Re: problem with nss_ldap

Hartmut Brandt wrote:
> On Tue, 10 Mar 2009, Tom McLaughlin wrote:
> 
> TM>Doug Rabson wrote:
> 
> [snip alot]
> 
> TM>Okay, attached is a patch to nss_ldap.  On -CURRENT I have changed the 
> TM>CONFIGURE_ARG to use "--enable-configurable-krb5-ccname-gssapi" instead 
> TM>of "--enable-configurable-krb5-ccname-env" which fixes Harti's initial 
> TM>problem with apps like cron failing.  It will also make nss_ldap link 
> TM>against libgssapi and libgssapi_krb5.  I still have one lingering issue 
> TM>though at least things work.
> TM>
> TM>[tom_at_freebsd-8-amd64 tom]$ getent passwd tom
> TM>dlopen: /usr/lib/libgssapi_spnego.so.10: Undefined symbol 
> TM>"GSS_C_NT_HOSTBASED_SERVICE"
> TM>tom:x:10001:10001:Tom McLaughlin:/home/tom:/bin/sh
> 
> Ok. This works so far. I get the same error. But I have the original problem
> again - cron, sendmail and sshd seem not to use the hostcreds. I still need a
> link from /var/tmp/hostcreds to /tmp/krb5cc_0 to make sshd to work. The build
> of nss_ldap seems to find all the necessary files: sasl.h, gssapi.h,
> gssapi_krb5.h.
> 

What's the machine's OSVERSION?  I used the OSVERSION on my box when 
checking which method to use for setting the credentials cache.  I 
didn't feel like trying to figure out what the OSVERSION was when 
Heimdal was updated.

tom

> The thing I cannot understand is: why do normal applications find the hostcreds,
> but the daemons not? What do they differently?
> 
> harti


-- 
| tmclaugh at sdf.lonestar.org                 tmclaugh at FreeBSD.org |
| FreeBSD                                       http://www.FreeBSD.org |