krb5-1.6.3-beta1 is available
tlyu at MIT.EDU
Mon Oct 1 22:48:34 EDT 2007
>>>>> "deengert" == Douglas E Engert <deengert at anl.gov> writes:
deengert> I have kinit using pkinit and have tracked down two problems with
deengert> the configuration:
deengert> 1) ./plugins/preauth/pkinit/configure.in
deengert> uses KRB5_BUILD_LIBRARY
deengert> but should use KRB5_BUILD_LIBRARY_WITH_DEPS
deengert> With out this the rpath is not set and the additional libs
deengert> including OpenSSL are not found.
I agree with this change.
deengert> 2) There is no way with configure to pass in the locations
deengert> of OpenSSL headers, libs anr rpath.
deengert> To get around this today, I added a
deengert> LIBS+= $(OPENSSL_LDFLAGS)
I would not use the "+=" operator, because it is not portable.
deengert> to the Makefile.in then:
deengert> export CPPFLAGS
deengert> ./configure .....
deengert> OPENSSL_LDFLAGS="-L/opt/smartcard/lib -R/opt/smartcard/lib"
deengert> export OPENSSL_LDFLAGS
deengert> The main configure has a way to pass in SS_LIB, DB_HEADER, DB_LIB but
deengert> not OpenSSL. The pkinit/configure.in has:
deengert> # XXX This is incorrect, but should cause -lcrypto to be included by default
deengert> AC_CHECK_LIB(crypto, PKCS7_get_signer_info)
deengert> It looks like it should also have a way to get the headers, -L and rpath
deengert> too. I would assume since OpenSSL is not used by the rest of Kerberos you would
deengert> only want to pass this to pkinit.
Yes, there should be more automatic means of locating the OpenSSL
headers and libraries. I don't know how user-friendly we're likely to
manage to make it for krb5-1.6.3.
More information about the krbdev