RE: make install krb5 conflict with heimdal

2009-04-09 Thread Gary Gatten
-Original Message-
From: Chuck Swiger [mailto:cswi...@mac.com] 
Sent: Thursday, April 09, 2009 1:53 PM
To: Gary Gatten
Cc: freebsd-questions@freebsd.org
Subject: Re: make install krb5 conflict with heimdal

On Apr 9, 2009, at 11:29 AM, Gary Gatten wrote:
> This actually makes a little sense - thanks for the pointers!
>
> G
>
> BTW: Is top posting bad?  I prefer top posts, but if the list doesn't
> like it I'll change.  I'll find the rules and read them!

Top posting is widely considered bad on the FreeBSD lists, yes.

Note that Kerberos is a complicated, many-headed beast and not just in  
the mythological sense.  You might have an easier time if you choose  
which flavor you want to use, and then maybe add WITH_KERBEROS=yes and/ 
or WITH_HEIMDAL=yes to /etc/make.conf, before firing off the tree of  
builds-- that will help the various ports and options screens figure  
out which one you wanted to use more consistently.

However, it looks like Samba is looking for HEIMDAL_HOME or KRB5_HOME  
to be defined instead of using the standard WITH_ flags; arguably, the  
port maintainer dwcjr@ should be checking the WITH_ flags instead.

Regards,
-- 
-Chuck


OK, no more top posting.

Got past the krb5 build and back to SAMBA with a new error in clikrb5.c.
Time to try a package again!

libsmb/clikrb5.c: In function `krb5_set_real_time':
libsmb/clikrb5.c:132: error: dereferencing pointer to incomplete type
libsmb/clikrb5.c:133: error: dereferencing pointer to incomplete type
libsmb/clikrb5.c: In function `create_kerberos_key_from_string_direct':
libsmb/clikrb5.c:244: error: syntax error before "salt"
libsmb/clikrb5.c:246: error: `salt' undeclared (first use in this
function)
libsmb/clikrb5.c:246: error: (Each undeclared identifier is reported
only once
libsmb/clikrb5.c:246: error: for each function it appears in.)
libsmb/clikrb5.c: In function `smb_krb5_renew_ticket':
libsmb/clikrb5.c:1301: error: syntax error before "flags"
libsmb/clikrb5.c:1302: error: `krb5_realm' undeclared (first use in this
function)
libsmb/clikrb5.c:1302: error: `client_realm' undeclared (first use in
this function)
libsmb/clikrb5.c:1327: error: `flags' undeclared (first use in this
function)
The following command failed:
cc -I. -I/usr/ports/net/samba33/samba33/work/samba-3.3.3/source
-I/usr/ports/net/samba33/samba33/work/samba-3.3.3/source/iniparser/src
-Iinclude -I./include  -I. -I. -I./lib/replace -I./lib/talloc
-I./lib/tdb/include -I./libaddns -I./librpc -DHAVE_CONFIG_H
-I/usr/local/include -Iinclude -I./include -I. -I. -I./lib/replace
-I./lib/talloc -I./lib/tdb/include -I./libaddns -I./librpc -I./popt
-I/usr/local/include -DLDAP_DEPRECATED -O2 -fno-strict-aliasing -pipe
-DLDAP_DEPRECATED -O -D_SAMBA_BUILD_=3 -I/usr/local/include
-I/usr/ports/net/samba33/samba33/work/samba-3.3.3/source/lib
-D_SAMBA_BUILD_=3 -fPIC -DPIC -c libsmb/clikrb5.c -o libsmb/clikrb5.o
gmake: *** [libsmb/clikrb5.o] Error 1
*** Error code 2

Stop in /usr/ports/net/samba33/samba33.
*** Error code 1

Stop in /usr/ports/net/samba33/samba33.
*** Error code 1

Stop in /usr/ports/net/samba33/samba33.
wanmon1#








"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: make install krb5 conflict with heimdal

2009-04-09 Thread Chuck Swiger

On Apr 9, 2009, at 11:29 AM, Gary Gatten wrote:

This actually makes a little sense - thanks for the pointers!

G

BTW: Is top posting bad?  I prefer top posts, but if the list doesn't
like it I'll change.  I'll find the rules and read them!


Top posting is widely considered bad on the FreeBSD lists, yes.

Note that Kerberos is a complicated, many-headed beast and not just in  
the mythological sense.  You might have an easier time if you choose  
which flavor you want to use, and then maybe add WITH_KERBEROS=yes and/ 
or WITH_HEIMDAL=yes to /etc/make.conf, before firing off the tree of  
builds-- that will help the various ports and options screens figure  
out which one you wanted to use more consistently.


However, it looks like Samba is looking for HEIMDAL_HOME or KRB5_HOME  
to be defined instead of using the standard WITH_ flags; arguably, the  
port maintainer dwcjr@ should be checking the WITH_ flags instead.


Regards,
--
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


RE: make install krb5 conflict with heimdal

2009-04-09 Thread Gary Gatten
This actually makes a little sense - thanks for the pointers!

G

BTW: Is top posting bad?  I prefer top posts, but if the list doesn't
like it I'll change.  I'll find the rules and read them!

-Original Message-
From: Chuck Swiger [mailto:cswi...@mac.com] 
Sent: Thursday, April 09, 2009 1:26 PM
To: Gary Gatten
Cc: freebsd-questions@freebsd.org Questions -
Subject: Re: make install krb5 conflict with heimdal

On Apr 9, 2009, at 11:21 AM, Gary Gatten wrote:
> This is a new thread, so not sure what you mean?  Maybe my other posts
> re. new package system?  Unintentional hijack - just venting, sorry.
>
> I'm aware of the pkg_delete -f; but I don't want to break FreeRADIUS.
> This will process involves getting FreeRADIUS hooked into AD, and one
> method I'm looking into is the SAMBA / NTLM thing.  SAMBA won't  
> install
> unless krb5 is "happy".
>
> Do I need to force heimdal removal, install krb5, reinstall heimdal  
> and
> HOPE it works and nothing breaks in the process?

Nope.  FreeRADIUS' Makefile claims to support both Heimdal and  
Kerberos5, but you have to choose one or the other via the options  
("make config"):

> .ifdef(WITH_KERBEROS)
> .ifdef(WITH_HEIMDAL)
> LIB_DEPENDS+=   krb5.23:${PORTSDIR}/security/heimdal
> CONFIGURE_ARGS+=--enable-heimdal-krb5
> .else
> LIB_DEPENDS+=   krb5.3:${PORTSDIR}/security/krb5
> .endif

Likewise with Samba:

> .if defined(WITH_ADS)
> SAMBA_WANT_LDAP=yes
> SAMBA_WANT_KRB5=yes
> CONFIGURE_ARGS+=--with-ads
> .else
> CONFIGURE_ARGS+=--without-ads
> .endif
> # Kerberos5 is necessary for ADS
> .if defined(SAMBA_WANT_KRB5)
> .if defined(KRB5_HOME) && exists(${KRB5_HOME}/lib/libgssapi_krb5.so)
> CONFIGURE_ARGS+=--with-krb5="${KRB5_HOME}"
> .elif defined(HEIMDAL_HOME) && exists(${HEIMDAL_HOME}/lib/ 
> libgssapi.so)
> CONFIGURE_ARGS+=--with-krb5="${HEIMDAL_HOME}"
> .elif exists(/usr/lib/libkrb5.so) && exists(/usr/bin/krb5-config)
> CONFIGURE_ARGS+=--with-krb5="/usr"
> .else
> LIB_DEPENDS+=   krb5:${PORTSDIR}/security/heimdal
> CONFIGURE_ARGS+=--with-krb5="${LOCALBASE}"
> .endif


Regards,
-- 
-Chuck









"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: make install krb5 conflict with heimdal

2009-04-09 Thread Chuck Swiger

On Apr 9, 2009, at 11:21 AM, Gary Gatten wrote:

This is a new thread, so not sure what you mean?  Maybe my other posts
re. new package system?  Unintentional hijack - just venting, sorry.

I'm aware of the pkg_delete -f; but I don't want to break FreeRADIUS.
This will process involves getting FreeRADIUS hooked into AD, and one
method I'm looking into is the SAMBA / NTLM thing.  SAMBA won't  
install

unless krb5 is "happy".

Do I need to force heimdal removal, install krb5, reinstall heimdal  
and

HOPE it works and nothing breaks in the process?


Nope.  FreeRADIUS' Makefile claims to support both Heimdal and  
Kerberos5, but you have to choose one or the other via the options  
("make config"):



.ifdef(WITH_KERBEROS)
.ifdef(WITH_HEIMDAL)
LIB_DEPENDS+=   krb5.23:${PORTSDIR}/security/heimdal
CONFIGURE_ARGS+=--enable-heimdal-krb5
.else
LIB_DEPENDS+=   krb5.3:${PORTSDIR}/security/krb5
.endif


Likewise with Samba:


.if defined(WITH_ADS)
SAMBA_WANT_LDAP=yes
SAMBA_WANT_KRB5=yes
CONFIGURE_ARGS+=--with-ads
.else
CONFIGURE_ARGS+=--without-ads
.endif
# Kerberos5 is necessary for ADS
.if defined(SAMBA_WANT_KRB5)
.if defined(KRB5_HOME) && exists(${KRB5_HOME}/lib/libgssapi_krb5.so)
CONFIGURE_ARGS+=--with-krb5="${KRB5_HOME}"
.elif defined(HEIMDAL_HOME) && exists(${HEIMDAL_HOME}/lib/ 
libgssapi.so)

CONFIGURE_ARGS+=--with-krb5="${HEIMDAL_HOME}"
.elif exists(/usr/lib/libkrb5.so) && exists(/usr/bin/krb5-config)
CONFIGURE_ARGS+=--with-krb5="/usr"
.else
LIB_DEPENDS+=   krb5:${PORTSDIR}/security/heimdal
CONFIGURE_ARGS+=--with-krb5="${LOCALBASE}"
.endif



Regards,
--
-Chuck

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


RE: make install krb5 conflict with heimdal

2009-04-09 Thread Gary Gatten
This is a new thread, so not sure what you mean?  Maybe my other posts
re. new package system?  Unintentional hijack - just venting, sorry.

I'm aware of the pkg_delete -f; but I don't want to break FreeRADIUS.
This will process involves getting FreeRADIUS hooked into AD, and one
method I'm looking into is the SAMBA / NTLM thing.  SAMBA won't install
unless krb5 is "happy".

Do I need to force heimdal removal, install krb5, reinstall heimdal and
HOPE it works and nothing breaks in the process?

-Original Message-
From: owner-freebsd-questi...@freebsd.org
[mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of Don Read
Sent: Thursday, April 09, 2009 12:47 PM
To: freebsd-questions@freebsd.org
Subject: Re: make install krb5 conflict with heimdal

On Thu, 9 Apr 2009 12:20:35 -0500 Gary Gatten said:

> On FreeBSD 6.0.  I have FreeRADIUS installed and functional.  Trying
to
> integrate with AD so trying to install SAMBA for the NTLM Auth
> functions.  SAMBA installs failed with a problem with krb5.  Finally
got
> the make of krb5 to succeed, but the make install fails with error
> below.  Tried removing heimdal but FreeRADIUS depends on it!  Any help
> getting past this paradox would be GREATLY appreciated!  I'm stuck
right
> now and really don't want to uninstall FreeRADIUS.  
> 
> 
> ===>  Installing for krb5-1.6.3_5
> 
> ===>  krb5-1.6.3_5 conflicts with installed package(s):
>   heimdal-1.0.1
> 
>   They install files into the same place.
>   Please remove them first with pkg_delete(1).
> *** Error code 1
> 
> Stop in /usr/ports/security/krb5.
> *** Error code 1
> 
> Stop in /usr/ports/security/krb5.
> 

1. Stop hijacking threads.

2. man pkg_delete. 
Note the  -f, --force argument.


furrfu ...

-- 
Don Readdon_r...@att.net
 It's always darkest before the dawn. So if you are going to
 steal the neighbor's newspaper, that's the time to do it.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to
"freebsd-questions-unsubscr...@freebsd.org"








"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"


Re: make install krb5 conflict with heimdal

2009-04-09 Thread Don Read
On Thu, 9 Apr 2009 12:20:35 -0500 Gary Gatten said:

> On FreeBSD 6.0.  I have FreeRADIUS installed and functional.  Trying to
> integrate with AD so trying to install SAMBA for the NTLM Auth
> functions.  SAMBA installs failed with a problem with krb5.  Finally got
> the make of krb5 to succeed, but the make install fails with error
> below.  Tried removing heimdal but FreeRADIUS depends on it!  Any help
> getting past this paradox would be GREATLY appreciated!  I'm stuck right
> now and really don't want to uninstall FreeRADIUS.  
> 
> 
> ===>  Installing for krb5-1.6.3_5
> 
> ===>  krb5-1.6.3_5 conflicts with installed package(s):
>   heimdal-1.0.1
> 
>   They install files into the same place.
>   Please remove them first with pkg_delete(1).
> *** Error code 1
> 
> Stop in /usr/ports/security/krb5.
> *** Error code 1
> 
> Stop in /usr/ports/security/krb5.
> 

1. Stop hijacking threads.

2. man pkg_delete. 
Note the  -f, --force argument.


furrfu ...

-- 
Don Readdon_r...@att.net
 It's always darkest before the dawn. So if you are going to
 steal the neighbor's newspaper, that's the time to do it.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"