configure with --with-ads failed get "krb5 libs don't have all features required for Active Directory support" error

[Andrew Bartlett]

On Wed, 2013-02-27 at 19:10 +0800, 枫叶 wrote:
> Dear all,
> I get "krb5 libs don't have all features required for Active Directory support" errors when configure with --with-ads source3 code.
> as:   
> [root at RedHatEL5 source3]# pwd
> /root/samba-4.0.2/source3
> [root at RedHatEL5 source3]#  ./configure --with-ads 
> SAMBA VERSION: 4.0.2
> checking build system type... i686-pc-linux-gnu
> checking host system type... i686-pc-linux-gnu
> checking target system type... i686-pc-linux-gnu
> LIBREPLACE_LOCATION_CHECKS: START
> LIBREPLACE_LOCATION_CHECKS: END
> LIBREPLACE_CC_CHECKS: START
> checking for gcc... gcc
> checking whether the C compiler works... yes
> checking for C compiler default output file name... a.out
> ...
> ...
> ...
> checking for krb5_addresses type... no
> checking for krb5_error_code krb5_enctype_to_string(krb5_context context, krb5_enctype enctype, char **str)... no
> checking for krb5_error_code krb5_enctype_to_string(krb5_enctype enctype, char *str, size_t len)... yes
> checking for krb5_principal_get_realm... no
> checking for krb5_princ_realm... yes
> checking for KRB5_PDU_NONE declaration... no
> checking for flags in krb5_creds... no
> configure: WARNING: krb5_get_init_creds_opt_alloc found in -lkrb5
> configure: WARNING: krb5_principal_compare_any_realm not found in -lkrb5
> configure: WARNING: gss_wrap_iov not found in -lgssapi
> configure: WARNING: need either gss_get_name_attribute or gsskrb5_extract_authz_data_from_sec_context and gss_inquire_sec_context_by_oid in -lgssapi for PAC support
> configure: error: krb5 libs don't have all features required for Active Directory support
> the attachment is config.log 
> 
> 
> Any help appreciated

Why are you using the autoconf source3/ build system?

Just build in the top level directory, and we will use our internal
Heimdal kerberos.

In any case, if you want to use a system MIT kerberos, we require 1.8 in
source3 and 1.9 in the top level build.  Earlier versions are not able
to support our requirements, which is why we bundle a known working
version of Heimdal.

Andrew Bartlett


-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org