krb5: Import MIT 1.21.3 - src - FreeBSD source tree

diff options


context:
space:
mode:

author	Cy Schubert <cy@FreeBSD.org>	2025-03-19 22:12:25 +0000
committer	Cy Schubert <cy@FreeBSD.org>	2025-03-19 22:12:25 +0000
commit	8f7d3ef26dec89a92ec0665de84a5936310a5574 (patch)
tree	9a465418bd4056bf0d369751320a414eaed29fa4 /doc/html/build/options2configure.html
parent	1a79b20663ca26acc2998b90ea2ff2aefd8af5b1 (diff)

Diffstat (limited to 'doc/html/build/options2configure.html')

-rw-r--r--

doc/html/build/options2configure.html

513

1 files changed, 251 insertions, 262 deletions

diff --git a/doc/html/build/options2configure.html b/doc/html/build/options2configure.html
index b32b7fd6cc42..0acd915d80f0 100644
--- a/doc/html/build/options2configure.html
+++ b/doc/html/build/options2configure.html

@@ -1,35 +1,26 @@

-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"

- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

+<!DOCTYPE html>

-<html xmlns="http://www.w3.org/1999/xhtml">

+<html>

<head>

- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

+ <meta charset="utf-8" />

+ <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="generator" content="Docutils 0.17.1: http://docutils.sourceforge.net/" />

<title>Options to configure — MIT Kerberos Documentation</title>

- <link rel="stylesheet" href="../_static/agogo.css" type="text/css" />

- <link rel="stylesheet" href="../_static/pygments.css" type="text/css" />

- <link rel="stylesheet" href="../_static/kerb.css" type="text/css" />

- <script type="text/javascript">

- var DOCUMENTATION_OPTIONS = {

- URL_ROOT: '../',

- VERSION: '1.21.2',

- COLLAPSE_INDEX: false,

- FILE_SUFFIX: '.html',

- HAS_SOURCE: true,

- SOURCELINK_SUFFIX: '.txt'

- };

- </script>

- <script type="text/javascript" src="../_static/jquery.js"></script>

- <script type="text/javascript" src="../_static/underscore.js"></script>

- <script type="text/javascript" src="../_static/doctools.js"></script>

+ <link rel="stylesheet" type="text/css" href="../_static/pygments.css" />

+ <link rel="stylesheet" type="text/css" href="../_static/agogo.css" />

+ <link rel="stylesheet" type="text/css" href="../_static/kerb.css" />

+ <script data-url_root="../" id="documentation_options" src="../_static/documentation_options.js"></script>

+ <script src="../_static/jquery.js"></script>

+ <script src="../_static/underscore.js"></script>

+ <script src="../_static/doctools.js"></script>

- </head>

- <body>

+ </head><body>

@@ -61,295 +52,290 @@

- <div class="section" id="options-to-configure">

+ <section id="options-to-configure">

<h1>Options to configure<a class="headerlink" href="#options-to-configure" title="Permalink to this headline">¶</a></h1>

There are a number of options to configure which you can use to

control how the Kerberos distribution is built.

-<div class="section" id="most-commonly-used-options">

+<section id="most-commonly-used-options">

<h2>Most commonly used options<a class="headerlink" href="#most-commonly-used-options" title="Permalink to this headline">¶</a></h2>

-<dl class="docutils">

-<dt>--help</dt>

-<dd>Provides help to configure. This will list the set of commonly

-used options for building Kerberos.</dd>

-<dt>--prefix=PREFIX</dt>

-<dd>By default, Kerberos will install the package’s files rooted at

-<code class="docutils literal">/usr/local</code>. If you desire to place the binaries into the

-directory PREFIX, use this option.</dd>

-<dt>--exec-prefix=EXECPREFIX</dt>

-<dd>This option allows one to separate the architecture independent

+<dl>

+<dt>--help</dt><dd>Provides help to configure. This will list the set of commonly

+used options for building Kerberos.

+</dd>

+<dt>--prefix=PREFIX</dt><dd>By default, Kerberos will install the package’s files rooted at

+<code class="docutils literal notranslate">/usr/local</code>. If you desire to place the binaries into the

+directory PREFIX, use this option.

+</dd>

+<dt>--exec-prefix=EXECPREFIX</dt><dd>This option allows one to separate the architecture independent

programs from the host-dependent files (configuration files,

manual pages). Use this option to install architecture-dependent

programs in EXECPREFIX. The default location is the value of

-specified by --prefix option.</dd>

-<dt>--localstatedir=LOCALSTATEDIR</dt>

-<dd>This option sets the directory for locally modifiable

+specified by --prefix option.

