[558] in Kerberos-V5-bugs
Configure Suggestions for Kerberos 5.4.1
daemon@ATHENA.MIT.EDU (Doug Engert)
Fri Jul 1 11:59:22 1994
Date: Fri, 01 Jul 94 10:58:36 CDT
From: "Doug Engert" <DEEngert@anl.gov>
To: <KRB5-BUGS@MIT.EDU>
Cc: <AUTH-PILOT@ES.NET>
Thanks for the addition of the --with-cc and --with-ccopts that
helps a lot. Gcc works nicely.
The configure still needs a lot of work. I have managed to build
5.4.1 (but not test) for solaris 2.3. during this process, the
following came up. (I built the SunOS 4.1.3 version
with Imake since I ran into to many of the following problems.
The SunOS is working nicely.)
o The appl/bsd and appl/telnet are not built by configure. (With
Solaris I am trying to use an Imake produced Makefile for the
BSD stuff. Please get this part of configure working. because it
is too messy to mix configure and Imake!)
o The --with-krb4 is not very flexible. With the Imake I could
use the old /usr/athena/... libs built with Kerberos 4, or the
libkrb425.a and libdes425.a. With the configure it appears to
use a combination of libkrb.a and libdes425.a. I would prefer
to use the krb425 stuff, since I don't want to have to build
Kerberos 4 for any new platforms.
o When I do use the libkrb425.a and libdes425.a. I need to add a
reference to libkrb5.a after libkrb425.a since some of the
routines in the krb425 need krb5 routines, like krb5_mk_priv.
o The old Imake had the option of adding a DESTDIR which was
used only during the install process. Most products which use
configure, allow for --prefix= to perform the same function.
Your configure accepts --prefix, but does not use it. Although
the --with-krb5-root= gives some flexibility, since it value is
compiled into some modules it is not the same. The use of
DESTDIR or --prefix allows one to install into a directory,
then build symbolic links from /krb5 to point to that install
directory. And /krb5 can be built in to modules and functions
as expected. We use depot from CMU for all of our products in
AFS, where the products are installed into their own
directories, then links are made from a common
/usr/afsws/local to these products. With Kerberos I have been
building the structure like this:
Workstation AFS
/krb5 /afs/anl.gov/appl/kerb-5.4/@sys/krb5
admin -> /afs/anl.gov/appl/kerb-5.4/@sys/krb5/admin
bin -> /afs/anl.gov/appl/kerb-5.4/@sys/krb5/bin
sbin (local or -> ) /afs/anl.gov/appl/kerb-5.4/@sys/krb5/sbin
man -> /afs/anl.gov/appl/kerb-5.4/@sys/krb5/man
lib -> /afs/anl.gov/appl/kerb-5.4/@sys/krb5/lib
include -> /afs/anl.gov/appl/kerb-5.4/@sys/krb5/include
v5srvtab (local)
krb.* (local)
principal.* (local)
Using --prefix=/afs/anl.gov/appl/kerb-5.4/@sys
--with-krb5-root=/krb would allow for the above.
I also have some changes to krlogind.c which uses STREAMS
which I had working under 5.3. When I get them working
with 5.4.1 I will send them in.
Douglas E. Engert
Systems Programming
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(708) 252-5444
Internet: DEEngert@anl.gov