[Samba] Compilation with Kerberos problem
Daniel Ramaley
daniel.ramaley at DRAKE.EDU
Fri Jun 25 14:07:34 GMT 2004
I'm trying to compile Samba 3.0.4 with Active Directory support on
OpenBSD 3.5, using the native Kerberos libraries (which happens to be
Heimdal 0.6). Unfortunately, ./configure isn't working right. If anyone
can help me figure out what the problem is, i would appreciate it.
First a bit of info on OpenBSD's Kerberos path layout, in case it
matters:
/usr/libexec - daemons such as: kadmind, kdc, kpasswdd
/usr/sbin - admin programs such as: kadmin, kstash, ktutil
/usr/bin - user programs such as: kauth, kinit, krb5-config,
kdestroy, klist
/usr/lib - libraries
/etc/kerberosV - configuration file: krb5.conf
/usr/include/kerberosV - include files
Here's the configure command i'm using:
# ./configure --prefix=/usr/local/samba \
--localstatedir="/var" \
--with-configdir="/etc/samba" \
--with-lockdir="/var/spool/samba" \
--with-piddir="/var/run" \
--with-logfilebase="/var/log" \
--with-privatedir="/etc/samba" \
--with-ads \
--with-winbind \
--with-krb5 \
--with-ssl \
--with-sslinc="/usr/include/ssl" \
--with-ssllib="/usr/lib" \
> configure.out 2> configure.err
After it fails, configure.err contains this:
configure: WARNING: net/if.h: present but cannot be compiled
configure: WARNING: net/if.h: check for missing prerequisite headers?
configure: WARNING: net/if.h: proceeding with the preprocessor's result
configure: WARNING: rpcsvc/yp_prot.h: present but cannot be compiled
configure: WARNING: rpcsvc/yp_prot.h: check for missing prerequisite
headers?
configure: WARNING: rpcsvc/yp_prot.h: proceeding with the preprocessor's
result
configure: WARNING: sys/mount.h: present but cannot be compiled
configure: WARNING: sys/mount.h: check for missing prerequisite headers?
configure: WARNING: sys/mount.h: proceeding with the preprocessor's
result
configure: WARNING: netinet/ip.h: present but cannot be compiled
configure: WARNING: netinet/ip.h: check for missing prerequisite
headers?
configure: WARNING: netinet/ip.h: proceeding with the preprocessor's
result
configure: error: libkrb5 is needed for Active Directory support
I don't understand why libkrb5 isn't found, since it is in /usr/lib and
ldconfig knows where it is:
$ ls -l /usr/lib/libkrb5.*
-r--r--r-- 5 root bin 648812 Mar 29 13:51 /usr/lib/libkrb5.a
-r--r--r-- 4 root bin 457791 Mar 29 13:51 /usr/lib/libkrb5.so.13.0
$ ldconfig -r | grep krb5
12:-lkrb5.13.0 => /usr/lib/libkrb5.so.13.0
I won't bog the list down with the entirety of configure.out, but here
are the last few lines of the file:
checking for Active Directory and krb5 support... yes
checking for krb5-config... /usr/bin/krb5-config
checking for working krb5-config... yes
checking krb5.h usability... yes
checking krb5.h presence... yes
checking for krb5.h... yes
checking gssapi.h usability... yes
checking gssapi.h presence... yes
checking for gssapi.h... yes
checking gssapi/gssapi_generic.h usability... no
checking gssapi/gssapi_generic.h presence... no
checking for gssapi/gssapi_generic.h... no
checking gssapi/gssapi.h usability... no
checking gssapi/gssapi.h presence... no
checking for gssapi/gssapi.h... no
checking com_err.h usability... yes
checking com_err.h presence... yes
checking for com_err.h... yes
checking for _et_list in -lcom_err... no
checking for krb5_encrypt_data in -lk5crypto... no
checking for des_set_key in -lcrypto... no
checking for copy_Authenticator in -lasn1... no
checking for roken_getaddrinfo_hostspec in -lroken... no
checking for gss_display_status in -lgssapi... no
checking for krb5_mk_req_extended in -lkrb5... no
checking for gss_display_status in -lgssapi_krb5... no
checking for krb5_set_real_time... no
checking for krb5_set_default_in_tkt_etypes... no
checking for krb5_set_default_tgs_ktypes... no
checking for krb5_principal2salt... no
checking for krb5_use_enctype... no
checking for krb5_string_to_key... no
checking for krb5_get_pw_salt... no
checking for krb5_string_to_key_salt... no
checking for krb5_auth_con_setkey... no
checking for krb5_auth_con_setuseruserkey... no
checking for krb5_locate_kdc... no
checking for krb5_get_permitted_enctypes... no
checking for krb5_get_default_in_tkt_etypes... no
checking for krb5_free_ktypes... no
checking for krb5_free_data_contents... no
checking for krb5_principal_get_comp_string... no
checking for addrtype in krb5_address... no
checking for addr_type in krb5_address... yes
checking for enc_part2 in krb5_ticket... no
checking for keyvalue in krb5_keyblock... yes
checking for ENCTYPE_ARCFOUR_HMAC_MD5... yes
checking for KEYTYPE_ARCFOUR_56... no
checking for AP_OPTS_USE_SUBKEY... yes
checking for the krb5_princ_component macro... no
checking for key in krb5_keytab_entry... no
checking for keyblock in krb5_keytab_entry... yes
--
------------------------------------------------------------------------
Dan Ramaley
Digital Media Library Specialist
(515) 271-1934
Cowles Library 140, Drake University
More information about the samba
mailing list