By default, Bugzilla does not search the list of RESOLVED bugs.
You can force it to do so by putting the upper-case word ALL in front of your search query, e.g.: ALL tdelibs
We recommend searching for bugs this way, as you may discover that your bug has already been resolved and fixed in a later release.

Bug 2635

Summary:	Build issue: FTBFS in libtdeldap when using mit-krb5 library
Product:	TDE	Reporter:	Francois Andriot <albator78>
Component:	non-core programs	Assignee:	Timothy Pearson <kb9vqf>
Status:	NEW ---
Severity:	normal	CC:	albator78, bugwatch, michele.calgaro
Priority:	P5
Version:	R14.1.x [Trinity]
Hardware:	Other
OS:	Linux
Compiler Version:		TDE Version String:
Application Version:		Application Name:
Bug Depends on:
Bug Blocks:	2969

Description Francois Andriot 2016-04-17 07:10:52 CDT

libtdeldap.cpp:55:24: fatal error: krb5_asn1.h: No such file or directory

It looks like the 'asn1' header files are from heimdal-krb5 and do not exist in mit-krb5.

Some Linux distributions ship with mit-krb5 and have no heimdal-krb5, so this is a no-go for them.

Comment 1 Michele Calgaro 2018-10-17 22:47:15 CDT

As for bug 2634, can you please update on the status of this bug.

Comment 2 Francois Andriot 2018-10-19 12:08:01 CDT

Hello, not sure about this particular one.
But this is a more general issue. Currently, all Trinity packages that require Kerberos can only be built against Heimdal Kerberos, whereas Linux distributions ship with Mit-kerberos by default. Some don't even provide Mit Kerberos at all.

I think we should make our packages compatible with Mit-Kerberos.

Comment 3 Michele Calgaro 2018-10-19 22:30:02 CDT

Ok, understood. Sounds like a reasonable plan. Perhaps we can work and test this together on our TGW (https://mirror.git.trinitydesktop.org/gitea)

Comment 4 Michele Calgaro 2019-02-11 00:22:30 CST

Hi Francois,
I will start looking into this bug soon.
It seems tdelibs is able to build fine with MIT Kerberos in debian. Can you confirm it is ok also on the distros you are testing.

libtdeldap (and perhaps other packages) definitely needs some work, but first I would like to make sure tdelibs is ok for you too.

Comment 5 Michele Calgaro 2019-02-12 09:49:34 CST

Francois,
I have taken a detailed look at heimdal and MIT kerberos API and the differences are not small. It will take quite an effort to make libtdeldap and the other ldap modules supporting both heimdal or mit kerberos.
I have discussed with Slavek about this and for the time being we have decided to remove this bug from R14.1.0 list, since we don't want to add additional delays to it.
We may come back to this bug in future, although it is probably not top of the list of things to do given the required effort.

Comment 6 Francois Andriot 2019-02-12 15:00:37 CST

Hello, I confirm that only the packages 'libtdeldap' and related stuff are requiring Heimdal Kerberos, tdelibs use mit-kerberos correctly.

I understand this bug is low priority.
I personnally don't use these packages anyway.

Comment 7 Michele Calgaro 2019-02-13 08:33:21 CST

Thanks for the feedback on tdelibs Francois.