Date: Thu, 12 Mar 2009 09:31:41 +0100 (CET) From: Hartmut Brandt <hartmut.brandt@dlr.de> To: Tom McLaughlin <tmclaugh@sdf.lonestar.org> Cc: Kostik Belousov <kostikbel@gmail.com>, kazakov@gmail.com, current@freebsd.org Subject: Re: problem with nss_ldap Message-ID: <20090312092235.F78834@beagle.kn.op.dlr.de> In-Reply-To: <49B69C36.3010307@sdf.lonestar.org> References: <E2F5A6372272F744859F67CB11ABC1110507D4@exbe05.intra.dlr.de> <alpine.BSF.1.10.0901231858510.1173@knopdnsimu13l.kn.op.dlr.de> <49A69B74.1080201@sdf.lonestar.org> <49A97F2E.3030005@sdf.lonestar.org> <20090306213531.G60465@beagle.kn.op.dlr.de> <20090306211650.GD41617@deviant.kiev.zoral.com.ua> <ea4fb05da7fa78720849158fe0fcb840.squirrel@webmail.freeshell.org> <20090306222433.GF41617@deviant.kiev.zoral.com.ua> <FE4696E5-35E2-45BC-893E-F74CCB5A7F05@rabson.org> <20090310114131.GD41617@deviant.kiev.zoral.com.ua> <70D16F57-F7E3-4CDA-BCD5-5D79B566510B@rabson.org> <49B69C36.3010307@sdf.lonestar.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 10 Mar 2009, Tom McLaughlin wrote: TM>Doug Rabson wrote: [snip alot] TM>Okay, attached is a patch to nss_ldap. On -CURRENT I have changed the TM>CONFIGURE_ARG to use "--enable-configurable-krb5-ccname-gssapi" instead TM>of "--enable-configurable-krb5-ccname-env" which fixes Harti's initial TM>problem with apps like cron failing. It will also make nss_ldap link TM>against libgssapi and libgssapi_krb5. I still have one lingering issue TM>though at least things work. TM> TM>[tom@freebsd-8-amd64 tom]$ getent passwd tom TM>dlopen: /usr/lib/libgssapi_spnego.so.10: Undefined symbol TM>"GSS_C_NT_HOSTBASED_SERVICE" TM>tom:x:10001:10001:Tom McLaughlin:/home/tom:/bin/sh Ok. This works so far. I get the same error. But I have the original problem again - cron, sendmail and sshd seem not to use the hostcreds. I still need a link from /var/tmp/hostcreds to /tmp/krb5cc_0 to make sshd to work. The build of nss_ldap seems to find all the necessary files: sasl.h, gssapi.h, gssapi_krb5.h. The thing I cannot understand is: why do normal applications find the hostcreds, but the daemons not? What do they differently? harti
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090312092235.F78834>