From owner-freebsd-bugs  Fri Mar 13 22:50:04 1998
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id WAA22188
          for freebsd-bugs-outgoing; Fri, 13 Mar 1998 22:50:04 -0800 (PST)
          (envelope-from owner-freebsd-bugs@FreeBSD.ORG)
Received: (from gnats@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id WAA22180;
          Fri, 13 Mar 1998 22:50:03 -0800 (PST)
          (envelope-from gnats)
Received: from fledge.watson.org (robert@FLEDGE.RES.CMU.EDU [128.2.91.116])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id WAA21365
          for <FreeBSD-gnats-submit@freebsd.org>; Fri, 13 Mar 1998 22:42:50 -0800 (PST)
          (envelope-from robert@fledge.watson.org)
Received: (from robert@localhost) by fledge.watson.org (8.8.8/8.6.10) id BAA27335; Sat, 14 Mar 1998 01:42:51 -0500 (EST)
Message-Id: <199803140642.BAA27335@fledge.watson.org>
Date: Sat, 14 Mar 1998 01:42:51 -0500 (EST)
From: robert@cyrus.watson.org
Reply-To: robert+freebsd@cyrus.watson.org
To: FreeBSD-gnats-submit@FreeBSD.ORG
X-Send-Pr-Version: 3.2
Subject: bin/5999: kadmin bug -- crypt not linked correctly, fails to work
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


>Number:         5999
>Category:       bin
>Synopsis:       kadmin incorrectly linked in 2.2-STABLE
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:
>Keywords:
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Mar 13 22:50:01 PST 1998
>Last-Modified:
>Originator:     Robert Watson
>Organization:
>Release:        FreeBSD 2.2.5-STABLE i386
>Environment:
2.2-STABLE, KerberosIV

Using the KTH Kerberos4 recently added to FreeBSD.  KERBEROS4 defined in
/etc/make.conf.  Many machines.

>Description:

On attempting to use kadmin, get a linking error.  Specifically, DES is not
linked, so crypt cannot be used by Kerberos.  This is a serious error as
it is now not possible to create/delete/modify kerberos identities using the
kadmin administrative tool.  This is not ideal if you want to add a user, say.

>How-To-Repeat:

cyrus:~> kadmin
Welcome to the Kerberos Administration Program, version 2
Type "help" if you need it.
kadmin: get robert
/usr/libexec/ld.so: Undefined symbol "_crypt" called from kadmin:/usr/lib/libkrb.so.3.0 at 0x200412f8
cyrus:~> 

Any command that requires authentication fails.

>Fix:
	
In src/kerberosIV/usr.bin/kadmin/Makefile,

LDADD=          -L${ROKENOBJDIR} -lroken -L${SLOBJDIR} -lsl \
                -L${ACLOBJDIR} -lacl -L${KADMOBJDIR} -lkadm \
                -L${KDBOBJDIR} -lkdb -L${KRBOBJDIR} -lkrb \
                -ldes -lcom_err -lreadline

should read:

LDADD=          -L${ROKENOBJDIR} -lroken -L${SLOBJDIR} -lsl \
                -L${ACLOBJDIR} -lacl -L${KADMOBJDIR} -lkadm \
                -L${KDBOBJDIR} -lkdb -L${KRBOBJDIR} -lkrb \
                -ldes -lcrypt -lcom_err -lreadline

I have compiled and tested this change on my own machines.
I believe that -CURRENT also suffers from this problem, but have not
verified it on a recent version of -CURRENT (only until 980107).

>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message