From owner-freebsd-questions@FreeBSD.ORG Wed Jun 2 09:22:16 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id F2FF5106564A for ; Wed, 2 Jun 2010 09:22:15 +0000 (UTC) (envelope-from ilcsfe@gmail.com) Received: from ey-out-2122.google.com (ey-out-2122.google.com [74.125.78.27]) by mx1.freebsd.org (Postfix) with ESMTP id 819038FC1A for ; Wed, 2 Jun 2010 09:22:15 +0000 (UTC) Received: by ey-out-2122.google.com with SMTP id d26so227776eyd.9 for ; Wed, 02 Jun 2010 02:22:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:cc:subject:references:in-reply-to :content-type:content-transfer-encoding; bh=rpO1ZdAnTVoqboG1sPTJEC/isAGd1FNDhXDF6vMftpE=; b=JUWZPHjJufmqxtGw52GdEgiplzjQPmwxEqy9ATsei/174a5TW5Y97CRyD4q3DrQp27 iUksP/8Wta39MSB7n3jCi9NhTSI1tJFYFnyyKIQc3p62LrAYh8BSt4Kll4zgGdGdFJGi FmRh3scbYU5twrmqYGL0dkyfmWswDHpcmOk8I= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; b=jOkf0y7Lcv36bdSD7HtFYTz2EUdQZOpbN3jWriWoLvVXCp9Euw0t//g5nUdDJn/b0u pQLRNJUvvQSU2vx5G0xsXNeY4XAoLrgMrRVgwgVv6nrZdGUWAqBjOIuV+QnaTOyzcIwt bLHAeJSVXYkK9L+Y0g36WrfOhSPHT/CTSMEPc= Received: by 10.213.113.193 with SMTP id b1mr4572705ebq.24.1275470534448; Wed, 02 Jun 2010 02:22:14 -0700 (PDT) Received: from [192.168.1.222] ([213.141.83.3]) by mx.google.com with ESMTPS id 16sm4323294ewy.15.2010.06.02.02.22.12 (version=SSLv3 cipher=RC4-MD5); Wed, 02 Jun 2010 02:22:12 -0700 (PDT) Message-ID: <4C0622C2.7080408@gmail.com> Date: Wed, 02 Jun 2010 11:22:10 +0200 From: John User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.9) Gecko/20100317 Thunderbird/3.0.4 MIME-Version: 1.0 To: Tim Judd References: <4BF532F7.7070003@gmail.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: John , freebsd-questions@freebsd.org Subject: Re: Apache 2.2, mod_auth_kerb X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jun 2010 09:22:16 -0000 On 2010-05-20 23:34, Tim Judd wrote: > On 5/20/10, John wrote: >> Hi list. >> >> I'm having problems getting mod_auth_kerb to play nice on one of my servers. >> I have the exact same setup on other machines and it works perfectly, >> only difference is this ones running CURRENT while they track RELEASE. >> >> Some info: >> >> # pkg_info|grep apache&& pkg_info|grep kerb >> apache-2.2.15_7 Version 2.2.x of Apache web server with prefork MPM. >> mod_auth_kerb-5.4 An Apache module for authenticating users with >> Kerberos v5 >> >> # uname -a >> FreeBSD host.example.com 9.0-CURRENT FreeBSD 9.0-CURRENT #5: Tue May 11 >> 20:04:45 UTC 2010 host.example.com:/usr/obj/usr/src/sys/HOST i386 >> >> >> Everything compiles and installs nicely, but when I try to do a >> 'apachectl start' I get this: >> >> httpd: Syntax error on line 4 of /usr/local/etc/apache22/httpd.conf: >> Cannot load /usr/local/libexec/apache22/mod_auth_kerb.so into server: >> /usr/local/libexec/apache22/mod_auth_kerb.so: Undefined symbol >> "gsskrb5_register_acceptor_identity" >> >> Is this due to running current? >> If it is I will drop the issue right now, I just want to know for sure >> before I spend hours trying to solve it. >> > > > It begins to look like GSSAPI is not in there. GSSAPI is part of > world. You may need to rebuild kerberos with GSSAPI support. Are you > using the builtin MIT or the add-on heimdal kerberos? I'm using the builtin. How do I rebuild kerberos with GSSAPI support, I though that was builtin by default in FreeBSD since 5.1 somewhere? klist, kinit and kdestroy all works fine and I can authenticate against an Active Directory server, but I just cant get Apache to load the mod_auth_kerb module. I just did a clean install of a FreeBSD 8.1-PRERELEASE, and I have exactly the same error there so it's not related to running current. What am I doing wrong? -- John