From owner-freebsd-current@FreeBSD.ORG Mon Sep 21 22:22:50 2009 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1A1C5106566B; Mon, 21 Sep 2009 22:22:50 +0000 (UTC) (envelope-from john.marshall@riverwillow.com.au) Received: from mail1.riverwillow.net.au (mail1.riverwillow.net.au [203.58.93.36]) by mx1.freebsd.org (Postfix) with ESMTP id 8AAB58FC1A; Mon, 21 Sep 2009 22:22:49 +0000 (UTC) Received: from rwpc12.mby.riverwillow.net.au (rwpc12.mby.riverwillow.net.au [172.25.24.168]) (authenticated bits=0) by mail1.riverwillow.net.au (8.14.3/8.14.3) with ESMTP id n8LMMgPI060460 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 22 Sep 2009 08:22:43 +1000 (AEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=riverwillow.com.au; s=m1001; t=1253571764; bh=RqB7DOSpPbPTraNKBk2T+YsjSZFMU90sVr2Wb/It5j0=; h=Date:From:To:Cc:Subject:Message-ID:References:Mime-Version: Content-Type:In-Reply-To; b=NsvjxlXYVv0K1glLojt80TGLUX1AIbPXiynJ+CqMV2mal2Hoex+2vCdR4kS+M+l3q WrN/wsWcSgpdCj1+3PlYYEbiTDqS/bdS1ntDr7Z4ZMowqol+G8Ox6FSu8YvW+xw8u2 kyL46b/BDkhJ4rNjDNtmSYCdqsrbFtypL6hZAfLE= Received: from rwpc12.mby.riverwillow.net.au (localhost [127.0.0.1]) by rwpc12.mby.riverwillow.net.au (8.14.3/8.14.3) with ESMTP id n8LMMgGr006791; Tue, 22 Sep 2009 08:22:42 +1000 (AEST) (envelope-from john.marshall@riverwillow.com.au) Received: (from john@localhost) by rwpc12.mby.riverwillow.net.au (8.14.3/8.14.3/Submit) id n8LMMf3R006790; Tue, 22 Sep 2009 08:22:41 +1000 (AEST) (envelope-from john) Date: Tue, 22 Sep 2009 08:22:41 +1000 From: John Marshall To: Rick Macklem Message-ID: <20090921222241.GF1001@rwpc12.mby.riverwillow.net.au> Mail-Followup-To: Rick Macklem , George Mamalakis , freebsd-current@freebsd.org, Doug Rabson References: <4AB27FB6.4010806@eng.auth.gr> <20090918034933.GI1231@rwpc12.mby.riverwillow.net.au> <20090918233157.GK1231@rwpc12.mby.riverwillow.net.au> <20090921012855.GA1001@rwpc12.mby.riverwillow.net.au> <4AB768C3.6030003@eng.auth.gr> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="vA66WO2vHvL/CRSR" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i OpenPGP: id=A29A84A2; url=http://pki.riverwillow.net.au/pgp/johnmarshall.asc Cc: Doug Rabson , freebsd-current@freebsd.org, George Mamalakis Subject: Re: SASL problems with spnego on 8.0-BETA4 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Sep 2009 22:22:50 -0000 --vA66WO2vHvL/CRSR Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, 21 Sep 2009, 11:26 -0400, Rick Macklem wrote: >=20 > On Mon, 21 Sep 2009, George Mamalakis wrote: >=20 > [stuff snipped] > >> > >>SUCCESS! > >> > >>So, this fix obviates THAT reason for installing the Heimdal port. If > >>George meets with similar success adding -lgssapi_spnego for his spnego > >>problem, I suggest that both libraries be added to the list in line 96 > >>of /usr/bin/krb5-config prior to release of FreeBSD 8.0. > >> > >>It doesn't look like this fix is as simple as submitting a patch to > >>krb5-config. It looks like magic needs to happen somewhere in the base > >>kerberos build system. > >> > >>I notice that the Heimdal port doesn't build the separate libraries and > >>everything seems to be included in libgssapi (which explains why sasl2 > >>"works" when linked against the Heimdal port). > >> > >> > >Guys, > > > >I changed my /usr/bin/krb5-config's line 96 to include -lgssapi_spnego a= nd=20 > >-lgssapi_krb5, and ever since both client and server work correctly!! Of= =20 > >course I get some other error, but at least this must be a configuration= =20 > >error :). > > > >So, to sum up: > > > >Still running on fbsd.8-BETA4, changed krb5-config to include the missin= g=20 > >libraries, recompiled cyrus-sasl-2.1.23 after I changed the krb5-config,= =20 > >restarted openldap-sasl-server-2.4.18_1 and after performing an=20 > >ldapsearch, the client does not complain (and exits) about missing=20 > >libraries, NOR does the server crash on sasl authentication. > > > >Great job guys, thank you all very very much for your help! I posted my= =20 > >query on the 17th of Sep. and in four days (weekend inclusive!) someone= =20 > >came up with an answer that resolves my issue! Great job, once more, and= =20 > >thank you all again! > > > Now, hopefully someone who understands enough about dynamic linking will > know if this is the correct fix for 8.0? (I'm going on a couple of weeks > vacation at the end of this week, so I won't be around to commit anything > and don't understand it well enough to know if this is the correct way > to fix it.) >=20 > So, hopefully someone else can pick this one up? >=20 > Thanks for testing it, rick Thanks Rick for your very valuable guidance on this problem. Have a great vacation! I have submitted a patch to the FreeBSD Makefile which patches the vendor-supplied template for krb5-config. I should be grateful if dfr@ or another src committer would please review this with a view to obtaining re@ approval to commit it before 8.0-RC2. --=20 John Marshall --vA66WO2vHvL/CRSR Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.13 (FreeBSD) iEYEARECAAYFAkq3/LEACgkQw/tAaKKahKL1CgCcCazZ13EB4F1CBha9SeYFEV0b 3HQAniuXQ8vu0OlF/H7a4tGkLXAweSdl =z6jI -----END PGP SIGNATURE----- --vA66WO2vHvL/CRSR--