Apache 2.2, mod_auth_kerb

[Tim Judd]

On 6/2/10, John <ilcsfe at gmail.com> wrote:
> On 2010-05-20 23:34, Tim Judd wrote:
>> On 5/20/10, John<ilcsfe at gmail.com>  wrote:
>>> Hi list.
>>>
>>> I'm having problems getting mod_auth_kerb to play nice on one of my
>>> servers.
>>> I have the exact same setup on other machines and it works perfectly,
>>> only difference is this ones running CURRENT while they track RELEASE.
>>>
>>> Some info:
>>>
>>> # pkg_info|grep apache&&  pkg_info|grep kerb
>>> apache-2.2.15_7     Version 2.2.x of Apache web server with prefork MPM.
>>> mod_auth_kerb-5.4   An Apache module for authenticating users with
>>> Kerberos v5
>>>
>>> # uname -a
>>> FreeBSD host.example.com 9.0-CURRENT FreeBSD 9.0-CURRENT #5: Tue May 11
>>> 20:04:45 UTC 2010     host.example.com:/usr/obj/usr/src/sys/HOST  i386
>>>
>>>
>>> Everything compiles and installs nicely, but when I try to do a
>>> 'apachectl start' I get this:
>>>
>>> httpd: Syntax error on line 4 of /usr/local/etc/apache22/httpd.conf:
>>> Cannot load /usr/local/libexec/apache22/mod_auth_kerb.so into server:
>>> /usr/local/libexec/apache22/mod_auth_kerb.so: Undefined symbol
>>> "gsskrb5_register_acceptor_identity"
>>>
>>> Is this due to running current?
>>> If it is I will drop the issue right now, I just want to know for sure
>>> before I spend hours trying to solve it.
>>>
>>
>>
>> It begins to look like GSSAPI is not in there.  GSSAPI is part of
>> world.  You may need to rebuild kerberos with GSSAPI support.  Are you
>> using the builtin MIT or the add-on heimdal kerberos?
>
> I'm using the builtin. How do I rebuild kerberos with GSSAPI support, I
> though that was builtin by default in FreeBSD since 5.1 somewhere?
>
> klist, kinit and kdestroy all works fine and I can authenticate against
> an Active Directory server, but I just cant get Apache to load the
> mod_auth_kerb module.
>
> I just did a clean install of a FreeBSD 8.1-PRERELEASE, and I have
> exactly the same error there so it's not related to running current.
> What am I doing wrong?


I don't know if I'm reading bsd.apache.mk right (included due to the
dependency of apache webserver), but mod_auth_kerb may require apache
1.3, not 2.x

does your 8.1 have apache1.3?  Maybe it has both nd 1.3 is running?

I would bet that a 1.3 module won't work in 2.x

does apache2.x have a kerberos module?  there have been a ton of
additions to apache2.x



Let us know.