Made changes and added the CFLAGS for the configure process:

CFLAGS='-D_LARGE_FILES -DLANL -DLANL_ICN'; export CFLAGS

and the compile was successful. Looks like everything is working !
kinit now ask for my password and I have not found any issues with the
other applications.

Thanks to all for the help ! Really appreciate the time and effort you
put in to helping me.

Lamar

-----Original Message-----
From: kerberos-bounces@mit.edu [mailto:kerberos-bounces@mit.edu] On
Behalf Of kerberos-request@mit.edu
Sent: Saturday, May 07, 2005 11:02 AM
To: kerberos@mit.edu
Subject: Kerberos Digest, Vol 29, Issue 9

Send Kerberos mailing list submissions to
kerberos@mit.edu

To subscribe or unsubscribe via the World Wide Web, visit
https://mailman.mit.edu/mailman/listinfo/kerberos
or, via email, send a message with subject or body 'help' to
kerberos-request@mit.edu

You can reach the person managing the list at
kerberos-owner@mit.edu

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Kerberos digest..."


Today's Topics:

1. RE: Kerberos Digest, Vol 29, Issue 7
2. RE: Kerberos Digest, Vol 29, Issue 7
3. Re: Denial of service when using Active Directory for KDC ?
(Markus Moeller)
4. Need LDAP help from you (umer khan)
5. Samba / AD / MIT-KDC (Mark Hendricks)


----------------------------------------------------------------------

Date: Fri, 6 May 2005 11:03:59 -0500
From:
To:
Subject: RE: Kerberos Digest, Vol 29, Issue 7
Message-ID:
<5C066E580F0244458087CC59AC4F74E31ED04A@srvexcharl0 2.acf.americredit.com
>

Content-Type: text/plain;
charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Precedence: list
Message: 1


Made the changes and compiling now on AIX 5.2. Will let you know the
results shortly.

Thanks for all the help. Really appreciate it.

Lamar

-----Original Message-----
From: kerberos-bounces@mit.edu [mailto:kerberos-bounces@mit.edu] On
Behalf Of kerberos-request@mit.edu
Sent: Friday, May 06, 2005 5:19 AM
To: kerberos@mit.edu
Subject: Kerberos Digest, Vol 29, Issue 7

Send Kerberos mailing list submissions to
kerberos@mit.edu

To subscribe or unsubscribe via the World Wide Web, visit
https://mailman.mit.edu/mailman/listinfo/kerberos
or, via email, send a message with subject or body 'help' to
kerberos-request@mit.edu

You can reach the person managing the list at
kerberos-owner@mit.edu

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Kerberos digest..."


Today's Topics:

3. AIX 5.2 and Kerberos 1.4.1 Patches (Milton Turley)

Date: Thu, 05 May 2005 15:08:15 -0600
From: Milton Turley
To: kerberos@mit.edu
Subject: AIX 5.2 and Kerberos 1.4.1 Patches
Message-ID: <6.0.1.1.2.20050505144936.02db1c50@cic-mail.lanl.gov>
Content-Type: text/plain; charset="us-ascii"; format=flowed
MIME-Version: 1.0
Precedence: list
Message: 3

Following are 2 patches for kerberos 1.4.1 to build on AIX 5.2. The
patches are for the problem of not being able to resolve the address for

the kdc.
The #ifndef LANL and #ifdef LANL are locale compiler directives and will

need to be changed or specifiy -D LANL in configure process.

The patch for dsnglue.c is if "thread-support" is enabled. The patch
adds
a 1024 byte buffer after the _res_state structure. IBM AIX has a
problem
where 735+- bytes are overlaid when res_ninit is called. The 1024 bytes

pads the storage to stop res_ninit from overlaying critical storage.
Ken
Raeburn had tried a similar patch with 72 bytes.

>*** ./src/lib/krb5/os/dnsglue.c.orig Fri Jan 14 17:10:53 2005
>--- ./src/lib/krb5/os/dnsglue.c Thu May 5 11:39:52 2005
>***************
>*** 62,68 ****
>--- 62,76 ----
> char *host, int nclass, int ntype)
> {
> #if HAVE_RES_NSEARCH
>+ #ifndef LANL
> struct __res_state statbuf;
>+ #else /* LANL */
>+ #ifndef _AIX
>+ struct __res_state statbuf;
>+ #else /* _AIX */
>+ struct { struct __res_state s; char pad[1024]; } statbuf;
>+ #endif /* AIX */
>+ #endif /* LANL */
> #endif
> struct krb5int_dns_state *ds;
> int len, ret;

The patch for locate_kdc.c is when "disable-thread-support" is set for
configure. Again the #ifndef LANL and #ifdef LANL is a local compiler
directive. This will need to be changed for local setting or -D LANL
set
for configure process.



