[SSSD] request for Heimdal support

Stephen Gallagher sgallagh at redhat.com
Tue Dec 20 21:20:03 UTC 2011


On Tue, 2011-12-20 at 19:54 +0100, lists wrote:
> Stephen Gallagher schreef op di 20-12-2011 om 13:42 [-0500]:
> > On Tue, 2011-12-20 at 19:37 +0100, lists wrote:
> > > Hi,
> > > 
> > > Would it be possible to extend SSSD and also support Heimdal as Kerberos
> > > client implementation?
> > > 
> > > This patch seems to provide just that: 
> > > http://cvs.pld-linux.org/cgi-bin/viewvc.cgi/cvs/packages/sssd/sssd-heimdal.patch?view=markup
> > > 
> > > My setup is as follows:
> > > - server with 
> > > 	- Heimdal KDC
> > > 	- openldap 
> > > 	- pam_ldap / nss_ldap
> > > 
> > > - laptops/workstations with
> > > 	- mit kerberos clients
> > > 	- SSSD
> > > 
> > > I would like to use SSSD on all my machines, but because SSSD does not
> > > support Heimdal I cannot replace pam_ldap/nss_ldap on the server.
> > > 
> > > Maybe you could consider this patch and add it to SSSD? 
> > 
> > 
> > Well, this patch as-is won't work (because it disables support for MIT
> > Kerberos while adding support for Heimdal. We may be able to add support
> > for choosing the kerberos implementation at build-time.
> > 
> > It's going to be difficult to test for us, however. Most of our
> > development is done on Fedora, which has no standalone Heimdal package
> > (this is because MIT kerberos and Heimdal cannot currently coexist on
> > the same system because they conflict with some files (like libkrb5.so).
> > 
> > I can work up a possible patch, but I'd need you to be able to help test
> > it. Is that something you'd be willing to work on?
> That would be great. I can help to test it. I will also file an
> enhancement request. 

Ok, I've got a first-pass of the Heimdal compatibility layer. I've
attached the patch (which applies cleanly on the current master). You
could also clone my public git repo at
git://fedorapeople.org/home/fedora/sgallagh/public_git/sssd.git
and then 'git checkout heimdal'.

You can then build with 'autoreconf -if && ./configure [appropriate
distro flags] && make'

(Then finally, 'make install' as root).

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Add-compatibility-layer-for-Heimdal-Kerberos-impleme.patch
Type: text/x-patch
Size: 11154 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111220/0210645b/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111220/0210645b/attachment.sig>


More information about the sssd-devel mailing list