[WHATSNEW] Samba AD with MIT Kerberos + Version change

[Rowland Penny]

On Tue, 9 May 2017 10:40:30 +0100
Rowland Penny via samba-technical <samba-technical at lists.samba.org>
wrote:

> On Tue, 09 May 2017 11:32:07 +0200
> Andreas Schneider <asn at samba.org> wrote:
> 
> > On Thursday, 4 May 2017 18:11:55 CEST Rowland Penny via
> > samba-technical wrote:
> > > On Thu, 4 May 2017 17:49:14 +0200
> > > "L.P.H. van Belle via samba-technical"
> > > 
> > > <samba-technical at lists.samba.org> wrote:
> > > > Hai,
> > > > 
> > > > Now, prepair yourself im no coder.. but.. looks to me it imports
> > > > only a directory Or sets it back to None. Im trying to read and
> > > > follow the variables in the code.
> > > > 
> > > > If i grep through the source and look for :
> > > > samba.provision.kerberos
> > > 
> > > I think the problem is here in
> > > samba-master/python/samba/provision/kerberos.py:
> > > 
> > > def make_kdcconf(realm, domain, kdcconfdir, logdir):
> > > 
> > >     if _glue.is_heimdal_built:
> > >         return
> > > 
> > > Which I changed to:
> > > 
> > >     if is_heimdal_built:
> > >         return
> > 
> > Which is wrong too, it needs to be:
> > 
> >  if is_heimdal_build():
> 
> Yes, we have already had this pointed out to us :)
> 
> > 
> > :)
> > 
> > 
> > However, can you test the following branch?
> > 
> > 
> > https://git.samba.org/?p=asn/samba.git;a=shortlog;h=refs/heads/master-mit-kdc
> 
> Will do.
> 
> Rowland
> 
> 
> 

Sorry, but it fails on 'make'

[2450/2839] Linking default/source4/cluster/libcluster.so
[2451/2839] Linking default/lib/libsamba-sockets.so
[2452/2839] Linking default/source4/auth/kerberos/libauthkrb5.so
default/source4/lib/tls/tls_1.o: In function `tls_init_client':
tls.c:(.text+0x164f): undefined reference to `gnutls_certificate_type_set_priority'
default/source4/lib/tls/tls_tstream_1.o: In function `_tstream_tls_connect_send':
tls_tstream.c:(.text+0x1ff1): undefined reference to `gnutls_certificate_type_set_priority'
collect2: error: ld returned 1 exit status
Waf: Leaving directory `/usr/src/git/samba-asn/bin'
Build failed:  -> task failed (err #1): 
	{task: cc_link packet_1.o,tls_1.o,tlscert_1.o,tls_tstream_1.o,kerberos_pac_2.o,gssapi_pac_1.o,kerberos_pac_1.o,krb5_init_context_1.o -> libauthkrb5.so}
Makefile:8: recipe for target 'all' failed
make: *** [all] Error 1

This on a VM that was compiled using samba-master and did work if
you: 

A) change 'if _glue.is_heimdal_built:' to 'if _glue.is_heimdal_built():'
B) ln
-s /usr/local/samba/lib/krb5/plugins/kdb/samba.so /usr/lib/x86_64-linux-gnu/krb5/plugins/kdb/samba.so

Rowland