Bugzilla Bug 165638

gcc -DHAVE_CONFIG_H   -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT 
-march=prescott -O2 -Wall -fPIC -c ldap-nss.c
ldap-nss.c: In function 'do_bind':
ldap-nss.c:1890: warning: implicit declaration of function
'gss_krb5_ccache_name'
ldap-nss.c:1891: error: 'GSS_S_COMPLETE' undeclared (first use in this
function)
ldap-nss.c:1891: error: (Each undeclared identifier is reported only once
ldap-nss.c:1891: error: for each function it appears in.)
make: *** [ldap-nss.o] Error 1

This macro is defined in the include file gssapi/gssapi.h provided by heimdal.
(Note: it is really heimdal/gssapi.h, but gssapi is a symlink to heimdal.)
However the include section in ldap-nss.c looks like this:

#ifdef HAVE_GSSAPI_H
#include <gssapi.h>
#elif defined(HAVE_GSSAPI_GSSAPI_KRB5_H)
#include <gssapi/gssapi.h>
#include <gssapi/gssapi_krb5.h>
#endif

As you can see, the first include fails because we have our include file in a
sub directory, and the second one fails because this form is only used if there
is a gssapi_krb5.h as well, and at least my heimdal did not provide such a one.

Possible solutions:
1. have heimdal provide a gssapi_krb5.h as well
2. symlink gssapi.h to main include dir
3. patch nss_ldap to look for alternative header file instead
4. patch nss_ldap to look for alternative header file as well
I don't know enough about gssapi and its headers to decide which of these
solutions would be best suited.

bug 119281 discusses similar issues for uw-imap and pine. There it seems to be
an enhancement request to newly add heimdal compatibility.

provide a patch against nss_ldap to make it look elsewhere for headers please.

Created an attachment (id=109412) [details]
nss_ldap-254-gssapi-headers.patch

(In reply to comment #1)
> provide a patch against nss_ldap to make it look elsewhere for headers please.

Here you are. :-)

Reported upstream as well: http://bugzilla.padl.com/show_bug.cgi?id=308

(In reply to comment #3)
> Reported upstream as well: http://bugzilla.padl.com/show_bug.cgi?id=308
> 

Heimdal 1.0 provides gssapi_krb5.h.

Still an issue with sys-auth/nss_ldap-257. My patch from comment #2 still
works. Please apply patch in official ebuild until upstream catches up.

257.2 is in the tree now, and upstream has the other kerberos changes.

Created an attachment (id=134217) [details]
nss_ldap-257.2-gssapi-headers.patch

Old patch fails for 257.2, but is still needed with app-crypt/heimdal-0.7.2-r3.
Recreated patch.

Reopening, as I still needed this patch in order to build against the only
Heimdal implementation currently available in the official portage tree.

258 is in the tree now with this fix.