problem with nss_ldap
hartmut.brandt at dlr.de
Mon Mar 16 04:04:39 PDT 2009
On Mon, 16 Mar 2009, Hartmut Brandt wrote:
HB>On Sun, 15 Mar 2009, Tom McLaughlin wrote:
HB>TM>Hartmut Brandt wrote:
HB>TM>> On Tue, 10 Mar 2009, Tom McLaughlin wrote:
HB>TM>> TM>Doug Rabson wrote:
HB>TM>> [snip alot]
HB>TM>> TM>Okay, attached is a patch to nss_ldap. On -CURRENT I have changed the
HB>TM>> TM>CONFIGURE_ARG to use "--enable-configurable-krb5-ccname-gssapi" instead
HB>TM>> TM>of "--enable-configurable-krb5-ccname-env" which fixes Harti's initial
HB>TM>> TM>problem with apps like cron failing. It will also make nss_ldap link
HB>TM>> TM>against libgssapi and libgssapi_krb5. I still have one lingering issue
HB>TM>> TM>though at least things work.
HB>TM>> TM>[tom at freebsd-8-amd64 tom]$ getent passwd tom
HB>TM>> TM>dlopen: /usr/lib/libgssapi_spnego.so.10: Undefined symbol
HB>TM>> TM>tom:x:10001:10001:Tom McLaughlin:/home/tom:/bin/sh
HB>TM>> Ok. This works so far. I get the same error. But I have the original
HB>TM>> again - cron, sendmail and sshd seem not to use the hostcreds. I still need
HB>TM>> link from /var/tmp/hostcreds to /tmp/krb5cc_0 to make sshd to work. The
HB>TM>> of nss_ldap seems to find all the necessary files: sasl.h, gssapi.h,
HB>TM>What's the machine's OSVERSION? I used the OSVERSION on my box when checking
HB>TM>which method to use for setting the credentials cache. I didn't feel like
HB>TM>trying to figure out what the OSVERSION was when Heimdal was updated.
HB>Looks like the Makefile checks for >= 800064. My sys/param.h has 800061.
HB>Unfortunately I'm out of town until at least sunday so I can do more tests
HB>only next week.
To reply to my own mail: changing the check in the Makefile to >= 800061
makes things working. The only remaining thing is the missing symbol in
More information about the freebsd-current