Bug 609408

Summary:	net-fs/cifs-utils-6.4: can't get rid of krb5 dependency (because of ADS)
Product:	Gentoo Linux	Reporter:	sphakka <marcoep>
Component:	Current packages	Assignee:	Gentoo's SAMBA Team <samba>
Status:	UNCONFIRMED ---
Severity:	normal	CC:	rzubaly
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description sphakka 2017-02-15 11:57:48 UTC

I'd like to get rid of kerberos. It looks like the only dep left on my system is on cifs-utils (for >=net-fs/samba-4.5.4), because of ADS (which I'd like to keep):

 # equery d virtual/krb5-0-r1
   * These packages depend on virtual/krb5-0-r1:
   ...
   net-fs/cifs-utils-6.4 (ads ? virtual/krb5)
   ...

 # equery g --depth=1 net-fs/cifs-utils
 * Searching for cifs-utils in net-fs ...

 * dependency graph for net-fs/cifs-utils-6.4
 `--  net-fs/cifs-utils-6.4  amd64 
   ...
   `--  virtual/krb5-0-r1  (virtual/krb5) amd64 
   ...

Hence the question: can we have ADS *without* kerberos?

Comment 1 Garri 2017-12-09 15:39:50 UTC

I have similar issue. Samba client requires net-fs/cifs-utils with [ads] use flag. In it's turn, [ads] flag requires krb5:

RDEPEND="${CDEPEND}
        client? ( net-fs/cifs-utils[ads?] )


For example, I don't need Active Directory services and Kerberos support in my systems, but have to install heimdal or mit-krb5 Kerberos implementation.

Moreover Samba itself doesn't require external Kerberos implementation. For example, I use Samba's integrated implementation (-system-mitkrb5 -system-heimdal):

net-fs/samba-4.7.3::gentoo was built with the following:
USE="acl client cups fam pam systemd -addc -addns -ads -ceph -cluster -debug -dmapi -gnutls -gpg -iprint -ldap -python -quota (-selinux) -syslog (-system-heimdal) -system-mitkrb5 -test -winbind -zeroconf" ABI_X86="(64) -32 (-x32)" PYTHON_TARGETS="python2_7"


Thanks.