Re: krb5 builtin busted ? (was Re: heimdal builtin busted?)

["John D. Baker" <jdbaker%mylinuxisp.com@localhost>]

On Sat, 24 Sep 2016, Richard PALO wrote:

> There seems to be more issues at hand in both heimdal and mit-krb5
> processing that I believe I've addressed in a more comprehensive patch
> found http://netbsd.org/~richard/krb5.diff
> 
> It is hoped that this should also address the diverse krb5 issues
> found elsewhere lately.

I finally got a chance to try this.  The test system is
NetBSD/amd64-7.0_STABLE.

After applying your patch, without "security/mit-krb5" installed, the
problem packages "chat/loudmouth" and "print/cups" configured and built
successfully.

After reinstalling "net/wireshark", which installs "security/mit-krb5"
as a dependency, "chat/loudmouth" failed in the configure phase:

[...]
checking for krb5-config... /usr/pkg/bin/krb5-config
checking gssapi.h usability... yes
checking gssapi.h presence... yes
checking for gssapi.h... yes
checking gssapi/gssapi.h usability... yes
checking gssapi/gssapi.h presence... yes
checking for gssapi/gssapi.h... yes
checking openssl/ssl.h usability... yes
checking openssl/ssl.h presence... yes
checking for openssl/ssl.h... yes
checking for BIO_f_base64 in -lcrypto... no
configure: error: OpenSSL was not found, use --with-ssl=[no|gnutls] to
                  build without SSL support or with GnuTLS
*** Error code 1

Stop.
make[1]: stopped in /d0/nbsd/pkgsrc/chat/loudmouth
*** Error code 1

Stop.
make: stopped in /d0/nbsd/pkgsrc/chat/loudmouth


Simlarly, "print/cups" configure phase reports:

[...]
checking for x86_64--netbsd-krb5-config... no
checking for krb5-config... /usr/pkg/bin/krb5-config
checking krb5.h usability... yes
checking krb5.h presence... yes
checking for krb5.h... yes
checking gssapi.h usability... yes
checking gssapi.h presence... yes
checking for gssapi.h... yes
checking gssapi/gssapi.h usability... yes
checking gssapi/gssapi.h presence... yes
checking for gssapi/gssapi.h... yes
checking for __ApplePrivate_gss_acquire_cred_ex_f... no
checking for GSS_C_NT_HOSTBASED_SERVICE... yes
[...]

and the build subsequently fails with:

[...]
Linking ippserver...
libtool: link: gcc -Wl,-R/usr/pkg/lib -fPIE -pie -Wall -Wno-format-y2k -Wunused -fPIC -Os -g -fstack-protector -Wno-unused-result -Wsign-conversion -Wno-tautological-compare -o ippserver ippserver.o  -L../cgi-bin -L../cups -L../filter -L../ppdc -L../scheduler -L/d0/build/pkgsrc/print/cups/work/.buildlink/lib ../cups/libcups.a -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lgnutls -lc -ltasn1 -lhogweed -lnettle -lgmp -lintl -ldns_sd -lpthread -lm -lcrypt -lz -Wl,-rpath,/d0/build/pkgsrc/print/cups/work/.buildlink/lib -Wl,-rpath,/d0/build/pkgsrc/print/cups/work/.buildlink/lib
ld: cannot find -lgssapi_krb5
ld: cannot find -lk5crypto
Makefile:232: recipe for target 'ippserver' failed
gmake[1]: *** [ippserver] Error 1
Makefile:31: recipe for target 'all' failed
gmake: *** [all] Error 1
*** Error code 2

Stop.
make[1]: stopped in /d0/nbsd/pkgsrc/print/cups
*** Error code 1

Stop.
make: stopped in /d0/nbsd/pkgsrc/print/cups


So, no change in behavior with or without the patch.

-- 
|/"\ John D. Baker, KN5UKS               NetBSD     Darwin/MacOS X
|\ / jdbaker[snail]mylinuxisp[flyspeck]com    OpenBSD            FreeBSD
| X  No HTML/proprietary data in email.   BSD just sits there and works!
|/ \ GPGkeyID:  D703 4A7E 479F 63F8 D3F4  BD99 9572 8F23 E4AD 1645