summaryrefslogtreecommitdiff
path: root/source4/heimdal_build
AgeCommit message (Collapse)AuthorFilesLines
2013-06-25heimdal_build: Add missing dep on samba4kgetcredAndrew Bartlett1-1/+1
This started to fail on current Debian Sid with system Heimdal after a binutils update. Andrew Bartlett Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-By: Jelmer Vernooij <jelmer@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Tue Jun 25 02:30:59 CEST 2013 on sn-devel-104
2013-05-27build: Remove binaries and libraries build groupsAndrew Bartlett1-2/+2
Build groups are used in Samba to ensure that even if the dependency chain for a target is not perfect, that it builds reliably. This matters most in the early build stages, where we are building the asn1 compiler and autogenerating files. Once we get to the main stage, dependencies between C files, libraries and binaries are much clearer, because the C compiler and linker takes these as inputs anyway. Groups were added to our waf build for stability during early development, as dependency information was first imported from the previous autoconf/perl based build system. I don't think we need this distinction in the main build of C files into .o, and when linking these into binaries, because the invocation of these tools is very well defined, and we will find any missing inputs very quickly. As such, I've removed the libraries and binaries targets, consolidating them with 'main' By making this change, a build of smbtorture only on a clean tree drops from 3778 to 2489 targets, and much of the expensive linker stage is skipped. The time for a null build of smbtorture only also drops from 4.673s to as low as 2.499s on my laptop. Andrew Bartlett Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
2013-01-19heimdal_build: Try again to sort out the strerror_r messAndrew Bartlett3-8/+8
Reviewed-by: Stefan Metzmacher <metze@samba.org>
2012-11-06heimdal_build: Fix finding of system heimdal.Jelmer Vernooij1-26/+29
When checking for Heimdal headers, make sure HAVE_CONFIG_H is not defined, as config.h will not be available. Reviewed-by: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Jelmer Vernooij <jelmer@samba.org> Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org> Autobuild-Date(master): Tue Nov 6 16:27:03 CET 2012 on sn-devel-104
2012-11-06heimdal_build: HEIMDAL_LIBRARY(): Remove unused cflags argument.Jelmer Vernooij1-2/+1
2012-06-01waf: check for krb5_create_checksum and krb5_creds.flags for some Heimdal ↵Alexander Bokovoy1-0/+1
versions Signed-off-by: Andreas Schneider <asn@samba.org> Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Fri Jun 1 11:23:21 CEST 2012 on sn-devel-104
2012-05-30lib/krb5_wrap: Move krb5_princ_size helper to source4 as it is only used thereAndrew Bartlett1-1/+1
This is also where the related krb5_princ_component is declared. Also fix the configure check to use the correct name This helps the autoconf build on Heimdal. Andrew Bartlett
2012-05-23Introduce system MIT krb5 build with --with-system-mitkrb5 option.Alexander Bokovoy1-1/+1
System MIT krb5 build also enabled by specifying --without-ad-dc When --with-system-mitkrb5 (or --withou-ad-dc) option is passed to top level configure in WAF build we are trying to detect and use system-wide MIT krb5 libraries. As result, Samba 4 DC functionality will be disabled due to the fact that it is currently impossible to implement embedded KDC server with MIT krb5. Thus, --with-system-mitkrb5/--without-ad-dc build will only produce * Samba 4 client libraries and their Python bindings * Samba 3 server (smbd, nmbd, winbindd from source3/) * Samba 3 client libraries In addition, Samba 4 DC server-specific tests will not be compiled into smbtorture. This in particular affects spoolss_win, spoolss_notify, and remote_pac rpc tests.
2012-05-23gensec_gssapi: Make it possible to build with MIT krb5Simo Sorce1-1/+1
We need to ifdef out some minor things here because there is no available API to set these options in MIT. The realm and canonicalize options should be not interesting in the client case. Same for the send_to_kdc hacks. Also the OLD DES3 enctype is not at all interesting. I am not aware that Windows will ever use DES3 and no modern implementation relies on that enctype anymore as it has been fully deprecated long ago, so we can simply ignore it.
2012-05-08krb5samba: Add smb_krb5_make_pac_checksum.Andreas Schneider1-0/+1
Signed-off-by: Simo Sorce <idra@samba.org> Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Tue May 8 08:30:52 CEST 2012 on sn-devel-104
2012-05-08krb5samba: Add krb5_free_checksum_contents wrapperSimo Sorce1-0/+1
2012-05-07heimdal: Cope with newer Heimdal versions accepting a keyset argument toJelmer Vernooij1-4/+22
hdb_enctype2key. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon May 7 18:33:10 CEST 2012 on sn-devel-104
2012-05-04auth-session: MIT doesn't have import/export cred yetSimo Sorce1-0/+2
For now let's just loose this functionality with the MIT build. gss_import/export_cred should be availa ble when MIT 1.11 is released and this code is used only in some proxy scenario. Not normally needed for common configurations.
