Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 303979 - net-proxy/squid: kerberos DEPEND line wrong?
Summary: net-proxy/squid: kerberos DEPEND line wrong?
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Network Proxy Developers (OBSOLETE)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-02-08 11:28 UTC by Martin Mokrejš
Modified: 2010-08-07 06:24 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
build.log (build.log,38.88 KB, text/plain)
2010-02-11 17:09 UTC, Martin Mokrejš
Details
config.status (config.status,88.59 KB, text/plain)
2010-02-11 17:09 UTC, Martin Mokrejš
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Martin Mokrejš 2010-02-08 11:28:57 UTC
kerberos? ( || ( app-crypt/mit-krb5 app-crypt/heimdal ) )



Total: 188 packages (160 upgrades, 5 downgrades, 9 new, 3 in new slots, 11 reinstalls, 1 uninstall, 1 interactive), Size of downloads: 402,882 kB
Conflict: 8 blocks (2 unsatisfied)
Portage tree and overlays:
 [0] /usr/portage
 [1] /usr/local/portage/layman/sunrise
 [?] indicates that the source repository could not be determined

 * Error: The above package list contains packages which cannot be
 * installed at the same time on the same system.

    app-crypt/mit-krb5 required by ('installed', '/', 'net-proxy/squid-3.0.20-r1', 'nomerge')


I have heimdal installed on this ~x86 machine:

[ebuild   R   ] app-crypt/heimdal-1.2.1-r4  USE="X berkdb ssl threads -afs -hdb-ldap -ipv6 -otp -pkinit -test" 0 kB
Comment 1 Peter Volkov (RETIRED) gentoo-dev 2010-02-09 06:55:09 UTC
Please provide full output and emerge --info.
Comment 2 Jeroen Roovers (RETIRED) gentoo-dev 2010-02-09 17:32:36 UTC
I guess it might as well DEPEND on virtual/krb5.

But the problem wouldn't be restricted to the version specified in the Summary:

jeroen@astrid /keeps/gentoo/cvs/gentoo-x86/net-proxy/squid $ grep kerberos? squid-*
squid-2.7.6-r2.ebuild:  kerberos? ( || ( app-crypt/mit-krb5 app-crypt/heimdal ) )
squid-2.7.7.ebuild:     kerberos? ( || ( app-crypt/mit-krb5 app-crypt/heimdal ) )
squid-3.0.18-r1.ebuild: kerberos? ( || ( app-crypt/mit-krb5 app-crypt/heimdal ) )
squid-3.0.19.ebuild:    kerberos? ( || ( app-crypt/mit-krb5 app-crypt/heimdal ) )
squid-3.0.20-r1.ebuild: kerberos? ( || ( app-crypt/mit-krb5 app-crypt/heimdal ) )
squid-3.1.0.14_beta.ebuild:     kerberos? ( || ( app-crypt/mit-krb5 app-crypt/heimdal ) )
squid-3.1.0.15_beta-r1.ebuild:  kerberos? ( || ( app-crypt/mit-krb5 app-crypt/heimdal ) )
Comment 3 Martin Mokrejš 2010-02-11 16:28:19 UTC
I am a bit puzzled as I cannot reproduce the problem (I successfully re-emerged suid while having heimdal installed and no mit-krb5).

# emerge -pv squid

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild   R   ] net-proxy/squid-3.0.20-r1  USE="caps epoll kerberos mysql pam samba sasl sqlite ssl -icap-client (-ipf-transparent) -kqueue -ldap -logrotate -nis (-pf-transparent) -postgres -radius (-selinux) -snmp -zero-penalty-hit" 0 kB

