home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Columbia Kermit
/
kermit.zip
/
newsgroups
/
misc.20041116-20060924
/
000120_timothy.folks@edgescape.com_Wed Jun 29 09:24:42 2005.msg
< prev
next >
Wrap
Internet Message Format
|
2020-01-01
|
2KB
Path: newsmaster.cc.columbia.edu!newsfeed.nyu.edu!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!newsfeed.freenet.de!feed.news.tiscali.de!newsfeed.vmunix.org!peer02.cox.net!cox.net!p01!lakeread06.POSTED!53ab2750!not-for-mail
From: Timothy Folks <timothy.folks@edgescape.com>
Subject: Kerberos 1.4.1
Newsgroups: comp.protocols.kermit.misc
Lines: 31
User-Agent: KNode/0.8.2
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7Bit
Message-ID: <Ntowe.37484$R21.18628@lakeread06>
Date: Tue, 28 Jun 2005 22:22:21 -0500
NNTP-Posting-Host: 70.180.58.58
X-Complaints-To: abuse@cox.net
X-Trace: lakeread06 1120015341 70.180.58.58 (Tue, 28 Jun 2005 23:22:21 EDT)
NNTP-Posting-Date: Tue, 28 Jun 2005 23:22:21 EDT
Organization: Cox Communications
Xref: newsmaster.cc.columbia.edu comp.protocols.kermit.misc:15361
I recently upgraded to Kerberos 1.4.1 from 1.3.6 on Gentoo and found that
C-Kermit 8.0.211 make xermit with flags "-DCK_AUTHENTICATION -DCK_KERBEROS
-DCK_ENCRYPTION -DCK_DES -DKRB5" wouldn't compile anymore. The linker would
die with with "In function `ck_auth_init':: undefined reference to
`krb5_init_ets'," I googled that function and found that it was deprecated
a while back, wasn't considered part of the public Kerberos API, and was
removed in Kerberos 1.4. It apparently broke several Kerberos applications.
While looking in the ckuath.c file, I noticed the MIT_CURRENT define, then
grepped all the source for a description of that define, and in ckuath.h
found:
/* Define MIT_CURRENT to compile the code for use with versions of */
/* Kerberos later than KRB5 1.0.5. Note. This will not compile */
/* successfully in Kermit 95 due to the segmentation of crypto */
/* into a separate DLL.
I added -DMIT_CURRENT to my make flags and recompiled. This time, I got a
bunch of DES function related compile errors (emailed to Kermit support) in
ck_crp.c. I removed "-DCK_ENCRYPTION -DCK_DES" from my make flags and
recompiled. This worked fine.
The end result is that I have telnet authenication with Kerberos but no
telnet-based encryption, which is ok because I can encrypt the telnet
session over TLS anyway.
I'm not a Kerberos programming guru, or I'd try to help with the code. I
hope my experimenting and bug reporting saves someone some time down the
line.
Tim