everytime when i emerge app-crypt/kth-krb-1.2.2-r2, it breaks with the following error: /bin/sh ../../libtool --mode=compile i686-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I. -I../../include -I../../include -I../../lib/roken -I../../lib/roken -DROKEN_RENAME -I/usr/include -I/usr/include/et -Wall -Wmissing-prototypes -Wpointer-arith -Wbad-function-cast -Wmissing-declarations -Wnested-externs -march=pentium3 -pipe -Os -fomit-frame-pointer -fno-ident -fforce-addr -ftracer -fweb -falign-functions=4 -c -o kntoln.lo `test -f 'kntoln.c' || echo './'`kntoln.c i686-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I. -I../../include -I../../include -I../../lib/roken -I../../lib/roken -DROKEN_RENAME -I/usr/include -I/usr/include/et -Wall -Wmissing-prototypes -Wpointer-arith -Wbad-function-cast -Wmissing-declarations -Wnested-externs -march=pentium3 -pipe -Os -fomit-frame-pointer -fno-ident -fforce-addr -ftracer -fweb -falign-functions=4 -c kntoln.c -o kntoln.o In file included from ./krb.h:365, from krb_locl.h:126, from kntoln.c:48: ./krb-protos.h:175: warning: "struct _ossl_old_des_ks_struct" declared inside parameter list ./krb-protos.h:175: warning: its scope is only this definition or declaration, which is probably not what you want ./krb-protos.h:456: warning: "struct _ossl_old_des_ks_struct" declared inside parameter list ./krb-protos.h:540: warning: "struct _ossl_old_des_ks_struct" declared inside parameter list ./krb-protos.h:576: warning: "struct _ossl_old_des_ks_struct" declared inside parameter list ./krb-protos.h:590: warning: "struct _ossl_old_des_ks_struct" declared inside parameter list /bin/sh ../../libtool --mode=compile i686-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I. -I../../include -I../../include -I../../lib/roken -I../../lib/roken -DROKEN_RENAME -I/usr/include -I/usr/include/et -Wall -Wmissing-prototypes -Wpointer-arith -Wbad-function-cast -Wmissing-declarations -Wnested-externs -march=pentium3 -pipe -Os -fomit-frame-pointer -fno-ident -fforce-addr -ftracer -fweb -falign-functions=4 -c -o krb_check_auth.lo `test -f 'krb_check_auth.c' || echo './'`krb_check_auth.c i686-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I. -I../../include -I../../include -I../../lib/roken -I../../lib/roken -DROKEN_RENAME -I/usr/include -I/usr/include/et -Wall -Wmissing-prototypes -Wpointer-arith -Wbad-function-cast -Wmissing-declarations -Wnested-externs -march=pentium3 -pipe -Os -fomit-frame-pointer -fno-ident -fforce-addr -ftracer -fweb -falign-functions=4 -c krb_check_auth.c -o krb_check_auth.o In file included from ./krb.h:365, from krb_locl.h:126, from krb_check_auth.c:34: ./krb-protos.h:175: warning: "struct _ossl_old_des_ks_struct" declared inside parameter list ./krb-protos.h:175: warning: its scope is only this definition or declaration, which is probably not what you want ./krb-protos.h:456: warning: "struct _ossl_old_des_ks_struct" declared inside parameter list ./krb-protos.h:540: warning: "struct _ossl_old_des_ks_struct" declared inside parameter list ./krb-protos.h:576: warning: "struct _ossl_old_des_ks_struct" declared inside parameter list ./krb-protos.h:590: warning: "struct _ossl_old_des_ks_struct" declared inside parameter list krb_check_auth.c:55: warning: "struct _ossl_old_des_ks_struct" declared inside parameter list krb_check_auth.c:56: error: conflicting types for 'krb_check_auth' ./krb-protos.h:175: error: previous declaration of 'krb_check_auth' was here krb_check_auth.c:56: error: conflicting types for 'krb_check_auth' ./krb-protos.h:175: error: previous declaration of 'krb_check_auth' was here krb_check_auth.c: In function `krb_check_auth': krb_check_auth.c:61: warning: passing arg 3 of `krb_rd_priv' from incompatible pointer type make[2]: *** [krb_check_auth.lo] Fehler 1 make[2]: Leaving directory `/var/tmp/portage/kth-krb-1.2.2-r2/work/krb4-1.2.2/lib/krb' make[1]: *** [all-recursive] Fehler 1 make[1]: Leaving directory `/var/tmp/portage/kth-krb-1.2.2-r2/work/krb4-1.2.2/lib' make: *** [all-recursive] Fehler 1 !!! ERROR: app-crypt/kth-krb-1.2.2-r2 failed. !!! Function src_compile, Line 43, Exitcode 2 !!! (no error message) !!! If you need support, post the topmost build error, NOT this status message. i tried also to stip down my CFLAGS, LDFLAGS and CXXFLAGS so that they are empty, but nothing helps bigmichi1 ~ # emerge info Portage 2.1_pre1 (default-linux/x86/2005.1, gcc-3.4.5, glibc-2.3.6-r1, 2.6.14-gentoo-r5-2005.1 i686) ================================================================= System uname: 