Mailing List Archive

SSSD and nsupdate installation issue
Hey all,

I've been trying to install SSSD on my Gentoo laptop over the past week
and keep getting stuck at the same spot. I've tried 2.2.0-r1, 2.3.1-r2,
and even 2.4.2 - all are failing during initial configuration, claiming
that "nsupdate does not support 'realm'". I've manually run the Autoconf
script and it doesn't seem to find this issue with nsupdate, so I'm
really starting to scratch my head. Admittedly, my knowledge of the
Gentoo package build process is lacking and after exhausting my
google-foo I now climb the mountain in search of guidance.

The dependencies and flags for SSSD seem pretty straightforward, so not
sure what could be causing this. Any pointers (or commiseration) would
be much appreciated.

A few snippets below:

checking for executable nsupdate... yes
checking for nsupdate 'realm' support'... no
configure: error: nsupdate does not support 'realm'

environment, line 3426:  Called econf '--localstatedir=/var'
'--runstatedir=/run' '--with-pid-path=/run'
'--with-plugin-path=/usr/lib64/sssd'
'--enable-pammoddir=//lib64/security'
'--with-ldb-lib-dir=/usr/lib64/samba/ldb'
'--with-db-path=/var/lib/sss/db'
'--with-gpo-cache-path=/var/lib/sss/gpo_cache'
'--with-pubconf-path=/var/lib/sss/pubconf'
'--with-pipe-path=/var/lib/sss/pipes'
'--with-mcache-path=/var/lib/sss/mc'
'--with-secrets-db-path=/var/lib/sss/secrets'
'--with-log-path=/var/log/sssd' '--with-os=gentoo'
'--with-nscd=/usr/sbin/nscd' '--with-unicode-lib=glib2'
'--disable-rpath' '--sbindir=/usr/sbin' '--enable-local-provider'
'--without-kcm' '--without-secrets' '--with-samba'
'--with-smb-idmap-interface-version=6' '--enable-cifs-idmap-plugin'
'--without-selinux' '--without-semanage' '--enable-krb5-locator-plugin'
'--disable-pac-responder' '--with-nfsv4-idmapd-plugin' '--enable-nls'
'--with-libnl' '--with-manpages' '--with-sudo' '--with-autofs'
'--with-ssh' '--disable-valgrind' '--without-python2-bindings'
'--without-python3-bindings' '--with-initscript=sysv'

Best,

Alex
Re: SSSD and nsupdate installation issue [ In reply to ]
>Hey all,
>
>I've been trying to install SSSD on my Gentoo laptop over the past week
>and keep getting stuck at the same spot. I've tried 2.2.0-r1, 2.3.1-r2,
>and even 2.4.2 - all are failing during initial configuration, claiming
>that "nsupdate does not support 'realm'". I've manually run the Autoconf
>script and it doesn't seem to find this issue with nsupdate, so I'm
>really starting to scratch my head. Admittedly, my knowledge of the
>Gentoo package build process is lacking and after exhausting my
>google-foo I now climb the mountain in search of guidance.
>
>The dependencies and flags for SSSD seem pretty straightforward, so not
>sure what could be causing this. Any pointers (or commiseration) would
>be much appreciated.
>
>A few snippets below:
>
>checking for executable nsupdate... yes
>checking for nsupdate 'realm' support'... no
>configure: error: nsupdate does not support 'realm'
>
>environment, line 3426:  Called econf '--localstatedir=/var'
>'--runstatedir=/run' '--with-pid-path=/run'
>'--with-plugin-path=/usr/lib64/sssd'
>'--enable-pammoddir=//lib64/security'
>'--with-ldb-lib-dir=/usr/lib64/samba/ldb'
>'--with-db-path=/var/lib/sss/db'
>'--with-gpo-cache-path=/var/lib/sss/gpo_cache'
>'--with-pubconf-path=/var/lib/sss/pubconf'
>'--with-pipe-path=/var/lib/sss/pipes'
>'--with-mcache-path=/var/lib/sss/mc'
>'--with-secrets-db-path=/var/lib/sss/secrets'
>'--with-log-path=/var/log/sssd' '--with-os=gentoo'
>'--with-nscd=/usr/sbin/nscd' '--with-unicode-lib=glib2'
>'--disable-rpath' '--sbindir=/usr/sbin' '--enable-local-provider'
>'--without-kcm' '--without-secrets' '--with-samba'
>'--with-smb-idmap-interface-version=6' '--enable-cifs-idmap-plugin'
>'--without-selinux' '--without-semanage' '--enable-krb5-locator-plugin'
>'--disable-pac-responder' '--with-nfsv4-idmapd-plugin' '--enable-nls'
>'--with-libnl' '--with-manpages' '--with-sudo' '--with-autofs'
>'--with-ssh' '--disable-valgrind' '--without-python2-bindings'
>'--without-python3-bindings' '--with-initscript=sysv'
>
>Best,
>
>Alex

