RE: gssapi32.dll
Hi Jeffery, On Fri, 8 May 2015, Jeffery Dowell wrote: > > Just to close the loop on this one. We found that the conflicting DLL > (Krb5_32.dl) was put into C:\windows\sysWOW64 by a Library program > called ALEPH. Apparently it is a somewhat commonly used Library system > so this knowledge might help others who run into similar issues. Thank you for tracking it down and reporting back; it's great to have a full understanding of what's going on. -Ben Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
RE: gssapi32.dll
Just to close the loop on this one. We found that the conflicting DLL (Krb5_32.dl) was put into C:\windows\sysWOW64 by a Library program called ALEPH. Apparently it is a somewhat commonly used Library system so this knowledge might help others who run into similar issues. Jeffery -Original Message- From: Jeffrey Altman [mailto:jalt...@secure-endpoints.com] Sent: Monday, May 4, 2015 1:51 PM To: Jeffery Dowell; Kerberos@mit.edu Subject: Re: gssapi32.dll On 5/1/2015 3:32 PM, Jeffery Dowell wrote: > Here are the properties on the file: > > Krb5_32.dll > Kerberos v5 - MIT GSS / Kerberos v5 distribution > Version 1.2.1.0 > Product Name: MIT Kerberos v5 > Size: 372KB > Date modified: 10/17/2009 This is really old. It predates KFW 3.0. > It is actually found in C:\windows\sysWOW64 on very few of our computers. SysWOW64 is the directory used to hold files the were written to System32 by 32-bit processes on 64-bit Windows. > The ones that do have the file in that directory had the error message. That makes sense because the DLL is in the search path and gssapi32.dll is not linked to krb5_32.dll with an assembly manifest. Therefore, the first matching file on the PATH will be used. Jeffrey Altman Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
Re: gssapi32.dll
On 5/1/2015 3:32 PM, Jeffery Dowell wrote: > Here are the properties on the file: > > Krb5_32.dll > Kerberos v5 - MIT GSS / Kerberos v5 distribution > Version 1.2.1.0 > Product Name: MIT Kerberos v5 > Size: 372KB > Date modified: 10/17/2009 This is really old. It predates KFW 3.0. > It is actually found in C:\windows\sysWOW64 on very few of our computers. SysWOW64 is the directory used to hold files the were written to System32 by 32-bit processes on 64-bit Windows. > The ones that do have the file in that directory had the error message. That makes sense because the DLL is in the search path and gssapi32.dll is not linked to krb5_32.dll with an assembly manifest. Therefore, the first matching file on the PATH will be used. Jeffrey Altman smime.p7s Description: S/MIME Cryptographic Signature Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
RE: gssapi32.dll
Here are the properties on the file: Krb5_32.dll Kerberos v5 - MIT GSS / Kerberos v5 distribution Version 1.2.1.0 Product Name: MIT Kerberos v5 Size: 372KB Date modified: 10/17/2009 It is actually found in C:\windows\sysWOW64 on very few of our computers. The ones that do have the file in that directory had the error message. ___ Jeffery Dowell CDSS – OIT Duke University -Original Message- From: Jeffrey Altman [mailto:jalt...@secure-endpoints.com] Sent: Thursday, April 30, 2015 6:15 PM To: Jeffery Dowell; Kerberos@mit.edu Subject: Re: gssapi32.dll On 4/29/2015 12:23 PM, Jeffery Dowell wrote: > > After much testing with the Process Mon tools I found that there is one > competing DLL that causes the error on all computers affected. > > C:\Windows\SysWOW64\krb5_32.dll MIT KFW doesn't install into SYSTEM32. What properties are listed when you view this DLL with the Explorer Shell Properties dialog? Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
Re: gssapi32.dll
On 4/29/2015 12:23 PM, Jeffery Dowell wrote: > > After much testing with the Process Mon tools I found that there is one > competing DLL that causes the error on all computers affected. > > C:\Windows\SysWOW64\krb5_32.dll MIT KFW doesn't install into SYSTEM32. What properties are listed when you view this DLL with the Explorer Shell Properties dialog? smime.p7s Description: S/MIME Cryptographic Signature Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
RE: gssapi32.dll
