZEOF_SHORT=2 -DSIZEOF_INT=4 -DSIZEOF_LONG=4 -I../../../include -I./../../../include -I../../../include/krb5 -I./../../../include/krb5 -I. -I. -I./.. -I../generic -I./../generic -g -O2 -Wall -Wmissing-prototypes -Wcast-qual -Wcast-align -Wconversion -Wshadow -pedantic -c accept_sec_context.c -o accept_sec_cont! ext.so.o && mv -f accept_sec_context.so.o accept_sec_context.so In file included from ../../../include/k5-int.h:122, from accept_sec_context.c:73: .../../../include/k5-platform.h:442: warning: ISO C90 does not support `long long' .../../../include/k5-pla...

fetchmail 6.2.5 and krb5-1.3.1: no krb5_des_string_to_key?
I just tried to rebuild fetchmail 6.2.5 with krb5-1.3.1 and found out that krb5_des_string_to_key is gone, which makes the fetchmail build fail (--with-kerberos5=bla). Is krb5int_des_string_to_key the new way to go? ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos >>>>> "Andreas" == Andreas <andreas@conectiva.com.br> writes: Andreas> I just tried to rebuild fetchmail 6.2.5 with krb5-1.3.1 Andreas> and found out that krb5_des_string_to_key is gone, which Andreas> makes the fetchmail build fail (--with-kerberos5=bla). Is Andreas> krb5int_des_string_to_key the new way to go? That's an internal API. IT seems highly unlikely that fetchmail actually wants des_string_to_key. I suspect it should look for some more reasonable symbol depending on what it is trynig to do. ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos ...

Newbie question; why (cons (list 1 2) (list 3 4)) is ((1 2) 3 4) and not ((1 2) (3 4))
Hi, I just started to learn LISP, and stumbled in SICP upon (cons (list 1 2) (list 3 4)) is evaluated to ((1 2) 3 4) I do not understand why this is not: ((1 2) (3 4)) because (cdr (cons (list 1 2) (list 3 4))) is (3 4) and (car (cons (list 1 2) (list 3 4))) is (1 2) Is there a logical explanation? Thank you for your patience. -- Greg Out of order, gregor <gregor@ediwo.com> writes: > Is there a logical explanation? Yes. > I just started to learn LISP, and stumbled in SICP upon But first, let's talk about LISP, Lisp, Scheme and Common Lisp. LISP is the name of the programming language invented in 1959 by John McCarthy and of the first program implementing it written amongst other by Steve Russel, one of his students. LISP 1.5 is a segueing version of that same program dating about 1962 that had some distribution. Then various lisp languages were developed at various places by various teams. Names such as MacLisp, InterLisp, LeLisp, StandardLisp, vLisp, Lisp Machine Lisp, Scheme, GNU Emacs Lisp, etc. It was quite a mess, and people had a hard time sharing programs. So they talked and designed and wrote and voted and produced the ANSI Common Lisp standard (in the USA), meanwhile in Europe they produced the ISO Lisp standard. Nowadays, almost all the other lisps are "dead", with only scheme (current version r5rs, r7r...

Reason for 2 branches krb5-1.4.x & krb5-1.5.x?
--===============0730092734== Content-Type: multipart/signed; micalg=sha1; boundary=Apple-Mail-3-583381861; protocol="application/pkcs7-signature" --Apple-Mail-3-583381861 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Greetings, I may have missed the memo re this question! :) But, I just can't seem to find any information in my archives re this question. For example is it that the 1.5.x version is so major and different, the reason why 1.4.x, will continue to be maintained as a seperate branch parallel to the 1.5.x branch? if this a RTFM type question, then great and so be it... If current version in production is 1.3.6 on BSDi 4.3 (all latest security patched of course!) Which version would be more practical and *transparent* to upgrade to? considering we still have to provide support krb524. My gut says 1.4.4, so... Any feedback or thoughts shared are much appreciated. Tareq --Apple-Mail-3-583381861-- --===============0730092734== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos --===============0730092734==-- Tareq Alrashid <Tareq.Alrashid@case.edu> writes: > I may have missed the memo re this question! :) But, I just can't seem &g...

convert String "1;2;3;4;5;" to Array [1, 2, 3, 4, 5]
I'm trying to convert a String of numbers that are separated by semicolons to an Array---totally for fun, to stretch my ruby understanding, fyi. I use the Array in a while loop which does work when the Array looks like = [1,2,3,4,5,...]---so that part is working. But I want to use ruby to convert a String = "1;2;3;4;5;6;7;8;9;10" into an Array [1,2,3,4,5,...] so that I can use these values. I've tried many a method, but can't seem to get the desired result; I've tried gsub(/\;/, ","), eval (), and others. ########## raw_data = "1;2;3...