>*** ./src/lib/krb5/os/locate_kdc.c.orig Thu May 5 08:06:45 2005
>--- ./src/lib/krb5/os/locate_kdc.c Thu May 5 11:34:27 2005
>***************
>*** 267,275 ****
>--- 267,283 ----
> memset(&hint, 0, sizeof(hint));
> hint.ai_family = family;
> hint.ai_socktype = socktype;
>+ #ifndef LANL
> #ifdef AI_NUMERICSERV
> hint.ai_flags = AI_NUMERICSERV;
> #endif
>+ #else /* LANL */
>+ #ifndef _AIX
>+ #ifdef AI_NUMERICSERV
>+ hint.ai_flags = AI_NUMERICSERV;
>+ #endif
>+ #endif /* _AIX */
>+ #endif /* LANL */
> sprintf(portbuf, "%d", ntohs(port));
> sprintf(secportbuf, "%d", ntohs(secport));
> err = getaddrinfo (hostname, portbuf, &hint, &addrs);

------------------------------

Date: Fri, 6 May 2005 11:36:59 -0500
From:
To:
Subject: RE: Kerberos Digest, Vol 29, Issue 7
Message-ID:
<5C066E580F0244458087CC59AC4F74E35EAF6A@srvexcharl0 2.acf.americredit.com
>

Content-Type: text/plain;
charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Precedence: list
Message: 2


Made the patch changes; but the problem still exists.

I went back and reinstalled the 1.3.6 with my krb5.conf file and it
still works flawlessly.

1.4.1 still returns:

"Cannot resolve network address for KDC in requested realm while getting
initial credentials"

Thanks again and if there is anything I can do or try, please let me
know.

Lamar


-----Original Message-----
From: Saxon, Lamar
Sent: Friday, May 06, 2005 11:04 AM
To: 'kerberos@mit.edu'
Subject: RE: Kerberos Digest, Vol 29, Issue 7

Made the changes and compiling now on AIX 5.2. Will let you know the
results shortly.

Thanks for all the help. Really appreciate it.

Lamar

-----Original Message-----
From: kerberos-bounces@mit.edu [mailto:kerberos-bounces@mit.edu] On
Behalf Of kerberos-request@mit.edu
Sent: Friday, May 06, 2005 5:19 AM
To: kerberos@mit.edu
Subject: Kerberos Digest, Vol 29, Issue 7

Send Kerberos mailing list submissions to
kerberos@mit.edu

To subscribe or unsubscribe via the World Wide Web, visit
https://mailman.mit.edu/mailman/listinfo/kerberos
or, via email, send a message with subject or body 'help' to
kerberos-request@mit.edu

You can reach the person managing the list at
kerberos-owner@mit.edu

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Kerberos digest..."


Today's Topics:

3. AIX 5.2 and Kerberos 1.4.1 Patches (Milton Turley)

Date: Thu, 05 May 2005 15:08:15 -0600
From: Milton Turley
To: kerberos@mit.edu
Subject: AIX 5.2 and Kerberos 1.4.1 Patches
Message-ID: <6.0.1.1.2.20050505144936.02db1c50@cic-mail.lanl.gov>
Content-Type: text/plain; charset="us-ascii"; format=flowed
MIME-Version: 1.0
Precedence: list
Message: 3

Following are 2 patches for kerberos 1.4.1 to build on AIX 5.2. The
patches are for the problem of not being able to resolve the address for

the kdc.
The #ifndef LANL and #ifdef LANL are locale compiler directives and will

need to be changed or specifiy -D LANL in configure process.

The patch for dsnglue.c is if "thread-support" is enabled. The patch
adds
a 1024 byte buffer after the _res_state structure. IBM AIX has a
problem
where 735+- bytes are overlaid when res_ninit is called. The 1024 bytes

pads the storage to stop res_ninit from overlaying critical storage.
Ken
Raeburn had tried a similar patch with 72 bytes.

>*** ./src/lib/krb5/os/dnsglue.c.orig Fri Jan 14 17:10:53 2005
>--- ./src/lib/krb5/os/dnsglue.c Thu May 5 11:39:52 2005
>***************
>*** 62,68 ****
>--- 62,76 ----
> char *host, int nclass, int ntype)
> {
> #if HAVE_RES_NSEARCH
>+ #ifndef LANL
> struct __res_state statbuf;
>+ #else /* LANL */
>+ #ifndef _AIX
>+ struct __res_state statbuf;
>+ #else /* _AIX */
>+ struct { struct __res_state s; char pad[1024]; } statbuf;
>+ #endif /* AIX */
>+ #endif /* LANL */
> #endif
> struct krb5int_dns_state *ds;
> int len, ret;

The patch for locate_kdc.c is when "disable-thread-support" is set for
configure. Again the #ifndef LANL and #ifdef LANL is a local compiler
directive. This will need to be changed for local setting or -D LANL
set
for configure process.



