SASL2 kerberos 5 dependency

[Ondřej Surý]

Please report that to the krb5 package as a bug. They have
removed the symbols from the library without bumping a
SOVERSION.



Ondrej



On Sun, Aug 31, 2014, at 18:57, Jorge Bastos wrote:

Hi,

Today I just updated openssh to 6.6 and after this my SASL
auxprop SQL just stop working, after some debug I got the
conclusion that this was a lib dependency problem.

When I checked the logs I saw:

Aug 31 17:13:53 lira postfix/smtpd[8875]: unable to dlopen
/usr/lib/i386-linux-gnu/sasl2/libsql.so:
/usr/lib/i386-linux-gnu/libkrb5.so.3: symbol
k5_json_string_create, version krb5support_0_MIT not defined in
file libkrb5support.so.0 with link time reference

When I updated openssh, the packages that were updated were
this ones:

Get:1 [1]http://ftp.debian.org/debian/ sid/main libkeyutils1
i386 1.5.9-5 [11.9 kB]

Get:2 [2]http://ftp.debian.org/debian/ sid/main
libgssapi-krb5-2 i386 1.12.1+dfsg-7 [155 kB]

Get:3 [3]http://ftp.debian.org/debian/ sid/main libkrb5-3 i386
1.12.1+dfsg-7 [318 kB]

Get:4 [4]http://ftp.debian.org/debian/ sid/main libkrb5support0
i386 1.12.1+dfsg-7 [58.7 kB]

Get:5 [5]http://ftp.debian.org/debian/ sid/main openssh-server
i386 1:6.6p1-7 [358 kB]

Get:6 [6]http://ftp.debian.org/debian/ sid/main
openssh-sftp-server i386 1:6.6p1-7 [38.2 kB]

Get:7 [7]http://ftp.debian.org/debian/ sid/main openssh-client
i386 1:6.6p1-7 [713 kB]

So I saw what the problem was, lucky for me, I had the previous
package of krb5 to make SASL work again, so I just downgraded
to it and SASL’s working again.

I have a problem now with apt-get ‘cause openssh and other
stuff want the newer package of krb5 libs, with the versions
below:

-rw-r--r-- 1 root root   48622 2012-01-13 23:47
libkrb5support0_1.10+dfsg~beta1-2_i386.deb

-rw-r--r-- 1 root root  399800 2012-01-13 23:47
libkrb5-3_1.10+dfsg~beta1-2_i386.deb

-rw-r--r-- 1 root root  148794 2012-01-13 23:47
libgssapi-krb5-2_1.10+dfsg~beta1-2_i386.deb

The question is, can SASL be compiled against the newer krb5
package?

This is something that many people will have problems about to.

Thanks in advanced,

Let me know about some feedback on this.

Jorge,

_______________________________________________

Pkg-cyrus-sasl2-debian-devel mailing list

[8]Pkg-cyrus-sasl2-debian-devel at lists.alioth.debian.org

[9]http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-
cyrus-sasl2-debian-devel



--
Ondřej Surý <ondrej at sury.org>
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS
server

References

1. http://ftp.debian.org/debian/
2. http://ftp.debian.org/debian/
3. http://ftp.debian.org/debian/
4. http://ftp.debian.org/debian/
5. http://ftp.debian.org/debian/
6. http://ftp.debian.org/debian/
7. http://ftp.debian.org/debian/
8. mailto:Pkg-cyrus-sasl2-debian-devel at lists.alioth.debian.org
9. http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-cyrus-sasl2-debian-devel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-cyrus-sasl2-debian-devel/attachments/20140901/8f7c1bd2/attachment.html>