dovecot - Apr 2007 - GSS/Kerb5, Solaris 10, how to build?

Gang,

I've been trying to build rc29 under Solaris 10 using either
"--with-gssapi" or Kerberos 5 ticket usage.  I'm trying to figure
out how to set up fetchmail on another S10 box to do IMAP fetches
from dovecot without having to enter a password.

No matter what configure option I try, I get

Building with GSSAPI support ........ : no

at the end of the configure.  I searched the list archives and
I see some discussion from Dan Price about Solaris 11 builds.
Is gssapi supposed to work with Solaris 10?  Advice please?

My dovecot server is a Kerberos 5 client of Active Directory,
with PAM configured to do TGT exchanges.  I can login to the
system with my AD password, ssh to other Kerb clients without
having to type in passwords -- Kerberos works at the OS level.

Jeff Earickson
Colby College

On Thu 05 Apr 2007 at 10:33AM, Jeff A. Earickson wrote:
> Gang,
> 
> I've been trying to build rc29 under Solaris 10 using either
> "--with-gssapi" or Kerberos 5 ticket usage.  I'm trying to
figure
> out how to set up fetchmail on another S10 box to do IMAP fetches
> from dovecot without having to enter a password.
> 
> No matter what configure option I try, I get
> 
> Building with GSSAPI support ........ : no
> 
> at the end of the configure.  I searched the list archives and
I apply the following patch to configure before running it.  I
don't know that this will fix your problem though:

--- configure.prepatch  Tue Feb  6 08:07:07 2007
+++ configure   Tue Feb  6 14:54:56 2007
@@ -29107,13 +29107,13 @@
                # version >= v1.3. Although this doesn't work right with
                # non-MIT kerberos versioning..
                if `krb5-config --version|grep -v '1\.2' >
/dev/null`; then
-                       AUTH_LIBS="$AUTH_LIBS `krb5-config --libs
gssapi`"
-                       AUTH_CFLAGS="$AUTH_CFLAGS `krb5-config --cflags
gssapi`"
+                       AUTH_LIBS="$AUTH_LIBS `krb5-config --libs`
-lgss"
+                       AUTH_CFLAGS="$AUTH_CFLAGS `krb5-config
--cflags`"
 
                        # Although krb5-config exists, all systems still
don't
                        # have gssapi.h
                        old_CFLAGS=$CFLAGS
-                       CFLAGS="$CFLAGS `krb5-config --cflags gssapi`"
+                       CFLAGS="$CFLAGS `krb5-config --cflags`"
                        if test "${ac_cv_header_gssapi_gssapi_h+set}"
= set; the
n
   { echo "$as_me:$LINENO: checking for gssapi/gssapi.h" >&5
 echo $ECHO_N "checking for gssapi/gssapi.h... $ECHO_C" >&6; }

> I see some discussion from Dan Price about Solaris 11 builds.
> Is gssapi supposed to work with Solaris 10?  Advice please?
I'm not sure-- I will say that in Nevada (probably to be called Solaris
11) kerberos has changed quite bit, so I'm not sure that my experiments
have any validity.

Also, we haven't got Kerberos+Dovecot working just yet :)  We're
debugging
it into existence at the moment.

        -dp

-- 
Daniel Price - Solaris Kernel Engineering - dp at eng.sun.com - blogs.sun.com/dp