xref: /freebsd/crypto/krb5/doc/pdf/build.tex (revision 7f2fe78b9dd5f51c821d771b63d2e096f6fd49e9)

%% Generated by Sphinx.
\def\sphinxdocclass{report}
\documentclass[letterpaper,10pt,english]{sphinxmanual}
\ifdefined\pdfpxdimen
   \let\sphinxpxdimen\pdfpxdimen\else\newdimen\sphinxpxdimen
\fi \sphinxpxdimen=.75bp\relax
\ifdefined\pdfimageresolution
    \pdfimageresolution= \numexpr \dimexpr1in\relax/\sphinxpxdimen\relax
\fi
%% let collapsible pdf bookmarks panel have high depth per default
\PassOptionsToPackage{bookmarksdepth=5}{hyperref}

\PassOptionsToPackage{warn}{textcomp}
\usepackage[utf8]{inputenc}
\ifdefined\DeclareUnicodeCharacter
% support both utf8 and utf8x syntaxes
  \ifdefined\DeclareUnicodeCharacterAsOptional
    \def\sphinxDUC#1{\DeclareUnicodeCharacter{"#1}}
  \else
    \let\sphinxDUC\DeclareUnicodeCharacter
  \fi
  \sphinxDUC{00A0}{\nobreakspace}
  \sphinxDUC{2500}{\sphinxunichar{2500}}
  \sphinxDUC{2502}{\sphinxunichar{2502}}
  \sphinxDUC{2514}{\sphinxunichar{2514}}
  \sphinxDUC{251C}{\sphinxunichar{251C}}
  \sphinxDUC{2572}{\textbackslash}
\fi
\usepackage{cmap}
\usepackage[T1]{fontenc}
\usepackage{amsmath,amssymb,amstext}
\usepackage{babel}



\usepackage{tgtermes}
\usepackage{tgheros}
\renewcommand{\ttdefault}{txtt}



\usepackage[Bjarne]{fncychap}
\usepackage{sphinx}

\fvset{fontsize=auto}
\usepackage{geometry}


% Include hyperref last.
\usepackage{hyperref}
% Fix anchor placement for figures with captions.
\usepackage{hypcap}% it must be loaded after hyperref.
% Set up styles of URL: it should be placed after hyperref.
\urlstyle{same}


\usepackage{sphinxmessages}
\setcounter{tocdepth}{0}



\title{Building MIT Kerberos}
\date{ }
\release{1.21.3}
\author{MIT}
\newcommand{\sphinxlogo}{\vbox{}}
\renewcommand{\releasename}{Release}
\makeindex
\begin{document}

\pagestyle{empty}
\sphinxmaketitle
\pagestyle{plain}
\sphinxtableofcontents
\pagestyle{normal}
\phantomsection\label{\detokenize{build/index::doc}}


\sphinxAtStartPar
This section details how to build and install MIT Kerberos software
from the source.


\chapter{Prerequisites}
\label{\detokenize{build/index:prerequisites}}
\sphinxAtStartPar
In order to build Kerberos V5, you will need approximately 60\sphinxhyphen{}70
megabytes of disk space.  The exact amount will vary depending on the
platform and whether the distribution is compiled with debugging
symbol tables or not.

\sphinxAtStartPar
Your C compiler must conform to ANSI C (ISO/IEC 9899:1990, “c89”).
Some operating systems do not have an ANSI C compiler, or their
default compiler requires extra command\sphinxhyphen{}line options to enable ANSI C
conformance.

\sphinxAtStartPar
If you wish to keep a separate build tree, which contains the compiled
*.o file and executables, separate from your source tree, you will
need a make program which supports \sphinxstylestrong{VPATH}, or you will need to use
a tool such as lndir to produce a symbolic link tree for your build
tree.


\chapter{Obtaining the software}
\label{\detokenize{build/index:obtaining-the-software}}
\sphinxAtStartPar
The source code can be obtained from MIT Kerberos Distribution page,
at \sphinxurl{https://kerberos.org/dist/index.html}.
The MIT Kerberos distribution comes in an archive file, generally
named krb5\sphinxhyphen{}VERSION\sphinxhyphen{}signed.tar, where \sphinxstyleemphasis{VERSION} is a placeholder for
the major and minor versions of MIT Kerberos.  (For example, MIT
Kerberos 1.9 has major version “1” and minor version “9”.)

\sphinxAtStartPar
The krb5\sphinxhyphen{}VERSION\sphinxhyphen{}signed.tar contains a compressed tar file consisting
of the sources for all of Kerberos (generally named
krb5\sphinxhyphen{}VERSION.tar.gz) and a PGP signature file for this source tree
(generally named krb5\sphinxhyphen{}VERSION.tar.gz.asc).  MIT highly recommends that
you verify the integrity of the source code using this signature,
e.g., by running:

\begin{sphinxVerbatim}[commandchars=\\\{\}]
\PYG{n}{tar} \PYG{n}{xf} \PYG{n}{krb5}\PYG{o}{\PYGZhy{}}\PYG{n}{VERSION}\PYG{o}{\PYGZhy{}}\PYG{n}{signed}\PYG{o}{.}\PYG{n}{tar}
\PYG{n}{gpg} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{n}{verify} \PYG{n}{krb5}\PYG{o}{\PYGZhy{}}\PYG{n}{VERSION}\PYG{o}{.}\PYG{n}{tar}\PYG{o}{.}\PYG{n}{gz}\PYG{o}{.}\PYG{n}{asc}
\end{sphinxVerbatim}

\sphinxAtStartPar
Unpack krb5\sphinxhyphen{}VERSION.tar.gz in some directory. In this section we will assume
that you have chosen the top directory of the distribution the directory
\sphinxcode{\sphinxupquote{/u1/krb5\sphinxhyphen{}VERSION}}.

\sphinxAtStartPar
Review the README file for the license, copyright and other sprecific to the
distribution information.


