Subject: O-BSD uam_load errors + wrap/encrypt?
From: Karen A Swanberg (swanberg@tc.umn.edu)
Date: Thu Mar 22 2001 - 11:33:41 EST
(was O-BSD 2.8 1.5pre5 compile errors)
Greetings again;
gmake fixed the compile issues, a sincere thank you, but now my
uam/encryption libraries won't load. More details below.
on 03/21/01, Jean-Philippe Rey wisely declared:
<snip>
>
> Summary
> -------
>
> ./configure
> vi libtool -> 368a output_objdir=.
> vi config.h -> 6a #define NO_CRYPT_H 1
> gmake
> gmake install
I tried all this, exactly as written, and with a few variations: not
making the libtool/config.h changes, compiling with and without
--with-tcp-wrappers and --with-ssl-dirs=/usr.
For every variation, this comes up in my logs when the daemons are
starting:
afpd[] uam_load(uams_guest.so): mod_symbol error
afpd[] uam_load(uams_clrtxt.so): mod_symbol error
afpd[] uam_load(uams_dhx.so): mod_symbol error
Unsuprisingly, the macs can't log in, and they get the error usually
associated with not having the most up-to-date AppleShare client, which I
got for good measure, although I know the problem is with the above
errors.
During the gmake install, the following errors occurred:
In file included from auth.c:25:
uam_auth.h:35: warning: `struct papfile' declared inside parameter list
uam_auth.h:35: warning: it's scope is only this definition or declaration,
with is probably not what you want.
the same error occurred with uam.c:25
Jean-Philippe Rey suggested not adding in the --with-tcp-wrappers during
the compile. Is this because they won't work in this beta, or does the
compile adds them in manually? I would very much like to use them. The
whole reason I'm up here on the bleeding beta edge is to use a mostly
secure version of netatalk, I have a perfectly functional version of
1.4b2+asun2.1.3, it just doesn't encrypt anything, but it does use
wrappers. If wrappers don't work now, would people recommend staying with
a wrapped / non-encrypted netatalk, or go non-wrapped / encrypted
(assuming I can get this problem ironed out)? I have no solid evidence of
sniffers on my dept. network, but I'm at a big University, and I'm
starting the migration to SSH as well, so it seems silly to insist on SSH
when my netatalk connections are cleartext.
My environment:
#pkg_info
ssl-2.7-USA
amanda-2.4.1p1
libtool-1.3.5
automake-1.4
autoconf-2.13
gettext-0.10.35
gmake-3.79.1
on OpenBSD 2.8/i386
Again, many thanks for the quick turn-around and helpful answers.
* *
Karen Swanberg |
Network Admin. | Error: Sector not found--
Dept. of Geology/Geophysics |search behind couch? (Y/N)
206 Pillsbury Hall |
310 Pillsbury Ave. SE |
University of Mn | Enter any 11-digit prime
Minneapolis, MN 55455 | number to continue...
(612) 624-6541 |
* *
This archive was generated by hypermail 2b28 : Sun Oct 14 2001 - 03:04:35 EDT