Bug 147912

Summary:	libgssapi's error handling improvement
Product:	[openSUSE] SUSE LINUX 10.0	Reporter:	Wolfgang Rosenauer <wolfgang.rosenauer>
Component:	Basesystem	Assignee:	Olaf Kirch <okir>
Status:	RESOLVED FIXED	QA Contact:	E-mail List <qa-bugs>
Severity:	Normal
Priority:	P5 - None	CC:	mc
Version:	Final
Target Milestone:	---
Hardware:	All
OS:	SuSE Linux 10.0
Whiteboard:
Found By:	Other	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Wolfgang Rosenauer 2006-02-03 08:29:32 UTC

libgssapi.so from package libgssapi is used by Firefox (and other mozilla products) automatically.
But it just exits and take down Firefox and the others.

Please see:
https://bugzilla.mozilla.org/show_bug.cgi?id=325433#c14

This is a follow-up from bug 147670 where I changed Firefox and co. behaviour to use the libgssapi_krb5 by default.
So the problem is workarounded by that. But maybe it makes sense to fix this in libgssapi mid-term.

Comment 1 Olaf Kirch 2006-03-08 11:54:37 UTC

If I understand the problem right, we need to symlink libgssapi_krb5.so.2
to libgssapi_krb5.so?

Comment 2 Wolfgang Rosenauer 2006-03-08 12:09:01 UTC

Not anymore. Firefox 2.0 will use libgssapi_krb5.so.2 automatically as first try.
What should be fixed within this bug is the behaviour of our libgssapi.so to just exit if not configured properly.
IMHO a module shouldn't exit the whole application. For Firefox it isn't needed to change anything for future products (including CODE10). But maybe there are other users of libgssapi.so which get the same problem.

Comment 3 Olaf Kirch 2006-03-13 12:50:01 UTC

There are, indeed. The entire NFS RPCSEC_GSS code seems to rely on this.

Michael, can the krb5 package be changed to include the
libgssapi_krb5.so symlink?

Comment 4 Michael Calmer 2006-03-13 13:00:03 UTC

Sure, but does this solve any problem?
I think they search at compile time for this and at compile time krb5-devel might be installed.

The problem is, that they want a libgssapi library. libgssapi_krb5 is only the implementation of one mechanism for gssapi.

If you want that I do the change send me a "doit" :-)

Comment 5 Olaf Kirch 2006-03-13 13:05:57 UTC

Michael, it's slightly more complicated than that.

The NFS security stuff is linked against libgssapi which provides the
mechanism switching. If the caller requests a krb5 mechanism, libgssapi
will try to open libgssapi_krb5.so

I could also change the mechglue.conf file to go and try to load
libgssapi_krb5.so.2, but I'm not sure whether that's the best possible
solution.

Comment 6 Michael Calmer 2006-03-13 15:48:17 UTC

Ahh, ok. Should I submitt it to STABLE?

Comment 7 Michael Calmer 2006-03-13 17:26:36 UTC

I have submitted it.

Comment 8 Olaf Kirch 2006-03-20 10:44:57 UTC

Thanks, Michael! So I'm closing this bug.