-.. _options2configure:\r
-\r
-Options to *configure*\r
-======================\r
-\r
-There are a number of options to configure which you can use to\r
-control how the Kerberos distribution is built.\r
-\r
-Most commonly used options\r
---------------------------\r
-\r
-**--help**\r
- Provides help to configure. This will list the set of commonly\r
- used options for building Kerberos.\r
-\r
-**--prefix=**\ *PREFIX*\r
- By default, Kerberos will install the package's files rooted at\r
- ``/usr/local``. If you desire to place the binaries into the\r
- directory *PREFIX*, use this option.\r
-\r
-**--exec-prefix=**\ *EXECPREFIX*\r
- This option allows one to separate the architecture independent\r
- programs from the host-dependent files (configuration files,\r
- manual pages). Use this option to install architecture-dependent\r
- programs in *EXECPREFIX*. The default location is the value of\r
- specified by **--prefix** option.\r
-\r
-**--localstatedir=**\ *LOCALSTATEDIR*\r
- This option sets the directory for locally modifiable\r
- single-machine data. In Kerberos, this mostly is useful for\r
- setting a location for the KDC data files, as they will be\r
- installed in ``LOCALSTATEDIR/krb5kdc``, which is by default\r
- ``PREFIX/var/krb5kdc``.\r
-\r
-**--with-netlib**\ [=\ *libs*]\r
- Allows for suppression of or replacement of network libraries. By\r
- default, Kerberos V5 configuration will look for ``-lnsl`` and\r
- ``-lsocket``. If your operating system has a broken resolver\r
- library or fails to pass the tests in ``src/tests/resolv``, you\r
- will need to use this option.\r
-\r
-**--with-tcl=**\ *TCLPATH*\r
- Some of the unit-tests in the build tree rely upon using a program\r
- in Tcl. The directory specified by *TCLPATH* specifies where the\r
- Tcl header file (TCLPATH/include/tcl.h) as well as where the Tcl\r
- library (TCLPATH/lib) should be found.\r
-\r
-**--enable-dns-for-realm**\r
- Enable the use of DNS to look up a host's Kerberos realm, or a\r
- realm's KDCs, if the information is not provided in\r
- :ref:`krb5.conf(5)`. See :ref:`kdc_hostnames` for information\r
- about using DNS to locate the KDCs, and :ref:`mapping_hostnames`\r
- for information about using DNS to determine the default realm.\r
- By default, DNS lookups are enabled for the former but not for the\r
- latter.\r
-\r
-**--with-system-et**\r
- Use an installed version of the error-table (et) support software,\r
- the compile_et program, the com_err.h header file and the com_err\r
- library. If these are not in the default locations, you may wish\r
- to specify ``CPPFLAGS=-I/some/dir`` and\r
- ``LDFLAGS=-L/some/other/dir`` options at configuration time as\r
- well.\r
-\r
- If this option is not given, a version supplied with the Kerberos\r
- sources will be built and installed along with the rest of the\r
- Kerberos tree, for Kerberos applications to link against.\r
-\r
-**--with-system-ss**\r
- Use an installed version of the subsystem command-line interface\r
- software, the mk_cmds program, the ``ss/ss.h`` header file and the\r
- ss library. If these are not in the default locations, you may\r
- wish to specify ``CPPFLAGS=-I/some/dir`` and\r
- ``LDFLAGS=-L/some/other/dir`` options at configuration time as\r
- well. See also the **SS_LIB** option.\r
-\r
- If this option is not given, the ss library supplied with the\r
- Kerberos sources will be compiled and linked into those programs\r
- that need it; it will not be installed separately.\r
-\r
-**--with-system-db**\r
- Use an installed version of the Berkeley DB package, which must\r
- provide an API compatible with version 1.85. This option is\r
- unsupported and untested. In particular, we do not know if the\r
