I'm trying to install pam_krb5 on our FreeBSD boxen. But I keep getting the following from pam when I try to log in (using sshd): Oct 30 16:28:17 doc sshd[56793]: unable to dlopen(/usr/lib/pam_krb5.so) Oct 30 16:28:17 doc sshd[56793]: unable to dlopen(/usr/lib/pam_krb5.so) Oct 30 16:28:17 doc sshd[56793]: [dlerror: /usr/lib/pam_krb5.so: Undefined symbol "krb5_skdc_timeout_1"] Oct 30 16:28:17 doc sshd[56793]: [dlerror: /usr/lib/pam_krb5.so: Undefined symbol "krb5_skdc_timeout_1"] Oct 30 16:28:17 doc sshd[56793]: adding faulty module: /usr/lib/pam_krb5.so Oct 30 16:28:17 doc sshd[56793]: adding faulty module: /usr/lib/pam_krb5.so Oct 30 16:28:41 doc sshd[56793]: fatal: Read from socket failed: Connection reset by peer Oct 30 16:28:41 doc sshd[56793]: fatal: Read from socket failed: Connection reset by peer I've tried every version of pam_krb5 I can find. With some variants it tells me that the undefined symbol is "krb5_get_prompt_types". I've installed the latest MIT version of Kerberos, and it seems to work OK. I'm compiling from source because the official precompiled port of pam_krb5 complains about library versions. I've been bashing my head against this one for two days now. I've looked up the error messages and symbol names on Google and found nothing, and the FAQs don't mention this problem. pam_krb5.so is definitely being linked with -lkrb5, and /usr/lib/krb5.a does define these symbols. pam_krb5 includes a dlopen test as part of the Makefile, and pam_krb5.so passes this test. BTW, I'm running a mixed collection of Linux and FreeBSD machines here, for various good reasons. The Linux install worked perfectly the first time. What am I doing wrong? Please help. Thanks, Paul.
