Mark, Thanks for your comments. I'll try to pipe the output from krb5-config into cosign and run the configure again. I will also take a look at other ideas you suggested. (You may have seen a few replies from other people on this list - kudos and thanks to them as well.)
Best, SC -----Original Message----- From: Mark Montague [mailto:markm...@umich.edu] Sent: Thursday, February 25, 2010 1:34 PM To: Simon Chang Cc: cosign-discuss@lists.sourceforge.net Subject: Re: [Cosign-discuss] Cosign.conf and Active Directory configuration Google Search says that many people are getting the same error when trying to compile various software packages: http://www.google.com/search?q=undefined+reference+to+%60length_PA_ENC_T S_ENC%27 I have not taken the time to find a solution for you, but hopefully the above will help. As an aside: cosign's configure script does not use krb5-config. As a starting point, you may want to run "krb5-config --cflags" and add the output (if any) to the CFLAGS for cosign. Likewise, run "krb5-config --libs" and add the output to the LDFLAGS for cosign. For example, on my machine I would do: $ krb5-config --cflags $ krb5-config --libs -dynamic -Wl,-search_paths_first -lkrb5 -lk5crypto -lcom_err -lresolv $ LDFLAGS="-dynamic -Wl,-search_paths_first -lkrb5 -lk5crypto -lcom_err -lresolv" ./configure --enable-apache2=/usr/sbin/apxs --enable-krb=/usr ...however, this is just a random suggestion. I recommend that you go through the problems that other people have been having with other packages and see if you can find how they solved it. Also... have you successfully compiled something else using these Kerberos libraries? Best luck. Mark Montague ITS Web/Database Team The University of Michigan markm...@umich.edu On February 25, 2010 12:00 , "Simon Chang" <simon.ch...@necmusic.edu> wrote: > Hi Mark, > > We do not have any existing weblogin servers; this test server > constitutes the first presence of Cosign in our school. So I think we > would fit the second scenario you described. > > Knowing that, I went back to the root directory of the source and > issued the following two directives: > > ./configure --enable-apache2=/usr/local/apache2/bin/apxs > --enable-krb=/usr/local > make everything > > Almost immediately, I ran into this problem: > > gcc -Wall -Wmissing-prototypes -g -O2 -c version.c cd common; make > all cd libsnet; make all cd libcgi; make all cd cgi; make all gcc > -Wall -Wmissing-prototypes -g -O2 -I/usr/include -I/usr/local/include > -I../common -I../libsnet -I../libcgi -o logout logout.o network.o > subfile.o ../common/mkcookie.o ../common/fbase64.o ../common/conf.o > ../common/wildcard.o ../common/argcargv.o ../version.o > -L../libsnet/.libs -L../libcgi -L/usr/lib -L/usr/local/lib -lsnet > -lcgi -lssl -lcrypto -lkrb5 -lk5crypto -lcom_err > /usr/lib/libkrb5.so: undefined reference to `length_PA_ENC_TS_ENC' > /usr/lib/libkrb5.so: undefined reference to `length_KDC_REQ_BODY' > /usr/lib/libkrb5.so: undefined reference to `free_Principal' > /usr/lib/libkrb5.so: undefined reference to `bswap16' > /usr/lib/libkrb5.so: undefined reference to `length_EncKrbCredPart' > /usr/lib/libkrb5.so: undefined reference to `copy_Realm' > /usr/lib/libkrb5.so: undefined reference to `strlwr' > /usr/lib/libkrb5.so: undefined reference to `length_TGS_REQ' > /usr/lib/libkrb5.so: undefined reference to `decode_TGS_REP' > /usr/lib/libkrb5.so: undefined reference to `copy_PrincipalName' > /usr/lib/libkrb5.so: undefined reference to `decode_EncKrbCredPart' > /usr/lib/libkrb5.so: undefined reference to `length_EncryptedData' > /usr/lib/libkrb5.so: