[sudo-users] sudo, kerb5 and Heimdal on FreeBSD 7.0

[john bender]

--- Tom McLaughlin <tmclaugh at gmail.com> wrote:

> john bender wrote:
> > Hi there,
> > 
> > so I'm trying to install sudo on FreeBSD
> 7.0-RELEASE. 
> > When I try a make against the kerberos libs that
> the
> > system comes with under /usr/lib, I get this
> error:
> > 
> > undefined reference to
> 'krb5_get_init_creds_opt_alloc'
> 
> The port for sudo in the ports tree builds just
> fine.  What version are 
> you using?  Are you using the ports tree?

I am using the latest source from sudo.ws.

The Freebsd 7 port (1.6.9.15 and 1.6.9.17) doesn't
appear to come with kerberos support:

/usr/local/bin/sudo:
        libutil.so.7 => /lib/libutil.so.7
(0x800650000)
        libpam.so.4 => /usr/lib/libpam.so.4
(0x80075e000)
        libldap-2.4.so.3 =>
/usr/local/lib/libldap-2.4.so.3 (0x800866000)
        libc.so.7 => /lib/libc.so.7 (0x8009a2000)
        liblber-2.4.so.3 =>
/usr/local/lib/liblber-2.4.so.3 (0x800bbf000)
        libssl.so.5 => /usr/lib/libssl.so.5
(0x800ccd000)
        libcrypto.so.5 => /lib/libcrypto.so.5
(0x800e17000)

When I replace --with-pam with --with-kerb5 in the
port Makefile, and without installing the Heimdal port
(using whatever 7.0 comes with), I get

cc -o sudo check.o env.o getspwuid.o gettime.o
goodpath.o fileops.o find_path.o  interfaces.o
logging.o parse.o set_perms.o sudo.o sudo_edit.o 
tgetpass.o zero_bytes.o  ldap.o sudo_auth.o kerb5.o
passwd.o sudo.tab.o lex.yy.o alloc.o defaults.o
memrchr.o closefrom.o -L/usr/local/lib  -lutil
-L/usr/lib -lkrb5 -lasn1 -lcrypto -lroken -lcrypt
-lcom_err -lcrypt -lldap    
kerb5.o(.text+0xb9): In function `kerb5_verify':
: undefined reference to
`krb5_get_init_creds_opt_alloc'
kerb5.o(.text+0xfe): In function `kerb5_verify':
: undefined reference to
`krb5_get_init_creds_opt_free'
*** Error code 1

So again, looks to me like the /usr/lib libs are
missing that function, which 1.1.0 has.

- Darek