+</dd>

+<dt>--localstatedir=LOCALSTATEDIR</dt><dd>This option sets the directory for locally modifiable

single-machine data. In Kerberos, this mostly is useful for

setting a location for the KDC data files, as they will be

-installed in <code class="docutils literal">LOCALSTATEDIR/krb5kdc</code>, which is by default

-<code class="docutils literal">PREFIX/var/krb5kdc</code>.</dd>

-<dt>--with-netlib[=libs]</dt>

-<dd>Allows for suppression of or replacement of network libraries. By

-default, Kerberos V5 configuration will look for <code class="docutils literal">-lnsl</code> and

-<code class="docutils literal">-lsocket</code>. If your operating system has a broken resolver

-library or fails to pass the tests in <code class="docutils literal">src/tests/resolv</code>, you

-will need to use this option.</dd>

-<dt>--enable-dns-for-realm</dt>

-<dd>Enable the use of DNS to look up a host’s Kerberos realm,

+installed in <code class="docutils literal notranslate">LOCALSTATEDIR/krb5kdc</code>, which is by default

+<code class="docutils literal notranslate">PREFIX/var/krb5kdc</code>.

+</dd>

+<dt>--with-netlib[=libs]</dt><dd>Allows for suppression of or replacement of network libraries. By

+default, Kerberos V5 configuration will look for <code class="docutils literal notranslate">-lnsl</code> and

+<code class="docutils literal notranslate">-lsocket</code>. If your operating system has a broken resolver

+library or fails to pass the tests in <code class="docutils literal notranslate">src/tests/resolv</code>, you

+will need to use this option.

+</dd>

+<dt>--enable-dns-for-realm</dt><dd>Enable the use of DNS to look up a host’s Kerberos realm,

if the information is not provided in

<a class="reference internal" href="../admin/conf_files/krb5_conf.html#krb5-conf-5">krb5.conf</a>. See <a class="reference internal" href="../admin/realm_config.html#mapping-hostnames">Mapping hostnames onto Kerberos realms</a>

for information about using DNS to determine the default realm.

-DNS lookups for realm names are disabled by default.</dd>

-<dt>--with-system-et</dt>

-<dd>Use an installed version of the error-table (et) support software,

+DNS lookups for realm names are disabled by default.

+</dd>

+<dt>--with-system-et</dt><dd>Use an installed version of the error-table (et) support software,

the compile_et program, the com_err.h header file and the com_err

library. If these are not in the default locations, you may wish

-to specify <code class="docutils literal">CPPFLAGS=-I/some/dir</code> and

-<code class="docutils literal">LDFLAGS=-L/some/other/dir</code> options at configuration time as

+to specify <code class="docutils literal notranslate">CPPFLAGS=-I/some/dir</code> and

+<code class="docutils literal notranslate">LDFLAGS=-L/some/other/dir</code> options at configuration time as

well.

-If this option is not given, a version supplied with the Kerberos

+If this option is not given, a version supplied with the Kerberos

sources will be built and installed along with the rest of the

Kerberos tree, for Kerberos applications to link against.

</dd>

-<dt>--with-system-ss</dt>

-<dd>Use an installed version of the subsystem command-line interface

-software, the mk_cmds program, the <code class="docutils literal">ss/ss.h</code> header file and the

+<dt>--with-system-ss</dt><dd>Use an installed version of the subsystem command-line interface

+software, the mk_cmds program, the <code class="docutils literal notranslate">ss/ss.h</code> header file and the

ss library. If these are not in the default locations, you may

-wish to specify <code class="docutils literal">CPPFLAGS=-I/some/dir</code> and

-<code class="docutils literal">LDFLAGS=-L/some/other/dir</code> options at configuration time as

+wish to specify <code class="docutils literal notranslate">CPPFLAGS=-I/some/dir</code> and

+<code class="docutils literal notranslate">LDFLAGS=-L/some/other/dir</code> options at configuration time as

well. See also the SS_LIB option.

-If this option is not given, the ss library supplied with the

+If this option is not given, the ss library supplied with the

Kerberos sources will be compiled and linked into those programs

that need it; it will not be installed separately.

</dd>

-<dt>--with-system-db</dt>

-<dd>Use an installed version of the Berkeley DB package, which must

+<dt>--with-system-db</dt><dd>Use an installed version of the Berkeley DB package, which must

provide an API compatible with version 1.85. This option is

unsupported and untested. In particular, we do not know if the

database-rename code used in the dumpfile load operation will

behave properly.

-If this option is not given, a version supplied with the Kerberos

+If this option is not given, a version supplied with the Kerberos

sources will be built and installed. (We are not updating this

version at this time because of licensing issues with newer

versions that we haven’t investigated sufficiently yet.)

</dd>

</dl>

-</div>

-<div class="section" id="environment-variables">

+</section>

+<section id="environment-variables">

<h2>Environment variables<a class="headerlink" href="#environment-variables" title="Permalink to this headline">¶</a></h2>

-<dl class="docutils">

-<dt>CC=COMPILER</dt>

-<dd>Use COMPILER as the C compiler.</dd>

-<dt>CFLAGS=FLAGS</dt>

-<dd>Use FLAGS as the default set of C compiler flags.</dd>

-<dt>CPP=CPP</dt>

-<dd>C preprocessor to use. (e.g., <code class="docutils literal">CPP='gcc -E'</code>)</dd>

-<dt>CPPFLAGS=CPPOPTS</dt>

-<dd>Use CPPOPTS as the default set of C preprocessor flags. The

+<dl>

+<dt>CC=COMPILER</dt><dd>Use COMPILER as the C compiler.

+</dd>

+<dt>CFLAGS=FLAGS</dt><dd>Use FLAGS as the default set of C compiler flags.

+</dd>

+<dt>CPP=CPP</dt><dd>C preprocessor to use. (e.g., <code class="docutils literal notranslate">CPP='gcc -E'</code>)

+</dd>

+<dt>CPPFLAGS=CPPOPTS</dt><dd>Use CPPOPTS as the default set of C preprocessor flags. The

most common use of this option is to select certain #define’s for

-use with the operating system’s include files.</dd>

-<dt>DB_HEADER=headername</dt>

-<dd>If db.h is not the correct header file to include to compile

+use with the operating system’s include files.

+</dd>

+<dt>DB_HEADER=headername</dt><dd>If db.h is not the correct header file to include to compile

against the Berkeley DB 1.85 API, specify the correct header file

-name with this option. For example, <code class="docutils literal">DB_HEADER=db3/db_185.h</code>.</dd>

-<dt>DB_LIB=libs…</dt>

-<dd>If <code class="docutils literal">-ldb</code> is not the correct library specification for the

+name with this option. For example, <code class="docutils literal notranslate">DB_HEADER=db3/db_185.h</code>.

+</dd>

+<dt>DB_LIB=libs…</dt><dd>If <code class="docutils literal notranslate">-ldb</code> is not the correct library specification for the

Berkeley DB library version to be used, override it with this

-option. For example, <code class="docutils literal">DB_LIB=-ldb-3.3</code>.</dd>

-<dt>DEFCCNAME=ccachename</dt>

-<dd>Override the built-in default credential cache name.

-For example, <code class="docutils literal">DEFCCNAME=DIR:/var/run/user/%{USERID}/ccache</code>

+option. For example, <code class="docutils literal notranslate">DB_LIB=-ldb-3.3</code>.

+</dd>

+<dt>DEFCCNAME=ccachename</dt><dd>Override the built-in default credential cache name.

+For example, <code class="docutils literal notranslate">DEFCCNAME=DIR:/var/run/user/%{USERID}/ccache</code>

See <a class="reference internal" href="../admin/conf_files/krb5_conf.html#parameter-expansion">Parameter expansion</a> for information about supported

-parameter expansions.</dd>

-<dt>DEFCKTNAME=keytabname</dt>

-<dd>Override the built-in default client keytab name.

-The format is the same as for DEFCCNAME.</dd>

-<dt>DEFKTNAME=keytabname</dt>

-<dd>Override the built-in default keytab name.

-The format is the same as for DEFCCNAME.</dd>

-<dt>LD=LINKER</dt>

-<dd>Use LINKER as the default loader if it should be different from

-C compiler as specified above.</dd>

-<dt>LDFLAGS=LDOPTS</dt>

-<dd>This option informs the linker where to get additional libraries

-(e.g., <code class="docutils literal">-L<lib dir></code>).</dd>

-<dt>LIBS=LDNAME</dt>

-<dd>This option allows one to specify libraries to be passed to the

-linker (e.g., <code class="docutils literal">-l<library></code>)</dd>

-<dt>PKCS11_MODNAME=library</dt>

-<dd>Override the built-in default PKCS11 library name.</dd>

-<dt>SS_LIB=libs…</dt>

-<dd>If <code class="docutils literal">-lss</code> is not the correct way to link in your installed ss

+parameter expansions.