undefined reference to `net_write' > /usr/lib/libkrb5.so: undefined reference to `decode_Authenticator' > /usr/lib/libkrb5.so: undefined reference to `free_KRB_PRIV' > /usr/lib/libkrb5.so: undefined reference to `free_ETYPE_INFO' > /usr/lib/libkrb5.so: undefined reference to `encode_AP_REQ' > /usr/lib/libkrb5.so: undefined reference to `encode_EncKrbPrivPart' > /usr/lib/libkrb5.so: undefined reference to `copy_octet_string' > /usr/lib/libkrb5.so: undefined reference to `copy_HostAddress' > /usr/lib/libkrb5.so: undefined reference to `length_Ticket' > /usr/lib/libkrb5.so: undefined reference to `decode_AP_REQ' > /usr/lib/libkrb5.so: undefined reference to `length_AuthorizationData' > /usr/lib/libkrb5.so: undefined reference to `encode_TGS_REQ' > /usr/lib/libkrb5.so: undefined reference to `length_KRB_ERROR' > /usr/lib/libkrb5.so: undefined reference to `arg_printusage' > /usr/lib/libkrb5.so: undefined reference to `free_KRB_SAFE' > /usr/lib/libkrb5.so: undefined reference to `roken_gethostby_setup' > /usr/lib/libkrb5.so: undefined reference to `decode_KRB_ERROR' > /usr/lib/libkrb5.so: undefined reference to `length_AS_REQ' > /usr/lib/libkrb5.so: undefined reference to `length_KRB_SAFE' > /usr/lib/libkrb5.so: undefined reference to `encode_EncASRepPart' > /usr/lib/libkrb5.so: undefined reference to `copy_EncryptionKey' > /usr/lib/libkrb5.so: undefined reference to `length_EncKrbPrivPart' > /usr/lib/libkrb5.so: undefined reference to `copy_Principal' > /usr/lib/libkrb5.so: undefined reference to `encode_PA_ENC_TS_ENC' > /usr/lib/libkrb5.so: undefined reference to > `initialize_asn1_error_table_r' > /usr/lib/libkrb5.so: undefined reference to `copy_EncTicketPart' > /usr/lib/libkrb5.so: undefined reference to `decode_EncTGSRepPart' > /usr/lib/libkrb5.so: undefined reference to `decode_EncAPRepPart' > /usr/lib/libkrb5.so: undefined reference to `encode_EncAPRepPart' > /usr/lib/libkrb5.so: undefined reference to `encode_AuthorizationData' > /usr/lib/libkrb5.so: undefined reference to `free_Checksum' > /usr/lib/libkrb5.so: undefined reference to `encode_ETYPE_INFO' > /usr/lib/libkrb5.so: undefined reference to `decode_KRB_CRED' > /usr/lib/libkrb5.so: undefined reference to `length_ChangePasswdDataMS' > /usr/lib/libkrb5.so: undefined reference to `rk_dns_free_data' > /usr/lib/libkrb5.so: undefined reference to `free_EncTGSRepPart' > /usr/lib/libkrb5.so: undefined reference to `encode_EncTicketPart' > /usr/lib/libkrb5.so: undefined reference to `free_Ticket' > /usr/lib/libkrb5.so: undefined reference to `bswap32' > /usr/lib/libkrb5.so: undefined reference to `free_KDC_REP' > /usr/lib/libkrb5.so: undefined reference to `base64_encode' > /usr/lib/libkrb5.so: undefined reference to `length_Authenticator' > /usr/lib/libkrb5.so: undefined reference to `decode_KRB_PRIV' > /usr/lib/libkrb5.so: undefined reference to `free_EncTicketPart' > /usr/lib/libkrb5.so: undefined reference to `rk_dns_lookup' > /usr/lib/libkrb5.so: undefined reference to `encode_EncTGSRepPart' > /usr/lib/libkrb5.so: undefined reference to `crypt' > /usr/lib/libkrb5.so: undefined reference to `free_AP_REQ' > /usr/lib/libkrb5.so: undefined reference to `free_EncKrbPrivPart' > /usr/lib/libkrb5.so: undefined reference to `encode_KRB_PRIV' > /usr/lib/libkrb5.so: undefined reference to `net_read' > /usr/lib/libkrb5.so: undefined reference to `encode_KRB_SAFE' > /usr/lib/libkrb5.so: undefined reference to `encode_Authenticator' > /usr/lib/libkrb5.so: undefined reference to `strsep_copy' > /usr/lib/libkrb5.so: undefined reference to `decode_Ticket' > /usr/lib/libkrb5.so: undefined reference to `encode_AS_REQ' > /usr/lib/libkrb5.so: undefined reference to `issuid' > /usr/lib/libkrb5.so: undefined reference to `free_HostAddress' > /usr/lib/libkrb5.so: undefined reference to `encode_AP_REP' > /usr/lib/libkrb5.so: undefined reference to `free_TGS_REQ' > /usr/lib/libkrb5.so: undefined reference to `encode_KRB_CRED' > /usr/lib/libkrb5.so: undefined reference to `free_EncAPRepPart' > /usr/lib/libkrb5.so: undefined reference to `decode_EncASRepPart' > /usr/lib/libkrb5.so: undefined reference to `free_METHOD_DATA' > /usr/lib/libkrb5.so: undefined reference to `encode_KRB_ERROR' > /usr/lib/libkrb5.so: undefined reference to `length_AP_REP' > /usr/lib/libkrb5.so: undefined reference to `decode_AP_REP' > /usr/lib/libkrb5.so: undefined reference to `encode_Ticket' > /usr/lib/libkrb5.so: undefined reference to `TicketFlags2int' > /usr/lib/libkrb5.so: undefined reference to `roken_gethostbyname' > /usr/lib/libkrb5.so: undefined reference to `int2KDCOptions' > /usr/lib/libkrb5.so: undefined reference to `encode_EncryptedData' > /usr/lib/libkrb5.so: undefined reference to `length_KRB_CRED' > /usr/lib/libkrb5.so: undefined reference to `free_Authenticator' > /usr/lib/libkrb5.so: undefined reference to `decode_METHOD_DATA' > /usr/lib/libkrb5.so: undefined reference to `encode_EncKrbCredPart' > /usr/lib/libkrb5.so: undefined reference to `copy_HostAddresses' > /usr/lib/libkrb5.so: undefined reference to `free_KRB_CRED' > /usr/lib/libkrb5.so: undefined reference to `decode_EncKrbPrivPart' > /usr/lib/libkrb5.so: undefined reference to `free_AS_REQ' > /usr/lib/libkrb5.so: undefined reference to `length_EncAPRepPart' > /usr/lib/libkrb5.so: undefined reference to `decode_AS_REP' > /usr/lib/libkrb5.so: undefined reference to `copy_AuthorizationData' > /usr/lib/libkrb5.so: undefined reference to `free_AuthorizationData' > /usr/lib/libkrb5.so: undefined reference to `copy_Authenticator' > /usr/lib/libkrb5.so: undefined reference to `getarg' > /usr/lib/libkrb5.so: undefined reference to `copy_Ticket' > /usr/lib/libkrb5.so: undefined reference to `decode_KRB_SAFE' > /usr/lib/libkrb5.so: undefined reference to `free_KRB_ERROR' > /usr/lib/libkrb5.so: undefined reference to `strupr' > /usr/lib/libkrb5.so: undefined reference to `free_EncKrbCredPart' > /usr/lib/libkrb5.so: undefined reference to `free_AP_REP' > /usr/lib/libkrb5.so: undefined reference to `encode_KDC_REQ_BODY' > /usr/lib/libkrb5.so: undefined reference to `copy_EncryptedData' > /usr/lib/libkrb5.so: undefined reference to `decode_ETYPE_INFO' > /usr/lib/libkrb5.so: undefined reference to `parse_time' > /usr/lib/libkrb5.so: undefined reference to `length_AP_REQ' > /usr/lib/libkrb5.so: undefined reference to `length_KRB_PRIV' > /usr/lib/libkrb5.so: undefined reference to `free_EncryptedData' > /usr/lib/libkrb5.so: undefined reference to `encode_ChangePasswdDataMS' > /usr/lib/libkrb5.so: undefined reference to `rk_dns_srv_order' > /usr/lib/libkrb5.so: undefined reference to `decode_EncTicketPart' > *** Error code 1 > > Stop in /data1/cosign-3.1.1/cgi. > *** Error code 1 > > Stop in /data1/cosign-3.1.1. > > We had previously installed Kerberos 5 version 1.7.1 (krb5-1.7.1), > which went without a hitch. > > Any idea what is causing this? (I see a bunch of "undefined reference" > errors coming from the Kerberos module. Should we have compiled Krb5 > using certain directives?) > > Thanks, > > SC > > > -----Original Message----- > From: Mark Montague [mailto:markm...