[Dovecot] minor kerberized dovecot build issue
Hi all, again,
I'm not knowledgeable about Kerberos, but we have a few users who use it to make sure that it works well on Solaris... so, they would like a Kerberized IMAPd. I tried compiling dovecot --with-gssapi on Solaris Nevada (the current development release), and the configure script choked for a couple of reasons. First, script uses 'grep -qv' in the case that you specify --with-gssapi to run some test.
Unfortunately, Solaris doesn't have 'grep -q'. There's a note in GNU grep's manpage about this problem and a note that portable scripts should just redirect to /dev/null. Once I fixed this problem, I got:
configure: WARNING: gssapi/gssapi.h: present but cannot be compiled configure: WARNING: gssapi/gssapi.h: check for missing prerequisite headers? configure: WARNING: gssapi/gssapi.h: see the Autoconf documentation configure: WARNING: gssapi/gssapi.h: section "Present But Cannot Be +Compiled" configure: WARNING: gssapi/gssapi.h: proceeding with the preprocessor's result configure: WARNING: gssapi/gssapi.h: in the future, the compiler will take +precedence configure: WARNING: ## ---------------------------------- ## configure: WARNING: ## Report this to dovecot@dovecot.org ## configure: WARNING: ## ---------------------------------- ##
For whatever reason, on Solaris /usr/bin/krb5-config does not like the syntax 'krb5-config --cflags gssapi' (ditto with --libs). I found that removing the 'gssapi' part from the configure script fixed the problem, but I imagine this must break some other OS. If need be, I can follow up with the Kerberos team about this.
Once I made these minor changes, I also had to add -lgss to the src/auth makefile's compile line. After that, I had no problem getting this to compile, although we have not yet tested it.
-dp
-- Daniel Price - Solaris Kernel Engineering - dp@eng.sun.com - blogs.sun.com/dp
On Fri, 2007-02-02 at 13:25 -0800, Dan Price wrote:
Unfortunately, Solaris doesn't have 'grep -q'. There's a note in GNU grep's manpage about this problem and a note that portable scripts should just redirect to /dev/null.
I'll fix this.
For whatever reason, on Solaris /usr/bin/krb5-config does not like the syntax 'krb5-config --cflags gssapi' (ditto with --libs). I found that removing the 'gssapi' part from the configure script fixed the problem, but I imagine this must break some other OS. If need be, I can follow up with the Kerberos team about this.
Looks like they return different things:
% krb5-config --libs gssapi
-L/usr/lib -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lkrb5support
-lresolv
% krb5-config --libs
-L/usr/lib -lkrb5 -lk5crypto -lcom_err -lkrb5support -lresolv
With --cflags I get nothing in my system either way.
Once I made these minor changes, I also had to add -lgss to the src/auth makefile's compile line. After that, I had no problem getting this to compile, although we have not yet tested it.
I think "--libs gssapi" was supposed to contain that.
Would "gss" work instead of "gssapi"? Anyway yes I think you'd get better replies from Kerberos people :)
On Mon 05 Feb 2007 at 03:04PM, Timo Sirainen wrote:
I think "--libs gssapi" was supposed to contain that.
Would "gss" work instead of "gssapi"? Anyway yes I think you'd get better replies from Kerberos people :)
I heard back from our Solaris group Kerberos folks-- they said that they have plans to ass the '--libs gssapi' but that it isn't there yet; as best I can tell, adding a configure script clause to add -lgss on Solaris would be the only workaround at present.
-dp
-- Daniel Price - Solaris Kernel Engineering - dp@eng.sun.com - blogs.sun.com/dp
On Mon 05 Feb 2007 at 12:50PM, Dan Price wrote:
On Mon 05 Feb 2007 at 03:04PM, Timo Sirainen wrote:
I think "--libs gssapi" was supposed to contain that.
Would "gss" work instead of "gssapi"? Anyway yes I think you'd get better replies from Kerberos people :)
I heard back from our Solaris group Kerberos folks-- they said that they have plans to ass the '--libs gssapi' but that it isn't there yet; ^^^
Hah. No, not a freudian slip. This should read: "have plans to add"... Sorry! :)
-dp
-- Daniel Price - Solaris Kernel Engineering - dp@eng.sun.com - blogs.sun.com/dp
participants (2)
-
Dan Price
-
Timo Sirainen