simple addition of 'ldap' USE flag for ldap support in mit-krb5. allows embedding of realm into an LDAP directory. compiles ldap utils/libs, and adds schema to openldap. Reproducible: Always Steps to Reproduce: 1. only tested on x86 2. tested as incremental release in a portage overlay Actual Results: current stable release does not build the kdb5_ldap_util utility & related libs (kldap.so, libkdb_ldap.so). Expected Results: the patch ebuild allows the use of kdb5_ldap_util. seems to work correctly for me, according to the MIT Kerberos docs: kdb5_ldap_util -D cn=Manager,dc=linuxi86,dc=net create \ -subtrees ou=Kerberos,dc=linuxi86,dc=net \ -containerref ou=Kerberos,dc=linuxi86,dc=net \ -r LINUXI86.NET -s adding the schema to openldap doesn't seem to work quite right - I copied the relevant portion from a (working?) samba ebuild. ebuild /usr/local/portage/app-crypt/mit-krb5/mit-krb5-1.6.3-r2.ebuild unpack find /var/tmp/portage/app-crypt/mit-krb5-1.6.3-r2 -name "*schema" gives me: "/var/tmp/portage/app-crypt/mit-krb5-1.6.3-r2/work/krb5-1.6.3/src/plugins/kdb/ldap/libkdb_ldap/kerberos.schema" I'm not sure why ${S}/plugins/kdb/ldap/libkdb_ldap/kerberos.schema isn't getting inserted into /etc/openldap/schema, according to: if use ldap ; then insinto /etc/openldap/schema doins ${S}/plugins/kdb/ldap/libkdb_ldap/kerberos.schema fi
Created attachment 154609 [details] adds ldap USE flag
Created attachment 154613 [details] moved schema insert from src_compile to src_install - seems to have fixed it.
The ldap use-flag introduced with mit-krb5-1.6.3-r2 has been dropped again with mit-krb5-1.6.3-r4.
Ldap support in kerberos is really problematic as it produces a lot of circular dependencies if the USE is called "ldap". I am planning to enable a "hdb-ldap" USE similar to heimdal. I wan't to wait for the 1.6.4 release and the stabilization process to do so. greets, mueli
we are now at version 1.7-r1 on the ebuilds and not ldap/hdb_ldap flag ... is it coming someday or did we have to use another distro to get mit kerberos with kerberos backend ?
(In reply to comment #5) > we are now at version 1.7-r1 on the ebuilds and not ldap/hdb_ldap flag ... > is it coming someday or did we have to use another distro to get mit kerberos > with kerberos backend ? > meant ldap backend, sorry.
This bug seems to me as if it is the same as bug #177522 ???
Closing. Both heimdal and mit-krb5 has ldap support in the tree.
