Re: problem with nss_ldap

On Mon, 16 Mar 2009, Hartmut Brandt wrote:

HB>On Sun, 15 Mar 2009, Tom McLaughlin wrote:
HB>
HB>TM>Hartmut Brandt wrote:
HB>TM>> On Tue, 10 Mar 2009, Tom McLaughlin wrote:
HB>TM>> 
HB>TM>> TM>Doug Rabson wrote:
HB>TM>> 
HB>TM>> [snip alot]
HB>TM>> 
HB>TM>> TM>Okay, attached is a patch to nss_ldap.  On -CURRENT I have changed the
HB>TM>> TM>CONFIGURE_ARG to use "--enable-configurable-krb5-ccname-gssapi" instead
HB>TM>> TM>of "--enable-configurable-krb5-ccname-env" which fixes Harti's initial
HB>TM>> TM>problem with apps like cron failing.  It will also make nss_ldap link
HB>TM>> TM>against libgssapi and libgssapi_krb5.  I still have one lingering issue
HB>TM>> TM>though at least things work.
HB>TM>> TM>
HB>TM>> TM>[tom_at_freebsd-8-amd64 tom]$ getent passwd tom
HB>TM>> TM>dlopen: /usr/lib/libgssapi_spnego.so.10: Undefined symbol
HB>TM>> TM>"GSS_C_NT_HOSTBASED_SERVICE"
HB>TM>> TM>tom:x:10001:10001:Tom McLaughlin:/home/tom:/bin/sh
HB>TM>> 
HB>TM>> Ok. This works so far. I get the same error. But I have the original
HB>TM>> problem
HB>TM>> again - cron, sendmail and sshd seem not to use the hostcreds. I still need
HB>TM>> a
HB>TM>> link from /var/tmp/hostcreds to /tmp/krb5cc_0 to make sshd to work. The
HB>TM>> build
HB>TM>> of nss_ldap seems to find all the necessary files: sasl.h, gssapi.h,
HB>TM>> gssapi_krb5.h.
HB>TM>> 
HB>TM>
HB>TM>What's the machine's OSVERSION?  I used the OSVERSION on my box when checking
HB>TM>which method to use for setting the credentials cache.  I didn't feel like
HB>TM>trying to figure out what the OSVERSION was when Heimdal was updated.
HB>
HB>Looks like the Makefile checks for >= 800064. My sys/param.h has 800061.
HB>
HB>Unfortunately I'm out of town until at least sunday so I can do more tests 
HB>only next week.

To reply to my own mail: changing the check in the Makefile to >= 800061 
makes things working. The only remaining thing is the missing symbol in 
gssapi_spnego.

harti