[Gábor Gombás] Bug#564566: libkadm5clnt7: SONAME conflict with Heimdal

Tom Yu tlyu at mit.edu
Mon Jan 11 17:00:45 EST 2010


Sam Hartman <hartmans at MIT.EDU> writes:

>>>>>> "Jeffrey" == Jeffrey Hutzelman <jhutz at cmu.edu> writes:
>
>     Jeffrey> Of course, if the symbol versions also don't match, symbol
>     Jeffrey> resolution will just fail and things will not work at all.
>     Jeffrey> Symbol versioning, especially of the rich variety provided
>     Jeffrey> by glibc, can be used here to prevent the wrong thing from
>     Jeffrey> happening, but it can't make the right thing happen.
> No, that's not true.
> If glibc finds krb5_init_context at krb5_3_mit and
>  krb5_init_context at krb5_17_heimdal and the code was looking
>  for krb5_init_context at krb5_3_mit, the right thing will
>  happen regardless of which is found first.
> I have test code to demonstrate this that I can dig up if needed.
> However a number of cases in PAM, NSS and LDAP backends as well as
>  things like openssh demonstrate this in Debian.
>
>     Jeffrey> I'm with Russ; clearly, the best answer is to coordinate
>     Jeffrey> with Heimdal and agree to partition the soname version
>     Jeffrey> space in a reasonable way.
>
>
> I agree with this as well.  If we add something like _mit, I think
> minimal coordination is needed.  If we split the natural numbers, more
> coordination is required.

I have seen a mailing list posting that claimed that non-numeric
SONAME suffixes cause problems for libtool; I have not confirmed this,
and for that matter, it may no longer be a problem.



More information about the krbdev mailing list