@umich.edu] > Sent: Thursday, February 25, 2010 11:31 AM > To: cosign-discuss@lists.sourceforge.net > Subject: Re: [Cosign-discuss] Cosign.conf and Active Directory > configuration > > > Are you trying to set up a cosign-protected web server that uses uses > central cosign weblogin servers that your organization has already set > up? In that case, cosignd and cosign.conf are already on your > organizations central weblogin servers; they do not get installed on > individual cosign-protected web servers. You will only need to > configure Kerberos if your web application needs to receive proxied > Kerberos tickets to use with some local Kerberos-enabled service (for > example, if your cosign protected web application needs to connect to > a mail server as the end user who is logged in via cosign). > > Or are you trying to set up the central weblogin servers for your > organization? In that case, be sure to follow the instructions in the > README.weblogin file. cosignd does not get built unless you run "make > everything" instead of running "make"; and neither cosignd nor > cosign.conf get installed unless you run "make install-all" instead of > "make install". Information on Kerberos is also included in > README.weblogin. Let us know if you have questions. > > Mark Montague > ITS Web/Database Team > The University of Michigan > markm...@umich.edu > > > > > On February 25, 2010 11:16 , "Simon Chang"<simon.ch...@necmusic.edu> > wrote: > >> Hello again, >> >> We are in the process of configuring Cosign to use our Microsoft >> Active Directory service, but we are stumped. >> >> So far, we have downloaded the source tarball, compiled, and >> installed >> > >> it into a test Apache 2.2 server. The module loaded just fine with >> no >> > >> errors at all. We have also added Cosign-related config into >> httpd.conf. >> >> But for some reason, even after issuing the "make install" command, >> we >> > >> don't see cosignd anywhere in our box. We also don't see >> cosign.conf(5) anywhere in our system either. The directions in the >> Wiki are spotty at best, leaving us in the dark. There is also no >> hint as to how we should configure the Kerberos 5 package. >> >> Can anyone assist? >> >> Thanks, >> >> SC >> >> ======================================== >> Simon Chang >> Network and Systems Administrator >> New England Conservatory of Music >> 290 Huntington Avenue, Boston, MA 02115 >> >> >> --------------------------------------------------------------------- >> - >> -------- Download Intel® Parallel Studio Eval Try the new >> software tools for yourself. Speed compiling, find bugs proactively, >> and fine-tune applications for parallel performance. >> See why Intel Parallel Studio got high marks during beta. >> http://p.sf.net/sfu/intel-sw-dev >> _______________________________________________ >> Cosign-discuss mailing list >> Cosign-discuss@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/cosign-discuss >> >> >> >> > > > ---------------------------------------------------------------------- > -- > ------ > Download Intel® Parallel Studio Eval Try the new software tools > for yourself. Speed compiling, find bugs proactively, and fine-tune > applications for parallel performance. > See why Intel Parallel Studio got high marks during beta. > http://p.sf.net/sfu/intel-sw-dev > _______________________________________________ > Cosign-discuss mailing list > Cosign-discuss@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/cosign-discuss > > > ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Cosign-discuss mailing list Cosign-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/cosign-discuss
