>Number:         24502
>Category:       pkg
>Synopsis:       databases/openldap link problems
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Feb 20 17:17:00 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator:     Jukka Salmi
>Release:        NetBSD 1.6ZK
>Organization:
>Environment:
System: NetBSD himo.salmi.ch 1.6ZK NetBSD 1.6ZK (HIMO) #0: Wed Feb 18 00:27:09 CET 2004 root@himo.salmi.ch:/build/nbsd/current/sys/arch/i386/compile/HIMO i386
Architecture: i386
Machine: i386
>Description:
On both stable (1.6.2) and -current (1.6ZK) systems databases/openldap from
current pkgsrc seems to not link various libraries. E.g. on a up-to-date
system with openldap-2.1.25nb2:
$ ldd /usr/pkg/bin/ldapsearch                                                  
/usr/pkg/bin/ldapsearch:
	-lresolv.1 => /usr/lib/libresolv.so.1
	-lssl.3 => /usr/lib/libssl.so.3
	-lcrypto.2 => /usr/lib/libcrypto.so.2
	-lc.12 => /usr/lib/libc.so.12

On a system not touched for a few about three months, with openldap-2.1.22nb2:
$ ldd /usr/pkg/bin/ldapsearch  
/usr/pkg/bin/ldapsearch:
	-llber.2 => /usr/pkg/lib/liblber.so.2
	-lresolv.1 => /usr/lib/libresolv.so.1
	-lsasl2.2 => /usr/pkg/lib/libsasl2.so.2
	-lssl.2 => /usr/lib/libssl.so.2
	-lcrypto.1 => /usr/lib/libcrypto.so.1
	-lldap.2 => /usr/pkg/lib/libldap.so.2
	-lc.12 => /usr/lib/libc.so.12


On both systems security/sasl2 is installed (built with SASL_USE_GSSAPI=YES),
and openldap was built with USE_SASL2=YES.

I noticed this because on the up-to-date machine I got the followin error:
$ ldapsearch -Y gssapi                                                         
ldap_sasl_interactive_bind_s: Unknown authentication method (86)
	additional info: SASL(-4): no mechanism available: No worthy mechs found

>How-To-Repeat:
1. set SASL_USE_GSSAPI=YES and USE_SASL2=YES
2. build security/sasl2 and databases/openldap from current pkgsrc
3. $ ldapsearch -Y gssapi
   ldap_sasl_interactive_bind_s: Unknown authentication method (86)
   [...]
while it should print:
   SASL/GSSAPI authentication started
   [...]
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted: