samba - Feb 2013 - 回复： configure with --with-ads failed get "krb5 libs don't have allfeatures required for Active Directory support" error

thanks very much for answer.
 

 I  think if I just want to build file server of samba4, it should use the
autoconf source3/ build system to build samba, is it right?
 

 do you mean if I want to use a system MIT kerberos, it require kerberos1.8 or
above in
source3?  I found it can build samba-3.6.9/source3 wit MIT kerberos1.4. is it
right?


  

 

 ------------------ ???? ------------------
  ???: "abartlet"<abartlet at samba.org>;
 ????: 2013?2?27?(???) ??7:31
 ???: "??"<309554614 at qq.com>; 
 ??: "samba-technical"<samba-technical at samba.org>;
"samba"<samba at lists.samba.org>;
 ??: Re: configure with --with-ads failed get "krb5 libs don't have
allfeatures required for Active Directory support" error

 

On Wed, 2013-02-27 at 19:10 +0800, ?? wrote:
> Dear all,
> I get "krb5 libs don't have all features required for Active
Directory support" errors when configure with --with-ads source3 code.
> as:   
> [root at RedHatEL5 source3]# pwd
> /root/samba-4.0.2/source3
> [root at RedHatEL5 source3]#  ./configure --with-ads 
> SAMBA VERSION: 4.0.2
> checking build system type... i686-pc-linux-gnu
> checking host system type... i686-pc-linux-gnu
> checking target system type... i686-pc-linux-gnu
> LIBREPLACE_LOCATION_CHECKS: START
> LIBREPLACE_LOCATION_CHECKS: END
> LIBREPLACE_CC_CHECKS: START
> checking for gcc... gcc
> checking whether the C compiler works... yes
> checking for C compiler default output file name... a.out
> ...
> ...
> ...
> checking for krb5_addresses type... no
> checking for krb5_error_code krb5_enctype_to_string(krb5_context context,
krb5_enctype enctype, char **str)... no
> checking for krb5_error_code krb5_enctype_to_string(krb5_enctype enctype,
char *str, size_t len)... yes
> checking for krb5_principal_get_realm... no
> checking for krb5_princ_realm... yes
> checking for KRB5_PDU_NONE declaration... no
> checking for flags in krb5_creds... no
> configure: WARNING: krb5_get_init_creds_opt_alloc found in -lkrb5
> configure: WARNING: krb5_principal_compare_any_realm not found in -lkrb5
> configure: WARNING: gss_wrap_iov not found in -lgssapi
> configure: WARNING: need either gss_get_name_attribute or
gsskrb5_extract_authz_data_from_sec_context and gss_inquire_sec_context_by_oid
in -lgssapi for PAC support
> configure: error: krb5 libs don't have all features required for Active
Directory support
> the attachment is config.log 
> 
> 
> Any help appreciated
Why are you using the autoconf source3/ build system?

Just build in the top level directory, and we will use our internal
Heimdal kerberos.

In any case, if you want to use a system MIT kerberos, we require 1.8 in
source3 and 1.9 in the top level build.  Earlier versions are not able
to support our requirements, which is why we bundle a known working
version of Heimdal.

Andrew Bartlett


-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org


.

On Wed, 2013-02-27 at 21:15 +0800, ?? wrote:
> thanks very much for answer.
> 
> 
> I  think if I just want to build file server of samba4, it should use
> the autoconf source3/ build system to build samba, is it right?
No, you should use the top level build.  It builds smaller binaries, due
to the use of shared libraries.  You can build --without-ad-dc.
> do you mean if I want to use a system MIT kerberos, it require
> kerberos1.8 or above in
> source3?  I found it can build samba-3.6.9/source3 wit MIT
> kerberos1.4. is it right? 
With Samba 4.0, we increased the minimum MIT kerberos version that we
require, if you want to build against the system MIT kerberos version.

In the top level (waf) build, the configure flag --with-system-mitkrb5
must be specified to build against a system MIT kerberos.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org