2.6.14-gentoo-r5-2005.1 i686 Pentium III (Coppermine) Gentoo Base System version 1.12.0_pre12 dev-lang/python: 2.4.2 sys-apps/sandbox: 1.2.17 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1 sys-devel/binutils: 2.16.1-r1 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.11-r3 ACCEPT_KEYWORDS="x86 ~x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=pentium3 -pipe -Os -fomit-frame-pointer -fno-ident -fforce-addr -ftracer -fweb -falign-functions=4" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/lib/fax /usr/lib/mozilla/defaults/pref /usr/share/config /var/qmail/control /var/spool/fax/etc" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/texmf/web2c /etc/env.d" CXXFLAGS="-march=pentium3 -pipe -Os -fomit-frame-pointer -fno-ident -fforce-addr -ftracer -fweb -falign-functions=4 -fvisibility-inlines-hidden" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig distlocks sandbox sfperms strict" GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo" LANG="de_DE.utf8" LC_ALL="de_DE.utf8" LDFLAGS="-Wl,-O1 -Wl,--sort-common" LINGUAS="de" MAKEOPTS="-j3" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="x86 7zip X Xaw3d a52 aac aalib accessibility acl acpi alsa amuled apache2 apm ares arts artswrappersuid artworkextra asterisk async audiofile authfile automount avi bash-completion bcmath berkdb big-tables bitmap-fonts brltty bzip2 cairo calender canvas caps cdb cdr cjk clamav cli crypt ctype cups curl curlwrappers dba dbus dga directfb djbfft dlloader dmx doc dts dvd dvdr dvi dynagraph eds elf emacs emboss encode erandom esd examples exif expat extraengine fam fbcon ffmpeg flac flatfile font-server fontconfig foomaticdb fortran fpx freetds freetts ftp gcj gd gdbm ggi gif glep glibc-omitfp glitz glut gmp gnome gnutls gpm graphviz gs gstreamer gtk gtk2 gtkhtml guile hal hesiod howl iconv id3 idled idn ieee1394 imagemagick imap imlib immqt inifile insecure-drivers ipv6 ithreads jack jack-tmpfs java java-external javascript jbig jce jikes jpeg justify kde kdeenablefinal kerberos kqemu krb4 lame lcms ldap ldapsam leim libcaca libclamav libg++ libwww lm_sensors logrotate mad mbrola memlimit mgetty mhash mikmod ming mmap mmx mng mono motif mozcalendar mozdevelop mozilla mp3 mp4live mpeg mpeg2 mpm-prefork mssql mudflap mysql mysqli nas nautilus ncurses neXt netpbm network nfs nis nls nntp nptl nptlonly nsplugin numeric oav objc objc-gc odbc ogg oggvorbis on-the-fly-crypt opengl oss pam pam_chroot pam_console pam_timestamp pccts pcntl pcre pda pdflib pdo-external pear perl perlsuid pg-hier pg-intdatetime php physfs pic player png portaudio posix postgres ppds pwdb python qt quicktime quotas readline remote rewrite rle rpm ruby samba sample sasl sdk sdl sendfile sensord session shaper sharedmem silc simplexml sitemisc skey slang slp smartcard smux sndfile snmp soap sockets socks5 softquota source speex spell spf spl sqlite srp sse ssl stats svg svga swat symlink sysfs syslog sysvipc t1lib tcltk tcpd tetex theora threads tidy tiff tokenizer toolbar tools truetype truetype-fonts type1-fonts ucs2 udev unicode urandom usb utf8 v4l v4l2 vda vorbis vv wddx winbind wmf x264 xinerama xinetd xml2 xmlrpc xpm xprint xsl xv xvid yaz zip zlib elibc_glibc kernel_linux linguas_de userland_GNU video_cards_ati128" Unset: ASFLAGS, CTARGET this package gets in when emerging curl with krb4 use flag
I believe that is because somebody should finally push in kth-krb-1.3 version eithe rthe snapshot or directly from cvs. The development is stopped, but most importantly, branch 1.3 added support for openssl-0.9.7. kth-krb-1.2.2 may coexist only with openssl-0.9.6 or older.
Signore Giaquinta, please do have a look at these bugs.
Bump! Openssl-0.9.7 got unmasked and kth-krb-1.2.2 (the only one kth-krb unmasked) does not compile.
Hmm... bug opened in December of 2005, and this problem still exists? I'm getting bitten by this - can we get a version bump to STABLE, please? Thanks.
FYI, kth-krb4-1.3 is still only as a release candidate. But I think actually a CVS dump of that branch would be the best choice. The development of krb4 has been stopped. And, don't expect xscreensaver to accept your krb4 password unless you provide a patch to fix the possibly simple issue. Upstream has dropped that from support and Gentoo package maintainers stick to that. See some of the closed bugreports on this if you are interested. Although I am not arguing that kth-krb-1.3-cvs or -rc should be in portage you should probably soon convert to heimdal, which offers the krb4 servces in addition to krb5 interface.
