The function krb5_524_conv_principal disappeared in heimdal-1.4.1, and as a result, openafs no longer builds. Still there in heimdal-1.4
Steps to Reproduce:
2.try to run aklog or install openafs
No more krb4 support in heimdal:
openafs checks for krb524_convert_creds_kdc in configure.ac:
and assumes having krb524_convert_creds_kdc() (which just returns "not supported" by the way) implies having krb5_524_conv_principal():
#if !defined(HAVE_KRB5_524_CONVERT_CREDS) && defined(HAVE_KRB524_CONVERT_CREDS_KDC)
#define krb5_524_convert_creds krb524_convert_creds_kdc
#elif !defined(HAVE_KRB5_524_CONVERT_CREDS) && !defined(HAVE_KRB524_CONVERT_CREDS_KDC)
which is no longer the case with heimdal. Alternatives:
* remove krb524_convert_creds_kdc() from heimdal so that AC_CHECK_FUNCS fails for openafs.
* check for krb5_524_conv_principal() explicitly in openafs config script and adjust the logic in aklog.c accordingly.
I will ask heimdal upstream why krb524_convert_creds_kdc() is left behind. It is not used anymore AFAIK. But in the meantime, net-fs herd might want to patch the openafs configure script and/or aklog.c or block >app-crypt/heimdal-1.4
Re-assigning to net-fs.
Created attachment 301103 [details, diff]
patch for openafs 1.6.0 to compile against heimdal >= 1.4.1
This patch modifies configure.ac to fix check for both krb5_524 functions and also modifies aklog.c to only enable krb5_524 if both the client and kdc functions are available.
Created attachment 301105 [details]
ebuild which applies the previously attached patch
Testing ebuild which applies the patch for openafs 1.6.0 for heimdal >= 1.4.1
I've attached a patch and ebuild which modify configure.ac to perform a more thorough check for krb5_524 as well as modifying aklog.c to only enable 524 support if both the client and kdc functions are detected.
I have tested this on amd64 with heimdal 1.5.1-r1 and these patches allow openafs-1.6.0 to compile and at least the client portions function as expected.
I've forwarded the bug information and the patch I wrote upstream. More information can be found on the openafs bug tracking system ticket #130575: http://rt.central.org/rt/Ticket/Display.html?id=130575
I just ran into the same problem on 1.6.1, and can confirm Andrew's patch solves it even for that version.
* OpenAFS 1.6.1
* Heimdal 1.5.1
* Linux 3.2.12
Superseeded by bug 398253.