Apache 2.2, mod_auth_kerb
John
ilcsfe at gmail.com
Wed Jun 2 09:22:16 UTC 2010
On 2010-05-20 23:34, Tim Judd wrote:
> On 5/20/10, John<ilcsfe at gmail.com> wrote:
>> Hi list.
>>
>> I'm having problems getting mod_auth_kerb to play nice on one of my servers.
>> I have the exact same setup on other machines and it works perfectly,
>> only difference is this ones running CURRENT while they track RELEASE.
>>
>> Some info:
>>
>> # pkg_info|grep apache&& pkg_info|grep kerb
>> apache-2.2.15_7 Version 2.2.x of Apache web server with prefork MPM.
>> mod_auth_kerb-5.4 An Apache module for authenticating users with
>> Kerberos v5
>>
>> # uname -a
>> FreeBSD host.example.com 9.0-CURRENT FreeBSD 9.0-CURRENT #5: Tue May 11
>> 20:04:45 UTC 2010 host.example.com:/usr/obj/usr/src/sys/HOST i386
>>
>>
>> Everything compiles and installs nicely, but when I try to do a
>> 'apachectl start' I get this:
>>
>> httpd: Syntax error on line 4 of /usr/local/etc/apache22/httpd.conf:
>> Cannot load /usr/local/libexec/apache22/mod_auth_kerb.so into server:
>> /usr/local/libexec/apache22/mod_auth_kerb.so: Undefined symbol
>> "gsskrb5_register_acceptor_identity"
>>
>> Is this due to running current?
>> If it is I will drop the issue right now, I just want to know for sure
>> before I spend hours trying to solve it.
>>
>
>
> It begins to look like GSSAPI is not in there. GSSAPI is part of
> world. You may need to rebuild kerberos with GSSAPI support. Are you
> using the builtin MIT or the add-on heimdal kerberos?
I'm using the builtin. How do I rebuild kerberos with GSSAPI support, I
though that was builtin by default in FreeBSD since 5.1 somewhere?
klist, kinit and kdestroy all works fine and I can authenticate against
an Active Directory server, but I just cant get Apache to load the
mod_auth_kerb module.
I just did a clean install of a FreeBSD 8.1-PRERELEASE, and I have
exactly the same error there so it's not related to running current.
What am I doing wrong?
--
John
More information about the freebsd-questions
mailing list