Your message dated Mon, 02 Aug 2010 16:58:17 -0400
with message-id <[email protected]>
and subject line Re: Bug#590786: krb5-kdc: Compilation failure with
--with-kdc-kdb-update configure option in krb5 1.6.4-beta
has caused the Debian Bug report #590786,
regarding krb5-kdc: Compilation failure with --with-kdc-kdb-update configure
option in krb5 1.6.4-beta
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
590786: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590786
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: krb5-kdc
Version: 1.6.dfsg.4~beta1-5lenny4
Severity: normal
Tags: patch
Compiling with --with-kdc-kdb-update configure option fails as below (this
configure option can be set in debian/rules as well):
# ./configure --with-kdc-kdb-update && make
....
....
....
gcc -L../lib -g -O2 -Wall -Wmissing-prototypes -Wcast-qual -Wcast-align
-Wconversion -Wshadow -o krb5kdc kdc5_err.o dispatch.o do_as_req.o
do_tgs_req.o kdc_util.o kdc_preauth.o main.o network.o policy.o extern.o
replay.o kerberos_v4.o -lkadm5srv -lkdb5 -lgssrpc -lgssapi_krb5 -lkrb4
-ldes425 -lkrb5 -lk5crypto -lcom_err -lkrb5support -lkeyutils -lresolv -ldl
-lapputils
do_as_req.o: In function `process_as_req':
/tmp/krb5-1.6.dfsg.4~beta1/src/kdc/do_as_req.c:489: undefined reference to
`krb5_db_set_name'
/tmp/krb5-1.6.dfsg.4~beta1/src/kdc/do_as_req.c:491: undefined reference to
`krb5_db_init'
collect2: ld returned 1 exit status
make[1]: *** [krb5kdc] Error 1
Apply the below patch. This patch has been backported from 1.7.1
(http://src.mit.edu/fisheye/changelog/krb5/?cs=23647). The issue has been
discussed in more detail at
http://krbdev.mit.edu/rt/Ticket/Display.html?user=guest&pass=guest&id=5668.
diff -Naur krb5-1.6.dfsg.4~beta1/src/kdc/do_as_req.c
krb5-1.6.dfsg.4~beta1.new/src/kdc/do_as_req.c
--- krb5-1.6.dfsg.4~beta1/src/kdc/do_as_req.c 2008-05-29 03:10:12.000000000
+0530
+++ krb5-1.6.dfsg.4~beta1.new/src/kdc/do_as_req.c 2010-07-26
20:35:02.000000000 +0530
@@ -480,15 +480,16 @@
if (c_nprincs) {
#ifdef KRBCONF_KDC_MODIFIES_KDB
if (update_client) {
+ krb5_error_code errcode2;
+
krb5_db_put_principal(kdc_context, &client, &c_nprincs);
/*
* ptooey. We want krb5_db_sync() or something like that.
*/
- krb5_db_fini(kdc_context);
- if (kdc_active_realm->realm_dbname)
- krb5_db_set_name(kdc_active_realm->realm_context,
- kdc_active_realm->realm_dbname);
- krb5_db_init(kdc_context);
+ errcode2 = krb5_db_fini(kdc_context);
+ if (errcode2 == 0)
+ errcode2 = krb5_db_open(kdc_context, db_args,
+ KRB5_KDB_OPEN_RW|KRB5_KDB_SRV_TYPE_KDC);
/* Reset master key */
krb5_db_set_mkey(kdc_context, &kdc_active_realm->realm_mkey);
}
diff -Naur krb5-1.6.dfsg.4~beta1/src/kdc/extern.h
krb5-1.6.dfsg.4~beta1.new/src/kdc/extern.h
--- krb5-1.6.dfsg.4~beta1/src/kdc/extern.h 2008-05-29 03:10:12.000000000
+0530
+++ krb5-1.6.dfsg.4~beta1.new/src/kdc/extern.h 2010-07-26 20:36:02.000000000
+0530
@@ -93,6 +93,7 @@
extern krb5_timestamp kdc_infinity; /* greater than all other timestamps */
extern krb5_rcache kdc_rcache; /* replay cache */
extern krb5_keyblock psr_key; /* key for predicted sam response */
+extern char **db_args;
extern volatile int signal_requests_exit;
extern volatile int signal_requests_hup;
diff -Naur krb5-1.6.dfsg.4~beta1/src/kdc/main.c
krb5-1.6.dfsg.4~beta1.new/src/kdc/main.c
--- krb5-1.6.dfsg.4~beta1/src/kdc/main.c 2008-05-29 03:10:12.000000000
+0530
+++ krb5-1.6.dfsg.4~beta1.new/src/kdc/main.c 2010-07-26 20:40:40.000000000
+0530
@@ -410,6 +410,7 @@
return;
}
+char **db_args = NULL;
void
initialize_realms(krb5_context kcontext, int argc, char **argv)
{
@@ -426,7 +427,6 @@
char *default_tcp_ports = 0;
krb5_pointer aprof;
const char *hierarchy[3];
- char **db_args = NULL;
int db_args_size = 0;
#ifdef KRB5_KRB4_COMPAT
-- System Information:
Debian Release: 5.0.4
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.26-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_IN, LC_CTYPE=en_IN (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages krb5-kdc depends on:
ii debconf [debcon 1.5.24 Debian configuration management sy
ii krb5-config 1.22 Configuration files for Kerberos V
ii krb5-user 1.6.dfsg.4~beta1-5lenny4 Basic programs to authenticate usi
ii libc6 2.7-18lenny4 GNU C Library: Shared libraries
ii libcomerr2 1.41.3-1 common error description library
ii libkadm55 1.6.dfsg.4~beta1-5lenny4 MIT Kerberos administration runtim
ii libkeyutils1 1.2-9 Linux Key Management Utilities (li
ii libkrb53 1.6.dfsg.4~beta1-5lenny4 MIT Kerberos runtime libraries
ii lsb-base 3.2-20 Linux Standard Base 3.2 init scrip
krb5-kdc recommends no packages.
Versions of packages krb5-kdc suggests:
ii krb5-admin-serv 1.6.dfsg.4~beta1-5lenny4 MIT Kerberos master server (kadmin
pn krb5-kdc-ldap <none> (no description available)
ii xinetd [inet-su 1:2.3.14-7 replacement for inetd with many en
-- debconf information excluded
--- End Message ---
--- Begin Message ---
source: krb5
source-version: 1.8~dfsg-1
Hi.
This has been fixed upstream.
--- End Message ---
