FS#61285 - [bind] add "--with-gssapi=yes" to build flags of bind

Attached to Project: Arch Linux
Opened by Robert Maerz (irreleph4nt) - Saturday, 05 January 2019, 19:21 GMT
Last edited by Sébastien Luttringer (seblu) - Wednesday, 24 April 2019, 23:29 GMT
Task Type Feature Request
Category Packages: Extra
Status Closed
Assigned To Sébastien Luttringer (seblu)
Architecture x86_64
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 2
Private No

Details

Using BIND as DNS backend for Samba requires BIND to be compiled with two particular flags ([url=https://wiki.samba.org/index.php/Setting_up_a_BIND_DNS_Server#Package_Installation]as per Samba wiki[/url]):
"--with-dlopen" and "--with-gssapi=yes" or "--with-gssapi=/usr"

The current Arch package is missing both these flags.

As per [url=http://samba.2283325.n4.nabble.com/Switching-from-Internal-DNS-to-Bind9-DLZ-td4728149.html]Samba's mailing list[/url] "--with-dlopen" does not need to be specified anymore as it's already built into the BIND software itself.
"--with-gssapi" however is not built in; as far as I understand it Samba requires this flag for DNS updates by clients.

Can you please add "--with-gssapi=yes" to the PKGBUILD for bind?
This task depends upon

Closed by  Sébastien Luttringer (seblu)
Wednesday, 24 April 2019, 23:29 GMT
Reason for closing:  No response
Additional comments about closing:  Looks bind is already built with gssapi.
Comment by Sébastien Luttringer (seblu) - Sunday, 07 April 2019, 14:14 GMT
The '--with-gssapi' flag defaults to yes and krb5 is in the build deps.

The configure output looks to find it.

>>>
checking for GSSAPI library... looking in /usr/lib
checking gssapi.h usability... yes
checking gssapi.h presence... yes
checking for gssapi.h... yes
checking gssapi/gssapi.h usability... yes
checking gssapi/gssapi.h presence... yes
checking for gssapi/gssapi.h... yes
checking gssapi_krb5.h usability... no
checking gssapi_krb5.h presence... no
checking for gssapi_krb5.h... no
checking gssapi/gssapi_krb5.h usability... yes
checking gssapi/gssapi_krb5.h presence... yes
checking for gssapi/gssapi_krb5.h... yes
checking krb5.h usability... yes
checking krb5.h presence... yes
checking for krb5.h... yes
checking krb5/krb5.h usability... yes
checking krb5/krb5.h presence... yes
checking for krb5/krb5.h... yes
checking kerberosv5/krb5.h usability... no
checking kerberosv5/krb5.h presence... no
checking for kerberosv5/krb5.h... no
checking linking as -lgssapi_krb5... no
checking linking as -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err... yes
using GSSAPI from /usr/lib and /usr/include
<<<


Did you experience some real issue related to a missing gssapi in bind when using it with samba? I have no link with a samba to check myself.

Loading...