\chapter{Contents}
\label{\detokenize{build/index:contents}}

\section{Organization of the source directory}
\label{\detokenize{build/directory_org:organization-of-the-source-directory}}\label{\detokenize{build/directory_org::doc}}
\sphinxAtStartPar
Below is a brief overview of the organization of the complete source
directory.  More detailed descriptions follow.


\begin{savenotes}\sphinxattablestart
\centering
\begin{tabulary}{\linewidth}[t]{|T|T|}
\hline

\sphinxAtStartPar
appl
&
\sphinxAtStartPar
Kerberos application client and server programs
\\
\hline
\sphinxAtStartPar
ccapi
&
\sphinxAtStartPar
Credential cache services
\\
\hline
\sphinxAtStartPar
clients
&
\sphinxAtStartPar
Kerberos V5 user programs (See \DUrole{xref,std,std-ref}{user\_commands})
\\
\hline
\sphinxAtStartPar
config
&
\sphinxAtStartPar
Configure scripts
\\
\hline
\sphinxAtStartPar
config\sphinxhyphen{}files
&
\sphinxAtStartPar
Sample Kerberos configuration files
\\
\hline
\sphinxAtStartPar
include
&
\sphinxAtStartPar
include files needed to build the Kerberos system
\\
\hline
\sphinxAtStartPar
kadmin
&
\sphinxAtStartPar
Administrative interface to the Kerberos database: \DUrole{xref,std,std-ref}{kadmin(1)}, \DUrole{xref,std,std-ref}{kdb5\_util(8)}, \DUrole{xref,std,std-ref}{ktutil(1)}.
\\
\hline
\sphinxAtStartPar
kdc
&
\sphinxAtStartPar
Kerberos V5 Authentication Service and Key Distribution Center
\\
\hline
\sphinxAtStartPar
{\hyperref[\detokenize{build/directory_org:lib}]{\sphinxcrossref{lib}}}
&
\sphinxAtStartPar
Libraries for use with/by Kerberos V5
\\
\hline
\sphinxAtStartPar
plugins
&
\sphinxAtStartPar
Kerberos plugins directory
\\
\hline
\sphinxAtStartPar
po
&
\sphinxAtStartPar
Localization infrastructure
\\
\hline
\sphinxAtStartPar
prototype
&
\sphinxAtStartPar
Templates files containing the MIT copyright message and a placeholder for the title and description of the file.
\\
\hline
\sphinxAtStartPar
kprop
&
\sphinxAtStartPar
Utilities for propagating the database to replica KDCs \DUrole{xref,std,std-ref}{kprop(8)} and \DUrole{xref,std,std-ref}{kpropd(8)}
\\
\hline
\sphinxAtStartPar
tests
&
\sphinxAtStartPar
Test suite
\\
\hline
\sphinxAtStartPar
{\hyperref[\detokenize{build/directory_org:util}]{\sphinxcrossref{util}}}
&
\sphinxAtStartPar
Various utilities for building/configuring the code, sending bug reports, etc.
\\
\hline
\sphinxAtStartPar
windows
&
\sphinxAtStartPar
Source code for building Kerberos V5 on Windows (see windows/README)
\\
\hline
\end{tabulary}
\par
\sphinxattableend\end{savenotes}


\subsection{lib}
\label{\detokenize{build/directory_org:lib}}\label{\detokenize{build/directory_org:id1}}
\sphinxAtStartPar
The lib directory contain several subdirectories as well as some
definition and glue files.
\begin{itemize}
\item {}
\sphinxAtStartPar
The apputils directory contains the code for the generic network
servicing.

\item {}
\sphinxAtStartPar
The crypto subdirectory contains the Kerberos V5 encryption
library.

\item {}
\sphinxAtStartPar
The gssapi library contains the Generic Security Services API,
which is a library of commands to be used in secure client\sphinxhyphen{}server
communication.

\item {}
\sphinxAtStartPar
The kadm5 directory contains the libraries for the KADM5
administration utilities.

\item {}
\sphinxAtStartPar
The Kerberos 5 database libraries are contained in kdb.

\item {}
\sphinxAtStartPar
The krb5 directory contains Kerberos 5 API.

\item {}
\sphinxAtStartPar
The rpc directory contains the API for the Kerberos Remote
Procedure Call protocol.

\end{itemize}


\subsection{util}
\label{\detokenize{build/directory_org:util}}\label{\detokenize{build/directory_org:id2}}\begin{description}
\item[{The util directory contains several utility programs and libraries.}] \leavevmode\begin{itemize}
\item {}
\sphinxAtStartPar
the programs used to configure and build the code, such as
autoconf, lndir, kbuild, reconf, and makedepend, are in this
directory.

\item {}
\sphinxAtStartPar
the profile directory contains most of the functions which parse
the Kerberos configuration files (krb5.conf and kdc.conf).

\item {}
\sphinxAtStartPar
the Kerberos error table library and utilities (et);

\item {}
\sphinxAtStartPar
the Sub\sphinxhyphen{}system library and utilities (ss);

\item {}
\sphinxAtStartPar
database utilities (db2);

\item {}
\sphinxAtStartPar
pseudo\sphinxhyphen{}terminal utilities (pty);

\item {}
\sphinxAtStartPar
bug\sphinxhyphen{}reporting program send\sphinxhyphen{}pr;

\item {}
\sphinxAtStartPar
a generic support library support used by several of our other
libraries;

\item {}
\sphinxAtStartPar
the build infrastructure for building lightweight Kerberos client
(collected\sphinxhyphen{}client\sphinxhyphen{}lib)

\item {}
\sphinxAtStartPar
the tool for validating Kerberos configuration files
(confvalidator);

\item {}
\sphinxAtStartPar
the toolkit for kernel integrators for building krb5 code subsets
(gss\sphinxhyphen{}kernel\sphinxhyphen{}lib);

\item {}
\sphinxAtStartPar
source code for building Kerberos V5 on MacOS (mac)

\item {}
\sphinxAtStartPar
Windows getopt operations (windows)

\end{itemize}

\end{description}


\section{Doing the build}
\label{\detokenize{build/doing_build:doing-the-build}}\label{\detokenize{build/doing_build::doc}}

\subsection{Building within a single tree}
\label{\detokenize{build/doing_build:building-within-a-single-tree}}\label{\detokenize{build/doing_build:do-build}}
\sphinxAtStartPar
If you only need to build Kerberos for one platform, using a single
directory tree which contains both the source files and the object
files is the simplest.  However, if you need to maintain Kerberos for
a large number of platforms, you will probably want to use separate
build trees for each platform.  We recommend that you look at OS
Incompatibilities, for notes that we have on particular operating
systems.

