krb5-1.6.3-beta1 is available

Douglas E. Engert deengert at
Fri Sep 28 15:56:17 EDT 2007

Problem is in the Makefile where SHLIB_EXPFLAGS= is not
being set. If I go in and put in -R ... and -L ...
I can get kinit to use the smartcard to login to AD.

--- ,Makefile   Fri Sep 28 14:39:10 2007
+++ Makefile    Fri Sep 28 14:38:20 2007
@@ -522,6 +522,7 @@
  # flags for explicit libraries depending on this one,
+SHLIB_EXPFLAGS= -R/krb5m/lib:/opt/smartcard/lib -L/krb5m/lib -L/opt/smartcard/lib $(SHLIB_SHLIB_DIRFLAGS) $(SHLIB_EXPLIBS)

Then if I remove and do a make I get:

rm -f
building dynamic pkinit object
set -x; objlist=`set -x && perl -p -e 'BEGIN { $SIG{__WARN__} = sub {die @_} }; $e=$ARGV; $e =~ s/OBJS\...$//; s/^/ /; s/ $//; s/ / $e/g;' OBJS.SH` && gcc -g -shared -h -o $objlist -R/krb5m/lib:/opt/smartcard/lib -L/krb5m/lib -L/opt/smartcard/lib  -lkrb5 -lcom_err -lk5crypto 
-ldl -lkrb5support -lcrypto -lresolv -lsocket -lnsl  -lcrypto  -g
+ set -x
+ perl -p -e BEGIN { $SIG{__WARN__} = sub {die @_} }; $e=$ARGV; $e =~ s/OBJS\...$//; s/^/ /; s/ $//; s/ / $e/g; OBJS.SH
+ gcc -g -shared -h -o -R/krb5m/lib:/opt/smartcard/lib -L/krb5m/lib -L/opt/smartcard/lib -lkrb5 -lcom_err -lk5crypto -ldl -lkrb5support 
-lcrypto -lresolv -lsocket -lnsl -lcrypto -g

Tom Yu wrote:
>>>>>> "deengert" == Douglas E Engert <deengert at> writes:
> deengert> The pkinit plugin does not load on Solaris 10. It is looking for
> deengert> but not looking in the correct location /usr/sfw/lib
> What program are you running?  Is it kinit, or something else?
> deengert> I built the 1.6.3-beta1 using the same environment as I used with the Umich
> deengert> pkinit, which did not have this problem.
> deengert> (/krb5m-> /afs/ as --prefix=/krb5m)
> deengert> Truss shows:
> deengert> open("/krb5m/lib/krb5/plugins/preauth/", O_RDONLY) = 4
> deengert> ...
> deengert> stat("/afs/", 0xFFBFD9B8) Err#2 ENOENT
> deengert> stat("/opt/smartcard/lib/", 0xFFBFD9B8) Err#2 ENOENT
> Are there additonal stat() calls following the ones you quoted above?
> deengert> which is looking at the two -R directories, but not at
> deengert> /usr/sfw/lib or at /usr/lib
> Also, I haven't really worked extensively with compilations that need
> libgcc_s.  Does a normal program built with that gcc look for libgcc_s
> in the correct place?  What does "dump -Lv" show both for kinit (or
> whatever program you were running) and for
> deengert> Something has changed in how the plugin is linked, as
> deengert> the 1.6.3-beta1 shows:
> deengert> ldd /krb5m/lib/krb5/plugins/preauth/
> deengert> warning: ldd: /krb5m/lib/krb5/plugins/preauth/ is not executable
> deengert> =>         /usr/sfw/lib/
> deengert> =>     /lib/
> deengert> =>     /lib/
> deengert>         /platform/SUNW,A70/lib/
> Now that is weird that it lacks libkrb5 compared to the UMich version.
> What make program did you build with?  I think there may be a bug in
> the plugin Makefile because it uses the "+=" operator.
> ---Tom


  Douglas E. Engert  <DEEngert at>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444

More information about the krbdev mailing list