[bug#31141] [PATCH] gnu: curl: Use mit-krb5 as GSSAPI implementation.

[bug#31141] [PATCH] gnu: curl: Use mit-krb5 as GSSAPI implementation.

[Tomáš Čech]

* gnu/packages/curl.scm (curl)[inputs]: Replace gss with mit-krb5.
[arguments]: Help configure with locating mit-krb5.
---
 gnu/packages/curl.scm | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/curl.scm b/gnu/packages/curl.scm
index fbf177d9d..38f7195ca 100644
--- a/gnu/packages/curl.scm
+++ b/gnu/packages/curl.scm
@@ -36,6 +36,7 @@
   #:use-module (gnu packages golang)
   #:use-module (gnu packages groff)
   #:use-module (gnu packages gsasl)
+  #:use-module (gnu packages kerberos)
   #:use-module (gnu packages libidn)
   #:use-module (gnu packages openldap)
   #:use-module (gnu packages perl)
@@ -60,9 +61,9 @@
    (outputs '("out"
               "doc"))                             ;1.2 MiB of man3 pages
    (inputs `(("gnutls" ,gnutls)
-             ("gss" ,gss)
              ("libidn" ,libidn)
              ("libssh2" ,libssh2)
+             ("mit-krb5" ,mit-krb5)
              ("openldap" ,openldap)
              ("zlib" ,zlib)))
    (native-inputs
@@ -81,7 +82,10 @@
            (separator #f)                         ;single entry
            (files '("etc/ssl/certs/ca-certificates.crt")))))
    (arguments
-    `(#:configure-flags '("--with-gnutls" "--with-gssapi")
+    `(#:configure-flags (list
+                         "--with-gnutls"
+                         (string-append "--with-gssapi="
+                                        (assoc-ref %build-inputs "mit-krb5")))
       ;; Add a phase to patch '/bin/sh' occurances in tests/runtests.pl
       #:phases
       (modify-phases %standard-phases
-- 
2.16.3

[bug#31141] Acknowledgement ([PATCH] gnu: curl: Use mit-krb5 as GSSAPI implementation.)

[Tomáš Čech]

[-- Attachment #1: Type: text/plain, Size: 108 bytes --]

Hi,

did anyone have time to have a look on this change?

Is that problematic for you?


Best regards,

S_W

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

[bug#31141] [PATCH] gnu: curl: Use mit-krb5 as GSSAPI implementation.

[Tomáš Čech]

* gnu/packages/curl.scm (curl)[inputs]: Replace gss with mit-krb5.
[arguments]: Help configure with locating mit-krb5.
---
 gnu/packages/curl.scm | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/curl.scm b/gnu/packages/curl.scm
index ae8b9600d..b5e1f52da 100644
--- a/gnu/packages/curl.scm
+++ b/gnu/packages/curl.scm
@@ -38,6 +38,7 @@
   #:use-module (gnu packages groff)
   #:use-module (gnu packages gsasl)
   #:use-module (gnu packages guile)
+  #:use-module (gnu packages kerberos)
   #:use-module (gnu packages libidn)
   #:use-module (gnu packages openldap)
   #:use-module (gnu packages perl)
@@ -62,9 +63,9 @@
    (outputs '("out"
               "doc"))                             ;1.2 MiB of man3 pages
    (inputs `(("gnutls" ,gnutls)
-             ("gss" ,gss)
              ("libidn" ,libidn)
              ("libssh2" ,libssh2)
+             ("mit-krb5" ,mit-krb5)
              ("openldap" ,openldap)
              ("zlib" ,zlib)))
    (native-inputs
@@ -83,7 +84,10 @@
            (separator #f)                         ;single entry
            (files '("etc/ssl/certs/ca-certificates.crt")))))
    (arguments
-    `(#:configure-flags '("--with-gnutls" "--with-gssapi")
+    `(#:configure-flags (list
+                         "--with-gnutls"
+                         (string-append "--with-gssapi="
+                                        (assoc-ref %build-inputs "mit-krb5")))
       ;; Add a phase to patch '/bin/sh' occurances in tests/runtests.pl
       #:phases
       (modify-phases %standard-phases
-- 
2.17.0

[bug#31141] [PATCH] gnu: curl: Use mit-krb5 as GSSAPI implementation.