Total: 1 package (1 reinstall), Size of downloads: 0 kB


# emerge --info
Portage 2.1.7.17 (default/linux/x86/10.0/desktop, gcc-4.3.4, glibc-2.11-r1, 2.6.32.6 i686)
=================================================================
System uname: Linux-2.6.32.6-i686-Mobile_Intel-R-_Pentium-R-_4_-_M_CPU_1.80GHz-with-gentoo-2.0.1
Timestamp of tree: Tue, 09 Feb 2010 13:15:01 +0000
distcc 3.1 i686-pc-linux-gnu [disabled]
app-shells/bash:     4.0_p37
dev-java/java-config: 1.3.7-r1, 2.1.10
dev-lang/python:     2.5.4-r4, 2.6.4-r1, 3.1.1-r1
dev-python/pycrypto: 2.1.0
dev-util/cmake:      2.8.0-r2
sys-apps/baselayout: 2.0.1
sys-apps/openrc:     0.6.0-r1
sys-apps/sandbox:    2.2
sys-devel/autoconf:  2.13, 2.65
sys-devel/automake:  1.4_p6-r1, 1.5-r1, 1.6.3-r1, 1.7.9-r2, 1.8.5-r4, 1.9.6-r3, 1.10.3, 1.11.1
sys-devel/binutils:  2.19.1-r1
sys-devel/gcc:       3.3.6-r1, 4.2.4-r1, 4.3.4, 4.4.3
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.6b
virtual/os-headers:  2.6.30-r1
ACCEPT_KEYWORDS="x86 ~x86"
ACCEPT_LICENSE="* -@EULA dlj-1.1 sun-bcla-java-vm Nero-EULA-US skype-eula"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium4 -mmmx -msse -msse2 -pipe -fno-strict-aliasing -ggdb"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/X11/xkb /var/bind /var/lib/hsqldb /var/qmail/alias /var/qmail/control /var/vpopmail/etc"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-O2 -march=pentium4 -mmmx -msse -msse2 -pipe -fno-strict-aliasing -ggdb"
DISTDIR="/usr/portage/distfiles"
FEATURES="assume-digests distlocks fixpackages metadata-transfer news nostrip parallel-fetch protect-owned sandbox sfperms splitdebug strict unmerge-logs unmerge-orphans userfetch"
GENTOO_MIRRORS="http://gentoo.mirror.web4u.cz"
LDFLAGS="-Wl,-O1"
LINGUAS="en cs cz"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage/layman/sunrise /usr/local/portage/layman/science /usr/local/portage"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="7zip R X Xaw3d a52 aac aalib ace acl acpi alsa amr amrnb amrwb apache audacious audiofile bash-completion bcmath berkdb blas bluetooth boost branding bzip2 cairo caps cblas cddb cdparanoia cdr clamav cli colordiff compress consolekit cpio cracklib crypt cscope css ctype cups curl curlwrappers cxx dbi dbus dga dia directfb djbfft dri dts dv dvb dvd dvdr dvdread eds emacs emboss emf enblend encode enscript exif expat faad fam fame fat fbcon ffmpeg fftw firefox flac flash fortran fpx ftp gcj gd gdbm ggi gif gimp gimpprint glibc-compat20 glibc-omitfp glut gmp gnuplot gnutls gpgme gphoto2 gpm graphviz gs gsl gsm gstreamer gtk gtkhtml hal hdf hdf5 hp2xx i8x0 icc iconv icu id3 ieee1394 ifc imagemagick imlib inifile innodb ithreads jack java javascript jbig jce jikes jpeg jpeg2k kdtree kerberos lame lapack laptop lcms leim libcaca libedit libnotify libwww live lzo lzw mad maildir matroska mhash mikmod mime ming mjpeg mmap mmx mng mod_python modperl modplug modules motif mozilla moznoirc mp2 mp3 mp4 mpeg mpi mpi_njtree mpich2 mplayer mudflap mule musepack mxdatetime mysql mysqli ncurses netcdf netpbm network nls nntp nptl nptlonly nsplugin ntfs numeric ogg opengl openmp openssl pam pango pcmcia pcntl pcre pdf perl plotutils plugin png pnm postproc postscript ppds pppd procmail pymol python qt3support qt4 quicktime rar raw readline recode reflection reiserfs romio rpm samba sasl scanner scp seamonkey server session sftp sift slp smime sndfile soap sockets spell spl sqlite srt sse sse2 ssl startup-notification subtitles subversion svg svgz sysfs sysvipc t1lib tcl tcpd tetex theora threads thunar tidy tiff tk transcode truetype unicode urandom usb userlocales utils uuencode v4l v4l2 vcd vhook vim-syntax vim-with-x vorbis wifi win32codecs wmf wxwindows x264 x86 xanim xcf xfs xft xinerama xinetd xml xorg xpm xsl xslt xulrunner xv xvid xvmc yv12 zip zlib" ALSA_CARDS="intel-8x0m" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic auth_digest authn_anon authn_dbd authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dbd deflate dir disk_cache env expires ext_filter file_cache filter headers ident imagemap include info log_config mem_cache mime mime_magic rewrite setenvif speling status unique_id userdir usertrack vhost_alias negotiation" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en cs cz" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="radeon vesa" 
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LANG, LC_ALL, MAKEOPTS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS




