[pubcookie-users] Re: Linux infinite redirects

[Rich Graves]

Maurizio Marini <maumar at datalogica.com> asked:

> the system clocks are in sync?

Perfectly. Is being on the same box as the login server good enough? Also a
couple other boxes on the same ntp subnet.

I've heard back privately that "no one" has been able to get a RedHat 7/8
box to work as a pubcookie client; I might have been the first to verify
that a RedHat login server interoperates fine with a Windows cilent.

After spending a couple hours trying to decipher their spaghetti backport
of various security fixes into openssl 0.96b in order to try a compatible
0.96i package, my suspicion is that their openssl build is simply broken.
openssl goes to some lengths to disable LD_LIBRARY_PATH, so it's not as
easy to try a custom compile as I thought, but that's my next step.

The good news is that RedHat integrates openssl into the system. The bad 
news is the same...
-- 
Rich Graves <rcgraves at brandeis.edu>
UNet Systems Administrator