[24254] in Kerberos
Re: Assertion failuers
daemon@ATHENA.MIT.EDU (Phil Dibowitz)
Fri Jul 8 04:24:42 2005
Date: Fri, 8 Jul 2005 01:23:46 -0700
From: Phil Dibowitz <phil@usc.edu>
To: Ken Raeburn <raeburn@mit.edu>
Message-ID: <20050708082346.GU8907@usc.edu>
Mail-Followup-To: Ken Raeburn <raeburn@MIT.EDU>, kerberos@mit.edu,
Toan Nguyen <toan@usc.edu>
Mime-Version: 1.0
In-Reply-To: <cffb2270798d96316e80580fd964cc62@mit.edu>
cc: Toan Nguyen <toan@usc.edu>
cc: kerberos@mit.edu
Content-Type: multipart/mixed; boundary="===============49691271280415927=="
Errors-To: kerberos-bounces@mit.edu
--===============49691271280415927==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="5JFuR0oMLkSLAI/x"
Content-Disposition: inline
--5JFuR0oMLkSLAI/x
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Fri, Jul 08, 2005 at 02:40:29AM -0400, Ken Raeburn wrote:
> On Jul 8, 2005, at 00:56, Phil Dibowitz wrote:
> >On Thu, Jul 07, 2005 at 10:37:52PM -0400, Ken Raeburn wrote:
> >>Without a bit more data, it's hard to tell. Do these applications=20
> >>link
> >>against the pthread library? Did you give any interesting options=20
> >>when
> >>configuring the Kerberos code? What did configure report when it went
> >>looking for pthread_once?
> >
> >Well, with openssh it's simply=20
> >--with-kerberos5=3D/usr/lsd/kerberos/default
>=20
> Sorry, I meant when configuring the Kerberos code. If you didn't give=20
> any special options, then how it chose to initialize the library=20
> probably comes down to whether there's a stub for pthread_once in the C=
=20
> library, and maybe which compiler and linker got used for the build.
Ohhh, sorry.
> If you still have the krb5 build tree, could you grep for 'pthread' in=20
> the config.cache file at the top of the build tree?
I do have it:
[phil@metallica 5.6]$ grep pthread config.cache=20
ac_cv_func_pthread_mutex_lock=3D${ac_cv_func_pthread_mutex_lock=3Dyes}
ac_cv_func_pthread_mutexattr_setrobust_np=3D${ac_cv_func_pthread_mutexattr_=
setrobust_np=3Dno}
ac_cv_func_pthread_once=3D${ac_cv_func_pthread_once=3Dyes}
ac_cv_func_pthread_rwlock_init=3D${ac_cv_func_pthread_rwlock_init=3Dno}
ac_cv_lib_c_pthread_mutexattr_setrobust_np=3D${ac_cv_lib_c_pthread_mutexatt=
r_setrobust_np=3Dno}
ac_cv_lib_c_pthread_rwlock_init=3D${ac_cv_lib_c_pthread_rwlock_init=3Dno}
[phil@metallica 5.6]$=20
> >Here's and ldd output (note that /usr/lsd/kerberos/default is the same=
=20
> >as
> >/usr/lsd/kerberos/5-1.4.1 in this case - it's a symlink):
>=20
> Looks like no pthread library there...
While I do compile kerb seperately for each version of Solaris we run, most=
of
our applications are compiled on 2.6 and installed everywhere since Solaris
has full backwards compatibility, so that ssh you saw is the same build that
runs on our 8 and 9 boxes (where we don't get the kerb error), and so
obviously they're not linking to a libpthread either.
