[squid-dev] [PATCH] MacOS MIT Kerberos requires libresolv

[Markus Moeller]

Hi Francesco,

   Which squid version do you use ?  If I use the trunk I see that 
krb5_kt_free_entry does not exist and configure says so

checking for krb5_pac... no
checking for krb5_kt_free_entry in -lkrb5... no
checking for krb5_get_init_creds_keytab in -lkrb5... yes

support_krb5.cc then uses krb5_free_keytab_entry_contents

#if USE_HEIMDAL_KRB5 || ( HAVE_KRB5_KT_FREE_ENTRY && 
HAVE_DECL_KRB5_KT_FREE_ENTRY )
            code = krb5_kt_free_entry(kparam.context, &entry);
#else
            code = krb5_free_keytab_entry_contents(kparam.context, &entry);
#endif

Could it be that the MIT header is used during configure instead of the MAC 
Kerberos header files ?

Markus

"Kinkie"  wrote in message 
news:CA+Y8hcMYz9uQ9AgvMZco37f3hdVqBeOSN_R6T=B50L7kv2DPWg at mail.gmail.com...

Hi Markus,
  Uninstalling MIT kerberos, the build system correctly detects Apple
kerberos, but fails at

    ccache g++ -DHAVE_CONFIG_H   -I../../.. -I../../../include
-I../../../lib -I../../../src -I../../../include -I/opt/local/include
-I../../../libltdl -I. -I/usr/include/libxml2  -I/opt/local/include
-I/usr/include/libxml2  -Werror -Qunused-arguments
-Wno-deprecated-register  -D_REENTRANT -I/opt/local/include
-I/opt/local/include -I/opt/local/include/p11-kit-1
-I/opt/local/include  -g -O2 -std=c++11 -MT support_log.o -MD -MP -MF
$depbase.Tpo -c -o support_log.o support_log.cc &&\
    mv -f $depbase.Tpo $depbase.Po
support_krb5.cc:296:20: error: use of undeclared identifier 
'krb5_kt_free_entry'
            code = krb5_kt_free_entry(kparam.context, &entry);



On Mon, Jan 4, 2016 at 4:09 PM, Kinkie <gkinkie at gmail.com> wrote:
> On Mon, Jan 4, 2016 at 2:29 PM, Markus Moeller <huaraz at moeller.plus.com> 
> wrote:
>> Hi Kinkie,
>>
>>   I wonder against which Kerberos library SASL is linked against.  You 
>> may
>> get strange errors if SASL which is used by ldap is linked against the
>> native Kerberos libraries.  So the kerberos_ldap_group helper may not 
>> work
>> correctly for SASL/GSSAPI based authentication to the ldap server.
>
> Hi,
>
> $ otool -L /usr/lib/libsasl2.2.dylib
> /usr/lib/libsasl2.2.dylib:
>     /usr/lib/libsasl2.2.dylib (compatibility version 3.0.0, current
> version 3.15.0)
>     /usr/lib/libcrypto.0.9.8.dylib (compatibility version 0.9.8,
> current version 50.0.0)
>     /usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current
> version 1197.1.1)
>
> System kerberos seems to be in /usr/lib and
> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos . I
> can't find the SASL libraries; they must be embedded somewhere else :\
>
>
> --
>     Francesco



-- 
    Francesco
_______________________________________________
squid-dev mailing list
squid-dev at lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev