Re: security/mit-krb5 breaks other kerberos-using packages

["John D. Baker" <jdbaker%mylinuxisp.com@localhost>]

By default, "print/cups" enables kerberos support and includes
"../../mk/krb5.buildlink3.mk" via its "options.mk" file.  But during
the configure phase, finds:

[...]
checking for i486--netbsdelf-krb5-config... no
checking for krb5-config... /usr/pkg/bin/krb5-config
checking krb5.h usability... yes
checking krb5.h presence... yes
checking for krb5.h... yes
checking gssapi.h usability... yes
checking gssapi.h presence... yes
checking for gssapi.h... yes
checking gssapi/gssapi.h usability... yes
checking gssapi/gssapi.h presence... yes
checking for gssapi/gssapi.h... yes
checking for __ApplePrivate_gss_acquire_cred_ex_f... no
checking for GSS_C_NT_HOSTBASED_SERVICE... yes
[...]

It then apparently uses the "/usr/pkg/bin/krb5-config" installed by
"security/mit-krb5" which then causes the build to fail (a more complete
transcript):

[...]
Linking ippserver...
libtool: link: gcc -Wl,-R/usr/pkg/lib -fPIE -pie -Wall -Wno-format-y2k -Wunused -fPIC -Os -g -fstack-protector -Wno-unused-result -Wsign-conversion -Wno-tautological-compare -o ippserver ippserver.o  -L../cgi-bin -L../cups -L../filter -L../ppdc -L../scheduler -L/d0/build/pkgsrc/print/cups/work/.buildlink/lib ../cups/libcups.a -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lgnutls -lc -ltasn1 -lhogweed -lnettle -lgmp -lintl -ldns_sd -lpthread -lm -lcrypt -lz -Wl,-rpath,/d0/build/pkgsrc/print/cups/work/.buildlink/lib -Wl,-rpath,/d0/build/pkgsrc/print/cups/work/.buildlink/lib
ld: cannot find -lgssapi_krb5
ld: cannot find -lk5crypto
Makefile:232: recipe for target 'ippserver' failed
gmake[1]: *** [ippserver] Error 1
Makefile:31: recipe for target 'all' failed
gmake: *** [all] Error 1
*** Error code 2

Stop.
make[1]: stopped in /x/pkgsrc/print/cups
*** Error code 1

Stop.
make: stopped in /x/pkgsrc/print/cups


Before "security/mit-krb5" was installed as dependency of "net/wireshark",
the builtin (heimdal) kerberos was used without problems.

The simplest workaround is to disable kerberos support, but if this is
not suitable, one would have to change the "options.mk" file to include
"../../security/mit-krb5/buildlink3.mk" instead of
"../../mk/krb5.buildlink3.mk".

Likewise for other kerberos-using packages if one also wishes to
have "wireshark" installed.

-- 
|/"\ John D. Baker, KN5UKS               NetBSD     Darwin/MacOS X
|\ / jdbaker[snail]mylinuxisp[flyspeck]com    OpenBSD            FreeBSD
| X  No HTML/proprietary data in email.   BSD just sits there and works!
|/ \ GPGkeyID:  D703 4A7E 479F 63F8 D3F4  BD99 9572 8F23 E4AD 1645