Date: Fri, 2 Oct 2009 18:13:19 +1000 From: John Marshall <john.marshall@riverwillow.com.au> To: freebsd-current@freebsd.org Cc: Doug Rabson <dfr@freebsd.org>, Rick Macklem <rmacklem@uoguelph.ca>, George Mamalakis <mamalos@eng.auth.gr> Subject: [PATCH] SASL problems with spnego on 8.0-BETA4 Message-ID: <20091002081319.GN37304@rwpc12.mby.riverwillow.net.au> In-Reply-To: <20090921222241.GF1001@rwpc12.mby.riverwillow.net.au> References: <4AB27FB6.4010806@eng.auth.gr> <20090918034933.GI1231@rwpc12.mby.riverwillow.net.au> <Pine.GSO.4.63.0909181722270.23193@muncher.cs.uoguelph.ca> <20090918233157.GK1231@rwpc12.mby.riverwillow.net.au> <20090921012855.GA1001@rwpc12.mby.riverwillow.net.au> <4AB768C3.6030003@eng.auth.gr> <Pine.GSO.4.63.0909211122440.26309@muncher.cs.uoguelph.ca> <20090921222241.GF1001@rwpc12.mby.riverwillow.net.au>
next in thread | previous in thread | raw e-mail | index | archive | help
--dDnEQgWzhgf+8aPe Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, 22 Sep 2009, 08:22 +1000, John Marshall wrote: > On Mon, 21 Sep 2009, 11:26 -0400, Rick Macklem wrote: > > On Mon, 21 Sep 2009, George Mamalakis wrote: > >=20 [snip] > > >> > > >>SUCCESS! > > >> > > >>So, this fix obviates THAT reason for installing the Heimdal port. If > > >>George meets with similar success adding -lgssapi_spnego for his spne= go > > >>problem, I suggest that both libraries be added to the list in line 96 > > >>of /usr/bin/krb5-config prior to release of FreeBSD 8.0. > > >> [snip] > > >> > > >>krb5-config. It looks like magic needs to happen somewhere in the ba= se > > >>kerberos build system. > > >> > > >>I notice that the Heimdal port doesn't build the separate libraries a= nd > > >>everything seems to be included in libgssapi (which explains why sasl2 > > >>"works" when linked against the Heimdal port). > > >> > > > > > >I changed my /usr/bin/krb5-config's line 96 to include -lgssapi_spnego= and=20 > > >-lgssapi_krb5, and ever since both client and server work correctly!! = Of=20 > > >course I get some other error, but at least this must be a configurati= on=20 > > >error :). > > > [snip] > > > > > Now, hopefully someone who understands enough about dynamic linking will > > know if this is the correct fix for 8.0? (I'm going on a couple of weeks > > vacation at the end of this week, so I won't be around to commit anythi= ng > > and don't understand it well enough to know if this is the correct way > > to fix it.) > >=20 > > So, hopefully someone else can pick this one up? > >=20 > > Thanks for testing it, rick >=20 > Thanks Rick for your very valuable guidance on this problem. Have a > great vacation! >=20 > I have submitted a patch to the FreeBSD Makefile which patches the > vendor-supplied template for krb5-config. I should be grateful if dfr@ > or another src committer would please review this with a view to > obtaining re@ approval to commit it before 8.0-RC2. >=20 > <http://www.freebsd.org/cgi/query-pr.cgi?pr=3D139037>; Any src committers able to help with this? --=20 John Marshall --dDnEQgWzhgf+8aPe Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.13 (FreeBSD) iEYEARECAAYFAkrFth8ACgkQw/tAaKKahKIxlQCeMViy177fzcNTnL0Wg7ox21YV yEoAn0DbVmZxJG7cMa1/mhX/KPHFw87H =cRtK -----END PGP SIGNATURE----- --dDnEQgWzhgf+8aPe--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20091002081319.GN37304>