[2126] in Kerberos-V5-bugs
Re: krb5b6 with --with-krb4= login will not compile.
daemon@ATHENA.MIT.EDU (Randall S. Winchester)
Thu Aug 1 14:28:15 1996
Date: Thu, 1 Aug 1996 14:27:32 -0400 (EDT)
From: "Randall S. Winchester" <rsw@Glue.umd.edu>
To: Sam Hartman <hartmans@MIT.EDU>
Cc: krb5-bugs@MIT.EDU
In-Reply-To: <tslbugvyony.fsf@tertius.mit.edu>
First, thanks for the answer.
On 1 Aug 1996, Sam Hartman wrote:
: >>>>> ""Randall" == "Randall S Winchester" <rsw@Glue.umd.edu> writes:
:
: "Randall> On Solaris 2.5 with the following configure line:
: "Randall> ../src/configure --with-ccopts=-g
: "Randall> --with-krb4=/usr/local/athena \ --with-krb5-root=/etc
: "Randall> --prefix=/usr/local/krb5 --with-kdb-db=db \
: "Randall> --with-kdb-dbopts="-I/usr/local/db/include
: "Randall> -L/usr/local/db/lib"
:
: I would be very careful of using db for your Kerberos
: database.
OK, hum I thought there was a tread a while ago about locking and large
database size problems. I seem to remember the gnu db or berkeley db's as
being recommended. (I have 40k principles under AFS/KRB4)
Any pointer as to what the problems are? I did saw the digex.com posting
today, and was surprised. We use the berkely db for a number of things here,
and I had not noticed a problem.
:
: "Randall> Make goes well till this:
:
: "Randall> cc -L./../../lib -L./../../lib -L/usr/local/athena/lib
: "Randall> -o login.krb5 login.o setenv.o ../../krb524/libkrb524.a
: "Randall> -lpty -lkrb5util -lkrb -ldes425 -lkrb5 -lcrypto
: "Randall> -lcom_err -lcrypt -lnsl -lsocket Undefined first
: "Randall> referenced symbol in file krb_get_err_text login.o
: "Randall> krb_save_credentials login.o krb__get_srvtabname login.o
: "Randall> ld: fatal: Symbol referencing errors. No output written
: "Randall> to login.krb5 gmake[2]: *** [login.krb5] Error 1
: "Randall> gmake[1]: *** [all-unix] Error 1 gmake: *** [all-unix]
: "Randall> Error 1
:
: The next release of Kerberos should handle this much better.
: There may be some problems with installed versions of kadm.h on
: systems with old releases of MIT Kerberos, but this a KerberosIV bug
: and not something we can fix.
Thanks for the heads up. I have KRB4-patch9 + lots of local mods. We were
probably the first to do an OSF/1 port so we did the 64-bit converion, along
with lots of POSIX-ish changes, plus the long_life and other AFS support
issues.
:
:
: "Randall> A little looking around and I see libkrb4.a is not being
: "Randall> built. Is there a work around/patch to one of the
: "Randall> configure/configure.in/Makefile.in files?
:
: You are probably misunderstanding the purpose of an argument
: to --with-krb4 option. It tells krb5 to use an installed version of
: libkrb.a instead of building the one in the source tree. What were
: you expecting this option to do?
I did missunderstanding the option. The following then could be changed to
be a little more clear.
From ../doc/HOW_TO_BUILD:
If you want Kerberos V4 backwards compatibility, pass the
"--with-krb4=/KRB4_DIRECTORY" option to configure. This requires that
the V4 include files be available in /KRB4_DIRECTORY/include, and that
the V4 Kerberos library be available in /KRB4_DIRECTORY/lib.
After re-reading the doc/install.texi, along with your reply it is clear to
me. Adding "It tells krb5 to use an installed version of libkrb.a instead of
building the one in the source tree" would probably help others.
One other note: I want my client binaries to go into /usr/local/krb5, which
is a remote filesystem (AFS), but want the server binaries installed locally
in /local/krb5. The docs refer to --prefix="foo" as controlling both. It
seems to me that this would be a very common case. Is there a way to achieve
this, or do I need to recompile twice?.
Actually, It does look like if I copied the server binaries from
/usr/local/krb5 to /local/krb5 and edited kdc.conf that this may work, but I
have not tested this workaround out yet. Another thought for that upcoming
release...
Thanks again,
Randall
:
: "Randall> Thanks, Randall
:
:
:
:
