Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 231400 - net-mail/fetchmail - heimdal compatibility
Summary: net-mail/fetchmail - heimdal compatibility
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Net-Mail Packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 185899
  Show dependency tree
 
Reported: 2008-07-10 10:12 UTC by Michael Hammer (RETIRED)
Modified: 2009-11-11 08:28 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
fetchmail-6.3.8-r3 which works with heimdal instead of mit-krb5 (fetchmail-6.3.8-r3.ebuild,2.32 KB, text/plain)
2008-07-10 10:12 UTC, Michael Hammer (RETIRED)
Details
fetchmail-6.3.8-r3 which works with heimdal instead of mit-krb5 (fetchmail-6.3.8-r3.ebuild,2.45 KB, text/plain)
2008-07-10 18:41 UTC, Michael Hammer (RETIRED)
Details
needed patch for ebuild (fetchmail-6.3.8-heimdal-1.2-MD5_Init.patch,956 bytes, patch)
2008-07-10 18:42 UTC, Michael Hammer (RETIRED)
Details | Diff
once again a minor change -> "|| die" if the conf.d and the init.d file are missing (fetchmail-6.3.8-r3.ebuild,2.46 KB, text/plain)
2008-07-12 16:52 UTC, Michael Hammer (RETIRED)
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Hammer (RETIRED) gentoo-dev 2008-07-10 10:12:13 UTC
We are just working on getting a usable heimdal into the gentoo tree. Therefore
it's necessary to modify fetchmail to depend on the virtual/mit-krb5. I've an already working overlay at git://git.overlays.gentoo.org/proj/kerberos.git. I'd like to ask you to inspect the suggested ebuild.

Kind regards, mueli
Comment 1 Michael Hammer (RETIRED) gentoo-dev 2008-07-10 10:12:55 UTC
Created attachment 160027 [details]
fetchmail-6.3.8-r3 which works with heimdal instead of mit-krb5
Comment 2 Michael Hammer (RETIRED) gentoo-dev 2008-07-10 18:41:52 UTC
Created attachment 160067 [details]
fetchmail-6.3.8-r3 which works with heimdal instead of mit-krb5
Comment 3 Michael Hammer (RETIRED) gentoo-dev 2008-07-10 18:42:17 UTC
Created attachment 160068 [details, diff]
needed patch for ebuild
Comment 4 Rafał Mużyło 2008-07-11 11:42:29 UTC
As I already asked in the older bug: 
does anyone now what was the purpose of that check,
if it seems to work without it ?
Comment 5 Michael Hammer (RETIRED) gentoo-dev 2008-07-11 18:29:22 UTC
I myself didn't ran into that problem. Mastamind found this issue - the only difference we found is his --as-needed ld flag. I think a problem only occurs then - my be it's only a linker problem ... I don't know. As far as I can say removing the libs doesn't make any probs because there are no unresolved symbols.

I don't really know if that was the point of your question. I also don't know which earlier bug you mean. Can you provide a bug number?

g, mueli
Comment 6 Rafał Mużyło 2008-07-11 19:35:37 UTC
Well, I was talking about bug 185652.
And the point was that this check was probably added for a reason,
so I was asking if removing that check is really safe
(it may be, if it was something that was affecting only some old lib configs
or atypical OSes.
Comment 7 Michael Hammer (RETIRED) gentoo-dev 2008-07-12 16:52:06 UTC
Created attachment 160204 [details]
once again a minor change -> "|| die" if the conf.d and the init.d file are missing
Comment 8 Michael Hammer (RETIRED) gentoo-dev 2008-07-28 15:25:58 UTC
Any progress here? We need this one as it blocks heimdal-1.2.x getting into tree ... please have a look on it!

g, mueli
Comment 9 Matthias Andree 2009-08-19 09:19:41 UTC
Hi,

As the fetchmail upstream maintainer, I'd suggest to forward such "does anyone know" kind of questions to the fetchmail mailing lists, such as fetchmail-devel@ - we're open to distributor input, comments, concerns, questions, remarks. Thank you.

I'm adding myself to Cc: and hope to address this bug for fetchmail 6.3.12.
Comment 10 Torsten Veller (RETIRED) gentoo-dev 2009-10-28 08:54:33 UTC
I want to add fetchmail-6.3.12 now.

Michael, your latest attached ebuild still uses krb4 in src_configure but dropped it from DEPEND. This seems to be wrong.

Do we remove krb4 completely?

| -IUSE="ssl nls kerberos krb4 hesiod tk"
| +IUSE="ssl nls kerberos hesiod tk"
[...]
| -       kerberos? ( app-crypt/mit-krb5 )
| -       krb4? ( <app-crypt/mit-krb5-1.7[krb4] )
| +       kerberos? ( virtual/krb5 )
[...]
| -               $(use_with krb4 kerberos) \
Comment 11 Michael Hammer (RETIRED) gentoo-dev 2009-10-28 09:37:05 UTC
krb4 support should be completely removed. krb4 isn't secure and will be dropped sooner or later (more sooner than later ;) ) by upstream. I've to be honest - it's a long time gone since I last worked on this fetchmail issue. If configure is searching for krb4 it would be nice if we can "disable" it - if possible.

g, Michael
Comment 12 Matthias Andree 2009-10-28 10:28:12 UTC
If the question is whether fetchmail will automatically pick up Kerberos 4: it will not automatically include it. The configure default is --without-kerberos.
Comment 13 Torsten Veller (RETIRED) gentoo-dev 2009-11-11 08:09:24 UTC
So krb4 was removed in 6.3.13 and it depends on "kerberos? ( virtual/krb5 )".

heimdal is probably not useable until openssl has heimdal support too (#245934)?

Thanks
Comment 14 Matthias Andree 2009-11-11 08:28:11 UTC
(In reply to comment #13)
> So krb4 was removed in 6.3.13 and it depends on "kerberos? ( virtual/krb5 )".

Not upstream, but fetchmail isn't picking up Kerberos IV unless that's explicitly requested. Note I haven't tested this in a long time.

> heimdal is probably not useable until openssl has heimdal support too
> (#245934)?

Fetchmail supports GSSAPI-with-Kerberos5 for authentication with Kerberos tickets (i. e. you fetch the ticket-granting-ticket (TGT) with kinit or thereabouts and can then authenticate).

I don't see why OpenSSL would need Kerberos support in this situation.