I do not understand the ebuild syntax well but would vote for

-kerberos? ( || ( app-crypt/mit-krb5 app-crypt/heimdal ) )
+kerberos? ( virtual/krb5 )

if it does the same. So aside from the possible tweak of the ebuild I suggest close as INVALID. Sorry for the noise.
Comment 4 Martin Mokrejš 2010-02-11 17:08:19 UTC
# ldd /usr/sbin/squid
        linux-gate.so.1 =>  (0xb77d7000)
        libcrypt.so.1 => /lib/libcrypt.so.1 (0xb7778000)
        libssl.so.0.9.8 => /usr/lib/libssl.so.0.9.8 (0xb7731000)
        libcrypto.so.0.9.8 => /usr/lib/libcrypto.so.0.9.8 (0xb75d5000)
        libpthread.so.0 => /lib/libpthread.so.0 (0xb75ba000)
        libresolv.so.2 => /lib/libresolv.so.2 (0xb75a3000)
        libnsl.so.1 => /lib/libnsl.so.1 (0xb758a000)
        libdl.so.2 => /lib/libdl.so.2 (0xb7586000)
        libstdc++.so.6 => /usr/lib/gcc/i686-pc-linux-gnu/4.3.4/libstdc++.so.6 (0xb7497000)
        libm.so.6 => /lib/libm.so.6 (0xb746f000)
        libgcc_s.so.1 => /usr/lib/gcc/i686-pc-linux-gnu/4.3.4/libgcc_s.so.1 (0xb7460000)
        libc.so.6 => /lib/libc.so.6 (0xb7307000)
        libz.so.1 => /lib/libz.so.1 (0xb72f3000)
        /lib/ld-linux.so.2 (0xb77d8000)
#
# ldd /usr/bin/squidclient
        linux-gate.so.1 =>  (0xb78d9000)
        libpthread.so.0 => /lib/libpthread.so.0 (0xb7891000)
        libresolv.so.2 => /lib/libresolv.so.2 (0xb787b000)
        libnsl.so.1 => /lib/libnsl.so.1 (0xb7862000)
        libdl.so.2 => /lib/libdl.so.2 (0xb785e000)
        libstdc++.so.6 => /usr/lib/gcc/i686-pc-linux-gnu/4.3.4/libstdc++.so.6 (0xb776e000)
        libm.so.6 => /lib/libm.so.6 (0xb7746000)
        libgcc_s.so.1 => /usr/lib/gcc/i686-pc-linux-gnu/4.3.4/libgcc_s.so.1 (0xb7738000)
        libc.so.6 => /lib/libc.so.6 (0xb75df000)
        /lib/ld-linux.so.2 (0xb78da000)
#


>>> Emerging (1 of 1) net-proxy/squid-3.0.20-r1
 * squid-3.0.STABLE20.tar.gz RMD160 SHA1 SHA256 size ;-) ...                                                                                                                                                                   [ ok ]
 * checking ebuild checksums ;-) ...                                                                                                                                                                                           [ ok ]
 * checking auxfile checksums ;-) ...                                                                                                                                                                                          [ ok ]
 * checking miscfile checksums ;-) ...                                                                                                                                                                                         [ ok ]
 * CPV:  net-proxy/squid-3.0.20-r1
 * REPO: gentoo
 * USE:  caps elibc_glibc epoll kerberos kernel_linux mysql pam samba sasl sqlite ssl userland_GNU x86
[cut]
./configure --prefix=/usr --build=i686-pc-linux-gnu --host=i686-pc-linux-gnu --mandir=/usr/share/man --infodir=/usr/share/info --datadir=/usr/share --sysconfdir=/etc --localstatedir=/var/lib --sysconfdir=/etc/squid --libexecdir=/usr/libexec/squid --localstatedir=/var --datadir=/usr/share/squid --with-default-user=squid --enable-auth=basic,digest,negotiate,ntlm --enable-removal-policies=lru,heap --enable-digest-auth-helpers=password --enable-basic-auth-helpers=DB,SASL,PAM,SMB,multi-domain-NTLM,getpwnam,NCSA,MSNT --enable-external-acl-helpers=wbinfo_group,ip_user,session,unix_group --enable-ntlm-auth-helpers=SMB,fakeauth --enable-negotiate-auth-helpers=squid_kerb_auth --enable-useragent-log --enable-cache-digests --enable-delay-pools --enable-referer-log --enable-arp-acl --with-large-files --with-filedescriptors=8192 --enable-caps --disable-snmp --enable-ssl --disable-icap-client --enable-storeio=ufs,diskd,aufs,null --enable-linux-netfilter --enable-epoll
[cut]
SSL gatewaying using OpenSSL enabled
Using OpenSSL MD5 implementation
USE_CACHE_DIGESTS enabled
Forcing epoll() to be enabled
Linux (Netfilter) Transparent Proxy enabled
Using POSIX_V6_ILP32_OFFBIG build environment
Auth scheme modules built: basic digest negotiate ntlm
Basic auth helpers built: DB SASL PAM SMB multi-domain-NTLM getpwnam NCSA MSNT
NTLM auth helpers built: SMB fakeauth
Negotiate auth helpers built: squid_kerb_auth
Digest auth helpers built: password
checking for krb5-config... yes
checking gssapi.h usability... yes
checking gssapi.h presence... yes
checking for gssapi.h... yes
checking gssapi/gssapi.h usability... yes
checking gssapi/gssapi.h presence... yes
checking for gssapi/gssapi.h... yes
checking gssapi/gssapi_krb5.h usability... yes
checking gssapi/gssapi_krb5.h presence... yes
checking for gssapi/gssapi_krb5.h... yes
checking gssapi/gssapi_generic.h usability... no
checking gssapi/gssapi_generic.h presence... no
checking for gssapi/gssapi_generic.h... no
checking for SPNEGO support... yes
External acl helpers built: wbinfo_group ip_user session unix_group
checking sasl/sasl.h usability... yes
checking sasl/sasl.h presence... yes
checking for sasl/sasl.h... yes
checking sasl.h usability... no
checking sasl.h presence... no
checking for sasl.h... no
using SASL2
unlinkd enabled
[cut]
=== configuring in lib/libTrie (/var/tmp/portage/net-proxy/squid-3.0.20-r1/work/squid-3.0.STABLE20/lib/libTrie)
configure: running /bin/sh ./configure --disable-option-checking '--prefix=/usr'  '--build=i686-pc-linux-gnu' '--host=i686-pc-linux-gnu' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--datadir=/usr/share' '--sysconfdir=/etc' '--localstatedir=/var/lib' '--sysconfdir=/etc/squid' '--libexecdir=/usr/libexec/squid' '--localstatedir=/var' '--datadir=/usr/share/squid' '--with-default-user=squid' '--enable-auth=basic,digest,negotiate,ntlm' '--enable-removal-policies=lru,heap' '--enable-digest-auth-helpers=password' '--enable-basic-auth-helpers=DB,SASL,PAM,SMB,multi-domain-NTLM,getpwnam,NCSA,MSNT' '--enable-external-acl-helpers=wbinfo_group,ip_user,session,unix_group' '--enable-ntlm-auth-helpers=SMB,fakeauth' '--enable-negotiate-auth-helpers=squid_kerb_auth' '--enable-useragent-log' '--enable-cache-digests' '--enable-delay-pools' '--enable-referer-log' '--enable-arp-acl' '--with-large-files' '--with-filedescriptors=8192' '--enable-caps' '--disable-snmp' '--enable-ssl' '--disable-icap-client' '--enable-storeio=ufs,diskd,aufs,null' '--enable-linux-netfilter' '--enable-epoll' 'build_alias=i686-pc-linux-gnu' 'host_alias=i686-pc-linux-gnu' 'CC=i686-pc-linux-gnu-gcc' 'CFLAGS=-O2 -march=pentium4 -mmmx -msse -msse2 -pipe -fno-strict-aliasing -ggdb' 'LDFLAGS=-Wl,-O1' 'CXXFLAGS=-O2 -march=pentium4 -mmmx -msse -msse2 -pipe -fno-strict-aliasing -ggdb' --cache-file=/dev/null --srcdir=.
[cut]


# grep -i krb /var/tmp/portage/net-proxy/squid-3.0.20-r1/work/squid-3.0.STABLE20/config.status
S["KRB5LIBS"]="-L/usr/lib -lgssapi -lheimntlm -lkrb5 -lcom_err -L/usr/lib -lcrypto -lasn1 -lwind -lroken -lcrypt -ldl -lresolv -lpthread"
S["KRB5INCS"]="-I/usr/include -I/usr/include"
S["ac_krb5_config"]="yes"
D["HAVE_GSSAPI_GSSAPI_KRB5_H"]=" 1"
#

Actually, I wonder what was actually compiled against heimdal libs. ;-)
Comment 5 Martin Mokrejš 2010-02-11 17:09:02 UTC
Created attachment 219257 [details]
build.log
Comment 6 Martin Mokrejš 2010-02-11 17:09:21 UTC
Created attachment 219259 [details]
config.status
Comment 7 Alin Năstac (RETIRED) gentoo-dev 2010-08-07 06:24:20 UTC
I've changed kerberos dependency atom to virtual/krb5.

(In reply to comment #4)
> Actually, I wonder what was actually compiled against heimdal libs. ;-)

Yes, it was compiled against heimdal libs. See the heimdal.patch and you'll see why it works in this case.