No subject

Derek

-----Original Message-----
From: Michael Wood [mailto:esiotrot at gmail.com]=20
Sent: Saturday, November 13, 2010 12:43 PM
To: Derek Lewis
Cc: samba at lists.samba.org; Jeremy Allison; =
samba-technical at lists.samba.org
Subject: Re: [Samba] Problems with ACL jumbo patch

Hi

On 10 November 2010 10:22, Derek Lewis <dlewis at mtu.edu> wrote:
> Okay, I search the apt repositories and found three Kerberos =
libraries:
> libpam-krb5, krb5-auth-dialog and libkrb5-dev.

libkrb5-dev is the one you want.

> After installing, I configured my build with autogen and
configure.developer
> as before. =A0Attempting to make the binaries resulted in the same
> cli_krb5_get_ticket' error as before.

Try making sure you're starting from a clean checkout.  i.e. get rid
of any previous build attempts.  The following should work assuming
you're in the checked out directory and on the right branch:

$ git reset --hard HEAD
$ git clean -dxf

Then do the autogen and configure again.

After running configure.developer, do this (from the source3 directory):

$ grep 'HAVE_KRB5\>' include/config.h

It should print out:

#define HAVE_KRB5 1

since you now have the libkrb5-dev package installed.

> I looked through the options for configure.developer, can I disable
Kerberos
> in the configure step and bypass the problem?

I don't know.

Jeremy, any idea why Derek is getting link errors with your ACL jumbo
patch for 3.5.x despite the HAVE_KRB5 check in
source3/libsmb/clikrb5.c?

> -----Original Message-----
> From: Michael Wood [mailto:esiotrot at gmail.com]
> Sent: Tuesday, November 09, 2010 3:52 AM
> To: Derek Lewis
> Cc: Miguel Medalha; samba at lists.samba.org; Jeremy Allison
> Subject: Re: [Samba] Problems with ACL jumbo patch
>
> On 9 November 2010 11:20, Derek Lewis <dlewis at mtu.edu> wrote:
>> I have attached the config.log file, and a capture of the messages =
from
>> making that I called make.log.
>
> OK, then it does seem to have something to do with Kerberos.
>
> The cli_krb5_get_ticket function is defined in
> source3/libsmb/clikrb5.c and if you don't have HAVE_KRB5 defined, then
> it's supposed to do this:
>
> =A0/* this saves a few linking headaches */
> =A0int cli_krb5_get_ticket(const char *principal, time_t time_offset,
> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0DATA_BLOB *ticket, =
DATA_BLOB *session_key_krb5,
> uint32 extra_ap_opts,
> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0const char *ccname, =
time_t *tgs_expire,
> =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0const char =
*impersonate_princ_s)
> {
> =A0 =A0 =A0 =A0 DEBUG(0,("NO KERBEROS SUPPORT\n"));
> =A0 =A0 =A0 =A0 return 1;
> }
>
> but for some reason that's not happening for you, so you get link =
errors.
>
> The solution to your problem is, of course, to install the Kerberos
> libs (either MIT or Heimdal).
>
> Try "apt-get install libkrb5-dev".

--=20
Michael Wood <esiotrot at gmail.com>