Bug 136432 - www/mod_auth_kerb does not build with MIT Kerberos (security/krb5)
Summary: www/mod_auth_kerb does not build with MIT Kerberos (security/krb5)
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: freebsd-apache (Nobody)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-07-07 17:10 UTC by Palle Girgensohn
Modified: 2010-05-07 19:41 UTC (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Palle Girgensohn freebsd_committer freebsd_triage 2009-07-07 17:10:01 UTC
www/mod_auth_kerb does not build, since MIT krb5's krb5-config is too verbose:

MIT:$ /usr/local/bin/krb5-config --libs gssapi
-L/usr/local/lib -Wl,-rpath -Wl,/usr/local/lib -rpath=/usr/local/lib -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err

HEIMDAL:$ krb5-config --libs gssapi
-L/usr/lib -lgssapi -lkrb5 -lasn1 -lcrypto -lroken -lcrypt -lcom_err

In my world, MIT krb5's krb5-config --libs gssapi should say:
$ /usr/local/bin/krb5-config --libs gssapi
-L/usr/local/lib -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err

Fix: 

dunno what the best way to fix it is, but I ran

export KRB5_LDFLAGS="-L/usr/local/lib -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err"
make install


and that seems to have helped. Main problem is, IMO, the krb5-config verbosity.

Fix this by either modify krb5-config, or if the problem is specific to mod_auth_kerb, 
patch the mod_auth_kerb port.
How-To-Repeat: install apache+mod_ssl
install krb5
try to run cd /usr/ports/www/mod_auth_kerb && make install

===>  Building for mod_auth_kerb-5.3,1
/usr/local/sbin/apxs -c -Wc,-I. -Wc,-Ispnegokrb5 -Wc,-I/usr/local/include  -Wl,-L/usr/local/lib -Wl,-Wl,-rpath -Wl,-Wl,/usr/local/lib -Wl,-O2 -Wl,-fno-strict-aliasing -Wl,-pipe -Wl,-rpath=/usr/local/lib -Wl,-lgssapi_krb5 -Wl,-lkrb5 -Wl,-lk5crypto -Wl,-lcom_err src/mod_auth_kerb.c 
cc -DHARD_SERVER_LIMIT=512  -DDOCUMENT_LOCATION="/usr/local/www/data"  -DDEFAULT_PATH="/usr/local/bin:/bin:/usr/bin"  -DACCEPT_FILTER_NAME="httpready" -DFD_SETSIZE=1024 -funsigned-char -DMOD_SSL=208131 -DMOD_DEFLATE -DMOD_DEFLATE_IDLE_SUPPORTED -DEAPI -DEAPI_MM -O2 -fno-strict-aliasing -pipe -fPIC -DSHARED_MODULE -I/usr/local/include/apache -I. -Ispnegokrb5 -I/usr/local/include  -c src/mod_auth_kerb.c
src/mod_auth_kerb.c: In function 'create_krb5_ccache':
src/mod_auth_kerb.c:819: warning: passing argument 3 of 'ap_register_cleanup' from incompatible pointer type
src/mod_auth_kerb.c: In function 'get_gss_creds':
src/mod_auth_kerb.c:1153: warning: passing argument 3 of 'gss_import_name' discards qualifiers from pointer target type
gcc -shared -o src/mod_auth_kerb.so mod_auth_kerb.o -Wc,-I. -Wc,-Ispnegokrb5 -Wc,-I/usr/local/include -Wl,-L/usr/local/lib -Wl,-Wl,-rpath -Wl,-Wl,/usr/local/lib -Wl,-O2 -Wl,-fno-strict-aliasing -Wl,-pipe -Wl,-rpath=/usr/local/lib -Wl,-lgssapi_krb5 -Wl,-lkrb5 -Wl,-lk5crypto -Wl,-lcom_err 
/usr/bin/ld: unrecognized option '-Wl'
/usr/bin/ld: use the --help option for usage information
apxs:Break: Command failed with rc=1
gmake: *** [src/mod_auth_kerb.so] Fel 1
Comment 1 Edwin Groothuis freebsd_committer freebsd_triage 2009-07-07 17:10:11 UTC
Responsible Changed
From-To: freebsd-ports-bugs->cy

Over to maintainer (via the GNATS Auto Assign Tool)
Comment 2 Mark Linimon freebsd_committer freebsd_triage 2009-07-07 18:27:09 UTC
Responsible Changed
From-To: cy->apache

This is really about www/mod_auth_kerb.
Comment 3 Philip M. Gollucci freebsd_committer freebsd_triage 2010-05-07 19:41:10 UTC
State Changed
From-To: open->closed

works for me 
http://people.freebsd.org/~pgollucci/FreeBSD/diffs/mod_auth_kerb-5.3%2c1.log