HDB_STRUCT_HAS_HDB_CHECK_S4U2SELF

[Jelmer Vernooij]

Hi Andrew,

On Wed, 2010-06-23 at 15:03 +1000, Andrew Bartlett wrote:
> I noticed (after much painful debugging of segfaults, because I hasn't
> reconfigured) that you have added a check for hdb_check_s4u2self, in an
> attempt to make Samba use the system Heimdal in debian.
> 
> I need you to remove this, as it isn't the correct fix.  The code to
> handle the s4u2self was added because some clients don't work without
> it, and falling back to the previous Heimdal behaviour is not enough. 
> 
> If the version of Heimdal on debian isn't recent enough to have this or
> other features we need, then we will need to use the internal Heimdal. 
> 
> I'll be adding more new features to Heimdal soon, when I start on
> support for read only DCs.  This will change the HDB API again.
> 
> I know it's a pain, but this is the only way we can get an AD compatible
> KDC. 
Sorry it caused you grief (perhaps we should move to using "#if" rather
than "#ifdef" to avoid this sort of issue in the future?). I'm about to
push a commit that reverts the system heimdal support work. 

Cheers,

Jelmer

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100623/b22954d0/attachment.pgp>