All - In regard to the error: SncPDLInit()==SNCERR_INIT Unable to load GSS-API DLL named "C:\Program Files (x86)\MIT\Kerberos\bin\gssapi32.dll Error 182 = "The operating system cannot run C:\Program Files(x86)\MIT\Keberos\bin\gssapi32.dll" After much testing with the Process Mon tools I found that there is one competing DLL that causes the error on all computers affected. C:\Windows\SysWOW64\krb5_32.dll This version must have been left behind by an old install or some other program. Once renamed SAP opened up normally. Thanks to Ben and Jeffrey for their assistance and insight. -Original Message- From: Benjamin Kaduk [mailto:ka...@mit.edu] Sent: Tuesday, April 21, 2015 9:23 PM To: Jeffery Dowell Cc: Kerberos@mit.edu Subject: RE: gssapi32.dll Hi Jeffery, On Tue, 21 Apr 2015, Jeffery Dowell wrote: > Ben - > > I used dependency walker to view the dependencies of gssapi32.dll (in > MIT folder) on both a working install and a nonfunctional install. > Both showed various errors which were nearly identical. Thank you for doing this work, I really appreciate it. > Only this DLL was different and missing on the nonfunctional install: > API-MS-WIN-APPMODEL-RUNTIME-L1-1-0.DLL > The rest of the messages below were the same. > ___ > Error: At least one module has an unresolved import due to a missing export > function in an implicitly dependent module. > Error: Modules with different CPU types were found. > Warning: At least one delay-load dependency module was not found. > Warning: At least one module has an unresolved import due to a missing export > function in a delay-load dependent module. > > API-MS-WIN-APPMODEL-RUNTIME-L1-1-0.DLL > API-MS-WIN-CORE-WINRT-ERROR-L1-1-0.DLL > API-MS-WIN-CORE-WINRT-L1-1-0.DLL > API-MS-WIN-CORE-WINRT-ROBUFFER-L1-1-0.DLL > API-MS-WIN-CORE-WINRT-STRING-L1-1-0.DLL > API-MS-WIN-SHCORE-SCALING-L1-1-1.DLL > DCOMP.DLL > IESHIMS.DLL Interestingly, google results for the API-MS-WIN-APPMODEL-RUNTIME-L1-1-0.DLL search brings up a stackoverflow page claiming that the tool is a bit out of date and reports false positives for these libraries (http://stackoverflow.com/questions/17023419/win-7-64-bit-dll-problems) :( > ___ > > Also, I installed Microsoft Visual C++ Redistributables for 2005, > 2008, 2010, 2012 in each of their 32bit and 64bit varieties. > > Alas the error still persists and has appeared on a couple more > computers as the installation efforts continue. Are you able to share a list of the software installed on the affected machines? (I mostly expect not, but it could give guidance into potential library conflicts.) > I installed a totally new Win7 with only SP1 (no software, no patches) > and the install worked fine. Could it be that some other software is > overwriting and changing an important version of DLL? Fascinating. I suppose that probably holds for SP1 with windows updates, but it might be worth verifying. The first thing that comes to mind would be WSHELP32.dll, a DNS helper that is installed with KfW. My notes from dumpbin.exe say that the recursive dependencies of gssapi32.dll (not including libraries installed with KfW) are: ADVAPI32.dll, DNSAPI.dll, GDI32.dll, KERNEL32.dll, SHELL32.dll, Secur32.dll, USER32.dll, and WS2_32.dll (in addition to the C runtime). ADVAPI32.dll and Secur32.dll stand out as being listed for delayed loading (which may match your dependency walker output). It's probably worth checking the version/size/etc on those libraries between the working and non-working machines. Thank you for putting so much time into this; I know how frustrating it can be. -Ben Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
Re: gssapi32.dll
>> For SAP you need a special gssapi32.dll from SAP, not that from the >> MIT Kerberos client! > > That is not correct. The SAP SNC layer is quite flexible, and can cope > with an external gssapi32.dll directly (such as the one in KfW), as well > as a few other libraries. I'm sorry about my wrong information, that's what a consultant told us during implementation of SAP SSO a few years ago. But today, I got SAP SSO running with MIT gssapi32.dll too! Thanks Meike Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
Re: gssapi32.dll
