BIND uses the deprecated Kerberos framework for GSSAPI by default on Darwin though I should move it to use the GSS framework though I need to workout how to obtain the Kerberos realm once I do that and lookup when Apple added the GSS framework so it will build on older versions.
Note we use Apple's compilers when build BIND in testing. These are available free from Apple though need to be explicitly installed. Mark In message <e246e405-d260-4098-8d7e-7eb1d5c7f...@stonejongleux.com>, Larry Stone writes: > Im also running OS X 10.12.5 so decided to see if I can replicate this. I > normally use the 9.10 version (9.10.5-P1 builds fine (./configure and > make) but I have not done make install yet) but decided to try to build > 9.11.1-P1 to see what happens. > > In short, cannot replicate. I did both ./configure and ./configure > with-atf followed by make (completely deleted the directory and started > over between the two) and both build fine. I saw some warnings scroll by > (normal) but no errors. > > One difference in what I do vs. the OP is I noticed he does sudo make. I > do the make as myself, then sudo for make install. I dont think that > should make a difference. > > -- > Larry Stone > lston...@stonejongleux.com > > > > > > > On Jun 15, 2017, at 1:44 AM, James Brown via bind-users > <bind-users@lists.isc.org> wrote: > > > > I couldnt get 9.11 to compile for me on OS X 10.12.5. Same problem with > 9.11.1-P1. sudo make gives errors like this: > > > > In file included from > /Downloads/bind-9.11.1-P1/lib/dns/include/dst/dst.h:24: > > > /Users/jlbrown/Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:30:10 > : error: expected "FILENAME" or <FILENAME> > > #include ISC_PLATFORM_GSSAPIHEADER > > ^ > > /Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:52:10: error: > unknown type name 'gss_cred_id_t' > > gss_cred_id_t *cred); > > ^ > > /Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:71:24: error: > unknown type name 'gss_cred_id_t' > > dst_gssapi_releasecred(gss_cred_id_t *cred); > > ^ > > /Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:88:30: error: > unknown type name 'gss_ctx_id_t' > > isc_buffer_t *outtoken, gss_ctx_id_t *gssctx, > > ^ > > /Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:111:22: error: > unknown type name 'gss_cred_id_t' > > dst_gssapi_acceptctx(gss_cred_id_t cred, > > ^ > > /Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:114:8: error: > unknown type name 'gss_ctx_id_t' > > gss_ctx_id_t *context, dns_name_t *principal, > > ^ > > /Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:144:39: error: > unknown type name 'gss_ctx_id_t' > > dst_gssapi_deletectx(isc_mem_t *mctx, gss_ctx_id_t *gssctx); > > > > I used: > > > > ./configure --with-atf > > > > And then sudo make. > > > > If I use: > > > > ./configure --with-atf without-gssapi > > > > I get it failing with: > > > > Undefined symbols for architecture x86_64: > > "_gss_accept_sec_context", referenced from: > > _gss_accept_sec_context_spnego in libdns.a(spnego.o) > > (maybe you meant: _gss_accept_sec_context_spnego) > > "_gss_acquire_cred", referenced from: > > _dst_gssapi_acquirecred in libdns.a(gssapictx.o) > > "_gss_delete_sec_context", referenced from: > > _dst_gssapi_deletectx in libdns.a(gssapictx.o) > > "_gss_display_name", referenced from: > > _log_cred in libdns.a(gssapictx.o) > > _dst_gssapi_acceptctx in libdns.a(gssapictx.o) > > "_gss_display_status", referenced from: > > _gss_error_tostring in libdns.a(gssapictx.o) > > "_gss_export_sec_context", referenced from: > > _gssapi_dump in libdns.a(gssapi_link.o) > > "_gss_get_mic", referenced from: > > _gssapi_sign in libdns.a(gssapi_link.o) > > "_gss_import_name", referenced from: > > _dst_gssapi_acquirecred in libdns.a(gssapictx.o) > > _dst_gssapi_initctx in libdns.a(gssapictx.o) > > "_gss_import_sec_context", referenced from: > > _gssapi_restore in libdns.a(gssapi_link.o) > > "_gss_init_sec_context", referenced from: > > _gss_init_sec_context_spnego in libdns.a(spnego.o) > > (maybe you meant: _gss_init_sec_context_spnego) > > "_gss_inquire_cred", referenced from: > > _log_cred in libdns.a(gssapictx.o) > > "_gss_release_buffer", referenced from: > > _gssapi_sign in libdns.a(gssapi_link.o) > > _gssapi_dump in libdns.a(gssapi_link.o) > > _gss_error_tostring in libdns.a(gssapictx.o) > > _log_cred in libdns.a(gssapictx.o) > > _dst_gssapi_initctx in libdns.a(gssapictx.o) > > _dst_gssapi_acceptctx in libdns.a(gssapictx.o) > > _gss_accept_sec_context_spnego in libdns.a(spnego.o) > > ... > > "_gss_release_cred", referenced from: > > _dst_gssapi_releasecred in libdns.a(gssapictx.o) > > "_gss_release_name", referenced from: > > _dst_gssapi_acquirecred in libdns.a(gssapictx.o) > > _log_cred in libdns.a(gssapictx.o) > > _dst_gssapi_initctx in libdns.a(gssapictx.o) > > _dst_gssapi_acceptctx in libdns.a(gssapictx.o) > > "_gss_verify_mic", referenced from: > > _gssapi_verify in libdns.a(gssapi_link.o) > > "_krb5_free_context", referenced from: > > _check_config in libdns.a(gssapictx.o) > > "_krb5_get_default_realm", referenced from: > > _check_config in libdns.a(gssapictx.o) > > "_krb5_init_context", referenced from: > > _check_config in libdns.a(gssapictx.o) > > ld: symbol(s) not found for architecture x86_64 > > clang: error: linker command failed with exit code 1 (use -v to see > invocation) > > make2: *** nsupdate Error 1 > > make1: *** subdirs Error 1 > > make: *** subdirs Error 1 > > > > Any suggestions? > > > > Previous versions of BIND 9.x have worked without issues. > > > > Thanks, > > > > James. > > _______________________________________________ > > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list > > > > bind-users mailing list > > bind-users@lists.isc.org > > https://lists.isc.org/mailman/listinfo/bind-users > > _______________________________________________ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to > unsubscribe from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
