two kerberos impls are used by samba now

[Andrew Bartlett]

On Sun, 2023-09-10 at 23:12 +0300, Michael Tokarev wrote:
> 10.09.2023 22:48, Andrew Bartlett wrpte:
> > On Fri, 2023-09-08 at 22:04 +0300, Michael Tokarev via samba-
> > technical wrote:
> > > FWIW.
> > > Just noticed that all samba executables on debian (built
> > > withinternal heimdal) are linked with *two* sets of kerberos
> > > libs.
> > > This is due to libtirpc, which is a replacement for the formerin-
> > > glibc RPC code, which uses libgssapi-krb5.
> > > This should not be specific to debian but rather specific
> > > toglibc.
> > > Wonder how common symbols from two krb5 don't clash...
> > 
> > This is related to your other post, due to the symbol versions, as
> > I understand it :-)
> 
> Unfortunately it is not.  Only symbols from public libraries
> withstable ABI are versioned in samba.  Symbols in private
> libraries,including internal copy of heimdal, are not
> versioned.  This iswhy we had named crashing due to some dns function
> name clash.

I thought we were versioning them with the Samba version?  We should
be.
> And two krb5 implementations are using quite a lot of common
> symbols.It looks like no one come across a good crash yet because
> tirpc israrely used with nfs + kerberos together with samba.  I guess
> oncesomeone will try to use it with krb5+nfs, it will crash left
> andright.

Very likely.
Sofware is hard.
Andrew Bartlett

-- 
Andrew Bartlett (he/him)       https://samba.org/~abartlet/Samba Team Member (since 2001) https://samba.orgSamba Team Lead                https://catalyst.net.nz/services/sambaCatalyst.Net Ltd
Proudly developing Samba for Catalyst.Net Ltd - a Catalyst IT group
company
Samba Development and Support: https://catalyst.net.nz/services/samba
Catalyst IT - Expert Open Source Solutions