Arch Linux User Repository

the last release of pam-ssh-agent was 4 years ago. How ever there is a patch for using ecdsa keys, that prevents it from SegFaulting.

this patch pulls the ecdsa patch and applies it.

diff --git a/PKGBUILD b/PKGBUILD
index 3b285b7..06ea2e9 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -4,7 +4,7 @@
 # Contributor: Chris <alostengineer at narmos dot org>
 pkgname=pam_ssh_agent_auth
 pkgver=0.10.4
-pkgrel=4
+pkgrel=5
 pkgdesc="PAM module which permits authentication via the keyring in a forwarded ssh-agent."
 arch=('i686' 'x86_64' 'armv6h' 'armv7h' 'aarch64')
 url="https://github.com/jbeverly/pam_ssh_agent_auth"
@@ -20,6 +20,10 @@ prepare() {
   cd "$srcdir/$pkgname/ed25519-donna"
   git submodule init
   git submodule update
+  cd "$srcdir"
+  curl -o ecdsa.patch https://github.com/jbeverly/pam_ssh_agent_auth/commit/1b0d9bcc5f5cd78b0bb1357d6a11da5d616ad26f.diff
+  cd "$pkgname"
+  patch -Np1 -i ../ecdsa.patch
 }

 build() {

The package has been updated to build with GCC 13 until the upstream fixes it to work with the latest GCC. It builds in a clean chroot.

I enjoyed a similar failure as @naskya. Here is the relevant portion of config.log:

configure:9081: checking compiler and flags for sanity
configure:9095: gcc -o conftest -march=x86-64 -mtune=generic -O2 -pipe -fno-plt -fexceptions         -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security         -fstack-clash-protection -fcf-protection -fPIC -Wall -Wpointer-arith -Wuninitialized -fstack-protector-all  -Wl,-O1,--sort-common,--as-needed,-z,relro,-z,now -fstack-protector-all conftest.c  >&5
conftest.c: In function 'main':
conftest.c:142:12: error: implicit declaration of function 'exit' [-Wimplicit-function-declaration]
  142 | int main(){exit(0);}
      |            ^~~~
conftest.c:142:1: note: include '<stdlib.h>' or provide a declaration of 'exit'
  141 | #include <stdio.h>
  +++ |+#include <stdlib.h>
  142 | int main(){exit(0);}
conftest.c:142:12: warning: incompatible implicit declaration of built-in function 'exit' [-Wbuiltin-declaration-mismatch]
  142 | int main(){exit(0);}
      |            ^~~~
conftest.c:142:12: note: include '<stdlib.h>' or provide a declaration of 'exit'
configure:9095: $? = 1

This may be due to changes between GCC 13 and GCC 14. See: https://gcc.gnu.org/gcc-14/porting_to.html#warnings-as-errors

The is a currently an issue filed upstream here

I’m not sure about the cause, but build fails on fresh Arch environment as of now and I had to use the Arch Linux Archive repo (https://archive.archlinux.org/repos/2024/01/01/$repo/os/$arch for core and extra) to work around the problem. Once installation is done, you can restore your original pacman.conf and pacman -Syu to perform a full upgrade (pam_ssh_agent_auth still works after upgrading)

The build output says

checking compiler and flags for sanity... no
configure: error: *** compiler cannot create working executables, check config.log ***

and pam_ssh_agent_auth/src/config.log reports that some headers such as login_cap.h and sys/ptms.h are missing.

Sorry for the delay in response. The perl package is required by the autoconf, automake, groff, and texinfo packages, all of which are part of base-devel group. Therefore, it does not need to be added to makedepends. I've tested that this package builds via the extra-x86_64-build script from devtools, as well as via https://wiki.archlinux.org/title/DeveloperWiki:Building_in_a_clean_chroot#Classic_way .

Openssl 1.1 doesn't have perl anymore as dependency, so this package requires makedepends editing or it fails to build in a clean chroot.

Moreover, using transitive dependencies is explicitly against the package guidelines exactly for this reason, the upstream dependency got updated and this PKGBUILD broke.

The "pod2man" command is provided by the "perl" package, which is a dependency of "openssl", and therefore of "base". It does not need to be in the list. It's at "/usr/bin/core_perl/pod2man" and is in the path of a login shell by default.

Is your problem related to not running in a login shell, as in this Reddit post?: https://www.reddit.com/r/archlinux/comments/5tmo7b/anyone_else_having_pod2man_issues/ddnlcde?context=3

pod2man --section=8 --release=v0.10.3 --name=pam_ssh_agent_auth --official --center "PAM" pam_ssh_agent_auth.pod > pam_ssh_agent_auth.8 (cd openbsd-compat && make) /bin/sh: pod2man: command not found make: [Makefile:106: pam_ssh_agent_auth.8] Error 127 make: Waiting for unfinished jobs....

Looks like pod2man is a new dependency for pam_ssh_agent_auth. Can you please add it to the list?

@Magotchi It's a different but similar issues, for some reason /etc/profile.d/perlbin.sh is gone on both of my x86 boxes.