\sphinxAtStartPar
If you don’t want separate build trees for each architecture, then use
the following abbreviated procedure:

\begin{sphinxVerbatim}[commandchars=\\\{\}]
\PYG{n}{cd} \PYG{o}{/}\PYG{n}{u1}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{\PYGZhy{}}\PYG{n}{VERSION}\PYG{o}{/}\PYG{n}{src}
\PYG{o}{.}\PYG{o}{/}\PYG{n}{configure}
\PYG{n}{make}
\end{sphinxVerbatim}

\sphinxAtStartPar
That’s it!


\subsection{Building with separate build directories}
\label{\detokenize{build/doing_build:building-with-separate-build-directories}}
\sphinxAtStartPar
If you wish to keep separate build directories for each platform, you
can do so using the following procedure.  (Note, this requires that
your make program support VPATH.  GNU’s make will provide this
functionality, for example.)  If your make program does not support
this, see the next section.

\sphinxAtStartPar
For example, if you wish to store the binaries in \sphinxcode{\sphinxupquote{tmpbuild}} build
directory you might use the following procedure:

\begin{sphinxVerbatim}[commandchars=\\\{\}]
\PYG{n}{mkdir} \PYG{o}{/}\PYG{n}{u1}\PYG{o}{/}\PYG{n}{tmpbuild}
\PYG{n}{cd} \PYG{o}{/}\PYG{n}{u1}\PYG{o}{/}\PYG{n}{tmpbuild}
\PYG{o}{/}\PYG{n}{u1}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{\PYGZhy{}}\PYG{n}{VERSION}\PYG{o}{/}\PYG{n}{src}\PYG{o}{/}\PYG{n}{configure}
\PYG{n}{make}
\end{sphinxVerbatim}


\subsection{Building using lndir}
\label{\detokenize{build/doing_build:building-using-lndir}}
\sphinxAtStartPar
If you wish to keep separate build directories for each platform, and
you do not have access to a make program which supports VPATH, all is
not lost.  You can use the lndir program to create symbolic link trees
in your build directory.

\sphinxAtStartPar
For example, if you wish to create a build directory for solaris
binaries you might use the following procedure:

\begin{sphinxVerbatim}[commandchars=\\\{\}]
mkdir /u1/krb5\PYGZhy{}VERSION/solaris
cd /u1/krb5\PYGZhy{}VERSION/solaris
/u1/krb5\PYGZhy{}VERSION/src/util/lndir `pwd`/../src
./configure
make
\end{sphinxVerbatim}

\sphinxAtStartPar
You must give an absolute pathname to lndir because it has a bug that
makes it fail for relative pathnames.  Note that this version differs
from the latest version as distributed and installed by the
XConsortium with X11R6.  Either version should be acceptable.


\subsection{Installing the binaries}
\label{\detokenize{build/doing_build:installing-the-binaries}}
\sphinxAtStartPar
Once you have built Kerberos, you should install the binaries. You can
do this by running:

\begin{sphinxVerbatim}[commandchars=\\\{\}]
\PYG{n}{make} \PYG{n}{install}
\end{sphinxVerbatim}

\sphinxAtStartPar
If you want to install the binaries into a destination directory that
is not their final destination, which may be convenient if you want to
build a binary distribution to be deployed on multiple hosts, you may
use:

\begin{sphinxVerbatim}[commandchars=\\\{\}]
\PYG{n}{make} \PYG{n}{install} \PYG{n}{DESTDIR}\PYG{o}{=}\PYG{o}{/}\PYG{n}{path}\PYG{o}{/}\PYG{n}{to}\PYG{o}{/}\PYG{n}{destdir}
\end{sphinxVerbatim}

\sphinxAtStartPar
This will install the binaries under \sphinxstyleemphasis{DESTDIR/PREFIX}, e.g., the user
programs will install into \sphinxstyleemphasis{DESTDIR/PREFIX/bin}, the libraries into
\sphinxstyleemphasis{DESTDIR/PREFIX/lib}, etc.  \sphinxstyleemphasis{DESTDIR} must be an absolute path.

\sphinxAtStartPar
Some implementations of make allow multiple commands to be run in
parallel, for faster builds.  We test our Makefiles in parallel builds
with GNU make only; they may not be compatible with other parallel
build implementations.


\subsection{Testing the build}
\label{\detokenize{build/doing_build:testing-the-build}}
\sphinxAtStartPar
The Kerberos V5 distribution comes with built\sphinxhyphen{}in regression tests.  To
run them, simply type the following command while in the top\sphinxhyphen{}level
build directory (i.e., the directory where you sent typed make to
start building Kerberos; see {\hyperref[\detokenize{build/doing_build:do-build}]{\sphinxcrossref{\DUrole{std,std-ref}{Building within a single tree}}}}):

\begin{sphinxVerbatim}[commandchars=\\\{\}]
\PYG{n}{make} \PYG{n}{check}
\end{sphinxVerbatim}

\sphinxAtStartPar
On some operating systems, you have to run \sphinxcode{\sphinxupquote{make install}} before
running \sphinxcode{\sphinxupquote{make check}}, or the test suite will pick up installed
versions of Kerberos libraries rather than the newly built ones.  You
can install into a prefix that isn’t in the system library search
path, though.  Alternatively, you can configure with
\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}rpath}, which renders the build tree less suitable
for installation, but allows testing without interference from
previously installed libraries.

\sphinxAtStartPar
There are additional regression tests available, which are not run
by \sphinxcode{\sphinxupquote{make check}}.  These tests require manual setup and teardown of
support infrastructure which is not easily automated, or require
excessive resources for ordinary use.  The procedure for running
the manual tests is documented at
\sphinxurl{https://k5wiki.kerberos.org/wiki/Manual\_Testing}.


\subsection{Cleaning up the build}
\label{\detokenize{build/doing_build:cleaning-up-the-build}}\begin{itemize}
\item {}
\sphinxAtStartPar
Use \sphinxcode{\sphinxupquote{make clean}} to remove all files generated by running make
command.

\item {}
\sphinxAtStartPar
Use \sphinxcode{\sphinxupquote{make distclean}} to remove all files generated by running
./configure script.  After running \sphinxcode{\sphinxupquote{make distclean}} your source
tree (ideally) should look like the raw (just un\sphinxhyphen{}tarred) source
tree.