+</dd>

+<dt>DEFCKTNAME=keytabname</dt><dd>Override the built-in default client keytab name.

+The format is the same as for DEFCCNAME.

+</dd>

+<dt>DEFKTNAME=keytabname</dt><dd>Override the built-in default keytab name.

+The format is the same as for DEFCCNAME.

+</dd>

+<dt>LD=LINKER</dt><dd>Use LINKER as the default loader if it should be different from

+C compiler as specified above.

+</dd>

+<dt>LDFLAGS=LDOPTS</dt><dd>This option informs the linker where to get additional libraries

+(e.g., <code class="docutils literal notranslate">-L<lib dir></code>).

+</dd>

+<dt>LIBS=LDNAME</dt><dd>This option allows one to specify libraries to be passed to the

+linker (e.g., <code class="docutils literal notranslate">-l<library></code>)

+</dd>

+<dt>PKCS11_MODNAME=library</dt><dd>Override the built-in default PKCS11 library name.

+</dd>

+<dt>SS_LIB=libs…</dt><dd>If <code class="docutils literal notranslate">-lss</code> is not the correct way to link in your installed ss

library, for example if additional support libraries are needed,

specify the correct link options here. Some variants of this

library are around which allow for Emacs-like line editing, but

different versions require different support libraries to be

explicitly specified.

-This option is ignored if --with-system-ss is not specified.

+This option is ignored if --with-system-ss is not specified.

</dd>

-<dt>YACC</dt>

-<dd>The ‘Yet Another C Compiler’ implementation to use. Defaults to

+<dt>YACC</dt><dd>The ‘Yet Another C Compiler’ implementation to use. Defaults to

the first program found out of: ‘<cite>bison -y</cite>’, ‘<cite>byacc</cite>’,

-‘<cite>yacc</cite>’.</dd>

-<dt>YFLAGS</dt>

-<dd>The list of arguments that will be passed by default to $YACC.

+‘<cite>yacc</cite>’.

+</dd>

+<dt>YFLAGS</dt><dd>The list of arguments that will be passed by default to $YACC.

This script will default YFLAGS to the empty string to avoid a

-default value of <code class="docutils literal">-d</code> given by some make applications.</dd>

+default value of <code class="docutils literal notranslate">-d</code> given by some make applications.

+</dd>

</dl>

-</div>

-<div class="section" id="fine-tuning-of-the-installation-directories">

+</section>

+<section id="fine-tuning-of-the-installation-directories">

<h2>Fine tuning of the installation directories<a class="headerlink" href="#fine-tuning-of-the-installation-directories" title="Permalink to this headline">¶</a></h2>

-<dl class="docutils">

-<dt>--bindir=DIR</dt>

-<dd>User executables. Defaults to <code class="docutils literal">EXECPREFIX/bin</code>, where

+<dl class="simple">

+<dt>--bindir=DIR</dt><dd>User executables. Defaults to <code class="docutils literal notranslate">EXECPREFIX/bin</code>, where

EXECPREFIX is the path specified by --exec-prefix

-configuration option.</dd>

-<dt>--sbindir=DIR</dt>

-<dd>System admin executables. Defaults to <code class="docutils literal">EXECPREFIX/sbin</code>, where

+configuration option.

+</dd>

+<dt>--sbindir=DIR</dt><dd>System admin executables. Defaults to <code class="docutils literal notranslate">EXECPREFIX/sbin</code>, where

EXECPREFIX is the path specified by --exec-prefix

-configuration option.</dd>

-<dt>--sysconfdir=DIR</dt>

-<dd>Read-only single-machine data such as krb5.conf.

-Defaults to <code class="docutils literal">PREFIX/etc</code>, where

+configuration option.

+</dd>

+<dt>--sysconfdir=DIR</dt><dd>Read-only single-machine data such as krb5.conf.

+Defaults to <code class="docutils literal notranslate">PREFIX/etc</code>, where

PREFIX is the path specified by --prefix configuration

-option.</dd>

-<dt>--libdir=DIR</dt>

-<dd>Object code libraries. Defaults to <code class="docutils literal">EXECPREFIX/lib</code>, where

+option.

+</dd>

+<dt>--libdir=DIR</dt><dd>Object code libraries. Defaults to <code class="docutils literal notranslate">EXECPREFIX/lib</code>, where

EXECPREFIX is the path specified by --exec-prefix

-configuration option.</dd>

-<dt>--includedir=DIR</dt>

-<dd>C header files. Defaults to <code class="docutils literal">PREFIX/include</code>, where PREFIX is

-the path specified by --prefix configuration option.</dd>

-<dt>--datarootdir=DATAROOTDIR</dt>

-<dd>Read-only architecture-independent data root. Defaults to

-<code class="docutils literal">PREFIX/share</code>, where PREFIX is the path specified by

---prefix configuration option.</dd>

-<dt>--datadir=DIR</dt>

-<dd>Read-only architecture-independent data. Defaults to path

-specified by --datarootdir configuration option.</dd>

-<dt>--localedir=DIR</dt>

-<dd>Locale-dependent data. Defaults to <code class="docutils literal">DATAROOTDIR/locale</code>, where

+configuration option.

+</dd>

+<dt>--includedir=DIR</dt><dd>C header files. Defaults to <code class="docutils literal notranslate">PREFIX/include</code>, where PREFIX is

+the path specified by --prefix configuration option.

+</dd>

+<dt>--datarootdir=DATAROOTDIR</dt><dd>Read-only architecture-independent data root. Defaults to

+<code class="docutils literal notranslate">PREFIX/share</code>, where PREFIX is the path specified by

+--prefix configuration option.

+</dd>

+<dt>--datadir=DIR</dt><dd>Read-only architecture-independent data. Defaults to path

+specified by --datarootdir configuration option.

+</dd>

+<dt>--localedir=DIR</dt><dd>Locale-dependent data. Defaults to <code class="docutils literal notranslate">DATAROOTDIR/locale</code>, where

DATAROOTDIR is the path specified by --datarootdir

-configuration option.</dd>

-<dt>--mandir=DIR</dt>

-<dd>Man documentation. Defaults to <code class="docutils literal">DATAROOTDIR/man</code>, where

+configuration option.

+</dd>

+<dt>--mandir=DIR</dt><dd>Man documentation. Defaults to <code class="docutils literal notranslate">DATAROOTDIR/man</code>, where

DATAROOTDIR is the path specified by --datarootdir

-configuration option.</dd>

+configuration option.

+</dd>

</dl>

-</div>

-<div class="section" id="program-names">

+</section>

+<section id="program-names">

<h2>Program names<a class="headerlink" href="#program-names" title="Permalink to this headline">¶</a></h2>

-<dl class="docutils">

-<dt>--program-prefix=PREFIX</dt>

-<dd>Prepend PREFIX to the names of the programs when installing

-them. For example, specifying <code class="docutils literal">--program-prefix=mit-</code> at the

-configure time will cause the program named <code class="docutils literal">abc</code> to be

-installed as <code class="docutils literal">mit-abc</code>.</dd>

-<dt>--program-suffix=SUFFIX</dt>

-<dd>Append SUFFIX to the names of the programs when installing them.

-For example, specifying <code class="docutils literal">--program-suffix=-mit</code> at the configure

-time will cause the program named <code class="docutils literal">abc</code> to be installed as

-<code class="docutils literal">abc-mit</code>.</dd>

-<dt>--program-transform-name=PROGRAM</dt>

-<dd>Run <code class="docutils literal">sed -e PROGRAM</code> on installed program names. (PROGRAM is a

-sed script).</dd>

+<dl class="simple">

+<dt>--program-prefix=PREFIX</dt><dd>Prepend PREFIX to the names of the programs when installing

+them. For example, specifying <code class="docutils literal notranslate">--program-prefix=mit-</code> at the

+configure time will cause the program named <code class="docutils literal notranslate">abc</code> to be

+installed as <code class="docutils literal notranslate">mit-abc</code>.

+</dd>

+<dt>--program-suffix=SUFFIX</dt><dd>Append SUFFIX to the names of the programs when installing them.

+For example, specifying <code class="docutils literal notranslate">--program-suffix=-mit</code> at the configure

+time will cause the program named <code class="docutils literal notranslate">abc</code> to be installed as

+<code class="docutils literal notranslate">abc-mit</code>.

+</dd>

+<dt>--program-transform-name=PROGRAM</dt><dd>Run <code class="docutils literal notranslate">sed -e PROGRAM</code> on installed program names. (PROGRAM is a

+sed script).

