Bug 148538 – net-misc/openssh fails with --as-needed when using smartcard USE flag

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Mart Raudsepp 2006-09-21 09:33:10 UTC]

emerge of net-misc/openssh-4.3_p2-r3 (and earlier as long I have tried) fail with --as-needed when smartcard functionality is used.

USE flags used for the emerge:

[ebuild   R   ] net-misc/openssh-4.3_p2-r3  USE="X kerberos pam smartcard tcpd -X509 -chroot -hpn -ipv6 -ldap -libedit (-selinux) -sftplogging -skey -static" 0 kB 

i686-pc-linux-gnu-ranlib libssh.a
i686-pc-linux-gnu-gcc -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o sshconnect1.o sshconnect2.o -L. -Lopenbsd-compat/ -Wl,-O2 -Wl,--as-needed -Wl,-O2 -Wl,--as-needed -L/usr/lib -lopensc -lssh -lopenbsd-compat -lresolv -lssl -lcrypto -ldl -lutil -lz -lnsl -lcrypt -L/usr/lib -Wl,-rpath -Wl,/usr/lib -march=prescott -Os -ftracer -pipe -fomit-frame-pointer -momit-leaf-frame-pointer -ggdb -W -Wall -Wall -Wpointer-arith -Wuninitialized -Wsign-compare -Wno-pointer-sign -std=gnu99 -Wl,-O2 -Wl,-hashvals -Wl,--as-needed -lgssapi_krb5 -lkrb5 -lk5crypto -lkrb5support -lcom_err -lresolv
i686-pc-linux-gnu-gcc -o sshd sshd.o auth-rhosts.o auth-passwd.o auth-rsa.o auth-rh-rsa.o sshpty.o sshlogin.o servconf.o serverloop.o selinux.o auth.o auth1.o auth2.o auth-options.o session.o auth-chall.o auth2-chall.o groupaccess.o auth-skey.o auth-bsdauth.o auth2-hostbased.o auth2-kbdint.o auth2-none.o auth2-passwd.o auth2-pubkey.o monitor_mm.o monitor.o monitor_wrap.o kexdhs.o kexgexs.o auth-krb5.o auth2-gss.o gss-serv.o gss-serv-krb5.o loginrec.o auth-pam.o auth-shadow.o auth-sia.o auth-securid.o md5crypt.o audit.o audit-bsm.o -L. -Lopenbsd-compat/ -Wl,-O2 -Wl,--as-needed -Wl,-O2 -Wl,--as-needed -L/usr/lib -lopensc -lssh -lopenbsd-compat -lwrap -lpam -ldl  -lresolv -lssl -lcrypto -ldl -lutil -lz -lnsl -lcrypt -L/usr/lib -Wl,-rpath -Wl,/usr/lib -march=prescott -Os -ftracer -pipe -fomit-frame-pointer -momit-leaf-frame-pointer -ggdb -W -Wall -Wall -Wpointer-arith -Wuninitialized -Wsign-compare -Wno-pointer-sign -std=gnu99 -Wl,-O2 -Wl,-hashvals -Wl,--as-needed -lgssapi_krb5 -lkrb5 -lk5crypto -lkrb5support -lcom_err -lresolv
./libssh.a(scard-opensc.o): In function `sc_get_key_label':
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:538: undefined reference to `sc_pkcs15_find_prkey_by_id'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:540: undefined reference to `sc_strerror'
./libssh.a(scard-opensc.o): In function `sc_close':
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:73: undefined reference to `sc_pkcs15_unbind'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:77: undefined reference to `sc_disconnect_card'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:81: undefined reference to `sc_release_context'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:77: undefined reference to `sc_disconnect_card'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:81: undefined reference to `sc_release_context'
./libssh.a(scard-opensc.o): In function `sc_init':
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:91: undefined reference to `sc_establish_context'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:100: undefined reference to `sc_connect_card'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:103: undefined reference to `sc_pkcs15_bind'
./libssh.a(scard-opensc.o): In function `sc_get_keys':
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:451: undefined reference to `sc_pkcs15_hex_string_to_id'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:471: undefined reference to `sc_pkcs15_get_objects'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:488: undefined reference to `sc_pkcs15_find_prkey_by_id'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:461: undefined reference to `sc_strerror'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:466: undefined reference to `sc_pkcs15_find_cert_by_id'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:478: undefined reference to `sc_strerror'
./libssh.a(scard-opensc.o): In function `sc_read_pubkey':
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:380: undefined reference to `sc_pkcs15_read_certificate'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:396: undefined reference to `sc_pkcs15_free_certificate'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:424: undefined reference to `sc_pkcs15_free_certificate'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:382: undefined reference to `sc_strerror'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:424: undefined reference to `sc_pkcs15_free_certificate'
./libssh.a(scard-opensc.o): In function `sc_get_keys':
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:497: undefined reference to `sc_strerror'
./libssh.a(scard-opensc.o): In function `sc_prkey_op_init':
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:137: undefined reference to `sc_pkcs15_find_prkey_by_id_usage'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:145: undefined reference to `sc_pkcs15_find_pin_by_auth_id'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:178: undefined reference to `sc_lock'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:183: undefined reference to `sc_pkcs15_verify_pin'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:140: undefined reference to `sc_strerror'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:133: undefined reference to `sc_strerror'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:149: undefined reference to `sc_lock'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:151: undefined reference to `sc_strerror'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:157: undefined reference to `sc_strerror'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:180: undefined reference to `sc_strerror'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:186: undefined reference to `sc_unlock'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:187: undefined reference to `sc_strerror'
./libssh.a(scard-opensc.o): In function `sc_sign':
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:260: undefined reference to `sc_pkcs15_compute_signature'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:262: undefined reference to `sc_unlock'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:264: undefined reference to `sc_strerror'
./libssh.a(scard-opensc.o): In function `sc_private_decrypt':
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:222: undefined reference to `sc_pkcs15_decipher'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:224: undefined reference to `sc_unlock'
/mnt/sda8/tmp/portage/openssh-4.3_p2-r3/work/openssh-4.3p2/scard-opensc.c:226: undefined reference to `sc_strerror'
collect2: ld returned 1 exit status
make: *** [ssh] Error 1
make: *** Waiting for unfinished jobs....