- database-rename code used in the dumpfile load operation will\r
- behave properly.\r
-\r
- If this option is not given, a version supplied with the Kerberos\r
- sources will be built and installed. (We are not updating this\r
- version at this time because of licensing issues with newer\r
- versions that we haven't investigated sufficiently yet.)\r
-\r
-\r
-Environment variables\r
----------------------\r
-\r
-**CC=**\ *COMPILER*\r
- Use *COMPILER* as the C compiler.\r
-\r
-**CFLAGS=**\ *FLAGS*\r
- Use *FLAGS* as the default set of C compiler flags.\r
-\r
-**CPPFLAGS=**\ *CPPOPTS*\r
- Use *CPPOPTS* as the default set of C preprocessor flags. The\r
- most common use of this option is to select certain #define's for\r
- use with the operating system's include files.\r
-\r
-**CPP=**\ *CPP*\r
- C preprocessor to use. (e.g. ``CPP='gcc -E'``)\r
-\r
-**DB_HEADER=**\ *headername*\r
- If db.h is not the correct header file to include to compile\r
- against the Berkeley DB 1.85 API, specify the correct header file\r
- name with this option. For example, ``DB_HEADER=db3/db_185.h``.\r
-\r
-**DB_LIB=**\ *libs*...\r
- If ``-ldb`` is not the correct library specification for the\r
- Berkeley DB library version to be used, override it with this\r
- option. For example, ``DB_LIB=-ldb-3.3``.\r
-\r
-**LD=**\ *LINKER*\r
- Use *LINKER* as the default loader if it should be different from\r
- C compiler as specified above.\r
-\r
-**LDFLAGS=**\ *LDOPTS*\r
- This option informs the linker where to get additional libraries\r
- (e.g. ``-L<lib dir>``).\r
-\r
-**LIBS=**\ *LDNAME*\r
- This option allows one to specify libraries to be passed to the\r
- linker (e.g. ``-l<library>``)\r
-\r
-**SS_LIB=**\ *libs*...\r
- If ``-lss`` is not the correct way to link in your installed ss\r
- library, for example if additional support libraries are needed,\r
- specify the correct link options here. Some variants of this\r
- library are around which allow for Emacs-like line editing, but\r
- different versions require different support libraries to be\r
- explicitly specified.\r
-\r
- This option is ignored if **--with-system-ss** is not specified.\r
-\r
-**CXX**\r
- C++ compiler command\r
-\r
-**CXXFLAGS**\r
- C++ compiler flags\r
-\r
-**YACC**\r
- The 'Yet Another C Compiler' implementation to use. Defaults to\r
- the first program found out of: '`bison -y`', '`byacc`',\r
- '`yacc`'.\r
-\r
-**YFLAGS**\r
- The list of arguments that will be passed by default to $YACC.\r
- This script will default YFLAGS to the empty string to avoid a\r
- default value of ``-d`` given by some make applications.\r
-\r
-\r
-Fine tuning of the installation directories\r
--------------------------------------------\r
-\r
-**--bindir=**\ *DIR*\r
- User executables. Defaults to ``EXECPREFIX/bin``, where\r
- *EXECPREFIX* is the path specified by **--exec-prefix**\r
- configuration option.\r
-\r
-**--sbindir=**\ *DIR*\r
- System admin executables. Defaults to ``EXECPREFIX/sbin``, where\r
- *EXECPREFIX* is the path specified by **--exec-prefix**\r
- configuration option.\r
-\r
-**--libexecdir=**\ *DIR*\r
- Program executables. Defaults to ``EXECPREFIX/libexec``, where\r
- *EXECPREFIX* is the path specified by **--exec-prefix**\r
- configuration option.\r
-\r
-**--sysconfdir=**\ *DIR*\r
- Read-only single-machine data. Defaults to ``PREFIX/etc``, where\r
- *PREFIX* is the path specified by **--prefix** configuration\r
- option.\r
-\r
-**--sharedstatedir=**\ *DIR*\r
- Modifiable architecture-independent data. Defaults to\r
- ``PREFIX/com``, where *PREFIX* is the path specified by\r
- **--prefix** configuration option.\r
-\r
-**--libdir=**\ *DIR*\r
- Object code libraries. Defaults to ``EXECPREFIX/lib``, where\r
- *EXECPREFIX* is the path specified by **--exec-prefix**\r
- configuration option.\r
-\r
-**--includedir=**\ *DIR*\r
- C header files. Defaults to ``PREFIX/include``, where *PREFIX* is\r
- the path specified by **--prefix** configuration option.\r
-\r
-**--oldincludedir=**\ *DIR*\r
- C header files for non-gcc. Default to ``/usr/include``.\r
-\r
-**--datarootdir=**\ *DATAROOTDIR*\r
- Read-only architecture-independent data root. Defaults to\r
- ``PREFIX/share``, where *PREFIX* is the path specified by\r
- **--prefix** configuration option.\r
-\r
-**--datadir=**\ *DIR*\r
- Read-only architecture-independent data. Defaults to path\r
- specified by **--datarootdir** configuration option.\r
-\r
-**--infodir=**\ *DIR*\r
- Info documentation. Defaults to ``DATAROOTDIR/info``, where\r
- *DATAROOTDIR* is the path specified by **--datarootdir**\r
- configuration option.\r
-\r
-**--localedir=**\ *DIR*\r
- Locale-dependent data. Defaults to ``DATAROOTDIR/locale``, where\r
- *DATAROOTDIR* is the path specified by **--datarootdir**\r
- configuration option.\r
-\r
-**--mandir=**\ *DIR*\r
- Man documentation. Defaults to ``DATAROOTDIR/man``, where\r
- *DATAROOTDIR* is the path specified by **--datarootdir**\r
- configuration option.\r
-\r
-**--docdir=**\ *DOCDIR*\r
- Documentation root. Defaults to ``DATAROOTDIR/doc/krb5``, where\r
- *DATAROOTDIR* is the path specified by **--datarootdir**\r
- configuration option.\r
-\r
-**--htmldir=**\ *DIR*\r
- HTML documentation. Defaults to path specified by **--docdir**\r
- configuration option.\r
-\r
-**--dvidir=**\ *DIR*\r
- DVI documentation. Defaults to path specified by **--docdir**\r
- configuration option.\r
-\r
-**--pdfdir=**\ *DIR*\r
- PDF documentation. Defaults to path specified by **--docdir**\r
- configuration option.\r
-\r
-**--psdir=**\ *DIR*\r
- PostScript documentation. Defaults to path specified by\r
- **--docdir** configuration option.\r
-\r
-\r
-Program names\r
--------------\r
-\r
-**--program-prefix=**\ *PREFIX*\r
- Prepend *PREFIX* to the names of the programs when installing\r
- them. For example, specifying ``--program-prefix=mit-`` at the\r
- configure time will cause the program named ``abc`` to be\r
- installed as ``mit-abc``.\r
-\r
-**--program-suffix=**\ *SUFFIX*\r
- Append *SUFFIX* to the names of the programs when installing them.\r
- For example, specifying ``--program-suffix=-mit`` at the configure\r
- time will cause the program named ``abc`` to be installed as\r
- ``abc-mit``.\r
-\r
-**--program-transform-name=**\ *PROGRAM*\r
- Run ``sed -e PROGRAM`` on installed program names. (*PROGRAM* is a\r
- sed script).\r
-\r
-\r
-System types\r
-------------\r
-\r
-**--build=**\ *BUILD*\r
- Configure for building on *BUILD*\r
- (e.g. ``--build=x86_64-linux-gnu``).\r
-\r
-**--host=**\ *HOST*\r
- Cross-compile to build programs to run on *HOST*\r
- (e.g. ``--host=x86_64-linux-gnu``). By default, Kerberos V5\r
- configuration will look for "build" option.\r
-\r
-\r
-Optional features\r
------------------\r
-\r
-**--disable-**\ *FEATURE*\r
- Do not include *FEATURE* (same as --enable-FEATURE=no).\r
-\r
-**--disable-option-checking**\r
- Ignore unrecognized --enable/--with options.\r
-\r
-**--enable-**\ *FEATURE*\ [=\ *ARG*]\r
- Include *FEATURE* [ARG=yes].\r
-\r
-**--enable-dns-for-realm**\r
- Enable DNS lookups of Kerberos realm names.\r
-\r
-**--enable-maintainer-mode**\r
- Enable rebuilding of source files, Makefiles, etc.\r
-\r
-**--disable-delayed-initialization**\r
- Initialize library code when loaded. Defaults to delay until\r
- first use.\r
-\r
-**--disable-thread-support**\r
- Don't enable thread support. Defaults to enabled.\r
-\r
-**--disable-rpath**\r
- Suppress run path flags in link lines.\r
-\r
-**--enable-athena**\r
- Build with MIT Project Athena configuration.\r
-\r
-**--enable-fortuna-test**\r
- Build to test Fortuna PRNG.\r
-\r
-**--disable-kdc-lookaside-cache**\r
- Disable the cache which detects client retransmits.\r
-\r
-**--disable-pkinit**\r
- Disable PKINIT plugin support.\r
-\r
-\r
-Optional packages\r
------------------\r
-\r
-**--with-**\ *PACKAGE*\ [=ARG\]\r
- Use *PACKAGE* (e.g. ``--with-imap``). The default value of *ARG*\r
- is ``yes``.\r
-\r
-**--without-**\ *PACKAGE*\r
- Do not use *PACKAGE* (same as ``--with-PACKAGE=no``)\r
- (e.g. ``--without-libedit``).\r
-\r
-**--with-size-optimizations**\r
- Enable a few optimizations to reduce code size possibly at some\r
- run-time cost.\r
-\r
-**--with-hesiod=**\ *path*\r
- Compile with Hesiod support. The *path* points to the Hesiod\r
- directory. By default Hesiod is unsupported.\r
-\r
-**--with-ldap**\r
- Compile OpenLDAP database backend module.\r
-\r
-**--with-vague-errors**\r
- Do not send helpful errors to client. For example, if the KDC\r
- should return only vague error codes to clients.\r
-\r
-**--with-crypto-impl=**\ *IMPL*\r
- Use specified crypto implementation (e.g. **--with-crypto=**\\r
- *openssl*). Default is a native MIT Kerberos implementation\r
- ``builtin``. The other currently implemented crypto backends are\r
- ``openssl`` and ``nss``. (See :ref:`mitK5features`)\r
-\r
-**--with-prng-alg=**\ *ALG*\r
- Use specified PRNG algorithm. For example, to use the OS native\r
- prng specify ``--with-prng-alg=os``.\r
-\r
- Default is the ``fortuna`` PRNG algorithm. For the ``nss`` crypto\r
- backend use one must explicitly specify ``--with-prng-alg=nss``.\r
- (See :ref:`mitK5features`)\r
-\r
-**--with-kdc-kdb-update**\r
- Update the KDC database with the information about\r
-\r
- * the last successful authentication;\r
- * the last failed authentication attempt;\r
- * the number of the failed authentication attempts.\r
-\r
- By default the kdb is not updated with this information.\r
-\r
-**--with-system-verto**\r
- Use an installed version of libverto. If the libverto header and\r
- library are not in default locations, you may wish to specify\r
- ``CPPFLAGS=-I/some/dir`` and ``LDFLAGS=-L/some/other/dir`` options\r
- at configuration time as well.\r
-\r
- If this option is not given, the build system will try to detect\r
- an installed version of libverto and use it if it is found.\r
- Otherwise, a version supplied with the Kerberos sources will be\r
- built and installed. The built-in version does not contain the\r
- full set of back-end modules and is not a suitable general\r
- replacement for the upstream version, but will work for the\r
- purposes of Kerberos.\r
-\r
- Specifying **--without-system-verto** will cause the built-in\r
- version of libverto to be used unconditionally.\r
-\r
-\r
-Examples\r
---------\r
-\r
-For example, in order to configure Kerberos on a Solaris machine using\r
-the suncc compiler with the optimizer turned on, run the configure\r
-script with the following options::\r
-\r
- % ./configure CC=suncc CFLAGS=-O\r
-\r
-For a slightly more complicated example, consider a system where\r
-several packages to be used by Kerberos are installed in\r
-``/usr/foobar``, including Berkeley DB 3.3, and an ss library that\r
-needs to link against the curses library. The configuration of\r
-Kerberos might be done thus::\r
-\r
- ./configure CPPFLAGS=-I/usr/foobar/include LDFLAGS=-L/usr/foobar/lib --with-system-et --with-system-ss --with-system-db SS_LIB='-lss -lcurses' DB_HEADER=db3/db_185.h DB_LIB=-ldb-3.3\r
+.. _options2configure:
+
+Options to *configure*
+======================
+
+There are a number of options to configure which you can use to
+control how the Kerberos distribution is built.
