Enrico,
I would prefer to keep the first release's of SL4 'clean'. Meaning as
much like the original as possible.
This doesn't LOOK like it should do anything, and I don't have too much
of a problem, but how about if we keep it in the contrib section until
people have tested and made sure it doesn't interfere with anything.
Basically, I want the first beta's (and possibly even the first release)
to have an original kerberos, so that if there is a problem we don't
have people pointing fingers at fakeka.
But it would be good to have it available for people to test to see if
it does work withouth causing problem. So the contrib section would be
the best place that I can see.
Does this sound ok?
Troy
Enrico M. V. Fasanelli wrote:
> Connie,
>
> fakeka is a "fake" AFS KAserver that allow AFS authentication against a
> kerberos5 KDC even from an old KA-only AFS client. It is part of Ken
> Hornstein's kerberos5 migration kit, and It has been included in MIT
> Kerberos5 version 1.3.2.
>
> We need it enabled for our AFS/K5 authentication servers.
>
> Ciao
> Enrico
>
> On 18 Feb 2005, at 18:06, Connie Sieh wrote:
>
>> Enrico,
>>
>> On Fri, 18 Feb 2005, Enrico M. V. Fasanelli wrote:
>>
>>> Dear all,
>>>
>>> we (the INFN K5/AFS group) need a Kerberos5 build with fakeka enabled.
>>>
>>> Do you think is possible to change the default build options of krb5
>>> and enable the build of fakeka in the new SL4?
>>
>>
>> What is "fakeka"?
>>
>> -Connie Sieh
>>
>>>
>>> If yes, below the diff for a fakeka-enabled spec file (the original one
>>> comes from RHE4 krb5-1.3.4-9.src.rpm)
>>>
>>> Ciao
>>> Enrico
>>>
>>> diff -uNr /usr/src/redhat/SPECS/krb5.spec.orig
>>> /usr/src/redhat/SPECS/krb5.spec
>>> --- /usr/src/redhat/SPECS/krb5.spec.orig 2005-02-18
>>> 17:13:08.000000000 +0100
>>> +++ /usr/src/redhat/SPECS/krb5.spec 2005-02-18 17:22:52.000000000
>>> +0100
>>> @@ -7,7 +7,7 @@
>>> Summary: The Kerberos network authentication system.
>>> Name: krb5
>>> Version: 1.3.4
>>> -Release: 9
>>> +Release: 9.SL
>>> # Maybe we should explode from the now-available-to-everybody tarball
>>> instead?
>>> # http://web.mit.edu/kerberos/www/dist/krb5/1.3/krb5-1.3.4.tar
>>> Source0: krb5-%{version}.tar.gz
>>> @@ -121,6 +121,9 @@
>>> workstation.
>>>
>>> %changelog
>>> +* Fri Feb 18 2005 Enrico M.V.Fasanelli <[log in to unmask]> 1.3.4-9.SL
>>> +- fakeka enabled
>>> +
>>> * Tue Nov 23 2004 Nalin Dahyabhai <[log in to unmask]> 1.3.4-9
>>> - fix predictable-tempfile-name bug in krb5-send-pr (CAN-2004-0971,
>>> #140036)
>>> - silence compiler warning in kprop by using an in-memory ccache with
>>> a fixed
>>> @@ -783,6 +786,7 @@
>>> LDFLAGS="-pie" \
>>> CPPFLAGS="$DEFINES $INCLUDES" \
>>> --enable-shared --enable-static \
>>> + --enable-fakeka \
>>> --bindir=%{krb5prefix}/bin \
>>> --mandir=%{krb5prefix}/man \
>>> --sbindir=%{krb5prefix}/sbin \
>>> @@ -1033,6 +1037,7 @@
>>> %{krb5prefix}/sbin/krb524d
>>> %{krb5prefix}/sbin/krb5kdc
>>> %{krb5prefix}/man/man8/krb5kdc.8*
>>> +%{krb5prefix}/sbin/fakeka
>>> %{krb5prefix}/sbin/sim_server
>>> %{krb5prefix}/sbin/v5passwdd
>>> # This is here for people who want to test their server, and also
>>>
>>>
>>> ---
>>> Enrico M. V. Fasanelli - I.N.F.N. Sezione di Lecce
>>>
>>
>>
> ---
> Enrico M. V. Fasanelli - I.N.F.N. Sezione di Lecce
--
__________________________________________________
Troy Dawson [log in to unmask] (630)840-6468
Fermilab ComputingDivision/CSS CSI Group
__________________________________________________
|
