#1321 Cannot link against GSS-API in HP-UX


I've tried to compile curl 7.34.0 with GSS-API support on HP-UX 11.31 and it fails to link against gssapi.so.

The issue is with HP-UX that is comes with HP flavor of MIT Kerberos. This means that there is no krb5-config nor the lis is called gssapi.so.

It looks like this:
ll /usr/lib/hpux32/libgss*
-r-xr-xr-x 1 bin bin 290724 Nov 12 2010 /usr/lib/hpux32/libgss.so
lr-xr-xr-x 1 bin bin 23 Nov 20 14:28 /usr/lib/hpux32/libgssapi_krb5.so -> ./gss/libgssapi_krb5.so

I have changed LIBS="-lgss $LIBS" and I was able to link and use the curl binary. We simply need another case for HP-UX in "elif test -z "$GSSAPI_LIB_DIR"; then" and the closing "else" block in configure.ac.

I patch can be tested and approved.


  • Daniel Stenberg

    Daniel Stenberg - 2014-01-08
    • assigned_to: Daniel Stenberg
  • Daniel Stenberg

    Daniel Stenberg - 2014-01-08

    Yes please provide a patch, it'd help greatly!

  • Michael Osipov

    Michael Osipov - 2014-01-09

    Daniel, have a look at this patch. This works with HP-UX on IA64 now. Cross-tested on RHEL 6 and FreeBSD 9.2. I took the liberty to apply some descriptional improvements to the configure.ac.

    Two more things: Although the configure script displays that GSS-API support is enabled, it is not reflected in the features overview in "curl --version" and w/o GSS-API man page and --help still include options which refer to GSS-API (e.g. SOCKS). Should I file further tickets for these?

  • Daniel Stenberg

    Daniel Stenberg - 2014-01-11

    Thanks, but I don't think you should do the "GSSAPI" => "GSS-API" rename in the same change. I'm not even sure that's a correct fix.

    GSSAPI is very frequently used. Can you separate out the fix only and leave the rename to later?

  • Michael Osipov

    Michael Osipov - 2014-01-12

    Daniel, I can do that. I took the reference name from the RFCs. Have a look here and here.

  • Steve Holme

    Steve Holme - 2014-01-12

    I don't want to provide any bearing on whether to rename or not as a) I don't believe that is the issue at hand here and b) I'm not familiar with this area of code, but I just wanted to add that:

    GSSAPI is typically the registered SASL mechanism name for Kerberos V5 whilst GSS-API refers to the API for implementing security technologies such as Kerberos and SPKM.

    I hope this helps clarify things a little ;-)

  • Michael Osipov

    Michael Osipov - 2014-01-12

    Steve's statement is absolute correct. As for SASL mechs, there is even GSS-SPNEGO. This is GSS-API with SPNEGO, opposing to GSSAPI. Since curl compiles against OpenLDAP, this must be compiled against GSS-API to support GSS-API.

  • Daniel Stenberg

    Daniel Stenberg - 2014-01-12

    I'll happily listen to reasons why a rename in configure.ac might be a good idea (and I'm generally rather clueless about GSSAPI details so I have a lot to learn from others), but I'd prefer to take that discussion separately on the mailing list. This bug report is about a HPUX problem that should be independent of such a rename...

  • Michael Osipov

    Michael Osipov - 2014-01-13

    Daniel, agreeed. I will reduce the patch to the HP-UX problem and post the configure.ac patch to the curl-users mailing list.

  • Daniel Stenberg

    Daniel Stenberg - 2014-01-13

    You will find the curl-library a better list to post anything development related to.

  • Michael Osipov

    Michael Osipov - 2014-01-14

    Daniel, find the new patch below.

  • Daniel Stenberg

    Daniel Stenberg - 2014-01-14


    Sorry, but the mid "hunk" in there looks wrong now. Why do you move out the LIBS assignment from within the if/elif/else blocks to make it unconditionally after the elif? now the if-case will get its LIBS variable quite different than before your fix. Is that really on purpose?

  • Michael Osipov

    Michael Osipov - 2014-01-16

    Hi Daniel, that was absolutely not intentional and short-sighted. I have corrected the patch. Please have a look.

  • Daniel Stenberg

    Daniel Stenberg - 2014-01-16
    • status: open --> closed-fixed
  • Daniel Stenberg

    Daniel Stenberg - 2014-01-16

    Thanks a lot, pushed to git just now.

  • Michael Osipov

    Michael Osipov - 2014-01-17

    I have posted the other patch for the descriptions to the curl-library mailing list. Have a look.


Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:

No, thanks