[Ludovic Courtès]

Hello,

Tomáš Čech <sleep_walker@gnu.org> skribis:

> * gnu/packages/curl.scm (curl)[inputs]: Replace gss with mit-krb5.
> [arguments]: Help configure with locating mit-krb5.
> ---
>  gnu/packages/curl.scm | 8 ++++++--
>  1 file changed, 6 insertions(+), 2 deletions(-)
>
> diff --git a/gnu/packages/curl.scm b/gnu/packages/curl.scm
> index ae8b9600d..b5e1f52da 100644
> --- a/gnu/packages/curl.scm
> +++ b/gnu/packages/curl.scm
> @@ -38,6 +38,7 @@
>    #:use-module (gnu packages groff)
>    #:use-module (gnu packages gsasl)
>    #:use-module (gnu packages guile)
> +  #:use-module (gnu packages kerberos)
>    #:use-module (gnu packages libidn)
>    #:use-module (gnu packages openldap)
>    #:use-module (gnu packages perl)
> @@ -62,9 +63,9 @@
>     (outputs '("out"
>                "doc"))                             ;1.2 MiB of man3 pages
>     (inputs `(("gnutls" ,gnutls)
> -             ("gss" ,gss)
>               ("libidn" ,libidn)
>               ("libssh2" ,libssh2)
> +             ("mit-krb5" ,mit-krb5)

Could you explain the rationale?  In general, if there’s a choice and no
compelling reason to do otherwise, we try to favor the GNU
implementation (in this case, GNU GSS) by default.

Thanks,
Ludo’.

[bug#31141] [PATCH] gnu: curl: Use mit-krb5 as GSSAPI implementation.

[Tomáš Čech]

[-- Attachment #1: Type: text/plain, Size: 1774 bytes --]

Hello,

On Mon, Apr 23, 2018 at 02:57:34PM +0200, Ludovic Courtès wrote:
>Hello,
>
>Tomáš Čech <sleep_walker@gnu.org> skribis:
>
>> * gnu/packages/curl.scm (curl)[inputs]: Replace gss with mit-krb5.
>> [arguments]: Help configure with locating mit-krb5.
>> ---
>>  gnu/packages/curl.scm | 8 ++++++--
>>  1 file changed, 6 insertions(+), 2 deletions(-)
>>
>> diff --git a/gnu/packages/curl.scm b/gnu/packages/curl.scm
>> index ae8b9600d..b5e1f52da 100644
>> --- a/gnu/packages/curl.scm
>> +++ b/gnu/packages/curl.scm
>> @@ -38,6 +38,7 @@
>>    #:use-module (gnu packages groff)
>>    #:use-module (gnu packages gsasl)
>>    #:use-module (gnu packages guile)
>> +  #:use-module (gnu packages kerberos)
>>    #:use-module (gnu packages libidn)
>>    #:use-module (gnu packages openldap)
>>    #:use-module (gnu packages perl)
>> @@ -62,9 +63,9 @@
>>     (outputs '("out"
>>                "doc"))                             ;1.2 MiB of man3 pages
>>     (inputs `(("gnutls" ,gnutls)
>> -             ("gss" ,gss)
>>               ("libidn" ,libidn)
>>               ("libssh2" ,libssh2)
>> +             ("mit-krb5" ,mit-krb5)
>
>Could you explain the rationale?  In general, if there’s a choice and no
>compelling reason to do otherwise, we try to favor the GNU
>implementation (in this case, GNU GSS) by default.

I am using curl against services with Kerberos authentication. Login
against authority server and obtain ticket proving that I am who I
am. I can use that ticket against services.

I'm not able to do the same with GNU GSS implementation. I might be
wrong but it didn't seem to allow me to do the same at least in the
shape we have it.

After this change it works for me as expected.

Best regards,

S_W

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

[bug#31141] [PATCH] gnu: curl: Use mit-krb5 as GSSAPI implementation.

[Ludovic Courtès]

Hello,

Tomáš Čech <sleep_walker@gnu.org> skribis:

> I am using curl against services with Kerberos authentication. Login
> against authority server and obtain ticket proving that I am who I
> am. I can use that ticket against services.
>
> I'm not able to do the same with GNU GSS implementation. I might be
> wrong but it didn't seem to allow me to do the same at least in the
> shape we have it.

I just realized that the equivalent of mit-krb5 would be GNU Shishi, not
GNU GSS.  Does that one work for you?  (Perhaps GSS is still needed in
addition to Shishi though, dunno.)

If not, I have nothing against switching to mit-krb5 if that doesn’t
work either, with a comment explaining it.

Thanks,
Ludo’.

bug#31141: [PATCH] gnu: curl: Use mit-krb5 as GSSAPI

[Efraim Flashner]

[-- Attachment #1: Type: text/plain, Size: 313 bytes --]

This seems to have been applied with commit
828d3765a71ce1b74d1ab122c84d5c16eabf98b9 in May 2019.

-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]