[PATCHES] heimdal: lib/krb5: do not fail set_config_files due to parse error

Jeremy Allison jra at samba.org
Tue Jun 19 18:50:24 UTC 2018


On Tue, Jun 19, 2018 at 08:42:34PM +0200, Volker Lendecke via samba-technical wrote:
> On Tue, Jun 19, 2018 at 08:33:23PM +0300, Alexander Bokovoy via samba-technical wrote:
> > I'm OK for removing it atm but going forward we cannot pretend such
> > configurations do not exist. For example, if someone wants to build
> > Samba AD on RHEL/CentOS using Heimdal but keeping the rest of the system
> > with MIT Kerberos, a default system krb5.conf is utilizing includedir to
> > implement crypto defaults.
> > 
> > In a sense, Volker's follow up patch is a better direction because it
> > supports includedir operation.
> 
> The problem is -- there's more broken code around this. How is our
> policy right now wrt heimdal? Do we have to go through upstream and
> fix their code first, wait for a release and then port into our
> version? Or can we go into our copy and right away fix what's broken?

*Is* there a working upstream anymore ? If not, we need to maintain
ourselves.



More information about the samba-technical mailing list