[sudo-users] sudo, kerb5 and Heimdal on FreeBSD 7.0

[john bender]

Hi there,

so I'm trying to install sudo on FreeBSD 7.0-RELEASE. 
When I try a make against the kerberos libs that the
system comes with under /usr/lib, I get this error:

undefined reference to 'krb5_get_init_creds_opt_alloc'

So I compile Heimdal from ports and libs are installed
under /usr/local/lib.  Running a 'strings' on these I
see that the krb5_get_init_creds_opt_alloc function is
there, and not presend under the libs in /usr/lib. 
I'm not sure whether the /usr/lib libraries are from
the MIT release, but was under the impression that due
to crypt export laws, FBSD came with Heimdal by
default.  But anyway...

Moving forward, I configure with --with-kerb5, and
'export LDFLAGS=-L/usr/local/lib', but when running
'make', I get:

../auth/kerb5.c: In function 'kerb5_verify':
../auth/kerb5.c:224: warning: passing argument 1 of
'krb5_get_init_creds_opt_free' from incompatible
pointer type
../auth/kerb5.c:224: error: too few arguments to
function 'krb5_get_init_creds_opt_free'

In auth/kerb5.c on line 223 I see

#ifdef HAVE_HEIMDAL
        krb5_get_init_creds_opt_free(opts);
#else
        krb5_get_init_creds_opt_free(sudo_context,
opts);
#endif

If I remove the defines, and the 1 argument function,
IE: only leave
"krb5_get_init_creds_opt_free(sudo_context, opts);"
from the above block, it compiles fine and a sudo
command authenticates properly against my kerberos
server.

I looked the function up in the Heimdal source, and
all instances reference two arguments:

krb5_get_init_creds_opt_free(context, options);

Running 'strings' on the /usr/lib libraries did not
return a match for krb5_get_init_creds_opt_free, so it
looks to be present only in Heimdal libraries.

Is this something that needs to be changed in sudo's
source?

- Darek