BIND 9.11.x build failing on Mac OS X - gssapi errors

[James Brown]

I couldn’t get 9.11 to compile for me on OS X 10.12.5. Same problem with 9.11.1-P1. sudo make gives errors like this:

In file included from /Downloads/bind-9.11.1-P1/lib/dns/include/dst/dst.h:24:
/Users/jlbrown/Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:30:10: error: expected "FILENAME" or <FILENAME>
#include ISC_PLATFORM_GSSAPIHEADER
         ^
/Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:52:10: error: unknown type name 'gss_cred_id_t'
                       gss_cred_id_t *cred);
                       ^
/Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:71:24: error: unknown type name 'gss_cred_id_t'
dst_gssapi_releasecred(gss_cred_id_t *cred);
                       ^
/Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:88:30: error: unknown type name 'gss_ctx_id_t'
                   isc_buffer_t *outtoken, gss_ctx_id_t *gssctx,
                                           ^
/Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:111:22: error: unknown type name 'gss_cred_id_t'
dst_gssapi_acceptctx(gss_cred_id_t cred,
                     ^
/Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:114:8: error: unknown type name 'gss_ctx_id_t'
                     gss_ctx_id_t *context, dns_name_t *principal,
                     ^
/Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:144:39: error: unknown type name 'gss_ctx_id_t'
dst_gssapi_deletectx(isc_mem_t *mctx, gss_ctx_id_t *gssctx);

I used:

./configure --with-atf

And then sudo make.

If I use:

./configure --with-atf —without-gssapi

I get it failing with:

Undefined symbols for architecture x86_64:
  "_gss_accept_sec_context", referenced from:
      _gss_accept_sec_context_spnego in libdns.a(spnego.o)
     (maybe you meant: _gss_accept_sec_context_spnego)
  "_gss_acquire_cred", referenced from:
      _dst_gssapi_acquirecred in libdns.a(gssapictx.o)
  "_gss_delete_sec_context", referenced from:
      _dst_gssapi_deletectx in libdns.a(gssapictx.o)
  "_gss_display_name", referenced from:
      _log_cred in libdns.a(gssapictx.o)
      _dst_gssapi_acceptctx in libdns.a(gssapictx.o)
  "_gss_display_status", referenced from:
      _gss_error_tostring in libdns.a(gssapictx.o)
  "_gss_export_sec_context", referenced from:
      _gssapi_dump in libdns.a(gssapi_link.o)
  "_gss_get_mic", referenced from:
      _gssapi_sign in libdns.a(gssapi_link.o)
  "_gss_import_name", referenced from:
      _dst_gssapi_acquirecred in libdns.a(gssapictx.o)
      _dst_gssapi_initctx in libdns.a(gssapictx.o)
  "_gss_import_sec_context", referenced from:
      _gssapi_restore in libdns.a(gssapi_link.o)
  "_gss_init_sec_context", referenced from:
      _gss_init_sec_context_spnego in libdns.a(spnego.o)
     (maybe you meant: _gss_init_sec_context_spnego)
  "_gss_inquire_cred", referenced from:
      _log_cred in libdns.a(gssapictx.o)
  "_gss_release_buffer", referenced from:
      _gssapi_sign in libdns.a(gssapi_link.o)
      _gssapi_dump in libdns.a(gssapi_link.o)
      _gss_error_tostring in libdns.a(gssapictx.o)
      _log_cred in libdns.a(gssapictx.o)
      _dst_gssapi_initctx in libdns.a(gssapictx.o)
      _dst_gssapi_acceptctx in libdns.a(gssapictx.o)
      _gss_accept_sec_context_spnego in libdns.a(spnego.o)
      ...
  "_gss_release_cred", referenced from:
      _dst_gssapi_releasecred in libdns.a(gssapictx.o)
  "_gss_release_name", referenced from:
      _dst_gssapi_acquirecred in libdns.a(gssapictx.o)
      _log_cred in libdns.a(gssapictx.o)
      _dst_gssapi_initctx in libdns.a(gssapictx.o)
      _dst_gssapi_acceptctx in libdns.a(gssapictx.o)
  "_gss_verify_mic", referenced from:
      _gssapi_verify in libdns.a(gssapi_link.o)
  "_krb5_free_context", referenced from:
      _check_config in libdns.a(gssapictx.o)
  "_krb5_get_default_realm", referenced from:
      _check_config in libdns.a(gssapictx.o)
  "_krb5_init_context", referenced from:
      _check_config in libdns.a(gssapictx.o)
ld: symbol(s) not found for architecture x86_64
clang: error: linker command failed with exit code 1 (use -v to see invocation)
make[2]: *** [nsupdate] Error 1
make[1]: *** [subdirs] Error 1
make: *** [subdirs] Error 1

Any suggestions?

Previous versions of BIND 9.x have worked without issues.

Thanks,

James.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20170615/bb6d8649/attachment-0001.html>