[GE users] sge_security errors

Paul Mitchell pmitchel at email.unc.edu
Wed Apr 6 19:09:22 BST 2005


Hello,
 After a long time away from this project, and returning now with a better
understanding of the problem, I'm attempting to follow the instructions
Shannon Davidson wrote me (quite awhile back!^).

This is all about trying to compile the GSS modules in
gridengine/source/security.  After modifying the distinst script, I've got
a security sub-directory in $SGE_ROOT:

/usr/local/sge/security root# ls -l
total 272
-rw-r--r--  1 root  wheel   3012  6 Apr 13:35 Makefile.security
-rwxr-xr-x  1 root  wheel   6819  6 Apr 13:43 aimk
-rw-r--r--  1 root  wheel   6257  6 Apr 13:35 basis_types.h
drwxr-xr-x  3 root  wheel    102  6 Apr 13:43 darwin
-rw-r--r--  1 root  wheel   4143  6 Apr 13:35 delete_cred.c
-rw-r--r--  1 root  wheel   3245  6 Apr 13:35 get_cred.c
-rwxr-xr-x  1 root  wheel   2114  6 Apr 13:35 get_cred.sh
-rw-r--r--  1 root  wheel  14625  6 Apr 13:35 gss_customer.html
-rw-r--r--  1 root  wheel   7474  6 Apr 13:35 k5dce.h
-rw-r--r--  1 root  wheel  14473  6 Apr 13:35 k5dcelogin.c
-rw-r--r--  1 root  wheel   8935  6 Apr 13:35 msg_gss.h
-rw-r--r--  1 root  wheel   7952  6 Apr 13:35 put_cred.c
-rwxr-xr-x  1 root  wheel   2224  6 Apr 13:35 put_cred.sh
-rwxr-xr-x  1 root  wheel   2375  6 Apr 13:35 renew_cred.ksh
-rw-r--r--  1 root  wheel  21486  6 Apr 13:59 sge_gsslib.c
-rw-r--r--  1 root  wheel   2820  6 Apr 13:35 sge_gsslib.h
-rwxr-xr-x  1 root  wheel   2198  6 Apr 13:35 starter_cred.ksh

Tehre was, however, no "darwin" case in the aimk file. I placed a set of
calls which worked in the aimk file  inthe above "source" directory,
however, when I attempt to compile I get:

 ./aimk -gss
making in darwin/ for darwin
gcc -DKERBEROS -I/usr/local/include/gssapi -I/usr/local/include  -c
../sge_gsslib.c
../sge_gsslib.c:81: error: parse error before "PROTOTYPE"
make: *** [sge_gsslib.o] Error 1

Line 81 seems simple enough:

#ifdef KERBEROS
OM_uint32 kg_get_context PROTOTYPE((OM_uint32 *minor_status,  <--- line 81
                                    krb5_context *context));
#endif

Any ideas on what it's complaining about?

Paul

On Mon, 29 Nov 2004, Shannon V. Davidson wrote:

> >     $ export SGE_ROOT=<a-valid-sge-distribution>
> >     $ cd <your-ge-development-base-dir>/gridengine/source
> >     $ ln -s scripts/distinst myinst
> >     $ myinst -- sec # this installs
> >     the security sources in $SGE_ROOT/security
> >
> >
> > Then you can compile and install them.
> >
> >     $ cd $SGE_ROOT/security
> >     $ aimk -gss
> >     $ aimk install
> >
> >
> > I ran into 1 compile error and had to comment out the following line
> > in delete_cred.c.
> >
> >     #include "sge_stat.h"
>
>
> Regards,
> Shannon
>
>
> Paul Mitchell wrote:
>
> >Hello All,
> >  After working with our local AFS guru, we decided to go the route of
> >kerberos token renewal; so, following the instructions in
> >gridengine/source/security/security.html, we've created the principals for
> >the qmaster, schedd and execution hosts.  I've created a new keytab
> >(/etc/grid.keytab) since we're running the grid executables as user
> >"grid" and not root.
> >
> >Following the instructions in the implementation html:
> >
> >	gridengine/source/security/krb/doc/Implementation.html
> >
> >I performed a gridengine/source/aimk clean
> >
> >then a  gridengine/source/aimk -kerberos
> >
> >However, it blows out with:
> >
> >gcc -O3 -no-cpp-precomp -flat_namespace -Wall -Werror -Wstrict-prototypes
> >-DDARWIN -DDARWIN7 -DGETHOSTBYNAME -DGETHOSTBYADDRENSSL -DKERBEROS
> >-I../security/krb -I/vol2/tools/SW/krb5/darwin/include
> >-I/vol2/tools/SW/krb5/darwin/include/gssapi -I/vol2/darwin/include
> >-DTARGET_32BIT -DQCONF_FLATFILE  -DSPOOLING_dynamic -DENABLE_NGC -DSECURE
> >-I/vol2/tools/SW/openssl-0.9.7d/darDCOMPILE_DC -D__SGE_NO_USERMAPPING__
> >-I../security/sec -I../common -I../libs -I../libs/uti -I../libs/gdi
> >-I../libs/japi -I..-I../libs/cull -I../libs/rmon -I../libs/comm
> >-I../libs/comm/lists -I../libs/sched -I../libs/evc -I../libs/evm
> >-I../libs/mir  -I../daemons/common -I../daemons/qmaster -I../daemons/execd
> >-I../daemons/schedd -I../clients/common -I.  -dynamic -c ../liburity.c
> >cc1: warnings being treated as errors
> >../libs/gdi/sge_security.c: In function `store_sec_cred':
> >../libs/gdi/sge_security.c:966: warning: implicit declaration of function
> >`error_message'
> >../libs/gdi/sge_security.c:966: warning: format argument is not a pointer
> >(arg 6)
> >../libs/gdi/sge_security.c:974: parse error before "FAR"
> >../libs/gdi/sge_security.c: In function `kerb_job':
> >../libs/gdi/sge_security.c:1099: warning: format argument is not a pointer
> >(arg 5)
> >../libs/gdi/sge_security.c:1106: parse error before "FAR"
> >../libs/gdi/sge_security.c: In function `tgt2cc':
> >../libs/gdi/sge_security.c:1157: warning: assignment discards qualifiers
> >from pointer target type
> >../libs/gdi/sge_security.c:1162: warning: format argument is not a pointer
> >(arg 4)
> >../libs/gdi/sge_security.c:1173: parse error before "FAR"
> >make: *** [sge_security.o] Error 1
> >not done
> >
> >which is strange. Looking at sge_scutiy.c, the offending lines are:
> >
> >if ((rc = krb_encrypt_tgt_creds(tgt_creds, &outbuf))) {
> >            ERROR((SGE_EVENT, MSG_SEC_KRBENCRYPTTGT_SSIS,
> >            request->host, request->commproc, request->id,
> >error_message(rc)));
> >         }
> >
> >it seems to be complaining about the error_messages(rc) if I'm reading
> >this right?
> >
> >however, what's truely confusing is that there is no string "FAR" in the
> >file - line 973-974 is:
> >
> > if (outbuf.length)
> >    krb5_xfree(outbuf.data);
> >
> >Has anyone run into this before?
> >
> >Paul (heading back to reread the README.BUILD doument...)
> >
> >==============================================================================
> >	Paul Mitchell
> >	email: pmitchel at email.unc.edu
> >	phone: (919) 962-9778
> >	office: I have an office, room 14, Phillips Hall
> >==============================================================================
> >
> >
> >
> >
> >---------------------------------------------------------------------
> >To unsubscribe, e-mail: users-unsubscribe at gridengine.sunsource.net
> >For additional commands, e-mail: users-help at gridengine.sunsource.net
> >
> >
> >
> >
>
>
> --
> ___________________________________________
>
> Shannon V. Davidson <svdavidson at swbell.net>
> Senior Software Engineer           Raytheon
> 636-479-7465 office        443-383-0331 fax
> ___________________________________________
>
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe at gridengine.sunsource.net
For additional commands, e-mail: users-help at gridengine.sunsource.net




More information about the gridengine-users mailing list