2012-05-04krb5samba: Add a smb_krb5_cc_get_lifetime() function.Andreas Schneider1-0/+1
Signed-off-by: Simo Sorce <idra@samba.org>
2012-05-04krb5samba: Add compat krb5_make_principal for MIT buildSimo Sorce1-0/+1
2012-05-04krb5samba: Add compat code to initialize keyblock contentsSimo Sorce1-0/+1
2012-05-04Move kerberos_kinit_keyblock_cc to krb5samba libSimo Sorce1-0/+1
Make it also work with MIT where krb5_get_in_tkt_with_keyblock is not available.
2012-04-25lib/replace: split out GSSAPI from lib/replace/system/kerberos.h into ↵Alexander Bokovoy1-0/+1
lib/replace/system/gssapi.h With waf build include directories are defined by dependencies specified to subsystems. Without proper dependency <gssapi/gssapi.h> cannot be found for embedded Heimdal builds when there are no system-wide gssapi/gssapi.h available. Split out GSSAPI header includes in a separate replacement header and use that explicitly where needed. Autobuild-User: Alexander Bokovoy <ab@samba.org> Autobuild-Date: Wed Apr 25 00:18:33 CEST 2012 on sn-devel-104
2012-04-23Make sure krb5_principal_get_num_comp is identified as present for Heimdal buildAlexander Bokovoy1-0/+1
Common wrappers for MIT / Heimdal use krb5_principal_get_num_comp() to replace krb5_princ_size but rely on krb5_principal_get_num_comp() identified by the build. As we know it exists in Heimdal, define it for waf build. Signed-off-by: Simo Sorce <idra@samba.org>
2012-04-23waf: rename SAMBA4_INTERNAL_HEIMDAL to SAMBA4_USES_HEIMDALAlexander Bokovoy1-1/+1
SAMBA4_INTERNAL_HEIMDAL is defined unconditionally regardless where Heimdal comes from, system-wide or embedded version. This define is not used anywhere. We'll use it to distinguish between Heimdal and MIT Krb5 builds. Signed-off-by: Simo Sorce <idra@samba.org>
2012-04-03build: Remove checks for krb5_decode_ap_req, free_AP_REQ and ↵Andrew Bartlett1-2/+0
KRB5_TICKET_HAS_KEYINFO Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Apr 3 19:19:33 CEST 2012 on sn-devel-104
2012-03-01build: link heimdal krb5 against execinfo if foundAndrew Bartlett1-1/+1
This is for FreeBSD, where backtrace symbols are in execinfo
2012-02-19Revert 42d4152ed4255f22ff0718d450f181468d7fb827.Jelmer Vernooij1-2/+2
asn1_compile and com_err already depended on LIBREPLACE_HOSTCC; depending on replace too causes waf to break (source lib/replace/replace.c is in more than one subsystem of target 'asn1_compile': ['LIBREPLACE_HOSTCC', 'replace']) Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Feb 19 17:43:06 CET 2012 on sn-devel-104
2012-02-13s3-build: expliticly require gssapi for HAVE_KRB5 and remove HAVE_GSSAPIAndrew Bartlett1-1/+0
The requirement for gss functions already make this happen, but this is clearer. No code depends on HAVE_GSSAPI any more. Andrew Bartlett
2012-02-10s3-libsmb: Remove unused kerberos_set_creds_enctype()Andrew Bartlett1-1/+0
Also remove the unused configure tests for krb5_c_enctype_compare. Found by callcatcher: http://www.skynet.ie/~caolan/Packages/callcatcher.html Andrew Bartlett
2012-02-10s3-libsmb: Remove unused kerberos_compatible_enctypesAndrew Bartlett1-1/+0
Also remove the unused configure tests for krb5_c_enctype_compare. Found by callcatcher: http://www.skynet.ie/~caolan/Packages/callcatcher.html Andrew Bartlett
2012-02-10heimdal_build: omit #line statmentsAndrew Bartlett1-7/+9
This restores and finishes my original commit 80e23c68d83a7c9989f87d5a88a78bb76d222afc, reverted in 68c61a829b8487104483b23052b54c532fecb6ce heimdal_build omit #line statments to allow valgrind to work again This time however, the reason to omit line statements is that it causes more trouble with the lcov code coverage system than the (nil) value that these statements bring. Otherwise, we have to have a special case to remove the .gcno and .gcda files for these generated files. Andrew Bartlett