As I can see from the heimdal ebuild, krb4 support is only provided when compiled against kth-krb... So how can I get rid of kth-krb by switching to heimdal??? Any suggestions?
1. Migrate the passwords: http://www.pdc.kth.se/heimdal/heimdal.html#Migration This might not be trivial so read posts in the archives of krb4@sics.se and heimdal-discuss@sics.se from people who did the same. If you have few users, maybe rather create the password database from scratch. ;) 2. Shutdown kth-krb4 3. Recompile your apps to use heimdal (use the "kerberos" USE flag) 3. If things work, remove the the "krb4" USE flag and 'emerge -uN world'.
*** Bug 148168 has been marked as a duplicate of this bug. ***
So, does 1.3_rc1 work for people here, or? The current stable ebuild is completely useless.
I tried 1.3_rc1, but ran into file collision like in bug #117209. So in my opinion this ebuild is not a choice as well... At the moment, I try to switch to heimdal like proposed by Martin in comment #7. If it is possible to get rid of kth-krb, then do so. Just my few cents...
The only sane choice is to upgrade to a krb5 system; every krb4 implementation is now unsupported by the corresponding upstream. We are the only one afaik to provide kth-krb. Every ebuild in the tree with a krb4 use flag has also a kerberos one (with the exception of xscreensaver), so the application support is not a blocker (if there is a problem open a bug please). My plan is to deprecate the krb4 use flag and after an adeguate period of time remove this app from the tree. For more information read here: http://web.mit.edu/Kerberos/krb4-end-of-life.html
Still, the 1.3-rc candidate should be made available, even at the cost of no manapges being installed.
(In reply to comment #12) > Still, the 1.3-rc candidate should be made available, even at the cost of no > manapges being installed. It's already in the tree, don't see what you mean here...
I've switched successfully to heimdal and don't need this package anymore. I am outta here, thanks for your help, guys :)
Sorry, I did not have a look for that. I tried to emerge it and it complied successfully against # openssl OpenSSL> version OpenSSL 0.9.8c 05 Sep 2006 OpenSSL> quit I have seen the following message, but the chmod go-r seems to be correct to me. The suggested step to recompile again ... I don't know what does that really say. Anyway, I use heimdal so it is not an issue for me. QA Notice: the following files are setXid, dyn linked, and using lazy bindings This combination is generally discouraged. Try re-emerging the package: LDFLAGS='-Wl,-z,now' emerge kth-krb LAZY usr/athena/bin/rsh LAZY usr/athena/bin/rcp LAZY usr/athena/bin/rlogin LAZY usr/athena/bin/su LAZY usr/athena/bin/otp >>> Merging app-crypt/kth-krb-1.3_rc1 to / * >>> SetUID: [chmod go-r] /var/tmp/portage/kth-krb-1.3_rc1/image//usr/athena/bin/rsh ... [ ok ] * >>> SetUID: [chmod go-r] /var/tmp/portage/kth-krb-1.3_rc1/image//usr/athena/bin/rcp ... [ ok ] * >>> SetUID: [chmod go-r] /var/tmp/portage/kth-krb-1.3_rc1/image//usr/athena/bin/rlogin ... [ ok ] * >>> SetUID: [chmod go-r] /var/tmp/portage/kth-krb-1.3_rc1/image//usr/athena/bin/su ... [ ok ] * >>> SetUID: [chmod go-r] /var/tmp/portage/kth-krb-1.3_rc1/image//usr/athena/bin/otp ... [ ok ]
(In reply to comment #11) > The only sane choice is to upgrade to a krb5 system; every krb4 implementation > is now unsupported by the corresponding upstream. We are the only one afaik to > provide kth-krb. Don't forget that Heimdal seems to need kth-krb to construct the proper AFS stubs for transparent AFS support in Heimdal. Without it pam_krb5+afs fails to aquire AFS tokens. Though this is likely a failure on pam_krb5's part in assuming the need for krb4 support.
(In reply to comment #16) > Don't forget that Heimdal seems to need kth-krb to construct the proper AFS > stubs for transparent AFS support in Heimdal. Without it pam_krb5+afs fails to > aquire AFS tokens. Though this is likely a failure on pam_krb5's part in > assuming the need for krb4 support. Correction, this is a failure of the pam_krb5 version number conflict. pam_krb5-2.2.6 works correctly with heimdal w/out kth-krb. Unfortunately there exists a pam_krb5-2003* ebuild that takes priority over 2.2.6 even though it is for a completely different package and requires kth-krb. Pushing pam_krb5-2.2.6 as stable resolves the pam_krb5 dependancy on kth-krb.
krb4 masked on sparc, it's time to move on.
(In reply to comment #18) > krb4 masked on sparc, it's time to move on. > I think the USE flag for krb4 should be removed for x86 since it won't compile against the latest packages anyways. I made the simple mistake of adding it to my USE flags and it prevented me from compiling packages.
removed from portage
