SSSD doesn't build against Kerberos < 1.8 #1894

sssd-bot · 2020-05-02T12:19:19Z

Cloned from Pagure issue: https://pagure.io/SSSD/sssd/issue/852

Created at 2011-04-25 16:14:52 by sgallagh
Closed as Fixed
Assigned to jzeleny

gcc -DHAVE_CONFIG_H -I. -I. -I. -Wall -Iinclude -I.. -I./include -I./src/sss_client -I./src -Iinclude -I. -I/usr/include/dbus-1.0 -I/usr/lib/dbus-1.0/include -DLIBDIR="/usr/lib" -DVARDIR="/var" -DSHLIBEXT="" -DSSSD_LIBEXEC_PATH="/usr/libexec/sssd" -DSSSD_INTROSPECT_PATH="" -DSSSD_CONF_DIR="/etc/sssd" -DSSS_NSS_SOCKET_NAME="/var/lib/sss/pipes/nss" -DSSS_PAM_SOCKET_NAME="/var/lib/sss/pipes/pam" -DSSS_PAM_PRIV_SOCKET_NAME="/var/lib/sss/pipes/private/pam" -DLOCALEDIR="@localedir@" -Wall -Wshadow -Wstrict-prototypes -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Werror-implicit-function-declaration -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i386 -mtune=generic -fasynchronous-unwind-tables -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -MT src/util/libsss_ldap_la-sss_krb5.lo -MD -MP -MF src/util/.deps/libsss_ldap_la-sss_krb5.Tpo -c src/util/sss_krb5.c -fPIC -DPIC -o src/util/.libs/libsss_ldap_la-sss_krb5.o
src/util/sss_krb5.c: In function 'select_principal_from_keytab':
src/util/sss_krb5.c:146: error: implicit declaration of function 'krb5_unparse_name_flags'
src/util/sss_krb5.c:147: error: 'KRB5_PRINCIPAL_UNPARSE_NO_REALM' undeclared (first use in this function)
src/util/sss_krb5.c:147: error: (Each undeclared identifier is reported only once
src/util/sss_krb5.c:147: error: for each function it appears in.)
src/util/sss_krb5.c: In function 'match_principal':
src/util/sss_krb5.c:413: error: 'KRB5_PRINCIPAL_UNPARSE_NO_REALM' undeclared (first use in this function)
make[2]: *** [src/util/libsss_ldap_la-sss_krb5.lo] Error 1
make[2]: *** Waiting for unfinished jobs....

Old versions of the Kerberos libraries (such as those available on RHEL 5) do not have support for the {{{krb5_unparse_name_flags()}}} function. We need to add detection for this into the configure script and {{{#ifdef}}} it in the code. We still want to prefer {{{krb5_unparse_name_flags()}}} on platforms with newer libraries, since it is more reliable than parsing for {{{@}}}.