Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 609408

Summary: net-fs/cifs-utils-6.4: can't get rid of krb5 dependency (because of ADS)
Product: Gentoo Linux Reporter: sphakka <marcoep>
Component: Current packagesAssignee: Gentoo's SAMBA Team <samba>
Status: UNCONFIRMED ---    
Severity: normal CC: rzubaly
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Package list:
Runtime testing required: ---

Description sphakka 2017-02-15 11:57:48 UTC
I'd like to get rid of kerberos. It looks like the only dep left on my system is on cifs-utils (for >=net-fs/samba-4.5.4), because of ADS (which I'd like to keep):

 # equery d virtual/krb5-0-r1
   * These packages depend on virtual/krb5-0-r1:
   net-fs/cifs-utils-6.4 (ads ? virtual/krb5)

 # equery g --depth=1 net-fs/cifs-utils
 * Searching for cifs-utils in net-fs ...

 * dependency graph for net-fs/cifs-utils-6.4
 `--  net-fs/cifs-utils-6.4  amd64 
   `--  virtual/krb5-0-r1  (virtual/krb5) amd64 

Hence the question: can we have ADS *without* kerberos?
Comment 1 Garri 2017-12-09 15:39:50 UTC
I have similar issue. Samba client requires net-fs/cifs-utils with [ads] use flag. In it's turn, [ads] flag requires krb5:

        client? ( net-fs/cifs-utils[ads?] )

For example, I don't need Active Directory services and Kerberos support in my systems, but have to install heimdal or mit-krb5 Kerberos implementation.

Moreover Samba itself doesn't require external Kerberos implementation. For example, I use Samba's integrated implementation (-system-mitkrb5 -system-heimdal):

net-fs/samba-4.7.3::gentoo was built with the following:
USE="acl client cups fam pam systemd -addc -addns -ads -ceph -cluster -debug -dmapi -gnutls -gpg -iprint -ldap -python -quota (-selinux) -syslog (-system-heimdal) -system-mitkrb5 -test -winbind -zeroconf" ABI_X86="(64) -32 (-x32)" PYTHON_TARGETS="python2_7"