Bug 285216 – net-fs/autofs: ldaps broken, needs to link with krb5

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Jonas Jonsson 2009-09-16 16:03:25 UTC]

I'm using automount maps in LDAP and using ldaps to connect.
In autofs-5.0.3-r6 and autofs-5.0.4-r5 I get this error in my logs:
 [automount] open_lookup:90: cannot open lookup module ldap (/usr/lib/autofs/lookup_ldap.so: undefined symbol: krb5_get_init_creds_keytab)

By looking at Debian, http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=485470 it seems to be a known problem: http://www.mail-archive.com/[e-mail]/msg06331.html

I fixed it by adding this to the ebuild
        sed -i 's@LIBLDAP += $(LIBSASL) $(XML_LIBS)@LIBLDAP += $(LIBSASL) $(XML_LIBS) -lkrb5@' modules/Makefile

It worked great in 5.0.3 but in 5.0.4 I got these instead:
[automount] get_proximity:200: socket creation failed: Invalid argument

Could be related to my old kernel 2.6.23.

Reproducible: Always

Steps to Reproduce:
1. Install autofs, use ldaps for automount maps
2. Try to enter a automount managed folder
3. Check log for error

Actual Results:  
Broken autofs

Expected Results:  
Working autofs

 # emerge --info
Portage 2.1.6.13 (default/linux/x86/2008.0/desktop, gcc-4.3.2, glibc-2.9_p20081201-r2, 2.6.23-gentoo-r8 i686)
=================================================================
System uname: Linux-2.6.23-gentoo-r8-i686-Intel-R-_Xeon-TM-_CPU_2.80GHz-with-gentoo-1.12.11.1
Timestamp of tree: Wed, 16 Sep 2009 14:00:01 +0000
distcc 3.1 i686-pc-linux-gnu [enabled]
app-shells/bash:     3.2_p39
dev-java/java-config: 1.3.7-r1, 2.1.8-r1
dev-lang/python:     2.4.4-r9, 2.5.4-r3, 2.6.2-r1
dev-python/pycrypto: 2.0.1-r8
dev-util/cmake:      2.6.4
sys-apps/baselayout: 1.12.11.1
sys-apps/sandbox:    1.6-r2
sys-devel/autoconf:  2.13, 2.63-r1
sys-devel/automake:  1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.2
sys-devel/binutils:  2.18-r3
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   1.5.26
virtual/os-headers:  2.6.27-r2
ACCEPT_KEYWORDS="x86"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-march=pentium4 -O2 -pipe -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/config"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-march=pentium4 -O2 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="distcc distlocks fixpackages parallel-fetch protect-owned sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://ftp.sunet.se/pub/Linux/distributions/gentoo/"
LANG="en_US"
LDFLAGS="-Wl,-O1"
LINGUAS="sv_SE en_US"
MAKEOPTS="-j5"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X a52 aac acpi alsa bash-completion berkdb bluetooth branding bzip2 cairo cdr cli cpudetection cracklib crypt cups curl dbus djvu dri dts dv dvd dvdr dvi eds emboss encode esd evo fam ffmpeg fftw firefox flac fortran gdbm gif gnome gpm gstreamer gtk hal iconv ipv6 isdnlog java jpeg jpeg2k kde kdeenablefinal lcms ldap libnotify mad mikmod mmx mono mp2 mp3 mp4 mpeg mudflap musepack mysql ncurses nfs nls nptl nptlonly ogg opengl openmp pam pcre pdf perl png ppds pppd python qt3 qt3support qt4 quicktime rar readline reflection rtc scanner sdl server session speex spell spl srt sse sse2 ssl startup-notification svg sysfs tetext theora threads thunar tiff truetype unicode usb vim-syntax vorbis win32codecs wmf x264 x86 xinerama xml xorg xulrunner xv xvid zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="sv_SE en_US" USERLAND="GNU" VIDEO_CARDS="vesa"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 1 Daren Hayward 2010-01-12 23:09:26 UTC]

I can confirm the bug with [automount] get_proximity:200: socket creation failed: Invalid argument with 5.0.4-r5, interestingly it happened when connecting to an nfs mount. Connecting to a cifs share succeeded.
Googling indicates that this is fixed in a newer kernel, my current kernel 2.6.25-gentoo-r6 Sep 8 13:33:19. I will try a new kernel with next reboot.

Quote from Mandriva.com:

--- Comment #3 from wim.vanderbauwhede@  2009-08-16 10:49:27 CEST ---
I can confirm that with the latest version of the kernel, the bug has indeed
been resolved.

Wim

from 
http://lists.mandriva.com/bugs/2009-08/msg01489.php

[Comment 2 Daren Hayward 2010-01-14 13:30:26 UTC]

I can confirm that updating the kernel resolves the [automount] get_proximity:200: socket creation failed: Invalid argument issue.


2.6.31-gentoo-r6 #4 SMP Wed Jan 13 22:21:30 GMT 2010 i686

However I still can't see shares on nfs, falling back to 5.0.3-r6 for now as it is working.

[Comment 3 Dustin Polke 2010-06-17 16:23:33 UTC]

(In reply to comment #2)
> However I still can't see shares on nfs, falling back to 5.0.3-r6 for now as it
> is working.

Daren, could you please test autofs-5.0.5 and report back whether this is still an issue?

[Comment 4 Spooky Ghost 2010-06-24 14:39:10 UTC]

I am experiencing similar problems after a recent autofs upgade.  I have tested autofs-5.0.5 with the results:

Jun 24 15:31:12 [automount] open_lookup:90: cannot open lookup module ldap (/usr/lib64/autofs/lookup_ldap.so: undefined symbol: krb5_princ_realm)

lookup_ldap.so is not linked against any kerberos libraries:
$ ldd /usr/lib64/autofs/lookup_ldap.so
        linux-vdso.so.1 =>  (0x00007fff572e5000)
        libldap-2.4.so.2 => /usr/lib/libldap-2.4.so.2 (0x00007fbab8b79000)
        liblber-2.4.so.2 => /usr/lib/liblber-2.4.so.2 (0x00007fbab896a000)
        libresolv.so.2 => /lib/libresolv.so.2 (0x00007fbab8752000)
        libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x00007fbab8536000)
        libxml2.so.2 => /usr/lib/libxml2.so.2 (0x00007fbab81b2000)
        libz.so.1 => /lib/libz.so.1 (0x00007fbab809b000)
        libm.so.6 => /lib/libm.so.6 (0x00007fbab7e18000)
        libc.so.6 => /lib/libc.so.6 (0x00007fbab7abc000)
        libssl.so.0.9.8 => /usr/lib/libssl.so.0.9.8 (0x00007fbab7867000)
        libcrypto.so.0.9.8 => /usr/lib/libcrypto.so.0.9.8 (0x00007fbab74d1000)
        libdl.so.2 => /lib/libdl.so.2 (0x00007fbab72cd000)
        libcrypt.so.1 => /lib/libcrypt.so.1 (0x00007fbab7094000)
        /lib64/ld-linux-x86-64.so.2 (0x00007fbab9002000)

According to http://bugs.archlinux.org/task/15654 krb5_princ_realm is also a deprecated interface.  I can work around the problems I have with USE=-sasl.

[Comment 5 Dustin Polke 2010-06-24 15:10:47 UTC]

(In reply to comment #4)
> I am experiencing similar problems after a recent autofs upgade.  I have tested
> autofs-5.0.5 with the results:

Please see bug 302377 and the proposed patch. Please report back whether it solves your issue. If so, I will use this bug for the nfs issue mentioned in comment #2.

[Comment 6 Dustin Polke 2010-06-25 08:38:51 UTC]

CC Spooky Ghost.

Please see comment 5. Thanks.

[Comment 7 Nikhil Patil 2010-09-01 00:04:56 UTC]

I had the same problem and the fix of bug #302377 works for me (with autofs-5.0.4-r5).

[Comment 8 Peter Volkov (RETIRED) 2011-04-03 09:52:12 UTC]

Patch was added in 5.0.5-r1. Fixed.