Date: Tue, 22 Sep 2009 07:43:23 +1000 (AEST) From: John Marshall <john@rwsrv05.mby.riverwillow.net.au> To: FreeBSD-gnats-submit@FreeBSD.org Subject: bin/139037: [PATCH] 8.0-RC1 /usr/bin/krb5-config does not include necessary gssapi libraries Message-ID: <200909212143.n8LLhNJx053412@rwsrv05.mby.riverwillow.net.au> Resent-Message-ID: <200909212150.n8LLo12C090987@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 139037 >Category: bin >Synopsis: [PATCH] 8.0-RC1 /usr/bin/krb5-config does not include necessary gssapi libraries >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Mon Sep 21 21:50:01 UTC 2009 >Closed-Date: >Last-Modified: >Originator: John Marshall >Release: FreeBSD 8.0-RC1 i386 >Organization: Riverwillow Pty Ltd >Environment: System: FreeBSD rwsrv05.mby.riverwillow.net.au 8.0-RC1 FreeBSD 8.0-RC1 #0: Fri Sep 18 13:35:00 AEST 2009 root@rwsrv05.mby.riverwillow.net.au:/spare/obj/usr/src/sys/RWSRV05 i386 >Description: /usr/bin/krb5-config is a shell script called by application build routines to discover the list of libraries required to implement functionality which depends upon the base system kerberos implementation. The base system Heimdal build splits the gssapi functionality into different libraries (e.g. libgssapi, libgssapi_krb5, libgssapi_spnego) but only lists the first of those via the krb5-config script. Applications using krb5-config at build time to determine the list of libraries they need for gssapi functionality will likely fail at runtime due to missing libraries. An example is the cyrus-sasl2 port. This patch rectifies that problem by adding the missing libraries to the generated list. This problem was discussed on freebsd-current@ This patch solves the problem but I'm not sure whether it is the proper solution or only treating the symptoms of something deeper. If a better solution is not immediately apparent, I believe we should commit this patch prior to release rather than releasing a broken system. >How-To-Repeat: See discussion and test results in freebsd-current@ http://lists.freebsd.org/pipermail/freebsd-current/2009-September/011711.html http://lists.freebsd.org/pipermail/freebsd-current/2009-September/011751.html http://lists.freebsd.org/pipermail/freebsd-current/2009-September/011767.html >Fix: --- krb5-config_Makefile.diff begins here --- --- src/kerberos5/usr.bin/krb5-config/Makefile.orig 2009-08-03 18:13:06.000000000 +1000 +++ src/kerberos5/usr.bin/krb5-config/Makefile 2009-09-21 14:01:50.000000000 +1000 @@ -13,6 +13,7 @@ -e "s,@libdir\@,${LIBDIR},g" \ -e "s,@includedir\@,${INCLUDEDIR},g" \ -e "s,@LIB_crypt\@,-lcrypt,g" \ + -e "s,-lgssapi,-lgssapi -lgssapi_krb5 -lgssapi_spnego," \ -e "s,@LIB_dbopen\@,,g" \ -e "s,@LIB_hcrypto_appl\@,-lcrypto,g" \ -e "s,@LIB_pkinit\@,-lhx509,g" \ --- krb5-config_Makefile.diff ends here --- >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200909212143.n8LLhNJx053412>