BIND 9.11.x build failing on Mac OS X - gssapi errors

[Larry Stone]

I’m also running OS X 10.12.5 so decided to see if I can replicate this. I normally use the 9.10 version (9.10.5-P1 builds fine (./configure and make) but I have not done make install yet) but decided to try to build 9.11.1-P1 to see what happens.

In short, cannot replicate. I did both ./configure and ./configure —with-atf followed by make (completely deleted the directory and started over between the two) and both build fine. I saw some warnings scroll by (normal) but no errors.

One difference in what I do vs. the OP is I noticed he does sudo make. I do the make as myself, then sudo for make install. I don’t think that should make a difference.

-- 
Larry Stone
lstone19 at stonejongleux.com





> On Jun 15, 2017, at 1:44 AM, James Brown via bind-users <bind-users at lists.isc.org> wrote:
> 
> I couldn’t get 9.11 to compile for me on OS X 10.12.5. Same problem with 9.11.1-P1. sudo make gives errors like this:
> 
> In file included from /Downloads/bind-9.11.1-P1/lib/dns/include/dst/dst.h:24:
> /Users/jlbrown/Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:30:10: error: expected "FILENAME" or <FILENAME>
> #include ISC_PLATFORM_GSSAPIHEADER
>          ^
> /Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:52:10: error: unknown type name 'gss_cred_id_t'
>                        gss_cred_id_t *cred);
>                        ^
> /Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:71:24: error: unknown type name 'gss_cred_id_t'
> dst_gssapi_releasecred(gss_cred_id_t *cred);
>                        ^
> /Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:88:30: error: unknown type name 'gss_ctx_id_t'
>                    isc_buffer_t *outtoken, gss_ctx_id_t *gssctx,
>                                            ^
> /Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:111:22: error: unknown type name 'gss_cred_id_t'
> dst_gssapi_acceptctx(gss_cred_id_t cred,
>                      ^
> /Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:114:8: error: unknown type name 'gss_ctx_id_t'
>                      gss_ctx_id_t *context, dns_name_t *principal,
>                      ^
> /Downloads/bind-9.11.1-P1/lib/dns/include/dst/gssapi.h:144:39: error: unknown type name 'gss_ctx_id_t'
> dst_gssapi_deletectx(isc_mem_t *mctx, gss_ctx_id_t *gssctx);
> 
> I used:
> 
> ./configure --with-atf
> 
> And then sudo make.
> 
> If I use:
> 
> ./configure --with-atf —without-gssapi
> 
> I get it failing with:
> 
> Undefined symbols for architecture x86_64:
>   "_gss_accept_sec_context", referenced from:
>       _gss_accept_sec_context_spnego in libdns.a(spnego.o)
>      (maybe you meant: _gss_accept_sec_context_spnego)
>   "_gss_acquire_cred", referenced from:
>       _dst_gssapi_acquirecred in libdns.a(gssapictx.o)
>   "_gss_delete_sec_context", referenced from:
>       _dst_gssapi_deletectx in libdns.a(gssapictx.o)
>   "_gss_display_name", referenced from:
>       _log_cred in libdns.a(gssapictx.o)
>       _dst_gssapi_acceptctx in libdns.a(gssapictx.o)
>   "_gss_display_status", referenced from:
>       _gss_error_tostring in libdns.a(gssapictx.o)
>   "_gss_export_sec_context", referenced from:
>       _gssapi_dump in libdns.a(gssapi_link.o)
>   "_gss_get_mic", referenced from:
>       _gssapi_sign in libdns.a(gssapi_link.o)
>   "_gss_import_name", referenced from:
>       _dst_gssapi_acquirecred in libdns.a(gssapictx.o)
>       _dst_gssapi_initctx in libdns.a(gssapictx.o)
>   "_gss_import_sec_context", referenced from:
>       _gssapi_restore in libdns.a(gssapi_link.o)
>   "_gss_init_sec_context", referenced from:
>       _gss_init_sec_context_spnego in libdns.a(spnego.o)
>      (maybe you meant: _gss_init_sec_context_spnego)
>   "_gss_inquire_cred", referenced from:
>       _log_cred in libdns.a(gssapictx.o)
>   "_gss_release_buffer", referenced from:
>       _gssapi_sign in libdns.a(gssapi_link.o)
>       _gssapi_dump in libdns.a(gssapi_link.o)
>       _gss_error_tostring in libdns.a(gssapictx.o)
>       _log_cred in libdns.a(gssapictx.o)
>       _dst_gssapi_initctx in libdns.a(gssapictx.o)
>       _dst_gssapi_acceptctx in libdns.a(gssapictx.o)
>       _gss_accept_sec_context_spnego in libdns.a(spnego.o)
>       ...
>   "_gss_release_cred", referenced from:
>       _dst_gssapi_releasecred in libdns.a(gssapictx.o)
>   "_gss_release_name", referenced from:
>       _dst_gssapi_acquirecred in libdns.a(gssapictx.o)
>       _log_cred in libdns.a(gssapictx.o)
>       _dst_gssapi_initctx in libdns.a(gssapictx.o)
>       _dst_gssapi_acceptctx in libdns.a(gssapictx.o)
>   "_gss_verify_mic", referenced from:
>       _gssapi_verify in libdns.a(gssapi_link.o)
>   "_krb5_free_context", referenced from:
>       _check_config in libdns.a(gssapictx.o)
>   "_krb5_get_default_realm", referenced from:
>       _check_config in libdns.a(gssapictx.o)
>   "_krb5_init_context", referenced from:
>       _check_config in libdns.a(gssapictx.o)
> ld: symbol(s) not found for architecture x86_64
> clang: error: linker command failed with exit code 1 (use -v to see invocation)
> make[2]: *** [nsupdate] Error 1
> make[1]: *** [subdirs] Error 1
> make: *** [subdirs] Error 1
> 
> Any suggestions?
> 
> Previous versions of BIND 9.x have worked without issues.
> 
> Thanks,
> 
> James.
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
> 
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users