[Dovecot] GSS/Kerb5, Solaris 10, how to build?
Gang,
I've been trying to build rc29 under Solaris 10 using either "--with-gssapi" or Kerberos 5 ticket usage. I'm trying to figure out how to set up fetchmail on another S10 box to do IMAP fetches from dovecot without having to enter a password.
No matter what configure option I try, I get
Building with GSSAPI support ........ : no
at the end of the configure. I searched the list archives and I see some discussion from Dan Price about Solaris 11 builds. Is gssapi supposed to work with Solaris 10? Advice please?
My dovecot server is a Kerberos 5 client of Active Directory, with PAM configured to do TGT exchanges. I can login to the system with my AD password, ssh to other Kerb clients without having to type in passwords -- Kerberos works at the OS level.
Jeff Earickson Colby College
On Thu 05 Apr 2007 at 10:33AM, Jeff A. Earickson wrote:
Gang,
I've been trying to build rc29 under Solaris 10 using either "--with-gssapi" or Kerberos 5 ticket usage. I'm trying to figure out how to set up fetchmail on another S10 box to do IMAP fetches from dovecot without having to enter a password.
No matter what configure option I try, I get
Building with GSSAPI support ........ : no
at the end of the configure. I searched the list archives and
I apply the following patch to configure before running it. I don't know that this will fix your problem though: --- configure.prepatch Tue Feb 6 08:07:07 2007 +++ configure Tue Feb 6 14:54:56 2007 @@ -29107,13 +29107,13 @@ # version >= v1.3. Although this doesn't work right with # non-MIT kerberos versioning.. if `krb5-config --version|grep -v '1\.2' > /dev/null`; then - AUTH_LIBS="$AUTH_LIBS `krb5-config --libs gssapi`" - AUTH_CFLAGS="$AUTH_CFLAGS `krb5-config --cflags gssapi`" + AUTH_LIBS="$AUTH_LIBS `krb5-config --libs` -lgss" + AUTH_CFLAGS="$AUTH_CFLAGS `krb5-config --cflags`" # Although krb5-config exists, all systems still don't # have gssapi.h old_CFLAGS=$CFLAGS - CFLAGS="$CFLAGS `krb5-config --cflags gssapi`" + CFLAGS="$CFLAGS `krb5-config --cflags`" if test "${ac_cv_header_gssapi_gssapi_h+set}" = set; the n { echo "$as_me:$LINENO: checking for gssapi/gssapi.h" >&5 echo $ECHO_N "checking for gssapi/gssapi.h... $ECHO_C" >&6; }
I see some discussion from Dan Price about Solaris 11 builds. Is gssapi supposed to work with Solaris 10? Advice please?
I'm not sure-- I will say that in Nevada (probably to be called Solaris 11) kerberos has changed quite bit, so I'm not sure that my experiments have any validity. Also, we haven't got Kerberos+Dovecot working just yet :) We're debugging it into existence at the moment. -dp -- Daniel Price - Solaris Kernel Engineering - dp@eng.sun.com - blogs.sun.com/dp
participants (2)
-
Dan Price
-
Jeff A. Earickson