From unknown Mon Jun 23 04:13:33 2025 X-Loop: help-debbugs@gnu.org Subject: bug#48959: icecat imcomplete LD_LIBRARY_PATH affecting Kerberos authentication Resent-From: Ignacio Coterillo Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 11 Jun 2021 14:58:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 48959 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 48959@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.16234234371680 (code B ref -1); Fri, 11 Jun 2021 14:58:02 +0000 Received: (at submit) by debbugs.gnu.org; 11 Jun 2021 14:57:17 +0000 Received: from localhost ([127.0.0.1]:39800 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lriap-0000Qp-9y for submit@debbugs.gnu.org; Fri, 11 Jun 2021 10:57:17 -0400 Received: from lists.gnu.org ([209.51.188.17]:60654) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lrfXX-0001J0-HE for submit@debbugs.gnu.org; Fri, 11 Jun 2021 07:41:31 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:44510) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lrfXX-00042y-0a for bug-guix@gnu.org; Fri, 11 Jun 2021 07:41:31 -0400 Received: from mail-ed1-x52a.google.com ([2a00:1450:4864:20::52a]:33318) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lrfXV-0002dR-8Y for bug-guix@gnu.org; Fri, 11 Jun 2021 07:41:30 -0400 Received: by mail-ed1-x52a.google.com with SMTP id f5so31736051eds.0 for ; Fri, 11 Jun 2021 04:41:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:date:user-agent:message-id:mime-version; bh=OMctrOYjghNCWWFZl1U748KGiF7Y595jQbloEKZK1XQ=; b=Hx6jE4vewNmgeLoxc717hw4vMn0o/5erMNSRszDpsz77B5Q4qP+uWBEHYlqUuMVO7+ KGzS4sAnkDlvPymRhOwJv5idHKS5hAam3csfL+u+PuJUHyL2R/VwO9UWO+918psnF/BX e2iIvrFOvuYFe28Vq9d65lwOyA7x9/hgJbJADKIk/yRENBpzVgSDa+9MrotBxDZzJAiM 1x8KAvTWYtdhtvtPkwCL/ss1NF9rQaYlq2athCxn9ENC7OlYTH6UTdyXXXAqamjmqx5G y/W09hARbBl8hwfX788T3weI9oAVtummTGF8q+lGOsBTk1BAMrOuDSbhZCAZuddqu2mR wCeA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:date:user-agent:message-id :mime-version; bh=OMctrOYjghNCWWFZl1U748KGiF7Y595jQbloEKZK1XQ=; b=MWiHV9amXNbBFXDYBeuBeQE50oMYX5dgVOz8Gj/yjPxrt3rFB5HOqtEYyWI5tHY4JZ QWs+EWruuWsuyPYdz34bZlC0C+OiwfLJrKYsShOHgm0+RkIS324E3F1LZ9eZpnT1xREM ZUsp8SKpuxjI0j1sIxbDlifrlf+myWB+NVeM2qgQ/DKxkhifW5USFB5Dvw3X/i+RUZsA g4zLo1Yo7+u89fFVdsdkPJw5KPyt1emXfK9OkYZt9+FsucwVXsYsufUmFfqZ47AHGGyK vo2PNNBVgTlqY8Xtg+aVKQ6SV5lqSLmBFgPK/+qgV3cQrTOTCBRae+mCV1O243wdtH5K sshw== X-Gm-Message-State: AOAM533GsbpBcD/vMRPK6c2n8Zq/s37c8kovF6IX9sai33W0smJ3jcEh kJ7hxyza86IZkbVnCfMzXAkrgvdDX6M= X-Google-Smtp-Source: ABdhPJwhYyxQ1KkrXRczcSScVrY8+y9E4bJzc7OJRPt884vaL2o0GzJhDYp6KFcBkH0LtZceZzAJ3Q== X-Received: by 2002:aa7:c7c7:: with SMTP id o7mr3296730eds.231.1623411687412; Fri, 11 Jun 2021 04:41:27 -0700 (PDT) Received: from cern.ch (84-74-112-29.dclient.hispeed.ch. [84.74.112.29]) by smtp.gmail.com with ESMTPSA id c14sm2040428ejb.2.2021.06.11.04.41.26 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 11 Jun 2021 04:41:26 -0700 (PDT) From: Ignacio Coterillo Date: Fri, 11 Jun 2021 13:21:02 +0200 User-agent: mu4e 1.4.15; emacs 28.0.50 Message-ID: <87pmwszl0a.fsf@gmail.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="=-=-=" Received-SPF: pass client-ip=2a00:1450:4864:20::52a; envelope-from=ignacio.coterillo@gmail.com; helo=mail-ed1-x52a.google.com X-Spam_score_int: -19 X-Spam_score: -2.0 X-Spam_bar: -- X-Spam_report: (-2.0 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, HTML_OBFUSCATE_10_20=0.093, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: -0.2 (/) X-Mailman-Approved-At: Fri, 11 Jun 2021 10:57:06 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.2 (-) --=-=-= Content-Type: text/html; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable

Hello,

[Summary]

  • Th= e icecat package doesn=E2=80=99t correctly set the LDLIBRARYPATH

variable during the wrap-program build stage to include mit-krb5 libraries so kerberos authentication fails as the libraries are not found at runtime:

[Details] Execution logs obtained by running icecat with the following setup:

$ export NSPRLOGFILE=3Dicecat $ export NSPRLOGMODULES=3Dnegotiateauth:5 $ icecat

icecat.mozlog:

[Parent 30197: Main Thread]: D/negotiateauth entering nsAuthGSSAPI::nsAuthG= SSAPI() [Parent 30197: Main Thread]: D/negotiateauth Fail to load gssapi library [Parent 30197: Main Thread]: D/negotiateauth entering nsAuthGSSAPI::Init()

Confirmed by running through strace:

$ strace -e =E2=80=9Copen,openat=E2=80=9D icecat 2>&1 |grep -E =E2= =80=9Cgssapi|krb5=E2=80=9D

(See results in attachment)

Best regards,

Ignacio

<#part type=3D=E2=80=9Capplication/octet-stream=E2=80=9D filename=3D=E2= =80=9C/home/spike/icecat-strace.log=E2=80=9D disposition=3Dattachment> <#/part>

--=-=-= Content-Type: text/plain Content-Disposition: inline Hello, [Summary] - The icecat package doesn't correctly set the LD_LIBRARY_PATH variable during the wrap-program build stage to include mit-krb5 libraries so kerberos authentication fails as the libraries are not found at runtime: [Details] Execution logs obtained by running icecat with the following setup: $ export NSPR_LOG_FILE=icecat $ export NSPR_LOG_MODULES=negotiateauth:5 $ icecat icecat.moz_log: ------------------------------------------------------------------------ [Parent 30197: Main Thread]: D/negotiateauth entering nsAuthGSSAPI::nsAuthGSSAPI() [Parent 30197: Main Thread]: D/negotiateauth Fail to load gssapi library [Parent 30197: Main Thread]: D/negotiateauth entering nsAuthGSSAPI::Init() Confirmed by running through strace: $ strace -e "open,openat" icecat 2>&1 |grep -E "gssapi|krb5" (See results in attachment) Best regards, Ignacio --=-=-= Content-Type: application/octet-stream Content-Disposition: attachment; filename=icecat-strace.log Content-Transfer-Encoding: base64 4p2vIHN0cmFjZSAtZSAib3BlbixvcGVuYXQiIGljZWNhdCAyPiYxIHxncmVwIC1FICJnc3NhcGl8 a3JiNSIgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgCm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvazRsY2Nm NTVuM2I0M2pmaGYxcmdpdmxtcjV3Ymk1MmEtcHVsc2VhdWRpby0xNC4wL2xpYi9saWJnc3NhcGlf a3JiNS5zby4yIiwgT19SRE9OTFl8T19DTE9FWEVDKSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxl IG9yIGRpcmVjdG9yeSkKb3BlbmF0KEFUX0ZEQ1dELCAiL2dudS9zdG9yZS9tNTljOWhqOWQ0bjY1 bWFpbWJwbXgyeHE1NmQybXZxcy1tZXNhLTIwLjIuNC9saWIvbGliZ3NzYXBpX2tyYjUuc28uMiIs IE9fUkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3Rv cnkpCm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvNW53eWcxd2Fjcm5nbno5ZHlubHg3d2Fi NzMzbjNsejMtbGlieHNjcm5zYXZlci0xLjIuMy9saWIvbGliZ3NzYXBpX2tyYjUuc28uMiIsIE9f UkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3Rvcnkp Cm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvenl5aXlreG1tMWJmejBhczY2YXZzd3dyemZ4 a2gxeDItaWNlY2F0LTc4LjExLjAtZ3VpeDAtcHJldmlldzEvbGliL2ljZWNhdC9saWJnc3NhcGlf a3JiNS5zby4yIiwgT19SRE9OTFl8T19DTE9FWEVDKSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxl IG9yIGRpcmVjdG9yeSkKb3BlbmF0KEFUX0ZEQ1dELCAiL2dudS9zdG9yZS9mYTZ3ajVieGtqNWxs MWQ3MjkyYTcwa25teWw3YTBjci1nbGliYy0yLjMxL2xpYi9saWJnc3NhcGlfa3JiNS5zby4yIiwg T19SRE9OTFl8T19DTE9FWEVDKSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxlIG9yIGRpcmVjdG9y eSkKb3BlbmF0KEFUX0ZEQ1dELCAiL2dudS9zdG9yZS8wMWI0dzNtNm1wNTV5NTMxa3lpMWc4c2ho NzIya3dxbS1nY2MtNy41LjAtbGliL2xpYi9saWJnc3NhcGlfa3JiNS5zby4yIiwgT19SRE9OTFl8 T19DTE9FWEVDKSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxlIG9yIGRpcmVjdG9yeSkKb3BlbmF0 KEFUX0ZEQ1dELCAiL2dudS9zdG9yZS8wMWI0dzNtNm1wNTV5NTMxa3lpMWc4c2hoNzIya3dxbS1n Y2MtNy41LjAtbGliL2xpYi9nY2MveDg2XzY0LXVua25vd24tbGludXgtZ251LzcuNS4wLy4uLy4u Ly4uL2xpYmdzc2FwaV9rcmI1LnNvLjIiLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5U IChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3Jl L2ZhNndqNWJ4a2o1bGwxZDcyOTJhNzBrbm15bDdhMGNyLWdsaWJjLTIuMzEvbGliL2xpYmdzc2Fw aV9rcmI1LnNvLjIiLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5UIChObyBzdWNoIGZp bGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3JlL2s0bGNjZjU1bjNi NDNqZmhmMXJnaXZsbXI1d2JpNTJhLXB1bHNlYXVkaW8tMTQuMC9saWIvbGliZ3NzYXBpLnNvLjQi LCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0 b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3JlL201OWM5aGo5ZDRuNjVtYWltYnBteDJ4 cTU2ZDJtdnFzLW1lc2EtMjAuMi40L2xpYi9saWJnc3NhcGkuc28uNCIsIE9fUkRPTkxZfE9fQ0xP RVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3RvcnkpCm9wZW5hdChBVF9G RENXRCwgIi9nbnUvc3RvcmUvNW53eWcxd2Fjcm5nbno5ZHlubHg3d2FiNzMzbjNsejMtbGlieHNj cm5zYXZlci0xLjIuMy9saWIvbGliZ3NzYXBpLnNvLjQiLCBPX1JET05MWXxPX0NMT0VYRUMpID0g LTEgRU5PRU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIv Z251L3N0b3JlL3p5eWl5a3htbTFiZnowYXM2NmF2c3d3cnpmeGtoMXgyLWljZWNhdC03OC4xMS4w LWd1aXgwLXByZXZpZXcxL2xpYi9pY2VjYXQvbGliZ3NzYXBpLnNvLjQiLCBPX1JET05MWXxPX0NM T0VYRUMpID0gLTEgRU5PRU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRf RkRDV0QsICIvZ251L3N0b3JlL2ZhNndqNWJ4a2o1bGwxZDcyOTJhNzBrbm15bDdhMGNyLWdsaWJj LTIuMzEvbGliL2xpYmdzc2FwaS5zby40IiwgT19SRE9OTFl8T19DTE9FWEVDKSA9IC0xIEVOT0VO VCAoTm8gc3VjaCBmaWxlIG9yIGRpcmVjdG9yeSkKb3BlbmF0KEFUX0ZEQ1dELCAiL2dudS9zdG9y ZS8wMWI0dzNtNm1wNTV5NTMxa3lpMWc4c2hoNzIya3dxbS1nY2MtNy41LjAtbGliL2xpYi9saWJn c3NhcGkuc28uNCIsIE9fUkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmls ZSBvciBkaXJlY3RvcnkpCm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvMDFiNHczbTZtcDU1 eTUzMWt5aTFnOHNoaDcyMmt3cW0tZ2NjLTcuNS4wLWxpYi9saWIvZ2NjL3g4Nl82NC11bmtub3du LWxpbnV4LWdudS83LjUuMC8uLi8uLi8uLi9saWJnc3NhcGkuc28uNCIsIE9fUkRPTkxZfE9fQ0xP RVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3RvcnkpCm9wZW5hdChBVF9G RENXRCwgIi9nbnUvc3RvcmUvZmE2d2o1YnhrajVsbDFkNzI5MmE3MGtubXlsN2EwY3ItZ2xpYmMt Mi4zMS9saWIvbGliZ3NzYXBpLnNvLjQiLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5U IChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3Jl L2s0bGNjZjU1bjNiNDNqZmhmMXJnaXZsbXI1d2JpNTJhLXB1bHNlYXVkaW8tMTQuMC9saWIvbGli Z3NzYXBpLnNvLjEiLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5UIChObyBzdWNoIGZp bGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3JlL201OWM5aGo5ZDRu NjVtYWltYnBteDJ4cTU2ZDJtdnFzLW1lc2EtMjAuMi40L2xpYi9saWJnc3NhcGkuc28uMSIsIE9f UkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3Rvcnkp Cm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvNW53eWcxd2Fjcm5nbno5ZHlubHg3d2FiNzMz bjNsejMtbGlieHNjcm5zYXZlci0xLjIuMy9saWIvbGliZ3NzYXBpLnNvLjEiLCBPX1JET05MWXxP X0NMT0VYRUMpID0gLTEgRU5PRU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQo QVRfRkRDV0QsICIvZ251L3N0b3JlL3p5eWl5a3htbTFiZnowYXM2NmF2c3d3cnpmeGtoMXgyLWlj ZWNhdC03OC4xMS4wLWd1aXgwLXByZXZpZXcxL2xpYi9pY2VjYXQvbGliZ3NzYXBpLnNvLjEiLCBP X1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5 KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3JlL2ZhNndqNWJ4a2o1bGwxZDcyOTJhNzBrbm15 bDdhMGNyLWdsaWJjLTIuMzEvbGliL2xpYmdzc2FwaS5zby4xIiwgT19SRE9OTFl8T19DTE9FWEVD KSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxlIG9yIGRpcmVjdG9yeSkKb3BlbmF0KEFUX0ZEQ1dE LCAiL2dudS9zdG9yZS8wMWI0dzNtNm1wNTV5NTMxa3lpMWc4c2hoNzIya3dxbS1nY2MtNy41LjAt bGliL2xpYi9saWJnc3NhcGkuc28uMSIsIE9fUkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQg KE5vIHN1Y2ggZmlsZSBvciBkaXJlY3RvcnkpCm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUv MDFiNHczbTZtcDU1eTUzMWt5aTFnOHNoaDcyMmt3cW0tZ2NjLTcuNS4wLWxpYi9saWIvZ2NjL3g4 Nl82NC11bmtub3duLWxpbnV4LWdudS83LjUuMC8uLi8uLi8uLi9saWJnc3NhcGkuc28uMSIsIE9f UkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3Rvcnkp Cm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvZmE2d2o1YnhrajVsbDFkNzI5MmE3MGtubXls N2EwY3ItZ2xpYmMtMi4zMS9saWIvbGliZ3NzYXBpLnNvLjEiLCBPX1JET05MWXxPX0NMT0VYRUMp ID0gLTEgRU5PRU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0Qs ICIvZ251L3N0b3JlL2s0bGNjZjU1bjNiNDNqZmhmMXJnaXZsbXI1d2JpNTJhLXB1bHNlYXVkaW8t MTQuMC9saWIvbGliZ3NzYXBpX2tyYjUuc28iLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5P RU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0 b3JlL201OWM5aGo5ZDRuNjVtYWltYnBteDJ4cTU2ZDJtdnFzLW1lc2EtMjAuMi40L2xpYi9saWJn c3NhcGlfa3JiNS5zbyIsIE9fUkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2gg ZmlsZSBvciBkaXJlY3RvcnkpCm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvNW53eWcxd2Fj cm5nbno5ZHlubHg3d2FiNzMzbjNsejMtbGlieHNjcm5zYXZlci0xLjIuMy9saWIvbGliZ3NzYXBp X2tyYjUuc28iLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5UIChObyBzdWNoIGZpbGUg b3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3JlL3p5eWl5a3htbTFiZnow YXM2NmF2c3d3cnpmeGtoMXgyLWljZWNhdC03OC4xMS4wLWd1aXgwLXByZXZpZXcxL2xpYi9pY2Vj YXQvbGliZ3NzYXBpX2tyYjUuc28iLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5UIChO byBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3JlL2Zh NndqNWJ4a2o1bGwxZDcyOTJhNzBrbm15bDdhMGNyLWdsaWJjLTIuMzEvbGliL2xpYmdzc2FwaV9r cmI1LnNvIiwgT19SRE9OTFl8T19DTE9FWEVDKSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxlIG9y IGRpcmVjdG9yeSkKb3BlbmF0KEFUX0ZEQ1dELCAiL2dudS9zdG9yZS8wMWI0dzNtNm1wNTV5NTMx a3lpMWc4c2hoNzIya3dxbS1nY2MtNy41LjAtbGliL2xpYi9saWJnc3NhcGlfa3JiNS5zbyIsIE9f UkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3Rvcnkp Cm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvMDFiNHczbTZtcDU1eTUzMWt5aTFnOHNoaDcy Mmt3cW0tZ2NjLTcuNS4wLWxpYi9saWIvZ2NjL3g4Nl82NC11bmtub3duLWxpbnV4LWdudS83LjUu MC8uLi8uLi8uLi9saWJnc3NhcGlfa3JiNS5zbyIsIE9fUkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBF Tk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3RvcnkpCm9wZW5hdChBVF9GRENXRCwgIi9nbnUv c3RvcmUvZmE2d2o1YnhrajVsbDFkNzI5MmE3MGtubXlsN2EwY3ItZ2xpYmMtMi4zMS9saWIvbGli Z3NzYXBpX2tyYjUuc28iLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5UIChObyBzdWNo IGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3JlL2s0bGNjZjU1 bjNiNDNqZmhmMXJnaXZsbXI1d2JpNTJhLXB1bHNlYXVkaW8tMTQuMC9saWIvbGliZ3NzYXBpLnNv IiwgT19SRE9OTFl8T19DTE9FWEVDKSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxlIG9yIGRpcmVj dG9yeSkKb3BlbmF0KEFUX0ZEQ1dELCAiL2dudS9zdG9yZS9tNTljOWhqOWQ0bjY1bWFpbWJwbXgy eHE1NmQybXZxcy1tZXNhLTIwLjIuNC9saWIvbGliZ3NzYXBpLnNvIiwgT19SRE9OTFl8T19DTE9F WEVDKSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxlIG9yIGRpcmVjdG9yeSkKb3BlbmF0KEFUX0ZE Q1dELCAiL2dudS9zdG9yZS81bnd5ZzF3YWNybmduejlkeW5seDd3YWI3MzNuM2x6My1saWJ4c2Ny bnNhdmVyLTEuMi4zL2xpYi9saWJnc3NhcGkuc28iLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEg RU5PRU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251 L3N0b3JlL3p5eWl5a3htbTFiZnowYXM2NmF2c3d3cnpmeGtoMXgyLWljZWNhdC03OC4xMS4wLWd1 aXgwLXByZXZpZXcxL2xpYi9pY2VjYXQvbGliZ3NzYXBpLnNvIiwgT19SRE9OTFl8T19DTE9FWEVD KSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxlIG9yIGRpcmVjdG9yeSkKb3BlbmF0KEFUX0ZEQ1dE LCAiL2dudS9zdG9yZS9mYTZ3ajVieGtqNWxsMWQ3MjkyYTcwa25teWw3YTBjci1nbGliYy0yLjMx L2xpYi9saWJnc3NhcGkuc28iLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5UIChObyBz dWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3JlLzAxYjR3 M202bXA1NXk1MzFreWkxZzhzaGg3MjJrd3FtLWdjYy03LjUuMC1saWIvbGliL2xpYmdzc2FwaS5z byIsIE9fUkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJl Y3RvcnkpCm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvMDFiNHczbTZtcDU1eTUzMWt5aTFn OHNoaDcyMmt3cW0tZ2NjLTcuNS4wLWxpYi9saWIvZ2NjL3g4Nl82NC11bmtub3duLWxpbnV4LWdu dS83LjUuMC8uLi8uLi8uLi9saWJnc3NhcGkuc28iLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEg RU5PRU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251 L3N0b3JlL2ZhNndqNWJ4a2o1bGwxZDcyOTJhNzBrbm15bDdhMGNyLWdsaWJjLTIuMzEvbGliL2xp Ymdzc2FwaS5zbyIsIE9fUkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmls ZSBvciBkaXJlY3RvcnkpCg== --=-=-=-- From unknown Mon Jun 23 04:13:33 2025 X-Loop: help-debbugs@gnu.org Subject: bug#48959: icecat imcomplete LD_LIBRARY_PATH affecting Kerberos authentication Resent-From: Mark H Weaver Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 14 Jun 2021 18:51:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 48959 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Ignacio Coterillo , 48959@debbugs.gnu.org Received: via spool by 48959-submit@debbugs.gnu.org id=B48959.162369660219253 (code B ref 48959); Mon, 14 Jun 2021 18:51:01 +0000 Received: (at 48959) by debbugs.gnu.org; 14 Jun 2021 18:50:02 +0000 Received: from localhost ([127.0.0.1]:47809 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lsrer-00050L-Pc for submit@debbugs.gnu.org; Mon, 14 Jun 2021 14:50:02 -0400 Received: from world.peace.net ([64.112.178.59]:33812) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lsrep-0004zv-PW for 48959@debbugs.gnu.org; Mon, 14 Jun 2021 14:50:00 -0400 Received: from mhw by world.peace.net with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lsreh-0003sF-PH; Mon, 14 Jun 2021 14:49:51 -0400 From: Mark H Weaver In-Reply-To: <87pmwszl0a.fsf@gmail.com> References: <87pmwszl0a.fsf@gmail.com> Date: Mon, 14 Jun 2021 14:48:50 -0400 Message-ID: <878s3c46z6.fsf@netris.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) --=-=-= Content-Type: text/plain Hi Ignacio, Ignacio Coterillo writes: > [Summary] > - The icecat package doesn't correctly set the LD_LIBRARY_PATH > variable during the wrap-program build stage to include mit-krb5 libraries > so kerberos authentication fails as the libraries are not found at runtime: Thanks for this report. I've attached a proposed patch that might fix the problem. I've verified that the modified IceCat package builds and runs successfully, but I'm unable to test it properly because I don't have access to any system that uses Kerberos authentication. Are you able to test this patch? One way to do so is to clone the master branch of our git repository, apply this patch to the Guix git checkout and build it, and then run that modified copy of Guix (without installing it) to build icecat. See sections 16.1 (Building from Git) and 16.2 (Running Guix Before It Is Installed) of our manual for details of how to do this. If you encounter difficulties or have additional questions, please do not hesitate to ask. Regards, Mark --=-=-= Content-Type: text/x-patch Content-Disposition: inline; filename=0001-UNTESTED-gnu-icecat-Fix-Kerberos-support.patch Content-Description: [PATCH] UNTESTED: gnu: icecat: Fix Kerberos support >From 857f829906e0f8d9583a32ad47c91149c7714171 Mon Sep 17 00:00:00 2001 From: Mark H Weaver Date: Sun, 13 Jun 2021 19:11:15 -0400 Subject: [PATCH] UNTESTED: gnu: icecat: Fix Kerberos support. Fixes . * gnu/packages/gnuzilla.scm (icecat)[arguments]: In the 'wrap-program' phase, add mit-krb5 to the LD_LIBRARY_PATH. --- gnu/packages/gnuzilla.scm | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/gnu/packages/gnuzilla.scm b/gnu/packages/gnuzilla.scm index c63809c20c..a997fc1c73 100644 --- a/gnu/packages/gnuzilla.scm +++ b/gnu/packages/gnuzilla.scm @@ -1276,14 +1276,19 @@ from forcing GEXP-PROMISE." (pulseaudio (assoc-ref inputs "pulseaudio")) (pulseaudio-lib (string-append pulseaudio "/lib")) (libxscrnsaver (assoc-ref inputs "libxscrnsaver")) - (libxscrnsaver-lib (string-append libxscrnsaver "/lib"))) + (libxscrnsaver-lib (string-append libxscrnsaver "/lib")) + (mit-krb5 (assoc-ref inputs "mit-krb5")) + (mit-krb5-lib (string-append mit-krb5 "/lib"))) (wrap-program (car (find-files lib "^icecat$")) `("XDG_DATA_DIRS" prefix (,gtk-share)) ;; The following line is commented out because the icecat ;; package on guix has been observed to be unstable when ;; using wayland, and the bundled extensions stop working. ;; `("MOZ_ENABLE_WAYLAND" = ("1")) - `("LD_LIBRARY_PATH" prefix (,pulseaudio-lib ,mesa-lib ,libxscrnsaver-lib))) + `("LD_LIBRARY_PATH" prefix (,pulseaudio-lib + ,mesa-lib + ,libxscrnsaver-lib + ,mit-krb5-lib))) #t)))))) (home-page "https://www.gnu.org/software/gnuzilla/") (synopsis "Entirely free browser derived from Mozilla Firefox") -- 2.31.1 --=-=-= Content-Type: text/plain -- Disinformation flourishes because many people care deeply about injustice but very few check the facts. Ask me about . --=-=-=-- From unknown Mon Jun 23 04:13:33 2025 X-Loop: help-debbugs@gnu.org Subject: bug#48959: icecat imcomplete LD_LIBRARY_PATH affecting Kerberos authentication Resent-From: Mark H Weaver Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Mon, 14 Jun 2021 19:02:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 48959 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Ignacio Coterillo , 48959@debbugs.gnu.org Received: via spool by 48959-submit@debbugs.gnu.org id=B48959.162369731920415 (code B ref 48959); Mon, 14 Jun 2021 19:02:01 +0000 Received: (at 48959) by debbugs.gnu.org; 14 Jun 2021 19:01:59 +0000 Received: from localhost ([127.0.0.1]:47817 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lsrqQ-0005JD-V8 for submit@debbugs.gnu.org; Mon, 14 Jun 2021 15:01:59 -0400 Received: from world.peace.net ([64.112.178.59]:33842) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lsrqO-0005Iw-Fu for 48959@debbugs.gnu.org; Mon, 14 Jun 2021 15:01:56 -0400 Received: from mhw by world.peace.net with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lsrqH-0004hq-IU; Mon, 14 Jun 2021 15:01:49 -0400 From: Mark H Weaver In-Reply-To: <878s3c46z6.fsf@netris.org> References: <87pmwszl0a.fsf@gmail.com> <878s3c46z6.fsf@netris.org> Date: Mon, 14 Jun 2021 15:00:52 -0400 Message-ID: <8735tk46f4.fsf@netris.org> MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hello again, Earlier, I wrote: > Are you able to test this patch? One way to do so is to clone the > master branch of our git repository, apply this patch to the Guix git > checkout and build it, and then run that modified copy of Guix (without > installing it) to build icecat. On second thought, it would be sufficient and *much* easier to simply verify that Kerberos authentication works in IceCat if you launch it with the following Bash shell command: LD_LIBRARY_PATH=$(guix build mit-krb5)/lib icecat Would you like to try it and report back? Thanks, Mark -- Disinformation flourishes because many people care deeply about injustice but very few check the facts. Ask me about . From unknown Mon Jun 23 04:13:33 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: Ignacio Coterillo Subject: bug#48959: closed (Re: bug#48959: icecat imcomplete LD_LIBRARY_PATH affecting Kerberos authentication) Message-ID: References: <87pmwn30z8.fsf@netris.org> <87pmwszl0a.fsf@gmail.com> X-Gnu-PR-Message: they-closed 48959 X-Gnu-PR-Package: guix Reply-To: 48959@debbugs.gnu.org Date: Tue, 15 Jun 2021 09:58:01 +0000 Content-Type: multipart/mixed; boundary="----------=_1623751081-15488-1" This is a multi-part message in MIME format... ------------=_1623751081-15488-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #48959: icecat imcomplete LD_LIBRARY_PATH affecting Kerberos authentication which was filed against the guix package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 48959@debbugs.gnu.org. --=20 48959: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D48959 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1623751081-15488-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 48959-done) by debbugs.gnu.org; 15 Jun 2021 09:57:10 +0000 Received: from localhost ([127.0.0.1]:48449 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lt5oj-00040m-M6 for submit@debbugs.gnu.org; Tue, 15 Jun 2021 05:57:09 -0400 Received: from world.peace.net ([64.112.178.59]:35674) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lt5oh-00040I-DH for 48959-done@debbugs.gnu.org; Tue, 15 Jun 2021 05:57:08 -0400 Received: from mhw by world.peace.net with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lt5oa-0007aJ-75; Tue, 15 Jun 2021 05:57:00 -0400 From: Mark H Weaver To: Ignacio Coterillo Subject: Re: bug#48959: icecat imcomplete LD_LIBRARY_PATH affecting Kerberos authentication In-Reply-To: <87zgvrmzvs.fsf@gmail.com> References: <87pmwszl0a.fsf@gmail.com> <878s3c46z6.fsf@netris.org> <8735tk46f4.fsf@netris.org> <87zgvrmzvs.fsf@gmail.com> Date: Tue, 15 Jun 2021 05:56:00 -0400 Message-ID: <87pmwn30z8.fsf@netris.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 48959-done Cc: 48959-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Ignacio, Ignacio Coterillo writes: > First, I confirm that Kerberos authentication works when running=20 > icecat as: > > LD_LIBRARY_PATH=3D$(guix build mit-krb5)/lib icecat Thanks. I just pushed my proposed patch to the master branch, commit 61b904b744c1f16084c79e526837cc7fe73f9b92. I'm also closing this bug now, but feel free to reopen it if there are remaining problems. > Regarding the patch, I actually tried to build the package with those > exact changes myself before submitting the bug for further testing but > didn't manage to complete the build. The build process would go on > for over a day (most of the time spent in bootstrapping the rust > inputs) until failing because of lack of disk space. Hmm. If you built a recent commit from the 'master' branch of Guix, and had substitutes enabled, then it should _not_ have tried to build Rust locally. My guess is that you didn't pass "--sysconfdir=3D/etc" to ./configure. Consequently, the locally-built Guix is looking in /usr/local/etc/guix for its authorized signing keys, whereas the default configuration of Guix (as self-built by Guix itself and as installed by our distributed installers) looks in /etc/guix. That would explain why the locally-built Guix is not using substitutes. I suggest passing "--sysconfdir=3D/etc" (and "--localstatedir=3D/var") to ./configure, re-running "make" in your Git checkout, and trying again. Alternatively, you could copy (using "cp -a") /etc/guix to /usr/local/etc/guix. > Is it possible to estimate a priori the amount of space a build would > require to prevent failures? No. However, 80 GB is more than sufficient to build an entire GNOME-based Guix system plus Rust and IceCat from source code. I know this because for several years I've been building my GNOME-based Guix system locally (with substitutes disabled) on a Thinkpad X200 with 4 GB of RAM, 8 GB of Swap, and only ~75 GB of disk available for Guix. If you have a separate /tmp partition, perhaps it is too small. When building packages locally, the temporary build directories are put in /tmp by default. It's possible to configure 'guix-daemon' to put them elsewhere, either by passing the TMPDIR environment variable to 'guix-daemon' (if running it by hand), or via the 'tmpdir' field of the 'guix-configuration' by putting something like the following code in the 'services' field of your OS configuration. --8<---------------cut here---------------start------------->8--- _ (services (cons* =E2=80=A6 __________________ (modify-services %desktop-services ____________________ (guix-service-type config =3D> _______________________________________ (guix-configuration _________________________________________ (inherit config) _________________________________________ (tmpdir "/var/tmp")))))) --8<---------------cut here---------------end--------------->8--- Please let us know if you continue to have difficulties. Regards, Mark --=20 Disinformation flourishes because many people care deeply about injustice but very few check the facts. Ask me about . ------------=_1623751081-15488-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 11 Jun 2021 14:57:17 +0000 Received: from localhost ([127.0.0.1]:39800 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lriap-0000Qp-9y for submit@debbugs.gnu.org; Fri, 11 Jun 2021 10:57:17 -0400 Received: from lists.gnu.org ([209.51.188.17]:60654) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lrfXX-0001J0-HE for submit@debbugs.gnu.org; Fri, 11 Jun 2021 07:41:31 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:44510) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lrfXX-00042y-0a for bug-guix@gnu.org; Fri, 11 Jun 2021 07:41:31 -0400 Received: from mail-ed1-x52a.google.com ([2a00:1450:4864:20::52a]:33318) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lrfXV-0002dR-8Y for bug-guix@gnu.org; Fri, 11 Jun 2021 07:41:30 -0400 Received: by mail-ed1-x52a.google.com with SMTP id f5so31736051eds.0 for ; Fri, 11 Jun 2021 04:41:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:date:user-agent:message-id:mime-version; bh=OMctrOYjghNCWWFZl1U748KGiF7Y595jQbloEKZK1XQ=; b=Hx6jE4vewNmgeLoxc717hw4vMn0o/5erMNSRszDpsz77B5Q4qP+uWBEHYlqUuMVO7+ KGzS4sAnkDlvPymRhOwJv5idHKS5hAam3csfL+u+PuJUHyL2R/VwO9UWO+918psnF/BX e2iIvrFOvuYFe28Vq9d65lwOyA7x9/hgJbJADKIk/yRENBpzVgSDa+9MrotBxDZzJAiM 1x8KAvTWYtdhtvtPkwCL/ss1NF9rQaYlq2athCxn9ENC7OlYTH6UTdyXXXAqamjmqx5G y/W09hARbBl8hwfX788T3weI9oAVtummTGF8q+lGOsBTk1BAMrOuDSbhZCAZuddqu2mR wCeA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:date:user-agent:message-id :mime-version; bh=OMctrOYjghNCWWFZl1U748KGiF7Y595jQbloEKZK1XQ=; b=MWiHV9amXNbBFXDYBeuBeQE50oMYX5dgVOz8Gj/yjPxrt3rFB5HOqtEYyWI5tHY4JZ QWs+EWruuWsuyPYdz34bZlC0C+OiwfLJrKYsShOHgm0+RkIS324E3F1LZ9eZpnT1xREM ZUsp8SKpuxjI0j1sIxbDlifrlf+myWB+NVeM2qgQ/DKxkhifW5USFB5Dvw3X/i+RUZsA g4zLo1Yo7+u89fFVdsdkPJw5KPyt1emXfK9OkYZt9+FsucwVXsYsufUmFfqZ47AHGGyK vo2PNNBVgTlqY8Xtg+aVKQ6SV5lqSLmBFgPK/+qgV3cQrTOTCBRae+mCV1O243wdtH5K sshw== X-Gm-Message-State: AOAM533GsbpBcD/vMRPK6c2n8Zq/s37c8kovF6IX9sai33W0smJ3jcEh kJ7hxyza86IZkbVnCfMzXAkrgvdDX6M= X-Google-Smtp-Source: ABdhPJwhYyxQ1KkrXRczcSScVrY8+y9E4bJzc7OJRPt884vaL2o0GzJhDYp6KFcBkH0LtZceZzAJ3Q== X-Received: by 2002:aa7:c7c7:: with SMTP id o7mr3296730eds.231.1623411687412; Fri, 11 Jun 2021 04:41:27 -0700 (PDT) Received: from cern.ch (84-74-112-29.dclient.hispeed.ch. [84.74.112.29]) by smtp.gmail.com with ESMTPSA id c14sm2040428ejb.2.2021.06.11.04.41.26 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 11 Jun 2021 04:41:26 -0700 (PDT) From: Ignacio Coterillo To: bug-guix@gnu.org Subject: icecat imcomplete LD_LIBRARY_PATH affecting Kerberos authentication Date: Fri, 11 Jun 2021 13:21:02 +0200 User-agent: mu4e 1.4.15; emacs 28.0.50 Message-ID: <87pmwszl0a.fsf@gmail.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="=-=-=" Received-SPF: pass client-ip=2a00:1450:4864:20::52a; envelope-from=ignacio.coterillo@gmail.com; helo=mail-ed1-x52a.google.com X-Spam_score_int: -19 X-Spam_score: -2.0 X-Spam_bar: -- X-Spam_report: (-2.0 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, HTML_OBFUSCATE_10_20=0.093, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: -0.2 (/) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Fri, 11 Jun 2021 10:57:06 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.2 (-) --=-=-= Content-Type: text/html; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable

Hello,

[Summary]

  • Th= e icecat package doesn=E2=80=99t correctly set the LDLIBRARYPATH

variable during the wrap-program build stage to include mit-krb5 libraries so kerberos authentication fails as the libraries are not found at runtime:

[Details] Execution logs obtained by running icecat with the following setup:

$ export NSPRLOGFILE=3Dicecat $ export NSPRLOGMODULES=3Dnegotiateauth:5 $ icecat

icecat.mozlog:

[Parent 30197: Main Thread]: D/negotiateauth entering nsAuthGSSAPI::nsAuthG= SSAPI() [Parent 30197: Main Thread]: D/negotiateauth Fail to load gssapi library [Parent 30197: Main Thread]: D/negotiateauth entering nsAuthGSSAPI::Init()

Confirmed by running through strace:

$ strace -e =E2=80=9Copen,openat=E2=80=9D icecat 2>&1 |grep -E =E2= =80=9Cgssapi|krb5=E2=80=9D

(See results in attachment)

Best regards,

Ignacio

<#part type=3D=E2=80=9Capplication/octet-stream=E2=80=9D filename=3D=E2= =80=9C/home/spike/icecat-strace.log=E2=80=9D disposition=3Dattachment> <#/part>

--=-=-= Content-Type: text/plain Content-Disposition: inline Hello, [Summary] - The icecat package doesn't correctly set the LD_LIBRARY_PATH variable during the wrap-program build stage to include mit-krb5 libraries so kerberos authentication fails as the libraries are not found at runtime: [Details] Execution logs obtained by running icecat with the following setup: $ export NSPR_LOG_FILE=icecat $ export NSPR_LOG_MODULES=negotiateauth:5 $ icecat icecat.moz_log: ------------------------------------------------------------------------ [Parent 30197: Main Thread]: D/negotiateauth entering nsAuthGSSAPI::nsAuthGSSAPI() [Parent 30197: Main Thread]: D/negotiateauth Fail to load gssapi library [Parent 30197: Main Thread]: D/negotiateauth entering nsAuthGSSAPI::Init() Confirmed by running through strace: $ strace -e "open,openat" icecat 2>&1 |grep -E "gssapi|krb5" (See results in attachment) Best regards, Ignacio --=-=-= Content-Type: application/octet-stream Content-Disposition: attachment; filename=icecat-strace.log Content-Transfer-Encoding: base64 4p2vIHN0cmFjZSAtZSAib3BlbixvcGVuYXQiIGljZWNhdCAyPiYxIHxncmVwIC1FICJnc3NhcGl8 a3JiNSIgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgCm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvazRsY2Nm NTVuM2I0M2pmaGYxcmdpdmxtcjV3Ymk1MmEtcHVsc2VhdWRpby0xNC4wL2xpYi9saWJnc3NhcGlf a3JiNS5zby4yIiwgT19SRE9OTFl8T19DTE9FWEVDKSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxl IG9yIGRpcmVjdG9yeSkKb3BlbmF0KEFUX0ZEQ1dELCAiL2dudS9zdG9yZS9tNTljOWhqOWQ0bjY1 bWFpbWJwbXgyeHE1NmQybXZxcy1tZXNhLTIwLjIuNC9saWIvbGliZ3NzYXBpX2tyYjUuc28uMiIs IE9fUkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3Rv cnkpCm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvNW53eWcxd2Fjcm5nbno5ZHlubHg3d2Fi NzMzbjNsejMtbGlieHNjcm5zYXZlci0xLjIuMy9saWIvbGliZ3NzYXBpX2tyYjUuc28uMiIsIE9f UkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3Rvcnkp Cm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvenl5aXlreG1tMWJmejBhczY2YXZzd3dyemZ4 a2gxeDItaWNlY2F0LTc4LjExLjAtZ3VpeDAtcHJldmlldzEvbGliL2ljZWNhdC9saWJnc3NhcGlf a3JiNS5zby4yIiwgT19SRE9OTFl8T19DTE9FWEVDKSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxl IG9yIGRpcmVjdG9yeSkKb3BlbmF0KEFUX0ZEQ1dELCAiL2dudS9zdG9yZS9mYTZ3ajVieGtqNWxs MWQ3MjkyYTcwa25teWw3YTBjci1nbGliYy0yLjMxL2xpYi9saWJnc3NhcGlfa3JiNS5zby4yIiwg T19SRE9OTFl8T19DTE9FWEVDKSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxlIG9yIGRpcmVjdG9y eSkKb3BlbmF0KEFUX0ZEQ1dELCAiL2dudS9zdG9yZS8wMWI0dzNtNm1wNTV5NTMxa3lpMWc4c2ho NzIya3dxbS1nY2MtNy41LjAtbGliL2xpYi9saWJnc3NhcGlfa3JiNS5zby4yIiwgT19SRE9OTFl8 T19DTE9FWEVDKSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxlIG9yIGRpcmVjdG9yeSkKb3BlbmF0 KEFUX0ZEQ1dELCAiL2dudS9zdG9yZS8wMWI0dzNtNm1wNTV5NTMxa3lpMWc4c2hoNzIya3dxbS1n Y2MtNy41LjAtbGliL2xpYi9nY2MveDg2XzY0LXVua25vd24tbGludXgtZ251LzcuNS4wLy4uLy4u Ly4uL2xpYmdzc2FwaV9rcmI1LnNvLjIiLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5U IChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3Jl L2ZhNndqNWJ4a2o1bGwxZDcyOTJhNzBrbm15bDdhMGNyLWdsaWJjLTIuMzEvbGliL2xpYmdzc2Fw aV9rcmI1LnNvLjIiLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5UIChObyBzdWNoIGZp bGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3JlL2s0bGNjZjU1bjNi NDNqZmhmMXJnaXZsbXI1d2JpNTJhLXB1bHNlYXVkaW8tMTQuMC9saWIvbGliZ3NzYXBpLnNvLjQi LCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0 b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3JlL201OWM5aGo5ZDRuNjVtYWltYnBteDJ4 cTU2ZDJtdnFzLW1lc2EtMjAuMi40L2xpYi9saWJnc3NhcGkuc28uNCIsIE9fUkRPTkxZfE9fQ0xP RVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3RvcnkpCm9wZW5hdChBVF9G RENXRCwgIi9nbnUvc3RvcmUvNW53eWcxd2Fjcm5nbno5ZHlubHg3d2FiNzMzbjNsejMtbGlieHNj cm5zYXZlci0xLjIuMy9saWIvbGliZ3NzYXBpLnNvLjQiLCBPX1JET05MWXxPX0NMT0VYRUMpID0g LTEgRU5PRU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIv Z251L3N0b3JlL3p5eWl5a3htbTFiZnowYXM2NmF2c3d3cnpmeGtoMXgyLWljZWNhdC03OC4xMS4w LWd1aXgwLXByZXZpZXcxL2xpYi9pY2VjYXQvbGliZ3NzYXBpLnNvLjQiLCBPX1JET05MWXxPX0NM T0VYRUMpID0gLTEgRU5PRU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRf RkRDV0QsICIvZ251L3N0b3JlL2ZhNndqNWJ4a2o1bGwxZDcyOTJhNzBrbm15bDdhMGNyLWdsaWJj LTIuMzEvbGliL2xpYmdzc2FwaS5zby40IiwgT19SRE9OTFl8T19DTE9FWEVDKSA9IC0xIEVOT0VO VCAoTm8gc3VjaCBmaWxlIG9yIGRpcmVjdG9yeSkKb3BlbmF0KEFUX0ZEQ1dELCAiL2dudS9zdG9y ZS8wMWI0dzNtNm1wNTV5NTMxa3lpMWc4c2hoNzIya3dxbS1nY2MtNy41LjAtbGliL2xpYi9saWJn c3NhcGkuc28uNCIsIE9fUkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmls ZSBvciBkaXJlY3RvcnkpCm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvMDFiNHczbTZtcDU1 eTUzMWt5aTFnOHNoaDcyMmt3cW0tZ2NjLTcuNS4wLWxpYi9saWIvZ2NjL3g4Nl82NC11bmtub3du LWxpbnV4LWdudS83LjUuMC8uLi8uLi8uLi9saWJnc3NhcGkuc28uNCIsIE9fUkRPTkxZfE9fQ0xP RVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3RvcnkpCm9wZW5hdChBVF9G RENXRCwgIi9nbnUvc3RvcmUvZmE2d2o1YnhrajVsbDFkNzI5MmE3MGtubXlsN2EwY3ItZ2xpYmMt Mi4zMS9saWIvbGliZ3NzYXBpLnNvLjQiLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5U IChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3Jl L2s0bGNjZjU1bjNiNDNqZmhmMXJnaXZsbXI1d2JpNTJhLXB1bHNlYXVkaW8tMTQuMC9saWIvbGli Z3NzYXBpLnNvLjEiLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5UIChObyBzdWNoIGZp bGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3JlL201OWM5aGo5ZDRu NjVtYWltYnBteDJ4cTU2ZDJtdnFzLW1lc2EtMjAuMi40L2xpYi9saWJnc3NhcGkuc28uMSIsIE9f UkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3Rvcnkp Cm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvNW53eWcxd2Fjcm5nbno5ZHlubHg3d2FiNzMz bjNsejMtbGlieHNjcm5zYXZlci0xLjIuMy9saWIvbGliZ3NzYXBpLnNvLjEiLCBPX1JET05MWXxP X0NMT0VYRUMpID0gLTEgRU5PRU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQo QVRfRkRDV0QsICIvZ251L3N0b3JlL3p5eWl5a3htbTFiZnowYXM2NmF2c3d3cnpmeGtoMXgyLWlj ZWNhdC03OC4xMS4wLWd1aXgwLXByZXZpZXcxL2xpYi9pY2VjYXQvbGliZ3NzYXBpLnNvLjEiLCBP X1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5 KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3JlL2ZhNndqNWJ4a2o1bGwxZDcyOTJhNzBrbm15 bDdhMGNyLWdsaWJjLTIuMzEvbGliL2xpYmdzc2FwaS5zby4xIiwgT19SRE9OTFl8T19DTE9FWEVD KSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxlIG9yIGRpcmVjdG9yeSkKb3BlbmF0KEFUX0ZEQ1dE LCAiL2dudS9zdG9yZS8wMWI0dzNtNm1wNTV5NTMxa3lpMWc4c2hoNzIya3dxbS1nY2MtNy41LjAt bGliL2xpYi9saWJnc3NhcGkuc28uMSIsIE9fUkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQg KE5vIHN1Y2ggZmlsZSBvciBkaXJlY3RvcnkpCm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUv MDFiNHczbTZtcDU1eTUzMWt5aTFnOHNoaDcyMmt3cW0tZ2NjLTcuNS4wLWxpYi9saWIvZ2NjL3g4 Nl82NC11bmtub3duLWxpbnV4LWdudS83LjUuMC8uLi8uLi8uLi9saWJnc3NhcGkuc28uMSIsIE9f UkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3Rvcnkp Cm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvZmE2d2o1YnhrajVsbDFkNzI5MmE3MGtubXls N2EwY3ItZ2xpYmMtMi4zMS9saWIvbGliZ3NzYXBpLnNvLjEiLCBPX1JET05MWXxPX0NMT0VYRUMp ID0gLTEgRU5PRU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0Qs ICIvZ251L3N0b3JlL2s0bGNjZjU1bjNiNDNqZmhmMXJnaXZsbXI1d2JpNTJhLXB1bHNlYXVkaW8t MTQuMC9saWIvbGliZ3NzYXBpX2tyYjUuc28iLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5P RU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0 b3JlL201OWM5aGo5ZDRuNjVtYWltYnBteDJ4cTU2ZDJtdnFzLW1lc2EtMjAuMi40L2xpYi9saWJn c3NhcGlfa3JiNS5zbyIsIE9fUkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2gg ZmlsZSBvciBkaXJlY3RvcnkpCm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvNW53eWcxd2Fj cm5nbno5ZHlubHg3d2FiNzMzbjNsejMtbGlieHNjcm5zYXZlci0xLjIuMy9saWIvbGliZ3NzYXBp X2tyYjUuc28iLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5UIChObyBzdWNoIGZpbGUg b3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3JlL3p5eWl5a3htbTFiZnow YXM2NmF2c3d3cnpmeGtoMXgyLWljZWNhdC03OC4xMS4wLWd1aXgwLXByZXZpZXcxL2xpYi9pY2Vj YXQvbGliZ3NzYXBpX2tyYjUuc28iLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5UIChO byBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3JlL2Zh NndqNWJ4a2o1bGwxZDcyOTJhNzBrbm15bDdhMGNyLWdsaWJjLTIuMzEvbGliL2xpYmdzc2FwaV9r cmI1LnNvIiwgT19SRE9OTFl8T19DTE9FWEVDKSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxlIG9y IGRpcmVjdG9yeSkKb3BlbmF0KEFUX0ZEQ1dELCAiL2dudS9zdG9yZS8wMWI0dzNtNm1wNTV5NTMx a3lpMWc4c2hoNzIya3dxbS1nY2MtNy41LjAtbGliL2xpYi9saWJnc3NhcGlfa3JiNS5zbyIsIE9f UkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3Rvcnkp Cm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvMDFiNHczbTZtcDU1eTUzMWt5aTFnOHNoaDcy Mmt3cW0tZ2NjLTcuNS4wLWxpYi9saWIvZ2NjL3g4Nl82NC11bmtub3duLWxpbnV4LWdudS83LjUu MC8uLi8uLi8uLi9saWJnc3NhcGlfa3JiNS5zbyIsIE9fUkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBF Tk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJlY3RvcnkpCm9wZW5hdChBVF9GRENXRCwgIi9nbnUv c3RvcmUvZmE2d2o1YnhrajVsbDFkNzI5MmE3MGtubXlsN2EwY3ItZ2xpYmMtMi4zMS9saWIvbGli Z3NzYXBpX2tyYjUuc28iLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5UIChObyBzdWNo IGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3JlL2s0bGNjZjU1 bjNiNDNqZmhmMXJnaXZsbXI1d2JpNTJhLXB1bHNlYXVkaW8tMTQuMC9saWIvbGliZ3NzYXBpLnNv IiwgT19SRE9OTFl8T19DTE9FWEVDKSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxlIG9yIGRpcmVj dG9yeSkKb3BlbmF0KEFUX0ZEQ1dELCAiL2dudS9zdG9yZS9tNTljOWhqOWQ0bjY1bWFpbWJwbXgy eHE1NmQybXZxcy1tZXNhLTIwLjIuNC9saWIvbGliZ3NzYXBpLnNvIiwgT19SRE9OTFl8T19DTE9F WEVDKSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxlIG9yIGRpcmVjdG9yeSkKb3BlbmF0KEFUX0ZE Q1dELCAiL2dudS9zdG9yZS81bnd5ZzF3YWNybmduejlkeW5seDd3YWI3MzNuM2x6My1saWJ4c2Ny bnNhdmVyLTEuMi4zL2xpYi9saWJnc3NhcGkuc28iLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEg RU5PRU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251 L3N0b3JlL3p5eWl5a3htbTFiZnowYXM2NmF2c3d3cnpmeGtoMXgyLWljZWNhdC03OC4xMS4wLWd1 aXgwLXByZXZpZXcxL2xpYi9pY2VjYXQvbGliZ3NzYXBpLnNvIiwgT19SRE9OTFl8T19DTE9FWEVD KSA9IC0xIEVOT0VOVCAoTm8gc3VjaCBmaWxlIG9yIGRpcmVjdG9yeSkKb3BlbmF0KEFUX0ZEQ1dE LCAiL2dudS9zdG9yZS9mYTZ3ajVieGtqNWxsMWQ3MjkyYTcwa25teWw3YTBjci1nbGliYy0yLjMx L2xpYi9saWJnc3NhcGkuc28iLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEgRU5PRU5UIChObyBz dWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251L3N0b3JlLzAxYjR3 M202bXA1NXk1MzFreWkxZzhzaGg3MjJrd3FtLWdjYy03LjUuMC1saWIvbGliL2xpYmdzc2FwaS5z byIsIE9fUkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmlsZSBvciBkaXJl Y3RvcnkpCm9wZW5hdChBVF9GRENXRCwgIi9nbnUvc3RvcmUvMDFiNHczbTZtcDU1eTUzMWt5aTFn OHNoaDcyMmt3cW0tZ2NjLTcuNS4wLWxpYi9saWIvZ2NjL3g4Nl82NC11bmtub3duLWxpbnV4LWdu dS83LjUuMC8uLi8uLi8uLi9saWJnc3NhcGkuc28iLCBPX1JET05MWXxPX0NMT0VYRUMpID0gLTEg RU5PRU5UIChObyBzdWNoIGZpbGUgb3IgZGlyZWN0b3J5KQpvcGVuYXQoQVRfRkRDV0QsICIvZ251 L3N0b3JlL2ZhNndqNWJ4a2o1bGwxZDcyOTJhNzBrbm15bDdhMGNyLWdsaWJjLTIuMzEvbGliL2xp Ymdzc2FwaS5zbyIsIE9fUkRPTkxZfE9fQ0xPRVhFQykgPSAtMSBFTk9FTlQgKE5vIHN1Y2ggZmls ZSBvciBkaXJlY3RvcnkpCg== --=-=-=-- ------------=_1623751081-15488-1-- From unknown Mon Jun 23 04:13:33 2025 X-Loop: help-debbugs@gnu.org Subject: bug#48959: icecat imcomplete LD_LIBRARY_PATH affecting Kerberos authentication Resent-From: Ignacio Coterillo Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 15 Jun 2021 14:13:04 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 48959 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Mark H Weaver Cc: 48959@debbugs.gnu.org Received: via spool by 48959-submit@debbugs.gnu.org id=B48959.162376637519946 (code B ref 48959); Tue, 15 Jun 2021 14:13:04 +0000 Received: (at 48959) by debbugs.gnu.org; 15 Jun 2021 14:12:55 +0000 Received: from localhost ([127.0.0.1]:50369 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lt9oE-0005BX-Lh for submit@debbugs.gnu.org; Tue, 15 Jun 2021 10:12:55 -0400 Received: from mail-wr1-f53.google.com ([209.85.221.53]:45637) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lt27C-0006bT-Np for 48959@debbugs.gnu.org; Tue, 15 Jun 2021 01:59:59 -0400 Received: by mail-wr1-f53.google.com with SMTP id z8so16909861wrp.12 for <48959@debbugs.gnu.org>; Mon, 14 Jun 2021 22:59:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=references:user-agent:from:to:cc:subject:in-reply-to:message-id :date:mime-version; bh=rZqVYqm7pF59gh8liNqbYA5nwN5g9OxwBCC8fYTh72w=; b=WyTnfdfjtlltX78lKAp/mFTAWPCqkJIf/8GgmKUyw7FZEtKp9vr3Crk1jp5aGtQsXu 8+A0m4bAhAdiCLs0vHDdAdOA60igYmftEIhJSLGFNuL8jNFTz03fvCsmQO91uwH7bY2l v2ZtrknEr5MoNagPTzRs6ycy4ldUQtB+RQXzaGdBT2+Ade5knuJEmWIB58gECYzPye+Y 88vqXPC3AyYwHaaHy+Pkvqi+xmtLkoOnSo1dVzRc4ugY4ba0ztLMymrUOhxa9c9VQL7Z /1FjTaMdRJ3yogtX68DsqUVIM+aC2+lffemUk+tveV/kTBY5Qu+vXCfGJ2+nkgLb0f4s ja3Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:references:user-agent:from:to:cc:subject :in-reply-to:message-id:date:mime-version; bh=rZqVYqm7pF59gh8liNqbYA5nwN5g9OxwBCC8fYTh72w=; b=QsL7r2HA9/Arr3ezBlHb5PRA3YRAZtNHqFk36UR0fflZyWjX0AGiDM/2X9cePb9jTl DioTYM7ajeXcXxZISwjng05P1LglQp3oag2WBVsLVT8YFhli7p3WY7IT6dNNcKmoGLO5 sSO3tyWrQQKK/GONpwzTATLO4eLYPOABEddnur5fuGTwM9QM99cW+BhP32E/aQU6Wj6c DxdO1FT+3jowKkrPHEZJ+DspRicaYWnIqjObcdN0TgIEbBY1fT2BrSzygrNQf7muedXO nIOZ9q50JfhzXCoYX1HJgDZfqGc3ljfAS+mKjN7+8PdIsazMCgUUlgnW4raeT3xNEsGg fizg== X-Gm-Message-State: AOAM533YP/0/14alcnW74Vl9BSo2oK6OYMzbRkakD1WpKF5tCSjmzXcM 6O4dTS3tBmufOu3b2b7CFrY= X-Google-Smtp-Source: ABdhPJzARPCLwqJueHpFDVT+QBHYIYAziFaKd0RRdb3deoWGb105FNvGUqVvIbjKfUy2lhca0rc+Kg== X-Received: by 2002:a5d:58c1:: with SMTP id o1mr22849724wrf.420.1623736792547; Mon, 14 Jun 2021 22:59:52 -0700 (PDT) Received: from cern.ch (84-74-112-29.dclient.hispeed.ch. [84.74.112.29]) by smtp.gmail.com with ESMTPSA id o26sm14135785wms.27.2021.06.14.22.59.51 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 14 Jun 2021 22:59:52 -0700 (PDT) References: <87pmwszl0a.fsf@gmail.com> <878s3c46z6.fsf@netris.org> <8735tk46f4.fsf@netris.org> User-agent: mu4e 1.4.15; emacs 28.0.50 From: Ignacio Coterillo In-reply-to: <8735tk46f4.fsf@netris.org> Message-ID: <87zgvrmzvs.fsf@gmail.com> Date: Tue, 15 Jun 2021 07:59:51 +0200 MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Spam-Score: 0.0 (/) X-Mailman-Approved-At: Tue, 15 Jun 2021 10:12:51 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi Mark, Thank you for looking at his. First, I confirm that Kerberos authentication works when running icecat as: LD_LIBRARY_PATH=$(guix build mit-krb5)/lib icecat Regarding the patch, I actually tried to build the package with those exact changes myself before submitting the bug for further testing but didn't manage to complete the build. The build process would go on for over a day (most of the time spent in bootstrapping the rust inputs) until failing because of lack of disk space. I've been reading through the different mailing list archives and the rust bootstrapping process seems to be a known problem. Is there a way of improve the behaviour to work on these kind of big packages? Is it possible to estimate a priori the amount of space a build would require to prevent failures? Best regards, Ignacio Mark H Weaver writes: > Hello again, > > Earlier, I wrote: >> Are you able to test this patch? One way to do so is to clone >> the >> master branch of our git repository, apply this patch to the >> Guix git >> checkout and build it, and then run that modified copy of Guix >> (without >> installing it) to build icecat. > > On second thought, it would be sufficient and *much* easier to > simply > verify that Kerberos authentication works in IceCat if you > launch it > with the following Bash shell command: > > LD_LIBRARY_PATH=$(guix build mit-krb5)/lib icecat > > Would you like to try it and report back? > > Thanks, > Mark