[SSSD] request for Heimdal support
lists
lists at xs4me.net
Tue Dec 20 18:54:05 UTC 2011
Stephen Gallagher schreef op di 20-12-2011 om 13:42 [-0500]:
> On Tue, 2011-12-20 at 19:37 +0100, lists wrote:
> > Hi,
> >
> > Would it be possible to extend SSSD and also support Heimdal as Kerberos
> > client implementation?
> >
> > This patch seems to provide just that:
> > http://cvs.pld-linux.org/cgi-bin/viewvc.cgi/cvs/packages/sssd/sssd-heimdal.patch?view=markup
> >
> > My setup is as follows:
> > - server with
> > - Heimdal KDC
> > - openldap
> > - pam_ldap / nss_ldap
> >
> > - laptops/workstations with
> > - mit kerberos clients
> > - SSSD
> >
> > I would like to use SSSD on all my machines, but because SSSD does not
> > support Heimdal I cannot replace pam_ldap/nss_ldap on the server.
> >
> > Maybe you could consider this patch and add it to SSSD?
>
>
> Well, this patch as-is won't work (because it disables support for MIT
> Kerberos while adding support for Heimdal. We may be able to add support
> for choosing the kerberos implementation at build-time.
>
> It's going to be difficult to test for us, however. Most of our
> development is done on Fedora, which has no standalone Heimdal package
> (this is because MIT kerberos and Heimdal cannot currently coexist on
> the same system because they conflict with some files (like libkrb5.so).
>
> I can work up a possible patch, but I'd need you to be able to help test
> it. Is that something you'd be willing to work on?
That would be great. I can help to test it. I will also file an
enhancement request.
thanks
J.
>
> Also, please file an enhancement request at
> https://fedorahosted.org/sssd (if you don't have a Fedora login account,
> you can get one for free at https://admin.fedoraproject.org/accounts)
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
More information about the sssd-devel
mailing list