2012-02-01s4-heimdal: the ASN1 compiler now depends on libreplaceAndrew Tridgell1-2/+2
it uses strlcat(), which we now get from libbsd if available Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Feb 1 05:51:56 CET 2012 on sn-devel-104
2012-01-25s3:build: require gss_krb5_export_lucid_sec_context() for ads supportStefan Metzmacher1-0/+1
This is needed to detect krb5 with aes for GENSEC_FEATURE_NEW_SPNEGO at runtime. metze
2012-01-10krb5: Require krb5_get_renewed_creds be available to build with krb5Andrew Bartlett1-1/+0
2012-01-10krb5: Remove now unused checks for krb5_verify_checksumAndrew Bartlett1-2/+0
2012-01-10krb5: Require krb5_c_enctype_compare is available to build with krb5Andrew Bartlett1-1/+0
2012-01-10samba: check for AES encryption type defines.Günther Deschner1-0/+2
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Tue Jan 10 15:05:38 CET 2012 on sn-devel-104
2012-01-05s3-librpc Use gsskrb5_get_subkey() where available to get the session keyAndrew Bartlett1-0/+1
This allows gse_get_session_key() to work against Heimdal. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-08-01heimdal_build: Use krb5-config to find heimdal include directory and library ↵Jelmer Vernooij1-2/+19
path, rather than hardcoding.
2011-07-26s4:heimdal_build: hdb.asn1 needs --sequence=HDB-Ext-KeySet --sequence=KeysStefan Metzmacher1-0/+1
metze
2011-07-24s4:heimdal: build samba4kgetcredStefan Metzmacher1-0/+5
metze
2011-07-15s4:heimdal_build: define HAVE_KRB5_PDU_NONE_DECLStefan Metzmacher1-0/+1
metze
2011-07-15s4:heimdal: add missing filesStefan Metzmacher1-1/+4
metze
2011-07-14s4:heimdal_build: we need k5crypto and gssapi_krb5 aliases also when using ↵Stefan Metzmacher1-13/+7
system libraries metze
2011-07-14s4:heimdal_build: only maintain lib/gssapi/{spnego,krb5} file lists onceStefan Metzmacher1-90/+67
This also makes sure we only create private headers if we use internal heimdal. metze
2011-07-14s4:heimdal_build: provide HEIMDAL_UNUSED_ATTRIBUTEStefan Metzmacher1-0/+2
metze
2011-05-31heimdal_build: Don't use heimdal's getprogname() and setprogname()Andrew Bartlett2-6/+17
Writing into an __progname variable spooks me, and if we use the local variable, then we duplciate the system one, which fails SYMBOLCHECK Andrew Bartlett
2011-04-30kerberos: Only include gssapi/gssapi_krb5.h when availableAndrew Bartlett1-0/+1
2011-04-27auth/kerberos Add check for gss_inquire_sec_context_by_oidAndrew Bartlett1-0/+1
Not all kerberos distributions have this function. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Apr 27 07:39:08 CEST 2011 on sn-devel-104
2011-04-27s3-gse: Don't release the mech OID from gss_accept_security_contextAndrew Bartlett1-0/+1
This is constant data according to the man pages I find for this fucntion, and causes a segfault to free() when linked to Heimdal. I am advised that while it is constant for gss_mech_krb5, it may not be for other mechanisms, so an assert will ensure this is dealt with by the programmer who extends this code in future. Andrew Bartlett
2011-04-26build: Move Heimdal/MIT compat build rules to heimdal_buildAndrew Bartlett1-0/+13
This allows top level build rules to rely on these names at all times. Andrew Bartlett
2011-04-23Add check for krb5_free_unparsed_name, when using external heimdal.Jelmer Vernooij1-2/+3
2011-04-16s4-heimdal_build: Add extra HAVE defines needed for the source3 krb5 codeAndrew Bartlett1-0/+3
2011-04-14libcli/auth Move krb5 wrapper functions from s3 into commonAndrew Bartlett1-0/+75
This requires a small rework of the build system to ensure that the correct #define statements are made in both the s3 and top level builds. We now define the various HAVE_ macros in config.h at all times, using heimdal_build/wscript_configure when that is in use. Andrew Bartlett