Received: from konishi-polis.mit.edu (STRATTON-THREE-SEVENTY-ONE.MIT.EDU [18.187.6.116]) by krbdev.mit.edu (8.9.3p2) with ESMTP id NAA04959; Thu, 19 Feb 2004 13:03:49 -0500 (EST)
Received: by konishi-polis.mit.edu (Postfix, from userid 8042) id CDB1115159C; Thu, 19 Feb 2004 13:03:48 -0500 (EST)
To: "Douglas E. Engert" <deengert@anl.gov>
Cc: rt@krbdev.mit.edu, Darren Tucker <dtucker@zip.com.au>
Subject: Re: [krbdev.mit.edu #2240] krb5-config --cflags gssapi  whenusedbyOpenSSH-snap-20040212
References: <rt-2240-9871.13.5984392555379@krbdev.mit.edu> <4034B8F9.31474EF3@anl.gov>
From: Sam Hartman <hartmans@mit.edu>
Date: Thu, 19 Feb 2004 13:03:48 -0500
In-Reply-To: <4034B8F9.31474EF3@anl.gov> (Douglas E. Engert's message of "Thu, 19 Feb 2004 07:24:09 -0600")
Message-Id: <tsl1xorq73v.fsf@konishi-polis.mit.edu>
User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.2 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
RT-Send-Cc: 
X-RT-Original-Encoding: us-ascii
Content-Length: 1504

>>>>> "Douglas" == Douglas E Engert <deengert@anl.gov> writes:

    Douglas> Darren Tucker wrote:
    >> 
    >> Douglas E. Engert wrote:
    >> > More or less, but the new code uses > CPPFLAGS="$CPPFLAGS
    >> ${K5CFLAGS}/gssapi"
    >> 
    >> What guarantee is there that K5CFLAGS will contain only
    >> -I/path/to/includes?"  What happens if it contains, eg,
    >> "-I/path/to/include -DSOME_FLAG"?

    Douglas> The current MIT krb5-config returns only
    Douglas> -I/path/to/include

    Douglas> By the time MIT releases a new version of krb5-config,
    Douglas> they should have gssapi.h in the path so the code in
    Douglas> question to test for gssapi.h in the sub directory will
    Douglas> not be executed. The Heimdal code (as I understand) does
    Douglas> not have this problem, so does not execute this code.


Hi.  MIT has not made a determination as to whether Doug's bug is
actually a bug nor whether we will fix it.  We certainly will not fix
it for the upcoming 1.3.2 release; we have passed our final change
deadline for that release.


I disagree with Doug's assertion that most programs include gssapi.h
not gssapi/gssapi.h.


AT this time I would recommend including gssapi.h for Heimdal and
gssapi/gssapi.h for MIT Kerberos.


We'll certainly evaluate Doug's bug report and make a determination
about whet we think the correct behavior is.  However I am very
reluctant to recommend that people accept patches that depend on the
specific output of krb5-config.

--Sam