Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 3 Jun 2010 23:25:38 GMT
From:      Benjamin Lee <ben@b1c1l1.com>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   misc/147454: libgssapi (heimdal) broken in head/, stable/8/, and releng/8.0/
Message-ID:  <201006032325.o53NPcct015398@www.freebsd.org>
Resent-Message-ID: <201006032330.o53NU3lw072970@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         147454
>Category:       misc
>Synopsis:       libgssapi (heimdal) broken in head/, stable/8/, and releng/8.0/
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Jun 03 23:30:03 UTC 2010
>Closed-Date:
>Last-Modified:
>Originator:     Benjamin Lee
>Release:        8.0-RELEASE
>Organization:
>Environment:
FreeBSD eclipse.b1c1l1.com 8.0-RELEASE-p2 FreeBSD 8.0-RELEASE-p2 #0: Tue Jan  5 16:02:27 UTC 2010     root@i386-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC  i386
>Description:
The heimdal-1.1 merge in head/ broke libgssapi.

For example, the entire lib/gssapi/mech directory is missing, which defines many libgssapi functions:

blee@eclipse ~/src/heimdal-1.1/lib/gssapi/mech $ ls
context.c                         gss_krb5.c
context.h                         gss_mech_switch.c
cred.h                            gss_names.c
gss_accept_sec_context.c          gss_oid_equal.c
gss_acquire_cred.c                gss_oid_to_str.c
gss_add_cred.c                    gss_process_context_token.c
gss_add_oid_set_member.c          gss_pseudo_random.c
gss_buffer_set.c                  gss_release_buffer.c
gss_canonicalize_name.c           gss_release_cred.c
gss_compare_name.c                gss_release_name.c
gss_context_time.c                gss_release_oid.c
gss_create_empty_oid_set.c        gss_release_oid_set.c
gss_decapsulate_token.c           gss_seal.c
gss_delete_sec_context.c          gss_set_cred_option.c
gss_display_name.c                gss_set_sec_context_option.c
gss_display_status.c              gss_sign.c
gss_duplicate_name.c              gss_test_oid_set_member.c
gss_duplicate_oid.c               gss_unseal.c
gss_encapsulate_token.c           gss_unwrap.c
gss_export_name.c                 gss_utils.c
gss_export_sec_context.c          gss_verify.c
gss_get_mic.c                     gss_verify_mic.c
gss_import_name.c                 gss_wrap.c
gss_import_sec_context.c          gss_wrap_size_limit.c
gss_indicate_mechs.c              gssapi.asn1
gss_init_sec_context.c            mech.5
gss_inquire_context.c             mech.cat5
gss_inquire_cred.c                mech_locl.h
gss_inquire_cred_by_mech.c        mech_switch.h
gss_inquire_cred_by_oid.c         mechqueue.h
gss_inquire_mechs_for_name.c      name.h
gss_inquire_names_for_mech.c      utils.h
gss_inquire_sec_context_by_oid.c

Other parts of heimdal may be broken as well.

One related PR is ports/137729, which shows that the www/mod_auth_kerb2 port is broken due to the libgssapi breakage in base.
>How-To-Repeat:
Use libgssapi in FreeBSD 8.0+.
>Fix:
Clean up the merge with upstream's heimdal-1.1.

>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201006032325.o53NPcct015398>