+</dd>

</dl>

-</div>

-<div class="section" id="system-types">

+</section>

+<section id="system-types">

<h2>System types<a class="headerlink" href="#system-types" title="Permalink to this headline">¶</a></h2>

-<dl class="docutils">

-<dt>--build=BUILD</dt>

-<dd>Configure for building on BUILD

-(e.g., <code class="docutils literal">--build=x86_64-linux-gnu</code>).</dd>

-<dt>--host=HOST</dt>

-<dd>Cross-compile to build programs to run on HOST

-(e.g., <code class="docutils literal">--host=x86_64-linux-gnu</code>). By default, Kerberos V5

-configuration will look for “build” option.</dd>

+<dl class="simple">

+<dt>--build=BUILD</dt><dd>Configure for building on BUILD

+(e.g., <code class="docutils literal notranslate">--build=x86_64-linux-gnu</code>).

+</dd>

+<dt>--host=HOST</dt><dd>Cross-compile to build programs to run on HOST

+(e.g., <code class="docutils literal notranslate">--host=x86_64-linux-gnu</code>). By default, Kerberos V5

+configuration will look for “build” option.

+</dd>

</dl>

-</div>

-<div class="section" id="optional-features">

+</section>

+<section id="optional-features">

<h2>Optional features<a class="headerlink" href="#optional-features" title="Permalink to this headline">¶</a></h2>

-<dl class="docutils">

-<dt>--disable-option-checking</dt>

-<dd>Ignore unrecognized –enable/–with options.</dd>

-<dt>--disable-FEATURE</dt>

-<dd>Do not include FEATURE (same as –enable-FEATURE=no).</dd>

-<dt>--enable-FEATURE[=ARG]</dt>

-<dd>Include FEATURE [ARG=yes].</dd>

-<dt>--enable-maintainer-mode</dt>

-<dd>Enable rebuilding of source files, Makefiles, etc.</dd>

-<dt>--disable-delayed-initialization</dt>

-<dd>Initialize library code when loaded. Defaults to delay until

-first use.</dd>

-<dt>--disable-thread-support</dt>

-<dd>Don’t enable thread support. Defaults to enabled.</dd>

-<dt>--disable-rpath</dt>

-<dd>Suppress run path flags in link lines.</dd>

-<dt>--enable-athena</dt>

-<dd>Build with MIT Project Athena configuration.</dd>

-<dt>--disable-kdc-lookaside-cache</dt>

-<dd>Disable the cache which detects client retransmits.</dd>

-<dt>--disable-pkinit</dt>

-<dd>Disable PKINIT plugin support.</dd>

-<dt>--disable-aesni</dt>

-<dd>Disable support for using AES instructions on x86 platforms.</dd>

-<dt>--enable-asan[=ARG]</dt>

-<dd>Enable building with asan memory error checking. If ARG is

+<dl class="simple">

+<dt>--disable-option-checking</dt><dd>Ignore unrecognized –enable/–with options.

+</dd>

+<dt>--disable-FEATURE</dt><dd>Do not include FEATURE (same as –enable-FEATURE=no).

+</dd>

+<dt>--enable-FEATURE[=ARG]</dt><dd>Include FEATURE [ARG=yes].

+</dd>

+<dt>--enable-maintainer-mode</dt><dd>Enable rebuilding of source files, Makefiles, etc.

+</dd>

+<dt>--disable-delayed-initialization</dt><dd>Initialize library code when loaded. Defaults to delay until

+first use.

+</dd>

+<dt>--disable-thread-support</dt><dd>Don’t enable thread support. Defaults to enabled.

+</dd>

+<dt>--disable-rpath</dt><dd>Suppress run path flags in link lines.

+</dd>

+<dt>--enable-athena</dt><dd>Build with MIT Project Athena configuration.

+</dd>

+<dt>--disable-kdc-lookaside-cache</dt><dd>Disable the cache which detects client retransmits.

+</dd>

+<dt>--disable-pkinit</dt><dd>Disable PKINIT plugin support.

+</dd>

+<dt>--disable-aesni</dt><dd>Disable support for using AES instructions on x86 platforms.

+</dd>

+<dt>--enable-asan[=ARG]</dt><dd>Enable building with asan memory error checking. If ARG is

given, it controls the -fsanitize compilation flag value (the

-default is “address”).</dd>

+default is “address”).

