[OpenAFS] Missing asetkey

[Marcus Watts]

> Karen L Eldredge wrote:
> > *If we configure and pass the --with-krb5 flag then we get the following
> > errors in the configure log:*
> > 
> >  configure:17607: checking for krb524_convert_creds_kdc
> > ld: 0711-317 ERROR: Undefined symbol: krb524_convert_creds_kdc
> > |     which can conflict with char krb524_convert_creds_kdc (); below.
> > | char krb524_convert_creds_kdc ();
> > | #if defined (__stub_krb524_convert_creds_kdc) || defined
> > (__stub___krb524_convert_creds_kdc)
> > | char (*f) () = krb524_convert_creds_kdc;
> > | return f != krb524_convert_creds_kdc;
> > configure:17685: checking for krb524_convert_creds_kdc in -lkrb524
> > configure:17716: cc -o conftest -g -O2    conftest.c -lkrb524    >&5
> > ld: 0706-006 Cannot find or open library file: -l krb524
> > | char krb524_convert_creds_kdc ();
> > | krb524_convert_creds_kdc ();
> > ac_cv_func_krb524_convert_creds_kdc=no
> > ac_cv_lib_krb524_krb524_convert_creds_kdc=no
> 
> In other words, the Kerberos that IBM ships with AIX is old or contains
> no Kerberos v4 conversion functionality.  If you want to have an aklog
> that can produce tokens that work with AFS servers older than OpenAFS
> 1.2.8, you will have to build MIT or Heimdal Kerberos.
> 
> If you do not care, then the code can be patched.

Here's a patch that might be of interest:
/afs/umich.edu/group/itd/build/mdw/openafs/patches/openafs-1.4.4-aklogk5.diff

This will patch aklog & a few configuration bits to make an aklog that
will work without 524.  As Jeff says, without 524 this will not work with
old afs servers.  This patch also adds in a copy of klog(.k5) similar
to that in cvs head.  If you don't have fakeka but want klog, then
you want this, otherwise you won't care.  I built this with MIT 1.5;
it will need some configuration fiddling to work with heimdal.

				-Marcus Watts