The problem seems to be described in this bug report:

https://bugs.gentoo.org/679838

It also describes a workaround (set FEATURES=-network-sandbox).

DaveF
Re: SSSD and nsupdate installation issue [ In reply to ]
Dave,

That did the trick! Adding the bug tracker to my list of resources for
future troubleshooting. Another day wiser, I suppose.

Many thanks!

On 3/13/21 5:28 PM, David M. Fellows wrote:
>> Hey all,
>>
>> I've been trying to install SSSD on my Gentoo laptop over the past week
>> and keep getting stuck at the same spot. I've tried 2.2.0-r1, 2.3.1-r2,
>> and even 2.4.2 - all are failing during initial configuration, claiming
>> that "nsupdate does not support 'realm'". I've manually run the Autoconf
>> script and it doesn't seem to find this issue with nsupdate, so I'm
>> really starting to scratch my head. Admittedly, my knowledge of the
>> Gentoo package build process is lacking and after exhausting my
>> google-foo I now climb the mountain in search of guidance.
>>
>> The dependencies and flags for SSSD seem pretty straightforward, so not
>> sure what could be causing this. Any pointers (or commiseration) would
>> be much appreciated.
>>
>> A few snippets below:
>>
>> checking for executable nsupdate... yes
>> checking for nsupdate 'realm' support'... no
>> configure: error: nsupdate does not support 'realm'
>>
>> environment, line 3426:  Called econf '--localstatedir=/var'
>> '--runstatedir=/run' '--with-pid-path=/run'
>> '--with-plugin-path=/usr/lib64/sssd'
>> '--enable-pammoddir=//lib64/security'
>> '--with-ldb-lib-dir=/usr/lib64/samba/ldb'
>> '--with-db-path=/var/lib/sss/db'
>> '--with-gpo-cache-path=/var/lib/sss/gpo_cache'
>> '--with-pubconf-path=/var/lib/sss/pubconf'
>> '--with-pipe-path=/var/lib/sss/pipes'
>> '--with-mcache-path=/var/lib/sss/mc'
>> '--with-secrets-db-path=/var/lib/sss/secrets'
>> '--with-log-path=/var/log/sssd' '--with-os=gentoo'
>> '--with-nscd=/usr/sbin/nscd' '--with-unicode-lib=glib2'
>> '--disable-rpath' '--sbindir=/usr/sbin' '--enable-local-provider'
>> '--without-kcm' '--without-secrets' '--with-samba'
>> '--with-smb-idmap-interface-version=6' '--enable-cifs-idmap-plugin'
>> '--without-selinux' '--without-semanage' '--enable-krb5-locator-plugin'
>> '--disable-pac-responder' '--with-nfsv4-idmapd-plugin' '--enable-nls'
>> '--with-libnl' '--with-manpages' '--with-sudo' '--with-autofs'
>> '--with-ssh' '--disable-valgrind' '--without-python2-bindings'
>> '--without-python3-bindings' '--with-initscript=sysv'
>>
>> Best,
>>
>> Alex
> The problem seems to be described in this bug report:
>
> https://bugs.gentoo.org/679838
>
> It also describes a workaround (set FEATURES=-network-sandbox).
>
> DaveF
>