From owner-freebsd-questions@FreeBSD.ORG Fri Jun 4 23:45:34 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1A9471065676 for ; Fri, 4 Jun 2010 23:45:34 +0000 (UTC) (envelope-from ben@b1c1l1.com) Received: from lancer.b1c1l1.com (unknown [IPv6:2607:f358:1a:1a:1000::]) by mx1.freebsd.org (Postfix) with ESMTP id 031BD8FC0C for ; Fri, 4 Jun 2010 23:45:33 +0000 (UTC) Received: from supra.b1c1l1.com (netops-129.sfo1.bitgravity.com [209.131.110.129]) by lancer.b1c1l1.com (Postfix) with ESMTPSA id 912745C29; Fri, 4 Jun 2010 16:45:31 -0700 (PDT) Message-ID: <4C099013.8080606@b1c1l1.com> Date: Fri, 04 Jun 2010 16:45:23 -0700 From: Benjamin Lee User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.9) Gecko/20100531 Thunderbird/3.0.4 MIME-Version: 1.0 To: John References: <4BF532F7.7070003@gmail.com> <4C07418B.90309@b1c1l1.com> <4C0772EA.1060504@gmail.com> In-Reply-To: <4C0772EA.1060504@gmail.com> X-Enigmail-Version: 1.0.1 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig304CB5B84008F20200E399E0" Cc: freebsd-questions@freebsd.org Subject: Re: Apache 2.2, mod_auth_kerb X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Jun 2010 23:45:34 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig304CB5B84008F20200E399E0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 06/03/2010 02:16 AM, John wrote: > On 2010-06-03 07:45, Benjamin Lee wrote: >> On 05/20/2010 06:02 AM, John wrote: >> =20 >>> Hi list. >>> >>> I'm having problems getting mod_auth_kerb to play nice on one of my >>> servers. >>> I have the exact same setup on other machines and it works perfectly,= >>> only difference is this ones running CURRENT while they track RELEASE= =2E >>> >>> Some info: >>> >>> # pkg_info|grep apache&& pkg_info|grep kerb >>> apache-2.2.15_7 Version 2.2.x of Apache web server with prefork M= PM. >>> mod_auth_kerb-5.4 An Apache module for authenticating users with >>> Kerberos v5 >>> >>> # uname -a >>> FreeBSD host.example.com 9.0-CURRENT FreeBSD 9.0-CURRENT #5: Tue May = 11 >>> 20:04:45 UTC 2010 host.example.com:/usr/obj/usr/src/sys/HOST i38= 6 >>> >>> >>> Everything compiles and installs nicely, but when I try to do a >>> 'apachectl start' I get this: >>> >>> httpd: Syntax error on line 4 of /usr/local/etc/apache22/httpd.conf: >>> Cannot load /usr/local/libexec/apache22/mod_auth_kerb.so into server:= >>> /usr/local/libexec/apache22/mod_auth_kerb.so: Undefined symbol >>> "gsskrb5_register_acceptor_identity" >>> >>> Is this due to running current? >>> If it is I will drop the issue right now, I just want to know for sur= e >>> before I spend hours trying to solve it. >>> =20 >> Hi John, >> >> What is the output of 'ldd /usr/local/libexec/apache22/mod_auth_kerb.s= o'? >> >> =20 >=20 > /usr/local/libexec/apache22/mod_auth_kerb.so: > libgssapi.so.10 =3D> /usr/lib/libgssapi.so.10 (0x281b8000) > libheimntlm.so.10 =3D> /usr/lib/libheimntlm.so.10 (0x281c1000) > libkrb5.so.10 =3D> /usr/lib/libkrb5.so.10 (0x281c6000) > libhx509.so.10 =3D> /usr/lib/libhx509.so.10 (0x28224000) > libcom_err.so.5 =3D> /usr/lib/libcom_err.so.5 (0x2825a000) > libcrypto.so.6 =3D> /lib/libcrypto.so.6 (0x2825c000) > libasn1.so.10 =3D> /usr/lib/libasn1.so.10 (0x28800000) > libroken.so.10 =3D> /usr/lib/libroken.so.10 (0x283c1000) > libcrypt.so.5 =3D> /lib/libcrypt.so.5 (0x283d1000) > libc.so.7 =3D> /lib/libc.so.7 (0x28091000) Hi John, It looks like libgssapi (and potentially other parts of heimdal) have been broken in head/ since the heimdal-1.1 merge. Thus, it's now also broken in stable/8/ and releng/8.0/. I've filed a PR: http://www.freebsd.org/cgi/query-pr.cgi?pr=3D147454 --=20 Benjamin Lee http://www.b1c1l1.com/ --------------enig304CB5B84008F20200E399E0 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.15 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQIcBAEBAgAGBQJMCZAZAAoJEHBW16CPoSMCBnoQAM4l7++nvq1XYshhpgKR67+G pp1cma5HusIUbNWNsx54bBLTNZMVQa2iz4pPF0GBFReNkzG4gIbRGyd0kSwzJZfg YqOvj8Z7b1BOP2qCWxla1nGzQQLxqrTODtVOto8+wm4Q3Qy3WfF+ZVvXTyK/RLrH BTNRJtiIJuEHGFLQs51EEpCPROVPmxA0VJT5k1sF93PexB0lnr2hAHuKmR/oXPx7 xoxd6bs90tIkhwjS40knuK3j4/3pJhN2UEjhssewq9n7nUUeWavtZ8WAPgqDTxoB j4a/JKb3sJ0qn35nSEFGtL0Lw5xBgZaBHcaWp2PZEk3MyrrkEtFwsH9C8fGryRLt eQDSZA1lSFreH7nrRdk2pnOxzik5j+yGNmIjWZvxh1Iw+wA+ds0G3mPFGMMA4omB ramtKj5r3aENqzAhJkdQv3fxvtpz0VYjfftWesPZYjRkoaHRe+vp0zd9eiYCThvP GsfN16OUcdGs6pGXZIWzps/UnQ4DBAFT0bljg1RkvLQM5eDyQlO1qxzmNncaAOZ8 uXGHvNLX5bUD8TrIMpEXqoSvliPpuNd+hgNKEysOF989EISb0RtDZS01dLEvRJ0z A3uIf4ZxXIHfWvKkfD0ja7s2bKX9plB9PhLi6o444HY07WaB4GhOcfd9OcuoWYdk SCPsjYDFMjqBPS0oiuGz =a8kC -----END PGP SIGNATURE----- --------------enig304CB5B84008F20200E399E0--