ports/156787: mod_auth_kerb2 fails on undefined symbol with base kerberos

[Dan Mahoney]

>Number:         156787
>Category:       ports
>Synopsis:       mod_auth_kerb2 fails on undefined symbol with base kerberos
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue May 03 01:00:21 UTC 2011
>Closed-Date:
>Last-Modified:
>Originator:     Dan Mahoney
>Release:        FreeBSD 8.1-RELEASE amd64
>Organization:
ISC


>Environment:
System: FreeBSD bikeshed.isc.org 8.1-RELEASE FreeBSD 8.1-RELEASE #0: Mon Jul 19 02:36:49 UTC 2010 root at mason.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC amd64

>Description:

When building the mod_auth_kerb2 port, and attempting to use it, one gets the following error:

httpd: Syntax error on line 106 of /usr/local/etc/apache22/httpd.conf: Cannot load /usr/local/libexec/apache22/mod_auth_kerb.so into 
server: /usr/local/libexec/apache22/mod_auth_kerb.so: Undefined symbol "gsskrb5_register_acceptor_identity"

The error does NOT occur if you install /usr/ports/security/krb5 and setenv KRB5_HOME /usr/local

Note that this failure is at runtime, not at build or link-time.

>How-To-Repeat:

cd /usr/ports/www/mod_auth_kerb2
make install
apachectl restart

>Fix:

I've listed a workaround, but this really should work with the base OS, without having to drop a number of foreign kerberos binaries 
into /usr/local/*

>Release-Note:
>Audit-Trail:
>Unformatted: