When updating my system using 'emerge -uDNav' a conflict arises between the two different kerberos implementations. Samba/openssl want mit-krb5, openldap wants heimdal. Considering Reproducible: Always Steps to Reproduce: 1. emerge uDNav on a system with samba / openldap / openssl 2. Watch epic failure 3. Watch the flame war in yet another krb5 bug's comments Actual Results: Fails to allow side x side implementations of krb5 packages for no good reason. Bit of a nuisance as all three packages are necessary when in a Windows networking environment. Expected Results: Upstream packages would do the right thing by checking for their preferred version at compile time and stop forcing Gentoo devs to attempt voodoo fixes (I recommend swinging a dead cat over your head under the light of the full moon at midnight on a Thursday but YMMV) [blocks B ] app-crypt/mit-krb5 ("virtual/krb5" is blocking app-crypt/mit-krb5-1.7-r2) [blocks B ] app-crypt/mit-krb5 ("virtual/krb5" is blocking app-crypt/heimdal-1.2.1-r4) Total: 237 packages (175 upgrades, 1 downgrade, 14 new, 2 in new slots, 45 reinstalls), Size of downloads: 488,785 kB Conflict: 27 blocks (2 unsatisfied) Portage tree and overlays: [0] /usr/portage [1] /usr/local/portage [?] indicates that the source repository could not be determined * Error: The above package list contains packages which cannot be * installed at the same time on the same system. ('ebuild', '/', 'app-crypt/heimdal-1.2.1-r4', 'merge') pulled in by app-crypt/heimdal required by ('ebuild', '/', 'net-nds/openldap-2.4.19-r1', 'merge') ('ebuild', '/', 'app-crypt/mit-krb5-1.7-r2', 'merge') pulled in by app-crypt/mit-krb5 required by ('ebuild', '/', 'dev-libs/openssl-0.9.8l-r2', 'merge') app-crypt/mit-krb5 required by ('installed', '/', 'net-fs/samba-libs-3.4.5', 'nomerge') app-crypt/mit-krb5 required by ('installed', '/', 'net-fs/samba-client-3.4.5', 'nomerge') (and 13 more) For more information about Blocked Packages, please refer to the following section of the Gentoo Linux x86 Handbook (architecture is irrelevant): http://www.gentoo.org/doc/en/handbook/handbook-x86.xml?full=1#blocked
Created attachment 221337 [details] emerge info
Disable USE="smbkrb5passwd" for openldap. And no, no other solution here.
Thanks, that lets me workaround the emerge problem (but makes working with my AD much more complex going forward.) I should be able to compile openldap locally and exclude portage's version right?
(In reply to comment #3) > Thanks, that lets me workaround the emerge problem (but makes working with my > AD much more complex going forward.) I should be able to compile openldap > locally and exclude portage's version right? Well, last time I checked openldap, that feature enabled by smbkrb5passwd use flag and causing the blocker simply didn't work w/ mit-krb5 (as in doesn't even compile). As for the last question, man portage and search for package.provided there. (Of course, doing this you are on your own and without any support from Gentoo).
(In reply to comment #4) > (In reply to comment #3) > > Thanks, that lets me workaround the emerge problem (but makes working with my > > AD much more complex going forward.) I should be able to compile openldap > > locally and exclude portage's version right? > > Well, last time I checked openldap, that feature enabled by smbkrb5passwd use > flag and causing the blocker simply didn't work w/ mit-krb5 (as in doesn't even > compile). Is that equivalent to the old "emerge --inject" ? In any case, I'll try compiling openldap + heimdal statically when I get home tonight. Hopefully it will co-exist with the openssl/mit-krb without issue. > > As for the last question, man portage and search for package.provided there. > (Of course, doing this you are on your own and without any support from > Gentoo). >
(In reply to comment #5) > Is that equivalent to the old "emerge --inject" ? In any case, I'll try > compiling openldap + heimdal statically when I get home tonight. Hopefully it > will co-exist with the openssl/mit-krb without issue. The only thing that --inject was doing was something like echo 'cat-egory/package-${PV}' >> /etc/portage/package.provided so not much loss here :) Anyway, this bug is a CANTFIX.
(In reply to comment #6) > (In reply to comment #5) > > Is that equivalent to the old "emerge --inject" ? In any case, I'll try > > compiling openldap + heimdal statically when I get home tonight. Hopefully it > > will co-exist with the openssl/mit-krb without issue. > > The only thing that --inject was doing was something like echo > 'cat-egory/package-${PV}' >> /etc/portage/package.provided so not much loss > here :) > > Anyway, this bug is a CANTFIX. > Understood, thanks.
