[Samba] Updating OpenSSL from 1.x to 3 breaks kinit

Jones Syue 薛懷宗 jonessyue at qnap.com
Fri Nov 3 00:31:19 UTC 2023


Hello Tibor,

> Samba is built with the recommended heimdal kerberos.
> Samba version: 4.18.8
> OpenSSL version: 3.0.11

What is the krb5 version in this Gentoo system?

As Andrew's comment 'kinit' should be came from krb5 (MIT Kerberos), not samba,
and latest krb5-1.21.2-final looks like works well with OpenSSL 3,
perhaps try to upgrade krb5 version in this Gentoo system might make 'kinit' works.

Use builtin MD4, RC4 for OpenSSL 3.0
https://github.com/krb5/krb5/commit/e557f051d1605ee980b136cae020866873ffb223


--
Regards,
Jones Syue | 薛懷宗
QNAP Systems, Inc.


More information about the samba mailing list