>*** ./src/lib/krb5/os/locate_kdc.c.orig Thu May 5 08:06:45 2005
>--- ./src/lib/krb5/os/locate_kdc.c Thu May 5 11:34:27 2005
>***************
>*** 267,275 ****
>--- 267,283 ----
> memset(&hint, 0, sizeof(hint));
> hint.ai_family = family;
> hint.ai_socktype = socktype;
>+ #ifndef LANL
> #ifdef AI_NUMERICSERV
> hint.ai_flags = AI_NUMERICSERV;
> #endif
>+ #else /* LANL */
>+ #ifndef _AIX
>+ #ifdef AI_NUMERICSERV
>+ hint.ai_flags = AI_NUMERICSERV;
>+ #endif
>+ #endif /* _AIX */
>+ #endif /* LANL */
> sprintf(portbuf, "%d", ntohs(port));
> sprintf(secportbuf, "%d", ntohs(secport));
> err = getaddrinfo (hostname, portbuf, &hint, &addrs);


MarkFrom raeburn@MIT.EDU Fri May 6 17:12:54 2005
Received: from biscayne-one-station.mit.edu
(BISCAYNE-ONE-STATION.MIT.EDU
[18.7.7.80])
by pch.mit.edu (8.12.8p2/8.12.8) with ESMTP id j46LCseY028522
for ; Fri, 6 May 2005 17:12:54 -0400
Received: from outgoing.mit.edu (OUTGOING-AUTH.MIT.EDU [18.7.22.103])
j46LCqSr022111; Fri, 6 May 2005 17:12:52 -0400 (EDT)
Received: from [18.18.1.76] (KEN-WIRELESS.MIT.EDU [18.18.1.76])
(authenticated bits=0)
(User authenticated as raeburn@ATHENA.MIT.EDU)
by outgoing.mit.edu (8.12.4/8.12.4) with ESMTP id j46LCOwT000698
(version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NOT);
Fri, 6 May 2005 17:12:46 -0400 (EDT)
In-Reply-To: <6.0.1.1.2.20050505144936.02db1c50@cic-mail.lanl.gov>
References: <6.0.1.1.2.20050505144936.02db1c50@cic-mail.lanl.gov>
Mime-Version: 1.0 (Apple Message framework v622)
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <29ff2e02d855061ab52cd848fa1983ac@mit.edu>
Content-Transfer-Encoding: 7bit
From: Ken Raeburn
Date: Fri, 6 May 2005 17:12:23 -0400
To: Milton Turley
X-Mailer: Apple Mail (2.622)
X-Spam-Score: -4.9
X-Spam-Flag: NO
X-Scanned-By: MIMEDefang 2.42
cc: kerberos@mit.edu
Subject: Re: AIX 5.2 and Kerberos 1.4.1 Patches
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1
Precedence: list
List-Id: The Kerberos Authentication System Mailing List

List-Unsubscribe: ,

List-Archive:
List-Post:
List-Help:
List-Subscribe: ,


On May 5, 2005, at 17:08, Milton Turley wrote:
> Following are 2 patches for kerberos 1.4.1 to build on AIX 5.2. The
> patches are for the problem of not being able to resolve the address
> for the kdc.


Except, apparently, not for Lamar Saxon...

> The patch for dsnglue.c is if "thread-support" is enabled. The patch
> adds a 1024 byte buffer after the _res_state structure. IBM AIX has
> a problem where 735+- bytes are overlaid when res_ninit is called.
> The 1024 bytes pads the storage to stop res_ninit from overlaying
> critical storage. Ken Raeburn had tried a similar patch with 72
> bytes.


Actually, I suggested the patch, but can't try it out, Lamar did that.

It would be nice if someone at IBM could check into this for us and let
us know why the __res_state struct we allocate isn't enough, when the
docs we've found all seem to suggest that it should be.

Um, how does this relate to thread support?

> The patch for locate_kdc.c is when "disable-thread-support" is set for


> configure. Again the #ifndef LANL and #ifdef LANL is a local compiler


> directive. This will need to be changed for local setting or -D LANL
> set for configure process.


>> + #ifndef _AIX
>> + #ifdef AI_NUMERICSERV
>> + hint.ai_flags = AI_NUMERICSERV;
>> + #endif
>> + #endif /* _AIX */


So, are you saying that AI_NUMERICSERV doesn't work for numeric service
strings on AIX 5.2? (And does this relate to thread support?)

Ken


Privileged and Confidential. This e-mail, and any attachments there to, is intended only for use by the addressee(s) named herein and may contain privileged or confidential information. If you have received this e-mail in error, please notify me immediately by a return e-mail and delete this e-mail. You are hereby notified that any dissemination, distribution or copying of this e-mail and/or any attachments thereto, is strictly prohibited.

________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos