[Samba] Problems with ACL jumbo patch

[Michael Wood]

Hi

On 10 November 2010 10:22, Derek Lewis <dlewis at mtu.edu> wrote:
> Okay, I search the apt repositories and found three Kerberos libraries:
> libpam-krb5, krb5-auth-dialog and libkrb5-dev.

libkrb5-dev is the one you want.

> After installing, I configured my build with autogen and configure.developer
> as before.  Attempting to make the binaries resulted in the same
> cli_krb5_get_ticket' error as before.

Try making sure you're starting from a clean checkout.  i.e. get rid
of any previous build attempts.  The following should work assuming
you're in the checked out directory and on the right branch:

$ git reset --hard HEAD
$ git clean -dxf

Then do the autogen and configure again.

After running configure.developer, do this (from the source3 directory):

$ grep 'HAVE_KRB5\>' include/config.h

It should print out:

#define HAVE_KRB5 1

since you now have the libkrb5-dev package installed.

> I looked through the options for configure.developer, can I disable Kerberos
> in the configure step and bypass the problem?

I don't know.

Jeremy, any idea why Derek is getting link errors with your ACL jumbo
patch for 3.5.x despite the HAVE_KRB5 check in
source3/libsmb/clikrb5.c?

> -----Original Message-----
> From: Michael Wood [mailto:esiotrot at gmail.com]
> Sent: Tuesday, November 09, 2010 3:52 AM
> To: Derek Lewis
> Cc: Miguel Medalha; samba at lists.samba.org; Jeremy Allison
> Subject: Re: [Samba] Problems with ACL jumbo patch
>
> On 9 November 2010 11:20, Derek Lewis <dlewis at mtu.edu> wrote:
>> I have attached the config.log file, and a capture of the messages from
>> making that I called make.log.
>
> OK, then it does seem to have something to do with Kerberos.
>
> The cli_krb5_get_ticket function is defined in
> source3/libsmb/clikrb5.c and if you don't have HAVE_KRB5 defined, then
> it's supposed to do this:
>
>  /* this saves a few linking headaches */
>  int cli_krb5_get_ticket(const char *principal, time_t time_offset,
>                        DATA_BLOB *ticket, DATA_BLOB *session_key_krb5,
> uint32 extra_ap_opts,
>                        const char *ccname, time_t *tgs_expire,
>                        const char *impersonate_princ_s)
> {
>         DEBUG(0,("NO KERBEROS SUPPORT\n"));
>         return 1;
> }
>
> but for some reason that's not happening for you, so you get link errors.
>
> The solution to your problem is, of course, to install the Kerberos
> libs (either MIT or Heimdal).
>
> Try "apt-get install libkrb5-dev".

-- 
Michael Wood <esiotrot at gmail.com>