Bug 17465

Summary:	No ebuild for afs-krb5 migration package
Product:	Gentoo Linux	Reporter:	Nick Palmer <nicholas>
Component:	New packages	Assignee:	Default Assignee for New Packages <maintainer-wanted>
Status:	RESOLVED WONTFIX
Severity:	major	CC:	mmokrejs, seemant, stefaan
Priority:	High	Keywords:	EBUILD
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	Incomplete ebuild for only installing heimdal utilities, to allow establishing an OpenAGS server with mit-krb5.

Description Nick Palmer 2003-03-13 17:37:35 UTC

I am attempting to get OpenAFS running using Kerberos 5 for authentication on my
gentoo machine. (So I can do kinit aklog to login to my AFS volumes which
require this.) There is no way in the ebuild to specify to build and install aklog.

Reproducible: Always
Steps to Reproduce:
1. 'emerge openafs'
2. 'emerge kbr'
3. kinit
4. aklog

Actual Results:  
aklog command not found.

Expected Results:  
Logged into afs using the ticket aquired with kinit.

Comment 1 Nick Palmer 2003-03-13 21:09:44 UTC

It tunrs out that aklog comes in a separate source tree. When I figure out where that source code lives I will try to write an ebuild for it.

Comment 2 Nick Palmer 2003-03-13 22:01:51 UTC

Changing the title since really support for this is from the migration kit located at:
ftp://ftp.cmf.nrl.navy.mil/pub/kerberos5/afs-krb5-1.3.tar.gz

Comment 3 Sebastian Roth 2003-04-16 09:08:18 UTC

Please check version 2.0 of the migration kit. Compiles _much_ better on my system!

Comment 4 Brad Cowan (RETIRED) gentoo-dev

2003-05-05 13:19:20 UTC

assigning to our AFS guy, rphillips

Comment 5 Bryan Jacobs 2006-04-07 18:31:37 UTC

Created attachment 84176 [details]
Incomplete ebuild for only installing heimdal utilities, to allow establishing an OpenAGS server with mit-krb5.

I've got /usr/bin/aklog as provided by net-fs/openafs-1.4.0-r3 here (emerged with USE="kerberos")...  But I'm using Heimdal.

However, when first establishing an OpenAFS server, either Heimdal's ktutil or the afs-krb5 asetkey program is necessary.  I prefer ktutil, myself, so here

Comment 6 Bryan Jacobs 2006-04-07 18:35:08 UTC

(In reply to comment #5)
> Created an attachment (id=84176) [edit]
> Incomplete ebuild for only installing heimdal utilities, to allow establishing
> an OpenAGS server with mit-krb5.
> 
> I've got /usr/bin/aklog as provided by net-fs/openafs-1.4.0-r3 here (emerged
> with USE="kerberos")...  But I'm using Heimdal.
> 
> However, when first establishing an OpenAFS server, either Heimdal's ktutil or
> the afs-krb5 asetkey program is necessary.  I prefer ktutil, myself, so here
> 

Note that the ebuild is incomplete and hackish.  It shouldn't clash with mit-krb5, but the kadmin.heimdal it installs also doesn't work because I'm too lazy.

To copy the Kerberos 5 AFS key into an AFS keyfile:

kadmin> ext -k mykeytab.keytab afs/cell@REALM
ktutil.heimdal copy mykeytab.keytab AFSKEYFILE:/etc/openafs/server/KeyFile

You don't ever need to run "bos addkey" or use the clunky asetkey program.  Just leave it to Heimdal.

Make sure not to accidentally increment the kvno with ktutil, though...

Comment 7 Jakub Moc (RETIRED) gentoo-dev

2007-09-14 14:49:15 UTC

Either find a maintainer, or if you want to maintain it yourself, feel free to reopen and join project sunrise, details here:

http://www.gentoo.org/proj/en/sunrise

Thanks. 

WONTFIX.