You are viewing a plain text version of this content. The canonical link for it is here.
Posted to modperl@perl.apache.org by Jeff Horwitz <je...@laserlink.net> on 2000/08/02 17:20:30 UTC
Re: (Fwd) Problem with Authen::Krb4 under mod_perl (fwd)
[forwarded just in case anyone else is having similar problems]
---------- Forwarded message ----------
Date: Wed, 2 Aug 2000 10:45:35 -0400 (EDT)
From: Jeff Horwitz <je...@laserlink.net>
To: Dave Edsall - The Tauminator <ed...@iastate.edu>
Subject: Re: (Fwd) Problem with Authen::Krb4 under mod_perl
> First, thank you for responding and responding so quickly. The answer to
> your question is yes, we are using open_ssl so that we can encrypt the
> password being sent to the web server. But, if there are name clashes, why
> would the script work under mod_cgi and not mod_perl? We use ssl in both cases.
mod_cgi simply forks off separate processes. with mod_perl, the scripts
are interpreted and run in a Perl interpreter within apache. Krb4.so is
loaded just like any other shared library, and will conflict with apache
if duplicate symbols exist.
> Is there a way around the name clash problem?
yes. build Authen::Krb4 with KTH Kerberos, available at
http://www.pdc.kth.se/kth-krb. it's a bit cleaner wrt the DES library,
and it's much easier to build as well! :)
---------------------------------------------------------------------------
Jeff Horwitz E-mail: jeff@laserlink.net
Manager of Systems Operations Phone: (610) 627-4575
LaserLink.Net, Covad Communications Web: http://www.laserlink.net
On Wed, 2 Aug 2000, Dave Edsall - The Tauminator wrote:
>
> >are you using mod_ssl or SSL of any kind? there are name clashes between
> >the kerberos DES libraries and the SSL DES libraries that can cause
> >kerberos to fail.
> >
>
>
>
>
> Dave
>
>
>
Re: (Fwd) Problem with Authen::Krb4 under mod_perl (fwd)
Posted by Doug MacEachern <do...@covalent.net>.
On Wed, 2 Aug 2000, Jeff Horwitz wrote:
> [forwarded just in case anyone else is having similar problems]
>
> ---------- Forwarded message ----------
> Date: Wed, 2 Aug 2000 10:45:35 -0400 (EDT)
> From: Jeff Horwitz <je...@laserlink.net>
> To: Dave Edsall - The Tauminator <ed...@iastate.edu>
> Subject: Re: (Fwd) Problem with Authen::Krb4 under mod_perl
>
> > First, thank you for responding and responding so quickly. The answer to
> > your question is yes, we are using open_ssl so that we can encrypt the
> > password being sent to the web server. But, if there are name clashes, why
> > would the script work under mod_cgi and not mod_perl? We use ssl in both cases.
>
> mod_cgi simply forks off separate processes. with mod_perl, the scripts
> are interpreted and run in a Perl interpreter within apache. Krb4.so is
> loaded just like any other shared library, and will conflict with apache
> if duplicate symbols exist.
>
> > Is there a way around the name clash problem?
>
> yes. build Authen::Krb4 with KTH Kerberos, available at
> http://www.pdc.kth.se/kth-krb. it's a bit cleaner wrt the DES library,
> and it's much easier to build as well! :)
you can also try the -Bsymbolic linker flag, which is supposed to force
Krb5.so so use the symbols in the libraries it linked against, rather than
those in the main program. or try the approach below to lump the archives
directly into the .so, but change ssl stuff to krb stuff :)
--- Makefile.PL~ Sat Jul 31 00:59:12 1999
+++ Makefile.PL Tue Aug 1 20:18:32 2000
@@ -61,12 +61,13 @@
# See lib/ExtUtils/MakeMaker.pm for details of how to influence
# the contents of the Makefile that is written.
WriteMakefile(
+ 'OBJECT' => "SSLeay.o $openssl_path/lib/libssl.a $openssl_path/lib/libcrypto.a",
'NAME' => 'Net::SSLeay',
'VERSION_FROM' => 'SSLeay.pm', # finds $VERSION
'DEFINE' => '', # e.g., '-DHAVE_SOMETHING'
'DISTNAME' => 'Net_SSLeay.pm',
'dist' => { COMPRESS => 'gzip', SUFFIX => 'gz', },
- 'LIBS' => ["-L$openssl_path -L$openssl_path/lib $libs"],
+# 'LIBS' => ["-L$openssl_path -L$openssl_path/lib $libs"],
### Win32 build: uncommend LIBS above and edit LIBS below according to your
###