Error making krb5-1.5.1 on AIX 5.3 TL 5
When running make on krb5-1.5.1 I get the following errors: Target "all" is up to date. gcc -L../../../lib -Wl,-blibpath:/usr/krb5/lib::/usr/lib:/lib -g -O2 -Wa ll -Wmissing-prototypes -Wcast-qual -Wcast-align -Wconversion -Wshadow -pedanti c -L/usr/linux/lib,Wl,-brtl,-blibsuff:so -o client client.o rpc_test_clnt.o -lg ssrpc -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lkrb5support ld: 0711-317 ERROR: Undefined symbol: krb5_gss_dbg_client_expcreds ld: 0711-317 ERROR: Undefined symbol: gssrpc_auth_debug_gssapi ld: 0711-317 ERROR: Undefined symbol: gssrpc_misc_debug_gssapi ld: 0711-317 ERROR: Undefined symbol: gssrpc_svc_debug_gssapi ld: 0711-317 ERROR: Undefined symbol: ..gssrpc_auth_gssapi_create_default ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more information. collect2: ld returned 8 exit status make: 1254-004 The error code from the last command is 1. Stop. The OS is AIX 5.3 TL 5. gcc is (GCC) 3.3.3. Configure looks like: export LIBPATH=/lppdir/build/krb5/krb5/src/lib:/usr/local/lib:/usr/linux/lib:$LI BPATH export LDFLAGS="-L/usr/linux/lib,Wl,-brtl,-blibsuff:so" ../configure --with-cc=gcc \ --enable-shared \ --libdir=/usr/krb5/lib \ --disable-thread-support Any ideas? I was able to get through these errors by finding the compiled library in the src tree, copying it to /usr/lib and linking it to a lib.a file. For example to fix the error "ld: 0711-317 ERROR: Undefined symbol: krb5_gss_dbg_client_expcreds&...

Web resources about - KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2 (fwd) - comp.protocols.kerberos

如何使用Linux自带的gssftp服务_Linux_IT专家网 Linux子站
Linux频道包含linux新手,linux安装,linux管理员,linux开发者,linux桌面,linux编程,linux数据库,linux网络技术,Redhat,Fedora,Ubuntu,SuSE,Unix,debian。

Ad Terras Per Aspera
: Transmissions from the Little Blue Marble krb5_newrealm doesn’t seem to add enough lines to /etc/krb5.conf . To fix this, add the following ...

Tails reaches 1.3 the Linux distro that Edward Snowden used gets major update
... Security Advisory 3142 , Debian Security Advisory 3169 openjdk-7: Debian Security Advisory 3144 unzip: Debian Security Advisory 3152 krb5: ...

Toolbox - DNSstuff Toolbox
� Copyright 2003-2012 SolarWinds. All Rights Reserved - 3711 South MoPac Expressway - Building Two - Austin, Texas 78746 - +1.866.530.8100

Toolbox - DNSstuff Toolbox
� Copyright 2003-2012 SolarWinds. All Rights Reserved - 3711 South MoPac Expressway - Building Two - Austin, Texas 78746 - +1.866.530.8100

Issue 28282 - chromium - Support for SPNEGO authentication (standard KRB5, not only Windows NTLM/AD) ...
Chrome Version : URLs (if applicable) : http://tools.ietf.org/html/rfc4178 Other browsers tested: Add OK or FAIL after other browsers where you ...

Cisco Security Appliances at risk from Telnet bug
Attackers can remotely execute code with system privileges as a result of a known bug in Telnet daemon telnetd

125 #include < openssl/ssl.h >
OpenSSL 1.0.1c Main Page Classes Files File List File Members All Classes Files Functions Variables Typedefs Enumerations Enumerator Macros include ...

spot: The long, sordid tale of Sun RPC, abbreviated somewhat, to protect the guily and the irresponsible ...
Once upon a time (1984), Sun created an RPC implementation for Unix, with the intent of implementing RFC 707 (High-level framework for network-based ...

Ted Tso
I've recently taken the Kerberos V5 profile library, which I had originally written ten years ago (!!!) to parse /etc/krb5.conf, and taken the ...

Resources last updated: 3/10/2016 2:44:55 PM