From owner-ssh@clinet.fi  Wed Feb 18 19:17:10 1998
Received: from lohi.clinet.fi (majordom@lohi.clinet.fi [194.100.0.7]) by hutcs.cs.hut.fi (8.8.8/8.8.8) with ESMTP id TAA03621; Wed, 18 Feb 1998 19:17:09 +0200 (EET)
Received: (from majordom@localhost)
	by lohi.clinet.fi (8.8.8/8.8.6) id SAA04850
	for ssh-outgoing; Wed, 18 Feb 1998 18:55:17 +0200 (EET)
X-Authentication-Warning: lohi.clinet.fi: majordom set sender to owner-ssh@clinet.fi using -f
Received: from pppl.gov (root@pppl.gov [192.55.106.85])
	by lohi.clinet.fi (8.8.8/8.8.6) with ESMTP id SAA04845
	for <ssh@clinet.fi>; Wed, 18 Feb 1998 18:55:14 +0200 (EET)
Received: from tern.pppl.gov (karney@tern.pppl.gov [198.35.4.131])
	by pppl.gov (8.8.6/8.8.5) with ESMTP id LAA12704;
	Wed, 18 Feb 1998 11:54:48 -0500 (EST)
Received: (from karney@localhost)
	by tern.pppl.gov (8.8.7/8.8.8) id LAA17578;
	Wed, 18 Feb 1998 11:54:47 -0500
Date: Wed, 18 Feb 1998 11:54:47 -0500
Message-Id: <199802181654.LAA17578@tern.pppl.gov>
From: Charles Karney <karney@pppl.gov>
To: dugsong@monkey.org
CC: ssh-afs@umich.edu, ssh@clinet.fi, kth-krb-bugs@nada.kth.se
In-reply-to: <Pine.BSF.3.96.980217223426.3496F-100000@naughty.monkey.org>
	(message from Dug Song on Tue, 17 Feb 1998 22:41:59 -0500 (EST))
Subject: Re: ssh-1.2.22 + afs + Solaris 2.5.1 build problem
Reply-to: karney@princeton.edu
References:  <Pine.BSF.3.96.980217223426.3496F-100000@naughty.monkey.org>
Sender: owner-ssh@clinet.fi
Precedence: bulk

> Date: 	Tue, 17 Feb 1998 22:41:59 -0500 (EST)
> From: Dug Song <dugsong@monkey.org>
> 
> > I'm having problems deploying ssh-1.2.22 with AFS patches on a Solaris
> > 2.5.1 system.
> > 
> >     Build with (since AFS neads flock for libucb.a)
> > 
> >     gmake KERBEROS_LIBS="-L/a/usr/athena/lib -lkrb -ldes -lresolv -lkafs /usr/ucblib/libucb.a" SSH_PROGRAM=/usr/bin/ssh
> 
> you should NOT be using the /usr/ucblib compat libs. they are evil. your
> configuration is fine, just try 'gmake' alone - the substitution of libucb
> routines is hosing things...
> 
> p.s. the inclusion of "-lc /usr/ucblib/libucb.a" in the old patch was to
> resolve BSD flock and sigvec for one of the AFS libraries (transarc needs
> to do fix this in their Solaris port) - we no longer use AFS libraries to
> provide AFS support, so this isn't necessary. 

It turns out that one of the KTH Kerberos libraries (libkrb.a) references
flock in the Solaris implementation.  KTH Kerberos includes this in the
libroken library, but this isn't installed by default.  So I needed to
build kth kerberos and ssh in sister directories and build with

gmake KERBEROS_LIBS="-L/a/usr/athena/lib -lkrb -ldes -lresolv -lkafs ../krb4-0.9.8/lib/roken/libroken.a" SSH_PROGRAM=/usr/bin/ssh

Perhaps libroken should be installed by kth-krb?  If it is then adding
-lroken to KERBEROS_LIBS would still be necessary under Solaris.

A discussion of this needs to go in the "build tips" for ssh+AFS for
Solaris.  When I do this, ssh+AFS works fine under Solaris.

Many thanks.

-- 
Charles Karney
Plasma Physics Laboratory	  E-mail:  Karney@Princeton.EDU
Princeton University		  Phone:   +1 609 243 2607
Princeton, NJ 08543-0451	  FAX:	   +1 609 243 3438
