From owner-freebsd-questions@FreeBSD.ORG Wed Jun 2 20:41:15 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 47B931065678 for ; Wed, 2 Jun 2010 20:41:14 +0000 (UTC) (envelope-from ilcsfe@gmail.com) Received: from smtprelay-h22.telenor.se (smtprelay-h22.telenor.se [195.54.99.197]) by mx1.freebsd.org (Postfix) with ESMTP id E1A5D8FC1F for ; Wed, 2 Jun 2010 20:41:13 +0000 (UTC) Received: from ipb1.telenor.se (ipb1.telenor.se [195.54.127.164]) by smtprelay-h22.telenor.se (Postfix) with ESMTP id 32F69CEFF for ; Wed, 2 Jun 2010 22:16:42 +0200 (CEST) X-SENDER-IP: [85.224.52.135] X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AkgvABpZBkxV4DSHPGdsb2JhbACBOIRDmDABAQEBNbEmh1UuiFSFFgQ X-IronPort-AV: E=Sophos;i="4.53,348,1272837600"; d="scan'208";a="87152883" Received: from c-8734e055.520-1-64736c10.cust.bredbandsbolaget.se (HELO [85.224.52.135]) ([85.224.52.135]) by ipb1.telenor.se with ESMTP; 02 Jun 2010 22:16:41 +0200 Message-ID: <4C06BC26.5040404@gmail.com> Date: Wed, 02 Jun 2010 22:16:38 +0200 From: John User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.9) Gecko/20100317 Thunderbird/3.0.4 MIME-Version: 1.0 To: Tim Judd References: <4BF532F7.7070003@gmail.com> <4C0622C2.7080408@gmail.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: Apache 2.2, mod_auth_kerb X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jun 2010 20:41:15 -0000 On 2010-06-02 18:56, Tim Judd wrote: > On 6/2/10, John wrote: >> On 2010-05-20 23:34, Tim Judd wrote: >>> On 5/20/10, John wrote: >>>> Hi list. >>>> >>>> I'm having problems getting mod_auth_kerb to play nice on one of my >>>> servers. >>>> I have the exact same setup on other machines and it works perfectly, >>>> only difference is this ones running CURRENT while they track RELEASE. >>>> >>>> Some info: >>>> >>>> # pkg_info|grep apache&& pkg_info|grep kerb >>>> apache-2.2.15_7 Version 2.2.x of Apache web server with prefork MPM. >>>> mod_auth_kerb-5.4 An Apache module for authenticating users with >>>> Kerberos v5 >>>> >>>> # uname -a >>>> FreeBSD host.example.com 9.0-CURRENT FreeBSD 9.0-CURRENT #5: Tue May 11 >>>> 20:04:45 UTC 2010 host.example.com:/usr/obj/usr/src/sys/HOST i386 >>>> >>>> >>>> Everything compiles and installs nicely, but when I try to do a >>>> 'apachectl start' I get this: >>>> >>>> httpd: Syntax error on line 4 of /usr/local/etc/apache22/httpd.conf: >>>> Cannot load /usr/local/libexec/apache22/mod_auth_kerb.so into server: >>>> /usr/local/libexec/apache22/mod_auth_kerb.so: Undefined symbol >>>> "gsskrb5_register_acceptor_identity" >>>> >>>> Is this due to running current? >>>> If it is I will drop the issue right now, I just want to know for sure >>>> before I spend hours trying to solve it. >>>> >>> >>> >>> It begins to look like GSSAPI is not in there. GSSAPI is part of >>> world. You may need to rebuild kerberos with GSSAPI support. Are you >>> using the builtin MIT or the add-on heimdal kerberos? >> >> I'm using the builtin. How do I rebuild kerberos with GSSAPI support, I >> though that was builtin by default in FreeBSD since 5.1 somewhere? >> >> klist, kinit and kdestroy all works fine and I can authenticate against >> an Active Directory server, but I just cant get Apache to load the >> mod_auth_kerb module. >> >> I just did a clean install of a FreeBSD 8.1-PRERELEASE, and I have >> exactly the same error there so it's not related to running current. >> What am I doing wrong? > > > I don't know if I'm reading bsd.apache.mk right (included due to the > dependency of apache webserver), but mod_auth_kerb may require apache > 1.3, not 2.x > > does your 8.1 have apache1.3? Maybe it has both nd 1.3 is running? > > I would bet that a 1.3 module won't work in 2.x > > does apache2.x have a kerberos module? there have been a ton of > additions to apache2.x > > > > Let us know. Are you looking at /usr/ports/www/mod_auth_kerb or /usr/ports/www/mod_auth_kerb2? mod_auth_kerb2 is for apache 2.x