The krb5.conf configuration file is produced by src:kerberos-configs and
shared between heimdal kerberos and MIT kerberos. Of those, only MIT
kerberos has includedir support in a released version. heimdal has it in
their git tree[1], but not yet in a release.

Therefore, in order to fully fix this bug, we first need a heimdal
package with support for includedir, either by backporting that patch,
or waiting for a new upstream heimdal release with that change in it.

That commit is from 2017, so 7 years ago, and hasn't landed in a release
yet. The last heimdal upstream release is 7.8, from November 2022. While
the git repository is quite active, I can't tell when a new release with
this fix will be made.

I added a comment to the debian bug[2] about the availability of the
patch[1]. It applies, and since then I have built it in a ppa[3] and
quickly tested the feature. It seems to work. It would be best if debian
agreed on applying it, then we could all be on the same page.


1. 
https://github.com/heimdal/heimdal/commit/fe43be85587f834266623adb0ecf2793d212a7ca
2. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858970
3. https://launchpad.net/~ahasenack/+archive/ubuntu/heimdal-include-support

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2037321

Title:
  missing includedir snippet in krb5.conf causes GSSAPI to fail

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/heimdal/+bug/2037321/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to