On 10/11/15 06:10, Joschi Brauchle wrote:
I then checked the installed packages in Ubuntu and to my surpise, I
found a mixed setup with MIT kerberos and Heimdal Kerberos libraries.
E.g. the openLDAP service and all Samba tools use heimdal, whereas the
rest of the system uses MIT kerberos libs.
This is completely broken, I am surprised to hear Ubuntu really does that.
In particular SSSD links with samba libraries but is only ever tested
with MIT Kerberos, and depends on it for the DIR/KEYRING feature
(Heimdal does not implement those iirc).
So, I am starting to believe that the problems I see are coming from
this mixture of kerberos libs.
In general you cannot mix code linked to the 2 libraries, bad things
will happen, and you will have to resort to the minimum common
denominator for both, on systems that want to use programs independently
compiled against one or the other and used in the same session, which is
FILE ccaches only.
Simo.
--
Simo Sorce * Red Hat, Inc * New York