[Samba] Sernet 4.3.X package is no longer free :/
mfoley at ohprs.org
Tue Sep 22 01:15:37 UTC 2015
Hmmm, your link: https://wiki.samba.org/index.php/MIT_Build#Kerberos_Issues
actually sounds pretty scarey:
"There are APIs that are unique to Heimdal and their usage breaks compilation
against MIT Kerberos.
"These cases, like use of Heimdal-specific configuration setup in
source4/auth/kerberos/kerberos.c, or ticket decoding, need to be solved by
wrapping the code into common helpers that are implementation dependent."
Does this seem like it could cause a problem with Dovecot trying to NTLM
authenticate? I get the error:
Sep 13 00:53:12 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth
Sep 13 00:53:12 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=192.168.0.58, lip=18.104.22.168, session=<2PnkuZkfqADAqAA6>
Dovecot is a standalone executable and was compiled on my Samba4 platform. I
know you likely know little about Dovecot, just wondering if the Kerberos thing
could be a cause of the problem.
> To: samba at lists.samba.org
> From: Reindl Harald <h.reindl at thelounge.net>
> Date: Mon, 21 Sep 2015 17:54:19 +0200
> Subject: Re: [Samba] Sernet 4.3.X package is no longer free :/
> Am 21.09.2015 um 17:47 schrieb Mark Foley:
> > On Mon, 21 Sep 2015 09:02AM Nico Kadel-Garcia <nkadel at gmail.com> wrote:
> >> RHEL's decision to use the incompatible "Heimdal" library for Kerberos make it a
> >> lot more awkward to compile with directory controller support, which is partly
> >> why I maintain my build.
> > I'm not writing about the main topic of "Sernet ... no longer free", but your
> > above statement caught my eye.
> > Why do you say that the Heimdal library for Kerberos is incompatible?
> nobody knows because the opposite is true
More information about the samba