Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 177522 - app-crypt/mit-krb5-1.6.1 available with real LDAP-backend-support
Summary: app-crypt/mit-krb5-1.6.1 available with real LDAP-backend-support
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High enhancement with 2 votes (vote)
Assignee: Gentoo Kerberos Maintainers
URL: http://web.mit.edu/Kerberos/
Whiteboard:
Keywords:
: 191446 (view as bug list)
Depends on:
Blocks:
 
Reported: 2007-05-07 17:34 UTC by Matthias Nagl
Modified: 2010-05-06 03:10 UTC (History)
10 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
working ebuild (mit-krb5-1.6.1.ebuild,2.27 KB, text/plain)
2007-08-10 17:35 UTC, Marek Wróbel
Details
improved init.d script (mit-krb5kdc.initd,667 bytes, text/plain)
2007-08-10 17:36 UTC, Marek Wróbel
Details
mit-krb5-1.6.2.ebuild (mit-krb5-1.6.2.ebuild,2.26 KB, text/plain)
2007-08-15 13:24 UTC, Timo Gurr (RETIRED)
Details
mit-krb5-1.6.3-r2.patch (mit-krb5-1.6.3-r2.patch,1.47 KB, patch)
2008-04-10 14:09 UTC, Nguyen Thai Ngoc Duy (RETIRED)
Details | Diff
patch againt the ebuild and related files, relavent to current ebuild (bug177522-mit-krb5-1.6.3-r4.patch,2.32 KB, patch)
2008-11-05 04:02 UTC, Nathan Phillip Brink (binki) (RETIRED)
Details | Diff
sample file, my patched ebuild wants it (mit-krb5kdc.confd,89 bytes, text/plain)
2008-11-05 04:04 UTC, Nathan Phillip Brink (binki) (RETIRED)
Details
mit-krb5-1.6.3-r6.ebuild (mit-krb5-1.6.3-r6.ebuild,2.94 KB, text/plain)
2009-11-13 11:50 UTC, Tobias Schröpf
Details
mit-krb5-1.7-r1.ebuild (mit-krb5-1.7-r1.ebuild,2.56 KB, text/plain)
2009-11-13 11:52 UTC, Tobias Schröpf
Details
mit-krb5-1.7-r102.ebuild (mit-krb5-1.7-r102.ebuild,2.65 KB, text/plain)
2010-02-19 21:49 UTC, Andreis Vinogradovs ( slepnoga )
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Nagl 2007-05-07 17:34:01 UTC
I just saw that there is a new version of mit-krb5 available with real LDAP backend support (looks much better than the heimdal-ldap-support!). It would be great to get an ebuild! I can help in testing if needed.

Reproducible: Always
Comment 1 Marek Wróbel 2007-08-10 17:35:45 UTC
Created attachment 127503 [details]
working ebuild
Comment 2 Marek Wróbel 2007-08-10 17:36:41 UTC
Created attachment 127505 [details]
improved init.d script
Comment 3 Marek Wróbel 2007-08-10 17:38:56 UTC
Comment on attachment 127503 [details]
working ebuild

Added ldap to IUSE, RDEPEND and econf call.
Comment 4 Marek Wróbel 2007-08-10 17:39:35 UTC
Comment on attachment 127505 [details]
improved init.d script

Added 'use slapd' to depend().
Comment 5 Timo Gurr (RETIRED) gentoo-dev 2007-08-15 13:24:27 UTC
Created attachment 128163 [details]
mit-krb5-1.6.2.ebuild

Thanks for your ebuild, I used it for the attached mit-krb5-1.6.2.ebuild and only removed the unneeded PATCHV="0.1".

I suppose mit-krb5-1.6.* is needed for the cups 1.3 release since the cups output with mit-krb5-1.5.* is:

checking for krb5-config... /usr/bin/krb5-config
checking krb5.h usability... yes
checking krb5.h presence... yes
checking for krb5.h... yes
checking gssapi.h usability... no
checking gssapi.h presence... no
checking for gssapi.h... no
checking gssapi/gssapi.h usability... yes
checking gssapi/gssapi.h presence... yes
checking for gssapi/gssapi.h... yes
checking gssapi/gssapi_generic.h usability... yes
checking gssapi/gssapi_generic.h presence... yes
checking for gssapi/gssapi_generic.h... yes
checking gssapi/gssapi_krb5.h usability... yes
checking gssapi/gssapi_krb5.h presence... yes
checking for gssapi/gssapi_krb5.h... yes
checking for gsskrb5_register_acceptor_identity... no
checking for krb5_cc_new_unique... no
checking for GSS_C_NT_HOSTBASED_SERVICE... yes
checking for Heimdal Kerberos... no