\end{itemize}


\subsection{Using autoconf}
\label{\detokenize{build/doing_build:using-autoconf}}
\sphinxAtStartPar
(If you are not a developer, you can ignore this section.)

\sphinxAtStartPar
In the Kerberos V5 source directory, there is a configure script which
automatically determines the compilation environment and creates the
proper Makefiles for a particular platform.  This configure script is
generated using autoconf, which you should already have installed if
you will be making changes to \sphinxcode{\sphinxupquote{src/configure.in}}.

\sphinxAtStartPar
Normal users will not need to worry about running autoconf; the
distribution comes with the configure script already prebuilt.

\sphinxAtStartPar
The autoconf package comes with a script called \sphinxcode{\sphinxupquote{autoreconf}} that
will automatically run \sphinxcode{\sphinxupquote{autoconf}} and \sphinxcode{\sphinxupquote{autoheader}} as needed.  You
should run \sphinxcode{\sphinxupquote{autoreconf}} from the top source directory, e.g.:

\begin{sphinxVerbatim}[commandchars=\\\{\}]
\PYG{n}{cd} \PYG{o}{/}\PYG{n}{u1}\PYG{o}{/}\PYG{n}{krb5}\PYG{o}{\PYGZhy{}}\PYG{n}{VERSION}\PYG{o}{/}\PYG{n}{src}
\PYG{n}{autoreconf} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{n}{verbose}
\end{sphinxVerbatim}


\section{Options to \sphinxstyleemphasis{configure}}
\label{\detokenize{build/options2configure:options-to-configure}}\label{\detokenize{build/options2configure:options2configure}}\label{\detokenize{build/options2configure::doc}}
\sphinxAtStartPar
There are a number of options to configure which you can use to
control how the Kerberos distribution is built.


\subsection{Most commonly used options}
\label{\detokenize{build/options2configure:most-commonly-used-options}}\begin{description}
\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}help}}] \leavevmode
\sphinxAtStartPar
Provides help to configure.  This will list the set of commonly
used options for building Kerberos.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}prefix=}\sphinxstyleemphasis{PREFIX}}] \leavevmode
\sphinxAtStartPar
By default, Kerberos will install the package’s files rooted at
\sphinxcode{\sphinxupquote{/usr/local}}.  If you desire to place the binaries into the
directory \sphinxstyleemphasis{PREFIX}, use this option.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}exec\sphinxhyphen{}prefix=}\sphinxstyleemphasis{EXECPREFIX}}] \leavevmode
\sphinxAtStartPar
This option allows one to separate the architecture independent
programs from the host\sphinxhyphen{}dependent files (configuration files,
manual pages).  Use this option to install architecture\sphinxhyphen{}dependent
programs in \sphinxstyleemphasis{EXECPREFIX}.  The default location is the value of
specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}prefix} option.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}localstatedir=}\sphinxstyleemphasis{LOCALSTATEDIR}}] \leavevmode
\sphinxAtStartPar
This option sets the directory for locally modifiable
single\sphinxhyphen{}machine data.  In Kerberos, this mostly is useful for
setting a location for the KDC data files, as they will be
installed in \sphinxcode{\sphinxupquote{LOCALSTATEDIR/krb5kdc}}, which is by default
\sphinxcode{\sphinxupquote{PREFIX/var/krb5kdc}}.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}netlib}{[}=\sphinxstyleemphasis{libs}{]}}] \leavevmode
\sphinxAtStartPar
Allows for suppression of or replacement of network libraries.  By
default, Kerberos V5 configuration will look for \sphinxcode{\sphinxupquote{\sphinxhyphen{}lnsl}} and
\sphinxcode{\sphinxupquote{\sphinxhyphen{}lsocket}}.  If your operating system has a broken resolver
library or fails to pass the tests in \sphinxcode{\sphinxupquote{src/tests/resolv}}, you
will need to use this option.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}enable\sphinxhyphen{}dns\sphinxhyphen{}for\sphinxhyphen{}realm}}] \leavevmode
\sphinxAtStartPar
Enable the use of DNS to look up a host’s Kerberos realm,
if the information is not provided in
\DUrole{xref,std,std-ref}{krb5.conf(5)}.  See \DUrole{xref,std,std-ref}{mapping\_hostnames}
for information about using DNS to determine the default realm.
DNS lookups for realm names are disabled by default.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}system\sphinxhyphen{}et}}] \leavevmode
\sphinxAtStartPar
Use an installed version of the error\sphinxhyphen{}table (et) support software,
the compile\_et program, the com\_err.h header file and the com\_err
library.  If these are not in the default locations, you may wish
to specify \sphinxcode{\sphinxupquote{CPPFLAGS=\sphinxhyphen{}I/some/dir}} and
\sphinxcode{\sphinxupquote{LDFLAGS=\sphinxhyphen{}L/some/other/dir}} options at configuration time as
well.

\sphinxAtStartPar
If this option is not given, a version supplied with the Kerberos
sources will be built and installed along with the rest of the
Kerberos tree, for Kerberos applications to link against.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}system\sphinxhyphen{}ss}}] \leavevmode
\sphinxAtStartPar
Use an installed version of the subsystem command\sphinxhyphen{}line interface
software, the mk\_cmds program, the \sphinxcode{\sphinxupquote{ss/ss.h}} header file and the
ss library.  If these are not in the default locations, you may
wish to specify \sphinxcode{\sphinxupquote{CPPFLAGS=\sphinxhyphen{}I/some/dir}} and
\sphinxcode{\sphinxupquote{LDFLAGS=\sphinxhyphen{}L/some/other/dir}} options at configuration time as
well.  See also the \sphinxstylestrong{SS\_LIB} option.

\sphinxAtStartPar
If this option is not given, the ss library supplied with the
Kerberos sources will be compiled and linked into those programs
that need it; it will not be installed separately.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}system\sphinxhyphen{}db}}] \leavevmode
\sphinxAtStartPar
Use an installed version of the Berkeley DB package, which must
provide an API compatible with version 1.85.  This option is
unsupported and untested.  In particular, we do not know if the
database\sphinxhyphen{}rename code used in the dumpfile load operation will
behave properly.

