On 21 Feb 2005, at 16:46, Troy Dawson wrote: > Enrico, > I would prefer to keep the first release's of SL4 'clean'. Meaning as > much like the original as possible. > > This doesn't LOOK like it should do anything, and I don't have too > much of a problem, but how about if we keep it in the contrib section > until people have tested and made sure it doesn't interfere with > anything. > > Basically, I want the first beta's (and possibly even the first > release) to have an original kerberos, so that if there is a problem > we don't have people pointing fingers at fakeka. > > But it would be good to have it available for people to test to see if > it does work withouth causing problem. So the contrib section would > be the best place that I can see. > > Does this sound ok? Troy, I agree with the general statement of keeping SL4 clean. In this case, being fakeka simply an additional binary (and no one will use it without knowing what it is doing) I think that SL4 will be clean also with fakeka built. BTW, contrib section could be ok. Ciao Enrico > > Troy > > Enrico M. V. Fasanelli wrote: >> Connie, >> fakeka is a "fake" AFS KAserver that allow AFS authentication against >> a kerberos5 KDC even from an old KA-only AFS client. It is part of >> Ken Hornstein's kerberos5 migration kit, and It has been included in >> MIT Kerberos5 version 1.3.2. >> We need it enabled for our AFS/K5 authentication servers. >> Ciao >> Enrico >> On 18 Feb 2005, at 18:06, Connie Sieh wrote: >>> Enrico, >>> >>> On Fri, 18 Feb 2005, Enrico M. V. Fasanelli wrote: >>> >>>> Dear all, >>>> >>>> we (the INFN K5/AFS group) need a Kerberos5 build with fakeka >>>> enabled. >>>> >>>> Do you think is possible to change the default build options of krb5 >>>> and enable the build of fakeka in the new SL4? >>> >>> >>> What is "fakeka"? >>> >>> -Connie Sieh >>> >>>> >>>> If yes, below the diff for a fakeka-enabled spec file (the original >>>> one >>>> comes from RHE4 krb5-1.3.4-9.src.rpm) >>>> >>>> Ciao >>>> Enrico >>>> >>>> diff -uNr /usr/src/redhat/SPECS/krb5.spec.orig >>>> /usr/src/redhat/SPECS/krb5.spec >>>> --- /usr/src/redhat/SPECS/krb5.spec.orig 2005-02-18 >>>> 17:13:08.000000000 +0100 >>>> +++ /usr/src/redhat/SPECS/krb5.spec 2005-02-18 >>>> 17:22:52.000000000 >>>> +0100 >>>> @@ -7,7 +7,7 @@ >>>> Summary: The Kerberos network authentication system. >>>> Name: krb5 >>>> Version: 1.3.4 >>>> -Release: 9 >>>> +Release: 9.SL >>>> # Maybe we should explode from the now-available-to-everybody >>>> tarball >>>> instead? >>>> # http://web.mit.edu/kerberos/www/dist/krb5/1.3/krb5-1.3.4.tar >>>> Source0: krb5-%{version}.tar.gz >>>> @@ -121,6 +121,9 @@ >>>> workstation. >>>> >>>> %changelog >>>> +* Fri Feb 18 2005 Enrico M.V.Fasanelli <[log in to unmask]> >>>> 1.3.4-9.SL >>>> +- fakeka enabled >>>> + >>>> * Tue Nov 23 2004 Nalin Dahyabhai <[log in to unmask]> 1.3.4-9 >>>> - fix predictable-tempfile-name bug in krb5-send-pr >>>> (CAN-2004-0971, >>>> #140036) >>>> - silence compiler warning in kprop by using an in-memory ccache >>>> with >>>> a fixed >>>> @@ -783,6 +786,7 @@ >>>> LDFLAGS="-pie" \ >>>> CPPFLAGS="$DEFINES $INCLUDES" \ >>>> --enable-shared --enable-static \ >>>> + --enable-fakeka \ >>>> --bindir=%{krb5prefix}/bin \ >>>> --mandir=%{krb5prefix}/man \ >>>> --sbindir=%{krb5prefix}/sbin \ >>>> @@ -1033,6 +1037,7 @@ >>>> %{krb5prefix}/sbin/krb524d >>>> %{krb5prefix}/sbin/krb5kdc >>>> %{krb5prefix}/man/man8/krb5kdc.8* >>>> +%{krb5prefix}/sbin/fakeka >>>> %{krb5prefix}/sbin/sim_server >>>> %{krb5prefix}/sbin/v5passwdd >>>> # This is here for people who want to test their server, and also >>>> >>>> >>>> --- >>>> Enrico M. V. Fasanelli - I.N.F.N. Sezione di Lecce >>>> >>> >>> >> --- >> Enrico M. V. Fasanelli - I.N.F.N. Sezione di Lecce > > > -- > __________________________________________________ > Troy Dawson [log in to unmask] (630)840-6468 > Fermilab ComputingDivision/CSS CSI Group > __________________________________________________ > > --- Enrico M. V. Fasanelli - I.N.F.N. Sezione di Lecce