FOLLOW-UP: openssh build problem: Unresolved: xcrypt shadow_pw *** Exit 1 Stop.

From: Douglas C. Stephens (stephens_at_ameslab.gov)
Date: 03/22/04

Next message: Bentley, Adam ( Dist ): "bizzare behaviour of stock tar (4.0f PK7)"

Previous message: Bill.Glessner_at_cwu.EDU: "Tru64unix V5.1B BL24 ECO question"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Date: Mon, 22 Mar 2004 10:18:31 -0600
To: tru64-unix-managers@ornl.gov

I tried this solution on my Tru64 4.0G systems using C2 enhanced security mode, and
it didn't work. I think that is because Openssh requires the code segements
activated by -with-osfsia in order to link in the correct libraries for accessing
the protected password database, as well as for properly initiating SIA sessions
required by the C2 ENHANCED security mode.

Here are the before and after config phase summary screens comparing the effect
of changing this configuation flag:

--with-osfsia
-------------
OpenSSH has been configured with the following options:
                     User binaries: /usr/local/bin
                   System binaries: /usr/local/sbin
               Configuration files: /etc
                   Askpass program: /usr/local/libexec/ssh-askpass
                      Manual pages: /usr/local/man/manX
                          PID file: /var/run
  Privilege separation chroot path: /var/empty
            sshd default user PATH: /usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin
                    Manpage format: man
                       PAM support: no
                 KerberosV support: no
                 Smartcard support: no
                     S/KEY support: no
              TCP Wrappers support: yes
              MD5 password support: no
       IP address in $DISPLAY hack: no
           Translate v4 in v6 hack: no
                  BSD Auth support: no
              Random number source: OpenSSL internal ONLY

              Host: alpha-dec-osf4.0g
          Compiler: cc
    Compiler flags: -O4 -tune host -arch host
Preprocessor flags: -I/usr/local/include -I/usr/local/include
      Linker flags: -L/usr/local/lib -L/usr/local/lib
         Libraries: -lwrap -lcrypto -lrt -lz -lsecurity -ldb -lm -laud

--without-osfsia
----------------
OpenSSH has been configured with the following options:
                     User binaries: /usr/local/bin
                   System binaries: /usr/local/sbin
               Configuration files: /etc
                   Askpass program: /usr/local/libexec/ssh-askpass
                      Manual pages: /usr/local/man/manX
                          PID file: /var/run
  Privilege separation chroot path: /var/empty
            sshd default user PATH: /usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin
                    Manpage format: man
                       PAM support: no
                 KerberosV support: no
                 Smartcard support: no
                     S/KEY support: no
              TCP Wrappers support: yes
              MD5 password support: no
       IP address in $DISPLAY hack: no
           Translate v4 in v6 hack: no
                  BSD Auth support: no
              Random number source: OpenSSL internal ONLY

At 10:34 AM 3/19/2004, Minkov, Ross wrote:

