Several gnome components (gnome-control-center, gnome-online-accounts) require mit-krb5 for kerberos support, and upstream has shown absolutely no interest in adding heimdal compatibility. samba-4 (just unmasked in ~arch) of course requires heimdal. And most gnome users want samba support in gvfs. So the current situation where mit-krb5 and heimdal are hard-blocking each other is no longer acceptable, since a complete gnome desktop install pulls in both. Please figure out a way to make the two kerberos implementations parallel-installable. In fedora, for example, heimdal lives in the /usr/lib/heimdal prefix to avoid file collisions.
I am not interested as long as both upstreams are uncooperative. Too much needless work to work around stupid upstream politics. However, if anyone steps up, I'll try and help.
It's not only gnome, nfs-utils are affected too. Build nfs-utils with kerberos support needs app-crypt/mit-krb5: # kth-krb doesn't provide the right include # files, and nfs-utils doesn't build against heimdal either, # so don't depend on virtual/krb. # (04 Feb 2005 agriffis)
I fear that this is becoming quite a showstopper, my updates are piling up. By no means I'm an expert in ebuilds management, but if no one is willing to have a look a this I can try to play a little bit with it, if someone can give me some hints or examples to get me started. Thanks.
Just wanted to add my 2 pence on this one... I'm running several gentoo boxes, mostly as fileservers, and the recent unmasking of samba 4 has kicked this issue to the forefront for me. I require NFSv4 with kerberos encryption to serve secure NFS to linux clients, as well as Samba to serve the Windows client. It would make the role of a fileserver pretty useless if I can't have these installed concurrently. For now, I'm just going to keep Samba 4 masked, but a longer term solution is required. I'm not genius ato programming, but I can knock patches and ebuilds into shape, so I'd be willing to help if I can. What are the options here? Is it possible to merge the functionality of these projects into one? How about slotting the packages - is that possible?
(In reply to Russell Knighton from comment #4) > > What are the options here? Is it possible to merge the functionality of > these projects into one? How about slotting the packages - is that possible? The best solution, as far as I can see, would be to implement the same solution as Fedora does, with heimdal installed in /usr/lib/heimdal (as Rostovtsev mentions in the description). You need to be able to have both packages installed at the same time. I have no idea what kind of breakage this will do upon packages that depends on heimdal.
>=net-fs/samba-4.2.4-r1 have a system-mitkrb5 USE flag which enables use of app-crypt/mit-krb5 instead of app-crypt/heimdal.
(In reply to Lars Wendler (Polynomial-C) from comment #6) > >=net-fs/samba-4.2.4-r1 have a system-mitkrb5 USE flag which enables use of app-crypt/mit-krb5 instead of app-crypt/heimdal. When will this version and associated USE flag be in the tree?
No one's screaming about this anymore. Can we consider it WONTFIX?
closing.
*** Bug 774318 has been marked as a duplicate of this bug. ***
This link is working no more https://src.fedoraproject.org/heimdal/blob/HEAD/f/heimdal.spec
