From owner-freebsd-current@FreeBSD.ORG Sun Mar 15 23:07:24 2009 Return-Path: Delivered-To: current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3AD74106566C for ; Sun, 15 Mar 2009 23:07:24 +0000 (UTC) (envelope-from tmclaugh@sdf.lonestar.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 0110F8FC14; Sun, 15 Mar 2009 23:07:24 +0000 (UTC) (envelope-from tmclaugh@sdf.lonestar.org) Received: from straycat.dhs.org (root@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n2FN7LOo073913; Sun, 15 Mar 2009 23:07:22 GMT (envelope-from tmclaugh@sdf.lonestar.org) Received: from tomcat.straycat.dhs.org (tomcat.straycat.dhs.org [192.168.3.130]) by straycat.dhs.org (8.14.1/8.14.1) with ESMTP id n2FN7Kh6016309; Sun, 15 Mar 2009 19:07:21 -0400 (EDT) Message-ID: <49BD8A23.4090909@sdf.lonestar.org> Date: Sun, 15 Mar 2009 19:07:15 -0400 From: Tom McLaughlin User-Agent: Thunderbird 2.0.0.19 (X11/20090105) MIME-Version: 1.0 To: Hartmut Brandt References: <49A69B74.1080201@sdf.lonestar.org> <49A97F2E.3030005@sdf.lonestar.org> <20090306213531.G60465@beagle.kn.op.dlr.de> <20090306211650.GD41617@deviant.kiev.zoral.com.ua> <20090306222433.GF41617@deviant.kiev.zoral.com.ua> <20090310114131.GD41617@deviant.kiev.zoral.com.ua> <70D16F57-F7E3-4CDA-BCD5-5D79B566510B@rabson.org> <49B69C36.3010307@sdf.lonestar.org> <20090312092235.F78834@beagle.kn.op.dlr.de> In-Reply-To: <20090312092235.F78834@beagle.kn.op.dlr.de> X-Enigmail-Version: 0.95.6 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Kostik Belousov , kazakov@gmail.com, current@freebsd.org Subject: Re: problem with nss_ldap X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 15 Mar 2009 23:07:24 -0000 Hartmut Brandt wrote: > On Tue, 10 Mar 2009, Tom McLaughlin wrote: > > TM>Doug Rabson wrote: > > [snip alot] > > TM>Okay, attached is a patch to nss_ldap. On -CURRENT I have changed the > TM>CONFIGURE_ARG to use "--enable-configurable-krb5-ccname-gssapi" instead > TM>of "--enable-configurable-krb5-ccname-env" which fixes Harti's initial > TM>problem with apps like cron failing. It will also make nss_ldap link > TM>against libgssapi and libgssapi_krb5. I still have one lingering issue > TM>though at least things work. > TM> > TM>[tom@freebsd-8-amd64 tom]$ getent passwd tom > TM>dlopen: /usr/lib/libgssapi_spnego.so.10: Undefined symbol > TM>"GSS_C_NT_HOSTBASED_SERVICE" > TM>tom:x:10001:10001:Tom McLaughlin:/home/tom:/bin/sh > > Ok. This works so far. I get the same error. But I have the original problem > again - cron, sendmail and sshd seem not to use the hostcreds. I still need a > link from /var/tmp/hostcreds to /tmp/krb5cc_0 to make sshd to work. The build > of nss_ldap seems to find all the necessary files: sasl.h, gssapi.h, > gssapi_krb5.h. > What's the machine's OSVERSION? I used the OSVERSION on my box when checking which method to use for setting the credentials cache. I didn't feel like trying to figure out what the OSVERSION was when Heimdal was updated. tom > The thing I cannot understand is: why do normal applications find the hostcreds, > but the daemons not? What do they differently? > > harti -- | tmclaugh at sdf.lonestar.org tmclaugh at FreeBSD.org | | FreeBSD http://www.FreeBSD.org |