logo       

Re: Kerberos questions: msg#00163

linux.gentoo.devel

Subject: Re: Kerberos questions

On Tue, May 07, 2002 at 09:13:45AM -0700, Jano Lukac wrote:
>
> Groovy on the kerberos stuff! Finally someone else interested in it :)
>
> Quick thing.. why the skey use? And isn't kerberos 4 "outdated" now, so
> almost as if saying, "why bother" ?

Good question. I'm personally only interested in K5, but since both are
included in the portage tree, I figured I might as well deal with both at
the same time. The more I get into it though, the more I realize that
testing it here is going to be a major pain, so I'll probably just leave
the kerberos4 stuff for someone that needs it.

The skey stuff is simply to satisfy my own curiousity.

<snip>
> > use kerberos4 && myconf="${myconf} --enable-krb4"
> > use kerberos4 || myconf="${myconf} --disable-krb4"
> > use kerberos5 && myconf="${myconf} --enable-gssapi"
> > use kerberos5 || myconf="${myconf} --disable-gssapi"
>
>
> I think you might be able to shorten this to the use foo && bar || that,
> but probably kills the readability and might cause a line wrap *shrug*.

I saw both forms used in various ebuilds and wasn't sure if there was a
standard or not, so I just opted for the more legible of the two.

> BTW, with the above, I'm assuming you can have both kerberos 4 and 5
> compiled into sasl (but I think I remember you cannot).

Enabling k4 and k5 in sasl works just fine here: since I don't have k4
installed, the configure script automatically disabled it. Oops. ;-)
Yet another reason to leave the k4 stuff for someone who needs it.

> > Am I on the right track here? It seems to work, but I want to
> > make certain I'm headed in the right direction before I go much
> > further.
>
> Looks like it. If kerberos 4 and 5 cannot coexist, then make a single
> virtual depend, or just don't do the virtual depend.

Good point. I think I still need the virtual depend for kerberos5 since
it can come from either the heimdal or krb5 packages, but there's no
reason to create 2 virtual packages for k4 and k5.

So I'm down to virtual/kerberos and the USE flag 'kerberos5'.

> jano

Thanks for the feedback!

- Dave


<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise