#852 SSSD doesn't build against Kerberos < 1.8
Closed: Fixed None Opened 12 years ago by sgallagh.

gcc -DHAVE_CONFIG_H -I. -I. -I. -Wall -Iinclude -I.. -I./include -I./src/sss_client -I./src -Iinclude -I. -I/usr/include/dbus-1.0 -I/usr/lib/dbus-1.0/include -DLIBDIR=\"/usr/lib\" -DVARDIR=\"/var\" -DSHLIBEXT=\"\" -DSSSD_LIBEXEC_PATH=\"/usr/libexec/sssd\" -DSSSD_INTROSPECT_PATH=\"\" -DSSSD_CONF_DIR=\"/etc/sssd\" -DSSS_NSS_SOCKET_NAME=\"/var/lib/sss/pipes/nss\" -DSSS_PAM_SOCKET_NAME=\"/var/lib/sss/pipes/pam\" -DSSS_PAM_PRIV_SOCKET_NAME=\"/var/lib/sss/pipes/private/pam\" -DLOCALEDIR=\"@localedir@\" -Wall -Wshadow -Wstrict-prototypes -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Werror-implicit-function-declaration -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i386 -mtune=generic -fasynchronous-unwind-tables -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -MT src/util/libsss_ldap_la-sss_krb5.lo -MD -MP -MF src/util/.deps/libsss_ldap_la-sss_krb5.Tpo -c src/util/sss_krb5.c  -fPIC -DPIC -o src/util/.libs/libsss_ldap_la-sss_krb5.o
src/util/sss_krb5.c: In function 'select_principal_from_keytab':
src/util/sss_krb5.c:146: error: implicit declaration of function 'krb5_unparse_name_flags'
src/util/sss_krb5.c:147: error: 'KRB5_PRINCIPAL_UNPARSE_NO_REALM' undeclared (first use in this function)
src/util/sss_krb5.c:147: error: (Each undeclared identifier is reported only once
src/util/sss_krb5.c:147: error: for each function it appears in.)
src/util/sss_krb5.c: In function 'match_principal':
src/util/sss_krb5.c:413: error: 'KRB5_PRINCIPAL_UNPARSE_NO_REALM' undeclared (first use in this function)
make[2]: *** [src/util/libsss_ldap_la-sss_krb5.lo] Error 1
make[2]: *** Waiting for unfinished jobs....

Old versions of the Kerberos libraries (such as those available on RHEL 5) do not have support for the {{{krb5_unparse_name_flags()}}} function. We need to add detection for this into the configure script and {{{#ifdef}}} it in the code. We still want to prefer {{{krb5_unparse_name_flags()}}} on platforms with newer libraries, since it is more reliable than parsing for {{{@}}}.


On platforms with older kerberos libraries, we should just copy the MIT parser into the SSSD code, so it's fully-compatible.

Fields changed

patch: 0 => 1
status: new => assigned

Fixed in: 6281870

resolution: => fixed
status: assigned => closed

Fields changed

rhbz: => 0

Metadata Update from @sgallagh:
- Issue assigned to jzeleny
- Issue set to the milestone: SSSD 1.6.0

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1894

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata