Bug#419420: Heimdal

[Russ Allbery]

Roberto C Sánchez <roberto at connexer.com> writes:
> On Tue, Apr 24, 2007 at 06:56:38PM -0700, Russ Allbery wrote:

>> You can't really do that.  If the PostgreSQL libraries expose any of
>> the underlying Kerberos libraries, you can't just replace MIT Kerberos
>> with Heimdal after the fact.  Things won't compile.

> I guess I wasn't clear.  I meant to see if it was possible for them to
> do something similar to what we are doing (with a second minimal source
> package for the Heimdal implementation).

I guess I'm not sure why they'd want to.  Heimdal has different
performance characteristics in Cyrus SASL that are specifically useful for
running OpenLDAP servers, but it's usually not useful to build every
package in Debian against all Kerberos implementations.  If PostgreSQL is
working well with MIT Kerberos, it's probably more hassle than it's worth
to maintain alternate libraries.

Is the PostgreSQL support used by the GSSAPI module in Cyrus SASL?  I'm
not sure why that would be the case, and if it isn't, why would we want to
build with PostgreSQL in the Heimdal build?  The only package produced by
that source package is a Heimdal GSSAPI module package, so I'd do a
minimal build that produces that module.

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>