On 2010-06-02 18:56, Tim Judd wrote:
On 6/2/10, John<[email protected]>  wrote:
On 2010-05-20 23:34, Tim Judd wrote:
On 5/20/10, John<[email protected]>   wrote:
Hi list.

I'm having problems getting mod_auth_kerb to play nice on one of my
servers.
I have the exact same setup on other machines and it works perfectly,
only difference is this ones running CURRENT while they track RELEASE.

Some info:

# pkg_info|grep apache&&   pkg_info|grep kerb
apache-2.2.15_7     Version 2.2.x of Apache web server with prefork MPM.
mod_auth_kerb-5.4   An Apache module for authenticating users with
Kerberos v5

# uname -a
FreeBSD host.example.com 9.0-CURRENT FreeBSD 9.0-CURRENT #5: Tue May 11
20:04:45 UTC 2010     host.example.com:/usr/obj/usr/src/sys/HOST  i386


Everything compiles and installs nicely, but when I try to do a
'apachectl start' I get this:

httpd: Syntax error on line 4 of /usr/local/etc/apache22/httpd.conf:
Cannot load /usr/local/libexec/apache22/mod_auth_kerb.so into server:
/usr/local/libexec/apache22/mod_auth_kerb.so: Undefined symbol
"gsskrb5_register_acceptor_identity"

Is this due to running current?
If it is I will drop the issue right now, I just want to know for sure
before I spend hours trying to solve it.



It begins to look like GSSAPI is not in there.  GSSAPI is part of
world.  You may need to rebuild kerberos with GSSAPI support.  Are you
using the builtin MIT or the add-on heimdal kerberos?

I'm using the builtin. How do I rebuild kerberos with GSSAPI support, I
though that was builtin by default in FreeBSD since 5.1 somewhere?

klist, kinit and kdestroy all works fine and I can authenticate against
an Active Directory server, but I just cant get Apache to load the
mod_auth_kerb module.

I just did a clean install of a FreeBSD 8.1-PRERELEASE, and I have
exactly the same error there so it's not related to running current.
What am I doing wrong?


I don't know if I'm reading bsd.apache.mk right (included due to the
dependency of apache webserver), but mod_auth_kerb may require apache
1.3, not 2.x

does your 8.1 have apache1.3?  Maybe it has both nd 1.3 is running?

I would bet that a 1.3 module won't work in 2.x

does apache2.x have a kerberos module?  there have been a ton of
additions to apache2.x



Let us know.

Are you looking at /usr/ports/www/mod_auth_kerb or /usr/ports/www/mod_auth_kerb2?

mod_auth_kerb2 is for apache 2.x



_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[email protected]"

Reply via email to