2 # Waf build script for Samba 4's bundled Heimdal.
4 # Unless explicitly requested by the user (e.g.
5 # "./configure --bundled-libraries=!asn1_compile") this will always use the
6 # bundled Heimdal, even if a system heimdal was found. The reason
7 # for this is that our checks for the system heimdal are not accurate
8 # enough yet to know if it is usable (some bug fix might be missing,
9 # compile_et might not generate the expected code, etc).
12 from waflib
import Logs
14 conf
.CHECK_TYPE('u_char', 'uint8_t')
15 conf
.CHECK_TYPE('u_int32_t', 'uint32_t')
17 conf
.CHECK_HEADERS('err.h')
19 conf
.CHECK_HEADERS('ifaddrs.h')
20 conf
.CHECK_HEADERS('''crypt.h errno.h inttypes.h netdb.h signal.h sys/bswap.h
21 sys/file.h sys/stropts.h sys/timeb.h sys/times.h sys/uio.h sys/un.h
22 sys/utsname.h time.h timezone.h ttyname.h netinet/in.h
23 netinet/in6.h netinet6/in6.h''')
25 conf
.CHECK_HEADERS('curses.h term.h termcap.h', together
=True)
27 conf
.CHECK_FUNCS('''atexit cgetent getprogname setprogname gethostname
28 putenv rcmd readv secure_getenv
29 sendmsg setitimer strlwr strncasecmp mkostemp
30 strptime strsep strsep_copy strtok_r strupr swab umask uname unsetenv
31 closefrom err warn errx warnx flock writev''')
33 conf
.CHECK_FUNCS_IN('hstrerror', 'resolv socket nsl', checklibc
=True)
34 conf
.CHECK_FUNCS_IN('''getnameinfo sendmsg socket getipnodebyname gethostent gethostent_r
35 sethostent endhostent getipnodebyaddr freehostent gethostbyname
36 gethostbyname_r gethostbyaddr''',
40 conf
.CHECK_FUNCS('iruserok')
42 conf
.CHECK_FUNCS('bswap16')
43 conf
.CHECK_FUNCS('bswap32')
45 conf
.CHECK_TYPE('struct winsize', define
='HAVE_STRUCT_WINSIZE', headers
='sys/termios.h sys/ioctl.h')
46 conf
.CHECK_STRUCTURE_MEMBER('struct winsize', 'ws_xpixel',
47 define
='HAVE_WS_XPIXEL', headers
='sys/termios.h sys/ioctl.h')
48 conf
.CHECK_STRUCTURE_MEMBER('struct winsize', 'ws_ypixel',
49 define
='HAVE_WS_YPIXEL', headers
='sys/termios.h sys/ioctl.h')
50 conf
.DEFINE('HAVE_KRB_STRUCT_WINSIZE', 1)
51 conf
.DEFINE('VOID_RETSIGTYPE', 1)
53 conf
.CHECK_VARIABLE('h_errno', headers
='netdb.h')
55 # strangely enough, we need it with another define too
56 conf
.CHECK_DECLS('h_errno', headers
='netdb.h')
58 conf
.CHECK_FUNCS_IN('res_search res_nsearch res_ndestroy dns_search dn_expand', 'resolv',
59 checklibc
=True, headers
='netinet/in.h arpa/nameser.h resolv.h dns.h')
60 conf
.CHECK_VARIABLE('_res', headers
='netinet/in.h arpa/nameser.h resolv.h')
61 conf
.CHECK_DECLS('_res', headers
='netinet/in.h arpa/nameser.h resolv.h')
63 conf
.DEFINE('HAVE_KRB5',1)
65 conf
.CHECK_FUNCS('dirfd', headers
='dirent.h')
66 conf
.CHECK_DECLS('dirfd', reverse
=True, headers
='dirent.h')
67 conf
.CHECK_STRUCTURE_MEMBER('DIR', 'dd_fd', define
='HAVE_DIR_DD_FD', headers
='dirent.h')
69 if conf
.env
['WITH_KERNEL_KEYRING'] != False:
70 require_keyutils
= False
71 if conf
.env
['WITH_KERNEL_KEYRING'] == True:
72 require_keyutils
= True
73 conf
.CHECK_FUNCS_IN('add_key keyctl_get_persistent',
74 'keyutils', headers
='keyutils.h',
75 mandatory
=require_keyutils
)
76 conf
.CHECK_SIZEOF('key_serial_t', headers
='keyutils.h',
77 critical
=require_keyutils
)
79 heimdal_no_error_flags
= ['-Wno-error=discarded-qualifiers',
80 '-Wno-error=cast-qual',
81 '-Wno-error=missing-field-initializers',
83 '-Wno-error=implicit-fallthrough',
84 '-Wno-error=enum-compare',
85 '-Wno-error=unused-but-set-variable',
86 '-Wno-error=unused-const-variable',
87 '-Wno-error=unused-variable',
88 '-Wno-error=unused-result',
89 '-Wno-error=old-style-definition']
90 for flag
in heimdal_no_error_flags
:
91 conf
.ADD_NAMED_CFLAGS('HEIMDAL_NO_ERROR_CFLAGS',
95 conf
.ADD_NAMED_CFLAGS('HEIMDAL_UNPICKY_WNO_STRICT_OVERFLOW_CFLAGS',
96 '-Wno-strict-overflow',
99 conf
.ADD_NAMED_CFLAGS('HEIMDAL_UNPICKY_WNO_FREE_NOHEAP_OBJECT_CFLAGS',
100 '-Wno-error=free-nonheap-object',
103 if len(bld
.env
.HEIMDAL_NO_ERROR_CFLAGS
) == len(heimdal_no_error_flags
):
104 Logs
.info("Most warnings in Heimdal code will "
105 "error due to -Werror (good)")
107 conf
.env
.allow_heimdal_warnings
= True
108 # Needed on CentOS 7 and Ubuntu 16.04 only for Bison generated
109 # files when we are not doing strict warnings -> errors
110 conf
.ADD_NAMED_CFLAGS('HEIMDAL_UNPICKY_WNO_MAYBE_UNINITIALIZED_CFLAGS',
111 '-Wno-error=maybe-uninitialized',
113 Logs
.info("Allowing warnings in Heimdal code as this compiler does "
114 "not support enough -Wno-error flags (bad)")
116 conf
.DEFINE('SAMBA4_USES_HEIMDAL', 1)
118 # setup the right defines for a in-tree heimdal build
119 Logs
.info("Using in-tree heimdal kerberos defines")
120 conf
.define('HAVE_GSSAPI_GSSAPI_H', 1)
121 conf
.define('HAVE_GSSAPI_GSSAPI_KRB5_H', 1)
122 conf
.define('HAVE_AP_OPTS_USE_SUBKEY', 1)
123 conf
.define('HAVE_KRB5_KEYTAB_ENTRY_KEYBLOCK', 1)
124 conf
.define('HAVE_KRB5_SET_REAL_TIME', 1)
125 conf
.define('HAVE_COM_ERR_H', 1)
126 conf
.define('HAVE_ADDR_TYPE_IN_KRB5_ADDRESS', 1)
127 conf
.define('HAVE_GSS_DISPLAY_STATUS', 1)
128 conf
.define('HAVE_GSS_WRAP_IOV', 1)
129 conf
.define('HAVE_GSS_KRB5_IMPORT_CRED', 1)
130 conf
.define('HAVE_GSS_OID_EQUAL', 1)
131 conf
.define('HAVE_GSS_INQUIRE_SEC_CONTEXT_BY_OID', 1)
132 conf
.define('HAVE_GSSKRB5_EXTRACT_AUTHZ_DATA_FROM_SEC_CONTEXT', 1)
133 conf
.define('HAVE_GSSKRB5_GET_SUBKEY', 1)
134 conf
.define('HAVE_GSS_KRB5_EXPORT_LUCID_SEC_CONTEXT', 1)
135 conf
.define('HAVE_GSS_IMPORT_CRED', 1)
136 conf
.define('HAVE_GSS_EXPORT_CRED', 1)
137 conf
.define('HAVE_GSS_KRB5_CRED_NO_CI_FLAGS_X', 1)
138 conf
.define('HAVE_GSSAPI', 1)
139 conf
.define('HAVE_ADDR_TYPE_IN_KRB5_ADDRESS', 1)
140 conf
.define('HAVE_CHECKSUM_IN_KRB5_CHECKSUM', 1)
141 conf
.define('HAVE_DECL_KRB5_AUTH_CON_SET_REQ_CKSUMTYPE', 0)
142 conf
.define('HAVE_DECL_KRB5_GET_CREDENTIALS_FOR_USER', 0)
143 conf
.define('HAVE_E_DATA_POINTER_IN_KRB5_ERROR', 1)
144 conf
.define('HAVE_INITIALIZE_KRB5_ERROR_TABLE', 1)
145 conf
.define('HAVE_KRB5_ADDRESSES', 1)
146 conf
.define('HAVE_KRB5_AUTH_CON_SETKEY', 1)
147 conf
.define('HAVE_KRB5_CC_GET_LIFETIME', 1)
148 conf
.define('HAVE_KRB5_CC_COPY_CACHE', 1)
149 conf
.define('HAVE_KRB5_CREATE_CHECKSUM', 1)
150 conf
.define('HAVE_KRB5_CRYPTO', 1)
151 conf
.define('HAVE_KRB5_CRYPTO_DESTROY', 1)
152 conf
.define('HAVE_KRB5_CRYPTO_INIT', 1)
153 conf
.define('HAVE_KRB5_C_VERIFY_CHECKSUM', 1)
154 conf
.define('HAVE_KRB5_ENCTYPE_TO_STRING', 1)
155 conf
.define('HAVE_KRB5_ENCTYPE_TO_STRING_WITH_KRB5_CONTEXT_ARG', 1)
156 conf
.define('HAVE_KRB5_FREE_ERROR_CONTENTS', 1)
157 conf
.define('HAVE_KRB5_FREE_UNPARSED_NAME', 1)
158 conf
.define('HAVE_KRB5_FREE_HOST_REALM', 1)
159 conf
.define('HAVE_KRB5_FWD_TGT_CREDS', 1)
160 conf
.define('HAVE_KRB5_GET_CREDS', 1)
161 conf
.define('HAVE_KRB5_GET_CREDS_OPT_ALLOC', 1)
162 conf
.define('HAVE_KRB5_GET_CREDS_OPT_SET_IMPERSONATE', 1)
163 conf
.define('HAVE_KRB5_GET_DEFAULT_IN_TKT_ETYPES', 1)
164 conf
.define('HAVE_KRB5_GET_HOST_REALM', 1)
165 conf
.define('HAVE_KRB5_GET_INIT_CREDS_OPT_ALLOC', 1)
166 conf
.define('HAVE_KRB5_GET_INIT_CREDS_OPT_FREE', 1)
167 conf
.define('HAVE_KRB5_GET_INIT_CREDS_OPT_GET_ERROR', 1)
168 conf
.define('HAVE_KRB5_GET_INIT_CREDS_OPT_SET_PAC_REQUEST', 1)
169 conf
.define('HAVE_KRB5_GET_INIT_CREDS_KEYBLOCK', 1)
170 conf
.define('HAVE_KRB5_GET_PW_SALT', 1)
171 conf
.define('HAVE_KRB5_GET_RENEWED_CREDS', 1)
172 conf
.define('HAVE_KRB5_KEYBLOCK_KEYVALUE', 1)
173 conf
.define('HAVE_KRB5_KEYBLOCK_INIT', 1)
174 conf
.define('HAVE_KRB5_KEYTAB_ENTRY_KEYBLOCK', 1)
175 conf
.define('HAVE_KRB5_KRBHST_GET_ADDRINFO', 1)
176 conf
.define('HAVE_KRB5_KRBHST_INIT', 1)
177 conf
.define('HAVE_KRB5_KT_COMPARE', 1)
178 conf
.define('HAVE_KRB5_KT_FREE_ENTRY', 1)
179 conf
.define('HAVE_KRB5_KU_OTHER_CKSUM', 1)
180 conf
.define('HAVE_KRB5_LOCATE_PLUGIN_H', 1)
181 conf
.define('HAVE_KRB5_MK_REQ_EXTENDED', 1)
182 conf
.define('HAVE_KRB5_PRINCIPAL_COMPARE_ANY_REALM', 1)
183 conf
.define('HAVE_KRB5_PRINCIPAL_GET_COMP_STRING', 1)
184 conf
.define('HAVE_KRB5_PRINCIPAL_GET_REALM', 1)
185 conf
.define('HAVE_KRB5_MAKE_PRINCIPAL', 1)
186 conf
.define('HAVE_KRB5_REALM_TYPE', 1)
187 conf
.define('HAVE_KRB5_SET_DEFAULT_IN_TKT_ETYPES', 1)
188 conf
.define('HAVE_KRB5_SET_REAL_TIME', 1)
189 conf
.define('HAVE_KRB5_STRING_TO_KEY', 1)
190 conf
.define('HAVE_KRB5_STRING_TO_KEY_SALT', 1)
191 conf
.define('HAVE_FREE_CHECKSUM', 1)
192 conf
.define('HAVE_LIBKRB5', 1)
193 conf
.define('KRB5_CREDS_OPT_FREE_REQUIRES_CONTEXT', 1)
194 conf
.define('HAVE_ETYPE_IN_ENCRYPTEDDATA', 1)
195 conf
.define('KRB5_PRINC_REALM_RETURNS_REALM', 1)
196 conf
.define('HAVE_KRB5_PRINCIPAL_GET_REALM', 1)
197 conf
.define('HAVE_KRB5_H', 1)
198 conf
.define('HAVE_AP_OPTS_USE_SUBKEY', 1)
199 conf
.define('HAVE_ENCTYPE_ARCFOUR_HMAC_MD5', 1)
200 conf
.define('HAVE_ENCTYPE_ARCFOUR_HMAC_MD5_56', 1)
201 conf
.define('HAVE_ENCTYPE_ARCFOUR_HMAC', 1)
202 conf
.define('HAVE_KRB5_PDU_NONE_DECL', 1)
203 conf
.define('HAVE_ENCTYPE_AES128_CTS_HMAC_SHA1_96', 1)
204 conf
.define('HAVE_ENCTYPE_AES256_CTS_HMAC_SHA1_96', 1)
205 conf
.define('HAVE_KRB5_PRINCIPAL_GET_NUM_COMP', 1)
206 conf
.define('HAVE_GSSAPI_GSSAPI_SPNEGO_H', 1)
207 conf
.define('HAVE_FLAGS_IN_KRB5_CREDS', 1)
208 conf
.define('HAVE_KRB5_CONFIG_GET_BOOL_DEFAULT', 1)
209 conf
.define('HAVE_KRB5_DATA_COPY', 1)
210 conf
.define('HAVE_KRB5_PRINCIPAL_SET_REALM', 1)
211 conf
.define('HAVE_KRB5_PRINCIPAL_SET_TYPE', 1)
212 conf
.define('HAVE_KRB5_PRINCIPAL_GET_TYPE', 1)
213 conf
.define('HAVE_KRB5_WARNX', 1)
214 conf
.define('HAVE_KRB5_PROMPT_TYPE', 1)
216 if conf
.CONFIG_SET('USING_EMBEDDED_HEIMDAL'):
217 conf
.define('HAVE_KRB5_ADDLOG_FUNC_NEED_CONTEXT', 1)
218 conf
.define('HAVE_KRB5_CONST_PAC', 1)
219 conf
.define('KRB5_CONST_PAC_GET_BUFFER', 1)
223 conf
.CHECK_SIGN('time_t')