+</dd>

</dl>

-</div>

-<div class="section" id="optional-packages">

+</section>

+<section id="optional-packages">

<h2>Optional packages<a class="headerlink" href="#optional-packages" title="Permalink to this headline">¶</a></h2>

-<dl class="docutils">

-<dt>--with-PACKAGE[=ARG]</dt>

-<dd>Use PACKAGE (e.g., <code class="docutils literal">--with-imap</code>). The default value of ARG

-is <code class="docutils literal">yes</code>.</dd>

-<dt>--without-PACKAGE</dt>

-<dd>Do not use PACKAGE (same as <code class="docutils literal">--with-PACKAGE=no</code>)

-(e.g., <code class="docutils literal">--without-libedit</code>).</dd>

-<dt>--with-size-optimizations</dt>

-<dd>Enable a few optimizations to reduce code size possibly at some

-run-time cost.</dd>

-<dt>--with-system-et</dt>

-<dd>Use the com_err library and compile_et utility that are already

+<dl>

+<dt>--with-PACKAGE[=ARG]</dt><dd>Use PACKAGE (e.g., <code class="docutils literal notranslate">--with-imap</code>). The default value of ARG

+is <code class="docutils literal notranslate">yes</code>.

+</dd>

+<dt>--without-PACKAGE</dt><dd>Do not use PACKAGE (same as <code class="docutils literal notranslate">--with-PACKAGE=no</code>)

+(e.g., <code class="docutils literal notranslate">--without-libedit</code>).

+</dd>

+<dt>--with-size-optimizations</dt><dd>Enable a few optimizations to reduce code size possibly at some

+run-time cost.

+</dd>

+<dt>--with-system-et</dt><dd>Use the com_err library and compile_et utility that are already

installed on the system, instead of building and installing

-local versions.</dd>

-<dt>--with-system-ss</dt>

-<dd>Use the ss library and mk_cmds utility that are already installed

-on the system, instead of building and using private versions.</dd>

-<dt>--with-system-db</dt>

-<dd>Use the berkeley db utility already installed on the system,

+local versions.

+</dd>

+<dt>--with-system-ss</dt><dd>Use the ss library and mk_cmds utility that are already installed

+on the system, instead of building and using private versions.

+</dd>

+<dt>--with-system-db</dt><dd>Use the berkeley db utility already installed on the system,

instead of using a private version. This option is not

recommended; enabling it may result in incompatibility with key

-databases originating on other systems.</dd>

-<dt>--with-netlib=LIBS</dt>

-<dd>Use the resolver library specified in LIBS. Use this variable

-if the C library resolver is insufficient or broken.</dd>

-<dt>--with-hesiod=path</dt>

-<dd>Compile with Hesiod support. The path points to the Hesiod

-directory. By default Hesiod is unsupported.</dd>

-<dt>--with-ldap</dt>

-<dd>Compile OpenLDAP database backend module.</dd>

-<dt>--with-lmdb</dt>

-<dd>Compile LMDB database backend module.</dd>

-<dt>--with-vague-errors</dt>

-<dd>Do not send helpful errors to client. For example, if the KDC

-should return only vague error codes to clients.</dd>

-<dt>--with-crypto-impl=IMPL</dt>

-<dd>Use specified crypto implementation (e.g., --with-crypto-impl=openssl). The default is the native MIT

-Kerberos implementation <code class="docutils literal">builtin</code>. The other currently

-implemented crypto backend is <code class="docutils literal">openssl</code>. (See

-<a class="reference internal" href="../mitK5features.html#mitk5features">MIT Kerberos features</a>)</dd>

-<dt>--without-libedit</dt>

-<dd>Do not compile and link against libedit. Some utilities will no

+databases originating on other systems.

+</dd>

+<dt>--with-netlib=LIBS</dt><dd>Use the resolver library specified in LIBS. Use this variable

+if the C library resolver is insufficient or broken.

+</dd>

+<dt>--with-hesiod=path</dt><dd>Compile with Hesiod support. The path points to the Hesiod

+directory. By default Hesiod is unsupported.

+</dd>

+<dt>--with-ldap</dt><dd>Compile OpenLDAP database backend module.

+</dd>

+<dt>--with-lmdb</dt><dd>Compile LMDB database backend module.

+</dd>

+<dt>--with-vague-errors</dt><dd>Do not send helpful errors to client. For example, if the KDC

+should return only vague error codes to clients.

