diff options
Diffstat (limited to 'crypto/krb5/doc/pdf/build.tex')
| -rw-r--r-- | crypto/krb5/doc/pdf/build.tex | 1112 |
1 files changed, 0 insertions, 1112 deletions
diff --git a/crypto/krb5/doc/pdf/build.tex b/crypto/krb5/doc/pdf/build.tex deleted file mode 100644 index 010cda924370..000000000000 --- a/crypto/krb5/doc/pdf/build.tex +++ /dev/null @@ -1,1112 +0,0 @@ -%% Generated by Sphinx. -\def\sphinxdocclass{report} -\documentclass[letterpaper,10pt,english]{sphinxmanual} -\ifdefined\pdfpxdimen - \let\sphinxpxdimen\pdfpxdimen\else\newdimen\sphinxpxdimen -\fi \sphinxpxdimen=.75bp\relax -\ifdefined\pdfimageresolution - \pdfimageresolution= \numexpr \dimexpr1in\relax/\sphinxpxdimen\relax -\fi -%% let collapsible pdf bookmarks panel have high depth per default -\PassOptionsToPackage{bookmarksdepth=5}{hyperref} - -\PassOptionsToPackage{booktabs}{sphinx} -\PassOptionsToPackage{colorrows}{sphinx} - -\PassOptionsToPackage{warn}{textcomp} -\usepackage[utf8]{inputenc} -\ifdefined\DeclareUnicodeCharacter -% support both utf8 and utf8x syntaxes - \ifdefined\DeclareUnicodeCharacterAsOptional - \def\sphinxDUC#1{\DeclareUnicodeCharacter{"#1}} - \else - \let\sphinxDUC\DeclareUnicodeCharacter - \fi - \sphinxDUC{00A0}{\nobreakspace} - \sphinxDUC{2500}{\sphinxunichar{2500}} - \sphinxDUC{2502}{\sphinxunichar{2502}} - \sphinxDUC{2514}{\sphinxunichar{2514}} - \sphinxDUC{251C}{\sphinxunichar{251C}} - \sphinxDUC{2572}{\textbackslash} -\fi -\usepackage{cmap} -\usepackage[T1]{fontenc} -\usepackage{amsmath,amssymb,amstext} -\usepackage{babel} - - - -\usepackage{tgtermes} -\usepackage{tgheros} -\renewcommand{\ttdefault}{txtt} - - - -\usepackage[Bjarne]{fncychap} -\usepackage{sphinx} - -\fvset{fontsize=auto} -\usepackage{geometry} - - -% Include hyperref last. -\usepackage{hyperref} -% Fix anchor placement for figures with captions. -\usepackage{hypcap}% it must be loaded after hyperref. -% Set up styles of URL: it should be placed after hyperref. -\urlstyle{same} - - -\usepackage{sphinxmessages} -\setcounter{tocdepth}{0} - - - -\title{Building MIT Kerberos} -\date{ } -\release{1.22\sphinxhyphen{}final} -\author{MIT} -\newcommand{\sphinxlogo}{\vbox{}} -\renewcommand{\releasename}{Release} -\makeindex -\begin{document} - -\ifdefined\shorthandoff - \ifnum\catcode`\=\string=\active\shorthandoff{=}\fi - \ifnum\catcode`\"=\active\shorthandoff{"}\fi -\fi - -\pagestyle{empty} -\sphinxmaketitle -\pagestyle{plain} -\sphinxtableofcontents -\pagestyle{normal} -\phantomsection\label{\detokenize{build/index::doc}} - - -\sphinxAtStartPar -This section details how to build and install MIT Kerberos software -from the source. - - -\chapter{Prerequisites} -\label{\detokenize{build/index:prerequisites}} -\sphinxAtStartPar -In order to build Kerberos V5, you will need approximately 60\sphinxhyphen{}70 -megabytes of disk space. The exact amount will vary depending on the -platform and whether the distribution is compiled with debugging -symbol tables or not. - -\sphinxAtStartPar -Your C compiler must conform to ANSI C (ISO/IEC 9899:1990, “c89”). -Some operating systems do not have an ANSI C compiler, or their -default compiler requires extra command\sphinxhyphen{}line options to enable ANSI C -conformance. - -\sphinxAtStartPar -If you wish to keep a separate build tree, which contains the compiled -*.o file and executables, separate from your source tree, you will -need a make program which supports \sphinxstylestrong{VPATH}, or you will need to use -a tool such as lndir to produce a symbolic link tree for your build -tree. - - -\chapter{Obtaining the software} -\label{\detokenize{build/index:obtaining-the-software}} -\sphinxAtStartPar -The source code can be obtained from MIT Kerberos Distribution page, -at \sphinxurl{https://kerberos.org/dist/index.html}. -The MIT Kerberos distribution comes in an archive file, generally -named krb5\sphinxhyphen{}VERSION\sphinxhyphen{}signed.tar, where \sphinxstyleemphasis{VERSION} is a placeholder for -the major and minor versions of MIT Kerberos. (For example, MIT -Kerberos 1.9 has major version “1” and minor version “9”.) - -\sphinxAtStartPar -The krb5\sphinxhyphen{}VERSION\sphinxhyphen{}signed.tar contains a compressed tar file consisting -of the sources for all of Kerberos (generally named -krb5\sphinxhyphen{}VERSION.tar.gz) and a PGP signature file for this source tree -(generally named krb5\sphinxhyphen{}VERSION.tar.gz.asc). MIT highly recommends that -you verify the integrity of the source code using this signature, -e.g., by running: - -\begin{sphinxVerbatim}[commandchars=\\\{\}] -\PYG{n}{tar} \PYG{n}{xf} \PYG{n}{krb5}\PYG{o}{\PYGZhy{}}\PYG{n}{VERSION}\PYG{o}{\PYGZhy{}}\PYG{n}{signed}\PYG{o}{.}\PYG{n}{tar} -\PYG{n}{gpg} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{n}{verify} \PYG{n}{krb5}\PYG{o}{\PYGZhy{}}\PYG{n}{VERSION}\PYG{o}{.}\PYG{n}{tar}\PYG{o}{.}\PYG{n}{gz}\PYG{o}{.}\PYG{n}{asc} -\end{sphinxVerbatim} - -\sphinxAtStartPar -Unpack krb5\sphinxhyphen{}VERSION.tar.gz in some directory. In this section we will assume -that you have chosen the top directory of the distribution the directory -\sphinxcode{\sphinxupquote{/u1/krb5\sphinxhyphen{}VERSION}}. - -\sphinxAtStartPar -Review the README file for the license, copyright and other sprecific to the -distribution information. - - -\chapter{Contents} -\label{\detokenize{build/index:contents}} -\sphinxstepscope - - -\section{Organization of the source directory} -\label{\detokenize{build/directory_org:organization-of-the-source-directory}}\label{\detokenize{build/directory_org::doc}} -\sphinxAtStartPar -Below is a brief overview of the organization of the complete source -directory. More detailed descriptions follow. - - -\begin{savenotes}\sphinxattablestart -\sphinxthistablewithglobalstyle -\centering -\begin{tabulary}{\linewidth}[t]{TT} -\sphinxtoprule -\sphinxtableatstartofbodyhook -\sphinxAtStartPar -appl -& -\sphinxAtStartPar -Kerberos application client and server programs -\\ -\sphinxhline -\sphinxAtStartPar -ccapi -& -\sphinxAtStartPar -Credential cache services -\\ -\sphinxhline -\sphinxAtStartPar -clients -& -\sphinxAtStartPar -Kerberos V5 user programs (See \DUrole{xref,std,std-ref}{user\_commands}) -\\ -\sphinxhline -\sphinxAtStartPar -config -& -\sphinxAtStartPar -Configure scripts -\\ -\sphinxhline -\sphinxAtStartPar -config\sphinxhyphen{}files -& -\sphinxAtStartPar -Sample Kerberos configuration files -\\ -\sphinxhline -\sphinxAtStartPar -include -& -\sphinxAtStartPar -include files needed to build the Kerberos system -\\ -\sphinxhline -\sphinxAtStartPar -kadmin -& -\sphinxAtStartPar -Administrative interface to the Kerberos database: \DUrole{xref,std,std-ref}{kadmin(1)}, \DUrole{xref,std,std-ref}{kdb5\_util(8)}, \DUrole{xref,std,std-ref}{ktutil(1)}. -\\ -\sphinxhline -\sphinxAtStartPar -kdc -& -\sphinxAtStartPar -Kerberos V5 Authentication Service and Key Distribution Center -\\ -\sphinxhline -\sphinxAtStartPar -{\hyperref[\detokenize{build/directory_org:lib}]{\sphinxcrossref{lib}}} -& -\sphinxAtStartPar -Libraries for use with/by Kerberos V5 -\\ -\sphinxhline -\sphinxAtStartPar -plugins -& -\sphinxAtStartPar -Kerberos plugins directory -\\ -\sphinxhline -\sphinxAtStartPar -po -& -\sphinxAtStartPar -Localization infrastructure -\\ -\sphinxhline -\sphinxAtStartPar -prototype -& -\sphinxAtStartPar -Templates files containing the MIT copyright message and a placeholder for the title and description of the file. -\\ -\sphinxhline -\sphinxAtStartPar -kprop -& -\sphinxAtStartPar -Utilities for propagating the database to replica KDCs \DUrole{xref,std,std-ref}{kprop(8)} and \DUrole{xref,std,std-ref}{kpropd(8)} -\\ -\sphinxhline -\sphinxAtStartPar -tests -& -\sphinxAtStartPar -Test suite -\\ -\sphinxhline -\sphinxAtStartPar -{\hyperref[\detokenize{build/directory_org:util}]{\sphinxcrossref{util}}} -& -\sphinxAtStartPar -Various utilities for building/configuring the code, sending bug reports, etc. -\\ -\sphinxhline -\sphinxAtStartPar -windows -& -\sphinxAtStartPar -Source code for building Kerberos V5 on Windows (see windows/README) -\\ -\sphinxbottomrule -\end{tabulary} -\sphinxtableafterendhook\par -\sphinxattableend\end{savenotes} - - -\subsection{lib} -\label{\detokenize{build/directory_org:lib}}\label{\detokenize{build/directory_org:id1}} -\sphinxAtStartPar -The lib directory contain several subdirectories as well as some -definition and glue files. -\begin{itemize} -\item {} -\sphinxAtStartPar -The apputils directory contains the code for the generic network -servicing. - -\item {} -\sphinxAtStartPar -The crypto subdirectory contains the Kerberos V5 encryption -library. - -\item {} -\sphinxAtStartPar -The gssapi library contains the Generic Security Services API, -which is a library of commands to be used in secure client\sphinxhyphen{}server -communication. - -\item {} -\sphinxAtStartPar -The kadm5 directory contains the libraries for the KADM5 -administration utilities. - -\item {} -\sphinxAtStartPar -The Kerberos 5 database libraries are contained in kdb. - -\item {} -\sphinxAtStartPar -The krb5 directory contains Kerberos 5 API. - -\item {} -\sphinxAtStartPar -The rpc directory contains the API for the Kerberos Remote -Procedure Call protocol. - -\end{itemize} - - -\subsection{util} -\label{\detokenize{build/directory_org:util}}\label{\detokenize{build/directory_org:id2}}\begin{description} -\sphinxlineitem{The util directory contains several utility programs and libraries.}\begin{itemize} -\item {} -\sphinxAtStartPar -the programs used to configure and build the code, such as -autoconf, lndir, kbuild, reconf, and makedepend, are in this -directory. - -\item {} -\sphinxAtStartPar -the profile directory contains most of the functions which parse -the Kerberos configuration files (krb5.conf and kdc.conf). - -\item {} -\sphinxAtStartPar -the Kerberos error table library and utilities (et); - -\item {} -\sphinxAtStartPar -the Sub\sphinxhyphen{}system library and utilities (ss); - -\item {} -\sphinxAtStartPar -database utilities (db2); - -\item {} -\sphinxAtStartPar -pseudo\sphinxhyphen{}terminal utilities (pty); - -\item {} -\sphinxAtStartPar -bug\sphinxhyphen{}reporting program send\sphinxhyphen{}pr; - -\item {} -\sphinxAtStartPar -a generic support library support used by several of our other -libraries; - -\item {} -\sphinxAtStartPar -the build infrastructure for building lightweight Kerberos client -(collected\sphinxhyphen{}client\sphinxhyphen{}lib) - -\item {} -\sphinxAtStartPar -the tool for validating Kerberos configuration files -(confvalidator); - -\item {} -\sphinxAtStartPar -the toolkit for kernel integrators for building krb5 code subsets -(gss\sphinxhyphen{}kernel\sphinxhyphen{}lib); - -\item {} -\sphinxAtStartPar -source code for building Kerberos V5 on MacOS (mac) - -\item {} -\sphinxAtStartPar -Windows getopt operations (windows) - -\end{itemize} - -\end{description} - -\sphinxstepscope - - -\section{Doing the build} -\label{\detokenize{build/doing_build:doing-the-build}}\label{\detokenize{build/doing_build::doc}} - -\subsection{Building within a single tree} -\label{\detokenize{build/doing_build:building-within-a-single-tree}}\label{\detokenize{build/doing_build:do-build}} -\sphinxAtStartPar -If you only need to build Kerberos for one platform, using a single -directory tree which contains both the source files and the object -files is the simplest. However, if you need to maintain Kerberos for -a large number of platforms, you will probably want to use separate -build trees for each platform. We recommend that you look at OS -Incompatibilities, for notes that we have on particular operating -systems. - -\sphinxAtStartPar -If you don’t want separate build trees for each architecture, then use -the following abbreviated procedure: - -\begin{sphinxVerbatim}[commandchars=\\\{\}] -\PYG{n}{cd} \PYG{o}{/}\PYG{n}{u1}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{\PYGZhy{}}\PYG{n}{VERSION}\PYG{o}{/}\PYG{n}{src} -\PYG{o}{.