Hello Michael,

thanks for your reply.

Of course we need to be sure krb5 will get built before openSSH and may needs some additional compile flags - I'll take care about that.

Do we want kerberos support for any additonal services?

Thanks in advance and best regards,


-Stefan

Am 16. Mai 2022 11:05:10 schrieb Michael Tremer <michael.tremer@ipfire.org>:

Hello,

On 15 May 2022, at 17:02, Stefan Schantl <stefan.schantl@ipfire.org> wrote:

On one hand, the key.dns_resolver binary is linked against libkrb5, so this
library at least is required by the base system.

On the other hand this easily allows different services on the firewall
to use kerberos for authentication (ssh etc).

Do we not need to enable this at compile time then?

-Michael


Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
---
config/rootfiles/{packages => common}/krb5 | 0
lfs/cups                                   | 4 ++--
lfs/krb5                                   | 4 ----
lfs/netatalk                               | 4 ++--
lfs/samba                                  | 4 ++--
lfs/tshark                                 | 4 ++--
6 files changed, 8 insertions(+), 12 deletions(-)
rename config/rootfiles/{packages => common}/krb5 (100%)

diff --git a/config/rootfiles/packages/krb5 b/config/rootfiles/common/krb5
similarity index 100%
rename from config/rootfiles/packages/krb5
rename to config/rootfiles/common/krb5
diff --git a/lfs/cups b/lfs/cups
index cd4519b63..7d4dc20c2 100644
--- a/lfs/cups
+++ b/lfs/cups
@@ -33,9 +33,9 @@ DL_FROM    = $(URL_IPFIRE)
DIR_APP    = $(DIR_SRC)/cups-$(VER)
TARGET     = $(DIR_INFO)/$(THISAPP)
PROG       = cups
-PAK_VER    = 25
+PAK_VER    = 26

-DEPS       = avahi cups-filters dbus ghostscript krb5 libtiff
+DEPS       = avahi cups-filters dbus ghostscript libtiff

SERVICES   = cups

diff --git a/lfs/krb5 b/lfs/krb5
index 399f9338e..e08948005 100644
--- a/lfs/krb5
+++ b/lfs/krb5
@@ -33,10 +33,6 @@ DL_FILE    = $(THISAPP).tar.gz
DL_FROM    = $(URL_IPFIRE)
DIR_APP    = $(DIR_SRC)/$(THISAPP)/src
TARGET     = $(DIR_INFO)/$(THISAPP)
-PROG       = krb5
-PAK_VER    = 7
-
-DEPS       =

SERVICES   =

diff --git a/lfs/netatalk b/lfs/netatalk
index 61ba193a5..ef75c89fe 100644
--- a/lfs/netatalk
+++ b/lfs/netatalk
@@ -34,9 +34,9 @@ DL_FROM    = $(URL_IPFIRE)
DIR_APP    = $(DIR_SRC)/$(THISAPP)
TARGET     = $(DIR_INFO)/$(THISAPP)
PROG       = netatalk
-PAK_VER    = 2
+PAK_VER    = 3

-DEPS       = avahi dbus krb5
+DEPS       = avahi dbus

SERVICES   = netatalk

diff --git a/lfs/samba b/lfs/samba
index 97fe96918..a48a0ecb1 100644
--- a/lfs/samba
+++ b/lfs/samba
@@ -33,9 +33,9 @@ DL_FROM    = $(URL_IPFIRE)
DIR_APP    = $(DIR_SRC)/$(THISAPP)
TARGET     = $(DIR_INFO)/$(THISAPP)
PROG       = samba
-PAK_VER    = 84
+PAK_VER    = 85

-DEPS       = avahi cups libtirpc krb5 perl-Parse-Yapp perl-JSON
+DEPS       = avahi cups libtirpc perl-Parse-Yapp perl-JSON

SERVICES   = samba

diff --git a/lfs/tshark b/lfs/tshark
index eb89f7474..ee9c06dc4 100644
--- a/lfs/tshark
+++ b/lfs/tshark
@@ -34,8 +34,8 @@ DL_FROM    = $(URL_IPFIRE)
DIR_APP    = $(DIR_SRC)/$(THISAPP)
TARGET     = $(DIR_INFO)/$(THISAPP)
PROG       = tshark
-DEPS       = krb5 c-ares
-PAK_VER    = 12
+DEPS       = c-ares
+PAK_VER    = 13

SERVICES   =

-- 
2.30.2