mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-08-22 01:49:11 +00:00
Code Issues Releases Wiki Activity

for kerberos V < version, fall back on old kerb4 auth code

Browse Source
This commit is contained in:
Todd C. Miller 1999-06-22 13:30:25 +00:00
parent 81cf00633b
commit 8e30e833f5
4 changed files with 487 additions and 356 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
INSTALL
View File

@ -148,7 +148,7 @@ Special features/options:
DIR is the base directory containing the compiled FWTK package.
--with-kerb4
Enable kerberos v4 support Tested only with the Cygnus Network
Enable kerberos v4 support. Tested only with the Cygnus Network
Security package (CNS). This uses kerberos passphrases for
authentication but does not use the kerberos cookie scheme.
@ -156,7 +156,8 @@ Special features/options:
Enable kerberos v5 support. Tested against MIT Kerberos V,
release 1.1, although also expected to work against CNS. This
This uses kerberos passphrases for authentication but does not
use the kerberos cookie scheme.
use the kerberos cookie scheme. Will not work for Kerberos V
older than version 1.1.
--with-authenticate
Enable support for the AIX 4.x general authentication function.

6
config.h.in
View File

@ -141,10 +141,10 @@
/* Define if you use AIX general authentication. */
#undef HAVE_AUTHENTICATE
/* Define if you use Kerberos. */
/* Define if you use Kerberos IV or Kerberos V < 1.1. */
#undef HAVE_KERB4
/* Define if you use Kerberos. */
/* Define if you use Kerberos V version 1.1 or higher. */
#undef HAVE_KERB5
/* Define if you use SIA. */

796
configure vendored
View File

File diff suppressed because it is too large Load Diff

36
configure.in
View File

@ -215,8 +215,7 @@ esac])
AC_ARG_WITH(kerb4, [ --with-kerb4 enable kerberos v4 support],
[case $with_kerb4 in
yes) AC_DEFINE(HAVE_KERB4)
AC_MSG_CHECKING(whether to try Kerberos 4 authentication)
yes) AC_MSG_CHECKING(whether to try Kerberos 4 authentication)
AC_MSG_RESULT(yes)
;;
no) ;;
@ -227,8 +226,7 @@ esac])
AC_ARG_WITH(kerb5, [ --with-kerb5 enable kerberos v5 support],
[case $with_kerb5 in
yes) AC_DEFINE(HAVE_KERB5)
AC_MSG_CHECKING(whether to try Kerberos 5 authentication)
yes) AC_MSG_CHECKING(whether to try Kerberos 5 authentication)
AC_MSG_RESULT(yes)
;;
no) ;;
@ -1349,10 +1347,25 @@ if test "$with_DCE" = "yes" -o "$ac_cv_prog_YACC" = "bison -y"; then
AC_FUNC_ALLOCA
fi
dnl
dnl Kerberos 5
dnl
if test "$with_kerb5" = "yes"; then
dnl
dnl Starting with Kerberos 5, 1.1 we use the new creds API
dnl Otherwise, just use the old Kerberos 4 stuff.
dnl
AC_CHECK_LIB(krb5, krb5_get_init_creds_opt, [
AC_DEFINE(HAVE_KERB5)
SUDO_LIBS="${SUDO_LIBS} -lkrb5 -lk5crypto -lcom_err"
], with_kerb4=yes)
fi
dnl
dnl Find kerberos 4 includes and libs or complain
dnl
if test "$with_kerb4" = "yes"; then
AC_DEFINE(HAVE_KERB4)
if test -f "/usr/include/kerberosIV/krb.h"; then
CPPFLAGS="${CPPFLAGS} -I/usr/include/kerberosIV"
elif test -f "/usr/local/include/kerberosIV/krb.h"; then
@ -1375,14 +1388,13 @@ if test "$with_kerb4" = "yes"; then
echo 'Unable to locate kerberos 4 libraries, you will have to edit the Makefile and add -L/path/to/krb/libs to SUDO_LDFLAGS'
fi
AC_HAVE_LIBRARY(des, SUDO_LIBS="${SUDO_LIBS} -lkrb -ldes", SUDO_LIBS="${SUDO_LIBS} -lkrb")
fi
dnl
dnl Kerberos 5
dnl
if test "$with_kerb5" = "yes"; then
SUDO_LIBS="${SUDO_LIBS} -lkrb5 -lk5crypto -lcom_err"
if test "$with_kerb5" = "yes"; then
AC_HAVE_LIBRARY(krb4, SUDO_LIBS="${SUDO_LIBS} -lkrb4", SUDO_LIBS="${SUDO_LIBS} -lkrb")
AC_HAVE_LIBRARY(des, SUDO_LIBS="${SUDO_LIBS} -ldes")
SUDO_LIBS="${SUDO_LIBS} -ldes425 -lkrb5 -lcrypto -lcom_err"
else
AC_HAVE_LIBRARY(des, SUDO_LIBS="${SUDO_LIBS} -lkrb -ldes", SUDO_LIBS="${SUDO_LIBS} -lkrb")
fi
fi
dnl