<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"><HTML DIR=ltr><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"></HEAD><BODY><DIV><FONT face='Arial' color=#000000 size=2></FONT> </DIV>
<DIV>
<DIV><FONT face=Arial size=2>
<DIV><FONT face=Arial size=2>Hello,</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I am a newbie to stunnel and tcpwrappers, so please
bear with me:</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>I am trying to compile tcpwrapper support into
stunnel v4.04 on Tru64 UNIX v5.1B (apparently v4.14 does not compile on 5.1A or
higher, per <A
href="/exchweb/bin/redir.asp?URL=http://stunnel.mirt.net/pipermail/stunnel-users/2006-January/000935.html"
target=_blank>http://stunnel.mirt.net/pipermail/stunnel-users/2006-January/000935.html</A>).
</FONT></DIV>
<DIV><FONT face=Arial size=2>I am having what appears to be problems getting
tcpwrapper support to compile with 4.04.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I have consulted the following resources, but I am
still having problems:</FONT></DIV>
<DIV><FONT face=Arial
size=2>-------------------------------------------------------------------------------------------------------</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>1. </FONT><FONT face=Arial size=2><A
href="/exchweb/bin/redir.asp?URL=http://www.stunnel.org/faq/troubleshooting.html%23ToC9"
target=_blank>http://www.stunnel.org/faq/troubleshooting.html#ToC9</A></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV><FONT face=Arial size=2>
<H3>"<A name=ToC9>configure isn't finding my TCP Wrapper installation</A>"</H3>
<P><B>Solution</B>: You probably have it in a non-standard place, ie somewhere
that gcc can't find it on it's own.
<P>Let's say you had your tcp wrappers installed in <CODE>/opt/tcpd_7.6</CODE>.
To help gcc find your include files and libraries, you'd want to set three
environment variables as follows: <PRE>
CFLAGS="$CFLAGS -I/opt/tcpd_7.6/include"
CPPFLAGS="$CPPFLAGS -I/opt/tcpd_7.6/include"
LDFLAGS="$LDFLAGS -L/opt/tcpd_7.6/lib"
export CFLAGS CPPFLAGS LDFLAGS
</PRE>
<DIV>And then re-run <CODE>configure</CODE>. This is the generic way to have
<CODE>configure</CODE> find specific libraries, and is not specific to Stunnel
itself. </DIV>
<DIV> </DIV>
<DIV>2. <A
href="/exchweb/bin/redir.asp?URL=http://www.stunnel.org/faq/run.html%23ToC5"
target=_blank>http://www.stunnel.org/faq/run.html#ToC5</A></DIV>
<DIV> </DIV>
<DIV>
<H2>"<A name=ToC5>Running stunnel with TCP wrappers</A>"</H2>You do not need to
use the tcpd binary to wrap stunnel (although you could). You can can compile in
support for TCP wrappers when you compile stunnel itself.
<P>The <CODE>configure</CODE> program should be able to determine if the libwrap
library (<CODE>-lwrap</CODE>) and headers are available in standard locations.
</P>
<P>.............</P>
<P>I have openssl 0.9.7h installed on ccpe01 v51b pk#5,
with<BR>tcp-wrappers7.6.<BR></P>
<P>I did the configure, make and make install and things. All
stages<BR>appeared successful, but then I attempted the
./configure<BR>--with-tcp-wrappers and it errored with -lwrap not
found.<BR><BR>checking for SSL directory...
/usr/local/ssl <BR>checking
for "/dev/urandom"...
yes <BR>checking
whether to disable RSA support...
no <BR>checking
whether to enable DH support...
no <BR>checking
for gethostbyname in -lnsl...
no <BR>checking
for socket in -lsocket...
no <BR>checking
for pthread_create in -lpthread...
no <BR>checking
for pthread_create in -lc_r...
no <BR>checking
for openpty in -lutil...
yes <BR>checking
whether to use the libwrap (TCP wrappers) library... yes <BR>checking
for hosts_access in -lwrap... not found <--</P>
<P>..............</P>
<P>So then I tried assigning the 3 environment variables and things got
worse. The include and lib directories are referenced for tcpd 7.6, but
after installing tcp wrappers I do not find include or lib directories for
tcpd. </P>
<P>Q: Should I expect NOT to see the include or lib directories as defined
in #1 above, and, if so, will specifying the absolute path to the tcpwrapper
images (EX: /var/tcp_wrappers/tcp_wrappers_7.6) suffice?</P>
<P>3. I followed these instructions when compiling/configuring tcpd v7.6
(downloaded from <A href="ftp://ftp.porcupine.org/pub/security/index.html"
target=_blank>ftp://ftp.porcupine.org/pub/security/index.html</A>):</P>
<P>............</P>
<P>7.1 - Easy configuration and
installation<BR>-----------------------------------------</P>
<P>The "easy" recipe requires no changes to existing software
or<BR>configuration files. Basically, you move the daemons that you want
to<BR>protect to a different directory and plug the resulting holes
with<BR>copies of the wrapper programs.</P>
<P>If you don't run Ultrix, you won't need the miscd wrapper program.
The<BR>miscd daemon implements among others the SYSTAT service, which
produces<BR>the same output as the WHO command.</P>
<P>Type `make' and follow the instructions. The Makefile comes
with<BR>ready-to-use templates for many common UNIX implementations
(sun,<BR>ultrix, hp-ux, aix, irix,...).</P>
<P>..............</P>
<P> </P>
<P>Thanks in advance for any guidance and/or advice that you can offer.</P>
<P>--John Lanier</P></DIV></FONT></FONT></DIV></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV></BODY></HTML>