Re: [Perlgssapi-developer] **SPAM ZEN 79.196.230.199** Re: [rt.cpan.org #32788] Enhancement to use OpenSolaris/Solaris 10 native gss library

[Markus M. <hu...@mo...>]

I see the following on OpenSolaris

krb5-config --version
Solaris Kerberos (based on MIT Kerberos 5 release 1.4.0)

but krb5-config --libs gssapi fails with
/usr/bin/krb5-config: Unknown option `gssapi' -- use `--help' for usage

Can you check for the SUN gss package with pkginfo -q SUNWgss and set a 
flag -DSEAM for example, set the libs to "-L/usr/lib -R/usr/lib -lgss" and 
add
a ifdef to GSSAPI.xs like

#if !defined(SEAM)
#include <gssapi/gssapi_generic.h>
#include <gssapi/gssapi_krb5.h>
#else
#include <gssapi/gssapi_ext.h>
#endif

On Solaris 10 a krb5-config comes back with
krb5-config --version
Solaris Kerberos (based on MIT Kerberos 5 release 1.2.1/1.3.0)

I think it is more 1.3 than 1.2 and the above pkginfo would work too.

Unfortunatly I am not that good in perl otherwise I would have send you a 
patch.

Markus

----- Original Message ----- 
From: "Achim Grolms" <ac...@gr...>
To: "Markus Moeller" <hu...@mo...>
Cc: <bug...@rt...>; "Leif Johansson" <le...@it...>; 
<per...@li...>
Sent: Wednesday, January 30, 2008 6:34 AM
Subject: **SPAM ZEN 79.196.230.199** Re:[Perlgssapi-developer] [rt.cpan.org 
#32788] Enhancement to use OpenSolaris/Solaris 10 native gss library


On Wednesday 30 January 2008, Markus Moeller via RT wrote:
>        Queue: GSSAPI
>  Ticket <URL: http://rt.cpan.org/Ticket/Display.html?id=32788 >
>
> It is a bit strange I have to admit. On my OpenSolaris I don't need the
> defines, but on Solaris 10 I do.

>From your logfile I can see that your run of
Makefile.PL sets the define for the "MIT 1.2.x workaround":

cc -c  -I/usr/include/kerberosv5 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
-xarch=v8 -D_TS_ERRNO -xO3 -xspace -xildoff   -DVERSION=\"0.24\" -DXS_VERSION=\"0.24\"
 -KPIC "-I/usr/perl5/5.8.4/lib/sun4-solaris-64int/CORE"  -DMITKERB12
GSSAPI.c

This -DMITKERB12 is set by Makefile.PL triggered by the output of

krb5-config --version

("MIT 1.2.x workaround" means: tweak the defines to make GSSAPI.pm build
against old MIT implementations that don't provide the GSS_C_* style
uppercase constants but only the lowercase constants)

What's the output of krb5-config --version on your Solaris 10?

As far as I can see Makefile.PL tries to use the
"MIT 1.2.x workaround" in that case, but this seems to be wrong because
GSS_C* style constants are already available on the Solaris 10 Kerberos
system.

Can you try to build GSSAPI.pm without the -DMITKERB12 define?
This define is set in Makefile.PL,
you will find the code that checks for "MIT 1.2.x" in Makefile.PL,
too.

sub is_mit_1_2 {
   my ($cfgcmd) = @_;
   my $r = undef;
   my @vinfo = krb5_version( $cfgcmd );
   FOUND: {
      foreach ( @vinfo) {
         if ( m/Kerberos 5 release 1\.2/) {
            $r = 1;
            last FOUND;
         }
       }
   }
   return $r;
}

Does this help?

Thank you,
Achim