1This is a set of patches and files to get a DFS ticket from a k5 ticket.
2This code comes from Doug Engert, Argonne Nat. Lab (See dce/README.original
3for more info)
4
5The files in dce are;
6testpag: for testing if this is at all possible.
7k5dfspag: included in libkrb5
8k5dcecon: Creates (or searches for) the actual DFSPAG ticketfile.
9dpagaix: An AIX syscall stub.
10README.original: Original README file from Doug Engert
11
12
13Certain applications (rshd/telnetd) have been patched to call the
14functions in k5dfspag when the situation is right. They are ifdef
15with DCE. The patches are also originally from Doug but they
16where against MIT krb5 code and have been merged into heimdal by me.
17I will try to fix ftpd soon...
18
19There is also an ifdefs for DCE && AIX that can be used to make AIX
20use DCE for getting group/passwd entries. This is needed if one is running
21with a bare bones passwd/group file and AUTHSTATE set to DCE (This will be
22more or less clear to people doing this...) I have forced this on for now.
23
24k5dfspag.c is in lib/krb5
25k5dfspag.c is dependent on DCE only.
26It is also POSIX systems only. There are defines for the location of
27k5dcecon and dpagaix that needs a correct configure setting.
28
29k5dcecon needs no special things for the compile except whatever is needed
30on the target system to compile dce programs.
31(On aix the dce compile flags are: -D_THREAD_SAFE -D_AIX32_THREADS=1 -D_AIX41 -D_AES_SOURCE or one can use xlc_r4 if it is version 3.6.4 or later)
32
33k5dcecon wants the following libs (on aix 4.3):
34-ldce (and setenv from somewhere)
35
36dpagaix is only needed on AIX (see k5dfspag.c).
37dpagaix needs dfspag.exp and is linked with
38ld -edpagaix -o dpagaix dpagaix.o dfspag.exp
39
40
41Hope to get this into heimdal soon :-) although I know that you will have to
42change some things to get it cleanly into configure. Since I don't know the
43structure of the code (heimdal), nor enough of configure, good enough I
44just won't try it myself.
45
46One more thing, to get this to work one has to put fcache_version = x in
47krb5.conf where x = whatever the DCE implementation understands, (usually
481 or 2).
49Thanks for adding that...
50
51
52Åke Sandgren (ake@hpc2n.umu.se)
53HPC2N
54Umeå University
55Sweden
56
57PS
58I have now added patches for configure.in and some Makefile.am's to get this
59all cleanly (I hope) into heimdal.
60