git-svn - Kerberos authentication is not supported

[nightman68]

git-svn is not supporting Kerberos authentication, which is feature needed in big organizations. That this authentication is working the serf library must be compiled/linked with Kerberos.

You need to install krb5-devel package and configure needs this argument
--with-gssapi=/usr/lib/mit/

Any chance to get this feature. I can support you testing this.

[dscho]

You need to install krb5-devel package and configure needs this argument
--with-gssapi=/usr/lib/mit/

@nightman68 Are you sure that this will fix the problem? You can verify your claim by following this document to rebuild krb5-devel.

[nightman68]

@dscho Sorry, I was not precise enough. Next try with reference to Ubuntu 15.10., earlier releases are not usable in this context!
When you install git-svn also the serf library will be installed:
$ sudo apt-get install git-svn
...
The following extra packages will be installed:
libapr1 libaprutil1 libserf-1-1 libsvn-perl libsvn1 libterm-readkey-perl libyaml-libyaml-perl
libyaml-perl
...
Now lets check the dependencies of serf library after installation:
$ ldd /usr/lib/x86_64-linux-gnu/libserf-1.so.1 | grep krb
libgssapi_krb5.so.2 => /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2 (0x00007fc11286d000)
libkrb5.so.3 => /usr/lib/x86_64-linux-gnu/libkrb5.so.3 (0x00007fc111746000)
libkrb5support.so.0 => /usr/lib/x86_64-linux-gnu/libkrb5support.so.0 (0x00007fc111105000)
$ ldd /usr/lib/x86_64-linux-gnu/libserf-1.so.1 | grep gss
libgssapi_krb5.so.2 => /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2 (0x00007f1045b8c000)

I installed your developer SDK and let's see what is linked into serf (hope it's the right lib?!)
$ ldd /usr/bin/msys-serf-1-0.dll
ntdll.dll => /c/Windows/SYSTEM32/ntdll.dll (0x77ad0000)
kernel32.dll => /c/Windows/system32/kernel32.dll (0x778b0000)
KERNELBASE.dll => /c/Windows/system32/KERNELBASE.dll (0x7fefd940000)
msys-apr-1-0.dll => /usr/bin/msys-apr-1-0.dll (0x49f230000)
msys-2.0.dll => /usr/bin/msys-2.0.dll (0x180040000)
msys-uuid-1.dll => /usr/bin/msys-uuid-1.dll (0x4ba2f0000)
msys-intl-8.dll => /usr/bin/msys-intl-8.dll (0x430b30000)
msys-iconv-2.dll => /usr/bin/msys-iconv-2.dll (0x5603f0000)
msys-gcc_s-seh-1.dll => /usr/bin/msys-gcc_s-seh-1.dll (0x5e8160000)
msys-aprutil-1-0.dll => /usr/bin/msys-aprutil-1-0.dll (0x4725d0000)
msys-crypt-0.dll => /usr/bin/msys-crypt-0.dll (0x43dbf0000)
msys-expat-1.dll => /usr/bin/msys-expat-1.dll (0x5b8660000)
msys-crypto-1.0.0.dll => /usr/bin/msys-crypto-1.0.0.dll (0x561730000)
msys-z.dll => /usr/bin/msys-z.dll (0x522fe0000)
msys-ssl-1.0.0.dll => /usr/bin/msys-ssl-1.0.0.dll (0x4ba5c0000)
No krb5/GSS libs are referenced and this is the purpose that apr lib. is delivering the massage that the auth. type is not supported.

The serf library must be compiled with krb5 support and for this the krb5-devel package is required and configure for serf library must be run with the argument:
--with-gssapi=/usr/lib/mit/
May be the path is different - must point to a configuration file, I normally do not build subversion binaries for Ubuntu only for RH or SUSE, sorry.

I hope it's more clear now?!

[dscho]

@nightman68 it is clearer now.

You should be able to verify that this indeed fixes the issue by rebuilding the serf package after editing these lines of PKGBUILD (please note that MSys2 uses scons, not the autoconf-based method to which you alluded).

[nightman68]

OK I tried to build the serf package but without success. Below the steps I run, please correct me if somethings is wrong!

