I just saw that there is a new version of mit-krb5 available with real LDAP backend support (looks much better than the heimdal-ldap-support!). It would be great to get an ebuild! I can help in testing if needed. Reproducible: Always
Created attachment 127503 [details] working ebuild
Created attachment 127505 [details] improved init.d script
Comment on attachment 127503 [details] working ebuild Added ldap to IUSE, RDEPEND and econf call.
Comment on attachment 127505 [details] improved init.d script Added 'use slapd' to depend().
Created attachment 128163 [details] mit-krb5-1.6.2.ebuild Thanks for your ebuild, I used it for the attached mit-krb5-1.6.2.ebuild and only removed the unneeded PATCHV="0.1". I suppose mit-krb5-1.6.* is needed for the cups 1.3 release since the cups output with mit-krb5-1.5.* is: checking for krb5-config... /usr/bin/krb5-config checking krb5.h usability... yes checking krb5.h presence... yes checking for krb5.h... yes checking gssapi.h usability... no checking gssapi.h presence... no checking for gssapi.h... no checking gssapi/gssapi.h usability... yes checking gssapi/gssapi.h presence... yes checking for gssapi/gssapi.h... yes checking gssapi/gssapi_generic.h usability... yes checking gssapi/gssapi_generic.h presence... yes checking for gssapi/gssapi_generic.h... yes checking gssapi/gssapi_krb5.h usability... yes checking gssapi/gssapi_krb5.h presence... yes checking for gssapi/gssapi_krb5.h... yes checking for gsskrb5_register_acceptor_identity... no checking for krb5_cc_new_unique... no checking for GSS_C_NT_HOSTBASED_SERVICE... yes checking for Heimdal Kerberos... no and with mit-krb5-1.6.2: checking for krb5-config... /usr/bin/krb5-config checking krb5.h usability... yes checking krb5.h presence... yes checking for krb5.h... yes checking gssapi.h usability... yes checking gssapi.h presence... yes checking for gssapi.h... yes checking gssapi/gssapi.h usability... yes checking gssapi/gssapi.h presence... yes checking for gssapi/gssapi.h... yes checking gssapi/gssapi_generic.h usability... yes checking gssapi/gssapi_generic.h presence... yes checking for gssapi/gssapi_generic.h... yes checking gssapi/gssapi_krb5.h usability... yes checking gssapi/gssapi_krb5.h presence... yes checking for gssapi/gssapi_krb5.h... yes checking for gsskrb5_register_acceptor_identity... no checking for krb5_cc_new_unique... yes checking for GSS_C_NT_HOSTBASED_SERVICE... yes checking for Heimdal Kerberos... no
*** Bug 191446 has been marked as a duplicate of this bug. ***
So... Is anyone going to put the attached ebuild into the portage tree?
Created attachment 149299 [details, diff] mit-krb5-1.6.3-r2.patch - Add useflag ldap - Add comment "use slapd" to mit-krb5kdc init.d (I don't think enabling it by default is a good idea) - Add kerberos.schema Works pretty well for me. Kerberos herd, OK to commit?
Created attachment 170769 [details, diff] patch againt the ebuild and related files, relavent to current ebuild This patch is the result of manually merging the current patch by Nguyen Thai Ngoc Duy to mit-krb5-1.6.3-r4.ebuild. Maybe this should deprecate his patch? Also, it changes files/mit-krb5kdc.initd so that the user can edit /etc/conf.d/mit-krb5kdc rather than /etc/init.d/mit-krb5kdc to enable slapd as a dependency of the mit-krb5kdc service. The sample mit-krb5kdc.confd file the ebuild now refers to should be attached next. I was able to compile the ebuild after applying my changes to it. However, I haven't had time to test whether or not the ldap support actually works. I hope it does, and I'll be experimenting with it soon, hopefully.
Created attachment 170771 [details] sample file, my patched ebuild wants it
Hi, I ve just installed mit-krb5-1.6.3-r6. But now I'm missing the kerberos.schema file in my openldap/schemas directory :-) (which actually comes with the MIT's tarball). Searching the bugzilla I found this bug and now I'm wondering if the changes/patches discussed here (esp. the ldap USE-Flag) will make it into the portage tree? bye toby
Created attachment 210119 [details] mit-krb5-1.6.3-r6.ebuild Added ebuild for 1.6.3 generated (by hand) from the patches found in this bug report.
Created attachment 210121 [details] mit-krb5-1.7-r1.ebuild Ebuild for 1.7-r1 with ldap USE-Flag created (by hand) from the patches found in this bug report.
Created attachment 220405 [details] mit-krb5-1.7-r102.ebuild fixed ebuild
mit-krb5-1.8.1 is in the tree with ldap USE flag. Thank you for the bug report. Please close the bug.
(In reply to comment #15) > mit-krb5-1.8.1 is in the tree with ldap USE flag. Thank you for the bug > report. Please close the bug. > closing.