[Non-DoD Source] Re: Installing BIND 9.16.15

Fri May 7 12:14:16 UTC 2021

OK, thanks--After reading the article, I have a vague idea of the issue but I am not clear on the exact solution.  The article mentions a patch but I don't see a patch link.

Understand, I am a novice with this and I am not familiar with the discussion format.  Also, the article discusses version 9.11.31.  I was successful at installing a number of updated versions of BIND along the way up to and including 9.16.12 on the Solaris platform without the gssapi link problem.  I am only interested in installing non-development (production) stable versions.

Is there anything else I can review which has more specific solutions?

Many Thanks for your time.

-----Original Message-----
From: Ondřej Surý <ondrej at isc.org> 
Sent: Thursday, May 6, 2021 12:57 PM
To: DeCaro, James John (Jim) CIV DISA FE (USA) <james.j.decaro3.civ at mail.mil>
Cc: bind-users at lists.isc.org
Subject: [Non-DoD Source] Re: Installing BIND 9.16.15

All active links contained in this email were disabled. Please verify the identity of the sender, and confirm the authenticity of all links contained within the message prior to copying and pasting the address to a Web browser. 

________________________________

See Caution-https://gitlab.isc.org/isc-projects/bind9/-/issues/2667 < Caution-https://gitlab.isc.org/isc-projects/bind9/-/issues/2667 > 

--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.

	On 6. 5. 2021, at 18:48, DeCaro, James John (Jim) CIV DISA FE (USA) via bind-users <bind-users at lists.isc.org> wrote:

	Hello,

	I have what is probably a very rudimentary question, but I am stuck.

	I am attempting to upgrade BIND on a Solaris 11.4 x86 virtual platform.  I have installed BIND successfully up to version 9.16.12 using  ./configure --enable-full-report --with-gssapi=krb5-config --sysconfdir=/etc --with-openssl=/usr/local --localstatedir=/var --enable-fixed-rrset  

	I also added environment variables: export LDFLAGS="-L/usr/local/lib -R/usr/local/lib"  [and]  export PKG_CONFIG_PATH="usr/lib/pkgconfig:/usr/local/lib/pkgconfig (for libuv)

	This time ./configure aborts with errors related to linking gssapi to kerberos

	checking krb5.h presence... yes
	checking for krb5.h... yes
	checking krb5-config linking as -lkrb5 -lk5crypto -lcom_err... krb5-config: could not determine proper GSSAPI linkage
	checking for GSSAPI library, non krb5-config method... looking in /usr/lib
	checking for gssapi.h... (cached) yes
	checking for gssapi/gssapi.h... (cached) yes
	checking gssapi_krb5.h usability... no
	checking gssapi_krb5.h presence... no
	checking for gssapi_krb5.h... no
	checking gssapi/gssapi_krb5.h usability... no
	checking gssapi/gssapi_krb5.h presence... no
	checking for gssapi/gssapi_krb5.h... no
	checking for krb5.h... (cached) yes
	checking for krb5/krb5.h... (cached) yes
	checking kerberosv5/krb5.h usability... no
	checking kerberosv5/krb5.h presence... no
	checking for kerberosv5/krb5.h... no
	checking linking as -lgssapi_krb5... no
	checking linking as -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err... no
	checking linking as -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lresolv... no
	checking linking as -lgssapi... no
	checking linking as -lgssapi -lkrb5 -ldes -lcrypt -lasn1 -lroken -lcom_err... no
	checking linking as -lgssapi -lkrb5 -lcrypt -lasn1 -lroken -lcom_err... no
	checking linking as -lgssapi -lkrb5 -lgssapi_krb5 -lcrypt -lasn1 -lroken -lcom_err... no
	checking linking as -lgssapi -lkrb5 -lhx509 -lcrypt -lasn1 -lroken -lcom_err... no
	checking linking as -lgss -lkrb5... no
	configure: error: could not determine proper GSSAPI linkage

	I am looking all through the internet, the config.log, README etc. and I can't seem to find a solution. 
	krb5.h is located at 
	/usr/include/kerberosv5/krb5/krb5.h
	/usr/include/kerberosv5/krb5.h
	/usr/lib/krb5/krb5.h  

	I am pretty sure it is a matter of setting the correct path variable, but I am new at this and I can't figure it out yet.  Any help would be appreciated.

	Jim 

	_______________________________________________
	Please visit Caution-https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

	ISC funds the development of this software with paid support subscriptions. Contact us at Caution-https://www.isc.org/contact/ for more information.

	bind-users mailing list
	bind-users at lists.isc.org
	Caution-https://lists.isc.org/mailman/listinfo/bind-users