+
+Most commonly used options
+--------------------------
+
+**--help**
+ Provides help to configure. This will list the set of commonly
+ used options for building Kerberos.
+
+**--prefix=**\ *PREFIX*
+ By default, Kerberos will install the package's files rooted at
+ ``/usr/local``. If you desire to place the binaries into the
+ directory *PREFIX*, use this option.
+
+**--exec-prefix=**\ *EXECPREFIX*
+ This option allows one to separate the architecture independent
+ programs from the host-dependent files (configuration files,
+ manual pages). Use this option to install architecture-dependent
+ programs in *EXECPREFIX*. The default location is the value of
+ specified by **--prefix** option.
+
+**--localstatedir=**\ *LOCALSTATEDIR*
+ This option sets the directory for locally modifiable
+ single-machine data. In Kerberos, this mostly is useful for
+ setting a location for the KDC data files, as they will be
+ installed in ``LOCALSTATEDIR/krb5kdc``, which is by default
+ ``PREFIX/var/krb5kdc``.
+
+**--with-netlib**\ [=\ *libs*]
+ Allows for suppression of or replacement of network libraries. By
+ default, Kerberos V5 configuration will look for ``-lnsl`` and
+ ``-lsocket``. If your operating system has a broken resolver
+ library or fails to pass the tests in ``src/tests/resolv``, you
+ will need to use this option.
+
+**--with-tcl=**\ *TCLPATH*
+ Some of the unit-tests in the build tree rely upon using a program
+ in Tcl. The directory specified by *TCLPATH* specifies where the
+ Tcl header file (TCLPATH/include/tcl.h) as well as where the Tcl
+ library (TCLPATH/lib) should be found.
+
+**--enable-dns-for-realm**
+ Enable the use of DNS to look up a host's Kerberos realm, or a
+ realm's KDCs, if the information is not provided in
+ :ref:`krb5.conf(5)`. See :ref:`kdc_hostnames` for information
+ about using DNS to locate the KDCs, and :ref:`mapping_hostnames`
+ for information about using DNS to determine the default realm.
+ By default, DNS lookups are enabled for the former but not for the
+ latter.
+
+**--with-system-et**
+ Use an installed version of the error-table (et) support software,
+ the compile_et program, the com_err.h header file and the com_err
+ library. If these are not in the default locations, you may wish
+ to specify ``CPPFLAGS=-I/some/dir`` and
+ ``LDFLAGS=-L/some/other/dir`` options at configuration time as
+ well.
+
+ If this option is not given, a version supplied with the Kerberos
+ sources will be built and installed along with the rest of the
+ Kerberos tree, for Kerberos applications to link against.
+
+**--with-system-ss**
+ Use an installed version of the subsystem command-line interface
+ software, the mk_cmds program, the ``ss/ss.h`` header file and the
+ ss library. If these are not in the default locations, you may
+ wish to specify ``CPPFLAGS=-I/some/dir`` and
+ ``LDFLAGS=-L/some/other/dir`` options at configuration time as
+ well. See also the **SS_LIB** option.
+
+ If this option is not given, the ss library supplied with the
+ Kerberos sources will be compiled and linked into those programs
+ that need it; it will not be installed separately.
