AC_CHECK_LIB($gssapi_lib, krb5int_derive_key,
[HAVE_KRB5INT_DERIVE_KEY=1; AC_DEFINE(HAVE_KRB5INT_DERIVE_KEY, 1, [Define this if the function krb5int_derive_key is available])], ,$KRBLIBS)
+ dnl Version 1.15 introduced aes-sha2 support, which changes the
+ dnl number of paramters of function krb5int_derive_key.
+ if test $K5VERS -ge 1150; then
+ AC_DEFINE(HAVE_AES_SHA2_SUPPORT, 1,
+ [aes-sha2 is supported by krb5])
+ fi
+
dnl Check for krb5_derive_key
AC_CHECK_LIB($gssapi_lib, krb5_derive_key,
[HAVE_KRB5_DERIVE_KEY=1; AC_DEFINE(HAVE_KRB5_DERIVE_KEY, 1, [Define this if the function krb5_derive_key is available])], ,$KRBLIBS)
])
])
+ dnl Version 1.18 removed support for all DES3 enctypes (des3-cbc-raw,
+ dnl des3-hmac-sha1, des3-cbc-sha1-kd).
+ AC_MSG_CHECKING([for DES3 enctype support by krb5])
+ if test $K5VERS -lt 1180; then
+ AC_DEFINE(HAVE_DES3_SUPPORT, 1,
+ [DES3 enctype is supported by krb5])
+ AC_MSG_RESULT([yes])
+ else
+ AC_MSG_RESULT([no])
+ fi
+
dnl If they specified a directory and it didn't work, give them a warning
if test "x$krb5_with" != "x" -a "$krb5_with" != "$KRBDIR"; then
AC_MSG_WARN([
AC_SUBST([KRBLDFLAGS])
AC_SUBST([K5VERS])
+ else
+ AC_MSG_RESULT([not found!])
fi # "x$KRBDIR" != "x"
])