#3261 sssd does not correctly build PAC responder with Kerberos 1.15
Closed: Invalid None Opened 7 years ago by mstroeder.

Not sure whether this version check should be done but it at least it needs to be updated to MIT Kerberos 1.15.

See also: https://build.opensuse.org/request/show/443977

--- src/external/pac_responder.m4.orig  2016-12-07 10:15:59.944342273 +0100
+++ src/external/pac_responder.m4   2016-12-07 10:16:01.412349552 +0100
@@ -16,7 +16,8 @@
         Kerberos\ 5\ release\ 1.11* | \
         Kerberos\ 5\ release\ 1.12* | \
         Kerberos\ 5\ release\ 1.13* | \
-        Kerberos\ 5\ release\ 1.14*)
+        Kerberos\ 5\ release\ 1.14* | \
+        Kerberos\ 5\ release\ 1.15*)
             krb5_version_ok=yes
             AC_MSG_RESULT([yes])
             ;;

The patch is already in master 11d2a11.

If you wonder why there is this check at all, the authorization data plugin API of MIT Kerberos is still not public, I don't know why. So SSSD keeps a copy of the API in src/sss_client/krb5_authdata_int.h. The configure check is a reminder to check if the API changed in the next major Kerberos release.

HTH

bye,
Sumit

Fields changed

resolution: => worksforme
status: new => closed

Metadata Update from @mstroeder:
- Issue set to the milestone: NEEDS_TRIAGE

7 years ago

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4294

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Login to comment on this ticket.

Metadata