Just by the way - a MIT Kerberos is not part of your dist so I have to use Heimdal package?!

installed git-sdk-installer-1.0.1-64.7z.exe
pacman -Sy heimdal-devel
pacman -Sy base-devel msys2-devel -> installed all
cd /usr/src/MSYS2-packages
git pull origin master
cd serf
makepkg -s
==> Making package: serf 1.3.8-1 (Wed, Dec 02, 2015 12:05:34 AM)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
-> Downloading serf-1.3.8.tar.bz2...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- 0:00:06 --:--:-- 0Warning: Transient problem: HTTP error Will retry in 3 seconds. 3 retries
Warning: left.
0 0 0 0 0 0 0 0 --:--:-- 0:00:04 --:--:-- 0Warning: Transient problem: HTTP error Will retry in 3 seconds. 2 retries
Warning: left.
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0Warning: Transient problem: HTTP error Will retry in 3 seconds. 1 retries
Warning: left.
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (22) The requested URL returned error: 502 Bad Gateway
==> ERROR: Failure while downloading serf-1.3.8.tar.bz2
Aborting.

Something is wring with the repos.?!

[dscho]

Something is wring with the repos.?!

Actually, I think something is wrong with Google Code. As you can see here, the package definition calls for serf to be downloaded from Google Code.

As you can see on their old home page, serf has moved on to Apache and I believe you need something like this:

diff --git a/serf/PKGBUILD b/serf/PKGBUILD
index 54d0165..91d9fc8 100644
--- a/serf/PKGBUILD
+++ b/serf/PKGBUILD
@@ -9,7 +9,7 @@ arch=('i686' 'x86_64')
 url="http://code.google.com/p/serf/"
 license=('Apache')
 makedepends=('scons' 'apr-util-devel')
-source=(http://serf.googlecode.com/svn/src_releases/${pkgbase}-${pkgver}.tar.bz2
+source=(https://archive.apache.org/dist/${pkgbase}/${pkgbase}-${pkgver}.tar.bz2
         03-destdir.patch
         05-disable-SHLIBVERSION.patch
         06-strcasecmp.patch)

[dscho]

pacman -Sy heimdal-devel

BTW You should not need to do that explicitly. This should be part of the makedepends line in the PKGBUILD file (which is interpreted by the -s flag to install those packages if needed).

[nightman68]

I tried again and the download was running but the build terminates with error:
MINGW64 /usr/src/MSYS2-packages/serf (master)
$ makepkg -s
==> Making package: serf 1.3.8-1 (Wed, Dec 02, 2015 8:53:54 PM)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
-> Found serf-1.3.8.tar.bz2
-> Found 03-destdir.patch
-> Found 05-disable-SHLIBVERSION.patch
-> Found 06-strcasecmp.patch
==> Validating source files with md5sums...
serf-1.3.8.tar.bz2 ... Passed
03-destdir.patch ... Passed
05-disable-SHLIBVERSION.patch ... Passed
06-strcasecmp.patch ... Passed
==> Extracting sources...
-> Extracting serf-1.3.8.tar.bz2 with bsdtar
==> Starting prepare()...
patching file SConstruct
Hunk #3 succeeded at 401 with fuzz 1.
Hunk #4 succeeded at 421 (offset 2 lines).
patching file SConstruct
patching file auth/auth.c
patching file auth/auth_basic.c
patching file auth/auth_spnego.c
patching file buckets/headers_buckets.c
patching file buckets/response_buckets.c
patching file outgoing.c
==> Removing existing $pkgdir/ directory...
==> Starting build()...
scons: Reading SConscript files ...
OSError: '/usr/bin/apr-1-config --cflags --cppflags --ldflags --includes --link-ld --libs' exited -11:
File "/usr/src/MSYS2-packages/serf/src/serf-1.3.8/SConstruct", line 345:
env.ParseConfig('$APR --cflags --cppflags --ldflags --includes'
File "/usr/lib/python2.7/site-packages/SCons/Environment.py", line 1576:
return function(self, self.backtick(command))
File "/usr/lib/python2.7/site-packages/SCons/Environment.py", line 594:
raise OSError("'%s' exited %d" % (command, status))
==> ERROR: A failure occurred in build().
Aborting...

