From owner-freebsd-current@FreeBSD.ORG Mon Oct 5 11:07:27 2009 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id F29E6106570E; Mon, 5 Oct 2009 11:07:26 +0000 (UTC) (envelope-from bland@freebsd.org) Received: from mail1.asahi-net.or.jp (mail1.asahi-net.or.jp [202.224.39.197]) by mx1.freebsd.org (Postfix) with ESMTP id 9F6CA8FC1A; Mon, 5 Oct 2009 11:07:26 +0000 (UTC) Received: from hub.bbnest.net (w133033.ppp.asahi-net.or.jp [121.1.133.33]) by mail1.asahi-net.or.jp (Postfix) with ESMTP id 9CAFE860F9; Mon, 5 Oct 2009 20:07:23 +0900 (JST) Received: from nest.bbnest.net (nest.bbnest.net [10.0.0.249]) by hub.bbnest.net (8.14.3/8.14.3) with ESMTP id n95B78TA095839 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Mon, 5 Oct 2009 20:07:09 +0900 (JST) (envelope-from bland@freebsd.org) Mime-Version: 1.0 (Apple Message framework v1076) Content-Type: text/plain; charset=us-ascii; format=flowed; delsp=yes From: Alexander Nedotsukov In-Reply-To: <0EA2E119-29DF-4DDE-84C3-432E35D61C76@rabson.org> Date: Mon, 5 Oct 2009 20:07:08 +0900 Content-Transfer-Encoding: 7bit Message-Id: References: <54ee35ff63fa25ea4c082134892835fb@mail> <0EA2E119-29DF-4DDE-84C3-432E35D61C76@rabson.org> To: Doug Rabson X-Mailer: Apple Mail (2.1076) X-DSPAM-Result: Innocent X-DSPAM-Processed: Mon Oct 5 20:07:23 2009 X-DSPAM-Confidence: 0.9994 X-DSPAM-Probability: 0.0000 X-DSPAM-Signature: 4ac9d36b958401856066157 Cc: Doug Rabson , Rick Macklem , John Baldwin , freebsd-current@freebsd.org, John Marshall , George Mamalakis Subject: Re: 8.0 Dynamic Linker Broken? (Was: [PATCH] SASL problems with spnego on 8.0-BETA4) X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Oct 2009 11:07:27 -0000 Doug, I share your concerns about wrong libgssapi_foo usage. Do you see any possible drawbacks of: 3) Move libgssapi_foo into gssapi/libfoo_mech and link libgoo_mech against libgssapi Thanks, Alexander On 05.10.2009, at 16:29, Doug Rabson wrote: > This is the core of the problem, I think. There are two possible > solutions: > > 1. Link libgssapi_foo.so against libgssapi.so. I'm not a fan of this > because it will encourage people to link with libgssapi_krb5.so when > they really ought to be linking with libgssapi.so to give them > mechanism independance. > > 2. Split the various mechanism libs in to two parts, mech_foo.so > which will contain the actual mechanism implementation (this can > link with libgssapi.so to handle the RTLD_LOCAL issue) and > optionally libgssapi_foo.so to contain any mechanism-specific > extensions. > > Clearly (2) is unsuitable for 8.0 but could happen in current. I > guess we could use (1) as a band-aid fix for 8.0. > > On 5 Oct 2009, at 05:50, Alexander Nedotsukov wrote: > >> >> Actually this may mean quite otherwise. >> What I saying is if some code (eg. libsasl) dlopen() libgssapi as >> RTLD_LOCAL then later attempt to load libgssapi_xxx inside >> libgssapi may >> fail because of this: >> >> $ldd /usr/lib/libgssapi_spnego.so >> /usr/lib/libgssapi_spnego.so: >> libasn1.so.10 => /usr/lib/libasn1.so.10 (0x28300000) >> libc.so.7 => /lib/libc.so.7 (0x2808f000) >> >> I would expect to see libgssapi.so.10 dependency here. >> >> On Mon, 5 Oct 2009 10:07:20 +1100, John Marshall >> wrote: >>> On Fri, 02 Oct 2009, 08:24 -0400, John Baldwin wrote: >>>> On Friday 02 October 2009 4:13:19 am John Marshall wrote: >>>>> On Tue, 22 Sep 2009, 08:22 +1000, John Marshall wrote: >>>>>> On Mon, 21 Sep 2009, 11:26 -0400, Rick Macklem wrote: >>>>>> >>> [snip] >>>>>>> >>>>>>> Now, hopefully someone who understands enough about dynamic >>>>>>> linking will >>>>>>> know if this is the correct fix for 8.0? (I'm going on a couple >> of >>>>>>> weeks >>>>>>> vacation at the end of this week, so I won't be around to commit >>>>>>> anything >>>>>>> and don't understand it well enough to know if this is the >> correct >>>>>>> way >>>>>>> to fix it.) >>>>>>> >>>>>>> So, hopefully someone else can pick this one up? >>>>>>> >>> [snip] >>>>>> >>>>>> I have submitted a patch to the FreeBSD Makefile which patches >>>>>> the >>>>>> vendor-supplied template for krb5-config. I should be grateful >>>>>> if >>>>>> dfr@ >>>>>> or another src committer would please review this with a view to >>>>>> obtaining re@ approval to commit it before 8.0-RC2. >>>>>> >>>>>> >>>>> >>>>> Any src committers able to help with this? >>>> >>>> Hmmm, I thought that libgssapi was supposed to use dlopen to load >>>> the >>>> proper >>>> back-end libraries using /etc/gss/mech rather than having >>>> applications >>>> directly link against them. >>> >>> OK, so if my proposed solution is, in fact, only masking a symptom >>> of a >>> broken dynamic linker, would somebody who understands this stuff >>> please >>> weigh in on this with some debugging suggestions or with a patch to >>> address this problem? >>> >>> I'm able to help with testing but I'm not a programmer and know >>> nothing >>> about the FreeBSD dynamic linker. >>> >>> Thanks. > > _______________________________________________ > freebsd-current@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org > "