Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 21 Oct 2019 10:29:13 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 241347] security/sssd: Update to 1.16.4
Message-ID:  <bug-241347-7788-BGo30DRpU6@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-241347-7788@https.bugs.freebsd.org/bugzilla/>
References:  <bug-241347-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D241347

--- Comment #6 from lukas.slebodnik@intrak.sk ---
(In reply to Rick from comment #1)
> Reconsider defining an explicit Samba dependency. This factored into LDB =
conflicts between security/sssd and net/samba4* in the first place. Ports d=
efines behavior for selecting the Samba version by setting a default that c=
an be over-ridden via DEFAULT_VERSIONS, which puts greater control in the u=
sers hands.

Situation with LDB is different samba is more picky about version of ldb.
sssd can work without recompilation with ldb 1.2, 1.3, 1.4, 1.5
The only exception is ldb-1.1.30 due to ABI breakage in ldb.


> Explicit dependency mitigates current behavior, but when net/samba411 is =
added to ports and users want to install 4.11 as opposed to 4.10, it requir=
es overriding SMB_LIB_DEPENDS instead of using DEFAULT_VERSIONS like "DEFAU=
LT_VERSIONS=3Dsamba=3D4.11".

The tricky part is winbind_idmap_sss.so The might change ABI between versio=
ns
and thus you need to recompile the plugin and to "downgrade" version with
--with-smb-idmap-interface-version=3D6

Sure that module needn't be used by anyone and ipa and ad provider would wo=
rk.
But it is dangeroups therefore I decided to stick with samna-4.10


> Addressing the current failing behavior is achievable through a note in M=
akefile or UPDATING explaining net/samba410 to be the minimum Samba version=
 required for SMB support. So, users know to deploy a configuration similar=
 to that described in bug #238465.


which changes do you suggest after my explanation?

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-241347-7788-BGo30DRpU6>