[Samba] Compilation with Kerberos problem

Tom Skeren tms3 at fskklaw.com
Fri Jun 25 16:58:06 GMT 2004


Wow, 3.5.  I had a number of problems on 5.2.1, maybe they're similar.  
Here's the configure I use:
./configure --exec-prefix=/usr/local --localstatedir=/var 
--with-configdir=/usr/local/etc --with-libdir=/usr/local/lib/samba 
--with-swatdir=/usr/local/share/swat --with-piddir=/var/run 
--with-lockdir=/var/db/samba --with-privatedir=/usr/local/private 
--with-logfilebase=/var/log/samba --with-manpages-langs=en 
--with-libiconv=/usr/local --with-pam --with-readline 
--with-sendfile-support --with-libsmbclient --without-python 
--disable-cups --without-syslog --without-quotas --with-winbind 
--with-ldapsam --without-pam_smbpass --with-ads --with-krb5 --with-ldap 
--prefix=/usr/local i386-portbld-freebsd5.2.1


Tim Jordan wrote:

>On Fri, 2004-06-25 at 06:07, Daniel Ramaley wrote:
>
>  
>
>>I'm trying to compile Samba 3.0.4 with Active Directory support on 
>>OpenBSD 3.5, using the native Kerberos libraries (which happens to be 
>>Heimdal 0.6). Unfortunately, ./configure isn't working right. If anyone 
>>can help me figure out what the problem is, i would appreciate it.
>>
>>First a bit of info on OpenBSD's Kerberos path layout, in case it 
>>matters:
>>    /usr/libexec   - daemons such as: kadmind, kdc, kpasswdd
>>    /usr/sbin      - admin programs such as: kadmin, kstash, ktutil
>>    /usr/bin       - user programs such as: kauth, kinit, krb5-config,
>>                                            kdestroy, klist
>>    /usr/lib       - libraries
>>    /etc/kerberosV - configuration file: krb5.conf
>>    /usr/include/kerberosV - include files
>>
>>Here's the configure command i'm using:
>>
>># ./configure --prefix=/usr/local/samba \
>>              --localstatedir="/var" \
>>              --with-configdir="/etc/samba" \
>>              --with-lockdir="/var/spool/samba" \
>>              --with-piddir="/var/run" \
>>              --with-logfilebase="/var/log" \
>>              --with-privatedir="/etc/samba" \
>>              --with-ads \
>>              --with-winbind \
>>              --with-krb5 \
>>    
>>
>
>
>                                --with-krb5=/usr/lib \
>
>
>  
>
>>              --with-ssl \
>>              --with-sslinc="/usr/include/ssl" \
>>              --with-ssllib="/usr/lib" \
>>              > configure.out 2> configure.err
>>
>>
>>After it fails, configure.err contains this:
>>
>>
>>configure: WARNING: net/if.h: present but cannot be compiled
>>configure: WARNING: net/if.h: check for missing prerequisite headers?
>>configure: WARNING: net/if.h: proceeding with the preprocessor's result
>>configure: WARNING: rpcsvc/yp_prot.h: present but cannot be compiled
>>configure: WARNING: rpcsvc/yp_prot.h: check for missing prerequisite 
>>headers?
>>configure: WARNING: rpcsvc/yp_prot.h: proceeding with the preprocessor's 
>>result
>>configure: WARNING: sys/mount.h: present but cannot be compiled
>>configure: WARNING: sys/mount.h: check for missing prerequisite headers?
>>configure: WARNING: sys/mount.h: proceeding with the preprocessor's 
>>result
>>configure: WARNING: netinet/ip.h: present but cannot be compiled
>>configure: WARNING: netinet/ip.h: check for missing prerequisite 
>>headers?
>>configure: WARNING: netinet/ip.h: proceeding with the preprocessor's 
>>result
>>configure: error: libkrb5 is needed for Active Directory support
>>
>>
>>I don't understand why libkrb5 isn't found, since it is in /usr/lib and 
>>ldconfig knows where it is:
>>$ ls -l /usr/lib/libkrb5.*
>>-r--r--r--  5 root  bin  648812 Mar 29 13:51 /usr/lib/libkrb5.a
>>-r--r--r--  4 root  bin  457791 Mar 29 13:51 /usr/lib/libkrb5.so.13.0
>>$ ldconfig -r | grep krb5
>>        12:-lkrb5.13.0 => /usr/lib/libkrb5.so.13.0
>>
>>
>>I won't bog the list down with the entirety of configure.out, but here 
>>are the last few lines of the file:
>>
>>
>>checking for Active Directory and krb5 support... yes
>>checking for krb5-config... /usr/bin/krb5-config
>>checking for working krb5-config... yes
>>checking krb5.h usability... yes
>>checking krb5.h presence... yes
>>checking for krb5.h... yes
>>checking gssapi.h usability... yes
>>checking gssapi.h presence... yes
>>checking for gssapi.h... yes
>>checking gssapi/gssapi_generic.h usability... no
>>checking gssapi/gssapi_generic.h presence... no
>>checking for gssapi/gssapi_generic.h... no
>>checking gssapi/gssapi.h usability... no
>>checking gssapi/gssapi.h presence... no
>>checking for gssapi/gssapi.h... no
>>checking com_err.h usability... yes
>>checking com_err.h presence... yes
>>checking for com_err.h... yes
>>checking for _et_list in -lcom_err... no
>>checking for krb5_encrypt_data in -lk5crypto... no
>>checking for des_set_key in -lcrypto... no
>>checking for copy_Authenticator in -lasn1... no
>>checking for roken_getaddrinfo_hostspec in -lroken... no
>>checking for gss_display_status in -lgssapi... no
>>checking for krb5_mk_req_extended in -lkrb5... no
>>checking for gss_display_status in -lgssapi_krb5... no
>>checking for krb5_set_real_time... no
>>checking for krb5_set_default_in_tkt_etypes... no
>>checking for krb5_set_default_tgs_ktypes... no
>>checking for krb5_principal2salt... no
>>checking for krb5_use_enctype... no
>>checking for krb5_string_to_key... no
>>checking for krb5_get_pw_salt... no
>>checking for krb5_string_to_key_salt... no
>>checking for krb5_auth_con_setkey... no
>>checking for krb5_auth_con_setuseruserkey... no
>>checking for krb5_locate_kdc... no
>>checking for krb5_get_permitted_enctypes... no
>>checking for krb5_get_default_in_tkt_etypes... no
>>checking for krb5_free_ktypes... no
>>checking for krb5_free_data_contents... no
>>checking for krb5_principal_get_comp_string... no
>>checking for addrtype in krb5_address... no
>>checking for addr_type in krb5_address... yes
>>checking for enc_part2 in krb5_ticket... no
>>checking for keyvalue in krb5_keyblock... yes
>>checking for ENCTYPE_ARCFOUR_HMAC_MD5... yes
>>checking for KEYTYPE_ARCFOUR_56... no
>>checking for AP_OPTS_USE_SUBKEY... yes
>>checking for the krb5_princ_component macro... no
>>checking for key in krb5_keytab_entry... no
>>checking for keyblock in krb5_keytab_entry... yes
>>
>>-- 
>>------------------------------------------------------------------------
>>Dan Ramaley
>>Digital Media Library Specialist
>>(515) 271-1934
>>Cowles Library 140, Drake University
>>    
>>



More information about the samba mailing list