[Gábor Gombás] Bug#564566: libkadm5clnt7: SONAME conflict with Heimdal

Sam Hartman hartmans at MIT.EDU
Mon Jan 11 16:56:30 EST 2010

>>>>> "Jeffrey" == Jeffrey Hutzelman <jhutz at cmu.edu> writes:

    Jeffrey> Of course, if the symbol versions also don't match, symbol
    Jeffrey> resolution will just fail and things will not work at all.
    Jeffrey> Symbol versioning, especially of the rich variety provided
    Jeffrey> by glibc, can be used here to prevent the wrong thing from
    Jeffrey> happening, but it can't make the right thing happen.
No, that's not true.
If glibc finds krb5_init_context at krb5_3_mit and
 krb5_init_context at krb5_17_heimdal and the code was looking
 for krb5_init_context at krb5_3_mit, the right thing will
 happen regardless of which is found first.
I have test code to demonstrate this that I can dig up if needed.
However a number of cases in PAM, NSS and LDAP backends as well as
 things like openssh demonstrate this in Debian.

    Jeffrey> I'm with Russ; clearly, the best answer is to coordinate
    Jeffrey> with Heimdal and agree to partition the soname version
    Jeffrey> space in a reasonable way.

I agree with this as well.  If we add something like _mit, I think
minimal coordination is needed.  If we split the natural numbers, more
coordination is required.

More information about the krbdev mailing list