[Buildroot] Looking for Pointers and Info: Active Directory & Kerberos
Charles Hardin
ckhardin at exablox.com
Mon Nov 7 23:22:26 UTC 2016
We hacked this in as an external package in our layout a bit ago - just one of those I was going to push
up but never quite got around to it. We use this to link in kerberos.
Config.in
-----------
config BR2_PACKAGE_KRB5
bool "krb5"
depends on BR2_TOOLCHAIN_HAS_THREADS
help
KRB5 is the MIT Kerberos Version 5 implementation
Kerberos is a network authentication protocol. It is designed
to provide strong authentication for client/server applications
by using secret-key cryptography. A free implementation of this
protocol is available from the Massachusetts Institute of Technology.
http://web.mit.edu/Kerberos
comment "krb5 needs a toolchain w/ threads"
depends on !BR2_TOOLCHAIN_HAS_THREADS
krb5.hash
-----------
sha256 cedb07fad8331e3ff2983d26e977a2ddba622f379c2b19bfea85bd695930f9e9 krb5-1.14.tar.gz
krb5.mk
-----------
################################################################################
#
# krb5
#
################################################################################
KRB5_VERSION = 1.14
KRB5_SOURCE = krb5-$(KRB5_VERSION).tar.gz
KRB5_SITE = http://web.mit.edu/Kerberos/dist/krb5/$(KRB5_VERSION)
KRB5_LICENSE = MIT
KRB5_LICENSE_FILES = NOTICE
KRB5_INSTALL_STAGING = YES
KRB5_INSTALL_TARGET = YES
KRB5_DEPENDENCIES =
KRB5_SUBDIR = src
# Pass some configuration variables into the environment
KRB5_CONF_ENV += \
ac_cv_func_regcomp=yes \
ac_cv_printf_positional=yes \
krb5_cv_attr_constructor_destructor=yes,yes \
WARN_CFLAGS='-Wall' \
KRB5_CONF_OPTS += \
--enable-thread-support \
$(eval $(autotools-package))
> On Nov 7, 2016, at 3:15 PM, Daniel Price <daniel.price at gmail.com> wrote:
>
>
> Hi everyone,
>
> Our team is looking to integrate Active Directory client support into our buildroot-based appliance. To do so we think we need a working kerberos client.
>
> We are ultimately trying to get a working pam-krb5 module (https://www.eyrie.org/~eagle/software/pam-krb5/ <https://www.eyrie.org/~eagle/software/pam-krb5/>); it depends on either Heimdal or MIT Kerberos.
>
> So, we are struggling to work out the right stack to use, and trying to work out whether anyone else has paved the way already. Because of the existing host-heimdal recipe, we spent some time trying to get a cross-build of Heimdal to work. However we recently noticed that Debian seems to be on the cusp of removing its support for Heimdal (see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837728 <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837728>). And we had trouble getting the pam-krb5 module to see heimdal at all.
>
> Has anyone else worked through this? Has anyone else got MIT kerberos up and running? Pointers much appreciated.
>
> -dp
>
> --
> Daniel.Price at gmail.com <mailto:Daniel.Price at gmail.com>; Twitter: @danielbprice
> _______________________________________________
> buildroot mailing list
> buildroot at busybox.net
> http://lists.busybox.net/mailman/listinfo/buildroot
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.busybox.net/pipermail/buildroot/attachments/20161107/ba8f5a28/attachment.html>
More information about the buildroot
mailing list