[Samba] Seems solved - Re: sernet kerberos

Rowland Penny rowlandpenny241155 at gmail.com
Fri Sep 4 14:31:30 UTC 2015


On 04/09/15 15:02, Robert Moskowitz wrote:
> Going back here on old messages about kerberos I did:
>
> yum install krb5-workstation
>
> And kinit and others are there and working.  Seems reasonable that the 
> client should not care about the backed type (Heimdal or MIT).
>
> Though don't know if I need to install krb5-devel; time will tell.
>
> On 09/04/2015 05:43 AM, Robert Moskowitz wrote:
>>
>>
>> On 09/04/2015 03:59 AM, mathias dufresne wrote:
>>> Hi,
>>>
>>> I don't think there is sernet kerberos package. You would have to 
>>> install
>>> kerberos client using your package manager: krb5-workstation on 
>>> Centos or
>>> krb5-user on Debian I think...
>>
>> As I understand things:
>>
>> Samba4.2 and lower is designed for the Heimal (sp!) kerberos. 
>> Redhat/Fedora/Centos provides the MIT kerberos.  Thus Sernet provides 
>> a 'proper' kerberos for these OS.  I saw that somewhere on some web 
>> writeup.
>>
>> Samba 4.3, coming out 'real soon now', allows Samba to use the MIT 
>> kerberos.
>>
>> But for now, no running on Centos with the Centos provided Kerberos.
>>
>>>
>>> Cheers,
>>>
>>> mathias
>>>
>>> 2015-09-04 6:26 GMT+02:00 Robert Moskowitz <rgm at htt-consult.com>:
>>>
>>>> I see a lot of kerberos files under /usr/src/debug/samba-4.2.3, but I
>>>> can't see specific kerberos commands like kinit and klist.
>>>>
>>>> It is possible that something did not build right from the sernet 
>>>> source,
>>>> so I want to know how to tell that I have the sernet kerberos 
>>>> installed.
>>>>
>>>> thanks
>>>>
>>>>
>>>>
>>>> -- 
>>>> To unsubscribe from this list go to the following URL and read the
>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>>
>>
>>
>
>

You only need krb5-devel if you going to compile something that needs 
what it contains.

Rowland




More information about the samba mailing list