gcc -DHAVE_CONFIG_H -DLDAP_REFERRALS -DLDAP_DEPRECATED -D_REENTRANT -march=prescott -O2 -Wall -fPIC -c ldap-nss.c ldap-nss.c: In function 'do_bind': ldap-nss.c:1890: warning: implicit declaration of function 'gss_krb5_ccache_name' ldap-nss.c:1891: error: 'GSS_S_COMPLETE' undeclared (first use in this function) ldap-nss.c:1891: error: (Each undeclared identifier is reported only once ldap-nss.c:1891: error: for each function it appears in.) make: *** [ldap-nss.o] Error 1 This macro is defined in the include file gssapi/gssapi.h provided by heimdal. (Note: it is really heimdal/gssapi.h, but gssapi is a symlink to heimdal.) However the include section in ldap-nss.c looks like this: #ifdef HAVE_GSSAPI_H #include <gssapi.h> #elif defined(HAVE_GSSAPI_GSSAPI_KRB5_H) #include <gssapi/gssapi.h> #include <gssapi/gssapi_krb5.h> #endif As you can see, the first include fails because we have our include file in a sub directory, and the second one fails because this form is only used if there is a gssapi_krb5.h as well, and at least my heimdal did not provide such a one. Possible solutions: 1. have heimdal provide a gssapi_krb5.h as well 2. symlink gssapi.h to main include dir 3. patch nss_ldap to look for alternative header file instead 4. patch nss_ldap to look for alternative header file as well I don't know enough about gssapi and its headers to decide which of these solutions would be best suited. bug 119281 discusses similar issues for uw-imap and pine. There it seems to be an enhancement request to newly add heimdal compatibility.
provide a patch against nss_ldap to make it look elsewhere for headers please.
Created attachment 109412 [details, diff] nss_ldap-254-gssapi-headers.patch (In reply to comment #1) > provide a patch against nss_ldap to make it look elsewhere for headers please. Here you are. :-)
Reported upstream as well: http://bugzilla.padl.com/show_bug.cgi?id=308
(In reply to comment #3) > Reported upstream as well: http://bugzilla.padl.com/show_bug.cgi?id=308 > Heimdal 1.0 provides gssapi_krb5.h.
Still an issue with sys-auth/nss_ldap-257. My patch from comment #2 still works. Please apply patch in official ebuild until upstream catches up.
257.2 is in the tree now, and upstream has the other kerberos changes.
Created attachment 134217 [details, diff] nss_ldap-257.2-gssapi-headers.patch Old patch fails for 257.2, but is still needed with app-crypt/heimdal-0.7.2-r3. Recreated patch.
Reopening, as I still needed this patch in order to build against the only Heimdal implementation currently available in the official portage tree.
258 is in the tree now with this fix.