Compiling openssh fails here (USE flags X kerberos ldap pam pie ssl). This appears to be due to get_canonical_hostname() having been removed from canohost.c, where it was present in 7.2_p2, but still being used in various places: x86_64-pc-linux-gnu-gcc -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o sshconnect1.o sshconnect2.o mux.o -L. -Lopenbsd-compat/ -Wl,-O1 -Wl,--as-needed -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -fstack-protector-strong -Wl,-O1 -Wl,--as-needed -pie -lssh -lopenbsd-compat -lssl -lcrypto -ldl -lldap -lutil -lz -lcrypt -lresolv -L/usr/lib64 -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err sshconnect2.o: In function `userauth_gssapi': sshconnect2.c:(.text+0xfce): undefined reference to `get_canonical_hostname'
1. Please attach the entire build log to this bug report. 2. Please post your `emerge --info net-misc/openssh` output in a comment.
Created attachment 442454 [details] Build log. # emerge --info net-misc/openssh Portage 2.3.0 (python 3.5.2-final-0, default/linux/amd64/13.0, gcc-5.4.0, glibc-2.23-r2, 4.6.5-gentoo x86_64) ================================================================= System Settings ================================================================= System uname: Linux-4.6.5-gentoo-x86_64-Intel-R-_Core-TM-_i7-4790_CPU_@_3.60GHz-with-gentoo-2.2 KiB Mem: 32913520 total, 9103220 free KiB Swap: 33554428 total, 33524320 free Timestamp of repository gentoo: Thu, 04 Aug 2016 00:45:01 +0000 sh bash 4.3_p46 ld GNU ld (Gentoo 2.26.1 p1.0) 2.26.1 distcc 3.2rc1 x86_64-pc-linux-gnu [enabled] ccache version 3.2.7 [enabled] app-shells/bash: 4.3_p46::gentoo dev-java/java-config: 2.2.0-r3::gentoo dev-lang/perl: 5.24.0-r1::gentoo dev-lang/python: 2.7.12::gentoo, 3.5.2::gentoo dev-util/ccache: 3.2.7::gentoo dev-util/cmake: 3.6.1::gentoo dev-util/pkgconfig: 0.29.1::gentoo sys-apps/baselayout: 2.2-r1::gentoo sys-apps/openrc: 0.21.3::gentoo sys-apps/sandbox: 2.10-r2::gentoo sys-devel/autoconf: 2.13::gentoo, 2.69-r2::gentoo sys-devel/automake: 1.11.6-r2::gentoo, 1.12.6-r1::gentoo, 1.13.4-r1::gentoo, 1.14.1-r1::gentoo, 1.15-r2::gentoo sys-devel/binutils: 2.26.1::gentoo sys-devel/gcc: 5.4.0::gentoo sys-devel/gcc-config: 1.8-r1::gentoo sys-devel/libtool: 2.4.6-r2::gentoo sys-devel/make: 4.2.1::gentoo sys-kernel/linux-headers: 4.7::gentoo (virtual/os-headers) sys-libs/glibc: 2.23-r2::gentoo Repositories: gentoo location: /usr/portage sync-type: rsync sync-uri: rsync://rsync.de.gentoo.org/gentoo-portage priority: -1000 bfown location: /gentoo/overlay masters: gentoo science science location: /gentoo/local/layman/science masters: gentoo priority: 50 ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="* -@EULA" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=core2 -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/gnupg/qualified.txt" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-march=core2 -O2 -pipe" DISTDIR="/gentoo/distfiles/" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs buildpkg ccache config-protect-if-modified distcc distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-O2 -pipe" GENTOO_MIRRORS="http://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/ http://de-mirror.org/linux/distributions/gentoo/ http://distfiles.gentoo.org" LANG="de_DE.UTF-8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j16 -l4" PKGDIR="/gentoo/packages/x64" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git" PORTAGE_TMPDIR="/var/tmp" USE="R X a52 aac acl acpi afs alsa amd64 audit bacula-clientonly berkdb blas bluetooth btrfs bzip2 cairo caps cddb cdparanoia cdr cli clutter colord colorio cpudetection cracklib crypt cscope cups cxx dbus dga djvu dri dv dvd dvdr dvdread dvi eds enblend encode evo exif ext4 extrafilters faac ffmpeg fftw firefox flac fluidsynth fontconfig fortran fuse g3dvl gdbm gegl gif gimp gmp gnome gnome-keyring gnutls graphics graphviz gs gstreamer gtk gtk3 hddtemp hdri iconv icu id3tag imagemagick ipv6 ipython jabber jack java java6 javascript jbig jingle jpeg jpeg2k kerberos kpathsea ladspa lame lapack latex lcms ldap lensfun libnotify libsamplerate lm_sensors lv2 lyx lzma lzo mad matplotlib matroska md5sum midi mjpeg mmx mmxext mng modules mp2 mp3 mpeg multilib musepack nautilus ncurses nls nptl numpy ofx ogg openal opencl opencv openexr opengl openmp opus otr pam pcre pda pdf pep8 playlist plotutils plugins png pnm policykit postgres postscript pulseaudio pylint python qt3support quicktime radio rar raw readline real rtc rtmp sbsms scanner science scipy sdl seccomp sendto session sift sndfile sound soundtouch speex spell sqlite sse sse2 ssl svg systemd t1lib taglib tcpd telepathy theora threads tiff tivo tracker truetype twolame udev udisks umfpack unicode v4l vaapi vamp vdpau vim-syntax vim-with-x vorbis vpx webkit webp win32codecs wmf x264 xattr xcomposite xetex xinerama xml xmp xmpp xps xulrunner xv xvid xvmc zlib zoran" ABI_X86="64 32" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="canon ptp2 samsung" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="mmx mmxext sse sse2 sse3 sse4_1 ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" KERNEL="linux" L10N="de en" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer nlpsolver pdfimport" LINGUAS="de en" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python3_5" PYTHON_TARGETS="python2_7 python3_5" QEMU_SOFTMMU_TARGETS="x86_64 i386" QEMU_USER_TARGETS="x86_64 i386" RUBY_TARGETS="ruby23" SANE_BACKENDS="hp5590 mustek" USERLAND="GNU" VIDEO_CARDS="radeon radeonsi amdgpu" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON ================================================================= Package Settings ================================================================= net-misc/openssh-7.2_p2-r1::gentoo was built with the following: USE="X kerberos ldap pam pie ssl -X509 -bindist -debug -hpn -ldns -libedit -libressl -livecd -sctp (-selinux) -skey -ssh1 -static" ABI_X86="64"
Upstream commit: "refactor canohost.c: move functions that cache results closer to the places that use them (authn and session code). After this, no state is cached in canohost.c" https://anongit.mindrot.org/openssh.git/commit?h=V_7_3&id=95767262caa6692eff1e1565be1f5cb297949a89
Found the problem: files/openssh-7.2_p1-GSSAPI-dns.patch contains the line gss_host = get_canonical_hostname(1); After the refactoring, the corresponding function appears to be auth_get_canonical_hostname() defined in auth.c. Thus we need a different GSSAPI patch for 7.3 also using the right include files.
Meanwhile, a new patch file was added (openssh-7.3_p1-GSSAPI-dns.patch) and the ebuild updated in place (openssh-7.3_p1-r1.ebuild), so this is fixed.