\sphinxAtStartPar
If this option is not given, a version supplied with the Kerberos
sources will be built and installed.  (We are not updating this
version at this time because of licensing issues with newer
versions that we haven’t investigated sufficiently yet.)

\end{description}


\subsection{Environment variables}
\label{\detokenize{build/options2configure:environment-variables}}\begin{description}
\item[{\sphinxstylestrong{CC=}\sphinxstyleemphasis{COMPILER}}] \leavevmode
\sphinxAtStartPar
Use \sphinxstyleemphasis{COMPILER} as the C compiler.

\item[{\sphinxstylestrong{CFLAGS=}\sphinxstyleemphasis{FLAGS}}] \leavevmode
\sphinxAtStartPar
Use \sphinxstyleemphasis{FLAGS} as the default set of C compiler flags.

\item[{\sphinxstylestrong{CPP=}\sphinxstyleemphasis{CPP}}] \leavevmode
\sphinxAtStartPar
C preprocessor to use. (e.g., \sphinxcode{\sphinxupquote{CPP=\textquotesingle{}gcc \sphinxhyphen{}E\textquotesingle{}}})

\item[{\sphinxstylestrong{CPPFLAGS=}\sphinxstyleemphasis{CPPOPTS}}] \leavevmode
\sphinxAtStartPar
Use \sphinxstyleemphasis{CPPOPTS} as the default set of C preprocessor flags.  The
most common use of this option is to select certain \#define’s for
use with the operating system’s include files.

\item[{\sphinxstylestrong{DB\_HEADER=}\sphinxstyleemphasis{headername}}] \leavevmode
\sphinxAtStartPar
If db.h is not the correct header file to include to compile
against the Berkeley DB 1.85 API, specify the correct header file
name with this option. For example, \sphinxcode{\sphinxupquote{DB\_HEADER=db3/db\_185.h}}.

\item[{\sphinxstylestrong{DB\_LIB=}\sphinxstyleemphasis{libs}…}] \leavevmode
\sphinxAtStartPar
If \sphinxcode{\sphinxupquote{\sphinxhyphen{}ldb}} is not the correct library specification for the
Berkeley DB library version to be used, override it with this
option. For example, \sphinxcode{\sphinxupquote{DB\_LIB=\sphinxhyphen{}ldb\sphinxhyphen{}3.3}}.

\item[{\sphinxstylestrong{DEFCCNAME=}\sphinxstyleemphasis{ccachename}}] \leavevmode
\sphinxAtStartPar
Override the built\sphinxhyphen{}in default credential cache name.
For example, \sphinxcode{\sphinxupquote{DEFCCNAME=DIR:/var/run/user/\%\{USERID\}/ccache}}
See \DUrole{xref,std,std-ref}{parameter\_expansion} for information about supported
parameter expansions.

\item[{\sphinxstylestrong{DEFCKTNAME=}\sphinxstyleemphasis{keytabname}}] \leavevmode
\sphinxAtStartPar
Override the built\sphinxhyphen{}in default client keytab name.
The format is the same as for \sphinxstyleemphasis{DEFCCNAME}.

\item[{\sphinxstylestrong{DEFKTNAME=}\sphinxstyleemphasis{keytabname}}] \leavevmode
\sphinxAtStartPar
Override the built\sphinxhyphen{}in default keytab name.
The format is the same as for \sphinxstyleemphasis{DEFCCNAME}.

\item[{\sphinxstylestrong{LD=}\sphinxstyleemphasis{LINKER}}] \leavevmode
\sphinxAtStartPar
Use \sphinxstyleemphasis{LINKER} as the default loader if it should be different from
C compiler as specified above.

\item[{\sphinxstylestrong{LDFLAGS=}\sphinxstyleemphasis{LDOPTS}}] \leavevmode
\sphinxAtStartPar
This option informs the linker where to get additional libraries
(e.g., \sphinxcode{\sphinxupquote{\sphinxhyphen{}L\textless{}lib dir\textgreater{}}}).

\item[{\sphinxstylestrong{LIBS=}\sphinxstyleemphasis{LDNAME}}] \leavevmode
\sphinxAtStartPar
This option allows one to specify libraries to be passed to the
linker (e.g., \sphinxcode{\sphinxupquote{\sphinxhyphen{}l\textless{}library\textgreater{}}})

\item[{\sphinxstylestrong{PKCS11\_MODNAME=}\sphinxstyleemphasis{library}}] \leavevmode
\sphinxAtStartPar
Override the built\sphinxhyphen{}in default PKCS11 library name.

\item[{\sphinxstylestrong{SS\_LIB=}\sphinxstyleemphasis{libs}…}] \leavevmode
\sphinxAtStartPar
If \sphinxcode{\sphinxupquote{\sphinxhyphen{}lss}} is not the correct way to link in your installed ss
library, for example if additional support libraries are needed,
specify the correct link options here.  Some variants of this
library are around which allow for Emacs\sphinxhyphen{}like line editing, but
different versions require different support libraries to be
explicitly specified.

\sphinxAtStartPar
This option is ignored if \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}system\sphinxhyphen{}ss} is not specified.

\item[{\sphinxstylestrong{YACC}}] \leavevmode
\sphinxAtStartPar
The ‘Yet Another C Compiler’ implementation to use. Defaults to
the first program found out of: ‘\sphinxtitleref{bison \sphinxhyphen{}y}’, ‘\sphinxtitleref{byacc}’,
‘\sphinxtitleref{yacc}’.

\item[{\sphinxstylestrong{YFLAGS}}] \leavevmode
\sphinxAtStartPar
The list of arguments that will be passed by default to \$YACC.
This script will default YFLAGS to the empty string to avoid a
default value of \sphinxcode{\sphinxupquote{\sphinxhyphen{}d}} given by some make applications.

