[Samba] Problems with ACL jumbo patch

[Derek Lewis]

I installed Samba 3.5.6 and started testing the directory ACLs.  So far the
behavior is the same as my previous build, with the CREATOR USER and CREATOR
GROUP entries showing up in the directory ACLs.

I checked that the patch was applied with git log --pretty=fuller -1.

-----Original Message-----
From: Michael Wood [mailto:esiotrot at gmail.com] 
Sent: Saturday, November 13, 2010 12:43 PM
To: Derek Lewis
Cc: samba at lists.samba.org; Jeremy Allison; samba-technical at lists.samba.org
Subject: Re: [Samba] Problems with ACL jumbo patch

Hi

On 10 November 2010 10:22, Derek Lewis <dlewis at mtu.edu> wrote:
> Okay, I search the apt repositories and found three Kerberos libraries:
> libpam-krb5, krb5-auth-dialog and libkrb5-dev.

libkrb5-dev is the one you want.

> After installing, I configured my build with autogen and
configure.developer
> as before.  Attempting to make the binaries resulted in the same
> cli_krb5_get_ticket' error as before.

Try making sure you're starting from a clean checkout.  i.e. get rid
of any previous build attempts.  The following should work assuming
you're in the checked out directory and on the right branch:

$ git reset --hard HEAD
$ git clean -dxf

Then do the autogen and configure again.

After running configure.developer, do this (from the source3 directory):

$ grep 'HAVE_KRB5\>' include/config.h

It should print out:

#define HAVE_KRB5 1

since you now have the libkrb5-dev package installed.

> I looked through the options for configure.developer, can I disable
Kerberos
> in the configure step and bypass the problem?

I don't know.

Jeremy, any idea why Derek is getting link errors with your ACL jumbo
patch for 3.5.x despite the HAVE_KRB5 check in
source3/libsmb/clikrb5.c?

> -----Original Message-----
> From: Michael Wood [mailto:esiotrot at gmail.com]
> Sent: Tuesday, November 09, 2010 3:52 AM
> To: Derek Lewis
> Cc: Miguel Medalha; samba at lists.samba.org; Jeremy Allison
> Subject: Re: [Samba] Problems with ACL jumbo patch
>
> On 9 November 2010 11:20, Derek Lewis <dlewis at mtu.edu> wrote:
>> I have attached the config.log file, and a capture of the messages from
>> making that I called make.log.
>
> OK, then it does seem to have something to do with Kerberos.
>
> The cli_krb5_get_ticket function is defined in
> source3/libsmb/clikrb5.c and if you don't have HAVE_KRB5 defined, then
> it's supposed to do this:
>
>  /* this saves a few linking headaches */
>  int cli_krb5_get_ticket(const char *principal, time_t time_offset,
>                        DATA_BLOB *ticket, DATA_BLOB *session_key_krb5,
> uint32 extra_ap_opts,
>                        const char *ccname, time_t *tgs_expire,
>                        const char *impersonate_princ_s)
> {
>         DEBUG(0,("NO KERBEROS SUPPORT\n"));
>         return 1;
> }
>
> but for some reason that's not happening for you, so you get link errors.
>
> The solution to your problem is, of course, to install the Kerberos
> libs (either MIT or Heimdal).
>
> Try "apt-get install libkrb5-dev".

-- 
Michael Wood <esiotrot at gmail.com>