!!! ERROR: net-misc/openssh-4.3_p2-r3 failed.
Call stack:
  ebuild.sh, line 1546:   Called dyn_compile
  ebuild.sh, line 937:   Called src_compile
  openssh-4.3_p2-r3.ebuild, line 127:   Called die

[Comment 1 Mart Raudsepp 2006-09-21 09:35:56 UTC]

My emerge --info:

Portage 2.1.2_pre1 (default-linux/x86/2006.1/desktop, gcc-4.1.1, glibc-2.4-r3, 2.6.17-gentoo-r6 i686)
=================================================================
System uname: 2.6.17-gentoo-r6 i686 Intel(R) Pentium(R) 4 CPU 2.80GHz
Gentoo Base System version 1.12.5
Last Sync: Thu, 21 Sep 2006 12:50:01 +0000
ccache version 2.4 [enabled]
app-admin/eselect-compiler: [Not Present]
dev-java/java-config: 2.0.28-r1, 2.0.29
dev-lang/python:     2.4.3-r3
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.4-r6
dev-util/confcache:  0.4.2-r1
sys-apps/sandbox:    1.2.18.1
sys-devel/autoconf:  2.13, 2.60
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2
sys-devel/binutils:  2.17
sys-devel/gcc-config: 1.3.13-r3
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.17-r1
ACCEPT_KEYWORDS="x86 ~x86"
ACCEPT_LICENSE=""
ANT_HOME="/usr/share/ant-core"
ARCH="x86"
AUTOCLEAN="no"
CBUILD="i686-pc-linux-gnu"
CCACHE_SIZE="2G"
CFLAGS="-march=prescott -Os -ftracer -pipe -fomit-frame-pointer -momit-leaf-frame-pointer -ggdb -W -Wall"
CHOST="i686-pc-linux-gnu"
CLEAN_DELAY="5"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/lib/mozilla/defaults/pref /usr/share/X11/xkb /usr/share/config"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/java-config/vms/ /etc/revdep-rebuild /etc/splash /etc/terminfo /etc/texmf/web2c"
CVS_RSH="ssh"
CXXFLAGS="-march=prescott -Os -ftracer -pipe -fomit-frame-pointer -momit-leaf-frame-pointer -ggdb -W -Wall -fvisibility-inlines-hidden"
DISPLAY=":0.0"
DISTDIR="/mnt/sda8/distfiles"
EDITOR="/bin/nano"
ELIBC="glibc"
EMERGE_DEFAULT_OPTS="--ask --verbose"
EMERGE_WARNING_DELAY="10"
FEATURES="autoaddcvs autoconfig ccache cvs distlocks metadata-transfer parallel-fetch sandbox sfperms sign splitdebug strict userpriv usersandbox"
FETCHCOMMAND="/usr/bin/wget -t 5 -T 60 --passive-ftp -P ${DISTDIR} ${URI}"
GCC_SPECS=""
GDK_USE_XFT="1"
GENERATION="2"
GENTOO_MIRRORS="http://ftp.linux.ee/pub/gentoo/distfiles/ ftp://trumpetti.atm.tut.fi/gentoo/"
GUILE_LOAD_PATH="/usr/share/guile/1.6"
G_BROKEN_FILENAMES="1"
G_FILENAME_ENCODING="UTF-8"
HOME="/root"
INFOPATH="/usr/share/info:/usr/share/binutils-data/i686-pc-linux-gnu/2.17/info:/usr/share/gcc-data/i686-pc-linux-gnu/4.1.1/info:/usr/share/gcc-data/i686-pc-linux-gnu/4.1.1/info"
