Joerg Pulz wrote:
On Tue, 13 Jul 2010, Henrik /KaarPoSoft wrote:
Dear All,
I have a problem: ldapsearch results in "Segmentation fault" under
openldap-2.4.23 with cyrus-sasl-2.1.23.
[...]
Dear Henrik,
just a guess from my side.
You said, that you installed and configured Kerberos from packages (i
guess from ports or a prebuilt package).
Did you by any chance set HEIMDAL_HOME=/usr before building and
installing the kerberos port?
Did you set HEIMDAL_HOME to point to the place where the package/port
got installed (e.g. HEIMDAL_HOME=/usr/local) before building the
cyrus-sasl2 port?
Did you set HEIMDAL_HOME to anything at all? Please take a look at
${PORTSDIR}/security/cyrus-sasl2/Makefile to see the logic behind the
kerberos selection.
The valgrind and gdb output above shows that /usr/lib/libgssapi.so.10
is used at runtime which comes out of the FreeBSD base system not out
of your installed kerberos port/package. Maybe there is something
messed up that kerberos from ports/package was used during build of
cyrus-sasl2 but the base kerberos libs are used at runtime or vice versa.
In any case, this is just one thing i would double check before deeper
debugging.
Joerg, thank you very much for your input - most appreciated!
I simply installed heimdal with
pkg_add -r heimdal
I did not set HEIMDAL_HOME at any point.
"env" shows that HEIMDAL_HOME is not set.
So according to /usr/ports/security/cyrus-sasl2/Makefile I guess we
would have CONFIGURE_ARGS+=--enable-gssapi but no --with-gss_impl=heimdal
To be on the safe side, I tried
cd /usr/ports/security/cyrus-sasl2/
make clean
export HEIMDAL_HOME=/usr
make
(during make I noticed a few cc ... -DKRB5_HEIMDAL ...)
ldapsarch still coredumps with gss_init_sec_context () from
/usr/lib/libgssapi.so.10
I noticed that I have libgssapi's - no clue why:
srv02# ls /usr/lib/libgss*
/usr/lib/libgssapi.a /usr/lib/libgssapi_krb5.a
/usr/lib/libgssapi_krb5_p.a /usr/lib/libgssapi_ntlm.so.10
/usr/lib/libgssapi_spnego.a /usr/lib/libgssapi_spnego_p.a
/usr/lib/libgssapi.so /usr/lib/libgssapi_krb5.so
/usr/lib/libgssapi_ntlm.a /usr/lib/libgssapi_ntlm_p.a
/usr/lib/libgssapi_spnego.so
/usr/lib/libgssapi.so.10 /usr/lib/libgssapi_krb5.so.10
/usr/lib/libgssapi_ntlm.so /usr/lib/libgssapi_p.a
/usr/lib/libgssapi_spnego.so.10
srv02# ls /usr/local/lib/libgss*
/usr/local/lib/libgssapi.a /usr/local/lib/libgssapi.la
/usr/local/lib/libgssapi.so /usr/local/lib/libgssapi.so.2
Next I tried pkg_delete heimdal-1.0.1_1
and then
srv02# ls /usr/local/bin/k*
ls: No match.
srv02# ls /usr/bin/k*
/usr/bin/kadmin /usr/bin/kdump /usr/bin/keylogout /usr/bin/killall
/usr/bin/klist /usr/bin/krb5-config /usr/bin/ktrace
/usr/bin/kdestroy /usr/bin/keylogin /usr/bin/kgdb /usr/bin/kinit
/usr/bin/kpasswd /usr/bin/ksu /usr/bin/ktrdump
srv02# ls /usr/lib/libgss*
/usr/lib/libgssapi.a /usr/lib/libgssapi_krb5.a
/usr/lib/libgssapi_krb5_p.a /usr/lib/libgssapi_ntlm.so.10
/usr/lib/libgssapi_spnego.a /usr/lib/libgssapi_spnego_p.a
/usr/lib/libgssapi.so /usr/lib/libgssapi_krb5.so
/usr/lib/libgssapi_ntlm.a /usr/lib/libgssapi_ntlm_p.a
/usr/lib/libgssapi_spnego.so
/usr/lib/libgssapi.so.10 /usr/lib/libgssapi_krb5.so.10
/usr/lib/libgssapi_ntlm.so /usr/lib/libgssapi_p.a
/usr/lib/libgssapi_spnego.so.10
srv02# ls /usr/local/lib/libgss*
ls: No match.
so it would seem that the /usr/local heimdal is now gone, but some
heimdal is still left in /usr ?
looking at a different partition with a vanilla FreeBSD install I find
the same files in /usr/lib and /usr/bin.
maybe I did not have to install kerberos package at all ?
I will play a bit more with this, but any more input would still be
appreciated...
/Henrik
_______________________________________________
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"