Re: [gentoo-user] SSSD and nsupdate installation issue

[Alex Luehm]

Dave,




Many thanks!

On 3/13/21 5:28 PM, David M. Fellows wrote:

That did the trick! Adding the bug tracker to my list of resources for future troubleshooting. Another day wiser, I suppose.

Hey all,

I've been trying to install SSSD on my Gentoo laptop over the past week
and keep getting stuck at the same spot. I've tried 2.2.0-r1, 2.3.1-r2,
and even 2.4.2 - all are failing during initial configuration, claiming
that "nsupdate does not support 'realm'". I've manually run the Autoconf
script and it doesn't seem to find this issue with nsupdate, so I'm
really starting to scratch my head. Admittedly, my knowledge of the
Gentoo package build process is lacking and after exhausting my
google-foo I now climb the mountain in search of guidance.

The dependencies and flags for SSSD seem pretty straightforward, so not
sure what could be causing this. Any pointers (or commiseration) would
be much appreciated.

A few snippets below:

checking for executable nsupdate... yes
checking for nsupdate 'realm' support'... no
configure: error: nsupdate does not support 'realm'

environment, line 3426:  Called econf '--localstatedir=/var'
'--runstatedir=/run' '--with-pid-path=/run'
'--with-plugin-path=/usr/lib64/sssd'
'--enable-pammoddir=//lib64/security'
'--with-ldb-lib-dir=/usr/lib64/samba/ldb'
'--with-db-path=/var/lib/sss/db'
'--with-gpo-cache-path=/var/lib/sss/gpo_cache'
'--with-pubconf-path=/var/lib/sss/pubconf'
'--with-pipe-path=/var/lib/sss/pipes'
'--with-mcache-path=/var/lib/sss/mc'
'--with-secrets-db-path=/var/lib/sss/secrets'
'--with-log-path=/var/log/sssd' '--with-os=gentoo'
'--with-nscd=/usr/sbin/nscd' '--with-unicode-lib=glib2'
'--disable-rpath' '--sbindir=/usr/sbin' '--enable-local-provider'
'--without-kcm' '--without-secrets' '--with-samba'
'--with-smb-idmap-interface-version=6' '--enable-cifs-idmap-plugin'
'--without-selinux' '--without-semanage' '--enable-krb5-locator-plugin'
'--disable-pac-responder' '--with-nfsv4-idmapd-plugin' '--enable-nls'
'--with-libnl' '--with-manpages' '--with-sudo' '--with-autofs'
'--with-ssh' '--disable-valgrind' '--without-python2-bindings'
'--without-python3-bindings' '--with-initscript=sysv'

Best,

Alex

The problem seems to be described in this bug report:

https://bugs.gentoo.org/679838

It also describes a workaround  (set FEATURES=-network-sandbox).

DaveF

OpenPGP_0x866016D0C7D402E0.asc
Description: application/pgp-keys

OpenPGP_signature
Description: OpenPGP digital signature