and with mit-krb5-1.6.2:

checking for krb5-config... /usr/bin/krb5-config
checking krb5.h usability... yes
checking krb5.h presence... yes
checking for krb5.h... yes
checking gssapi.h usability... yes
checking gssapi.h presence... yes
checking for gssapi.h... yes
checking gssapi/gssapi.h usability... yes
checking gssapi/gssapi.h presence... yes
checking for gssapi/gssapi.h... yes
checking gssapi/gssapi_generic.h usability... yes
checking gssapi/gssapi_generic.h presence... yes
checking for gssapi/gssapi_generic.h... yes
checking gssapi/gssapi_krb5.h usability... yes
checking gssapi/gssapi_krb5.h presence... yes
checking for gssapi/gssapi_krb5.h... yes
checking for gsskrb5_register_acceptor_identity... no
checking for krb5_cc_new_unique... yes
checking for GSS_C_NT_HOSTBASED_SERVICE... yes
checking for Heimdal Kerberos... no
Comment 6 Jakub Moc (RETIRED) gentoo-dev 2007-09-06 06:44:14 UTC
*** Bug 191446 has been marked as a duplicate of this bug. ***
Comment 7 Marek Wróbel 2007-11-05 22:49:09 UTC
So... Is anyone going to put the attached ebuild into the portage tree?
Comment 8 Nguyen Thai Ngoc Duy (RETIRED) gentoo-dev 2008-04-10 14:09:52 UTC
Created attachment 149299 [details, diff]
mit-krb5-1.6.3-r2.patch

 - Add useflag ldap
 - Add comment "use slapd" to mit-krb5kdc init.d (I don't think enabling it by default is a good idea)
 - Add kerberos.schema

Works pretty well for me. Kerberos herd, OK to commit?
Comment 9 Nathan Phillip Brink (binki) (RETIRED) gentoo-dev 2008-11-05 04:02:52 UTC
Created attachment 170769 [details, diff]
patch againt the ebuild and related files, relavent to current ebuild

This patch is the result of manually merging the current patch by Nguyen Thai Ngoc Duy to mit-krb5-1.6.3-r4.ebuild. Maybe this should deprecate his patch?
Also, it changes files/mit-krb5kdc.initd so that the user can edit /etc/conf.d/mit-krb5kdc rather than /etc/init.d/mit-krb5kdc to enable slapd as a dependency of the mit-krb5kdc service. The sample mit-krb5kdc.confd file the ebuild now refers to should be attached next.

I was able to compile the ebuild after applying my changes to it. However, I haven't had time to test whether or not the ldap support actually works. I hope it does, and I'll be experimenting with it soon, hopefully.
Comment 10 Nathan Phillip Brink (binki) (RETIRED) gentoo-dev 2008-11-05 04:04:00 UTC
Created attachment 170771 [details]
sample file, my patched ebuild wants it
Comment 11 Tobias Schröpf 2009-11-08 09:18:21 UTC
Hi,

I ve just installed mit-krb5-1.6.3-r6. But now I'm missing the kerberos.schema file in my openldap/schemas directory :-) (which actually comes with the MIT's tarball). Searching the bugzilla I found this bug and now I'm wondering if the changes/patches discussed here (esp. the ldap USE-Flag) will make it into the portage tree?

bye toby
Comment 12 Tobias Schröpf 2009-11-13 11:50:44 UTC
Created attachment 210119 [details]
mit-krb5-1.6.3-r6.ebuild

Added ebuild for 1.6.3 generated (by hand) from the patches found in this bug report.
Comment 13 Tobias Schröpf 2009-11-13 11:52:30 UTC
Created attachment 210121 [details]
mit-krb5-1.7-r1.ebuild

Ebuild for 1.7-r1 with ldap USE-Flag created (by hand) from the patches found in this bug report.
Comment 14 Andreis Vinogradovs ( slepnoga ) 2010-02-19 21:49:38 UTC
Created attachment 220405 [details]
mit-krb5-1.7-r102.ebuild

fixed ebuild
Comment 15 Eray Aslan gentoo-dev 2010-05-01 12:06:55 UTC
mit-krb5-1.8.1 is in the tree with ldap USE flag.  Thank you for the bug report.  Please close the bug.
Comment 16 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2010-05-06 03:10:32 UTC
(In reply to comment #15)
> mit-krb5-1.8.1 is in the tree with ldap USE flag.  Thank you for the bug
> report.  Please close the bug.
> 

closing.