From mboxrd@z Thu Jan  1 00:00:00 1970
From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH 1/2] krb5: Move package into core system.
Date: Tue, 17 May 2022 11:34:08 +0100
Message-ID: <5D69F29B-091F-413D-8BB8-C9817C24D5ED@ipfire.org>
In-Reply-To: <180d0ec6150.2777.cac9d3ffac9e24d09d20af05166fd73b@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============2012038417405902605=="
List-Id: <development.lists.ipfire.org>

--===============2012038417405902605==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hello,

> On 17 May 2022, at 08:29, Stefan Schantl <stefan.schantl(a)ipfire.org> wrot=
e:
>=20
> Hello Michael,
>=20
> thanks for your reply.
>=20
> Of course we need to be sure krb5 will get built before openSSH and may nee=
ds some additional compile flags - I'll take care about that.
>=20
> Do we want kerberos support for any additonal services?

I can=E2=80=99t think of anything. SSH is just helpful because we are using K=
erberos massively throughout our own infrastructure.

Best,
-Michael

> Thanks in advance and best regards,
>=20
>=20
> -Stefan
>=20
> Am 16. Mai 2022 11:05:10 schrieb Michael Tremer <michael.tremer(a)ipfire.or=
g>:
>=20
>> Hello,
>>=20
>>> On 15 May 2022, at 17:02, Stefan Schantl <stefan.schantl(a)ipfire.org> wr=
ote:
>>>=20
>>> On one hand, the key.dns_resolver binary is linked against libkrb5, so th=
is
>>> library at least is required by the base system.
>>>=20
>>> On the other hand this easily allows different services on the firewall
>>> to use kerberos for authentication (ssh etc).
>>=20
>> Do we not need to enable this at compile time then?
>>=20
>> -Michael
>>=20
>>>=20
>>> Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>
>>> ---
>>> config/rootfiles/{packages =3D> common}/krb5 | 0
>>> lfs/cups                                   | 4 ++--
>>> lfs/krb5                                   | 4 ----
>>> lfs/netatalk                               | 4 ++--
>>> lfs/samba                                  | 4 ++--
>>> lfs/tshark                                 | 4 ++--
>>> 6 files changed, 8 insertions(+), 12 deletions(-)
>>> rename config/rootfiles/{packages =3D> common}/krb5 (100%)
>>>=20
>>> diff --git a/config/rootfiles/packages/krb5 b/config/rootfiles/common/krb5
>>> similarity index 100%
>>> rename from config/rootfiles/packages/krb5
>>> rename to config/rootfiles/common/krb5
>>> diff --git a/lfs/cups b/lfs/cups
>>> index cd4519b63..7d4dc20c2 100644
>>> --- a/lfs/cups
>>> +++ b/lfs/cups
>>> @@ -33,9 +33,9 @@ DL_FROM    =3D $(URL_IPFIRE)
>>> DIR_APP    =3D $(DIR_SRC)/cups-$(VER)
>>> TARGET     =3D $(DIR_INFO)/$(THISAPP)
>>> PROG       =3D cups
>>> -PAK_VER    =3D 25
>>> +PAK_VER    =3D 26
>>>=20
>>> -DEPS       =3D avahi cups-filters dbus ghostscript krb5 libtiff
>>> +DEPS       =3D avahi cups-filters dbus ghostscript libtiff
>>>=20
>>> SERVICES   =3D cups
>>>=20
>>> diff --git a/lfs/krb5 b/lfs/krb5
>>> index 399f9338e..e08948005 100644
>>> --- a/lfs/krb5
>>> +++ b/lfs/krb5
>>> @@ -33,10 +33,6 @@ DL_FILE    =3D $(THISAPP).tar.gz
>>> DL_FROM    =3D $(URL_IPFIRE)
>>> DIR_APP    =3D $(DIR_SRC)/$(THISAPP)/src
>>> TARGET     =3D $(DIR_INFO)/$(THISAPP)
>>> -PROG       =3D krb5
>>> -PAK_VER    =3D 7
>>> -
>>> -DEPS       =3D
>>>=20
>>> SERVICES   =3D
>>>=20
>>> diff --git a/lfs/netatalk b/lfs/netatalk
>>> index 61ba193a5..ef75c89fe 100644
>>> --- a/lfs/netatalk
>>> +++ b/lfs/netatalk
>>> @@ -34,9 +34,9 @@ DL_FROM    =3D $(URL_IPFIRE)
>>> DIR_APP    =3D $(DIR_SRC)/$(THISAPP)
>>> TARGET     =3D $(DIR_INFO)/$(THISAPP)
>>> PROG       =3D netatalk
>>> -PAK_VER    =3D 2
>>> +PAK_VER    =3D 3
>>>=20
>>> -DEPS       =3D avahi dbus krb5
>>> +DEPS       =3D avahi dbus
>>>=20
>>> SERVICES   =3D netatalk
>>>=20
>>> diff --git a/lfs/samba b/lfs/samba
>>> index 97fe96918..a48a0ecb1 100644
>>> --- a/lfs/samba
>>> +++ b/lfs/samba
>>> @@ -33,9 +33,9 @@ DL_FROM    =3D $(URL_IPFIRE)
>>> DIR_APP    =3D $(DIR_SRC)/$(THISAPP)
>>> TARGET     =3D $(DIR_INFO)/$(THISAPP)
>>> PROG       =3D samba
>>> -PAK_VER    =3D 84
>>> +PAK_VER    =3D 85
>>>=20
>>> -DEPS       =3D avahi cups libtirpc krb5 perl-Parse-Yapp perl-JSON
>>> +DEPS       =3D avahi cups libtirpc perl-Parse-Yapp perl-JSON
>>>=20
>>> SERVICES   =3D samba
>>>=20
>>> diff --git a/lfs/tshark b/lfs/tshark
>>> index eb89f7474..ee9c06dc4 100644
>>> --- a/lfs/tshark
>>> +++ b/lfs/tshark
>>> @@ -34,8 +34,8 @@ DL_FROM    =3D $(URL_IPFIRE)
>>> DIR_APP    =3D $(DIR_SRC)/$(THISAPP)
>>> TARGET     =3D $(DIR_INFO)/$(THISAPP)
>>> PROG       =3D tshark
>>> -DEPS       =3D krb5 c-ares
>>> -PAK_VER    =3D 12
>>> +DEPS       =3D c-ares
>>> +PAK_VER    =3D 13
>>>=20
>>> SERVICES   =3D
>>>=20
>>> --=20
>>> 2.30.2
>>>=20
>=20


--===============2012038417405902605==--