bin/139037: [PATCH] 8.0-RC1 /usr/bin/krb5-config does not include necessary gssapi libraries

[John Marshall]

>Number:         139037
>Category:       bin
>Synopsis:       [PATCH] 8.0-RC1 /usr/bin/krb5-config does not include necessary gssapi libraries
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Sep 21 21:50:01 UTC 2009
>Closed-Date:
>Last-Modified:
>Originator:     John Marshall
>Release:        FreeBSD 8.0-RC1 i386
>Organization:
Riverwillow Pty Ltd
>Environment:
System: FreeBSD rwsrv05.mby.riverwillow.net.au 8.0-RC1 FreeBSD 8.0-RC1 #0: Fri Sep 18 13:35:00 AEST 2009 root at rwsrv05.mby.riverwillow.net.au:/spare/obj/usr/src/sys/RWSRV05 i386


	
>Description:

/usr/bin/krb5-config is a shell script called by application build
routines to discover the list of libraries required to implement
functionality which depends upon the base system kerberos
implementation.

The base system Heimdal build splits the gssapi functionality into
different libraries (e.g. libgssapi, libgssapi_krb5, libgssapi_spnego)
but only lists the first of those via the krb5-config script.
Applications using krb5-config at build time to determine the list of
libraries they need for gssapi functionality will likely fail at runtime
due to missing libraries.  An example is the cyrus-sasl2 port.  This
patch rectifies that problem by adding the missing libraries to the
generated list.

This problem was discussed on freebsd-current@

This patch solves the problem but I'm not sure whether it is the proper
solution or only treating the symptoms of something deeper.  If a better
solution is not immediately apparent, I believe we should commit this
patch prior to release rather than releasing a broken system.

>How-To-Repeat:

See discussion and test results in freebsd-current@
http://lists.freebsd.org/pipermail/freebsd-current/2009-September/011711.html
http://lists.freebsd.org/pipermail/freebsd-current/2009-September/011751.html
http://lists.freebsd.org/pipermail/freebsd-current/2009-September/011767.html


>Fix:

	

--- krb5-config_Makefile.diff begins here ---
--- src/kerberos5/usr.bin/krb5-config/Makefile.orig	2009-08-03 18:13:06.000000000 +1000
+++ src/kerberos5/usr.bin/krb5-config/Makefile	2009-09-21 14:01:50.000000000 +1000
@@ -13,6 +13,7 @@
 	    -e "s, at libdir\@,${LIBDIR},g" \
 	    -e "s, at includedir\@,${INCLUDEDIR},g" \
 	    -e "s, at LIB_crypt\@,-lcrypt,g" \
+	    -e "s,-lgssapi,-lgssapi -lgssapi_krb5 -lgssapi_spnego," \
 	    -e "s, at LIB_dbopen\@,,g" \
 	    -e "s, at LIB_hcrypto_appl\@,-lcrypto,g" \
 	    -e "s, at LIB_pkinit\@,-lhx509,g" \
--- krb5-config_Makefile.diff ends here ---


>Release-Note:
>Audit-Trail:
>Unformatted: