Re: [squid-dev] [PATCH] MacOS MIT Kerberos requires libresolv

2016-01-04 Thread Amos Jeffries 
On 4/01/2016 8:59 p.m., Kinkie wrote:
> Just for clarity: Squid isn't failing. The issue is in the
> kerberos_ldap_group helper.
> 

Aha. So the check should be in that helpers requires.m4 file and only
run if the helper is to be built.

It can also set an AC_SUBST variable LIBRESOLV="-lresolv".

Amos

___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev

Re: [squid-dev] [PATCH] MacOS MIT Kerberos requires libresolv

2016-01-04 Thread Kinkie 
Just for clarity: Squid isn't failing. The issue is in the
kerberos_ldap_group helper.

On Mon, Jan 4, 2016 at 8:58 AM, Kinkie  wrote:
> It is, however:
>
> $ pkg-config --libs mit-krb5
> -L/opt/local/lib -lkrb5 -lk5crypto -lcom_err
>
> :(
>
> On Mon, Jan 4, 2016 at 6:10 AM, Amos Jeffries  wrote:
>> On 4/01/2016 1:01 a.m., Kinkie wrote:
>>> Hi,
>>>   the attached patch improves the build on MacOS, where MIT krb5
>>> libraries require explicit linking of libresolv.
>>>
>>
>> Is pkg-config available and working for krb5 libraries on the MacOS
>> system(s) where this library needs to be checked explicitly?
>>
>> If pkg-config is not available there, the library check should be moved
>> up to the list of library checks between lines 1446 and 1465.
>>
>> Amos
>>
>> ___
>> squid-dev mailing list
>> squid-dev@lists.squid-cache.org
>> http://lists.squid-cache.org/listinfo/squid-dev
>
>
>
> --
> Francesco



-- 
Francesco
___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev

Re: [squid-dev] [PATCH] MacOS MIT Kerberos requires libresolv

2016-01-04 Thread Markus Moeller 

Hi Kinkie,

  I wonder against which Kerberos library SASL is linked against.  You may 
get strange errors if SASL which is used by ldap is linked against the 
native Kerberos libraries.  So the kerberos_ldap_group helper may not work 
correctly for SASL/GSSAPI based authentication to the ldap server.


Markus

"Amos Jeffries"  wrote in message news:568a3df0.9040...@treenet.co.nz...

On 4/01/2016 8:59 p.m., Kinkie wrote:

Just for clarity: Squid isn't failing. The issue is in the
kerberos_ldap_group helper.



Aha. So the check should be in that helpers requires.m4 file and only
run if the helper is to be built.

It can also set an AC_SUBST variable LIBRESOLV="-lresolv".

Amos

___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev 



___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev

Re: [squid-dev] [PATCH] MacOS MIT Kerberos requires libresolv

2016-01-04 Thread Kinkie 
On Mon, Jan 4, 2016 at 2:29 PM, Markus Moeller  wrote:
> Hi Kinkie,
>
>   I wonder against which Kerberos library SASL is linked against.  You may
> get strange errors if SASL which is used by ldap is linked against the
> native Kerberos libraries.  So the kerberos_ldap_group helper may not work
> correctly for SASL/GSSAPI based authentication to the ldap server.

Hi,

$ otool -L /usr/lib/libsasl2.2.dylib
/usr/lib/libsasl2.2.dylib:
/usr/lib/libsasl2.2.dylib (compatibility version 3.0.0, current
version 3.15.0)
/usr/lib/libcrypto.0.9.8.dylib (compatibility version 0.9.8,
current version 50.0.0)
/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current
version 1197.1.1)

System kerberos seems to be in /usr/lib and
/System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos . I
can't find the SASL libraries; they must be embedded somewhere else :\


-- 
Francesco
___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev

Re: [squid-dev] [PATCH] MacOS MIT Kerberos requires libresolv

2016-01-04 Thread Kinkie 
> Could it be that the MIT header is used during configure instead of the MAC
> Kerberos header files ?

Doh! You are right  - I had a stale config.cache

Thanks for pointing it out!

  Francesco
___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev

Re: [squid-dev] [PATCH] MacOS MIT Kerberos requires libresolv

2016-01-04 Thread Markus Moeller 

Hi Francesco,

  The SASL gssapi library is /usr/lib/sasl2/libgssapiv2.2.0.18.so

~ markus$ otool -L /usr/lib/sasl2/libgssapiv2.2.0.18.so
/usr/lib/sasl2/libgssapiv2.2.0.18.so:
   /usr/lib/sasl2/libgssapiv2.2.0.18.so (compatibility version 1.0.0, 
current version 1.0.0)
   /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos 
(compatibility version 5.0.0, current version 6.0.0)
   /usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current 
version 1213.0.0)


Markus

"Kinkie"  wrote in message 
news:ca+y8hcox8ae5szxb1f+qnrqsx9qyjz7-vlj9o_uzffa9k6x...@mail.gmail.com...


On Mon, Jan 4, 2016 at 2:29 PM, Markus Moeller  
wrote:

Hi Kinkie,

  I wonder against which Kerberos library SASL is linked against.  You may
get strange errors if SASL which is used by ldap is linked against the
native Kerberos libraries.  So the kerberos_ldap_group helper may not work
correctly for SASL/GSSAPI based authentication to the ldap server.


Hi,

$ otool -L /usr/lib/libsasl2.2.dylib
/usr/lib/libsasl2.2.dylib:
   /usr/lib/libsasl2.2.dylib (compatibility version 3.0.0, current
version 3.15.0)
   /usr/lib/libcrypto.0.9.8.dylib (compatibility version 0.9.8,
current version 50.0.0)
   /usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current
version 1197.1.1)

System kerberos seems to be in /usr/lib and
/System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos . I
can't find the SASL libraries; they must be embedded somewhere else :\


--
   Francesco
___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev 



___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev

Re: [squid-dev] [PATCH] MacOS MIT Kerberos requires libresolv

2016-01-03 Thread Kinkie 
It is, however:

$ pkg-config --libs mit-krb5
-L/opt/local/lib -lkrb5 -lk5crypto -lcom_err

:(

On Mon, Jan 4, 2016 at 6:10 AM, Amos Jeffries  wrote:
> On 4/01/2016 1:01 a.m., Kinkie wrote:
>> Hi,
>>   the attached patch improves the build on MacOS, where MIT krb5
>> libraries require explicit linking of libresolv.
>>
>
> Is pkg-config available and working for krb5 libraries on the MacOS
> system(s) where this library needs to be checked explicitly?
>
> If pkg-config is not available there, the library check should be moved
> up to the list of library checks between lines 1446 and 1465.
>
> Amos
>
> ___
> squid-dev mailing list
> squid-dev@lists.squid-cache.org
> http://lists.squid-cache.org/listinfo/squid-dev



-- 
Francesco
___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev

Re: [squid-dev] [PATCH] MacOS MIT Kerberos requires libresolv

2016-01-03 Thread Amos Jeffries 
On 4/01/2016 1:01 a.m., Kinkie wrote:
> Hi,
>   the attached patch improves the build on MacOS, where MIT krb5
> libraries require explicit linking of libresolv.
> 

Is pkg-config available and working for krb5 libraries on the MacOS
system(s) where this library needs to be checked explicitly?

If pkg-config is not available there, the library check should be moved
up to the list of library checks between lines 1446 and 1465.

Amos

___
squid-dev mailing list
squid-dev@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-dev