search for: smb_krb5_principal_get_realm

...that I needed to find the following in include/config.h #define HAVE_KRB5 1 #define HAVE_LDAP 1 I was missing the KRB5 line so I installed krb5-devel (centos 5.7) and then re-configured. During the make command I now get the following error: cifs.upcall.c:(.text+0x360): undefined reference to `smb_krb5_principal_get_realm' cifs.upcall.c:(.text+0x3d3): undefined reference to `smb_krb5_unparse_name' collect2: ld returned 1 exit status make: *** [bin/cifs.upcall] Error 1 I first installed every krb5 package I could find (didn't fix the compile errors) and then I tried disabling this cifsupcall feature but...

Apparently this didn't/doesn't build on FreeBSD by default...or is it "doesn't build at all". If it is buildable, what should I do to build it, as without it...see wiki: http://wiki.samba.org/index.php/Samba4/Winbind Cheers, TMS III

Apologies for v3 series, I had some extra patches in there. This is the one that should have been sent. Relabeled as v4 for clarity. Third respin of this series. Reordered for better safety for bisecting. The environment scraping is now on by default, but can be disabled with "-E" in environments where it's not needed. Also, I've added a patch to make cifs.upcall drop

...: undefined reference to `samba_ldb_init at SAMBA_4.1.4' /usr/local/lib/libgensec.so: undefined reference to `packet_set_serialise at SAMBA_4.1.4' /usr/local/lib/libgensec.so: undefined reference to `packet_set_callback at SAMBA_4.1.4' /usr/local/lib/libsamdb.so: undefined reference to `smb_krb5_principal_get_realm at SAMBA_4.1.4' /usr/local/lib/libsamba-credentials.so: undefined reference to `SMBsesskeygen_ntv1 at SAMBA_4.1.4' /usr/local/lib/libgensec.so: undefined reference to `tsocket_simple_int_recv at SAMBA_4.1.4' /usr/local/lib/libsamdb.so: undefined reference to `samdb_result_last_logoff at...

Third respin of this series. Reordered for better safety for bisecting. The environment scraping is now on by default, but can be disabled with "-E" in environments where it's not needed. Also, I've added a patch to make cifs.upcall drop capabilities before doing most of its work. This may help reduce the attack surface of the program. Jeff Layton (4): cifs.upcall: convert