Sophie

Sophie

distrib > Mandriva > current > i586 > media > main-updates > by-pkgid > 3a8c16053ba0edc02dcb5ede99d10d9c > files > 5

proftpd-mod_gss-1.3.3g-0.1mdv2010.2.i586.rpm


cd mod_gss-x.y.z

./configure			Uses MIT Kerberos as default
or
./configure --enable-mit        Enables MIT Kerberos
or
./configure --enable-heimdal    Enables Heimdal Kerberos
or
./configure --enable-seam	Enables Sun Solaris SEAM Kerberos (tested on 8/9 and 10)
./configure --enable-seam-64	Enables Sun 64bit Solaris SEAM Kerberos (tested on 8/9 and 10)
or
./configure --enable-nas	Enables IBM AIX NAS Kerberos (not fully tested on 5.2, ok on 5.1)

cd proftpd 

copy mod_gss.c to the contrib directory 
copy mod_gss.h to the include directory 

and call 

./configure --with-modules=mod_gss --with-includes=/usr/local/include --with-libraries=/usr/local/lib
make

proftpd configure options
#MM
GSSEngine on
#GSSRequired both
GSSkeytab /usr/local/etc/proftpd.keytab
GSSLog /var/log/gssftp.log
#MM

or for proftpd > 1.3.x  

./configure --enable-dso  --with-shared=mod_gss --with-includes=/usr/local/include --with-libraries=/usr/local/lib
make
proftpd configure options
#MM
LoadModule mod_gss.c
<IfModule mod_gss.c>
GSSEngine on
#GSSRequired both
GSSkeytab /usr/local/etc/proftpd.keytab
GSSLog /var/log/gssftp.log
</IfModule>
#MM


Make sure the Command Buffer Size is big enough. It has to be at least the same size as the KRB5 ccache file.

CommandBufferSize       1023

Use --enable-buffer-size to increase the BufferSize above 1023.

Because of the internal handling of the user authentication in proftpd 1.2.8 the user will be asked for a dummy 
password despite of a successful Kerberos authentication. This will probably be changed in proftpd 1.2.9.

When running proftpd as non root make sure that the user proftpd is running under has access to the keytab file.