Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 09 Apr 2009 11:25:35 -0700
From:      Chuck Swiger <cswiger@mac.com>
To:        Gary Gatten <Ggatten@waddell.com>
Cc:        "freebsd-questions@freebsd.org Questions -" <freebsd-questions@freebsd.org>
Subject:   Re: make install krb5 conflict with heimdal
Message-ID:  <B4D01F5C-A7B5-44B3-975C-F63C01DCD09F@mac.com>
In-Reply-To: <70C0964126D66F458E688618E1CD008A0793E95A@WADPEXV0.waddell.com>
References:  <49DCA9E0.6000109@zedat.fu-berlin.de> <49DD0A57.7020701@freebsd.org> <49DE28D8.1020508@mail.zedat.fu-berlin.de> <70C0964126D66F458E688618E1CD008A0793E957@WADPEXV0.waddell.com> <20090409134659.58922787@att.net> <70C0964126D66F458E688618E1CD008A0793E95A@WADPEXV0.waddell.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Apr 9, 2009, at 11:21 AM, Gary Gatten wrote:
> This is a new thread, so not sure what you mean?  Maybe my other posts
> re. new package system?  Unintentional hijack - just venting, sorry.
>
> I'm aware of the pkg_delete -f; but I don't want to break FreeRADIUS.
> This will process involves getting FreeRADIUS hooked into AD, and one
> method I'm looking into is the SAMBA / NTLM thing.  SAMBA won't  
> install
> unless krb5 is "happy".
>
> Do I need to force heimdal removal, install krb5, reinstall heimdal  
> and
> HOPE it works and nothing breaks in the process?

Nope.  FreeRADIUS' Makefile claims to support both Heimdal and  
Kerberos5, but you have to choose one or the other via the options  
("make config"):

> .ifdef(WITH_KERBEROS)
> .ifdef(WITH_HEIMDAL)
> LIB_DEPENDS+=   krb5.23:${PORTSDIR}/security/heimdal
> CONFIGURE_ARGS+=--enable-heimdal-krb5
> .else
> LIB_DEPENDS+=   krb5.3:${PORTSDIR}/security/krb5
> .endif

Likewise with Samba:

> .if defined(WITH_ADS)
> SAMBA_WANT_LDAP=        yes
> SAMBA_WANT_KRB5=        yes
> CONFIGURE_ARGS+=        --with-ads
> .else
> CONFIGURE_ARGS+=        --without-ads
> .endif
> # Kerberos5 is necessary for ADS
> .if defined(SAMBA_WANT_KRB5)
> .if defined(KRB5_HOME) && exists(${KRB5_HOME}/lib/libgssapi_krb5.so)
> CONFIGURE_ARGS+=        --with-krb5="${KRB5_HOME}"
> .elif defined(HEIMDAL_HOME) && exists(${HEIMDAL_HOME}/lib/ 
> libgssapi.so)
> CONFIGURE_ARGS+=        --with-krb5="${HEIMDAL_HOME}"
> .elif exists(/usr/lib/libkrb5.so) && exists(/usr/bin/krb5-config)
> CONFIGURE_ARGS+=        --with-krb5="/usr"
> .else
> LIB_DEPENDS+=           krb5:${PORTSDIR}/security/heimdal
> CONFIGURE_ARGS+=        --with-krb5="${LOCALBASE}"
> .endif


Regards,
-- 
-Chuck




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B4D01F5C-A7B5-44B3-975C-F63C01DCD09F>