+
+**--with-system-db**
+ Use an installed version of the Berkeley DB package, which must
+ provide an API compatible with version 1.85. This option is
+ unsupported and untested. In particular, we do not know if the
+ database-rename code used in the dumpfile load operation will
+ behave properly.
+
+ If this option is not given, a version supplied with the Kerberos
+ sources will be built and installed. (We are not updating this
+ version at this time because of licensing issues with newer
+ versions that we haven't investigated sufficiently yet.)
+
+
+Environment variables
+---------------------
+
+**CC=**\ *COMPILER*
+ Use *COMPILER* as the C compiler.
+
+**CFLAGS=**\ *FLAGS*
+ Use *FLAGS* as the default set of C compiler flags.
+
+**CPPFLAGS=**\ *CPPOPTS*
+ Use *CPPOPTS* as the default set of C preprocessor flags. The
+ most common use of this option is to select certain #define's for
+ use with the operating system's include files.
+
+**CPP=**\ *CPP*
+ C preprocessor to use. (e.g. ``CPP='gcc -E'``)
+
+**DB_HEADER=**\ *headername*
+ If db.h is not the correct header file to include to compile
+ against the Berkeley DB 1.85 API, specify the correct header file
+ name with this option. For example, ``DB_HEADER=db3/db_185.h``.
+
+**DB_LIB=**\ *libs*...
+ If ``-ldb`` is not the correct library specification for the
+ Berkeley DB library version to be used, override it with this
+ option. For example, ``DB_LIB=-ldb-3.3``.
+
+**LD=**\ *LINKER*
+ Use *LINKER* as the default loader if it should be different from
+ C compiler as specified above.
+
+**LDFLAGS=**\ *LDOPTS*
+ This option informs the linker where to get additional libraries
+ (e.g. ``-L<lib dir>``).
+
+**LIBS=**\ *LDNAME*
+ This option allows one to specify libraries to be passed to the
+ linker (e.g. ``-l<library>``)
+
+**SS_LIB=**\ *libs*...
+ If ``-lss`` is not the correct way to link in your installed ss
+ library, for example if additional support libraries are needed,
+ specify the correct link options here. Some variants of this
+ library are around which allow for Emacs-like line editing, but
+ different versions require different support libraries to be
+ explicitly specified.
+
+ This option is ignored if **--with-system-ss** is not specified.
+
+**CXX**
+ C++ compiler command
+
+**CXXFLAGS**
+ C++ compiler flags
+
+**YACC**
+ The 'Yet Another C Compiler' implementation to use. Defaults to
+ the first program found out of: '`bison -y`', '`byacc`',
+ '`yacc`'.
+
+**YFLAGS**
+ The list of arguments that will be passed by default to $YACC.
+ This script will default YFLAGS to the empty string to avoid a
+ default value of ``-d`` given by some make applications.
+
+
+Fine tuning of the installation directories
+-------------------------------------------
+
+**--bindir=**\ *DIR*
+ User executables. Defaults to ``EXECPREFIX/bin``, where
+ *EXECPREFIX* is the path specified by **--exec-prefix**
+ configuration option.
+
+**--sbindir=**\ *DIR*
+ System admin executables. Defaults to ``EXECPREFIX/sbin``, where
+ *EXECPREFIX* is the path specified by **--exec-prefix**
+ configuration option.
+
+**--libexecdir=**\ *DIR*
+ Program executables. Defaults to ``EXECPREFIX/libexec``, where
+ *EXECPREFIX* is the path specified by **--exec-prefix**
+ configuration option.
+
+**--sysconfdir=**\ *DIR*
+ Read-only single-machine data. Defaults to ``PREFIX/etc``, where
+ *PREFIX* is the path specified by **--prefix** configuration
+ option.
+
+**--sharedstatedir=**\ *DIR*
+ Modifiable architecture-independent data. Defaults to
+ ``PREFIX/com``, where *PREFIX* is the path specified by
+ **--prefix** configuration option.
