Fixes for S3 DCE/RPC GSSAPI with Heimdal
lukeh at padl.com
Thu Apr 21 10:07:57 MDT 2011
On 21/04/2011, at 5:54 PM, simo wrote:
> On Thu, 2011-04-21 at 17:42 +0200, Luke Howard wrote:
>>> On Thu, 2011-04-21 at 11:07 +0200, Luke Howard wrote:
>>>> You can iterate through the keytab, not ideal and won't work for user to user, but fine for most use. That's what XAD - which effectively used 1.7 - did.
>>> Ouch, that really is a hack... As Simo is willing to live without this
>>> feature on earlier krb5 versions, I don't proposed to do that.
>> Certainly not ideal. But it shouldn't be too inefficient.
> If it is not too difficult I'd rather be able to still compile Samba on
> RHEL5 if possible (which has 1.6).
Unfortunately AFAIK you'll need to roll your own GSS-API in that case (as you did in the past, right?). I didn't start working for MIT until 1.7 :-)
More information about the samba-technical