Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 450948

Summary: net-nds/openldap-2.4.33-r1: smbkrb5passwd use flag ignores kerberos and samba use flags
Product: Gentoo Linux Reporter: Brian McCarter <bibocc>
Component: [OLD] ServerAssignee: LDAP Herd <ldap-bugs>
Status: RESOLVED FIXED    
Severity: enhancement CC: arfrever.fta
Priority: Normal Keywords: PATCH
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---
Attachments: Patch net-nds/openldap-2.4.33-r1 to honor samba and kerberos flags when building smbk5pwd.

Description Brian McCarter 2013-01-08 20:05:08 UTC
The smbkrb5passwd flag commands the ebuild to make and install an overlay called smbk5pwd.  When smbkrb5passwd is used, the ebuild defines DO_KRB5 and DO_SAMBA in the call to emake.  That builds smbk5pwd with support for kerberos and samba, even if those flags are not set for openldap.  

Reproducible: Always

Steps to Reproduce:
1. USE="smbkrb5passwd samba -kerberos" emerge net-nds/openldap
2. Add smbk5pwd overlay to an existing database, with samba schema but no kerberos schema.


Actual Results:  
This error gets printed to /var/log/messages:

smbk5pwd: unable to initialize krb5 admin context: unable to find realm of host


Expected Results:  
I want to be able to build support on my system for samba, but not for kerberos, and still be able to use smbk5pwd with openldap.
Comment 1 Brian McCarter 2013-01-08 20:29:21 UTC
Created attachment 334850 [details, diff]
Patch net-nds/openldap-2.4.33-r1 to honor samba and kerberos flags when building smbk5pwd.
Comment 2 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2014-10-12 06:27:51 UTC
in 2.4.40
Comment 3 Arfrever Frehtes Taifersar Arahesis 2014-10-12 06:52:32 UTC
MY_KRB5_INC="" should be outside 'if use samba' branch.