On 4/21/2015 9:22 PM, Benjamin Kaduk wrote: > Interestingly, google results for the > API-MS-WIN-APPMODEL-RUNTIME-L1-1-0.DLL search brings up a stackoverflow > page claiming that the tool is a bit out of date and reports false > positives for these libraries > (http://stackoverflow.com/questions/17023419/win-7-64-bit-dll-problems) :( Don't believe everything you read on stackoverflow :-) Depends.exe does not load libraries using the same search paths that would be used by an application. Application search paths can be altered due to manifests, LoadLibraryEx() options, etc. It is therefore possible for gssapi32.dll to load perfectly fine for one process and not for another. It is also quite possible that the KFW DLLs do not have the proper manifests to ensure that the dependencies are found. One approach you can use to identify which DLL is not being located and how it is being search for is to use SysInternals Process Monitor. Set the filter to be the name of the process that is going to fail to load gssapi32.dll. After the failure occurs search from the end of the trace to find the last DLL before the process exits that cannot be found. If you install Debugging Tools for Windows and configure Process Monitor to use it, Process Monitor will capture stack traces for each event and you can use that to identify whether the failure is due to the linker or a LoadLibrary API call. Process Monitor will also show which DLL is being loaded. Since KFW is not built as an assembly there is no guarantee that the correct DLLs are being loaded. It is possible that non-KFW DLLs with the same file names are interfering. There are commercial applications that ship forked copies of KFW DLLs. The ones that come to mind are SSH, FTP and Calendar applications. Jeffrey Altman smime.p7s Description: S/MIME Cryptographic Signature Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
RE: gssapi32.dll
Hi Jeffery, On Tue, 21 Apr 2015, Jeffery Dowell wrote: > Ben - > > I used dependency walker to view the dependencies of gssapi32.dll (in > MIT folder) on both a working install and a nonfunctional install. Both > showed various errors which were nearly identical. Thank you for doing this work, I really appreciate it. > Only this DLL was different and missing on the nonfunctional install: > API-MS-WIN-APPMODEL-RUNTIME-L1-1-0.DLL > The rest of the messages below were the same. > ___ > Error: At least one module has an unresolved import due to a missing export > function in an implicitly dependent module. > Error: Modules with different CPU types were found. > Warning: At least one delay-load dependency module was not found. > Warning: At least one module has an unresolved import due to a missing export > function in a delay-load dependent module. > > API-MS-WIN-APPMODEL-RUNTIME-L1-1-0.DLL > API-MS-WIN-CORE-WINRT-ERROR-L1-1-0.DLL > API-MS-WIN-CORE-WINRT-L1-1-0.DLL > API-MS-WIN-CORE-WINRT-ROBUFFER-L1-1-0.DLL > API-MS-WIN-CORE-WINRT-STRING-L1-1-0.DLL > API-MS-WIN-SHCORE-SCALING-L1-1-1.DLL > DCOMP.DLL > IESHIMS.DLL Interestingly, google results for the API-MS-WIN-APPMODEL-RUNTIME-L1-1-0.DLL search brings up a stackoverflow page claiming that the tool is a bit out of date and reports false positives for these libraries (http://stackoverflow.com/questions/17023419/win-7-64-bit-dll-problems) :( > ___ > > Also, I installed Microsoft Visual C++ Redistributables for 2005, 2008, > 2010, 2012 in each of their 32bit and 64bit varieties. > > Alas the error still persists and has appeared on a couple more > computers as the installation efforts continue. Are you able to share a list of the software installed on the affected machines? (I mostly expect not, but it could give guidance into potential library conflicts.) > I installed a totally new Win7 with only SP1 (no software, no patches) > and the install worked fine. Could it be that some other software is > overwriting and changing an important version of DLL? Fascinating. I suppose that probably holds for SP1 with windows updates, but it might be worth verifying. The first thing that comes to mind would be WSHELP32.dll, a DNS helper that is installed with KfW. My notes from dumpbin.exe say that the recursive dependencies of gssapi32.dll (not including libraries installed with KfW) are: ADVAPI32.dll, DNSAPI.dll, GDI32.dll, KERNEL32.dll, SHELL32.dll, Secur32.dll, USER32.dll, and WS2_32.dll (in addition to the C runtime). ADVAPI32.dll and Secur32.dll stand out as being listed for delayed loading (which may match your dependency walker output). It's probably worth checking the version/size/etc on those libraries between the working and non-working machines. Thank you for putting so much time into this; I know how frustrating it can be. -Ben Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
