Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 288903 - dev-libs/openssl[kerberos] conflict with net-fs/samba-libs[samba4]
Summary: dev-libs/openssl[kerberos] conflict with net-fs/samba-libs[samba4]
Status: RESOLVED UPSTREAM
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Kerberos Maintainers
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-10-13 16:44 UTC by dacook
Modified: 2010-08-19 10:36 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description dacook 2009-10-13 16:44:24 UTC
The new net-fs/samba-libs-3.4.2-r1[samba4] requires app-crypt/heimdal as a krb5 implementation as opposed to the app-crypt/mit-krb5 version.

Although dev-libs/openssl[kerberos] has the logic to handle which virtual/krb5 package is installed in src_compile(), RDEPEND makes a hard dependency on app-crypt/mit-krb5 instead of using the (seemingly more appropriate) virtual/krb5 package.

Not sure which package to file this against - samba-libs introduced the conflict, but it seems that the easiest fix may be to rectify openssl's RDEPEND.
Comment 1 Rafał Mużyło 2009-10-13 17:27:24 UTC
But, IIRC, the problem is that openssl upstream
accepts only mit-krb5.
Comment 2 dacook 2009-10-13 17:32:28 UTC
I don't know openssl well enough to speak to that, but the following content in each of the three openssl ebuilds seems to indicate otherwise:

[root@test ~] grep krb5 /usr/portage/dev-libs/openssl/openssl-0.9.8k-r1.ebuild 
        kerberos? ( app-crypt/mit-krb5 )"
        local krb5=$(has_version app-crypt/mit-krb5 && echo "MIT" || echo "Heimdal")
                $(use_ssl kerberos krb5 --with-krb5-flavor=${krb5}) \
Comment 3 SpanKY gentoo-dev 2009-10-13 21:16:22 UTC
both packages need to be fixed, but the DEPEND isnt there because someone forgot to use the virtual.  at least this is true for openssl.  the source code (and upstream package maintainers) need work to use either kerberos provider.
Comment 4 Rafał Mużyło 2009-10-13 23:24:02 UTC
You should read openssl Configure file
- there they explicitly say "Heimdal is unsupported".
Perhaps it did work at some point, but it seems they've dropped it.
Comment 5 Michael Hammer (RETIRED) gentoo-dev 2009-10-14 06:27:49 UTC
I can confirm - openssl won't work with heimdal.
Comment 6 Eray Aslan gentoo-dev 2010-08-19 10:36:18 UTC
Closing as openssl still does not work with heimdal and any fix should be coming from upstream.  Reopen if you disagree.