Kerberos Perl API's

darrenj74 has asked for the wisdom of the Perl Monks concerning the following question:

I'm looking for a package to help me slot username/password information into a Kerberos server.

I've take a stab at using Authen::Krb5::Admin package and though it will install without complaints, its 'make test' fails most of its tests (on both a sparc box using perl 5.6.0 and a RH linux box with perl 5.8.0 installed). As the addprinc and changepassword methods are amongst the functions that failed in the make test, its basically useless for what I am doing.

Taking a different run at the problem I attempted to get the GSSAPI.pm installed but ran into issues with not having gssapi/gssapi_generic.h on my system (during the make for the perl module gcc (version 3.2.2) compainted about not finding this library). A Google for gssapi turns up lots of descriptions of the problem and discussions but no directions on where to obtain this C library.

Anyone run into similar issues or can offer some advice?

Darren....

Comment on Kerberos Perl API's

Replies are listed 'Best First'.
Re: Kerberos Perl API's by zengargoyle (Deacon) on Jul 13, 2003 at 02:16 UTC
GSSAPI is something your Kerberos library should support. at least MIT's does. $ ls /usr/lsd/kerberos/5-1.2.7/lib/libgss* /usr/lsd/kerberos/5-1.2.7/lib/libgssapi_krb5.a /usr/lsd/kerberos/5-1.2.7/lib/libgssapi_krb5.so /usr/lsd/kerberos/5-1.2.7/lib/libgssapi_krb5.so.2 /usr/lsd/kerberos/5-1.2.7/lib/libgssapi_krb5.so.2.2 /usr/lsd/kerberos/5-1.2.7/lib/libgssrpc.a /usr/lsd/kerberos/5-1.2.7/lib/libgssrpc.so /usr/lsd/kerberos/5-1.2.7/lib/libgssrpc.so.3 /usr/lsd/kerberos/5-1.2.7/lib/libgssrpc.so.3.0 $ ls /usr/lsd/kerberos/5-1.2.7/include/gssapi gssapi.h gssapi_generic.h gssapi_krb5.h [download] after that i'm not sure about modules for administration. if all else fails you can look at C source for kpasswd and wrap up the needed funcionality with the help of Inline::C	[reply] [d/l]

Replies are listed 'Best First'.

Re: Kerberos Perl API's
by zengargoyle (Deacon) on Jul 13, 2003 at 02:16 UTC

GSSAPI is something your Kerberos library should support. at least MIT's does.

$ ls /usr/lsd/kerberos/5-1.2.7/lib/libgss*
/usr/lsd/kerberos/5-1.2.7/lib/libgssapi_krb5.a
/usr/lsd/kerberos/5-1.2.7/lib/libgssapi_krb5.so
/usr/lsd/kerberos/5-1.2.7/lib/libgssapi_krb5.so.2
/usr/lsd/kerberos/5-1.2.7/lib/libgssapi_krb5.so.2.2
/usr/lsd/kerberos/5-1.2.7/lib/libgssrpc.a
/usr/lsd/kerberos/5-1.2.7/lib/libgssrpc.so
/usr/lsd/kerberos/5-1.2.7/lib/libgssrpc.so.3
/usr/lsd/kerberos/5-1.2.7/lib/libgssrpc.so.3.0

$ ls /usr/lsd/kerberos/5-1.2.7/include/gssapi
gssapi.h                gssapi_generic.h        gssapi_krb5.h
[download]

after that i'm not sure about modules for administration. if all else fails you can look at C source for kpasswd and wrap up the needed funcionality with the help of Inline::C

[reply]
[d/l]