Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
cta
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Wiki
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Snippets
Build
Pipelines
Jobs
Pipeline schedules
Artifacts
Deploy
Releases
Package registry
Container registry
Harbor Registry
Model registry
Operate
Environments
Terraform modules
Monitor
Incidents
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
dCache
cta
Commits
29f704fb
Commit
29f704fb
authored
12 years ago
by
Giuseppe Lo Presti
Browse files
Options
Downloads
Patches
Plain Diff
Fixed Oracle workaround to use non-devel libraries
parent
a30178f8
Branches
Branches containing commit
Tags
Tags containing commit
No related merge requests found
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
ns/nsd.secure.sysconfig
+4
-25
4 additions, 25 deletions
ns/nsd.secure.sysconfig
with
4 additions
and
25 deletions
ns/nsd.secure.sysconfig
+
4
−
25
View file @
29f704fb
# Arguments for the nsd
# -f remain in the foreground
# -c <path> configuration file
# -l <logfile> the path to the name server log file
# -r start in read-only mode
# -t <nbthreads> the number of server threads
# -s enable security
# -n <nshostname> the name of the nshostname used in log files
#
# Options to pass to the ns daemon
NSD_OPTIONS=-s
# Should we run with another limit on the core file size than the default?
#DAEMON_COREFILE_LIMIT=unlimited
# This is required to avoid a clash of symbols with the ORACLE 11 libraries, that is redefining
# symbols of these 5 libraries in an incompatible way, making kerberos unusable.
# This set is the minimum set of libraries to be preloaded. An alternative is to
# recompile nsd with an explicit dependencies on these libraries (and putting these
# libraries before the oracle one in the link statement).
# However, we hope to have a fixed oracle library in the future, thus we using the preloading trick
export LD_PRELOAD=libgssapi.so.2:libgssapi_krb5.so:libkrb5.so:libkrb5support.so:libcom_err.so
# disable kerberos replay cache for performance reasons
# the security risk is acceptable
export KRB5RCACHETYPE=none
#workaround for ORACLE11g shipping own GSSAPI
export LD_PRELOAD=libgssapi.so.2:libgssapi_krb5.so.2:libkrb5.so.3:libkrb5support.so.0:libcom_err.so.2
DAEMON_COREFILE_LIMIT=unlimited
NSD_OPTIONS="-s -t 15"
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment