{"id":4,"date":"2005-03-15T15:42:26","date_gmt":"2005-03-15T15:07:09","guid":{"rendered":""},"modified":"2005-03-15T15:42:26","modified_gmt":"2005-03-15T15:42:26","slug":"kickin_it_to_the_kerb","status":"publish","type":"post","link":"https:\/\/blogs.gentoo.org\/seemant\/2005\/03\/15\/kickin_it_to_the_kerb\/","title":{"rendered":"Kickin&#8217; it to the Kerb"},"content":{"rendered":"<p>So let&#8217;s talk kerberos for a second.  We all know about heimdal and MIT&#8217;s reference implementation (whatever that means) and so on.  In Gentoo, at the moment, the two block each other &#8212;  meaning you can not have both installed at once.  This causes some problems because if you have a predilection to, say, heimdal, oftentimes portage will ask you to unmerge it so that it can merge mit-krb5 as a dependency for something else.  The latest example is <a href=\"http:\/\/packages.gentoo.org\/ebuilds\/?nfs-utils-1.0.7-r1\">the newest nfs-utils release<\/a>.  Which brings me back around to try and solve the problem of having cohabitating kerberi on your gentoo system.<\/p>\n<p>The current proposal that I&#8217;ve discussed with <a href=\"http:\/\/dev.gentoo.org\/~rphillips\">Ryan<\/a> a few weeks ago involves:<\/p>\n<p>1. Since both kerberi (and probably shishi, which it not in portage yet, but I&#8217;m looking into it) install a few common files, we&#8217;d remove those to a kerberos-common package which would be a runtime dependency for all the kerberi.  This package would contain also a script to switch the system&#8217;s kerberos similar to gcc-config and the like (and at this point, it&#8217;s probably better to just write up <a href=\"http:\/\/developer.berlios.de\/projects\/eclectic\/\">an eclectic plugin<\/a>.  This would solve the blocking implementations problem.<\/p>\n<p>Oh listen, while we&#8217;re on the subject of heimdal, I&#8217;d really like to have \/var\/heimdal moved to \/var\/lib\/heimdal, but I don&#8217;t want to break people&#8217;s setups. I believe the latter to be more FHS-correct.<\/p>\n<p>2. The other problem is more of an issue related to my neuroses than anything else.  To take the latest example (see nfs-utils above) &#8212; it fails to compile with heimdal.  And someone else had issues compiling something against heimdal, for whom I gave a hacky fix (basically renaming the filenames being #included).  So I&#8217;m thinking maybe some compatibility symlinks for both mit- and heimdal, and some other work to make packages which need kerberos be actually implementation-agnostic.<\/p>\n<p>Having said all this, I&#8217;m not in any way, shape or form, kerberos proficient, so I&#8217;m definitely open to input and opinions and comments and criticisms (though I&#8217;d prefer critiques which tend to be more productive).<\/p>\n<p>But wait, there&#8217;s more: at the moment, there&#8217;s collisions in the installed files between heimdal and e2fsprogs.  So we&#8217;re trying to breakout comerr and et out of e2fsprogs and make that a dependency of both anyway (if I remember correctly, both kerberi need et at least).<\/p>\n","protected":false},"excerpt":{"rendered":"<p>So let&#8217;s talk kerberos for a second. We all know about heimdal and MIT&#8217;s reference implementation (whatever that means) and so on. In Gentoo, at the moment, the two block each other &#8212; meaning you can not have both installed at once. This causes some problems because if you have a predilection to, say, heimdal, &hellip; <a href=\"https:\/\/blogs.gentoo.org\/seemant\/2005\/03\/15\/kickin_it_to_the_kerb\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Kickin&#8217; it to the Kerb<\/span><\/a><\/p>\n","protected":false},"author":13,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[3],"tags":[],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/blogs.gentoo.org\/seemant\/wp-json\/wp\/v2\/posts\/4"}],"collection":[{"href":"https:\/\/blogs.gentoo.org\/seemant\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.gentoo.org\/seemant\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.gentoo.org\/seemant\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.gentoo.org\/seemant\/wp-json\/wp\/v2\/comments?post=4"}],"version-history":[{"count":0,"href":"https:\/\/blogs.gentoo.org\/seemant\/wp-json\/wp\/v2\/posts\/4\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.gentoo.org\/seemant\/wp-json\/wp\/v2\/media?parent=4"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.gentoo.org\/seemant\/wp-json\/wp\/v2\/categories?post=4"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.gentoo.org\/seemant\/wp-json\/wp\/v2\/tags?post=4"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}