Kerb doesn't link against it either. This is from Solaris 9 (remember kerb =
is
seperate builds):
[root@polka sbin]# ldd krb5kdc=20
libkadm5srv.so.5 =3D>
/usr/lsd/kerberos/5-1.4.1/lib/libkadm5srv.so.5
libkdb5.so.4 =3D> /usr/lsd/kerberos/5-1.4.1/lib/libkdb5.so.4
libgssrpc.so.4 =3D> /usr/lsd/kerberos/5-1.4.1/lib/libgssrpc.=
so.4
libgssapi_krb5.so.2 =3D>
/usr/lsd/kerberos/5-1.4.1/lib/libgssapi_krb5.so.2
libdes425.so.3 =3D> /usr/lsd/kerberos/5-1.4.1/lib/libdes425.=
so.3
libkrb5.so.3 =3D> /usr/lsd/kerberos/5-1.4.1/lib/libkrb5.so.3
libk5crypto.so.3 =3D>
/usr/lsd/kerberos/5-1.4.1/lib/libk5crypto.so.3
libcom_err.so.3 =3D> /usr/lsd/kerberos/5-1.4.1/lib/libcom_err=
=2Eso.3
libkrb5support.so.0 =3D>
/usr/lsd/kerberos/5-1.4.1/lib/libkrb5support.so.0
libresolv.so.2 =3D> /usr/lib/libresolv.so.2
libsocket.so.1 =3D> /usr/lib/libsocket.so.1
libnsl.so.1 =3D> /usr/lib/libnsl.so.1
libc.so.1 =3D> /usr/lib/libc.so.1
libdl.so.1 =3D> /usr/lib/libdl.so.1
libmp.so.2 =3D> /usr/lib/libmp.so.2
/usr/platform/SUNW,UltraAX-i2/lib/libc_psr.so.1
and 2.6:
[root@ain sbin]# ldd krb5kdc=20
libkadm5srv.so.5 =3D>
/usr/lsd/kerberos/5-1.3.1/lib/libkadm5srv.so.5
libkdb5.so.4 =3D> /usr/lsd/kerberos/5-1.3.1/lib/libkdb5.so.4
libgssrpc.so.3 =3D> /usr/lsd/kerberos/5-1.3.1/lib/libgssrpc.=
so.3
libgssapi_krb5.so.2 =3D>
/usr/lsd/kerberos/5-1.3.1/lib/libgssapi_krb5.so.2
libdes425.so.3 =3D> /usr/lsd/kerberos/5-1.3.1/lib/libdes425.=
so.3
libkrb5.so.3 =3D> /usr/lsd/kerberos/5-1.3.1/lib/libkrb5.so.3
libk5crypto.so.3 =3D>
/usr/lsd/kerberos/5-1.3.1/lib/libk5crypto.so.3
libcom_err.so.3 =3D> /usr/lsd/kerberos/5-1.3.1/lib/libcom_err=
=2Eso.3
libsocket.so.1 =3D> /usr/lib/libsocket.so.1
libnsl.so.1 =3D> /usr/lib/libnsl.so.1
libresolv.so.2 =3D> /usr/lib/libresolv.so.2
libc.so.1 =3D> /usr/lib/libc.so.1
libdl.so.1 =3D> /usr/lib/libdl.so.1
libmp.so.2 =3D> /usr/lib/libmp.so.2
which despite being in a different order, appear identical - and fwiw,
libkrb5.so doesn't link against pthread either.
> Please try out the attached patch. It's a bit more paranoid about=20
> checking for real pthread support versus broken stubs. If that doesn't=
=20
> fix it, we'll need to do some debugging to figure out what's going=20
> wrong.
I'm a bit confused - none of the versions link against pthreads, yet one of
the 3 doesn't work - so it makes me think that kerb didn't find pthreads, so
why would the above help?
Thanks for your help Ken. I'll give the patch a shot tomorrow morning.
--=20
Phil Dibowitz
Systems Architect and Administrator
Enterprise Infrastructure / ISD / USC
UCC 180 - 213-821-5427
--5JFuR0oMLkSLAI/x
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
iD8DBQFCzjgS7lkZ1Iyv898RAtq5AJ9h6/prKz0JGOedLpBmw9Ny+KMr1gCgtU+Y
5Gl7VZDI1nidirGgv2Y7mJA=
=/fOJ
-----END PGP SIGNATURE-----
--5JFuR0oMLkSLAI/x--
--===============49691271280415927==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============49691271280415927==--