+
+**--libdir=**\ *DIR*
+ Object code libraries. Defaults to ``EXECPREFIX/lib``, where
+ *EXECPREFIX* is the path specified by **--exec-prefix**
+ configuration option.
+
+**--includedir=**\ *DIR*
+ C header files. Defaults to ``PREFIX/include``, where *PREFIX* is
+ the path specified by **--prefix** configuration option.
+
+**--oldincludedir=**\ *DIR*
+ C header files for non-gcc. Default to ``/usr/include``.
+
+**--datarootdir=**\ *DATAROOTDIR*
+ Read-only architecture-independent data root. Defaults to
+ ``PREFIX/share``, where *PREFIX* is the path specified by
+ **--prefix** configuration option.
+
+**--datadir=**\ *DIR*
+ Read-only architecture-independent data. Defaults to path
+ specified by **--datarootdir** configuration option.
+
+**--infodir=**\ *DIR*
+ Info documentation. Defaults to ``DATAROOTDIR/info``, where
+ *DATAROOTDIR* is the path specified by **--datarootdir**
+ configuration option.
+
+**--localedir=**\ *DIR*
+ Locale-dependent data. Defaults to ``DATAROOTDIR/locale``, where
+ *DATAROOTDIR* is the path specified by **--datarootdir**
+ configuration option.
+
+**--mandir=**\ *DIR*
+ Man documentation. Defaults to ``DATAROOTDIR/man``, where
+ *DATAROOTDIR* is the path specified by **--datarootdir**
+ configuration option.
+
+**--docdir=**\ *DOCDIR*
+ Documentation root. Defaults to ``DATAROOTDIR/doc/krb5``, where
+ *DATAROOTDIR* is the path specified by **--datarootdir**
+ configuration option.
+
+**--htmldir=**\ *DIR*
+ HTML documentation. Defaults to path specified by **--docdir**
+ configuration option.
+
+**--dvidir=**\ *DIR*
+ DVI documentation. Defaults to path specified by **--docdir**
+ configuration option.
+
+**--pdfdir=**\ *DIR*
+ PDF documentation. Defaults to path specified by **--docdir**
+ configuration option.
+
+**--psdir=**\ *DIR*
+ PostScript documentation. Defaults to path specified by
+ **--docdir** configuration option.
+
+
+Program names
+-------------
+
+**--program-prefix=**\ *PREFIX*
+ Prepend *PREFIX* to the names of the programs when installing
+ them. For example, specifying ``--program-prefix=mit-`` at the
+ configure time will cause the program named ``abc`` to be
+ installed as ``mit-abc``.
+
+**--program-suffix=**\ *SUFFIX*
+ Append *SUFFIX* to the names of the programs when installing them.
+ For example, specifying ``--program-suffix=-mit`` at the configure
+ time will cause the program named ``abc`` to be installed as
+ ``abc-mit``.
+
+**--program-transform-name=**\ *PROGRAM*
+ Run ``sed -e PROGRAM`` on installed program names. (*PROGRAM* is a
+ sed script).
+
+
+System types
+------------
+
+**--build=**\ *BUILD*
+ Configure for building on *BUILD*
+ (e.g. ``--build=x86_64-linux-gnu``).
+
+**--host=**\ *HOST*
+ Cross-compile to build programs to run on *HOST*
+ (e.g. ``--host=x86_64-linux-gnu``). By default, Kerberos V5
+ configuration will look for "build" option.
+
+
+Optional features
+-----------------
+
+**--disable-**\ *FEATURE*
+ Do not include *FEATURE* (same as --enable-FEATURE=no).
+
+**--disable-option-checking**
+ Ignore unrecognized --enable/--with options.
+
+**--enable-**\ *FEATURE*\ [=\ *ARG*]
+ Include *FEATURE* [ARG=yes].
+
+**--enable-dns-for-realm**
+ Enable DNS lookups of Kerberos realm names.
+
+**--enable-maintainer-mode**
+ Enable rebuilding of source files, Makefiles, etc.