Any idea?

I also tried to build the heimdal package, also with error:
MINGW64 /usr/src/MSYS2-packages/heimdal (master)
$ makepkg -s
==> Making package: heimdal 1.5.3-6 (Wed, Dec 02, 2015 8:04:21 PM)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Installing missing dependencies...
...
checking termios.h usability... no
checking termios.h presence... no
checking for termios.h... no
configure: error: termios.h is required!
configure: error: ./configure failed for lib/libedit
==> ERROR: A failure occurred in build().
Aborting...

[dscho]

$ pacman -Qo /usr/include/termios.h
/usr/include/termios.h is owned by msys2-runtime-devel newlib.33764.1b3adb5-1

The msys2-runtime-devel package is part of the msys2-devel group, so if you installed msys2-devel as documented in https://github.com/git-for-windows/git/wiki/Package-management#rebuild-packages, it should be there...

[nightman68]

OK, I started the wrong shell, with the right one I was able to compile serf after some modifications.

The checks are not running:
scons: *** [check] Source test/serf_get' not found, needed by targetcheck'.
scons: building terminated because of errors.
I did not investigate this I just removed the section from the config file.

That the authentication is working also the curl library must be compiled with GSSAPI support which is disabled in the package.

Here are the changes:

diff --git a/curl/PKGBUILD b/curl/PKGBUILD
index bca735d..4fb5787 100644
--- a/curl/PKGBUILD
+++ b/curl/PKGBUILD
@@ -9,7 +9,7 @@ arch=('i686' 'x86_64')
 url="http://curl.haxx.se"
 license=('MIT')
 depends=('ca-certificates')
-makedepends=('libmetalink-devel' 'libcrypt-devel' 'libidn-devel' 'libssh2-devel' 'openssl-devel' 'zlib-devel') #  'libcares-devel' 'heimdal-devel'
+makedepends=('libmetalink-devel' 'libcrypt-devel' 'libidn-devel' 'libssh2-devel' 'openssl-devel' 'zlib-devel' 'heimdal-devel') #  'libcares-devel'
 options=('!libtool' 'strip' '!debug')
 source=("http://curl.haxx.se/download/${pkgname}-${pkgver}.tar.bz2"{,.asc}
         curl-7.32.0-msys2.patch)
@@ -38,7 +38,7 @@ build() {
     --enable-ipv6 \
     --disable-hidden-symbols \
     --disable-ares \
-    --without-gssapi \
+    --with-gssapi \
     --with-libidn \
     --with-libmetalink \
     --without-librtmp \

diff --git a/serf/PKGBUILD b/serf/PKGBUILD
index 54d0165..c80d8fd 100644
--- a/serf/PKGBUILD
+++ b/serf/PKGBUILD
@@ -8,7 +8,7 @@ pkgdesc="High-performance asynchronous HTTP client library"
 arch=('i686' 'x86_64')
 url="http://code.google.com/p/serf/"
 license=('Apache')
-makedepends=('scons' 'apr-util-devel')
+makedepends=('scons' 'apr-util-devel' 'heimdal-devel' 'zlib-devel' 'openssl-devel' 'libiconv-devel')
 source=(http://serf.googlecode.com/svn/src_releases/${pkgbase}-${pkgver}.tar.bz2
         03-destdir.patch
         05-disable-SHLIBVERSION.patch
@@ -29,6 +29,7 @@ prepare() {
 build() {
   cd ${pkgbase}-${pkgver}
   scons PREFIX=/usr \
+        GSSAPI=/usr/bin/krb5-config \
         CFLAGS="${CFLAGS}"

   install -d "${srcdir}/dest/usr"

[dscho]

Good work!

The next steps are to commit those changes as two separate commits with excellent commit messages and then to submit them as Pull Requests upstream (https://github.com/Alexpux/MSYS2-packages).

[nightman68]

@dscho: I created the commits and the pull request. I hope this works because, as you can assume, I'm from the Subversion community and still not so familiar with the Git flow.

[dscho]

@nightman68 good job!

For lurkers, this is the Pull Request in question: msys2/MSYS2-packages#399

[nightman68]

Hi, any hint when this will be included in the git package?