krb5-1.6.3-beta1 is available

[Tom Yu]

>>>>> "deengert" == Douglas E Engert <deengert at anl.gov> writes:

deengert> I have kinit using pkinit and have tracked down two problems with
deengert> the configuration:

deengert>  1) ./plugins/preauth/pkinit/configure.in
deengert>     uses KRB5_BUILD_LIBRARY
deengert>     but should use KRB5_BUILD_LIBRARY_WITH_DEPS

deengert>     With out this the rpath is not set and the additional libs
deengert>     including OpenSSL are not found.

I agree with this change.

deengert>  2) There is no way with configure to pass in the locations
deengert>     of OpenSSL headers, libs anr rpath.

deengert>     To get around this today, I added a
deengert>      LIBS+= $(OPENSSL_LDFLAGS)

I would not use the "+=" operator, because it is not portable.

deengert>     to the Makefile.in then:

deengert>     CPPFLAGS=-I/opt/smartcard/include
deengert>     export CPPFLAGS
deengert>     ./configure .....

deengert>     OPENSSL_LDFLAGS="-L/opt/smartcard/lib -R/opt/smartcard/lib"
deengert>     export OPENSSL_LDFLAGS
deengert>     make

deengert>     The main configure has a way to pass in SS_LIB, DB_HEADER, DB_LIB but
deengert>     not OpenSSL. The pkinit/configure.in has:
deengert>        # XXX This is incorrect, but should cause -lcrypto to be included by default
deengert>        AC_CHECK_LIB(crypto, PKCS7_get_signer_info)
deengert>     It looks like it should also have a way to get the headers, -L and rpath
deengert>     too. I would assume since OpenSSL is not used by the rest of Kerberos you would
deengert>     only want to pass this to pkinit.

Yes, there should be more automatic means of locating the OpenSSL
headers and libraries.  I don't know how user-friendly we're likely to
manage to make it for krb5-1.6.3.

---Tom