Bugzilla – Bug 147912
libgssapi's error handling improvement
Last modified: 2006-03-20 10:44:57 UTC
libgssapi.so from package libgssapi is used by Firefox (and other mozilla products) automatically. But it just exits and take down Firefox and the others. Please see: https://bugzilla.mozilla.org/show_bug.cgi?id=325433#c14 This is a follow-up from bug 147670 where I changed Firefox and co. behaviour to use the libgssapi_krb5 by default. So the problem is workarounded by that. But maybe it makes sense to fix this in libgssapi mid-term.
If I understand the problem right, we need to symlink libgssapi_krb5.so.2 to libgssapi_krb5.so?
Not anymore. Firefox 2.0 will use libgssapi_krb5.so.2 automatically as first try. What should be fixed within this bug is the behaviour of our libgssapi.so to just exit if not configured properly. IMHO a module shouldn't exit the whole application. For Firefox it isn't needed to change anything for future products (including CODE10). But maybe there are other users of libgssapi.so which get the same problem.
There are, indeed. The entire NFS RPCSEC_GSS code seems to rely on this. Michael, can the krb5 package be changed to include the libgssapi_krb5.so symlink?
Sure, but does this solve any problem? I think they search at compile time for this and at compile time krb5-devel might be installed. The problem is, that they want a libgssapi library. libgssapi_krb5 is only the implementation of one mechanism for gssapi. If you want that I do the change send me a "doit" :-)
Michael, it's slightly more complicated than that. The NFS security stuff is linked against libgssapi which provides the mechanism switching. If the caller requests a krb5 mechanism, libgssapi will try to open libgssapi_krb5.so I could also change the mechglue.conf file to go and try to load libgssapi_krb5.so.2, but I'm not sure whether that's the best possible solution.
Ahh, ok. Should I submitt it to STABLE?
I have submitted it.
Thanks, Michael! So I'm closing this bug.