[SSSD] request for Heimdal support

Stephen Gallagher sgallagh at redhat.com
Wed Dec 21 20:49:44 UTC 2011


On Wed, 2011-12-21 at 21:10 +0100, lists wrote:
> > > I used the git route. My distro is gentoo, and I am using Heimdal 
> > > 1.4.1.
> > > 
> > > This is what I used as configure command;
> > > ./configure --prefix=/usr --build=x86_64-pc-linux-gnu 
> > > --host=x86_64-pc-linux-gnu --mandir=/usr/share/man 
> > > --infodir=/usr/share/info --datadir=/usr/share --sysconfdir=/etc 
> > > --localstatedir=/var/lib --libdir=/usr/lib64 
> > > --disable-dependency-tracking --localstatedir=/var 
> > > --enable-nsslibdir=/lib64 --with-plugin-path=/usr/lib64/sssd 
> > > --enable-pammoddir=//lib64/security 
> > > --with-ldb-lib-dir=/usr/lib64/ldb/modules/ldb --without-nscd 
> > > --with-unicode-lib=libunistring --without-selinux --without-semanage 
> > > --without-python-bindings --enable-krb5-locator-plugin --enable-nls 
> > > --without-libnl
> > 
> > > and configure asks me to report this:
> > > ....
> > > checking for pcre_compile in -lpcre... yes
> > > checking for krb5-config... /usr/bin/krb5-config
> > > checking for working krb5-config... yes
> > > checking krb5.h usability... yes
> > > checking krb5.h presence... yes
> > > checking for krb5.h... yes
> > > checking krb5/krb5.h usability... no
> > > checking krb5/krb5.h presence... no
> > > checking for krb5/krb5.h... no
> > > checking for krb5_ticket_times... no
> > > checking for krb5_times... yes
> > > checking for krb5_get_init_creds_opt_alloc... yes
> > > checking for krb5_get_error_message... yes
> > > checking for krb5_free_unparsed_name... yes
> > > checking for krb5_get_init_creds_opt_set_expire_callback... no
> > > checking for krb5_get_init_creds_opt_set_fast_ccache_name... no
> > > checking for krb5_get_init_creds_opt_set_fast_flags... no
> > > checking for krb5_get_init_creds_opt_set_canonicalize... yes
> > > checking for krb5_unparse_name_flags... yes
> > > checking for krb5_get_init_creds_opt_set_change_password_prompt... no
> > > checking for krb5_free_keytab_entry_contents... no
> > > checking for krb5_kt_free_entry... yes
> > > checking for krb5_princ_realm... yes
> > > checking for krb5_get_time_offsets... no
> > > checking for krb5_principal_get_realm... yes
> > > checking krb5/locate_plugin.h usability... no
> > > checking krb5/locate_plugin.h presence... yes
> > > configure: WARNING: krb5/locate_plugin.h: present but cannot be 
> > > compiled
> > > configure: WARNING: krb5/locate_plugin.h:     check for missing 
> > > prerequisite headers?
> > > configure: WARNING: krb5/locate_plugin.h: see the Autoconf 
> > > documentation
> > > configure: WARNING: krb5/locate_plugin.h:     section "Present But 
> > > Cannot Be Compiled"
> > > configure: WARNING: krb5/locate_plugin.h: proceeding with the 
> > > compiler's result
> > > configure: WARNING:     ## 
> > > ------------------------------------------------ ##
> > > configure: WARNING:     ## Report this to 
> > > sssd-devel at lists.fedorahosted.org ##
> > > configure: WARNING:     ## 
> > > ------------------------------------------------ ##
> > > checking for krb5/locate_plugin.h... no
> > > configure: Kerberos locator plugin cannot be build
> > > checking ares.h usability... yes
> > 
> > This looks like a bug in your Heimdal package. The locator plugin header
> > can't be compiled. I suggest removing the --enable-krb5-locator-plugin
> > argument from configure and trying without it.
> 
> This particular configure rule does not depend on
> --enable-krb5-locator-plugin. I get the same configure error message
> with or without enabling it. I tried adding krb5.h as include on the ac
> rule. This resolve the "WARNING:  Report this to
> sssd-devel at lists.fedorahosted.org" warning. 
> 
> The real issue is the compile error, witch remains the same in all
> cases. The compile error during make is (as far as I can see) not
> related to the locator plugin. 


Thanks, I took a closer look and I think (hope) I fixed the warnings and
errors.

There's one 'gotcha' here. I added a nasty hack to the definition of
sss_krb5_get_init_creds_opt_set_canonicalize() to work around the fact
that Heimdal and MIT both define this function with a different set of
options. For the moment, I'm just adding an extra check so that it will
fall back to 'unsupported' until we figure out a way with autoconf to
check what arguments the function takes.

I've attached the new version of the patch and pushed it to my
fedorapeople repo as well, on the 'heimdal' branch. You should be able
to do a 'git pull' to update it.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Add-compatibility-layer-for-Heimdal-Kerberos-impleme.patch
Type: text/x-patch
Size: 13133 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111221/678bfd4b/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111221/678bfd4b/attachment.sig>


More information about the sssd-devel mailing list