[sudo-users] Sudo on Solaris 10 AMD64

Allen Hewes allen at decisiv.net
Tue Nov 8 14:17:15 EST 2005


Hi Todd,

Here is my crle output for 32-bit:
Configuration file [version 4]: /var/ld/ld.config
  Default Library Path (ELF):
/lib:/usr/lib:/usr/sfw/lib:/usr/local/lib
  Trusted Directories (ELF):    /lib/secure:/usr/lib/secure  (system
default)

Command line:
  crle -c /var/ld/ld.config -l /lib:/usr/lib:/usr/sfw/lib:/usr/local/lib

Crle 64-bit:
Configuration file [version 4]: /var/ld/64/ld.config
  Default Library Path (ELF):   /lib/64:/usr/lib/64  (system default)
  Trusted Directories (ELF):
/lib/secure/64:/usr/lib/secure/64:/usr/lib/mps/64

Command line:
  crle -64 -c /var/ld/64/ld.config -s
/lib/secure/64:/usr/lib/secure/64:/usr/lib/mps/64

What is odd is that if I manually create a user timestamp directory in
/var/run/sudo as root, sudo will run. I will still get the error about
libsoftsokn.3.so, but I won't get the dlopen() error. So after manually
creating /var/run/sudo/USERNAME, I can run 64-bit sudo. Another oddity
is that if I complile sudo in 32-bit mode only, it runs fine-- no
dlopen() or pam_authenticate errors.

Libsoftokn2.so is being pulled in from
/usr/lib/security/64/pam_authtok_get.so.1 (which is being loaded from
/etc/pam.conf) is it not? It's not being pulled from sudo:
Ldd ./sudo
libpam.so.1 =>   /lib/64/libpam.so.1
libdl.so.1 =>    /lib/64/libdl.so.1
libsocket.so.1 =>        /lib/64/libsocket.so.1
libnsl.so.1 =>   /lib/64/libnsl.so.1
libc.so.1 =>     /lib/64/libc.so.1
libcmd.so.1 =>   /lib/64/libcmd.so.1
libmp.so.2 =>    /lib/64/libmp.so.2
libmd5.so.1 =>   /lib/64/libmd5.so.1
libscf.so.1 =>   /lib/64/libscf.so.1
libdoor.so.1 =>  /lib/64/libdoor.so.1
libuutil.so.1 =>         /lib/64/libuutil.so.1
libm.so.2 =>     /lib/64/libm.so.2

I recompiled with -R/usr/lib/mps/amd64 and added a search path to crle
-64 to no avail. Still broken.

TIA,

-Allen

P.S. Todd, thanks for sudo and your OpenBSD contributions!

-----Original Message-----
From: Todd C. Miller [mailto:Todd.Miller at courtesan.com] 
Sent: Tuesday, November 08, 2005 11:53 AM
To: Allen Hewes
Cc: sudo-users at sudo.ws
Subject: Re: [sudo-users] Sudo on Solaris 10 AMD64 

Hmm, you could try adding -R/usr/lib/mps/amd64 to SUDO_LDFLAGS in the
Makefile.  I don't know why it wouldn't be in the system shared library
link path though.

A better approach is probably to add the dir via the clre command.

 - todd






More information about the sudo-users mailing list