summaryrefslogtreecommitdiff
path: root/wscript_configure_krb5
AgeCommit message (Collapse)AuthorFilesLines
2012-05-23Introduce system MIT krb5 build with --with-system-mitkrb5 option.Alexander Bokovoy1-208/+0
System MIT krb5 build also enabled by specifying --without-ad-dc When --with-system-mitkrb5 (or --withou-ad-dc) option is passed to top level configure in WAF build we are trying to detect and use system-wide MIT krb5 libraries. As result, Samba 4 DC functionality will be disabled due to the fact that it is currently impossible to implement embedded KDC server with MIT krb5. Thus, --with-system-mitkrb5/--without-ad-dc build will only produce * Samba 4 client libraries and their Python bindings * Samba 3 server (smbd, nmbd, winbindd from source3/) * Samba 3 client libraries In addition, Samba 4 DC server-specific tests will not be compiled into smbtorture. This in particular affects spoolss_win, spoolss_notify, and remote_pac rpc tests.
2012-05-23gensec_gssapi: Make it possible to build with MIT krb5Simo Sorce1-0/+16
We need to ifdef out some minor things here because there is no available API to set these options in MIT. The realm and canonicalize options should be not interesting in the client case. Same for the send_to_kdc hacks. Also the OLD DES3 enctype is not at all interesting. I am not aware that Windows will ever use DES3 and no modern implementation relies on that enctype anymore as it has been fully deprecated long ago, so we can simply ignore it.
2012-05-09waf: remove pointless WINBIND_KRB5_LOCATOR env.Günther Deschner1-3/+0
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed May 9 15:16:34 CEST 2012 on sn-devel-104
2012-05-08krb5samba: Add smb_krb5_make_pac_checksum.Andreas Schneider1-1/+1
Signed-off-by: Simo Sorce <idra@samba.org> Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Tue May 8 08:30:52 CEST 2012 on sn-devel-104
2012-05-08krb5samba: Add krb5_free_checksum_contents wrapperSimo Sorce1-1/+2
2012-05-04waf: Fix com_err detection with MIT krb5.Andreas Schneider1-2/+5
Signed-off-by: Simo Sorce <idra@samba.org> Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Fri May 4 18:43:05 CEST 2012 on sn-devel-104
2012-05-04auth-session: MIT doesn't have import/export cred yetSimo Sorce1-0/+1
For now let's just loose this functionality with the MIT build. gss_import/export_cred should be availa ble when MIT 1.11 is released and this code is used only in some proxy scenario. Not normally needed for common configurations.
2012-05-04krb5samba: Add a smb_krb5_cc_get_lifetime() function.Andreas Schneider1-1/+2
Signed-off-by: Simo Sorce <idra@samba.org>
2012-05-04krb5samba: Add compat krb5_make_principal for MIT buildSimo Sorce1-1/+2
2012-05-04Move kerberos_kinit_keyblock_cc to krb5samba libSimo Sorce1-1/+2
Make it also work with MIT where krb5_get_in_tkt_with_keyblock is not available.
2012-04-23waf: move krb5 checks to a separate waf fileAlexander Bokovoy1-0/+187
With PROCESS_SEPARATE_RULE in wafsamba it is now possible to simplify configuration and checks for MIT/Heimdal Kerberos implementations. 1. Move MIT krb5 checks from source3/wscript to wscript_configure_krb5 2. Make sure they are called same way (--with-mit-krb5-checks) 3. If no configure checks identified MIT krb5 in system (or were disabled), make sure Heimdal build is selected, embedded (default) or system-provided. This makes logic of configuration unchanged for Heimdal builds but adds less hacky way to use MIT krb5 builds. The latter does not work yet as we need to untangle more subsystems from HDB/Heimdal-specific details but lays out a foundation for that. Signed-off-by: Simo Sorce <idra@samba.org>