MIT-krb5 making progress

OK, so here’s an update. I put mit-krb5-1.4 into portage (and took out a whooooooooooooole bunch of cruft while I was in there). Now, this is important, so it’s in bold:

DO NOT EMERGE IT YET!!!

Here’s what’s happening with it so far:

Most of the utils (the telnet client/server and so on) now get installed as mit-telnet and so on rather than just ktelnet and so on. Additionally, there were nice configure arguments to use the system’s db, com_err and ss libraries/headers.

The things which remain, however:

/usr/sbin/k{rb5-config,admin{,d},tutil} all still clash with heimdal’s renditions of them. Same with /usr/include/krb5.h and /usr/include/gssapi/ (heimdal makes that a symlink, mit makes it a directory).

Finally, most things they install in /usr/lib will clobber each other badly. Over the next few days, I’ll be sorting these issues out, and updating the ebuild. I’ll also put quick updates on here so you can keep track.

The updated todo:

  • finish mit-krb5 fix0ring
  • fix0r up a heimdal cvs snapshot
  • make sure my kerberos-config script (not released yet)
  • try and find ways to make other programmes compile against either one
  • unleash

Anyway, stay tuned. IF you want to get your hands dirty, find me a nice clean way to relocate the stuff in /usr/lib (ideally /usr/lib/kerberos/mit or something, but I’m open to ideas). Will this involve an env.d/ file then as well? These are unanswered questions that you can help answer, or wait for the answers.

Sheesh with the time

Right, so this coming week is finally going to see the results of my frustrations with the kerberi. My apologies to those who have been tuning in with hopes of seeing some movement. I’m sorry, but there simply hasn’t been any. The next weekish will finally see some ebb in my schedule.

Because the Airport Extreme does not work in linux, I haven’t really been able to work from home (yeah, I can use the terminal on my devbox @ work, but then actually testing becomes a different story). So hopefully my devboxes arrive from LA soon (read that to say: hopefully we can budget in the money to finally have those sent).

Meanwhile, I found a link from Mike Rivero’s blog to the Digital Imprimatur, which is a very interesting read. Also, check Ciaran’s entry for good reading if you are, know of, heard of, dreamt of, had sex with, once bumped into, and/or are the best friend of the college roommate of an upstream developer.