+
+**--disable-delayed-initialization**
+ Initialize library code when loaded. Defaults to delay until
+ first use.
+
+**--disable-thread-support**
+ Don't enable thread support. Defaults to enabled.
+
+**--disable-rpath**
+ Suppress run path flags in link lines.
+
+**--enable-athena**
+ Build with MIT Project Athena configuration.
+
+**--enable-fortuna-test**
+ Build to test Fortuna PRNG.
+
+**--disable-kdc-lookaside-cache**
+ Disable the cache which detects client retransmits.
+
+**--disable-pkinit**
+ Disable PKINIT plugin support.
+
+
+Optional packages
+-----------------
+
+**--with-**\ *PACKAGE*\ [=ARG\]
+ Use *PACKAGE* (e.g. ``--with-imap``). The default value of *ARG*
+ is ``yes``.
+
+**--without-**\ *PACKAGE*
+ Do not use *PACKAGE* (same as ``--with-PACKAGE=no``)
+ (e.g. ``--without-libedit``).
+
+**--with-size-optimizations**
+ Enable a few optimizations to reduce code size possibly at some
+ run-time cost.
+
+**--with-hesiod=**\ *path*
+ Compile with Hesiod support. The *path* points to the Hesiod
+ directory. By default Hesiod is unsupported.
+
+**--with-ldap**
+ Compile OpenLDAP database backend module.
+
+**--with-vague-errors**
+ Do not send helpful errors to client. For example, if the KDC
+ should return only vague error codes to clients.
+
+**--with-crypto-impl=**\ *IMPL*
+ Use specified crypto implementation (e.g. **--with-crypto=**\
+ *openssl*). Default is a native MIT Kerberos implementation
+ ``builtin``. The other currently implemented crypto backends are
+ ``openssl`` and ``nss``. (See :ref:`mitK5features`)
+
+**--with-prng-alg=**\ *ALG*
+ Use specified PRNG algorithm. For example, to use the OS native
+ prng specify ``--with-prng-alg=os``.
+
+ Default is the ``fortuna`` PRNG algorithm. For the ``nss`` crypto
+ backend use one must explicitly specify ``--with-prng-alg=nss``.
+ (See :ref:`mitK5features`)
+
+**--with-kdc-kdb-update**
+ Update the KDC database with the information about
+
+ * the last successful authentication;
+ * the last failed authentication attempt;
+ * the number of the failed authentication attempts.
+
+ By default the kdb is not updated with this information.
+
+**--with-system-verto**
+ Use an installed version of libverto. If the libverto header and
+ library are not in default locations, you may wish to specify
+ ``CPPFLAGS=-I/some/dir`` and ``LDFLAGS=-L/some/other/dir`` options
+ at configuration time as well.
+
+ If this option is not given, the build system will try to detect
+ an installed version of libverto and use it if it is found.
+ Otherwise, a version supplied with the Kerberos sources will be
+ built and installed. The built-in version does not contain the
+ full set of back-end modules and is not a suitable general
+ replacement for the upstream version, but will work for the
+ purposes of Kerberos.
+
+ Specifying **--without-system-verto** will cause the built-in
+ version of libverto to be used unconditionally.
+
+
+Examples
+--------
+
+For example, in order to configure Kerberos on a Solaris machine using
+the suncc compiler with the optimizer turned on, run the configure
+script with the following options::
+
+ % ./configure CC=suncc CFLAGS=-O
+
+For a slightly more complicated example, consider a system where
+several packages to be used by Kerberos are installed in
+``/usr/foobar``, including Berkeley DB 3.3, and an ss library that
+needs to link against the curses library. The configuration of
+Kerberos might be done thus::
+
+ ./configure CPPFLAGS=-I/usr/foobar/include LDFLAGS=-L/usr/foobar/lib --with-system-et --with-system-ss --with-system-db SS_LIB='-lss -lcurses' DB_HEADER=db3/db_185.h DB_LIB=-ldb-3.3
projects / thirdparty / krb5.git / commitdiff
