Re: How to enable Krb5 in ROOT on ubuntu 11.10?

From: Antonio Augusto Alves Junior <aalvesju_at_cern.ch>
Date: Fri, 2 Mar 2012 12:09:08 +0100


Hi, please could you indicate to me a good reference o tutorial on how configure the krb5 authentication on proof/xrood servers ? I would like to create a such scheme that just krb5 authenticated users could submit jobs... is it possible?

Thanks
A.A.

Em 01-03-2012 18:28, Gerardo Ganis escreveu:
>
> Hi,
>
> I am looking at this. Note however that for the xrootd krb5 plug-in
> you do not need the ROOT krb5.
>
> G. Ganis
>
>
> On 3/1/12 3:11 PM, Antonio Augusto Alves Junior wrote:
>>
>>
>> Dear Rooters, please I would like to compile ROOT with krb5 enabled
>> in my ubuntu 11.10 box. I installed the relevant libraries but when I
>> run ./configure... krb5 always get disabled.
>>
>> Please, how can I enable the krb5 ?
>>
>> ./configure linuxx8664gcc --enable-roofit --enable-python
>> --with-xrootd=/opt/xrootd/xrootd-3.1.0 --enable-krb5
>>
>> ...
>> Checking for krb5.h ... /usr/include
>> Checking for krb5.h redirect ... /usr/include/krb5/krb5.h
>>
>> Checking for krb5_c_valid_cksumtype in krb5.h ... yes
>> Checking for valid_cksumtype in krb5.h ... no
>> Checking for libk5crypto ... /usr/lib/x86_64-linux-gnu
>> Checking whether we're using MIT Kerberos ... yes
>> Checking for krb5_c_valid_cksumtype in
>> /usr/lib/x86_64-linux-gnu/libk5crypto.so ... no
>> Checking for valid_cksumtype in
>> /usr/lib/x86_64-linux-gnu/libk5crypto.so ... no
>> Either 'krb5_c_valid_cksumtype' or 'valid_cksumtype' are
>> available; disabling krb5
>> Checking for shadow passwords ... yes
>> ...
>>
>> Enabled support for asimage, astiff, builtin_afterimage,
>> builtin_ftgl, builtin_glew, builtin_pcre, builtin_lzma, cintex,
>> exceptions, explicitlink, fftw3, gviz, genvector, ldap, mathmore,
>> memstat, mysql, opengl, python, reflex, roofit, shadowpw, shared,
>> ssl, tmva, x11, xft, xml, xrootd.
>>
>> To build ROOT type:
>>
>> make
>>
>>
>>
>> Thanks
>> A.A.
>>
>>
>>
>
>
> --
> +--------------------------------------------------------------------------+
> Gerardo GANIS CERN, PH Dept, SFT group, CH 1211 Geneve 23
> room: 32-RC-017, tel: +41 22 7676439
> email:gerardo.ganis_at_cern.ch, fax: +41 22 7669133
> +--------------------------------------------------------------------------+
Received on Fri Mar 02 2012 - 12:09:15 CET

This archive was generated by hypermail 2.2.0 : Fri Mar 02 2012 - 17:50:01 CET