[Bug 197482] www/mod_auth_kerb2: /usr/local/libexec/apache22/mod_auth_kerb.so: Undefined symbol "gsskrb5_register_acceptor_identity"

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Mon Mar 16 23:21:45 UTC 2015


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=197482

Gushi <freebsdbugs at gushi.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |freebsdbugs at gushi.org

--- Comment #5 from Gushi <freebsdbugs at gushi.org> ---
Okay, so I've found the issue here, by looking back at old mailing list posts.

FreeBSD uses a somewhat modified heimdal kerberos in base.

Kerberos comes with a tool that tells compilers how to build kerberos-using
libraries and programs.  When FreeBSD modifies kerberos, they don't update the
tool correctly.

Ergo, the very simple one-line patch to this utility mentioned here in 2011,
fixes it:

https://lists.freebsd.org/pipermail/freebsd-apache/2011-April/002207.html

So, on the solution -- It doesn't look like this was fixed in 8.x, at least
according to the dates on:

http://svnweb.freebsd.org/base/stable/8/kerberos5/

Further, on my 8.x machine, the official package for this port is also broken
in the exact same way -- this doesn't get caught because it's a runtime
failure, not a build-time one.

Whomever maintains this port should probably add ifdefines to get around this,
but the port *really should* be able to trust krb5-config.

Your best bet is to manually patch that one file, and rebuild.  This won't fix
the OSes, but at least it'll unstick you.

-Dan Mahoney

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.


More information about the freebsd-apache mailing list