[Bug 252393] www/nginx: spnego-http-auth broken by r552734

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=252393

            Bug ID: 252393
           Summary: www/nginx: spnego-http-auth broken by r552734
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: joneum at FreeBSD.org
          Reporter: topical at gmx.net
          Assignee: joneum at FreeBSD.org
             Flags: maintainer-feedback?(joneum at FreeBSD.org)

HTTP_AUTH_KRB5 requires either GSSAPI_HEIMDAL or GSSAPI_MIT, i.e. non-base
Kerberos.

In both cases, the spnego-http-auth module cannot be loaded. "service nginx
start" yields:

nginx: [emerg] dlopen()
"/usr/local/libexec/nginx/ngx_http_auth_spnego_module.so" failed
(/usr/local/libexec/nginx/ngx_http_auth_spnego_module.so: Undefined symbol
"__gss_krb5_mechanism_oid_desc") in /usr/local/etc/nginx/nginx.conf:16

Before r552734, you could choose GSSAPI_BASE instead, which worked perfectly.

I assume that the nginx module depends on wrong kerberos library.

Any idea how to fix that? Using base Kerberos again would probably be best, but
according to r546696 this isn't an option anymore.

-- 
You are receiving this mail because:
You are the assignee for the bug.