samba - Feb 2013 - configure with --with-ads failed get "krb5 libs don't have all features required for Active Directory support" error

Dear all,I get "krb5 libs don't have all features required for Active
Directory support" errors when configure with --with-ads source3 code.as:  
[root at RedHatEL5 source3]# pwd /root/samba-4.0.2/source3 [root at RedHatEL5
source3]#  ./configure --with-ads  SAMBA VERSION: 4.0.2 checking build system
type... i686-pc-linux-gnu checking host system type... i686-pc-linux-gnu
checking target system type... i686-pc-linux-gnu LIBREPLACE_LOCATION_CHECKS:
START LIBREPLACE_LOCATION_CHECKS: END LIBREPLACE_CC_CHECKS: START checking for
gcc... gcc checking whether the C compiler works... yes checking for C compiler
default output file name... a.out ...
...
...
checking for krb5_addresses type... no checking for krb5_error_code
krb5_enctype_to_string(krb5_context context, krb5_enctype enctype, char
**str)... no checking for krb5_error_code krb5_enctype_to_string(krb5_enctype
enctype, char *str, size_t len)... yes checking for krb5_principal_get_realm...
no checking for krb5_princ_realm... yes checking for KRB5_PDU_NONE
declaration... no checking for flags in krb5_creds... no configure: WARNING:
krb5_get_init_creds_opt_alloc found in -lkrb5 configure: WARNING:
krb5_principal_compare_any_realm not found in -lkrb5 configure: WARNING:
gss_wrap_iov not found in -lgssapi configure: WARNING: need either
gss_get_name_attribute or gsskrb5_extract_authz_data_from_sec_context and
gss_inquire_sec_context_by_oid in -lgssapi for PAC support configure: error:
krb5 libs don't have all features required for Active Directory support the
attachment is config.log


Any help appreciated


thanks

On Wed, 2013-02-27 at 19:10 +0800, ?? wrote:
> Dear all,
> I get "krb5 libs don't have all features required for Active
Directory support" errors when configure with --with-ads source3 code.
> as:   
> [root at RedHatEL5 source3]# pwd
> /root/samba-4.0.2/source3
> [root at RedHatEL5 source3]#  ./configure --with-ads 
> SAMBA VERSION: 4.0.2
> checking build system type... i686-pc-linux-gnu
> checking host system type... i686-pc-linux-gnu
> checking target system type... i686-pc-linux-gnu
> LIBREPLACE_LOCATION_CHECKS: START
> LIBREPLACE_LOCATION_CHECKS: END
> LIBREPLACE_CC_CHECKS: START
> checking for gcc... gcc
> checking whether the C compiler works... yes
> checking for C compiler default output file name... a.out
> ...
> ...
> ...
> checking for krb5_addresses type... no
> checking for krb5_error_code krb5_enctype_to_string(krb5_context context,
krb5_enctype enctype, char **str)... no
> checking for krb5_error_code krb5_enctype_to_string(krb5_enctype enctype,
char *str, size_t len)... yes
> checking for krb5_principal_get_realm... no
> checking for krb5_princ_realm... yes
> checking for KRB5_PDU_NONE declaration... no
> checking for flags in krb5_creds... no
> configure: WARNING: krb5_get_init_creds_opt_alloc found in -lkrb5
> configure: WARNING: krb5_principal_compare_any_realm not found in -lkrb5
> configure: WARNING: gss_wrap_iov not found in -lgssapi
> configure: WARNING: need either gss_get_name_attribute or
gsskrb5_extract_authz_data_from_sec_context and gss_inquire_sec_context_by_oid
in -lgssapi for PAC support
> configure: error: krb5 libs don't have all features required for Active
Directory support
> the attachment is config.log 
> 
> 
> Any help appreciated
Why are you using the autoconf source3/ build system?

Just build in the top level directory, and we will use our internal
Heimdal kerberos.

In any case, if you want to use a system MIT kerberos, we require 1.8 in
source3 and 1.9 in the top level build.  Earlier versions are not able
to support our requirements, which is why we bundle a known working
version of Heimdal.

Andrew Bartlett


-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org