RE: gssapi32.dll
Ben - I used dependency walker to view the dependencies of gssapi32.dll (in MIT folder) on both a working install and a nonfunctional install. Both showed various errors which were nearly identical. Only this DLL was different and missing on the nonfunctional install: API-MS-WIN-APPMODEL-RUNTIME-L1-1-0.DLL The rest of the messages below were the same. ___ Error: At least one module has an unresolved import due to a missing export function in an implicitly dependent module. Error: Modules with different CPU types were found. Warning: At least one delay-load dependency module was not found. Warning: At least one module has an unresolved import due to a missing export function in a delay-load dependent module. API-MS-WIN-APPMODEL-RUNTIME-L1-1-0.DLL API-MS-WIN-CORE-WINRT-ERROR-L1-1-0.DLL API-MS-WIN-CORE-WINRT-L1-1-0.DLL API-MS-WIN-CORE-WINRT-ROBUFFER-L1-1-0.DLL API-MS-WIN-CORE-WINRT-STRING-L1-1-0.DLL API-MS-WIN-SHCORE-SCALING-L1-1-1.DLL DCOMP.DLL IESHIMS.DLL ___ Also, I installed Microsoft Visual C++ Redistributables for 2005, 2008, 2010, 2012 in each of their 32bit and 64bit varieties. Alas the error still persists and has appeared on a couple more computers as the installation efforts continue. I installed a totally new Win7 with only SP1 (no software, no patches) and the install worked fine. Could it be that some other software is overwriting and changing an important version of DLL? Thanks, Jeffery -Original Message- From: Benjamin Kaduk [mailto:ka...@mit.edu] Sent: Tuesday, April 21, 2015 4:38 PM To: Jeffery Dowell Cc: Kerberos@mit.edu Subject: RE: gssapi32.dll On Tue, 21 Apr 2015, Jeffery Dowell wrote: > Thanks Ben, This is most helpful and I am trying multiple variations > on my test systems. I haven't had any luck as of yet on a fix. I just > joined the list yesterday and missed out on the prior conversation > about this topic. I don't see a way to access list archives so if > anyone has access to this prior topic and can forward, it would be > most appreciated. The subject of concern is: The list is archived at http://mailman.mit.edu/pipermail/kerberos/ , though the web view is not very searchable. (Downloading the full raw archive will get something that a local MUA should be able to search, though.) > SncPDLINIT()==SNCERR_INIT > Unable to load GSS-API DLL > Error 182 = "The operating system cannot run C:\Program Files > (x86)\MIT\Kerberos\bin\gssapi32.dll > Return Code -1 > System Call LoadLibrary I did a bit of poking with dumpbin.exe /dependents on my local machine, but nothing is standing out as obviously a candidate for being missing, other than the C runtime. My build is a debug build, so I have msvcr100d.dll, but you probably have a non-debug build. Can you try using Dependency Walker (http://www.dependencywalker.com/) to see if there are missing dependencies which could explain the LoadLibrary failure? -Ben Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
Re: gssapi32.dll
On Tue, 21 Apr 2015, Meike Stone wrote: > Hello Jeffery, > > 2015-04-20 19:38 GMT+02:00 Jeffery Dowell : > > Hello, > > > > I am currently deploying the MIT Kerberos for Windows 4.01 client (32bit) > > for use in our Kerberos environment. Specifically, The Kerberos client is > > used to provide credentials to SAP software. While the installation is > > going well on many computers, I am having a reoccurring, currently > > unsolvable, problem on several. Reboots nor reinstalls help the issue. The > > error has occurred on both 32 bit and 64 bit versions of Windows 7. The > > install of MIT Kerberos goes through without error. It seems to be the > > availability of the gssapi32 module specifically that causes the issue. I > > am attaching a screenshot of the issue. Has anyone encountered this error > > before? > > > At the moment, we try the same, working on a SSO for Workstations > (Wndows 7) that are not member in the AD domain! > We got the MIT-Kerberos Client running on Windows 7. > So what client OS and gssapi32.dll do you use? > > For SAP you need a special gssapi32.dll from SAP, not that from the > MIT Kerberos client! That is not correct. The SAP SNC layer is quite flexible, and can cope with an external gssapi32.dll directly (such as the one in KfW), as well as a few other libraries. -Ben > You need a SAP account to download > https://websmp230.sap-ag.de/sap%28bD1lbiZjPTAwMQ==%29/bc/bsp/spn/sapnotes/index2.htm?numm=352295 > or maybe look here: > http://solveissue.com/note?id=352295 > (no warranty if virus free!) > > Maybe it helps > > Meike > > > Kerberos mailing list Kerberos@mit.edu > https://mailman.mit.edu/mailman/listinfo/kerberos > Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
