Thread: cvs head configure broken for --with-krb5 on RH9

As of this change:
http://archives.postgresql.org/pgsql-committers/2003-11/msg00278.php
I can't seem to configure --with-krb5.

The configure script I've used (derived from what the the RH9 RPM spec 
file does) for quite some time now is:

./configure \ --host=i386-redhat-linux \ --build=i386-redhat-linux \ --target=i386-redhat-linux-gnu \ --program-prefix=
\--prefix=/usr \ --exec-prefix=/usr \ --bindir=/usr/bin \ --sbindir=/usr/sbin \ --sysconfdir=/etc \
--datadir=/usr/share\ --includedir=/usr/include \ --libdir=/usr/lib \ --libexecdir=/usr/libexec \ --localstatedir=/var
\--sharedstatedir=/usr/com \ --mandir=/usr/share/man \ --disable-rpath \ --with-perl \ --with-tcl \
--with-tclconfig=/usr/lib\ --without-tk \ --with-python \ --enable-nls \ --enable-debug \ --enable-cassert \
--enable-depend\ --sysconfdir=/etc/sysconfig/pgsql \ --datadir=/usr/share/pgsql \ --with-docdir=/usr/share/doc \
--with-openssl\ --with-pam \ --enable-integer-datetimes \ --with-krb5=/usr/kerberos
 

With the above I get:

[...]
checking whether to build Java/JDBC tools... no
checking whether to build with Kerberos 4 support... no
checking whether to build with Kerberos 5 support... configure: error: 
no argument expected for --with-krb5 option


If I follow the advice of the error message, and change that last line 
to just "--with-krb5", I get this:

[...]
checking for inflate in -lz... yes
checking for library containing com_err... -lcom_err
checking for library containing krb5_encrypt... no
configure: error: could not find function 'krb5_encrypt' required for 
Kerberos 5

What should I be doing differently?

Joe

Joe Conway <mail@joeconway.com> writes:
> As of this change:
> http://archives.postgresql.org/pgsql-committers/2003-11/msg00278.php
> I can't seem to configure --with-krb5.

I believe the idea is that instead of  --with-krb5=/usr/kerberos
you now need --with-krb5 --with-includes=/usr/kerberos/include --with-libs=/usr/kerberos/lib
or some variant like that.  It'd be good for the docs to be more
explicit about this change.
        regards, tom lane

Tom Lane wrote:
> Joe Conway <mail@joeconway.com> writes:
>>As of this change:
>>http://archives.postgresql.org/pgsql-committers/2003-11/msg00278.php
>>I can't seem to configure --with-krb5.
> 
> I believe the idea is that instead of 
>   --with-krb5=/usr/kerberos
> you now need
>   --with-krb5 --with-includes=/usr/kerberos/include --with-libs=/usr/kerberos/lib
> or some variant like that.  It'd be good for the docs to be more
> explicit about this change.

Ah, that did the trick. Thanks!

Joe

Tom Lane writes:

> I believe the idea is that instead of
>   --with-krb5=/usr/kerberos
> you now need
>   --with-krb5 --with-includes=/usr/kerberos/include --with-libs=/usr/kerberos/lib
> or some variant like that.  It'd be good for the docs to be more
> explicit about this change.

If you have anything to add to this, let me know:
     <varlistentry>      <term><option>--with-krb4</option></term>      <term><option>--with-krb5</option></term>
<listitem>      <para>        Build with support for Kerberos authentication. You can use        either Kerberos
version4 or 5, but not both.  On many        systems, the Kerberos system is not installed in a location        that is
searchedby default (e.g., <filename>/usr/include</>,        <filename>/usr/lib</>), so you must use the options
<option>--with-includes</>and <option>--with-libraries</> in        addition to this option.  <filename>configure</>
willcheck        for the required header files and libraries to make sure that        your Kerberos installation is
sufficientbefore proceeding.       </para>      </listitem>     </varlistentry>
 

-- 
Peter Eisentraut   peter_e@gmx.net

Tom Lane <tgl@sss.pgh.pa.us> writes:
> I believe the idea is that instead of 
>   --with-krb5=/usr/kerberos
> you now need
>   --with-krb5 --with-includes=/usr/kerberos/include \
>   --with-libs=/usr/kerberos/lib

Rather than silenty accepting but ignoring the old syntax, could we
have configure bail out with an appropriate error message if
--with-krb5 is specified with an argument?  That might make the change
less subtle.

-Neil

Neil Conway writes:

> Rather than silenty accepting but ignoring the old syntax, could we
> have configure bail out with an appropriate error message if
> --with-krb5 is specified with an argument?  That might make the change
> less subtle.

That's what it does:

peter ~/pgsql$ ./configure --with-krb5=/usr/kerberos
checking build system type... i586-pc-linux-gnu
...
checking whether to build with Kerberos 5 support... configure: error: no
argument expected for --with-krb5 option

-- 
Peter Eisentraut   peter_e@gmx.net

Peter Eisentraut <peter_e@gmx.net> writes:
> Tom Lane writes:
>> It'd be good for the docs to be more
>> explicit about this change.

> If you have anything to add to this, let me know:

I was thinking of an explicit statement along the lines of

<note>
Formerly, one could say --with-krb5=/usr/kerberos as a shorthand
for --with-krb5 --with-includes=/usr/kerberos/include
--with-libs=/usr/kerberos/lib.  It is now necessary to spell out the
Kerberos include and library directories explicitly.
</note>
        regards, tom lane