From owner-freebsd-questions@FreeBSD.ORG Mon Jan 31 16:43:21 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2FB8C106564A for ; Mon, 31 Jan 2011 16:43:21 +0000 (UTC) (envelope-from me@janh.de) Received: from mailhost.uni-hamburg.de (mailhost.uni-hamburg.de [134.100.32.155]) by mx1.freebsd.org (Postfix) with ESMTP id DC7678FC19 for ; Mon, 31 Jan 2011 16:43:20 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mailhost.uni-hamburg.de (Postfix) with ESMTP id 3702490083; Mon, 31 Jan 2011 17:43:19 +0100 (CET) X-Virus-Scanned: by University of Hamburg (RRZ/mailhost) Received: from mailhost.uni-hamburg.de ([127.0.0.1]) by localhost (mailhost.uni-hamburg.de [127.0.0.1]) (amavisd-new, port 10024) with LMTP id kzeJ-EFAWBwj; Mon, 31 Jan 2011 17:43:19 +0100 (CET) Received: from pc911.math.uni-hamburg.de (pc911.math.uni-hamburg.de [134.100.220.198]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (Client did not present a certificate) (Authenticated sender: fmjv004) by mailhost.uni-hamburg.de (Postfix) with ESMTPSA id 179A390023; Mon, 31 Jan 2011 17:43:19 +0100 (CET) Message-ID: <4D46E6A8.8040408@janh.de> Date: Mon, 31 Jan 2011 17:43:20 +0100 From: Jan Henrik Sylvester User-Agent: Mozilla/5.0 (X11; U; FreeBSD amd64; en-US; rv:1.9.2.13) Gecko/20101219 Thunderbird/3.1.7 MIME-Version: 1.0 To: Vallo Kallaste References: <20110131154759.GA17485@hape.internal> In-Reply-To: <20110131154759.GA17485@hape.internal> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: questions-list freebsd Subject: Re: FreeBSD 8.2: state of Kerberos, GSS-API and (Cyrus) SASL? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Jan 2011 16:43:21 -0000 On 01/-10/-28163 20:59, Vallo Kallaste wrote: > Googling for the subject keywords gave me quite disturbing overall > feeling. I have no personal experience but it seems that things are > broken from the second half of 2010 and still not recovered? I got GSSAPI of Heimdal 1.1 in FreeBSD base is still broken, GSSAPI of Heimdal 1.4 in ports is supposed to work, but I have not been successful with Cyrus SASL (see below). > KDC up and working on 8.2-RC2 base Heimdal without any glitch, but > this is to be expected. What's the state about GSS-API and > cyrus-sasl2 integration with base Heimdal? With ports Heimdal? Can I > replace base Heimdal with one from ports, is it supported? Any > make.conf knobs to fiddle with? Any info appreciated. I am struggling with exactly the same problem. Unfortunately, I got no reply on this list about it: http://lists.freebsd.org/pipermail/freebsd-questions/2011-January/226495.html If you get any further, please, tell me. I am thinking about reposting my question to a different list: stable as that is where the earlier discussions happened or ports as that seems more appropriate. What I have not tried, yet, is using MIT Kerberos from ports instead of Heimdal, but since we use Heimdal here for everything, I am kind of reluctant. (Otherwise, I would have to setup some Linux server...) Cheers, Jan Henrik