[Samba] Build error with Samba-4.3.0

[Andrew Bartlett]

On Sat, 2015-09-19 at 20:59 +1000, Reuben Farrelly wrote:
> Hi,
> 
> I've been battling to get Samba-4.3 to install on my Gentoo x86_64 
> box. 
>   It has been failing to build with the following error:
> 
> [1153/2753] Compiling source4/libnet/py_net.c
> [1154/2753] Compiling source4/libnet/py_net_dckeytab.c
> [1155/2753] Compiling source4/libnet/libnet_export_keytab.c
> [1156/2753] Compiling source4/kdc/hdb-samba4.c
> [1157/2753] Compiling source4/kdc/hdb-samba4-plugin.c
> [1158/2753] Compiling source4/kdc/db-glue.c
> ../source4/kdc/db-glue.c: In function 'samba_kdc_lookup_realm':
> ../source4/kdc/db-glue.c:2144:9: error: 'HDB_ERR_WRONG_REALM' 
> undeclared 
> (first use in this function)
>    return HDB_ERR_WRONG_REALM;
>           ^
> ../source4/kdc/db-glue.c:2144:9: note: each undeclared identifier is 
> reported only once for each function it appears in
> Waf: Leaving directory `/var/tmp/samba-4.3.0/bin'
> Build failed:  -> task failed (err #1):
>          {task: cc db-glue.c -> db-glue_13.o}
> Makefile:8: recipe for target 'all' failed
> make: *** [all] Error 1
> 
> This works OK with Samba-4.2.4 and below - it's new breakage with 
> Samba-4.3.0.  This occurs with a vanilla samba tarball (no extra 
> patches).
> 
> ./configure is running with:
> 
> CCFLAGS="-O2 -pipe -march=native -mtune=native" LINKFLAGS="-O2 -pipe 
> -march=native -mtune=native -Wl,-O1 -Wl,--as-needed" 
> "/var/tmp/portage/net-fs/samba-4.3.0/work/samba
> -4.3.0/buildtools/bin/waf" --prefix=/usr 
> --libdir=/usr/lib64 --enable-fhs --sysconfdir=/etc -
> -localstatedir=/var 
> --with-modulesdir=/usr/lib64/samba --with-piddir=/var/run/samba 
> --bundled-libraries=NONE --builtin-libraries=NONE --disable-rpath 
> --disable-rpath-install --nopyc --nopyo --with-acl-support 
> --without-ad-dc --without-dnsupdate --without-ads --without-aio
> -support 
> --disable-avahi --without-cluster-support --disable-cups --without
> -dmapi 
> --with-fam --enable-gnutls --disable-iprint --without-ldap --with-pam 
> 
> --with-pam_smbpass --with-pammodulesdir=/lib64/security --without
> -quotas 
> --with-syslog --without-systemd --without-winbind configure
> 
> This is for a basic environment with no AD. I only need Samba as a 
> file 
> server.  The system heimdal is 1.5.3-r2 .

Don't do that.  Never use the system Heimdal, this just isn't supported
in any meaningful way.  On debian we tried to do that for a while, and
decided to revert that:  
https://lists.alioth.debian.org/pipermail/pkg-samba-maint/2015-April/017277.html

> Can anyone give me any ideas as to where to start looking?  I'm 
> guessing 
> that the make should not be failing, if there's an inherent problem 
> it 
> should be being picked up by the configure script and failing there 
> instead....?

Use the bundled Heimdal, or even better the (likely much more up to
date) system MIT kerberos via --with-system-mitkrb5 as you are building
--without-ad-dc.

(Why a build --without-ad-dc tries to build source4/kdc/db-glue.c is an
interesting question).

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT   
https://catalyst.net.nz/services/samba