Apache 2.2, mod_auth_kerb

[Benjamin Lee]

On 06/03/2010 02:16 AM, John wrote:
> On 2010-06-03 07:45, Benjamin Lee wrote:
>> On 05/20/2010 06:02 AM, John wrote:
>>   
>>> Hi list.
>>>
>>> I'm having problems getting mod_auth_kerb to play nice on one of my
>>> servers.
>>> I have the exact same setup on other machines and it works perfectly,
>>> only difference is this ones running CURRENT while they track RELEASE.
>>>
>>> Some info:
>>>
>>> # pkg_info|grep apache&&  pkg_info|grep kerb
>>> apache-2.2.15_7     Version 2.2.x of Apache web server with prefork MPM.
>>> mod_auth_kerb-5.4   An Apache module for authenticating users with
>>> Kerberos v5
>>>
>>> # uname -a
>>> FreeBSD host.example.com 9.0-CURRENT FreeBSD 9.0-CURRENT #5: Tue May 11
>>> 20:04:45 UTC 2010     host.example.com:/usr/obj/usr/src/sys/HOST  i386
>>>
>>>
>>> Everything compiles and installs nicely, but when I try to do a
>>> 'apachectl start' I get this:
>>>
>>> httpd: Syntax error on line 4 of /usr/local/etc/apache22/httpd.conf:
>>> Cannot load /usr/local/libexec/apache22/mod_auth_kerb.so into server:
>>> /usr/local/libexec/apache22/mod_auth_kerb.so: Undefined symbol
>>> "gsskrb5_register_acceptor_identity"
>>>
>>> Is this due to running current?
>>> If it is I will drop the issue right now, I just want to know for sure
>>> before I spend hours trying to solve it.
>>>      
>> Hi John,
>>
>> What is the output of 'ldd /usr/local/libexec/apache22/mod_auth_kerb.so'?
>>
>>    
> 
> /usr/local/libexec/apache22/mod_auth_kerb.so:
>         libgssapi.so.10 => /usr/lib/libgssapi.so.10 (0x281b8000)
>         libheimntlm.so.10 => /usr/lib/libheimntlm.so.10 (0x281c1000)
>         libkrb5.so.10 => /usr/lib/libkrb5.so.10 (0x281c6000)
>         libhx509.so.10 => /usr/lib/libhx509.so.10 (0x28224000)
>         libcom_err.so.5 => /usr/lib/libcom_err.so.5 (0x2825a000)
>         libcrypto.so.6 => /lib/libcrypto.so.6 (0x2825c000)
>         libasn1.so.10 => /usr/lib/libasn1.so.10 (0x28800000)
>         libroken.so.10 => /usr/lib/libroken.so.10 (0x283c1000)
>         libcrypt.so.5 => /lib/libcrypt.so.5 (0x283d1000)
>         libc.so.7 => /lib/libc.so.7 (0x28091000)

Hi John,

It looks like libgssapi (and potentially other parts of heimdal) have
been broken in head/ since the heimdal-1.1 merge.  Thus, it's now also
broken in stable/8/ and releng/8.0/.

I've filed a PR:

http://www.freebsd.org/cgi/query-pr.cgi?pr=147454


-- 
Benjamin Lee
http://www.b1c1l1.com/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 900 bytes
Desc: OpenPGP digital signature
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20100604/3208b067/signature-0001.pgp