Samba4 and Heimdal Kerberos dependencies

Henrik Nordstrom hno at squid-cache.org
Sat Feb 12 11:07:11 GMT 2005


On Sat, 12 Feb 2005, Andrew Bartlett wrote:

> We do and we don't.  ldb currently backs onto standard OpenLDAP, while
> other areas of Samba use some very early attempts at an independent
> client lib.  I just noticed that linking problem, and I think that
> compiling against a static Heimdal fixes it, for the price of larger
> binaries, but I'm still playing.

I would not recommend doing this as you get very dependent on the MIT 
kerberos interface to not conflict with Heimdal.

You may be safe if the use of OpenLDAP is done in such manner that it 
never uses Kerberos even if compiled with Kerberos support, but it it 
attempts to use Kerberos and there is conflicts between MIT and Heimdal in 
either function usage or visible structures (including those accessed 
via macros or inline functions) then danger is ahead..

Regards
Henrik


More information about the samba-technical mailing list