Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 18 Sep 2009 12:22:48 -0400 (EDT)
From:      Rick Macklem <rmacklem@uoguelph.ca>
To:        John Marshall <john.marshall@riverwillow.com.au>
Cc:        freebsd-stable <freebsd-stable@freebsd.org>, George Mamalakis <mamalos@eng.auth.gr>
Subject:   Re: SASL problems with spnego on 8.0-BETA4
Message-ID:  <Pine.GSO.4.63.0909181218140.12411@muncher.cs.uoguelph.ca>
In-Reply-To: <20090918034933.GI1231@rwpc12.mby.riverwillow.net.au>
References:  <4AB27FB6.4010806@eng.auth.gr> <20090918034933.GI1231@rwpc12.mby.riverwillow.net.au>

next in thread | previous in thread | raw e-mail | index | archive | help


On Fri, 18 Sep 2009, John Marshall wrote:

> On Thu, 17 Sep 2009, 21:28 +0300, George Mamalakis wrote:
>> Dear all,
>>
>> I am trying to setup ldap with heimdal on my fbsd 8.0-BETA4 and when I
>> run ldapsearch to see if I can authenticate via GSSAPI I keep getting
>> the following error:
>>
>> [root@ldap root]# ldapsearch  -H "ldap://ldap.example.com/" -b
>> "dc=example,dc=com"
>> SASL/GSSAPI authentication started
>> dlopen: /usr/lib/libgssapi_spnego.so.10: Undefined symbol
>> "GSS_C_NT_HOSTBASED_SERVICE"
>> ldap_sasl_interactive_bind_s: Local error (-2)
>>
GSS_C_NT_HOSTBASED_SERVICE is defined in gss_names.o in libgssapi.

I don't know diddly about ldap (like a lot of the stuff I've been
posting w.r.t. lately, it seems:-), but maybe an extra "-lgssapi"
at the end of the libraries list for the Makefile, might help?
(ie. I'm guessing that maybe gss_names.o doesn't get pulled out
of libgssapi, since nothing that comes before it uses any of the
globals in it and -lgssapi_spnego is listed after it.)

One difference between the vanilla Heimdal and the one in FreeBSD
is where the globals live in the libraries.

Just a shot in the dark, rick




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.GSO.4.63.0909181218140.12411>