RE: gssapi32.dll
On Tue, 21 Apr 2015, Jeffery Dowell wrote: > Thanks Ben, This is most helpful and I am trying multiple variations on > my test systems. I haven't had any luck as of yet on a fix. I just > joined the list yesterday and missed out on the prior conversation about > this topic. I don't see a way to access list archives so if anyone has > access to this prior topic and can forward, it would be most > appreciated. The subject of concern is: The list is archived at http://mailman.mit.edu/pipermail/kerberos/ , though the web view is not very searchable. (Downloading the full raw archive will get something that a local MUA should be able to search, though.) > SncPDLINIT()==SNCERR_INIT > Unable to load GSS-API DLL > Error 182 = "The operating system cannot run C:\Program Files > (x86)\MIT\Kerberos\bin\gssapi32.dll > Return Code -1 > System Call LoadLibrary I did a bit of poking with dumpbin.exe /dependents on my local machine, but nothing is standing out as obviously a candidate for being missing, other than the C runtime. My build is a debug build, so I have msvcr100d.dll, but you probably have a non-debug build. Can you try using Dependency Walker (http://www.dependencywalker.com/) to see if there are missing dependencies which could explain the LoadLibrary failure? -Ben Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
Re: gssapi32.dll
Hello Jeffery, 2015-04-20 19:38 GMT+02:00 Jeffery Dowell : > Hello, > > I am currently deploying the MIT Kerberos for Windows 4.01 client (32bit) for > use in our Kerberos environment. Specifically, The Kerberos client is used to > provide credentials to SAP software. While the installation is going well on > many computers, I am having a reoccurring, currently unsolvable, problem on > several. Reboots nor reinstalls help the issue. The error has occurred on > both 32 bit and 64 bit versions of Windows 7. The install of MIT Kerberos > goes through without error. It seems to be the availability of the gssapi32 > module specifically that causes the issue. I am attaching a screenshot of the > issue. Has anyone encountered this error before? At the moment, we try the same, working on a SSO for Workstations (Wndows 7) that are not member in the AD domain! We got the MIT-Kerberos Client running on Windows 7. So what client OS and gssapi32.dll do you use? For SAP you need a special gssapi32.dll from SAP, not that from the MIT Kerberos client! You need a SAP account to download https://websmp230.sap-ag.de/sap%28bD1lbiZjPTAwMQ==%29/bc/bsp/spn/sapnotes/index2.htm?numm=352295 or maybe look here: http://solveissue.com/note?id=352295 (no warranty if virus free!) Maybe it helps Meike Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
RE: gssapi32.dll
Thanks Ben, This is most helpful and I am trying multiple variations on my test systems. I haven't had any luck as of yet on a fix. I just joined the list yesterday and missed out on the prior conversation about this topic. I don't see a way to access list archives so if anyone has access to this prior topic and can forward, it would be most appreciated. The subject of concern is: SncPDLINIT()==SNCERR_INIT Unable to load GSS-API DLL Error 182 = "The operating system cannot run C:\Program Files (x86)\MIT\Kerberos\bin\gssapi32.dll Return Code -1 System Call LoadLibrary Thanks, Jeffery -Original Message- From: Benjamin Kaduk [mailto:ka...@mit.edu] Sent: Monday, April 20, 2015 5:11 PM To: Jeffery Dowell Cc: Kerberos@mit.edu Subject: Re: gssapi32.dll On Mon, 20 Apr 2015, Jeffery Dowell wrote: > Hello, > > I am currently deploying the MIT Kerberos for Windows 4.01 client > (32bit) for use in our Kerberos environment. Specifically, The > Kerberos client is used to provide credentials to SAP software. While > the installation is going well on many computers, I am having a > reoccurring, currently unsolvable, problem on several. Reboots nor > reinstalls help the issue. The error has occurred on both 32 bit and > 64 bit versions of Windows 7. The install of MIT Kerberos goes through > without error. It seems to be the availability of the gssapi32 module > specifically that causes the issue. I am attaching a screenshot of the > issue. Has anyone encountered this error before? > > > Thanks for any assistance you can provide. > > > Here are a few highlights from the attached screenshot: > > SncPDLINIT()==SNCERR_INIT > Unable to load GSS-API DLL > Error 182 = "The operating system cannot run C:\Program Files > (x86)\MIT\Kerberos\bin\gssapi32.dll > Return Code -1 > System Call LoadLibrary It seems that gssapi32.dll has some library dependencies which are not included by the installer. If there are other applications installed on the system which also need those support libraries, the needed libraries will be present and consumers of gssapi32.dll will work fine. If not, then the errors such as this become visible. I do not have the old mail from when this issue was previously raised right at hand, but it looks like at least msvcr71.dll is likely to be missing, and potentially other such support libraries as well. You should probably investigate the Microsoft Visual C++ 2010 Redistributable Package (e.g., https://www.microsoft.com/en-us/download/details.aspx?id=) and see if that can provide the needed libraries. -Ben Kaduk Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
Re: gssapi32.dll
On Mon, 20 Apr 2015, Jeffery Dowell wrote: > Hello, > > I am currently deploying the MIT Kerberos for Windows 4.01 client > (32bit) for use in our Kerberos environment. Specifically, The Kerberos > client is used to provide credentials to SAP software. While the > installation is going well on many computers, I am having a reoccurring, > currently unsolvable, problem on several. Reboots nor reinstalls help > the issue. The error has occurred on both 32 bit and 64 bit versions of > Windows 7. The install of MIT Kerberos goes through without error. It > seems to be the availability of the gssapi32 module specifically that > causes the issue. I am attaching a screenshot of the issue. Has anyone > encountered this error before? > > > Thanks for any assistance you can provide. > > > Here are a few highlights from the attached screenshot: > > SncPDLINIT()==SNCERR_INIT > Unable to load GSS-API DLL > Error 182 = "The operating system cannot run C:\Program Files > (x86)\MIT\Kerberos\bin\gssapi32.dll > Return Code -1 > System Call LoadLibrary It seems that gssapi32.dll has some library dependencies which are not included by the installer. If there are other applications installed on the system which also need those support libraries, the needed libraries will be present and consumers of gssapi32.dll will work fine. If not, then the errors such as this become visible. I do not have the old mail from when this issue was previously raised right at hand, but it looks like at least msvcr71.dll is likely to be missing, and potentially other such support libraries as well. You should probably investigate the Microsoft Visual C++ 2010 Redistributable Package (e.g., https://www.microsoft.com/en-us/download/details.aspx?id=) and see if that can provide the needed libraries. -Ben Kaduk Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
gssapi32.dll
Hello, I am currently deploying the MIT Kerberos for Windows 4.01 client (32bit) for use in our Kerberos environment. Specifically, The Kerberos client is used to provide credentials to SAP software. While the installation is going well on many computers, I am having a reoccurring, currently unsolvable, problem on several. Reboots nor reinstalls help the issue. The error has occurred on both 32 bit and 64 bit versions of Windows 7. The install of MIT Kerberos goes through without error. It seems to be the availability of the gssapi32 module specifically that causes the issue. I am attaching a screenshot of the issue. Has anyone encountered this error before? Thanks for any assistance you can provide. Here are a few highlights from the attached screenshot: SncPDLINIT()==SNCERR_INIT Unable to load GSS-API DLL Error 182 = "The operating system cannot run C:\Program Files (x86)\MIT\Kerberos\bin\gssapi32.dll Return Code -1 System Call LoadLibrary ___ Jeffery Dowell CDSS - OIT Duke University Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
Re: gssapi32.dll 1.5
>>>>> "Olivier" == Olivier Brunet <[EMAIL PROTECTED]> writes:
Olivier> oken when
>> > Negotiate auth is requested).
>> >
>> > So put simply, is there a way to have gssapi32.dll 1.5 and
>> supportings > libs pre-built for windows ? Or do I have to
>> build it myself ?
>>
>> KFW 3.1 has to be finished first. Then I will look to find the
>> time to work on the 1.5 kerberos 5 libraries on Windows in
>> order to add functionality that was implemented in 1.5 for
>> POSIX but not for Windows. The 1.5 libraries will build on
>> Windows but they have not been thoroughly tested and features
>> such as plug-in support is non-existent.
Olivier> As I never built the MIT libs it may sound a stupid
Olivier> question but do I have a chance to succesfully build on
Olivier> windows the gssapi 1.5 with SPNEGO support (and of course
Olivier> krb5) without this missing feature ?
The SPNEGO code in 1.5 does not require plugin support.
You may well be able to build based on the 1.5 sources. It will
probably require work and you will probably find bugs.
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
gssapi32.dll 1.5
Hi all, I've just installed KfW 3.1 (beta) and noticed the shipped gssapi32.dll is 1.4.3.1 (as all krb5 related dll). So I guess KfW is built with krb5 1.4.3. I'm interested in the SPNEGO support added, if I understood correctl,y in the latest gssapi (release 1.5) in order to make my windows firefox talks correctly spnego (actually it sends a raw krb5 mech token when Negotiate auth is requested). So put simply, is there a way to have gssapi32.dll 1.5 and supportings libs pre-built for windows ? Or do I have to build it myself ? Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
Re: gssapi32.dll 1.5
oken when > > Negotiate auth is requested). > > > > So put simply, is there a way to have gssapi32.dll 1.5 and supportings > > libs pre-built for windows ? Or do I have to build it myself ? > > KFW 3.1 has to be finished first. Then I will look to find the time to > work on the 1.5 kerberos 5 libraries on Windows in order to add > functionality that was implemented in 1.5 for POSIX but not for Windows. > The 1.5 libraries will build on Windows but they have not been > thoroughly tested and features such as plug-in support is non-existent. As I never built the MIT libs it may sound a stupid question but do I have a chance to succesfully build on windows the gssapi 1.5 with SPNEGO support (and of course krb5) without this missing feature ? Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
Re: gssapi32.dll 1.5
Olivier Brunet wrote: > Hi all, > > I've just installed KfW 3.1 (beta) and noticed the shipped gssapi32.dll > is 1.4.3.1 (as all krb5 related dll). So I guess KfW is built with krb5 > 1.4.3. > > I'm interested in the SPNEGO support added, if I understood correctl,y > in the latest gssapi (release 1.5) in order to make my windows firefox > talks correctly spnego (actually it sends a raw krb5 mech token when > Negotiate auth is requested). > > So put simply, is there a way to have gssapi32.dll 1.5 and supportings > libs pre-built for windows ? Or do I have to build it myself ? KFW 3.1 has to be finished first. Then I will look to find the time to work on the 1.5 kerberos 5 libraries on Windows in order to add functionality that was implemented in 1.5 for POSIX but not for Windows. The 1.5 libraries will build on Windows but they have not been thoroughly tested and features such as plug-in support is non-existent. Jeffrey Altman Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
