From owner-freebsd-current@FreeBSD.ORG Mon Mar 16 11:04:39 2009 Return-Path: Delivered-To: current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 849E21065676 for ; Mon, 16 Mar 2009 11:04:39 +0000 (UTC) (envelope-from Hartmut.Brandt@dlr.de) Received: from smtp-3.dlr.de (smtp-3.dlr.de [195.37.61.187]) by mx1.freebsd.org (Postfix) with ESMTP id 12B538FC23 for ; Mon, 16 Mar 2009 11:04:38 +0000 (UTC) (envelope-from Hartmut.Brandt@dlr.de) Received: from beagle.kn.op.dlr.de ([129.247.178.136]) by smtp-3.dlr.de over TLS secured channel with Microsoft SMTPSVC(6.0.3790.1830); Mon, 16 Mar 2009 12:04:36 +0100 Date: Mon, 16 Mar 2009 12:04:39 +0100 (CET) From: Harti Brandt X-X-Sender: brandt_h@beagle.kn.op.dlr.de To: Hartmut Brandt In-Reply-To: <20090316093602.O92264@beagle.kn.op.dlr.de> Message-ID: <20090316120323.N92264@beagle.kn.op.dlr.de> References: <49A69B74.1080201@sdf.lonestar.org> <49A97F2E.3030005@sdf.lonestar.org> <20090306213531.G60465@beagle.kn.op.dlr.de> <20090306211650.GD41617@deviant.kiev.zoral.com.ua> <20090306222433.GF41617@deviant.kiev.zoral.com.ua> <20090310114131.GD41617@deviant.kiev.zoral.com.ua> <70D16F57-F7E3-4CDA-BCD5-5D79B566510B@rabson.org> <49B69C36.3010307@sdf.lonestar.org> <20090312092235.F78834@beagle.kn.op.dlr.de> <49BD8A23.4090909@sdf.lonestar.org> <20090316093602.O92264@beagle.kn.op.dlr.de> X-OpenPGP-Key: harti@freebsd.org MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-OriginalArrivalTime: 16 Mar 2009 11:04:37.0083 (UTC) FILETIME=[FED0BAB0:01C9A626] Cc: Kostik Belousov , Tom McLaughlin , kazakov@gmail.com, current@freebsd.org Subject: Re: problem with nss_ldap X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Harti Brandt List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Mar 2009 11:04:39 -0000 On Mon, 16 Mar 2009, Hartmut Brandt wrote: HB>On Sun, 15 Mar 2009, Tom McLaughlin wrote: HB> HB>TM>Hartmut Brandt wrote: HB>TM>> On Tue, 10 Mar 2009, Tom McLaughlin wrote: HB>TM>> HB>TM>> TM>Doug Rabson wrote: HB>TM>> HB>TM>> [snip alot] HB>TM>> HB>TM>> TM>Okay, attached is a patch to nss_ldap. On -CURRENT I have changed the HB>TM>> TM>CONFIGURE_ARG to use "--enable-configurable-krb5-ccname-gssapi" instead HB>TM>> TM>of "--enable-configurable-krb5-ccname-env" which fixes Harti's initial HB>TM>> TM>problem with apps like cron failing. It will also make nss_ldap link HB>TM>> TM>against libgssapi and libgssapi_krb5. I still have one lingering issue HB>TM>> TM>though at least things work. HB>TM>> TM> HB>TM>> TM>[tom@freebsd-8-amd64 tom]$ getent passwd tom HB>TM>> TM>dlopen: /usr/lib/libgssapi_spnego.so.10: Undefined symbol HB>TM>> TM>"GSS_C_NT_HOSTBASED_SERVICE" HB>TM>> TM>tom:x:10001:10001:Tom McLaughlin:/home/tom:/bin/sh HB>TM>> HB>TM>> Ok. This works so far. I get the same error. But I have the original HB>TM>> problem HB>TM>> again - cron, sendmail and sshd seem not to use the hostcreds. I still need HB>TM>> a HB>TM>> link from /var/tmp/hostcreds to /tmp/krb5cc_0 to make sshd to work. The HB>TM>> build HB>TM>> of nss_ldap seems to find all the necessary files: sasl.h, gssapi.h, HB>TM>> gssapi_krb5.h. HB>TM>> HB>TM> HB>TM>What's the machine's OSVERSION? I used the OSVERSION on my box when checking HB>TM>which method to use for setting the credentials cache. I didn't feel like HB>TM>trying to figure out what the OSVERSION was when Heimdal was updated. HB> HB>Looks like the Makefile checks for >= 800064. My sys/param.h has 800061. HB> HB>Unfortunately I'm out of town until at least sunday so I can do more tests HB>only next week. To reply to my own mail: changing the check in the Makefile to >= 800061 makes things working. The only remaining thing is the missing symbol in gssapi_spnego. harti