URL:
https://github.com/SSSD/sssd/pull/5464
Title: #5464: BUILD: Accept krb5 1.19 for building the PAC plugin
sumit-bose commented:
"""
The fix will work until we release 1.20, and then you'll have to
change it again. I suggest only checking a minimum version until it's known that there
is a maximum one.
Hi,
jfyi, the check was added to make sure there are no changes in `authdata_plugin.h`, which
afaik is still not a public interface, in a new version of MIT Kerberos. SSSD implements
this plugin so that the PAC is send to SSSD to be able to derive the group-memberships of
the user from the PAC. For this we have the information from `authdata_plugin.h` in
SSSD's tree. So the maximum version is always the latest major release.
Originally I was told that the interface is not stable enough to make to public, but since
this was years ago and the interface didn't change it might be worth to open a ticket
and ask again.
bye,
Sumit
"""
See the full comment at
https://github.com/SSSD/sssd/pull/5464#issuecomment-762964638