Re: aes256 keys not supported

[christop <christop@physik.tu-berlin.de>]

cyrus@univ-paris4.fr schrieb:
> christop a écrit :
>> Greetings,
>> cyrus@univ-paris4.fr schrieb:
[...]
 >> If you do not want to build heimdal kerberos out of base system on your
>> next world builds, put an NO_KERBEROS=true in you make.conf. More
>> possible variables are in /usr/share/examples/etc/make.conf.
> 
> Is there a way to uninstall Kerberos without world builds ?

Well, i do not know a way except deleting kerberos libs by hand, or
better first move them to a different place, out of reach of your
ldconfig. A general freebsd list might know the answer.
Anyway, /usr/bin/ldd /usr/local/sbin/kadmin will tell you which libs
kadmin links dynamic. Look at this list and compared with libs installed
by heimdal port into /usr/local/lib/. Installed libs are all in
/var/db/pkg/heimdal-1.0.1/+CONTENTS. But there is also a quick and dirty
way.

The quick and dirty way would be using kadmin like:
LD_LIBRARY_PATH="/usr/local/lib:/lib:/usr/lib/" /usr/local/sbin/kadmin
Now kadmin will your search for dynamics lib first in /usr/local/lib.
You can proof it with /usr/bin/ldd.
To make it more persistent, you can set environment variables with
setenv LD_LIBRARY_PATH "/usr/local/lib:/lib:/usr/lib/" or
export LD_LIBRARY_PATH="/usr/local/lib:/lib:/usr/lib/", depends on your
shell.
If you want to have a more complete lib path look into the output of
ldconfig -r|less for your search directories. Some programms add there
own path, so it depends on what you have installed.

> Using heimdal from the package, i get :
> 
> #  -l
> /libexec/ld-elf.so.1: /usr/local/sbin/kadmin: Undefined symbol
> "kadm5_add_passwd_quality_verifier"
> 
> Perhaps, a clean of the system libs might help ?

This happens because your kadmin try to dynamical link to one of old
libs in the base system. You can change this with
LD_LIBRARY_PATH="/usr/local/lib:/lib:/usr/lib/" /usr/local/sbin/kadmin.

MfG
	Christoph

OpenPGP digital signature