Re: Kerberized Apache - Kerberos

This is a discussion on Re: Kerberized Apache - Kerberos ; Hello Sebastian, Thank you for your help. My comments are integrated below. Ido Levy kerberos-bounces@mit.edu wrote on 19/02/2008 18:16:49: > Ido Levy writes: > > > I am looking for a way to enable users to get access to their ...

+ Reply to Thread
Results 1 to 2 of 2

Thread: Re: Kerberized Apache

  1. Re: Kerberized Apache

    Hello Sebastian,

    Thank you for your help.
    My comments are integrated below.

    Ido Levy


    kerberos-bounces@mit.edu wrote on 19/02/2008 18:16:49:

    > Ido Levy writes:
    >
    > > I am looking for a way to enable users to get access to their space

    through
    > > the web browser.
    > > I would like to integrate it with our Kerberized SSO environment as

    well.
    > > I tried this module http://modauthkerb.sourceforge.net/ but I have
    > > encounter some issues:

    >
    > Using mod_auth_gss
    > (<http://cvs.opensolaris.
    >

    org/source/raw/sfwnv/test_stevel/usr/src/cmd/apache2/mod_auth_gss/mod_auth_gss.

    > c>,
    > install with "apxs -c -i -l gss mod_auth_gss.c") I have apache-2.2.8
    > running with authentication via Kerberos. While mod_auth_kerb has the
    > advantage of providing a username/password fallback, I haven't compiled
    > it under Solaris.


    Following your advice I tried to compile the module on RHEL 5 64 bit
    architecture.
    Unfortunately I got the following:

    /usr/sbin/apxs -c -i -l gss ./mod_auth_gss.c
    /usr/lib64/apr-1/build/libtool --silent --mode=compile gcc -prefer-pic -O2
    -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector
    --param=ssp-buffer-size=4 -m64 -mtune=generic -DLINUX=2 -D_REENTRANT
    -D_GNU_SOURCE -pthread -I/usr/include/httpd -I/usr/include/apr-1
    -I/usr/include/apr-1 -c -o ./mod_auth_gss.lo ./mod_auth_gss.c &&
    touch ./mod_auth_gss.slo
    ../mod_auth_gss.c:1: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:20:29: warning: character constant too long for its type
    ../mod_auth_gss.c:21:27: warning: character constant too long for its type
    ../mod_auth_gss.c:22:36: warning: character constant too long for its type
    ../mod_auth_gss.c:23:27: warning: character constant too long for its type
    ../mod_auth_gss.c:28: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:30: error: stray '#' in program
    ../mod_auth_gss.c:31:16: error: invalid suffix "px" on integer constant
    ../mod_auth_gss.c:32: error: stray '#' in program
    ../mod_auth_gss.c:38:15: error: exponent has no digits
    ../mod_auth_gss.c:39:18: error: invalid suffix "px" on integer constant
    ../mod_auth_gss.c:41: error: stray '#' in program
    ../mod_auth_gss.c:41: error: expected '=', ',', ';', 'asm' or
    '__attribute__' before 'Iconbar',
    ../mod_auth_gss.c:41: error: stray '#' in program;
    ../mod_auth_gss.c:44: error: stray '#' in program;
    ../mod_auth_gss.c:44: error: expected '=', ',', ';', 'asm' or
    '__attribute__' before 'Iconbar',
    ../mod_auth_gss.c:44: error: stray '#' in program;
    ../mod_auth_gss.c:47: error: stray '#' in program;
    ../mod_auth_gss.c:47: error: expected '=', ',', ';', 'asm' or
    '__attribute__' before 'Iconbar',
    ../mod_auth_gss.c:47: error: stray '#' in program;
    ../mod_auth_gss.c:50: error: stray '#' in program;
    ../mod_auth_gss.c:50: error: expected '=', ',', ';', 'asm' or
    '__attribute__' before 'Iconbar',
    ../mod_auth_gss.c:50: error: stray '#' in program;
    ../mod_auth_gss.c:53: error: stray '#' in program;
    ../mod_auth_gss.c:53: error: expected '=', ',', ';', 'asm' or
    '__attribute__' before 'Iconbar',
    ../mod_auth_gss.c:53: error: stray '#' in program;
    ../mod_auth_gss.c:56: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:143: error: stray '#' in program
    ../mod_auth_gss.c:145: error: stray '#' in program
    ../mod_auth_gss.c:145: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:146: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:146: error: stray '#' in program
    ../mod_auth_gss.c:146: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:147: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:148: error: stray '#' in program
    ../mod_auth_gss.c:149: error: stray '#' in program
    ../mod_auth_gss.c:150: error: stray '#' in program
    ../mod_auth_gss.c:151: error: stray '#' in program
    ../mod_auth_gss.c:152: error: stray '#' in program
    ../mod_auth_gss.c:153: error: stray '#' in program
    ../mod_auth_gss.c:154: error: stray '#' in program
    ../mod_auth_gss.c:155: error: stray '#' in program
    ../mod_auth_gss.c:156: error: stray '#' in program
    ../mod_auth_gss.c:157: error: stray '#' in program
    ../mod_auth_gss.c:158: error: stray '#' in program
    ../mod_auth_gss.c:159: error: stray '#' in program
    ../mod_auth_gss.c:160: error: stray '#' in program
    ../mod_auth_gss.c:161: error: stray '#' in program
    ../mod_auth_gss.c:163: error: stray '#' in program
    ../mod_auth_gss.c:163: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:164: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:164: error: stray '#' in program
    ../mod_auth_gss.c:164: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:165: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:167: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:169: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:171: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:176: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:177: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:184: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:191: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:198: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:212: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:218: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:228: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:232: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:233: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:235: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:248: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:261: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:299: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:324: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:373: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:588: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:598: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:621: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:677: error: expected identifier or '(' before '<' token
    ../mod_auth_gss.c:689: error: expected identifier or '(' before numeric
    constant
    ../mod_auth_gss.c:693: error: missing terminating " character
    ../mod_auth_gss.c:694: error: missing terminating " character
    apxs:Error: Command failed with rc=65536