\end{description}


\subsection{Fine tuning of the installation directories}
\label{\detokenize{build/options2configure:fine-tuning-of-the-installation-directories}}\begin{description}
\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}bindir=}\sphinxstyleemphasis{DIR}}] \leavevmode
\sphinxAtStartPar
User executables.  Defaults to \sphinxcode{\sphinxupquote{EXECPREFIX/bin}}, where
\sphinxstyleemphasis{EXECPREFIX} is the path specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}exec\sphinxhyphen{}prefix}
configuration option.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}sbindir=}\sphinxstyleemphasis{DIR}}] \leavevmode
\sphinxAtStartPar
System admin executables.  Defaults to \sphinxcode{\sphinxupquote{EXECPREFIX/sbin}}, where
\sphinxstyleemphasis{EXECPREFIX} is the path specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}exec\sphinxhyphen{}prefix}
configuration option.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}sysconfdir=}\sphinxstyleemphasis{DIR}}] \leavevmode
\sphinxAtStartPar
Read\sphinxhyphen{}only single\sphinxhyphen{}machine data such as krb5.conf.
Defaults to \sphinxcode{\sphinxupquote{PREFIX/etc}}, where
\sphinxstyleemphasis{PREFIX} is the path specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}prefix} configuration
option.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}libdir=}\sphinxstyleemphasis{DIR}}] \leavevmode
\sphinxAtStartPar
Object code libraries.  Defaults to \sphinxcode{\sphinxupquote{EXECPREFIX/lib}}, where
\sphinxstyleemphasis{EXECPREFIX} is the path specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}exec\sphinxhyphen{}prefix}
configuration option.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}includedir=}\sphinxstyleemphasis{DIR}}] \leavevmode
\sphinxAtStartPar
C header files.  Defaults to \sphinxcode{\sphinxupquote{PREFIX/include}}, where \sphinxstyleemphasis{PREFIX} is
the path specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}prefix} configuration option.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}datarootdir=}\sphinxstyleemphasis{DATAROOTDIR}}] \leavevmode
\sphinxAtStartPar
Read\sphinxhyphen{}only architecture\sphinxhyphen{}independent data root.  Defaults to
\sphinxcode{\sphinxupquote{PREFIX/share}}, where \sphinxstyleemphasis{PREFIX} is the path specified by
\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}prefix} configuration option.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}datadir=}\sphinxstyleemphasis{DIR}}] \leavevmode
\sphinxAtStartPar
Read\sphinxhyphen{}only architecture\sphinxhyphen{}independent data.  Defaults to path
specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}datarootdir} configuration option.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}localedir=}\sphinxstyleemphasis{DIR}}] \leavevmode
\sphinxAtStartPar
Locale\sphinxhyphen{}dependent data.  Defaults to \sphinxcode{\sphinxupquote{DATAROOTDIR/locale}}, where
\sphinxstyleemphasis{DATAROOTDIR} is the path specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}datarootdir}
configuration option.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}mandir=}\sphinxstyleemphasis{DIR}}] \leavevmode
\sphinxAtStartPar
Man documentation.  Defaults to \sphinxcode{\sphinxupquote{DATAROOTDIR/man}}, where
\sphinxstyleemphasis{DATAROOTDIR} is the path specified by \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}datarootdir}
configuration option.

\end{description}


\subsection{Program names}
\label{\detokenize{build/options2configure:program-names}}\begin{description}
\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}program\sphinxhyphen{}prefix=}\sphinxstyleemphasis{PREFIX}}] \leavevmode
\sphinxAtStartPar
Prepend \sphinxstyleemphasis{PREFIX} to the names of the programs when installing
them. For example, specifying \sphinxcode{\sphinxupquote{\sphinxhyphen{}\sphinxhyphen{}program\sphinxhyphen{}prefix=mit\sphinxhyphen{}}} at the
configure time will cause the program named \sphinxcode{\sphinxupquote{abc}} to be
installed as \sphinxcode{\sphinxupquote{mit\sphinxhyphen{}abc}}.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}program\sphinxhyphen{}suffix=}\sphinxstyleemphasis{SUFFIX}}] \leavevmode
\sphinxAtStartPar
Append \sphinxstyleemphasis{SUFFIX} to the names of the programs when installing them.
For example, specifying \sphinxcode{\sphinxupquote{\sphinxhyphen{}\sphinxhyphen{}program\sphinxhyphen{}suffix=\sphinxhyphen{}mit}} at the configure
time will cause the program named \sphinxcode{\sphinxupquote{abc}} to be installed as
\sphinxcode{\sphinxupquote{abc\sphinxhyphen{}mit}}.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}program\sphinxhyphen{}transform\sphinxhyphen{}name=}\sphinxstyleemphasis{PROGRAM}}] \leavevmode
\sphinxAtStartPar
Run \sphinxcode{\sphinxupquote{sed \sphinxhyphen{}e PROGRAM}} on installed program names. (\sphinxstyleemphasis{PROGRAM} is a
sed script).

\end{description}


\subsection{System types}
\label{\detokenize{build/options2configure:system-types}}\begin{description}
\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}build=}\sphinxstyleemphasis{BUILD}}] \leavevmode
\sphinxAtStartPar
Configure for building on \sphinxstyleemphasis{BUILD}
(e.g., \sphinxcode{\sphinxupquote{\sphinxhyphen{}\sphinxhyphen{}build=x86\_64\sphinxhyphen{}linux\sphinxhyphen{}gnu}}).

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}host=}\sphinxstyleemphasis{HOST}}] \leavevmode
\sphinxAtStartPar
Cross\sphinxhyphen{}compile to build programs to run on \sphinxstyleemphasis{HOST}
(e.g., \sphinxcode{\sphinxupquote{\sphinxhyphen{}\sphinxhyphen{}host=x86\_64\sphinxhyphen{}linux\sphinxhyphen{}gnu}}).  By default, Kerberos V5
configuration will look for “build” option.

\end{description}


\subsection{Optional features}
\label{\detokenize{build/options2configure:optional-features}}\begin{description}
\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}option\sphinxhyphen{}checking}}] \leavevmode
\sphinxAtStartPar
Ignore unrecognized \textendash{}enable/\textendash{}with options.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}}\sphinxstyleemphasis{FEATURE}}] \leavevmode
\sphinxAtStartPar
Do not include \sphinxstyleemphasis{FEATURE} (same as \textendash{}enable\sphinxhyphen{}FEATURE=no).

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}enable\sphinxhyphen{}}\sphinxstyleemphasis{FEATURE}{[}=\sphinxstyleemphasis{ARG}{]}}] \leavevmode
\sphinxAtStartPar
Include \sphinxstyleemphasis{FEATURE} {[}ARG=yes{]}.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}enable\sphinxhyphen{}maintainer\sphinxhyphen{}mode}}] \leavevmode
\sphinxAtStartPar
Enable rebuilding of source files, Makefiles, etc.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}delayed\sphinxhyphen{}initialization}}] \leavevmode
\sphinxAtStartPar
Initialize library code when loaded.  Defaults to delay until
first use.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}thread\sphinxhyphen{}support}}] \leavevmode
\sphinxAtStartPar
Don’t enable thread support.  Defaults to enabled.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}rpath}}] \leavevmode
\sphinxAtStartPar
Suppress run path flags in link lines.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}enable\sphinxhyphen{}athena}}] \leavevmode
\sphinxAtStartPar
Build with MIT Project Athena configuration.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}kdc\sphinxhyphen{}lookaside\sphinxhyphen{}cache}}] \leavevmode
\sphinxAtStartPar
Disable the cache which detects client retransmits.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}pkinit}}] \leavevmode
\sphinxAtStartPar
Disable PKINIT plugin support.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}disable\sphinxhyphen{}aesni}}] \leavevmode
\sphinxAtStartPar
Disable support for using AES instructions on x86 platforms.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}enable\sphinxhyphen{}asan}{[}=\sphinxstyleemphasis{ARG}{]}}] \leavevmode
\sphinxAtStartPar
Enable building with asan memory error checking.  If \sphinxstyleemphasis{ARG} is
given, it controls the \sphinxhyphen{}fsanitize compilation flag value (the
default is “address”).

\end{description}


\subsection{Optional packages}
\label{\detokenize{build/options2configure:optional-packages}}\begin{description}
\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}}\sphinxstyleemphasis{PACKAGE}{[}=ARG{]}}] \leavevmode
\sphinxAtStartPar
Use \sphinxstyleemphasis{PACKAGE} (e.g., \sphinxcode{\sphinxupquote{\sphinxhyphen{}\sphinxhyphen{}with\sphinxhyphen{}imap}}).  The default value of \sphinxstyleemphasis{ARG}
is \sphinxcode{\sphinxupquote{yes}}.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}without\sphinxhyphen{}}\sphinxstyleemphasis{PACKAGE}}] \leavevmode
\sphinxAtStartPar
Do not use \sphinxstyleemphasis{PACKAGE} (same as \sphinxcode{\sphinxupquote{\sphinxhyphen{}\sphinxhyphen{}with\sphinxhyphen{}PACKAGE=no}})
(e.g., \sphinxcode{\sphinxupquote{\sphinxhyphen{}\sphinxhyphen{}without\sphinxhyphen{}libedit}}).

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}size\sphinxhyphen{}optimizations}}] \leavevmode
\sphinxAtStartPar
Enable a few optimizations to reduce code size possibly at some
run\sphinxhyphen{}time cost.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}system\sphinxhyphen{}et}}] \leavevmode
\sphinxAtStartPar
Use the com\_err library and compile\_et utility that are already
installed on the system, instead of building and installing
local versions.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}system\sphinxhyphen{}ss}}] \leavevmode
\sphinxAtStartPar
Use the ss library and mk\_cmds utility that are already installed
on the system, instead of building and using private versions.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}system\sphinxhyphen{}db}}] \leavevmode
\sphinxAtStartPar
Use the berkeley db utility already installed on the system,
instead of using a private version.  This option is not
recommended; enabling it may result in incompatibility with key
databases originating on other systems.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}netlib=}\sphinxstyleemphasis{LIBS}}] \leavevmode
\sphinxAtStartPar
Use the resolver library specified in \sphinxstyleemphasis{LIBS}.  Use this variable
if the C library resolver is insufficient or broken.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}hesiod=}\sphinxstyleemphasis{path}}] \leavevmode
\sphinxAtStartPar
Compile with Hesiod support.  The \sphinxstyleemphasis{path} points to the Hesiod
directory.  By default Hesiod is unsupported.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}ldap}}] \leavevmode
\sphinxAtStartPar
Compile OpenLDAP database backend module.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}lmdb}}] \leavevmode
\sphinxAtStartPar
Compile LMDB database backend module.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}vague\sphinxhyphen{}errors}}] \leavevmode
\sphinxAtStartPar
Do not send helpful errors to client.  For example, if the KDC
should return only vague error codes to clients.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}crypto\sphinxhyphen{}impl=}\sphinxstyleemphasis{IMPL}}] \leavevmode
\sphinxAtStartPar
Use specified crypto implementation (e.g., \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}crypto\sphinxhyphen{}impl=}\sphinxstyleemphasis{openssl}).  The default is the native MIT
Kerberos implementation \sphinxcode{\sphinxupquote{builtin}}.  The other currently
implemented crypto backend is \sphinxcode{\sphinxupquote{openssl}}.  (See
\DUrole{xref,std,std-ref}{mitK5features})

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}without\sphinxhyphen{}libedit}}] \leavevmode
\sphinxAtStartPar
Do not compile and link against libedit.  Some utilities will no
longer offer command history or completion in interactive mode if
libedit is disabled.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}readline}}] \leavevmode
\sphinxAtStartPar
Compile and link against GNU readline, as an alternative to libedit.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}system\sphinxhyphen{}verto}}] \leavevmode
\sphinxAtStartPar
Use an installed version of libverto.  If the libverto header and
library are not in default locations, you may wish to specify
\sphinxcode{\sphinxupquote{CPPFLAGS=\sphinxhyphen{}I/some/dir}} and \sphinxcode{\sphinxupquote{LDFLAGS=\sphinxhyphen{}L/some/other/dir}} options
at configuration time as well.

\sphinxAtStartPar
If this option is not given, the build system will try to detect
an installed version of libverto and use it if it is found.
Otherwise, a version supplied with the Kerberos sources will be
built and installed.  The built\sphinxhyphen{}in version does not contain the
full set of back\sphinxhyphen{}end modules and is not a suitable general
replacement for the upstream version, but will work for the
purposes of Kerberos.