INPUT_DEVICES="keyboard mouse evdev"
JAVAC="/etc/java-config-2/current-system-vm/bin/javac"
JAVA_HOME="/etc/java-config-2/current-system-vm"
JDK_HOME="/etc/java-config-2/current-system-vm"
KDEDIRS="/usr"
KERNEL="linux"
LDFLAGS="-Wl,-O2 -Wl,--as-needed"
LESS="-R -M --shift 5"
LESSOPEN="|lesspipe.sh %s"
LINGUAS="et et_EE"
LIRC_DEVICES=""
LOGNAME="root"
MAKEOPTS="-j2"
MANPATH="/usr/local/share/man:/usr/share/man:/usr/share/binutils-data/i686-pc-linux-gnu/2.17/man:/usr/share/gcc-data/i686-pc-linux-gnu/4.1.1/man:/usr/share/gcc-data/i686-pc-linux-gnu/4.1.1/man:/opt/blackdown-jdk-1.4.2.03/man:/etc/java-config/system-vm/man/:/usr/qt/3/doc/man:/opt/vmware/workstation/man"
MOZILLA_FIVE_HOME="/usr/lib/mozilla"
OLDPWD="/etc"
OPENGL_PROFILE="xorg-x11"
PAGER="/usr/bin/less"
PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/bin:/usr/i686-pc-linux-gnu/gcc-bin/4.1.1:/opt/blackdown-jdk-1.4.2.03/bin:/opt/blackdown-jdk-1.4.2.03/jre/bin:/usr/kde/3.5/sbin:/usr/kde/3.5/bin:/usr/qt/3/bin:/opt/vmware/workstation/bin"
PKGDIR="/usr/portage/packages"
PKG_CONFIG_PATH="/usr/qt/3/lib/pkgconfig"
PORTAGE_ARCHLIST="ppc s390 amd64 ppc64 x86-fbsd m68k arm sparc sh mips ia64 alpha ppc-macos hppa x86"
PORTAGE_BINHOST_CHUNKSIZE="3000"
PORTAGE_BIN_PATH="/usr/lib/portage/bin"
PORTAGE_CALLER="emerge"
PORTAGE_CONFIGROOT="/"
PORTAGE_DEBUG="0"
PORTAGE_DEPCACHEDIR="/var/cache/edb/dep"
PORTAGE_ELOG_CLASSES="warn error log"
PORTAGE_ELOG_MAILFROM="portage"
PORTAGE_ELOG_MAILSUBJECT="[portage] ebuild log for ${PACKAGE} on ${HOST}"
PORTAGE_ELOG_MAILURI="root"
PORTAGE_ELOG_SYSTEM="save"
PORTAGE_GID="250"
PORTAGE_GPG_DIR="/home/leio/.gnupg"
PORTAGE_GPG_KEY="89451C97"
PORTAGE_INST_GID="0"
PORTAGE_INST_UID="0"
PORTAGE_NICENESS="10"
PORTAGE_PYM_PATH="/usr/lib/portage/pym"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'"
PORTAGE_RSYNC_RETRIES="3"
PORTAGE_TMPDIR="/mnt/sda8/tmp"
PORTAGE_WORKDIR_MODE="0700"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/home/leio/dev/overlay/zaheerm /home/leio/dev/overlay/gentopia /home/leio/dev/overlay/gnome /home/leio/dev/overlay/xgl-coffee /home/leio/dev/overlay/flameeyes /home/leio/dev/overlay/spyderous /home/leio/dev/overlay/leio/gnome-perf /home/leio/dev/overlay/mine"
PORT_LOGDIR="/var/log/portage"
PRELINK_PATH=""
PRELINK_PATH_MASK="/usr/lib/gstreamer-0.10:/usr/lib/klibc"
PWD="/root"
PYTHONPATH="/usr/lib/portage/pym"
QMAKESPEC="linux-g++"
QTDIR="/usr/qt/3"
RESUMECOMMAND="/usr/bin/wget -c -t 5 -T 60 --passive-ftp -P ${DISTDIR} ${URI}"
ROOT="/"
