Apache 2.2, mod_auth_kerb

John ilcsfe at gmail.com
Wed Jun 2 09:22:16 UTC 2010

On 2010-05-20 23:34, Tim Judd wrote:
> On 5/20/10, John<ilcsfe at gmail.com>  wrote:
>> Hi list.
>> I'm having problems getting mod_auth_kerb to play nice on one of my servers.
>> I have the exact same setup on other machines and it works perfectly,
>> only difference is this ones running CURRENT while they track RELEASE.
>> Some info:
>> # pkg_info|grep apache&&  pkg_info|grep kerb
>> apache-2.2.15_7     Version 2.2.x of Apache web server with prefork MPM.
>> mod_auth_kerb-5.4   An Apache module for authenticating users with
>> Kerberos v5
>> # uname -a
>> FreeBSD host.example.com 9.0-CURRENT FreeBSD 9.0-CURRENT #5: Tue May 11
>> 20:04:45 UTC 2010     host.example.com:/usr/obj/usr/src/sys/HOST  i386
>> Everything compiles and installs nicely, but when I try to do a
>> 'apachectl start' I get this:
>> httpd: Syntax error on line 4 of /usr/local/etc/apache22/httpd.conf:
>> Cannot load /usr/local/libexec/apache22/mod_auth_kerb.so into server:
>> /usr/local/libexec/apache22/mod_auth_kerb.so: Undefined symbol
>> "gsskrb5_register_acceptor_identity"
>> Is this due to running current?
>> If it is I will drop the issue right now, I just want to know for sure
>> before I spend hours trying to solve it.
> It begins to look like GSSAPI is not in there.  GSSAPI is part of
> world.  You may need to rebuild kerberos with GSSAPI support.  Are you
> using the builtin MIT or the add-on heimdal kerberos?

I'm using the builtin. How do I rebuild kerberos with GSSAPI support, I 
though that was builtin by default in FreeBSD since 5.1 somewhere?

klist, kinit and kdestroy all works fine and I can authenticate against 
an Active Directory server, but I just cant get Apache to load the 
mod_auth_kerb module.

I just did a clean install of a FreeBSD 8.1-PRERELEASE, and I have 
exactly the same error there so it's not related to running current.
What am I doing wrong?


More information about the freebsd-questions mailing list