I'd like to get rid of kerberos. It looks like the only dep left on my system is on cifs-utils (for >=net-fs/samba-4.5.4), because of ADS (which I'd like to keep): # equery d virtual/krb5-0-r1 * These packages depend on virtual/krb5-0-r1: ... net-fs/cifs-utils-6.4 (ads ? virtual/krb5) ... # equery g --depth=1 net-fs/cifs-utils * Searching for cifs-utils in net-fs ... * dependency graph for net-fs/cifs-utils-6.4 `-- net-fs/cifs-utils-6.4 amd64 ... `-- virtual/krb5-0-r1 (virtual/krb5) amd64 ... Hence the question: can we have ADS *without* kerberos?
I have similar issue. Samba client requires net-fs/cifs-utils with [ads] use flag. In it's turn, [ads] flag requires krb5: RDEPEND="${CDEPEND} client? ( net-fs/cifs-utils[ads?] ) For example, I don't need Active Directory services and Kerberos support in my systems, but have to install heimdal or mit-krb5 Kerberos implementation. Moreover Samba itself doesn't require external Kerberos implementation. For example, I use Samba's integrated implementation (-system-mitkrb5 -system-heimdal): net-fs/samba-4.7.3::gentoo was built with the following: USE="acl client cups fam pam systemd -addc -addns -ads -ceph -cluster -debug -dmapi -gnutls -gpg -iprint -ldap -python -quota (-selinux) -syslog (-system-heimdal) -system-mitkrb5 -test -winbind -zeroconf" ABI_X86="(64) -32 (-x32)" PYTHON_TARGETS="python2_7" Thanks.