>Thanks to all that replied. Here is the solution I used.
>
>========================================
>
>-----Original Message-----
>From: Joerg Lehners [mailto:Joerg.Lehners@Informatik.Uni-Oldenburg.DE]
>Sent: Friday, March 19, 2004 4:08 AM
>To: Minkov, Ross
>Subject: Re: openssh build problem: Unresolved: xcrypt shadow_pw ***
>Exit 1 Stop.
>
>
>Use --without-osfsia in the ./configure phase
>
> Sincerely,
> Joerg
>
>
>=====================================
>
> Thanks Joerg. That worked.
>
>
>Regards,
>Ross
>
>
>-----Original Message-----
>From: tru64-unix-managers-owner@ornl.gov
>[mailto:tru64-unix-managers-owner@ornl.gov] On Behalf Of Minkov, Ross
>Sent: Friday, March 19, 2004 1:04 AM
>To: tru64-unix-managers@ornl.gov
>Subject: openssh build problem: Unresolved: xcrypt shadow_pw *** Exit 1
>Stop.
>
>
>
>I tried to compile OpenSSH 3.8p1 on Tru64 UNIX V5.1B and ran into the
>following problem:
>
>ld:
>Unresolved:
>xcrypt
>shadow_pw
>*** Exit 1
>Stop.
>
>==========================================
>
>I have already compiled and installed:
>OpenSSL 0.9.7d was installed in /usr/local/ssl/
>zlib was installed in /usr/local (/usr/local/include/zlib.h)
>GNU Awk (gawk) 3.1.3 was installed in /usr/local
>
>In the process I used:
>Compaq C V6.5-011 on Compaq Tru64 UNIX V5.1B (Rev. 2650)
>Compiler Driver V6.5-003 (sys) cc Driver
>&
>/usr/common/perl/bin/perl
>v5.6.0
>
>
>OpenSSH was configured with:
>
>./configure --with-ssl-dir=/usr/local/ssl --with-zlib=/usr/local/include
>
>Here is the output after configure completed:
>===============================================
>
>OpenSSH has been configured with the following options:
> User binaries: /usr/local/bin
> System binaries: /usr/local/sbin
> Configuration files: /usr/local/etc
> Askpass program: /usr/local/libexec/ssh-askpass
> Manual pages: /usr/local/man/manX
> PID file: /var/run
> Privilege separation chroot path: /var/empty
> sshd default user PATH:
>/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin
> Manpage format: man
> PAM support: no
> KerberosV support: no
> Smartcard support: no
> S/KEY support: no
> TCP Wrappers support: no
> MD5 password support: no
> IP address in $DISPLAY hack: no
> Translate v4 in v6 hack: no
> BSD Auth support: no
> Random number source: OpenSSL internal ONLY
>
> Host: alphaev6-dec-osf5.1
> Compiler: cc
> Compiler flags: -g
>Preprocessor flags: -I/usr/local/ssl/include -I/usr/local/include
> Linker flags: -L/usr/local/ssl/lib -L/usr/local/include
> Libraries: -lcrypto -lrt -lz -lsecurity -ldb -lm -laud
>
>================================================
>
>make
>...
>...
>...
>cc -g -I. -I. -I/usr/local/ssl/include -I/usr/local/include
>-DSSHDIR=\"/usr/local/etc\" -D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"
>-D_PATH_SSH_ASKPASS
>_DEFAULT=\"/usr/local/libexec/ssh-askpass\"
>-D_PATH_SFTP_SERVER=\"/usr/local/libexec/sftp-server\"
>-D_PATH_SSH_KEY_SIGN=\"/usr/local/libexec/ssh-keysig
>n\" -D_PATH_SSH_PIDDIR=\"/var/run\"
>-D_PATH_PRIVSEP_CHROOT_DIR=\"/var/empty\"
>-DSSH_RAND_HELPER=\"/usr/local/libexec/ssh-rand-helper\" -DHAVE_CONFIG_H
> -c md5crypt.c
>cc: Warning: openbsd-compat/fake-rfc2553.h, line 136: The redefinition
>of the macro "getaddrinfo" conflicts with a current definition because
>the number
>of parameters is different. The redefinition is now in effect.
>(macroredef)
>#define getaddrinfo(a,b,c,d) (ssh_getaddrinfo(a,b,c,d))
>--------------------^
>cc -o sshd sshd.o auth-rhosts.o auth-passwd.o auth-rsa.o auth-rh-rsa.o
>sshpty.o sshlogin.o servconf.o serverloop.o uidswap.o auth.o auth1.o
>auth2.o aut
>h-options.o session.o auth-chall.o auth2-chall.o groupaccess.o
>auth-skey.o auth-bsdauth.o auth2-hostbased.o auth2-kbdint.o
>auth2-none.o auth2-passwd.o
> auth2-pubkey.o monitor_mm.o monitor.o monitor_wrap.o monitor_fdpass.o
>kexdhs.o kexgexs.o auth-krb5.o auth2-gss.o gss-serv.o gss-serv-krb5.o
>loginre
>c.o auth-pam.o auth-shadow.o auth-sia.o md5crypt.o -L. -Lopenbsd-compat/
>-L/usr/local/ssl/lib -L/usr/local/include -lssh -lopenbsd-compat
>-lcrypto -lr
>t -lz -lsecurity -ldb -lm -laud
>ld:
>Unresolved:
>xcrypt
>shadow_pw
>*** Exit 1
>Stop.
>
>
>Any help would be appreciated.
>
>Thanks,
>Ross

--
Douglas C. Stephens             | Network/DNS/Unix/WinNT/VMS Administrator
System Support Specialist       | Postmaster / Webmaster
Information Systems             | Phone: (515) 294-6102
Ames Laboratory, US DOE         | Email: stephens@ameslab.gov

Next message: Bentley, Adam ( Dist ): "bizzare behaviour of stock tar (4.0f PK7)"

Previous message: Bill.Glessner_at_cwu.EDU: "Tru64unix V5.1B BL24 ECO question"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]