Debian samba4 package

Gémes Géza geza at kzsdabas.hu
Wed May 22 23:44:58 MDT 2013


Hi,
> Is there any way to build making use of only the symbols common across the
> various implementations?  I wouldn't think that it should matter which
> kerberos implementation the user decides to run on top of; it should be
> possible to switch between any of them by simply installing the one of
> choice.
Unfortunately while heimdal provides option to run the kdc as a library 
(inside the samba binary) and has (developed by samba devs (see 
lorikeet-heimdal)) an ldb backend mit krb5 lacks both. Until it will 
catch up (redhat people are working on this) they can't be supported 
with an equal feature matrix (no support for active directory dc with mit).
>   Debian should take care of resolving the conflict by removing the
> other package.
>
> Maybe I should move this conversation to the debian-samba list, as it might
> be a little off topic.
>
> The samba3 packages are in a pretty dismal state.  dh_strip was removing
> all of the symbols from all of the pam, nss and idmap plugins when last I
> checked.
>
> C.J.
>   On May 22, 2013 7:40 PM, "Andrew Bartlett" <abartlet at samba.org> wrote:
>
>> On Wed, 2013-05-22 at 19:22 -0700, C.J. Adams-Collier KF7BMP wrote:
>>> Wow.  Is there any way to have the package not depend on a specific
>>> implementation of kerberos?  I'd prefer to stick to MIT kerberos.
>> A few points:
>>
>>   - The samba4 package in debian currently is only the AD DC, and as the
>> AD DC requires (is built on) Heimdal Kerberos, it depends on the Heimdal
>> Kerberos package in Debian.
>>
>>   - On other platforms we use our internal copy of Heimdal for the AD DC
>>
>>   - If you build --with-system-mitkrb5 you won't get the AD DC.
>>
>>   - For Samba 4.0 as a file server different distributions have taken
>> different compromises here.  Fedora/Red Hat packages won't include the
>> AD DC, because they want to use MIT Krb5, while the new Debian packages
>> I'm helping the Debian Samba Team work on will include the AD DC as well
>> as the file server, and so will use Heimdal from the system.
>>
>> I hope this clarifies things,
>>
>> Andrew Bartlett
>>
>> --
>> Andrew Bartlett                                http://samba.org/~abartlet/
>> Authentication Developer, Samba Team           http://samba.org
>>
>>
>>
Regards

Geza Gemes


More information about the samba-technical mailing list