On Sun, 15 Mar 2009, Tom McLaughlin wrote: TM>Hartmut Brandt wrote: TM>> On Tue, 10 Mar 2009, Tom McLaughlin wrote: TM>> TM>> TM>Doug Rabson wrote: TM>> TM>> [snip alot] TM>> TM>> TM>Okay, attached is a patch to nss_ldap. On -CURRENT I have changed the TM>> TM>CONFIGURE_ARG to use "--enable-configurable-krb5-ccname-gssapi" instead TM>> TM>of "--enable-configurable-krb5-ccname-env" which fixes Harti's initial TM>> TM>problem with apps like cron failing. It will also make nss_ldap link TM>> TM>against libgssapi and libgssapi_krb5. I still have one lingering issue TM>> TM>though at least things work. TM>> TM> TM>> TM>[tom_at_freebsd-8-amd64 tom]$ getent passwd tom TM>> TM>dlopen: /usr/lib/libgssapi_spnego.so.10: Undefined symbol TM>> TM>"GSS_C_NT_HOSTBASED_SERVICE" TM>> TM>tom:x:10001:10001:Tom McLaughlin:/home/tom:/bin/sh TM>> TM>> Ok. This works so far. I get the same error. But I have the original TM>> problem TM>> again - cron, sendmail and sshd seem not to use the hostcreds. I still need TM>> a TM>> link from /var/tmp/hostcreds to /tmp/krb5cc_0 to make sshd to work. The TM>> build TM>> of nss_ldap seems to find all the necessary files: sasl.h, gssapi.h, TM>> gssapi_krb5.h. TM>> TM> TM>What's the machine's OSVERSION? I used the OSVERSION on my box when checking TM>which method to use for setting the credentials cache. I didn't feel like TM>trying to figure out what the OSVERSION was when Heimdal was updated. Looks like the Makefile checks for >= 800064. My sys/param.h has 800061. Unfortunately I'm out of town until at least sunday so I can do more tests only next week. harti TM> TM>tom TM> TM>> The thing I cannot understand is: why do normal applications find the TM>> hostcreds, TM>> but the daemons not? What do they differently? TM>> TM>> harti TM> TM> TM>Received on Mon Mar 16 2009 - 07:56:04 UTC
This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:39:44 UTC