Kerberos Authentication setup: error in library

Document ID : KB000095644
Last Modified Date : 14/05/2018
Show Technical Document Details
When we try to validate keytab files using kinit, we get the following

kinit: relocation error: kinit: symbol
krb5_get_init_creds_opt_set_pac_request, version krb5_3_MIT not
defined in file with link time reference

Please note that kinit is linked to SSO’s libs, due to the
LD_LIBRARY_PATH configuration for smuser

$ ldd $(which kinit) => (0x00007ffe6adbb000) => /lib64/ (0x00007fa8d6391000) => /lib64/ (0x00007fa8d617d000) => /lib64/ (0x00007fa8d5f5d000) => /opt/CA/siteminder/lib/ (0x00007fa8d5d04000) => /opt/CA/siteminder/lib/ (0x00007fa8d5a10000) => /opt/CA/siteminder/lib/ (0x00007fa8d57cc000) => /lib64/ (0x00007fa8d55c8000) => /opt/CA/siteminder/lib/ (0x00007fa8d53ba000) => /lib64/ (0x00007fa8d51b6000) => /lib64/ (0x00007fa8d4f9d000) => /lib64/ (0x00007fa8d4d75000) => /lib64/ (0x00007fa8d4b71000) => /lib64/ (0x00007fa8d47a4000) => /opt/CA/siteminder/lib/ (0x00007fa8d45a0000) => /lib64/ (0x00007fa8d4384000) 
/lib64/ (0x00005608ca893000) => /lib64/ (0x00007fa8d4121000) 

To solve this error, the only workaround found is to override
LD_LIBRARY_PATH in order to use system libraries


Is that correct? 
Web Agent 12.52SP1CR06 on Apache 2.4 on RedHat 7
  You can modify the LD_LIBRARY_PATH to get the system lib in /lib64
  loaded before Siteminder internal libraries"

  LD_LIBRARY_PATH is set in ca_ps_env.ksh for siteminder
  dependencies. Since Policy Server 12.7 is 64 bit, references in
  LD_LIBRARY_PATH should point to 64bit libraries, jvm included