[OpenAFS] Re: 1.6.2 compilation notes, Sol10

[Russ Allbery]

I should also note that RRA_LIB_KRB5 and, for that matter, krb5-config
only guarantee to provide access to the krb5 API.  The reason why OpenAFS
has these problems is because OpenAFS uses functions that are not part of
the krb5 API and are provided by other libraries in both MIT Kerberos and
in Heimdal.  So the fully correct thing to do here would be for OpenAFS to
*separately* probe for the exact libraries that it needs:

    RRA_LIB_KRB5_SWITCH
    openafs_save_LIBS=$LIBS
    LIBS=
    AC_SEARCH_LIBS([some_crypto_function], [krb5crypto hcrypto])
    dnl ...
    KRB5_LIBS="$KRB5_LIBS $LIBS"
    LIBS=$openafs_save_LIBS
    RRA_LIB_KRB5_RESTORE

where you probe for the extra functions that are not part of the krb5 API
to determine what additional libraries you need and then explicitly add
them to the Kerberos libraries against which you link, regardless of what
krb5-config returns.  This would be robust against future changes to
krb5-config.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>