[Pkg-samba-maint] Bug#1023609: Bug#1023609: smbclient does not work with kerberos ccache of KEYRING: type

[Michael Tokarev]

07.11.2022 23:54, Vincent Danjean wrote:
..
> As I'm only using the client part (the AD is managed by Microsoft
> products in my case), do you have some advises about how to modify
> debian/rules,control to (locally) build the samba package with MIT?

Are you really so serious about using the in-kernel ccache?

> I suppose there will be :
> - a few build dependencies to change (quickly looking, I see nothing
>    about heimdal?)
> - a few configure options to tweek
>    I should be able to find the options to add such as
>    --with-system-mitkrb5
>    (and --with-experimental-mit-ad-dc just to pass the compilation?)
>    but what should be disabled?
>    Or which binary packages should I disable/remove ?
> 
>    I would be very pleased if you can give me a few hints.

I'd have to take a look at this.  So far I've no idea how large
this project would be and what'll be needed.

Actually, I had a thought like this for quite some time, to try
the MIT kerberos samba build.  Myself, I don't know much about the
two kerberos implementations and less so about their usage in
samba. What I do know is that redhat/fedora uses mit-kerberos builds
of samba for quite some time, their build instructions removes whole
thord_party/heimdal directory as the very first step to ensure this
stuff is never used by samba build.  So it might be interesting to
take a look there.

For now I have other stuff to do but this is definitely in my todo list.

An additional data point: with samba, you have to rely on your own
basically, since for many things, there's no one to assist you.

/mjt