pam_krb5-3.5 on AIX / gcc: '-b' must come at the start of the command line

[dosman]

This is resolved, the Makefile requires some tailoring.

 > Markus Moeller wrote: That is a compiler option and with gcc wou 
would need -Wl,-b.....

So, changing this line in the Makefile resulted in a successful compile:

LIBS            = -lpam -L/usr/local/apps/kerberos/krb5-1.6.1/lib 
-blibpath:/usr/local/apps/kerberos/krb5-1.6.1/lib::/usr/lib:/lib -brtl
-lkrb5 -lk5crypto -lcom_err -lpthreads
--to this:--
LIBS            = -lpam -L/usr/local/apps/kerberos/krb5-1.6.1/lib 
-Wl,-blibpath:/usr/local/apps/kerberos/krb5-1.6.1/lib::/usr/lib:/lib 
-Wl,-brtl
-lkrb5 -lk5crypto -lcom_err -lpthreads


Moving on, the option "--enable-reduced-depends" causes the configure to 
not see my krb5 libraries. I was just trying to prevent having to 
maintain my own branch of kerberos libraries my boxen. This line from 
the README seems like the problem may just be with AIX with no workaround:
"This will only work with shared Kerberos libraries and will only work 
on platforms where shared libraries properly encode their own 
dependencies (such as Linux)."

Thanks again.


dosman wrote:

>Hi again,
>I am attempting to build pam_krb5-3.5 on AIX 5.3 with gcc 4.0.0 and I'm 
>running into some type of gcc error:
>
>export CC=gcc
>export 
>LIBPATH=/usr/local/krb5-1.6.1/lib:/opt/freeware/lib:/usr/local/lib:/usr/lib
>
>./configure --with-kerberos=/usr/local/krb5-1.6.1
>...
>gmake
>...
>gcc -o pam_krb5.so -shared  api-account.o api-auth.o api-password.o 
>api-session.o auth.o compat.o context.o logging.o options.o prompting.o 
>support.o -lpam -L/usr/local/krb5-1.6.1/lib 
>-blibpath:/usr/local/krb5-1.6.1/lib::/usr/lib:/lib -brtl -lkrb5 
>-lk5crypto -lcom_err -lpthreads
>gcc: '-b' must come at the start of the command line
>gmake: *** [pam_krb5.so] Error 1
>
>
>When running gcc manually with -blibpath as the first argument and we 
>get this error instead:
>gcc: couldn't run 
>'libpath:/usr/local/krb5-1.6.1/lib:/usr/lib:/lib-gcc-4.0.0': No such 
>file or directory
>
>I've found various references to this issue on other applications that 
>pointed to errors with linker flags and what-not, nothing I found seemed 
>applicable to my problem.
>
><real problem>
>It's worth noting that this problem does not occur when compiling 
>against an older kerberos library (~2003 version unknown). However the 
>pam_krb5.so module I end up with gives me an error when authenticating 
>against a Windows 2003 AD server:
>(pam_krb5): userid: krb5_get_init_creds_password: KRB5 error code 52
>
> From what I have read it appears this was a known issue with AD 
>switching from udp to tcp for users with large numbers of groups and was 
>resolved in kerberos around version 1.3 or so; my older libraries would 
>seem to be suspect. Otherwise it does work when talking to a native 
>kerberos server, only the AD gives it troubles.
></real problem>
>
>Thanks!
>________________________________________________
>Kerberos mailing list           Kerberos at mit.edu
>https://mailman.mit.edu/mailman/listinfo/kerberos
>  
>