RE: [Condor-users] Kerberos problem

[Bruce Beckles <mbb10@xxxxxxxxx>]

On Fri, 26 Nov 2004, Miskell, Craig wrote:

<snip>
> The kerberos libs on the box in question are 1.3.4 (out of the box from
> Fedora Core 1), which should be ok.  But a quick ldd on condor_status
> (and all the other binaries) shows no sign of requiring any krb
> libraries. I'm running the dynamically linked version, but I'm beginning
> to suspect that condor has some version of kerberos statically embedded
> or something.  This is somewhat supported by the output of "strings
> condor_submit|grep krb" containing the line
> KRB5_BRAND: krb5-1-2-5-final 1.2.5 20020429
>
> So if I had to take a punt, I'd say that Condor was statically linked
> with Version 1.2.5 of the (MIT?) kerberos libraries, which means I'm out
> of luck getting this working.

Even the "dynamically linked" version of Condor is statically linked with 
the MIT Kerberos V5 1.2.5 (+ a few patches) libraries.  I know this to be 
the case because I have seen the source and the build process used to 
create the binaries.

> Hey, condor team:  Any chance of a release of condor built against a
> newer version of Kerberos, or will I have to come begging for the source
> code and try to build it myself? ;-)

It is obviously for the Condor Team to say, but I have been told (by them) 
that they are in the process of moving to MIT Kerberos 1.3.x, but that 
they have encountered some problems, by which I was given to understand 
that simply compiling against later krb5 libraries "breaks" Condor... :(

I think it may turn out to be the case that moving Condor to a later 
version of Kerberos is a non-trivial task... :(

	-- Bruce

--
Bruce Beckles,
e-Science Specialist,
University of Cambridge Computing Service.