make install krb5 conflict with heimdal

[Gary Gatten]

This actually makes a little sense - thanks for the pointers!

G

BTW: Is top posting bad?  I prefer top posts, but if the list doesn't
like it I'll change.  I'll find the rules and read them!

-----Original Message-----
From: Chuck Swiger [mailto:cswiger at mac.com] 
Sent: Thursday, April 09, 2009 1:26 PM
To: Gary Gatten
Cc: freebsd-questions at freebsd.org Questions -
Subject: Re: make install krb5 conflict with heimdal

On Apr 9, 2009, at 11:21 AM, Gary Gatten wrote:
> This is a new thread, so not sure what you mean?  Maybe my other posts
> re. new package system?  Unintentional hijack - just venting, sorry.
>
> I'm aware of the pkg_delete -f; but I don't want to break FreeRADIUS.
> This will process involves getting FreeRADIUS hooked into AD, and one
> method I'm looking into is the SAMBA / NTLM thing.  SAMBA won't  
> install
> unless krb5 is "happy".
>
> Do I need to force heimdal removal, install krb5, reinstall heimdal  
> and
> HOPE it works and nothing breaks in the process?

Nope.  FreeRADIUS' Makefile claims to support both Heimdal and  
Kerberos5, but you have to choose one or the other via the options  
("make config"):

> .ifdef(WITH_KERBEROS)
> .ifdef(WITH_HEIMDAL)
> LIB_DEPENDS+=   krb5.23:${PORTSDIR}/security/heimdal
> CONFIGURE_ARGS+=--enable-heimdal-krb5
> .else
> LIB_DEPENDS+=   krb5.3:${PORTSDIR}/security/krb5
> .endif

Likewise with Samba:

> .if defined(WITH_ADS)
> SAMBA_WANT_LDAP=        yes
> SAMBA_WANT_KRB5=        yes
> CONFIGURE_ARGS+=        --with-ads
> .else
> CONFIGURE_ARGS+=        --without-ads
> .endif
> # Kerberos5 is necessary for ADS
> .if defined(SAMBA_WANT_KRB5)
> .if defined(KRB5_HOME) && exists(${KRB5_HOME}/lib/libgssapi_krb5.so)
> CONFIGURE_ARGS+=        --with-krb5="${KRB5_HOME}"
> .elif defined(HEIMDAL_HOME) && exists(${HEIMDAL_HOME}/lib/ 
> libgssapi.so)
> CONFIGURE_ARGS+=        --with-krb5="${HEIMDAL_HOME}"
> .elif exists(/usr/lib/libkrb5.so) && exists(/usr/bin/krb5-config)
> CONFIGURE_ARGS+=        --with-krb5="/usr"
> .else
> LIB_DEPENDS+=           krb5:${PORTSDIR}/security/heimdal
> CONFIGURE_ARGS+=        --with-krb5="${LOCALBASE}"
> .endif


Regards,
-- 
-Chuck






<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."
</font>