| 1 | This is a set of patches and files to get a DFS ticket from a k5 ticket.
|
|---|
| 2 | This code comes from Doug Engert, Argonne Nat. Lab (See dce/README.original
|
|---|
| 3 | for more info)
|
|---|
| 4 |
|
|---|
| 5 | The files in dce are;
|
|---|
| 6 | testpag: for testing if this is at all possible.
|
|---|
| 7 | k5dfspag: included in libkrb5
|
|---|
| 8 | k5dcecon: Creates (or searches for) the actual DFSPAG ticketfile.
|
|---|
| 9 | dpagaix: An AIX syscall stub.
|
|---|
| 10 | README.original: Original README file from Doug Engert
|
|---|
| 11 |
|
|---|
| 12 |
|
|---|
| 13 | Certain applications (rshd/telnetd) have been patched to call the
|
|---|
| 14 | functions in k5dfspag when the situation is right. They are ifdef
|
|---|
| 15 | with DCE. The patches are also originally from Doug but they
|
|---|
| 16 | where against MIT krb5 code and have been merged into heimdal by me.
|
|---|
| 17 | I will try to fix ftpd soon...
|
|---|
| 18 |
|
|---|
| 19 | There is also an ifdefs for DCE && AIX that can be used to make AIX
|
|---|
| 20 | use DCE for getting group/passwd entries. This is needed if one is running
|
|---|
| 21 | with a bare bones passwd/group file and AUTHSTATE set to DCE (This will be
|
|---|
| 22 | more or less clear to people doing this...) I have forced this on for now.
|
|---|
| 23 |
|
|---|
| 24 | k5dfspag.c is in lib/krb5
|
|---|
| 25 | k5dfspag.c is dependent on DCE only.
|
|---|
| 26 | It is also POSIX systems only. There are defines for the location of
|
|---|
| 27 | k5dcecon and dpagaix that needs a correct configure setting.
|
|---|
| 28 |
|
|---|
| 29 | k5dcecon needs no special things for the compile except whatever is needed
|
|---|
| 30 | on the target system to compile dce programs.
|
|---|
| 31 | (On aix the dce compile flags are: -D_THREAD_SAFE -D_AIX32_THREADS=1 -D_AIX41 -D_AES_SOURCE or one can use xlc_r4 if it is version 3.6.4 or later)
|
|---|
| 32 |
|
|---|
| 33 | k5dcecon wants the following libs (on aix 4.3):
|
|---|
| 34 | -ldce (and setenv from somewhere)
|
|---|
| 35 |
|
|---|
| 36 | dpagaix is only needed on AIX (see k5dfspag.c).
|
|---|
| 37 | dpagaix needs dfspag.exp and is linked with
|
|---|
| 38 | ld -edpagaix -o dpagaix dpagaix.o dfspag.exp
|
|---|
| 39 |
|
|---|
| 40 |
|
|---|
| 41 | Hope to get this into heimdal soon :-) although I know that you will have to
|
|---|
| 42 | change some things to get it cleanly into configure. Since I don't know the
|
|---|
| 43 | structure of the code (heimdal), nor enough of configure, good enough I
|
|---|
| 44 | just won't try it myself.
|
|---|
| 45 |
|
|---|
| 46 | One more thing, to get this to work one has to put fcache_version = x in
|
|---|
| 47 | krb5.conf where x = whatever the DCE implementation understands, (usually
|
|---|
| 48 | 1 or 2).
|
|---|
| 49 | Thanks for adding that...
|
|---|
| 50 |
|
|---|
| 51 |
|
|---|
| 52 | Ã
|
|---|
| 53 | ke Sandgren (ake@hpc2n.umu.se)
|
|---|
| 54 | HPC2N
|
|---|
| 55 | Umeå University
|
|---|
| 56 | Sweden
|
|---|
| 57 |
|
|---|
| 58 | PS
|
|---|
| 59 | I have now added patches for configure.in and some Makefile.am's to get this
|
|---|
| 60 | all cleanly (I hope) into heimdal.
|
|---|
