#45 Load failure on MacOS X due to use of private function

[Bill Northcott]

A module built on MacOS X 10.5 Leopard (and probably earlier versions) will fail to load because the symbol _krb5_rc_resolve_full will not be found.

This private function, not in the Kerberos 5 header files, is used in mod_auth_kerb.c:1737

no krb5_rc..... functions are provided by the MacOS X implementation.

I found a Changelog entry:
Revision 1.129 - (view) (download) (annotate) - [select for diffs]
Sat Sep 9 08:01:03 2006 UTC (2 years, 4 months ago) by kouril
Branch: MAIN
Changes since 1.128: +5 -5 lines
Diff to previous 1.128
Use krb5_rc_resolve_full() to detect the "none" rcache type. The previous code was based on an internal function using non-public data structure.

I am guessing this code was included to patch around bugs or security issues in previous versions of Kerberos 5. Sorry I don't have any great understanding of Kerberos.

It would be good to remove it, or test for the existence of the function with autoconf.

Source code for the versions of Apache and Kerberos shipped by Apple can be found at:
http://www.opensource.apple.com/darwinsource/

[William Strucke]

I'm experiencing the very same problem -- it's disappointing since I can't use this apache module now until someone fixes the bug.