[krbdev.mit.edu #2240] krb5-config --cflags gssapi whenusedbyOpenSSH-snap-20040212

[Sam Hartman via RT]

>>>>> "Douglas" == Douglas E Engert <deengert at anl.gov> writes:

    Douglas> Darren Tucker wrote:
    >> 
    >> Douglas E. Engert wrote:
    >> > More or less, but the new code uses > CPPFLAGS="$CPPFLAGS
    >> ${K5CFLAGS}/gssapi"
    >> 
    >> What guarantee is there that K5CFLAGS will contain only
    >> -I/path/to/includes?"  What happens if it contains, eg,
    >> "-I/path/to/include -DSOME_FLAG"?

    Douglas> The current MIT krb5-config returns only
    Douglas> -I/path/to/include

    Douglas> By the time MIT releases a new version of krb5-config,
    Douglas> they should have gssapi.h in the path so the code in
    Douglas> question to test for gssapi.h in the sub directory will
    Douglas> not be executed. The Heimdal code (as I understand) does
    Douglas> not have this problem, so does not execute this code.


Hi.  MIT has not made a determination as to whether Doug's bug is
actually a bug nor whether we will fix it.  We certainly will not fix
it for the upcoming 1.3.2 release; we have passed our final change
deadline for that release.


I disagree with Doug's assertion that most programs include gssapi.h
not gssapi/gssapi.h.


AT this time I would recommend including gssapi.h for Heimdal and
gssapi/gssapi.h for MIT Kerberos.


We'll certainly evaluate Doug's bug report and make a determination
about whet we think the correct behavior is.  However I am very
reluctant to recommend that people accept patches that depend on the
specific output of krb5-config.

--Sam