[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [Condor-users] Kerberos problem

On Fri, 26 Nov 2004, Miskell, Craig wrote:

The kerberos libs on the box in question are 1.3.4 (out of the box from
Fedora Core 1), which should be ok.  But a quick ldd on condor_status
(and all the other binaries) shows no sign of requiring any krb
libraries. I'm running the dynamically linked version, but I'm beginning
to suspect that condor has some version of kerberos statically embedded
or something.  This is somewhat supported by the output of "strings
condor_submit|grep krb" containing the line
KRB5_BRAND: krb5-1-2-5-final 1.2.5 20020429

So if I had to take a punt, I'd say that Condor was statically linked
with Version 1.2.5 of the (MIT?) kerberos libraries, which means I'm out
of luck getting this working.

Even the "dynamically linked" version of Condor is statically linked with the MIT Kerberos V5 1.2.5 (+ a few patches) libraries. I know this to be the case because I have seen the source and the build process used to create the binaries.

Hey, condor team:  Any chance of a release of condor built against a
newer version of Kerberos, or will I have to come begging for the source
code and try to build it myself? ;-)

It is obviously for the Condor Team to say, but I have been told (by them) that they are in the process of moving to MIT Kerberos 1.3.x, but that they have encountered some problems, by which I was given to understand that simply compiling against later krb5 libraries "breaks" Condor... :(

I think it may turn out to be the case that moving Condor to a later version of Kerberos is a non-trivial task... :(

-- Bruce

Bruce Beckles,
e-Science Specialist,
University of Cambridge Computing Service.