}\PYG{o}{/}\PYG{n}{configure} -\PYG{n}{make} -\end{sphinxVerbatim} - -\sphinxAtStartPar -That’s it! - - -\subsection{Building with separate build directories} -\label{\detokenize{build/doing_build:building-with-separate-build-directories}} -\sphinxAtStartPar -If you wish to keep separate build directories for each platform, you -can do so using the following procedure. (Note, this requires that -your make program support VPATH. GNU’s make will provide this -functionality, for example.) If your make program does not support -this, see the next section. - -\sphinxAtStartPar -For example, if you wish to store the binaries in \sphinxcode{\sphinxupquote{tmpbuild}} build -directory you might use the following procedure: - -\begin{sphinxVerbatim}[commandchars=\\\{\}] -\PYG{n}{mkdir} \PYG{o}{/}\PYG{n}{u1}\PYG{o}{/}\PYG{n}{tmpbuild} -\PYG{n}{cd} \PYG{o}{/}\PYG{n}{u1}\PYG{o}{/}\PYG{n}{tmpbuild} -\PYG{o}{/}\PYG{n}{u1}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{\PYGZhy{}}\PYG{n}{VERSION}\PYG{o}{/}\PYG{n}{src}\PYG{o}{/}\PYG{n}{configure} -\PYG{n}{make} -\end{sphinxVerbatim} - - -\subsection{Building using lndir} -\label{\detokenize{build/doing_build:building-using-lndir}} -\sphinxAtStartPar -If you wish to keep separate build directories for each platform, and -you do not have access to a make program which supports VPATH, all is -not lost. You can use the lndir program to create symbolic link trees -in your build directory. - -\sphinxAtStartPar -For example, if you wish to create a build directory for solaris -binaries you might use the following procedure: - -\begin{sphinxVerbatim}[commandchars=\\\{\}] -mkdir /u1/krb5\PYGZhy{}VERSION/solaris -cd /u1/krb5\PYGZhy{}VERSION/solaris -/u1/krb5\PYGZhy{}VERSION/src/util/lndir `pwd`/../src -./configure -make -\end{sphinxVerbatim} - -\sphinxAtStartPar -You must give an absolute pathname to lndir because it has a bug that -makes it fail for relative pathnames. Note that this version differs -from the latest version as distributed and installed by the -XConsortium with X11R6. Either version should be acceptable. - - -\subsection{Installing the binaries} -\label{\detokenize{build/doing_build:installing-the-binaries}} -\sphinxAtStartPar -Once you have built Kerberos, you should install the binaries. You can -do this by running: - -\begin{sphinxVerbatim}[commandchars=\\\{\}] -\PYG{n}{make} \PYG{n}{install} -\end{sphinxVerbatim} - -\sphinxAtStartPar -If you want to install the binaries into a destination directory that -is not their final destination, which may be convenient if you want to -build a binary distribution to be deployed on multiple hosts, you may -use: - -\begin{sphinxVerbatim}[commandchars=\\\{\}] -\PYG{n}{make} \PYG{n}{install} \PYG{n}{DESTDIR}\PYG{o}{=}\PYG{o}{/}\PYG{n}{path}\PYG{o}{/}\PYG{n}{to}\PYG{o}{/}\PYG{n}{destdir} -\end{sphinxVerbatim} - -\sphinxAtStartPar -This will install the binaries under \sphinxstyleemphasis{DESTDIR/PREFIX}, e.g., the user -programs will install into \sphinxstyleemphasis{DESTDIR/PREFIX/bin}, the libraries into -\sphinxstyleemphasis{DESTDIR/PREFIX/lib}, etc. \sphinxstyleemphasis{DESTDIR} must be an absolute path. - -\sphinxAtStartPar -Some implementations of make allow multiple commands to be run in -parallel, for faster builds. We test our Makefiles in parallel builds -with GNU make only; they may not be compatible with other parallel -build implementations. - - -\subsection{Testing the build} -\label{\detokenize{build/doing_build:testing-the-build}} -\sphinxAtStartPar -The Kerberos V5 distribution comes with built\sphinxhyphen{}in regression tests. To -run them, simply type the following command while in the top\sphinxhyphen{}level -build directory (i.e., the directory where you sent typed make to -start building Kerberos; see {\hyperref[\detokenize{build/doing_build:do-build}]{\sphinxcrossref{\DUrole{std,std-ref}{Building within a single tree}}}}): - -\begin{sphinxVerbatim}[commandchars=\\\{\}] -\PYG{n}{make} \PYG{n}{check} -\end{sphinxVerbatim} - -\sphinxAtStartPar -On some operating systems, you have to run \sphinxcode{\sphinxupquote{make install}} before -running \sphinxcode{\sphinxupquote{make check}}, or the test suite will pick up installed -versions of Kerberos libraries rather than the newly built ones. You -can install into a prefix that isn’t in the system library search -path, though. Alternatively, you can configure with -\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}rpath}, which renders the build tree less suitable -for installation, but allows testing without interference from -previously installed libraries. - -\sphinxAtStartPar -There are additional regression tests available, which are not run -by \sphinxcode{\sphinxupquote{make check}}. These tests require manual setup and teardown of -support infrastructure which is not easily automated, or require -excessive resources for ordinary use. The procedure for running -the manual tests is documented at -\sphinxurl{https://k5wiki.kerberos.org/wiki/Manual\_Testing}. - - -\subsection{Cleaning up the build} -\label{\detokenize{build/doing_build:cleaning-up-the-build}}\begin{itemize} -\item {} -\sphinxAtStartPar -Use \sphinxcode{\sphinxupquote{make clean}} to remove all files generated by running make -command. - -\item {} -\sphinxAtStartPar -Use \sphinxcode{\sphinxupquote{make distclean}} to remove all files generated by running -./configure script. After running \sphinxcode{\sphinxupquote{make distclean}} your source -tree (ideally) should look like the raw (just un\sphinxhyphen{}tarred) source -tree. - -\end{itemize} - - -\subsection{Using autoconf} -\label{\detokenize{build/doing_build:using-autoconf}} -\sphinxAtStartPar -(If you are not a developer, you can ignore this section.) - -\sphinxAtStartPar -In the Kerberos V5 source directory, there is a configure script which -automatically determines the compilation environment and creates the -proper Makefiles for a particular platform. This configure script is -generated using autoconf, which you should already have installed if -you will be making changes to \sphinxcode{\sphinxupquote{src/configure.in}}. - -\sphinxAtStartPar -Normal users will not need to worry about running autoconf; the -distribution comes with the configure script already prebuilt. - -\sphinxAtStartPar -The autoconf package comes with a script called \sphinxcode{\sphinxupquote{autoreconf}} that -will automatically run \sphinxcode{\sphinxupquote{autoconf}} and \sphinxcode{\sphinxupquote{autoheader}} as needed. You -should run \sphinxcode{\sphinxupquote{autoreconf}} from the top source directory, e.g.: - -\begin{sphinxVerbatim}[commandchars=\\\{\}] -\PYG{n}{cd} \PYG{o}{/}\PYG{n}{u1}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{\PYGZhy{}}\PYG{n}{VERSION}\PYG{o}{/}\PYG{n}{src} -\PYG{n}{autoreconf} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{n}{verbose} -\end{sphinxVerbatim} - -\sphinxstepscope - - -\section{Options to \sphinxstyleemphasis{configure}} -\label{\detokenize{build/options2configure:options-to-configure}}\label{\detokenize{build/options2configure:options2configure}}\label{\detokenize{build/options2configure::doc}} -\sphinxAtStartPar -There are a number of options to configure which you can use to -control how the Kerberos distribution is built. - - -\subsection{Most commonly used options} -\label{\detokenize{build/options2configure:most-commonly-used-options}}\begin{description} -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}help}} -\sphinxAtStartPar -Provides help to configure. This will list the set of commonly -used options for building Kerberos. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}prefix=}\sphinxstyleemphasis{PREFIX}} -\sphinxAtStartPar -By default, Kerberos will install the package’s files rooted at -\sphinxcode{\sphinxupquote{/usr/local}}. If you desire to place the binaries into the -directory \sphinxstyleemphasis{PREFIX}, use this option. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}exec\sphinxhyphen{}prefix=}\sphinxstyleemphasis{EXECPREFIX}} -\sphinxAtStartPar -This option allows one to separate the architecture independent -programs from the host\sphinxhyphen{}dependent files (configuration files, -manual pages). Use this option to install architecture\sphinxhyphen{}dependent -programs in \sphinxstyleemphasis{EXECPREFIX}. The default location is the value of -specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}prefix} option. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}localstatedir=}\sphinxstyleemphasis{LOCALSTATEDIR}} -\sphinxAtStartPar -This option sets the directory for locally modifiable -single\sphinxhyphen{}machine data. In Kerberos, this mostly is useful for -setting a location for the KDC data files, as they will be -installed in \sphinxcode{\sphinxupquote{LOCALSTATEDIR/krb5kdc}}, which is by default -\sphinxcode{\sphinxupquote{PREFIX/var/krb5kdc}}. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}netlib}{[}=\sphinxstyleemphasis{libs}{]}} -\sphinxAtStartPar -Allows for suppression of or replacement of network libraries. By -default, Kerberos V5 configuration will look for \sphinxcode{\sphinxupquote{\sphinxhyphen{}lnsl}} and -\sphinxcode{\sphinxupquote{\sphinxhyphen{}lsocket}}. If your operating system has a broken resolver -library or fails to pass the tests in \sphinxcode{\sphinxupquote{src/tests/resolv}}, you -will need to use this option. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}enable\sphinxhyphen{}dns\sphinxhyphen{}for\sphinxhyphen{}realm}} -\sphinxAtStartPar -Enable the use of DNS to look up a host’s Kerberos realm, -if the information is not provided in -\DUrole{xref,std,std-ref}{krb5.conf(5)}. See \DUrole{xref,std,std-ref}{mapping\_hostnames} -for information about using DNS to determine the default realm. -DNS lookups for realm names are disabled by default. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}system\sphinxhyphen{}et}} -\sphinxAtStartPar -Use an installed version of the error\sphinxhyphen{}table (et) support software, -the compile\_et program, the com\_err.h header file and the com\_err -library. If these are not in the default locations, you may wish -to specify \sphinxcode{\sphinxupquote{CPPFLAGS=\sphinxhyphen{}I/some/dir}} and -\sphinxcode{\sphinxupquote{LDFLAGS=\sphinxhyphen{}L/some/other/dir}} options at configuration time as -well. - -\sphinxAtStartPar -If this option is not given, a version supplied with the Kerberos -sources will be built and installed along with the rest of the -Kerberos tree, for Kerberos applications to link against. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}system\sphinxhyphen{}ss}} -\sphinxAtStartPar -Use an installed version of the subsystem command\sphinxhyphen{}line interface -software, the mk\_cmds program, the \sphinxcode{\sphinxupquote{ss/ss.h}} header file and the -ss library. If these are not in the default locations, you may -wish to specify \sphinxcode{\sphinxupquote{CPPFLAGS=\sphinxhyphen{}I/some/dir}} and -\sphinxcode{\sphinxupquote{LDFLAGS=\sphinxhyphen{}L/some/other/dir}} options at configuration time as -well. See also the \sphinxstylestrong{SS\_LIB} option. - -\sphinxAtStartPar -If this option is not given, the ss library supplied with the -Kerberos sources will be compiled and linked into those programs -that need it; it will not be installed separately. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}system\sphinxhyphen{}db}} -\sphinxAtStartPar -Use an installed version of the Berkeley DB package, which must -provide an API compatible with version 1.85. This option is -unsupported and untested. In particular, we do not know if the -database\sphinxhyphen{}rename code used in the dumpfile load operation will -behave properly. - -\sphinxAtStartPar -If this option is not given, a version supplied with the Kerberos -sources will be built and installed. (We are not updating this -version at this time because of licensing issues with newer -versions that we haven’t investigated sufficiently yet.) - -\end{description} - - -\subsection{Environment variables} -\label{\detokenize{build/options2configure:environment-variables}}\begin{description} -\sphinxlineitem{\sphinxstylestrong{CC=}\sphinxstyleemphasis{COMPILER}} -\sphinxAtStartPar -Use \sphinxstyleemphasis{COMPILER} as the C compiler. - -\sphinxlineitem{\sphinxstylestrong{CFLAGS=}\sphinxstyleemphasis{FLAGS}} -\sphinxAtStartPar -Use \sphinxstyleemphasis{FLAGS} as the default set of C compiler flags. - -\sphinxlineitem{\sphinxstylestrong{CPP=}\sphinxstyleemphasis{CPP}} -\sphinxAtStartPar -C preprocessor to use. (e.g., \sphinxcode{\sphinxupquote{CPP=\textquotesingle{}gcc \sphinxhyphen{}E\textquotesingle{}}}) - -\sphinxlineitem{\sphinxstylestrong{CPPFLAGS=}\sphinxstyleemphasis{CPPOPTS}} -\sphinxAtStartPar -Use \sphinxstyleemphasis{CPPOPTS} as the default set of C preprocessor flags. The -most common use of this option is to select certain \#define’s for -use with the operating system’s include files. - -\sphinxlineitem{\sphinxstylestrong{DB\_HEADER=}\sphinxstyleemphasis{headername}} -\sphinxAtStartPar -If db.h is not the correct header file to include to compile -against the Berkeley DB 1.85 API, specify the correct header file -name with this option. For example, \sphinxcode{\sphinxupquote{DB\_HEADER=db3/db\_185.h}}. - -\sphinxlineitem{\sphinxstylestrong{DB\_LIB=}\sphinxstyleemphasis{libs}…} -\sphinxAtStartPar -If \sphinxcode{\sphinxupquote{\sphinxhyphen{}ldb}} is not the correct library specification for the -Berkeley DB library version to be used, override it with this -option. For example, \sphinxcode{\sphinxupquote{DB\_LIB=\sphinxhyphen{}ldb\sphinxhyphen{}3.3}}. - -\sphinxlineitem{\sphinxstylestrong{DEFCCNAME=}\sphinxstyleemphasis{ccachename}} -\sphinxAtStartPar -Override the built\sphinxhyphen{}in default credential cache name. -For example, \sphinxcode{\sphinxupquote{DEFCCNAME=DIR:/var/run/user/\%\{USERID\}/ccache}} -See \DUrole{xref,std,std-ref}{parameter\_expansion} for information about supported -parameter expansions. - -\sphinxlineitem{\sphinxstylestrong{DEFCKTNAME=}\sphinxstyleemphasis{keytabname}} -\sphinxAtStartPar -Override the built\sphinxhyphen{}in default client keytab name. -The format is the same as for \sphinxstyleemphasis{DEFCCNAME}. - -\sphinxlineitem{\sphinxstylestrong{DEFKTNAME=}\sphinxstyleemphasis{keytabname}} -\sphinxAtStartPar -Override the built\sphinxhyphen{}in default keytab name. -The format is the same as for \sphinxstyleemphasis{DEFCCNAME}. - -\sphinxlineitem{\sphinxstylestrong{LD=}\sphinxstyleemphasis{LINKER}} -\sphinxAtStartPar -Use \sphinxstyleemphasis{LINKER} as the default loader if it should be different from -C compiler as specified above. - -\sphinxlineitem{\sphinxstylestrong{LDFLAGS=}\sphinxstyleemphasis{LDOPTS}} -\sphinxAtStartPar -This option informs the linker where to get additional libraries -(e.g., \sphinxcode{\sphinxupquote{\sphinxhyphen{}L\textless{}lib dir\textgreater{}}}). - -\sphinxlineitem{\sphinxstylestrong{LIBS=}\sphinxstyleemphasis{LDNAME}} -\sphinxAtStartPar -This option allows one to specify libraries to be passed to the -linker (e.g., \sphinxcode{\sphinxupquote{\sphinxhyphen{}l\textless{}library\textgreater{}}}) - -\sphinxlineitem{\sphinxstylestrong{PKCS11\_MODNAME=}\sphinxstyleemphasis{library}} -\sphinxAtStartPar -Override the built\sphinxhyphen{}in default PKCS11 library name. - -\sphinxlineitem{\sphinxstylestrong{SS\_LIB=}\sphinxstyleemphasis{libs}…} -\sphinxAtStartPar -If \sphinxcode{\sphinxupquote{\sphinxhyphen{}lss}} is not the correct way to link in your installed ss -library, for example if additional support libraries are needed, -specify the correct link options here. Some variants of this -library are around which allow for Emacs\sphinxhyphen{}like line editing, but -different versions require different support libraries to be -explicitly specified. - -\sphinxAtStartPar -This option is ignored if \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}system\sphinxhyphen{}ss} is not specified. - -\sphinxlineitem{\sphinxstylestrong{YACC}} -\sphinxAtStartPar -The ‘Yet Another C Compiler’ implementation to use. Defaults to -the first program found out of: ‘\sphinxtitleref{bison \sphinxhyphen{}y}’, ‘\sphinxtitleref{byacc}’, -‘\sphinxtitleref{yacc}’. - -\sphinxlineitem{\sphinxstylestrong{YFLAGS}} -\sphinxAtStartPar -The list of arguments that will be passed by default to \$YACC. -This script will default YFLAGS to the empty string to avoid a -default value of \sphinxcode{\sphinxupquote{\sphinxhyphen{}d}} given by some make applications. - -\end{description} - - -\subsection{Fine tuning of the installation directories} -\label{\detokenize{build/options2configure:fine-tuning-of-the-installation-directories}}\begin{description} -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}bindir=}\sphinxstyleemphasis{DIR}} -\sphinxAtStartPar -User executables. Defaults to \sphinxcode{\sphinxupquote{EXECPREFIX/bin}}, where -\sphinxstyleemphasis{EXECPREFIX} is the path specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}exec\sphinxhyphen{}prefix} -configuration option. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}sbindir=}\sphinxstyleemphasis{DIR}} -\sphinxAtStartPar -System admin executables. Defaults to \sphinxcode{\sphinxupquote{EXECPREFIX/sbin}}, where -\sphinxstyleemphasis{EXECPREFIX} is the path specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}exec\sphinxhyphen{}prefix} -configuration option. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}sysconfdir=}\sphinxstyleemphasis{DIR}} -\sphinxAtStartPar -Read\sphinxhyphen{}only single\sphinxhyphen{}machine data such as krb5.conf. -Defaults to \sphinxcode{\sphinxupquote{PREFIX/etc}}, where -\sphinxstyleemphasis{PREFIX} is the path specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}prefix} configuration -option. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}libdir=}\sphinxstyleemphasis{DIR}} -\sphinxAtStartPar -Object code libraries. Defaults to \sphinxcode{\sphinxupquote{EXECPREFIX/lib}}, where -\sphinxstyleemphasis{EXECPREFIX} is the path specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}exec\sphinxhyphen{}prefix} -configuration option. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}includedir=}\sphinxstyleemphasis{DIR}} -\sphinxAtStartPar -C header files. Defaults to \sphinxcode{\sphinxupquote{PREFIX/include}}, where \sphinxstyleemphasis{PREFIX} is -the path specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}prefix} configuration option. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}datarootdir=}\sphinxstyleemphasis{DATAROOTDIR}} -\sphinxAtStartPar -Read\sphinxhyphen{}only architecture\sphinxhyphen{}independent data root. Defaults to -\sphinxcode{\sphinxupquote{PREFIX/share}}, where \sphinxstyleemphasis{PREFIX} is the path specified by -\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}prefix} configuration option. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}datadir=}\sphinxstyleemphasis{DIR}} -\sphinxAtStartPar -Read\sphinxhyphen{}only architecture\sphinxhyphen{}independent data. Defaults to path -specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}datarootdir} configuration option. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}localedir=}\sphinxstyleemphasis{DIR}} -\sphinxAtStartPar -Locale\sphinxhyphen{}dependent data. Defaults to \sphinxcode{\sphinxupquote{DATAROOTDIR/locale}}, where -\sphinxstyleemphasis{DATAROOTDIR} is the path specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}datarootdir} -configuration option. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}mandir=}\sphinxstyleemphasis{DIR}} -\sphinxAtStartPar -Man documentation. Defaults to \sphinxcode{\sphinxupquote{DATAROOTDIR/man}}, where -\sphinxstyleemphasis{DATAROOTDIR} is the path specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}datarootdir} -configuration option. - -\end{description} - - -\subsection{Program names} -\label{\detokenize{build/options2configure:program-names}}\begin{description} -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}program\sphinxhyphen{}prefix=}\sphinxstyleemphasis{PREFIX}} -\sphinxAtStartPar -Prepend \sphinxstyleemphasis{PREFIX} to the names of the programs when installing -them. For example, specifying \sphinxcode{\sphinxupquote{\sphinxhyphen{}\sphinxhyphen{}program\sphinxhyphen{}prefix=mit\sphinxhyphen{}}} at the -configure time will cause the program named \sphinxcode{\sphinxupquote{abc}} to be -installed as \sphinxcode{\sphinxupquote{mit\sphinxhyphen{}abc}}. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}program\sphinxhyphen{}suffix=}\sphinxstyleemphasis{SUFFIX}} -\sphinxAtStartPar -Append \sphinxstyleemphasis{SUFFIX} to the names of the programs when installing them. -For example, specifying \sphinxcode{\sphinxupquote{\sphinxhyphen{}\sphinxhyphen{}program\sphinxhyphen{}suffix=\sphinxhyphen{}mit}} at the configure -time will cause the program named \sphinxcode{\sphinxupquote{abc}} to be installed as -\sphinxcode{\sphinxupquote{abc\sphinxhyphen{}mit}}. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}program\sphinxhyphen{}transform\sphinxhyphen{}name=}\sphinxstyleemphasis{PROGRAM}} -\sphinxAtStartPar -Run \sphinxcode{\sphinxupquote{sed \sphinxhyphen{}e PROGRAM}} on installed program names. (\sphinxstyleemphasis{PROGRAM} is a -sed script). - -\end{description} - - -\subsection{System types} -\label{\detokenize{build/options2configure:system-types}}\begin{description} -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}build=}\sphinxstyleemphasis{BUILD}} -\sphinxAtStartPar -Configure for building on \sphinxstyleemphasis{BUILD} -(e.g., \sphinxcode{\sphinxupquote{\sphinxhyphen{}\sphinxhyphen{}build=x86\_64\sphinxhyphen{}linux\sphinxhyphen{}gnu}}). - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}host=}\sphinxstyleemphasis{HOST}} -\sphinxAtStartPar -Cross\sphinxhyphen{}compile to build programs to run on \sphinxstyleemphasis{HOST} -(e.g., \sphinxcode{\sphinxupquote{\sphinxhyphen{}\sphinxhyphen{}host=x86\_64\sphinxhyphen{}linux\sphinxhyphen{}gnu}}). By default, Kerberos V5 -configuration will look for “build” option. - -\end{description} - - -\subsection{Optional features} -\label{\detokenize{build/options2configure:optional-features}}\begin{description} -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}option\sphinxhyphen{}checking}} -\sphinxAtStartPar -Ignore unrecognized \textendash{}enable/\textendash{}with options. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}}\sphinxstyleemphasis{FEATURE}} -\sphinxAtStartPar -Do not include \sphinxstyleemphasis{FEATURE} (same as \textendash{}enable\sphinxhyphen{}FEATURE=no). - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}enable\sphinxhyphen{}}\sphinxstyleemphasis{FEATURE}{[}=\sphinxstyleemphasis{ARG}{]}} -\sphinxAtStartPar -Include \sphinxstyleemphasis{FEATURE} {[}ARG=yes{]}. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}enable\sphinxhyphen{}maintainer\sphinxhyphen{}mode}} -\sphinxAtStartPar -Enable rebuilding of source files, Makefiles, etc. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}delayed\sphinxhyphen{}initialization}} -\sphinxAtStartPar -Initialize library code when loaded. Defaults to delay until -first use. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}thread\sphinxhyphen{}support}} -\sphinxAtStartPar -Don’t enable thread support. Defaults to enabled. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}rpath}} -\sphinxAtStartPar -Suppress run path flags in link lines. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}enable\sphinxhyphen{}athena}} -\sphinxAtStartPar -Build with MIT Project Athena configuration. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}kdc\sphinxhyphen{}lookaside\sphinxhyphen{}cache}} -\sphinxAtStartPar -Disable the cache which detects client retransmits. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}pkinit}} -\sphinxAtStartPar -Disable PKINIT plugin support. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}aesni}} -\sphinxAtStartPar -Disable support for using AES instructions on x86 platforms. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}enable\sphinxhyphen{}asan}{[}=\sphinxstyleemphasis{ARG}{]}} -\sphinxAtStartPar -Enable building with asan memory error checking. If \sphinxstyleemphasis{ARG} is -given, it controls the \sphinxhyphen{}fsanitize compilation flag value (the -default is “address”). - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}enable\sphinxhyphen{}ossfuzz}} -\sphinxAtStartPar -Enable building fuzzing targets with OSS\sphinxhyphen{}Fuzz build support. - -\end{description} - - -\subsection{Optional packages} -\label{\detokenize{build/options2configure:optional-packages}}\begin{description} -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}}\sphinxstyleemphasis{PACKAGE}{[}=ARG{]}} -\sphinxAtStartPar -Use \sphinxstyleemphasis{PACKAGE} (e.g., \sphinxcode{\sphinxupquote{\sphinxhyphen{}\sphinxhyphen{}with\sphinxhyphen{}imap}}). The default value of \sphinxstyleemphasis{ARG} -is \sphinxcode{\sphinxupquote{yes}}. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}without\sphinxhyphen{}}\sphinxstyleemphasis{PACKAGE}} -\sphinxAtStartPar -Do not use \sphinxstyleemphasis{PACKAGE} (same as \sphinxcode{\sphinxupquote{\sphinxhyphen{}\sphinxhyphen{}with\sphinxhyphen{}PACKAGE=no}}) -(e.g., \sphinxcode{\sphinxupquote{\sphinxhyphen{}\sphinxhyphen{}without\sphinxhyphen{}libedit}}). - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}size\sphinxhyphen{}optimizations}} -\sphinxAtStartPar -Enable a few optimizations to reduce code size possibly at some -run\sphinxhyphen{}time cost. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}system\sphinxhyphen{}et}} -\sphinxAtStartPar -Use the com\_err library and compile\_et utility that are already -installed on the system, instead of building and installing -local versions. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}system\sphinxhyphen{}ss}} -\sphinxAtStartPar -Use the ss library and mk\_cmds utility that are already installed -on the system, instead of building and using private versions. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}system\sphinxhyphen{}db}} -\sphinxAtStartPar -Use the berkeley db utility already installed on the system, -instead of using a private version. This option is not -recommended; enabling it may result in incompatibility with key -databases originating on other systems. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}netlib=}\sphinxstyleemphasis{LIBS}} -\sphinxAtStartPar -Use the resolver library specified in \sphinxstyleemphasis{LIBS}. Use this variable -if the C library resolver is insufficient or broken. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}hesiod=}\sphinxstyleemphasis{path}} -\sphinxAtStartPar -Compile with Hesiod support. The \sphinxstyleemphasis{path} points to the Hesiod -directory. By default Hesiod is unsupported. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}ldap}} -\sphinxAtStartPar -Compile OpenLDAP database backend module. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}lmdb}} -\sphinxAtStartPar -Compile LMDB database backend module. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}vague\sphinxhyphen{}errors}} -\sphinxAtStartPar -Do not send helpful errors to client. For example, if the KDC -should return only vague error codes to clients. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}crypto\sphinxhyphen{}impl=}\sphinxstyleemphasis{IMPL}} -\sphinxAtStartPar -Use specified crypto implementation (e.g., \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}crypto\sphinxhyphen{}impl=}\sphinxstyleemphasis{openssl}). The default is the native MIT -Kerberos implementation \sphinxcode{\sphinxupquote{builtin}}. The other currently -implemented crypto backend is \sphinxcode{\sphinxupquote{openssl}}. (See -\DUrole{xref,std,std-ref}{mitK5features}) - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}without\sphinxhyphen{}libedit}} -\sphinxAtStartPar -Do not compile and link against libedit. Some utilities will no -longer offer command history or completion in interactive mode if -libedit is disabled. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}readline}} -\sphinxAtStartPar -Compile and link against GNU readline, as an alternative to libedit. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}system\sphinxhyphen{}verto}} -\sphinxAtStartPar -Use an installed version of libverto. If the libverto header and -library are not in default locations, you may wish to specify -\sphinxcode{\sphinxupquote{CPPFLAGS=\sphinxhyphen{}I/some/dir}} and \sphinxcode{\sphinxupquote{LDFLAGS=\sphinxhyphen{}L/some/other/dir}} options -at configuration time as well. - -\sphinxAtStartPar -If this option is not given, the build system will try to detect -an installed version of libverto and use it if it is found. -Otherwise, a version supplied with the Kerberos sources will be -built and installed. The built\sphinxhyphen{}in version does not contain the -full set of back\sphinxhyphen{}end modules and is not a suitable general -replacement for the upstream version, but will work for the -purposes of Kerberos. - -\sphinxAtStartPar -Specifying \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}without\sphinxhyphen{}system\sphinxhyphen{}verto} will cause the built\sphinxhyphen{}in -version of libverto to be used unconditionally. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}krb5\sphinxhyphen{}config=}\sphinxstyleemphasis{PATH}} -\sphinxAtStartPar -Use the krb5\sphinxhyphen{}config program at \sphinxstyleemphasis{PATH} to obtain the build\sphinxhyphen{}time -default credential cache, keytab, and client keytab names. The -default is to use \sphinxcode{\sphinxupquote{krb5\sphinxhyphen{}config}} from the program path. Specify -\sphinxcode{\sphinxupquote{\sphinxhyphen{}\sphinxhyphen{}without\sphinxhyphen{}krb5\sphinxhyphen{}config}} to disable the use of krb5\sphinxhyphen{}config and -use the usual built\sphinxhyphen{}in defaults. - -\sphinxlineitem{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}without\sphinxhyphen{}keyutils}} -\sphinxAtStartPar -Build without libkeyutils support. This disables the KEYRING -credential cache type. - -\end{description} - - -\subsection{Examples} -\label{\detokenize{build/options2configure:examples}} -\sphinxAtStartPar -For example, in order to configure Kerberos on a Solaris machine using -the suncc compiler with the optimizer turned on, run the configure -script with the following options: - -\begin{sphinxVerbatim}[commandchars=\\\{\}] -\PYG{o}{\PYGZpc{}} \PYG{o}{.}\PYG{o}{/}\PYG{n}{configure} \PYG{n}{CC}\PYG{o}{=}\PYG{n}{suncc} \PYG{n}{CFLAGS}\PYG{o}{=}\PYG{o}{\PYGZhy{}}\PYG{n}{O} -\end{sphinxVerbatim} - -\sphinxAtStartPar -For a slightly more complicated example, consider a system where -several packages to be used by Kerberos are installed in -\sphinxcode{\sphinxupquote{/usr/foobar}}, including Berkeley DB 3.3, and an ss library that -needs to link against the curses library. The configuration of -Kerberos might be done thus: - -\begin{sphinxVerbatim}[commandchars=\\\{\}] -\PYG{o}{.}\PYG{o}{/}\PYG{n}{configure} \PYG{n}{CPPFLAGS}\PYG{o}{=}\PYG{o}{\PYGZhy{}}\PYG{n}{I}\PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{foobar}\PYG{o}{/}\PYG{n}{include} \PYG{n}{LDFLAGS}\PYG{o}{=}\PYG{o}{\PYGZhy{}}\PYG{n}{L}\PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{foobar}\PYG{o}{/}\PYG{n}{lib} \PYGZbs{} -\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{k}{with}\PYG{o}{\PYGZhy{}}\PYG{n}{system}\PYG{o}{\PYGZhy{}}\PYG{n}{et} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{k}{with}\PYG{o}{\PYGZhy{}}\PYG{n}{system}\PYG{o}{\PYGZhy{}}\PYG{n}{ss} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{k}{with}\PYG{o}{\PYGZhy{}}\PYG{n}{system}\PYG{o}{\PYGZhy{}}\PYG{n}{db} \PYGZbs{} -\PYG{n}{SS\PYGZus{}LIB}\PYG{o}{=}\PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{\PYGZhy{}lss \PYGZhy{}lcurses}\PYG{l+s+s1}{\PYGZsq{}} \PYG{n}{DB\PYGZus{}HEADER}\PYG{o}{=}\PYG{n}{db3}\PYG{o}{/}\PYG{n}{db\PYGZus{}185}\PYG{o}{.}\PYG{n}{h} \PYG{n}{DB\PYGZus{}LIB}\PYG{o}{=}\PYG{o}{\PYGZhy{}}\PYG{n}{ldb}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{3.3} -\end{sphinxVerbatim} - -\sphinxstepscope - - -\section{osconf.hin} -\label{\detokenize{build/osconf:osconf-hin}}\label{\detokenize{build/osconf::doc}} -\sphinxAtStartPar -There is one configuration file which you may wish to edit to control -various compile\sphinxhyphen{}time parameters in the Kerberos distribution: - -\begin{sphinxVerbatim}[commandchars=\\\{\}] -\PYG{n}{include}\PYG{o}{/}\PYG{n}{osconf}\PYG{o}{.}\PYG{n}{hin} -\end{sphinxVerbatim} - -\sphinxAtStartPar -The list that follows is by no means complete, just some of the more -interesting variables. -\begin{description} -\sphinxlineitem{\sphinxstylestrong{DEFAULT\_PROFILE\_PATH}} -\sphinxAtStartPar -The pathname to the file which contains the profiles for the known -realms, their KDCs, etc. The default value is \sphinxcode{\sphinxupquote{/etc/krb5.conf}}. - -\sphinxlineitem{\sphinxstylestrong{DEFAULT\_KEYTAB\_NAME}} -\sphinxAtStartPar -The type and pathname to the default server keytab file. The -default is \DUrole{xref,std,std-ref}{DEFKTNAME}. - -\sphinxlineitem{\sphinxstylestrong{DEFAULT\_KDC\_ENCTYPE}} -\sphinxAtStartPar -The default encryption type for the KDC database master key. The -default value is \sphinxcode{\sphinxupquote{aes256\sphinxhyphen{}cts\sphinxhyphen{}hmac\sphinxhyphen{}sha1\sphinxhyphen{}96}}. - -\sphinxlineitem{\sphinxstylestrong{RCTMPDIR}} -\sphinxAtStartPar -The directory which stores replay caches. The default is -\sphinxcode{\sphinxupquote{/var/tmp}}. - -\sphinxlineitem{\sphinxstylestrong{DEFAULT\_KDB\_FILE}} -\sphinxAtStartPar -The location of the default database. The default value is -\DUrole{xref,std,std-ref}{LOCALSTATEDIR}\sphinxcode{\sphinxupquote{/krb5kdc}}\sphinxcode{\sphinxupquote{/principal}}. - -\end{description} - - - -\renewcommand{\indexname}{Index} -\printindex -\end{document}
\ No newline at end of file |