\sphinxAtStartPar
Specifying \sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}without\sphinxhyphen{}system\sphinxhyphen{}verto} will cause the built\sphinxhyphen{}in
version of libverto to be used unconditionally.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}with\sphinxhyphen{}krb5\sphinxhyphen{}config=}\sphinxstyleemphasis{PATH}}] \leavevmode
\sphinxAtStartPar
Use the krb5\sphinxhyphen{}config program at \sphinxstyleemphasis{PATH} to obtain the build\sphinxhyphen{}time
default credential cache, keytab, and client keytab names.  The
default is to use \sphinxcode{\sphinxupquote{krb5\sphinxhyphen{}config}} from the program path.  Specify
\sphinxcode{\sphinxupquote{\sphinxhyphen{}\sphinxhyphen{}without\sphinxhyphen{}krb5\sphinxhyphen{}config}} to disable the use of krb5\sphinxhyphen{}config and
use the usual built\sphinxhyphen{}in defaults.

\item[{\sphinxstylestrong{\sphinxhyphen{}}\sphinxstylestrong{\sphinxhyphen{}without\sphinxhyphen{}keyutils}}] \leavevmode
\sphinxAtStartPar
Build without libkeyutils support.  This disables the KEYRING
credential cache type.

\end{description}


\subsection{Examples}
\label{\detokenize{build/options2configure:examples}}
\sphinxAtStartPar
For example, in order to configure Kerberos on a Solaris machine using
the suncc compiler with the optimizer turned on, run the configure
script with the following options:

\begin{sphinxVerbatim}[commandchars=\\\{\}]
\PYG{o}{\PYGZpc{}} \PYG{o}{.}\PYG{o}{/}\PYG{n}{configure} \PYG{n}{CC}\PYG{o}{=}\PYG{n}{suncc} \PYG{n}{CFLAGS}\PYG{o}{=}\PYG{o}{\PYGZhy{}}\PYG{n}{O}
\end{sphinxVerbatim}

\sphinxAtStartPar
For a slightly more complicated example, consider a system where
several packages to be used by Kerberos are installed in
\sphinxcode{\sphinxupquote{/usr/foobar}}, including Berkeley DB 3.3, and an ss library that
needs to link against the curses library.  The configuration of
Kerberos might be done thus:

\begin{sphinxVerbatim}[commandchars=\\\{\}]
\PYG{o}{.}\PYG{o}{/}\PYG{n}{configure} \PYG{n}{CPPFLAGS}\PYG{o}{=}\PYG{o}{\PYGZhy{}}\PYG{n}{I}\PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{foobar}\PYG{o}{/}\PYG{n}{include} \PYG{n}{LDFLAGS}\PYG{o}{=}\PYG{o}{\PYGZhy{}}\PYG{n}{L}\PYG{o}{/}\PYG{n}{usr}\PYG{o}{/}\PYG{n}{foobar}\PYG{o}{/}\PYG{n}{lib} \PYGZbs{}
\PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{k}{with}\PYG{o}{\PYGZhy{}}\PYG{n}{system}\PYG{o}{\PYGZhy{}}\PYG{n}{et} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{k}{with}\PYG{o}{\PYGZhy{}}\PYG{n}{system}\PYG{o}{\PYGZhy{}}\PYG{n}{ss} \PYG{o}{\PYGZhy{}}\PYG{o}{\PYGZhy{}}\PYG{k}{with}\PYG{o}{\PYGZhy{}}\PYG{n}{system}\PYG{o}{\PYGZhy{}}\PYG{n}{db}  \PYGZbs{}
\PYG{n}{SS\PYGZus{}LIB}\PYG{o}{=}\PYG{l+s+s1}{\PYGZsq{}}\PYG{l+s+s1}{\PYGZhy{}lss \PYGZhy{}lcurses}\PYG{l+s+s1}{\PYGZsq{}}  \PYG{n}{DB\PYGZus{}HEADER}\PYG{o}{=}\PYG{n}{db3}\PYG{o}{/}\PYG{n}{db\PYGZus{}185}\PYG{o}{.}\PYG{n}{h} \PYG{n}{DB\PYGZus{}LIB}\PYG{o}{=}\PYG{o}{\PYGZhy{}}\PYG{n}{ldb}\PYG{o}{\PYGZhy{}}\PYG{l+m+mf}{3.3}
\end{sphinxVerbatim}


\section{osconf.hin}
\label{\detokenize{build/osconf:osconf-hin}}\label{\detokenize{build/osconf::doc}}
\sphinxAtStartPar
There is one configuration file which you may wish to edit to control
various compile\sphinxhyphen{}time parameters in the Kerberos distribution:

\begin{sphinxVerbatim}[commandchars=\\\{\}]
\PYG{n}{include}\PYG{o}{/}\PYG{n}{osconf}\PYG{o}{.}\PYG{n}{hin}
\end{sphinxVerbatim}

\sphinxAtStartPar
The list that follows is by no means complete, just some of the more
interesting variables.
\begin{description}
\item[{\sphinxstylestrong{DEFAULT\_PROFILE\_PATH}}] \leavevmode
\sphinxAtStartPar
The pathname to the file which contains the profiles for the known
realms, their KDCs, etc. The default value is \sphinxcode{\sphinxupquote{/etc/krb5.conf}}.

\item[{\sphinxstylestrong{DEFAULT\_KEYTAB\_NAME}}] \leavevmode
\sphinxAtStartPar
The type and pathname to the default server keytab file.  The
default is \DUrole{xref,std,std-ref}{DEFKTNAME}.

\item[{\sphinxstylestrong{DEFAULT\_KDC\_ENCTYPE}}] \leavevmode
\sphinxAtStartPar
The default encryption type for the KDC database master key.  The
default value is \sphinxcode{\sphinxupquote{aes256\sphinxhyphen{}cts\sphinxhyphen{}hmac\sphinxhyphen{}sha1\sphinxhyphen{}96}}.

\item[{\sphinxstylestrong{RCTMPDIR}}] \leavevmode
\sphinxAtStartPar
The directory which stores replay caches.  The default is
\sphinxcode{\sphinxupquote{/var/tmp}}.

\item[{\sphinxstylestrong{DEFAULT\_KDB\_FILE}}] \leavevmode
\sphinxAtStartPar
The location of the default database.  The default value is
\DUrole{xref,std,std-ref}{LOCALSTATEDIR}\sphinxcode{\sphinxupquote{/krb5kdc}}\sphinxcode{\sphinxupquote{/principal}}.

\end{description}



\renewcommand{\indexname}{Index}
\printindex
\end{document}