Menu
▾
▴
#1321 Cannot link against GSS-API in HP-UX
I've tried to compile curl 7.34.0 with GSS-API support on HP-UX 11.31 and it fails to link against gssapi.so.
The issue is with HP-UX that is comes with HP flavor of MIT Kerberos. This means that there is no krb5-config nor the lis is called gssapi.so.
It looks like this:
ll /usr/lib/hpux32/libgss*
-r-xr-xr-x 1 bin bin 290724 Nov 12 2010 /usr/lib/hpux32/libgss.so
lr-xr-xr-x 1 bin bin 23 Nov 20 14:28 /usr/lib/hpux32/libgssapi_krb5.so -> ./gss/libgssapi_krb5.so
I have changed LIBS="-lgss $LIBS" and I was able to link and use the curl binary. We simply need another case for HP-UX in "elif test -z "$GSSAPI_LIB_DIR"; then" and the closing "else" block in configure.ac.
I patch can be tested and approved.
Yes please provide a patch, it'd help greatly!
Daniel, have a look at this patch. This works with HP-UX on IA64 now. Cross-tested on RHEL 6 and FreeBSD 9.2. I took the liberty to apply some descriptional improvements to the configure.ac.
Two more things: Although the configure script displays that GSS-API support is enabled, it is not reflected in the features overview in "curl --version" and w/o GSS-API man page and --help still include options which refer to GSS-API (e.g. SOCKS). Should I file further tickets for these?
Thanks, but I don't think you should do the "GSSAPI" => "GSS-API" rename in the same change. I'm not even sure that's a correct fix.
GSSAPI is very frequently used. Can you separate out the fix only and leave the rename to later?
Daniel, I can do that. I took the reference name from the RFCs. Have a look here and here.
I don't want to provide any bearing on whether to rename or not as a) I don't believe that is the issue at hand here and b) I'm not familiar with this area of code, but I just wanted to add that:
GSSAPI is typically the registered SASL mechanism name for Kerberos V5 whilst GSS-API refers to the API for implementing security technologies such as Kerberos and SPKM.
I hope this helps clarify things a little ;-)
Steve's statement is absolute correct. As for SASL mechs, there is even GSS-SPNEGO. This is GSS-API with SPNEGO, opposing to GSSAPI. Since curl compiles against OpenLDAP, this must be compiled against GSS-API to support GSS-API.
I'll happily listen to reasons why a rename in configure.ac might be a good idea (and I'm generally rather clueless about GSSAPI details so I have a lot to learn from others), but I'd prefer to take that discussion separately on the mailing list. This bug report is about a HPUX problem that should be independent of such a rename...
Daniel, agreeed. I will reduce the patch to the HP-UX problem and post the configure.ac patch to the curl-users mailing list.
You will find the curl-library a better list to post anything development related to.
Daniel, find the new patch below.
Thanks.
Sorry, but the mid "hunk" in there looks wrong now. Why do you move out the LIBS assignment from within the if/elif/else blocks to make it unconditionally after the elif? now the if-case will get its LIBS variable quite different than before your fix. Is that really on purpose?
Hi Daniel, that was absolutely not intentional and short-sighted. I have corrected the patch. Please have a look.
Thanks a lot, pushed to git just now.
I have posted the other patch for the descriptions to the curl-library mailing list. Have a look.