[Samba] Samba 4.2.14 Group Policy (GPO) sync error

[Min Wai Chan]

Thank Rainer,

I've been stuck on this issue for 1 months...

This is a bit stupid :(...

Regards,
Min Wai

On Mon, Aug 15, 2016 at 3:02 PM, Rainer Meier via samba <
samba at lists.samba.org> wrote:

> Heimdal is not actively developed any more, so the samba team manages
>> required
>> modifications internally.
>> I remember I got the unknown mech error messages related to missing sasl
>> libraries when using ldap-tools.
>>
>
> Well, the situation is a bit weird. Looks like at least the Gentoo team is
> not fully aware about the modifications or their Heimdal is not completely
> compatible. On the other hand also the Samba build scritps seem not to
> verify the functionality completely. Moreover even at log level 10 there is
> no clear message logged about any malfunction.
>
> Moreover it looks like the Samba team relies on the hcrypto library while
> even the Heimdal team seems to prefer OpenSSL on systems where it is
> available. Samba should perhaps use OpenSSL (if available) too rather than
> relying on hcrypto library. Especially since OpenSSL is maintained.
>
> I am not fully into details right now but it seems to be common sense to
> me that if you rely on some modifications with bundled libraries AND you
> provide an option to disable this bundling that some verification (version,
> functionality) of the external libraries should be done.
>
> Anyway let's see what Gentoo developers come up with to fix this issue for
> future ebuilds.
> Perhaps this problem will be solved by the Samba team too by switching to
> mit-krb5 or developing their own kerberos implementation. I don't know the
> plans here.
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>