Bugzilla Bug 100884

and fails to do so, because it doesn't look in the right include paths:


checking for crypto library... libcrypto
configure: error: the crypto library used by krb4 lacks features
required by Kerberos 5; to continue, you need to install a newer
Kerberos 4 or configure --without-krb4

!!! Please attach the config.log to your bug report:
!!! /var/tmp/portage/heimdal-0.7/work/heimdal-0.7/config.log

Portage 2.0.51.22-r2 (default-linux/x86/2005.0, gcc-3.4.4, glibc-2.3.5-r1,
2.6.12-gentoo-r4 i686)
=================================================================
System uname: 2.6.12-gentoo-r4 i686 Intel(R) Pentium(R) 4 CPU 2.80GHz
Gentoo Base System version 1.6.13
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
dev-lang/python:     2.3.5, 2.4.1-r1
sys-apps/sandbox:    1.2.11
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6
sys-devel/binutils:  2.16.1
sys-devel/libtool:   1.5.18-r1
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O3 -march=pentium4 -fomit-frame-pointer -pipe -D_FILE_OFFSET_BITS=64
-D_LARGEFILE_SOURCE"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.3/env
/usr/kde/3.3/share/config /usr/kde/3.3/shutdown /usr/kde/3.4/env
/usr/kde/3.4/share/config /usr/kde/3.4/shutdown /u"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/texmf/web2c /etc/env.d"
CXXFLAGS="-O3 -march=pentium4 -fomit-frame-pointer -pipe -D_FILE_OFFSET_BITS=64
-D_LARGEFILE_SOURCE"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks nostrip sandbox sfperms strict"
GENTOO_MIRRORS="http://distfiles.gentoo.org
http://distro.ibiblio.org/pub/Linux/distributions/gentoo"
LINGUAS="en_US de en_GB fr nl zh_CN zh_TW"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/ownportage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 X afs alsa apm arts avi berkdb bitmap-fonts cdr cjk crypt cups curl eds
emboss encode esd f77 fam flac foomaticdb fortran gd gdbm gif gnome gphoto2 gpm
gstreamer gtk gt"
Unset:  ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, MAKEOPTS

Created an attachment (id=64783) [edit]
config.log

Stefan, the log was bzipped? It's marked as plaintext but it's definitely not.
Anyway, even without reading the config.log - heimdal 0.7 requires you to have
kth-krb-1.3, that means the 1.3-rc3 or whatever is the latest. That's because
kth-krb4 must use same crypto library as heimdal, other symbol clashes occur.
I wrote this at least once into bugs.gentoo.org bugzilla. Fish it out or ask
'seemant'. ;)

Note that kth-krb4 made a good job even at the time of 1.2 version, when they
detect des functions from libcrypto and thus kth-krb4 does not build it own des
library, which also used to generate symbol clashes. That typically demonstrated
not when kth-krb4 or heimdal were buils, but when openssh with kerberos support
was compiled in. The passwords did not work and sometimes sshd crashed. sshd was
always very quiet and never gave a clear description of the error so you will
find more on these hard to track down problem in openssh email lists. Only
Darren Tucker was willing to spend some time on this and pursue kerberos support
on openssh.

Briefly, ask seemant to provide kth-krb4-1.3-rc3 as stable and ruquire that for
heimdal-0.7 build (only when krb4 USE flag is set).

Alternatively, kth-krb4-1.2 + heidmal 0.6 shoudl work too, but cannot say which
openssh version would be compatible then. I think 3.6 ... as I think from later
version they kicked out teh kerberos code, as it was not supported. Have no clue
about recent openssh, like version 4. :(

Proposed patch (works for me):

--- heimdal-0.7.ebuild.old      2005-09-05 12:33:57.000000000 +0200
+++ heimdal-0.7.ebuild  2005-09-05 12:34:27.000000000 +0200
@@ -66,6 +66,7 @@
                $(use_with berkdb berkeley-db) \
                $(use_with ssl openssl) \
                $(use_with X x) \
+               $(use_with krb4) \
                --enable-shared \
                --includedir=/usr/include/heimdal \
                --libexecdir=/usr/sbin \

Fixed in heimdal-0.7-r1