+</dd>

+<dt>--with-crypto-impl=IMPL</dt><dd>Use specified crypto implementation (e.g., --with-crypto-impl=openssl). The default is the native MIT

+Kerberos implementation <code class="docutils literal notranslate">builtin</code>. The other currently

+implemented crypto backend is <code class="docutils literal notranslate">openssl</code>. (See

+<a class="reference internal" href="../mitK5features.html#mitk5features">MIT Kerberos features</a>)

+</dd>

+<dt>--without-libedit</dt><dd>Do not compile and link against libedit. Some utilities will no

longer offer command history or completion in interactive mode if

-libedit is disabled.</dd>

-<dt>--with-readline</dt>

-<dd>Compile and link against GNU readline, as an alternative to libedit.</dd>

-<dt>--with-system-verto</dt>

-<dd>Use an installed version of libverto. If the libverto header and

+libedit is disabled.

+</dd>

+<dt>--with-readline</dt><dd>Compile and link against GNU readline, as an alternative to libedit.

+</dd>

+<dt>--with-system-verto</dt><dd>Use an installed version of libverto. If the libverto header and

library are not in default locations, you may wish to specify

-<code class="docutils literal">CPPFLAGS=-I/some/dir</code> and <code class="docutils literal">LDFLAGS=-L/some/other/dir</code> options

+<code class="docutils literal notranslate">CPPFLAGS=-I/some/dir</code> and <code class="docutils literal notranslate">LDFLAGS=-L/some/other/dir</code> options

at configuration time as well.

If this option is not given, the build system will try to detect

an installed version of libverto and use it if it is found.

@@ -358,47 +344,49 @@ built and installed. The built-in version does not contain the

full set of back-end modules and is not a suitable general

replacement for the upstream version, but will work for the

purposes of Kerberos.

-Specifying --without-system-verto will cause the built-in

+Specifying --without-system-verto will cause the built-in

version of libverto to be used unconditionally.

</dd>

-<dt>--with-krb5-config=PATH</dt>

-<dd>Use the krb5-config program at PATH to obtain the build-time

+<dt>--with-krb5-config=PATH</dt><dd>Use the krb5-config program at PATH to obtain the build-time

default credential cache, keytab, and client keytab names. The

-default is to use <code class="docutils literal">krb5-config</code> from the program path. Specify

-<code class="docutils literal">--without-krb5-config</code> to disable the use of krb5-config and

-use the usual built-in defaults.</dd>

-<dt>--without-keyutils</dt>

-<dd>Build without libkeyutils support. This disables the KEYRING

-credential cache type.</dd>

+default is to use <code class="docutils literal notranslate">krb5-config</code> from the program path. Specify

+<code class="docutils literal notranslate">--without-krb5-config</code> to disable the use of krb5-config and

+use the usual built-in defaults.

+</dd>

+<dt>--without-keyutils</dt><dd>Build without libkeyutils support. This disables the KEYRING

+credential cache type.

+</dd>

</dl>

-</div>

-<div class="section" id="examples">

+</section>

+<section id="examples">

<h2>Examples<a class="headerlink" href="#examples" title="Permalink to this headline">¶</a></h2>

For example, in order to configure Kerberos on a Solaris machine using

the suncc compiler with the optimizer turned on, run the configure

script with the following options:

-<div class="highlight-default"><div class="highlight"><pre>% ./configure CC=suncc CFLAGS=-O

+<div class="highlight-default notranslate"><div class="highlight"><pre>% ./configure CC=suncc CFLAGS=-O

</pre></div>

</div>

For a slightly more complicated example, consider a system where

several packages to be used by Kerberos are installed in

-<code class="docutils literal">/usr/foobar</code>, including Berkeley DB 3.3, and an ss library that

+<code class="docutils literal notranslate">/usr/foobar</code>, including Berkeley DB 3.3, and an ss library that

needs to link against the curses library. The configuration of

Kerberos might be done thus:

-<div class="highlight-default"><div class="highlight"><pre>./configure CPPFLAGS=-I/usr/foobar/include LDFLAGS=-L/usr/foobar/lib \

+<div class="highlight-default notranslate"><div class="highlight"><pre>./configure CPPFLAGS=-I/usr/foobar/include LDFLAGS=-L/usr/foobar/lib \

--with-system-et --with-system-ss --with-system-db \

SS_LIB='-lss -lcurses' DB_HEADER=db3/db_185.h DB_LIB=-ldb-3.3

</pre></div>

</div>

-</div>

+</section>

+ <div class="clearer"></div>

</div>

<ul>

<li><a class="reference internal" href="#">Options to configure</a><ul>

@@ -445,6 +433,7 @@ Kerberos might be done thus:

</form>

</div>

</div>

@@ -452,8 +441,8 @@ Kerberos might be done thus:

- <div class="right" >Release: 1.21.2

+ <div class="right" >Release: 1.21.3

</div>