From owner-freebsd-current@FreeBSD.ORG Tue Jul 6 12:59:10 2010 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6134A1065674 for ; Tue, 6 Jul 2010 12:59:10 +0000 (UTC) (envelope-from areilly@bigpond.net.au) Received: from nskntmtas01p.mx.bigpond.com (nskntmtas01p.mx.bigpond.com [61.9.168.137]) by mx1.freebsd.org (Postfix) with ESMTP id E98AC8FC15 for ; Tue, 6 Jul 2010 12:59:09 +0000 (UTC) Received: from nskntotgx03p.mx.bigpond.com ([124.188.161.100]) by nskntmtas01p.mx.bigpond.com with ESMTP id <20100706125908.TAIQ13611.nskntmtas01p.mx.bigpond.com@nskntotgx03p.mx.bigpond.com>; Tue, 6 Jul 2010 12:59:08 +0000 Received: from ghanamia.reilly.home ([124.188.161.100]) by nskntotgx03p.mx.bigpond.com with ESMTP id <20100706125907.VQFQ13584.nskntotgx03p.mx.bigpond.com@ghanamia.reilly.home>; Tue, 6 Jul 2010 12:59:07 +0000 Mime-Version: 1.0 (Apple Message framework v1081) Content-Type: text/plain; charset=us-ascii From: Andrew Reilly In-Reply-To: <20100706085435.GC13238@deviant.kiev.zoral.com.ua> Date: Tue, 6 Jul 2010 22:59:13 +1000 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20100706085435.GC13238@deviant.kiev.zoral.com.ua> To: Kostik Belousov X-Mailer: Apple Mail (2.1081) X-Authentication-Info: Submitted using SMTP AUTH PLAIN at nskntotgx03p.mx.bigpond.com from [124.188.161.100] using ID areilly@bigpond.net.au at Tue, 6 Jul 2010 12:59:07 +0000 X-RPD-ScanID: Class unknown; VirusThreatLevel unknown, RefID str=0001.0A090205.4C33289C.005C,ss=1,fgs=0 X-SIH-MSG-ID: qR83GNb+TAD0zmQs0WyzOwJxyArnqyN48Z4QX81loRIGTUDCp8DeQ9rHNvZRu8u6xC5KJhuHNGQpaazsTY3Rs9mK Cc: Matthias Andree , freebsd-current@freebsd.org Subject: Re: Regression in GSSAPI/libxh509 linking? [PR bin/147175] X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Jul 2010 12:59:10 -0000 Hi Kostik, On 06/07/2010, at 18:54 , Kostik Belousov wrote: > You need to gather and show exact command that fails. There's some a little more info in PR: ports/145769, although the "fix" = that I suggest there is almost certainly a wrong turn (I nuked all = reference to MD2_* from libhx509, there). I can't easily recreate the = problem, now that I've patched my copy of = /usr/src/kerberos5/lib/libhx509/Makefile, but the fault seems to be = fairly consistent in the configure script of any port configured to use = GSSAPI, such as fetchmail or evolution-data-server. =46rom memory, the = failing program is a one-line main() that calls MD2_Init(), and attempts = to link it with a command line derived from `krb5-config --lib gssapi`. > Shared object that references a symbol but does not record a = dependency > on the object providing the symbol is the bug in the build of that = object > (usually). That is what /usr/lib/libhx509.so.10 seems to do (see the undefined refs = to MD2_* with nm /usr/lib/libhx509.a, and see the lack of dependency on = /lib/libcrypto.so.6 with ldd), and yet this hasn't been widely reported, = I suspect, because it still seems to work in 8-STABLE. Don't know why. The exact command that fails, in summary, is: get a 9-current system. cd /usr/ports/mail/fetchmail (or = /usr/ports/databases/evolution-data-server, but that has lots of other = dependencies that might take a while to build) make config # and tell it to enable GSSAPI (and NTLM) which isn't the = default. make # watch the configure fail with a report of missing KRB5, but inspection = of the configure.log will show that the real failure was a failure to = link against the system-supplied shared libraries, specifically = libhx509.so. Repeat the process on an 8-STABLE system and see that the config and = build proceeds successfully, despite the fact that libhx509.so.10 has = undefined symbols for MD2_* just as on -current. Please let me know if there's any other info that I can provide. Cheers, --=20 Andrew