AC_DEFUN([AC_KERBEROS_V5],[
AC_MSG_CHECKING(for Kerberos v5)
AC_ARG_WITH(krb5,
- [AC_HELP_STRING([--with-krb5=DIR], [use Kerberos v5 installation in DIR])],
+ [AS_HELP_STRING([--with-krb5=DIR], [use Kerberos v5 installation in DIR])],
[ case "$withval" in
yes|no)
krb5_with=""
AC_CHECK_LIB($gssapi_lib, krb5int_derive_key,
[HAVE_KRB5INT_DERIVE_KEY=1; AC_DEFINE(HAVE_KRB5INT_DERIVE_KEY, 1, [Define this if the function krb5int_derive_key is available])], ,$KRBLIBS)
+ dnl Version 1.15 introduced aes-sha2 support, which changes the
+ dnl number of paramters of function krb5int_derive_key.
+ if test $K5VERS -ge 1150; then
+ AC_DEFINE(HAVE_AES_SHA2_SUPPORT, 1,
+ [aes-sha2 is supported by krb5])
+ fi
+
dnl Check for krb5_derive_key
AC_CHECK_LIB($gssapi_lib, krb5_derive_key,
[HAVE_KRB5_DERIVE_KEY=1; AC_DEFINE(HAVE_KRB5_DERIVE_KEY, 1, [Define this if the function krb5_derive_key is available])], ,$KRBLIBS)
])
])
+ dnl Version 1.18 removed support for all DES3 enctypes (des3-cbc-raw,
+ dnl des3-hmac-sha1, des3-cbc-sha1-kd).
+ AC_MSG_CHECKING([for DES3 enctype support by krb5])
+ if test $K5VERS -lt 1180; then
+ AC_DEFINE(HAVE_DES3_SUPPORT, 1,
+ [DES3 enctype is supported by krb5])
+ AC_MSG_RESULT([yes])
+ else
+ AC_MSG_RESULT([no])
+ fi
+
dnl If they specified a directory and it didn't work, give them a warning
if test "x$krb5_with" != "x" -a "$krb5_with" != "$KRBDIR"; then
AC_MSG_WARN([