Re: smbk5pwd producing undefined symbol: _kadm5_set_keys error on Ubuntu

["David Markey" <admin@dmarkey.com>]

known problem, search the mailing list archive

On Sat, Jan 10, 2009 at 7:23 PM, Scott Grizzard <scott@scottgrizzard.com> wrote:
> I am trying to make the smbk5pwd module manage password syncing with Samba
> and Kerberos.  I am running on Ubuntu Server 8.10 with openldap-2.4.11 and
> heimdal 1.1.
>
> I can "make" the smbk5pwd module, but when I run a password change using it,
> I recieve the following error:
>
> conn=0 op=1 PASSMOD id="uid=sgrizzard,ou=Users,dc=scottgrizzard,dc=com" new
>>>> dnPrettyNormal: <uid=sgrizzard,ou=Users,dc=scottgrizzard,dc=com>
> => ldap_bv2dn(uid=sgrizzard,ou=Users,dc=scottgrizzard,dc=com,0)
> <= ldap_bv2dn(uid=sgrizzard,ou=Users,dc=scottgrizzard,dc=com)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(uid=sgrizzard,ou=Users,dc=scottgrizzard,dc=com)=0
> => ldap_dn2bv(272)
> <= ldap_dn2bv(uid=sgrizzard,ou=users,dc=scottgrizzard,dc=com)=0
> <<< dnPrettyNormal: <uid=sgrizzard,ou=Users,dc=scottgrizzard,dc=com>,
> <uid=sgrizzard,ou=users,dc=scottgrizzard,dc=com>
> bdb_dn2entry("uid=sgrizzard,ou=users,dc=scottgrizzard,dc=com")
> => hdb_dn2id("dc=scottgrizzard,dc=com")
> <= hdb_dn2id: got id=0x1
> => hdb_dn2id("ou=users,dc=scottgrizzard,dc=com")
> <= hdb_dn2id: got id=0x4
> => hdb_dn2id("uid=sgrizzard,ou=users,dc=scottgrizzard,dc=com")
> <= hdb_dn2id: got id=0x22
> entry_decode: ""
> <= entry_decode()
> => bdb_entry_get: ndn: "uid=sgrizzard,ou=users,dc=scottgrizzard,dc=com"
> => bdb_entry_get: oc: "(null)", at: "(null)"
> bdb_dn2entry("uid=sgrizzard,ou=users,dc=scottgrizzard,dc=com")
> => bdb_entry_get: found entry:
> "uid=sgrizzard,ou=users,dc=scottgrizzard,dc=com"
> bdb_entry_get: rc=0
> slapd: symbol lookup error: /usr/lib/ldap/smbk5pwd.so.0: undefined symbol:
> _kadm5_set_keys
>
> My Makefile:
> # $OpenLDAP: pkg/ldap/contrib/slapd-modules/smbk5pwd/Makefile,v 1.1
> 2004/04/02 11:06:38 hyc Exp $
> # Copyright 2004 Howard Chu, Symas Corp. All Rights Reserved.
> #
> # Redistribution and use in source and binary forms, with or without
> # modification, are permitted only as authorized by the OpenLDAP
> # Public License.
> #
> # A copy of this license is available in the file LICENSE in the
> # top-level directory of the distribution or, alternatively, at
> # <http://www.OpenLDAP.org/license.html>.
>
> LIBTOOL=../../../libtool
> #LIBTOOL=/usr/bin/libtool
> OPT=-g -O2
> CC=gcc
>
> # Omit DO_KRB5 or DO_SAMBA if you don't want to support it.
> DEFS=-DDO_KRB5 -DDO_SAMBA
>
> #HEIMDAL_INC=-I/usr/heimdal/include
> HEIMDAL_INC=-I/usr/include
> SSL_INC=
> LDAP_INC=-I../../../include -I../../../servers/slapd
> INCS=$(LDAP_INC) $(HEIMDAL_INC) $(SSL_INC)
>
> #HEIMDAL_LIB=-L/usr/heimdal/lib -lkrb5 -lkadm5srv
> HEIMDAL_LIB=-L/usr/lib -lkrb5 -lkadm5srv
> SSL_LIB=-lcrypto
> LDAP_LIB=-lldap_r -llber
> LIBS=$(LDAP_LIB) $(HEIMDAL_LIB) $(SSL_LIB)
>
> all:    smbk5pwd.la
>
>
> smbk5pwd.lo:    smbk5pwd.c
>         $(LIBTOOL) --mode=compile $(CC) $(OPT) $(DEFS) $(INCS) -c $?
>
> smbk5pwd.la:    smbk5pwd.lo
>         $(LIBTOOL) --mode=link $(CC) $(OPT) -version-info 0:0:0 \
>         -rpath /usr/lib/ldap -module -o $@ $? $(LIBS)
>
> I've messed with this thing for quite a while now, but nothing seems to be
> working.  Any ideas?
>
> - Scott Grizzard
>