    Any advice ?

    >
    > For an authentication needing part of your website you could either put
    > these directives into a .htaccess file (assuming that your httpd
    > configuration allows authentication override) or a directory or location
    > section:
    >
    > AuthType GSSAPI
    > AuthGssServiceName HTTP
    > AuthGssKeytabFile /opt/apache/2.2.8/conf/http.keytab
    > AuthGssDebug 0
    > require valid-user
    >
    > The username - should you need to specifiy access only for select users
    > - is the Kerberos principal.
    >
    >
    > Sebastian
    > ________________________________________________
    > Kerberos mailing list Kerberos@mit.edu
    > https://mailman.mit.edu/mailman/listinfo/kerberos



  2. Re: Kerberized Apache

    Ido Levy writes:

    > Following your advice I tried to compile the module on RHEL 5 64 bit
    > architecture.
    > Unfortunately I got the following:
    >
    > /usr/sbin/apxs -c -i -l gss ./mod_auth_gss.c
    > /usr/lib64/apr-1/build/libtool --silent --mode=compile gcc -prefer-pic -O2
    > -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector
    > --param=ssp-buffer-size=4 -m64 -mtune=generic -DLINUX=2 -D_REENTRANT
    > -D_GNU_SOURCE -pthread -I/usr/include/httpd -I/usr/include/apr-1
    > -I/usr/include/apr-1 -c -o ./mod_auth_gss.lo ./mod_auth_gss.c &&
    > touch ./mod_auth_gss.slo
    > ./mod_auth_gss.c:1: error: expected identifier or '(' before '<' token
    > ./mod_auth_gss.c:20:29: warning: character constant too long for its type
    > ./mod_auth_gss.c:21:27: warning: character constant too long for its type
    > ./mod_auth_gss.c:22:36: warning: character constant too long for its type
    > ./mod_auth_gss.c:23:27: warning: character constant too long for its type
    >
    > [snip]
    >
    > ./mod_auth_gss.c:693: error: missing terminating " character
    > ./mod_auth_gss.c:694: error: missing terminating " character
    > apxs:Error: Command failed with rc=65536


    Do you really have a plain text file containing the C code? Seeing
    errors reported in the first line of mod_auth_gss.c (which reads "/*")
    shouldn't happen.

    The "<" suggests that you have downloaded the file as a HTML document,
    simply try wget or copy&paste the contents of the given link into an
    editor of your choice.


    Sebastian

+ Reply to Thread