ROOTPATH="/opt/bin:/usr/i686-pc-linux-gnu/gcc-bin/4.1.1:/opt/blackdown-jdk-1.4.2.03/bin:/opt/blackdown-jdk-1.4.2.03/jre/bin:/usr/kde/3.5/sbin:/usr/kde/3.5/bin:/usr/qt/3/bin:/opt/vmware/workstation/bin"
RPMDIR="/usr/portage/rpm"
RSYNC_TIMEOUT="300"
SHELL="/bin/bash"
SHLVL="1"
STAGE1_USE="nptl nptlonly unicode"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
TERM="xterm"
USE="x86 3dfx X a52 aalib acpi aiglx aim alsa apache2 artswrappersuid asf avahi avi bash-completion beagle berkdb bitmap-fonts bogofilter bonobo bzip2 bzlib cairo canvas cdr chm cli compositor crypt cscope cups dbus directfb divx4linux dlloader dmi dpms dri dv dvb dvd dvdr dvdread eds elibc_glibc emboss encode esd evo exif expat fam fbcon ffmpeg firefox flac flash foomaticdb foreign-package fortran freetype ftp gaim galago gcc-libffi gd gdbm gif glut glx gnome gnutls gpm graphviz gstreamer gstreamer010 gstreamer10 gtk gtk2 gtkhtml hal hddtemp icq idn imagemagick imap imlib inotify input_devices_evdev input_devices_keyboard input_devices_mouse isdnlog jabber java jpeg kde kdeenablefinal kerberos kernel_linux layout-osx-like lcms ldap libcaca libg++ libnotify libwww linguas_et linguas_et_EE lirc live lm_sensors logitech-mouse logrotate lzw mad mikmod mime ming mmx mng mono motif mozdomi mozilla moznocompose moznoirc moznomail mp3 mpeg mplayer msn musicbrainz nas nautilus ncurses network new-login nls no-old-linux nptl nptlonly nsplugin objc objc++ offensive ogg oggvorbis openal opengl oscar oss pam pcre pcsc-lite pdf pdflib perl pg-hier pg-vacuumdelay pic pmount png posix postgres postscript ppds pppd python qt qt3 quicktime radeon readline reflection rtc sdl session slang slp smartcard smp speedo speex spell spl sqlite sse sse2 ssl svg sysfs tagwriting tcpd tetex theora tidy tiff timidity truetype truetype-fonts type1 type1-fonts ucs2 udev unicode usb userland_GNU v4l vhosts video_cards_mach64 video_cards_r200 video_cards_r300 video_cards_radeon video_cards_tdfx videos vidix vim-with-x vorbis win32codecs wv wxwidgets wxwin wxwindows xcomposite xine xinerama xml xmlrpc xorg xosd xv xvid yahoo zeo zlib"
USER="root"
USERLAND="GNU"
USE_EXPAND="CROSSCOMPILE_OPTS DVB_CARDS ELIBC FCDSL_CARDS FOO2ZJS_DEVICES FRITZCAPI_CARDS INPUT_DEVICES KERNEL LINGUAS LIRC_DEVICES MISDN_CARDS USERLAND VIDEO_CARDS"
USE_EXPAND_HIDDEN="CROSSCOMPILE_OPTS ELIBC KERNEL USERLAND"
USE_ORDER="env:pkg:conf:defaults"
VIDEO_CARDS="radeon mach64 tdfx r200 r300"
VMHANDLE="blackdown-jdk-1.4.2"
XARGS="xargs -r"
XAUTHORITY="/root/.xauthhra9TU"
_="/usr/bin/emerge"

[Comment 2 SpanKY 2006-09-22 21:56:59 UTC]

fixed in cvs