From owner-freebsd-questions@FreeBSD.ORG Thu Apr 9 18:25:37 2009 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 96C06106566B for ; Thu, 9 Apr 2009 18:25:37 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from asmtpout015.mac.com (asmtpout015.mac.com [17.148.16.90]) by mx1.freebsd.org (Postfix) with ESMTP id 7DC848FC08 for ; Thu, 9 Apr 2009 18:25:37 +0000 (UTC) (envelope-from cswiger@mac.com) MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Received: from cswiger1.apple.com ([17.227.140.124]) by asmtp015.mac.com (Sun Java(tm) System Messaging Server 6.3-8.01 (built Dec 16 2008; 32bit)) with ESMTPSA id <0KHU008LOJ6NB230@asmtp015.mac.com> for freebsd-questions@freebsd.org; Thu, 09 Apr 2009 11:25:37 -0700 (PDT) Message-id: From: Chuck Swiger To: Gary Gatten In-reply-to: <70C0964126D66F458E688618E1CD008A0793E95A@WADPEXV0.waddell.com> Date: Thu, 09 Apr 2009 11:25:35 -0700 References: <49DCA9E0.6000109@zedat.fu-berlin.de> <49DD0A57.7020701@freebsd.org> <49DE28D8.1020508@mail.zedat.fu-berlin.de> <70C0964126D66F458E688618E1CD008A0793E957@WADPEXV0.waddell.com> <20090409134659.58922787@att.net> <70C0964126D66F458E688618E1CD008A0793E95A@WADPEXV0.waddell.com> X-Mailer: Apple Mail (2.930.3) Cc: "freebsd-questions@freebsd.org Questions -" Subject: Re: make install krb5 conflict with heimdal X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2009 18:25:38 -0000 On Apr 9, 2009, at 11:21 AM, Gary Gatten wrote: > This is a new thread, so not sure what you mean? Maybe my other posts > re. new package system? Unintentional hijack - just venting, sorry. > > I'm aware of the pkg_delete -f; but I don't want to break FreeRADIUS. > This will process involves getting FreeRADIUS hooked into AD, and one > method I'm looking into is the SAMBA / NTLM thing. SAMBA won't > install > unless krb5 is "happy". > > Do I need to force heimdal removal, install krb5, reinstall heimdal > and > HOPE it works and nothing breaks in the process? Nope. FreeRADIUS' Makefile claims to support both Heimdal and Kerberos5, but you have to choose one or the other via the options ("make config"): > .ifdef(WITH_KERBEROS) > .ifdef(WITH_HEIMDAL) > LIB_DEPENDS+= krb5.23:${PORTSDIR}/security/heimdal > CONFIGURE_ARGS+=--enable-heimdal-krb5 > .else > LIB_DEPENDS+= krb5.3:${PORTSDIR}/security/krb5 > .endif Likewise with Samba: > .if defined(WITH_ADS) > SAMBA_WANT_LDAP= yes > SAMBA_WANT_KRB5= yes > CONFIGURE_ARGS+= --with-ads > .else > CONFIGURE_ARGS+= --without-ads > .endif > # Kerberos5 is necessary for ADS > .if defined(SAMBA_WANT_KRB5) > .if defined(KRB5_HOME) && exists(${KRB5_HOME}/lib/libgssapi_krb5.so) > CONFIGURE_ARGS+= --with-krb5="${KRB5_HOME}" > .elif defined(HEIMDAL_HOME) && exists(${HEIMDAL_HOME}/lib/ > libgssapi.so) > CONFIGURE_ARGS+= --with-krb5="${HEIMDAL_HOME}" > .elif exists(/usr/lib/libkrb5.so) && exists(/usr/bin/krb5-config) > CONFIGURE_ARGS+= --with-krb5="/usr" > .else > LIB_DEPENDS+= krb5:${PORTSDIR}/security/heimdal > CONFIGURE_ARGS+= --with-krb5="${LOCALBASE}" > .endif Regards, -- -Chuck