problem with nss_ldap

[Hartmut Brandt]

On Sun, 15 Mar 2009, Tom McLaughlin wrote:

TM>Hartmut Brandt wrote:
TM>> On Tue, 10 Mar 2009, Tom McLaughlin wrote:
TM>> 
TM>> TM>Doug Rabson wrote:
TM>> 
TM>> [snip alot]
TM>> 
TM>> TM>Okay, attached is a patch to nss_ldap.  On -CURRENT I have changed the
TM>> TM>CONFIGURE_ARG to use "--enable-configurable-krb5-ccname-gssapi" instead
TM>> TM>of "--enable-configurable-krb5-ccname-env" which fixes Harti's initial
TM>> TM>problem with apps like cron failing.  It will also make nss_ldap link
TM>> TM>against libgssapi and libgssapi_krb5.  I still have one lingering issue
TM>> TM>though at least things work.
TM>> TM>
TM>> TM>[tom at freebsd-8-amd64 tom]$ getent passwd tom
TM>> TM>dlopen: /usr/lib/libgssapi_spnego.so.10: Undefined symbol
TM>> TM>"GSS_C_NT_HOSTBASED_SERVICE"
TM>> TM>tom:x:10001:10001:Tom McLaughlin:/home/tom:/bin/sh
TM>> 
TM>> Ok. This works so far. I get the same error. But I have the original
TM>> problem
TM>> again - cron, sendmail and sshd seem not to use the hostcreds. I still need
TM>> a
TM>> link from /var/tmp/hostcreds to /tmp/krb5cc_0 to make sshd to work. The
TM>> build
TM>> of nss_ldap seems to find all the necessary files: sasl.h, gssapi.h,
TM>> gssapi_krb5.h.
TM>> 
TM>
TM>What's the machine's OSVERSION?  I used the OSVERSION on my box when checking
TM>which method to use for setting the credentials cache.  I didn't feel like
TM>trying to figure out what the OSVERSION was when Heimdal was updated.

Looks like the Makefile checks for >= 800064. My sys/param.h has 800061.

Unfortunately I'm out of town until at least sunday so I can do more tests 
only next week.

harti

TM>
TM>tom
TM>
TM>> The thing I cannot understand is: why do normal applications find the
TM>> hostcreds,
TM>> but the daemons not? What do they differently?
TM>> 
TM>> harti
TM>
TM>
TM>