From owner-freebsd-stable@FreeBSD.ORG Fri Sep 18 16:17:20 2009 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 018B11065670 for ; Fri, 18 Sep 2009 16:17:20 +0000 (UTC) (envelope-from rmacklem@uoguelph.ca) Received: from esa-jnhn.mail.uoguelph.ca (esa-jnhn.mail.uoguelph.ca [131.104.91.44]) by mx1.freebsd.org (Postfix) with ESMTP id A9A978FC17 for ; Fri, 18 Sep 2009 16:17:19 +0000 (UTC) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAOhOs0qDaFvG/2dsb2JhbADPeIQcBYFY X-IronPort-AV: E=Sophos;i="4.44,410,1249272000"; d="scan'208";a="48514871" Received: from amazon.cs.uoguelph.ca ([131.104.91.198]) by esa-jnhn-pri.mail.uoguelph.ca with ESMTP; 18 Sep 2009 12:17:18 -0400 Received: from localhost (localhost.localdomain [127.0.0.1]) by amazon.cs.uoguelph.ca (Postfix) with ESMTP id C8CDB21018B; Fri, 18 Sep 2009 12:17:18 -0400 (EDT) X-Virus-Scanned: amavisd-new at amazon.cs.uoguelph.ca Received: from amazon.cs.uoguelph.ca ([127.0.0.1]) by localhost (amazon.cs.uoguelph.ca [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 80l0FqpDLQNE; Fri, 18 Sep 2009 12:17:17 -0400 (EDT) Received: from muncher.cs.uoguelph.ca (muncher.cs.uoguelph.ca [131.104.91.102]) by amazon.cs.uoguelph.ca (Postfix) with ESMTP id D301821017F; Fri, 18 Sep 2009 12:17:17 -0400 (EDT) Received: from localhost (rmacklem@localhost) by muncher.cs.uoguelph.ca (8.11.7p3+Sun/8.11.6) with ESMTP id n8IGMnD13487; Fri, 18 Sep 2009 12:22:49 -0400 (EDT) X-Authentication-Warning: muncher.cs.uoguelph.ca: rmacklem owned process doing -bs Date: Fri, 18 Sep 2009 12:22:48 -0400 (EDT) From: Rick Macklem X-X-Sender: rmacklem@muncher.cs.uoguelph.ca To: John Marshall In-Reply-To: <20090918034933.GI1231@rwpc12.mby.riverwillow.net.au> Message-ID: References: <4AB27FB6.4010806@eng.auth.gr> <20090918034933.GI1231@rwpc12.mby.riverwillow.net.au> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: freebsd-stable , George Mamalakis Subject: Re: SASL problems with spnego on 8.0-BETA4 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Sep 2009 16:17:20 -0000 On Fri, 18 Sep 2009, John Marshall wrote: > On Thu, 17 Sep 2009, 21:28 +0300, George Mamalakis wrote: >> Dear all, >> >> I am trying to setup ldap with heimdal on my fbsd 8.0-BETA4 and when I >> run ldapsearch to see if I can authenticate via GSSAPI I keep getting >> the following error: >> >> [root@ldap root]# ldapsearch -H "ldap://ldap.example.com/" -b >> "dc=example,dc=com" >> SASL/GSSAPI authentication started >> dlopen: /usr/lib/libgssapi_spnego.so.10: Undefined symbol >> "GSS_C_NT_HOSTBASED_SERVICE" >> ldap_sasl_interactive_bind_s: Local error (-2) >> GSS_C_NT_HOSTBASED_SERVICE is defined in gss_names.o in libgssapi. I don't know diddly about ldap (like a lot of the stuff I've been posting w.r.t. lately, it seems:-), but maybe an extra "-lgssapi" at the end of the libraries list for the Makefile, might help? (ie. I'm guessing that maybe gss_names.o doesn't get pulled out of libgssapi, since nothing that comes before it uses any of the globals in it and -lgssapi_spnego is listed after it.) One difference between the vanilla Heimdal and the one in FreeBSD is where the globals live in the libraries. Just a shot in the dark, rick