[LU-4085] gss/krb5 is disabled despite required kerberos functions are found

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.6.0
• Affects Version/s: Lustre 2.4.1, Lustre 2.5.0
• Labels: gssapi kerberos patch
• Environment: Debian wheezy, 3.6.11 Kernel
• Severity: 3
• Assignee: Nathaniel Clark
• Reporter: Thomas Stibor

Description

The statement in lustre/autoconf/kerberos5.m4

dnl Check for krb5int_derive_key
  AC_CHECK_LIB($gssapi_lib, krb5int_derive_key,
    AC_DEFINE(HAVE_KRB5INT_DERIVE_KEY, 1, [Define this if the function krb5int_derive_key is available]), ,$KRBLIBS)

  dnl Check for krb5_derive_key
  AC_CHECK_LIB($gssapi_lib, krb5_derive_key,
    AC_DEFINE(HAVE_KRB5_DERIVE_KEY, 1, [Define this if the function krb5_derive_key is available]), ,$KRBLIBS)

  AS_IF([test "x$HAVE_KRB5INT_DERIVE_KEY" = "x1" -o "x$HAVE_KRB5_DERIVE_KEY" = "x1"],
        [AC_DEFINE(HAVE_KRB5, 1, [Define this if you have MIT Kerberos libraries])],
        [KRBDIR=""; AC_MSG_WARN(Disable gss/krb5 due to missing both krb5int_derive_key and krb5_derive_key functions!)])

results in:

The current KRBDIR is /usr
checking for gss_krb5_export_lucid_sec_context in -lgssapi_krb5... yes
checking for gss_krb5_set_allowable_enctypes in -lgssapi_krb5... yes
checking for gss_krb5_ccache_name in -lgssapi_krb5... yes
checking for krb5_get_error_message in -lgssapi_krb5... yes
checking for krb5_get_init_creds_opt_set_addressless in -lgssapi_krb5... no
checking for krb5int_derive_key in -lgssapi_krb5... yes
checking for krb5_derive_key in -lgssapi_krb5... no
configure: WARNING: Disable gss/krb5 due to missing both krb5int_derive_key and krb5_derive_key functions!

despite

checking for krb5int_derive_key in -lgssapi_krb5... yes

is found. This is due to AS_IF([test... run shell code and HAVE_KRB5INT_DERIVE_KEY, HAVE_KRB5_DERIVE_KEY are not shell variables.

I will fix it.