[PATCH] Make krb5-config suppress CFLAGS output and omit extra libraries when called with --libs

Russ Allbery rra at stanford.edu
Mon Sep 26 12:58:04 EDT 2011

Ken Hornstein <kenh at cmf.nrl.navy.mil> writes:

> FWIW, I always assumed that Kerberos functions _were_ available when you
> ran krb5-config --libs gssapi (why?  Well, because they were).  I'm not
> saying that my assumption is necessarily valid, but in looking at
> krb5-config I see that it only says what Sam has noted ("GSSAPI
> application with Kerberos 5 bindings"), and I find that spetacularly
> vague.  I guess if I was starting cold I'd look at the list of libraries
> it output, see that "-lkrb5" was included, and figure that it would be
> safe to assume that you'd get krb5 symbols as well (I guess when it
> comes to Kerberos programming, I'm more de facto than de jure).

Given that, maybe the way forward would be to introduce a new gssapi-only
"type" that would omit the Kerberos library and leave gssapi alone for
backwards compatibility.

Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>

More information about the krbdev mailing list