Re: (Fwd) Problem with Authen::Krb4 under mod_perl (fwd)

2000-08-15 Thread Doug MacEachern

On Wed, 2 Aug 2000, Jeff Horwitz wrote:

 [forwarded just in case anyone else is having similar problems]
 
 -- Forwarded message --
 Date: Wed, 2 Aug 2000 10:45:35 -0400 (EDT)
 From: Jeff Horwitz [EMAIL PROTECTED]
 To: Dave Edsall - The Tauminator [EMAIL PROTECTED]
 Subject: Re: (Fwd) Problem with Authen::Krb4 under mod_perl 
 
 First, thank you for responding and responding so quickly. The answer to 
  your question is yes, we are using open_ssl so that we can encrypt the 
  password being sent to the web server. But, if there are name clashes, why 
  would the script work under mod_cgi and not mod_perl? We use ssl in both cases.
 
 mod_cgi simply forks off separate processes.  with mod_perl, the scripts
 are interpreted and run in a Perl interpreter within apache.  Krb4.so is
 loaded just like any other shared library, and will conflict with apache
 if duplicate symbols exist.
 
Is there a way around the name clash problem?
 
 yes.  build Authen::Krb4 with KTH Kerberos, available at
 http://www.pdc.kth.se/kth-krb.  it's a bit cleaner wrt the DES library,
 and it's much easier to build as well!  :)

you can also try the -Bsymbolic linker flag, which is supposed to force
Krb5.so so use the symbols in the libraries it linked against, rather than
those in the main program.  or try the approach below to lump the archives
directly into the .so, but change ssl stuff to krb stuff :)

--- Makefile.PL~Sat Jul 31 00:59:12 1999
+++ Makefile.PL Tue Aug  1 20:18:32 2000
@@ -61,12 +61,13 @@
 # See lib/ExtUtils/MakeMaker.pm for details of how to influence
 # the contents of the Makefile that is written.
 WriteMakefile(
+'OBJECT' = "SSLeay.o $openssl_path/lib/libssl.a $openssl_path/lib/libcrypto.a",
 'NAME'= 'Net::SSLeay',
 'VERSION_FROM' = 'SSLeay.pm', # finds $VERSION
 'DEFINE'   = '', # e.g., '-DHAVE_SOMETHING' 
 'DISTNAME'  = 'Net_SSLeay.pm',
 'dist'  = { COMPRESS = 'gzip', SUFFIX = 'gz', },
-'LIBS' = ["-L$openssl_path -L$openssl_path/lib $libs"],
+#'LIBS'= ["-L$openssl_path -L$openssl_path/lib $libs"],
 
 ### Win32 build: uncommend LIBS above and edit LIBS below according to your
 ### 




Re: (Fwd) Problem with Authen::Krb4 under mod_perl (fwd)

2000-08-02 Thread Jeff Horwitz

[forwarded just in case anyone else is having similar problems]

-- Forwarded message --
Date: Wed, 2 Aug 2000 10:45:35 -0400 (EDT)
From: Jeff Horwitz [EMAIL PROTECTED]
To: Dave Edsall - The Tauminator [EMAIL PROTECTED]
Subject: Re: (Fwd) Problem with Authen::Krb4 under mod_perl 

First, thank you for responding and responding so quickly. The answer to 
 your question is yes, we are using open_ssl so that we can encrypt the 
 password being sent to the web server. But, if there are name clashes, why 
 would the script work under mod_cgi and not mod_perl? We use ssl in both cases.

mod_cgi simply forks off separate processes.  with mod_perl, the scripts
are interpreted and run in a Perl interpreter within apache.  Krb4.so is
loaded just like any other shared library, and will conflict with apache
if duplicate symbols exist.

   Is there a way around the name clash problem?

yes.  build Authen::Krb4 with KTH Kerberos, available at
http://www.pdc.kth.se/kth-krb.  it's a bit cleaner wrt the DES library,
and it's much easier to build as well!  :)

---
Jeff Horwitz E-mail: [EMAIL PROTECTED]
Manager of Systems OperationsPhone: (610) 627-4575
LaserLink.Net, Covad Communications  Web: http://www.laserlink.net

On Wed, 2 Aug 2000, Dave Edsall - The Tauminator wrote:

 
 are you using mod_ssl or SSL of any kind?  there are name clashes between
 the kerberos DES libraries and the SSL DES libraries that can cause
 kerberos to fail.
 
 
 
 
 
 Dave