X-Recipient:	archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status:	No, hits=-2.4 required=5.0 tests=AWL,BAYES_00,SPF_PASS
X-Spam-Check-By:	sourceware.org
To:	cygwin AT cygwin DOT com
Subject:	Successful build of ssh from openssh w. MIT kerberos
From:	ht AT inf DOT ed DOT ac DOT uk (Henry S. Thompson)
Date:	Mon, 06 Jul 2009 17:30:38 +0100
Message-ID:	<f5bljn1srip.fsf@hildegard.inf.ed.ac.uk>
User-Agent:	Gnus/5.1008 (Gnus v5.10.8) XEmacs/21.4.21 (linux)
MIME-Version:	1.0
X-Edinburgh-Scanned:	at nougat.ucs.ed.ac.uk with MIMEDefang 2.60, Sophie, Sophos Anti-Virus, Clam AntiVirus
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

There's been a lot of interest in this over the years, but I've found
no reports of success.  The following involves a number of hacks, but
it works, which may be of use to some.

1) Download and install MIT Kerberos for Windows -- I used
   kfw-3-2-2.exe
2) Use Cygwin setup to install openssh source -- I used
   openssh-5.1p1-10-src
3) > cd /usr/src/openssh-5.1p1-10
   > sed 's/gssapi_krb5/gssapi32/' -i configure
   > sed 's/-lkrb5/-lkrb5_32/;s/ -lk5crypto//' -i configure
   > LDFLAGS=3D-L/c/Progra~1/MIT/Kerberos/bin CPPFLAGS=3D'-I/c/Progra~1/MIT=
/Kerberos/inc/krb5/krb5 -I/c/Progra~1/MIT/Kerberos/inc/krb5 -I/c/Progra~1/M=
IT/Kerberos/inc/krb5/gssapi' ./configure --with-kerberos5=3D/c/Progra~1/MIT=
/Kerberos --prefix=3D/usr --sysconfdir=3D/etc --libexecdir=3D'${sbindir}' -=
-localstatedir=3D/var --datadir=3D'${prefix}/share' --mandir=3D'${datadir}/=
man' --infodir=3D'${datadir}/info'
   > make

   This will fail when trying to link ssh itself.  Just do

4) > gcc -Wl,--enable-auto-import,--enable-stdcall-fixup -o ssh.exe ssh.o r=
eadconf.o clientloop.o sshtty.o sshconnect.o sshconnect1.o sshconnect2.o mu=
x.o  /c/Program\ Files/MIT/Kerberos/bin/gssapi32.dll -L. -Lopenbsd-compat/ =
-L/c/Progra~1/MIT/Kerberos/lib/i386 -lssh -lopenbsd-compat -lgssapi32 -lres=
olv -lcrypto -lz

I realise this last step looks clunky, but I tried and failed to find
a clean way to get rid of all the linking problems using other
approaches.  Improvements would of course be welcome.

Stopping here of course means the other components don't get built --
sorry -- all I wanted was ssh itself. . .

Then once you've followed the instructions to get yourself set up with
Kerberos for Windows and you have a valid certificate for your
destination, and you've added something along the lines of

  GSSAPIAuthentication yes
  PreferredAuthentications gssapi-with-mic

to your ssh config file, you should be good to go.

ht
- --=20
       Henry S. Thompson, School of Informatics, University of Edinburgh
                         Half-time member of W3C Team
      10 Crichton Street, Edinburgh EH8 9AB, SCOTLAND -- (44) 131 650-4440
                Fax: (44) 131 651-1426, e-mail: ht AT inf DOT ed DOT ac DOT uk
                       URL: http://www.ltg.ed.ac.uk/~ht/
[mail really from me _always_ has this .sig -- mail without it is forged sp=
am]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFKUiaukjnJixAXWBoRAl5HAJ9d/9+ij3m4B841SOFWVhhTxWnczgCfZNwB
D7ipku0RUy4sF9IHVYBurNY=3D
=3DjSxH
-----END PGP SIGNATURE-----

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -