Date: Mon, 1 Dec 2003 12:23:37 -0600 From: "Jacques A. Vidrine" <nectar@FreeBSD.org> To: Sean McNeil <sean@mcneil.com> Cc: freebsd-current@FreeBSD.org Subject: Re: problem with kerberos startup and LDAP Message-ID: <20031201182336.GA728@madman.celabo.org> In-Reply-To: <1070302220.19999.5.camel@blue.mcneil.com> References: <1070260627.23876.2.camel@blue.mcneil.com> <20031201132536.GA99018@madman.celabo.org> <1070302220.19999.5.camel@blue.mcneil.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Dec 01, 2003 at 10:10:20AM -0800, Sean McNeil wrote:
> This was with Heimdal from an installation of -CURRENT. I am using LDAP
> functionality, so option (a) below is not an option. Option (b) below
> sounds more difficult than the change I made to /etc/rc.d/kerberos :)
>
> I hadn't thought kerberos would get linked in such a manner, but now
> that you mentioned it here is what it ended up using:
>
> /usr/libexec/kdc:
> libkrb5.so.7 => /usr/lib/libkrb5.so.7 (0x2807e000)
> libhdb.so.7 => /usr/lib/libhdb.so.7 (0x280ba000)
> libroken.so.7 => /usr/lib/libroken.so.7 (0x280ca000)
> libasn1.so.7 => /usr/lib/libasn1.so.7 (0x280d8000)
> libcrypto.so.3 => /lib/libcrypto.so.3 (0x280fe000)
> libcrypt.so.2 => /lib/libcrypt.so.2 (0x28208000)
> libcom_err.so.2 => /usr/lib/libcom_err.so.2 (0x28221000)
> libldap.so.2 => /usr/local/lib/libldap.so.2 (0x28223000)
> liblber.so.2 => /usr/local/lib/liblber.so.2 (0x28254000)
> libc.so.5 => /lib/libc.so.5 (0x28260000)
> libsasl2.so.2 => /usr/local/lib/libsasl2.so.2 (0x28337000)
> libssl.so.3 => /usr/local/lib/libssl.so.3 (0x2834a000)
> libcrypto.so.3 => /usr/local/lib/libcrypto.so.3 (0x2837b000)
>
> It only complained about libldap.so.2, so I would guess kerberos is
> using the -rpath for the others?
Oh, you must be using `WITH_OPENLDAP'--- an option that I did not even
realize was available in the base system until I looked just now :-)
Yes, I believe the build is broken and I will correct it after the
code freeze. In the meantime, you might try the following patch and
rebuild the KDC (`make clean' first).
Cheers,
--
Jacques Vidrine NTT/Verio SME FreeBSD UNIX Heimdal
nectar@celabo.org jvidrine@verio.net nectar@freebsd.org nectar@kth.se
Index: kerberos5/Makefile.inc
===================================================================
RCS file: /home/ncvs/src/kerberos5/Makefile.inc,v
retrieving revision 1.19
diff -c -r1.19 Makefile.inc
*** kerberos5/Makefile.inc 18 Jul 2003 13:21:55 -0000 1.19
--- kerberos5/Makefile.inc 1 Dec 2003 18:21:23 -0000
***************
*** 16,22 ****
OPENLDAPBASE?= /usr/local
LDAPLIBS=-lldap -llber
LDAPCFLAGS=-I${OPENLDAPBASE}/include -DOPENLDAP=1
! LDAPLDADD=-L${OPENLDAPBASE}/lib ${LDAPLIBS}
.endif
.if exists(${.OBJDIR}/../../include)
--- 16,22 ----
OPENLDAPBASE?= /usr/local
LDAPLIBS=-lldap -llber
LDAPCFLAGS=-I${OPENLDAPBASE}/include -DOPENLDAP=1
! LDAPLDADD=-L${OPENLDAPBASE}/lib -Wl,-rpath,${OPENLDAPBASE}/lib ${LDAPLIBS}
.endif
.if exists(${.OBJDIR}/../../include)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031201182336.GA728>