X-Recipient: archive-cygwin AT delorie DOT com X-SWARE-Spam-Status: No, hits=-2.4 required=5.0 tests=AWL,BAYES_00,SPF_PASS X-Spam-Check-By: sourceware.org To: cygwin AT cygwin DOT com Subject: Successful build of ssh from openssh w. MIT kerberos From: ht AT inf DOT ed DOT ac DOT uk (Henry S. Thompson) Date: Mon, 06 Jul 2009 17:30:38 +0100 Message-ID: User-Agent: Gnus/5.1008 (Gnus v5.10.8) XEmacs/21.4.21 (linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable X-Edinburgh-Scanned: at nougat.ucs.ed.ac.uk with MIMEDefang 2.60, Sophie, Sophos Anti-Virus, Clam AntiVirus X-IsSubscribed: yes Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 There's been a lot of interest in this over the years, but I've found no reports of success. The following involves a number of hacks, but it works, which may be of use to some. 1) Download and install MIT Kerberos for Windows -- I used kfw-3-2-2.exe 2) Use Cygwin setup to install openssh source -- I used openssh-5.1p1-10-src 3) > cd /usr/src/openssh-5.1p1-10 > sed 's/gssapi_krb5/gssapi32/' -i configure > sed 's/-lkrb5/-lkrb5_32/;s/ -lk5crypto//' -i configure > LDFLAGS=3D-L/c/Progra~1/MIT/Kerberos/bin CPPFLAGS=3D'-I/c/Progra~1/MIT= /Kerberos/inc/krb5/krb5 -I/c/Progra~1/MIT/Kerberos/inc/krb5 -I/c/Progra~1/M= IT/Kerberos/inc/krb5/gssapi' ./configure --with-kerberos5=3D/c/Progra~1/MIT= /Kerberos --prefix=3D/usr --sysconfdir=3D/etc --libexecdir=3D'${sbindir}' -= -localstatedir=3D/var --datadir=3D'${prefix}/share' --mandir=3D'${datadir}/= man' --infodir=3D'${datadir}/info' > make This will fail when trying to link ssh itself. Just do 4) > gcc -Wl,--enable-auto-import,--enable-stdcall-fixup -o ssh.exe ssh.o r= eadconf.o clientloop.o sshtty.o sshconnect.o sshconnect1.o sshconnect2.o mu= x.o /c/Program\ Files/MIT/Kerberos/bin/gssapi32.dll -L. -Lopenbsd-compat/ = -L/c/Progra~1/MIT/Kerberos/lib/i386 -lssh -lopenbsd-compat -lgssapi32 -lres= olv -lcrypto -lz I realise this last step looks clunky, but I tried and failed to find a clean way to get rid of all the linking problems using other approaches. Improvements would of course be welcome. Stopping here of course means the other components don't get built -- sorry -- all I wanted was ssh itself. . . Then once you've followed the instructions to get yourself set up with Kerberos for Windows and you have a valid certificate for your destination, and you've added something along the lines of GSSAPIAuthentication yes PreferredAuthentications gssapi-with-mic to your ssh config file, you should be good to go. ht - --=20 Henry S. Thompson, School of Informatics, University of Edinburgh Half-time member of W3C Team 10 Crichton Street, Edinburgh EH8 9AB, SCOTLAND -- (44) 131 650-4440 Fax: (44) 131 651-1426, e-mail: ht AT inf DOT ed DOT ac DOT uk URL: http://www.ltg.ed.ac.uk/~ht/ [mail really from me _always_ has this .sig -- mail without it is forged sp= am] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) iD8DBQFKUiaukjnJixAXWBoRAl5HAJ9d/9+ij3m4B841SOFWVhhTxWnczgCfZNwB D7ipku0RUy4sF9IHVYBurNY=3D =3DjSxH -----END PGP SIGNATURE----- -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple