Re: problem with kerberos startup and LDAP

On Mon, Dec 01, 2003 at 10:10:20AM -0800, Sean McNeil wrote:
> This was with Heimdal from an installation of -CURRENT.  I am using LDAP
> functionality, so option (a) below is not an option.  Option (b) below
> sounds more difficult than the change I made to /etc/rc.d/kerberos :)
> 
> I hadn't thought kerberos would get linked in such a manner, but now
> that you mentioned it here is what it ended up using:
> 
> /usr/libexec/kdc:
>         libkrb5.so.7 => /usr/lib/libkrb5.so.7 (0x2807e000)
>         libhdb.so.7 => /usr/lib/libhdb.so.7 (0x280ba000)
>         libroken.so.7 => /usr/lib/libroken.so.7 (0x280ca000)
>         libasn1.so.7 => /usr/lib/libasn1.so.7 (0x280d8000)
>         libcrypto.so.3 => /lib/libcrypto.so.3 (0x280fe000)
>         libcrypt.so.2 => /lib/libcrypt.so.2 (0x28208000)
>         libcom_err.so.2 => /usr/lib/libcom_err.so.2 (0x28221000)
>         libldap.so.2 => /usr/local/lib/libldap.so.2 (0x28223000)
>         liblber.so.2 => /usr/local/lib/liblber.so.2 (0x28254000)
>         libc.so.5 => /lib/libc.so.5 (0x28260000)
>         libsasl2.so.2 => /usr/local/lib/libsasl2.so.2 (0x28337000)
>         libssl.so.3 => /usr/local/lib/libssl.so.3 (0x2834a000)
>         libcrypto.so.3 => /usr/local/lib/libcrypto.so.3 (0x2837b000)
> 
> It only complained about libldap.so.2, so I would guess kerberos is
> using the -rpath for the others?


Oh, you must be using `WITH_OPENLDAP'--- an option that I did not even
realize was available in the base system until I looked just now :-)

Yes, I believe the build is broken and I will correct it after the
code freeze.  In the meantime, you might try the following patch and
rebuild the KDC (`make clean' first).

Cheers,
-- 
Jacques Vidrine   NTT/Verio SME      FreeBSD UNIX       Heimdal
nectar_at_celabo.org jvidrine_at_verio.net nectar_at_freebsd.org nectar_at_kth.se


Index: kerberos5/Makefile.inc
===================================================================
RCS file: /home/ncvs/src/kerberos5/Makefile.inc,v
retrieving revision 1.19
diff -c -r1.19 Makefile.inc
*** kerberos5/Makefile.inc	18 Jul 2003 13:21:55 -0000	1.19
--- kerberos5/Makefile.inc	1 Dec 2003 18:21:23 -0000
***************
*** 16,22 ****
  OPENLDAPBASE?=	/usr/local
  LDAPLIBS=-lldap -llber
  LDAPCFLAGS=-I${OPENLDAPBASE}/include -DOPENLDAP=1
! LDAPLDADD=-L${OPENLDAPBASE}/lib ${LDAPLIBS}
  .endif
  
  .if exists(${.OBJDIR}/../../include)
--- 16,22 ----
  OPENLDAPBASE?=	/usr/local
  LDAPLIBS=-lldap -llber
  LDAPCFLAGS=-I${OPENLDAPBASE}/include -DOPENLDAP=1
! LDAPLDADD=-L${OPENLDAPBASE}/lib -Wl,-rpath,${OPENLDAPBASE}/lib ${LDAPLIBS}
  .endif
  
  .if exists(${.OBJDIR}/../../include)