I'd like to get rid of kerberos. It looks like the only dep left on my system is on cifs-utils (for >=net-fs/samba-4.5.4), because of ADS (which I'd like to keep):
# equery d virtual/krb5-0-r1
* These packages depend on virtual/krb5-0-r1:
net-fs/cifs-utils-6.4 (ads ? virtual/krb5)
# equery g --depth=1 net-fs/cifs-utils
* Searching for cifs-utils in net-fs ...
* dependency graph for net-fs/cifs-utils-6.4
`-- net-fs/cifs-utils-6.4 amd64
`-- virtual/krb5-0-r1 (virtual/krb5) amd64
Hence the question: can we have ADS *without* kerberos?
I have similar issue. Samba client requires net-fs/cifs-utils with [ads] use flag. In it's turn, [ads] flag requires krb5:
client? ( net-fs/cifs-utils[ads?] )
For example, I don't need Active Directory services and Kerberos support in my systems, but have to install heimdal or mit-krb5 Kerberos implementation.
Moreover Samba itself doesn't require external Kerberos implementation. For example, I use Samba's integrated implementation (-system-mitkrb5 -system-heimdal):
net-fs/samba-4.7.3::gentoo was built with the following:
USE="acl client cups fam pam systemd -addc -addns -ads -ceph -cluster -debug -dmapi -gnutls -gpg -iprint -ldap -python -quota (-selinux) -syslog (-system-heimdal) -system-mitkrb5 -test -winbind -zeroconf" ABI_X86="(64) -32 (-x32)" PYTHON_TARGETS="python2_7"