[WHATSNEW] Samba AD with MIT Kerberos + Version change

[Andreas Schneider]

On Tuesday, 9 May 2017 12:38:08 CEST Rowland Penny wrote:
> On Tue, 9 May 2017 10:40:30 +0100
> Rowland Penny via samba-technical <samba-technical at lists.samba.org>
> 
> wrote:
> > On Tue, 09 May 2017 11:32:07 +0200
> > 
> > Andreas Schneider <asn at samba.org> wrote:
> > > On Thursday, 4 May 2017 18:11:55 CEST Rowland Penny via
> > > 
> > > samba-technical wrote:
> > > > On Thu, 4 May 2017 17:49:14 +0200
> > > > "L.P.H. van Belle via samba-technical"
> > > > 
> > > > <samba-technical at lists.samba.org> wrote:
> > > > > Hai,
> > > > > 
> > > > > Now, prepair yourself im no coder.. but.. looks to me it imports
> > > > > only a directory Or sets it back to None. Im trying to read and
> > > > > follow the variables in the code.
> > > > > 
> > > > > If i grep through the source and look for :
> > > > > samba.provision.kerberos
> > > > 
> > > > I think the problem is here in
> > > > samba-master/python/samba/provision/kerberos.py:
> > > > 
> > > > def make_kdcconf(realm, domain, kdcconfdir, logdir):
> > > >     if _glue.is_heimdal_built:
> > > >         return
> > > > 
> > > > Which I changed to:
> > > >     if is_heimdal_built:
> > > >         return
> > > 
> > > Which is wrong too, it needs to be:
> > >  if is_heimdal_build():
> > Yes, we have already had this pointed out to us :)
> > 
> > > :)
> > > 
> > > However, can you test the following branch?
> > > 
> > > 
> > > https://git.samba.org/?p=asn/samba.git;a=shortlog;h=refs/heads/master-mi
> > > t-kdc> 
> > Will do.
> > 
> > Rowland
> 
> Sorry, but it fails on 'make'
> 
> [2450/2839] Linking default/source4/cluster/libcluster.so
> [2451/2839] Linking default/lib/libsamba-sockets.so
> [2452/2839] Linking default/source4/auth/kerberos/libauthkrb5.so
> default/source4/lib/tls/tls_1.o: In function `tls_init_client':
> tls.c:(.text+0x164f): undefined reference to
> `gnutls_certificate_type_set_priority'
> default/source4/lib/tls/tls_tstream_1.o: In function
> `_tstream_tls_connect_send': tls_tstream.c:(.text+0x1ff1): undefined
> reference to `gnutls_certificate_type_set_priority' collect2: error: ld
> returned 1 exit status
> Waf: Leaving directory `/usr/src/git/samba-asn/bin'
> Build failed:  -> task failed (err #1):
> 	{task: cc_link
> packet_1.o,tls_1.o,tlscert_1.o,tls_tstream_1.o,kerberos_pac_2.o,gssapi_pac_
> 1.o,kerberos_pac_1.o,krb5_init_context_1.o -> libauthkrb5.so} Makefile:8:
> recipe for target 'all' failed
> make: *** [all] Error 1
> 
> This on a VM that was compiled using samba-master and did work if
> you:

The use of gnutls_certificate_type_set_priority has been removed in 2015 from 
this file. Something is wrong with your build or repo. Did you try to build an 
older version?



	Andreas

-- 
Andreas Schneider                   GPG-ID: CC014E3D
Samba Team                             asn at samba.org
www.samba.org