[Samba] Sernet 4.3.X package is no longer free :/

[Mark Foley]

Hmmm, your link: https://wiki.samba.org/index.php/MIT_Build#Kerberos_Issues
actually sounds pretty scarey:

  "There are APIs that are unique to Heimdal and their usage breaks compilation
  against MIT Kerberos.

  "These cases, like use of Heimdal-specific configuration setup in
  source4/auth/kerberos/kerberos.c, or ticket decoding, need to be solved by
  wrapping the code into common helpers that are implementation dependent."

Does this seem like it could cause a problem with Dovecot trying to NTLM
authenticate? I get the error:

Sep 13 00:53:12 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth
Sep 13 00:53:12 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=192.168.0.58, lip=98.102.63.107, session=<2PnkuZkfqADAqAA6>

Dovecot is a standalone executable and was compiled on my Samba4 platform.  I
know you likely know little about Dovecot, just wondering if the Kerberos thing
could be a cause of the problem. 

--Mark

-----Original Message-----
> To: samba at lists.samba.org
> From: Reindl Harald <h.reindl at thelounge.net>
> Date: Mon, 21 Sep 2015 17:54:19 +0200
> Subject: Re: [Samba] Sernet 4.3.X package is no longer free :/
>
> Am 21.09.2015 um 17:47 schrieb Mark Foley:
> > On Mon, 21 Sep 2015 09:02AM Nico Kadel-Garcia <nkadel at gmail.com> wrote:
> >
> >> RHEL's decision to use the incompatible "Heimdal" library for Kerberos make it a
> >> lot more awkward to compile with directory controller support, which is partly
> >> why I maintain my build.
> >
> > I'm not writing about the main topic of "Sernet ... no longer free", but your
> > above statement caught my eye.
> >
> > Why do you say that the Heimdal library for Kerberos is incompatible?
>
> nobody knows because the opposite is true
> https://wiki.samba.org/index.php/MIT_Build#Kerberos_Issues
>