From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:35061) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fAcqx-0006Te-3V for guix-patches@gnu.org; Mon, 23 Apr 2018 10:54:04 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fAcqw-0007M9-40 for guix-patches@gnu.org; Mon, 23 Apr 2018 10:54:03 -0400 Received: from debbugs.gnu.org ([208.118.235.43]:57543) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1fAcqv-0007Lv-Vr for guix-patches@gnu.org; Mon, 23 Apr 2018 10:54:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1fAcqv-0007LZ-ME for guix-patches@gnu.org; Mon, 23 Apr 2018 10:54:01 -0400 Subject: [bug#31141] [PATCH] gnu: curl: Use mit-krb5 as GSSAPI implementation. Resent-Message-ID: Date: Mon, 23 Apr 2018 16:53:45 +0200 From: =?UTF-8?Q?Tom=C3=A1=C5=A1_?= =?UTF-8?Q?=C4=8Cech?= Message-ID: <20180423145345.xk4qeubkovrat37m@doom> References: <20180412224006.25134-1-sleep_walker@gnu.org> <20180421161017.25789-1-sleep_walker@gnu.org> <87o9ia2i81.fsf@gnu.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="6k5aypeff2wxsw73" Content-Disposition: inline In-Reply-To: <87o9ia2i81.fsf@gnu.org> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Ludovic =?UTF-8?Q?Court=C3=A8s?= Cc: 31141@debbugs.gnu.org --6k5aypeff2wxsw73 Content-Type: text/plain; charset=utf-8; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello, On Mon, Apr 23, 2018 at 02:57:34PM +0200, Ludovic Court=C3=A8s wrote: >Hello, > >Tom=C3=A1=C5=A1 =C4=8Cech skribis: > >> * gnu/packages/curl.scm (curl)[inputs]: Replace gss with mit-krb5. >> [arguments]: Help configure with locating mit-krb5. >> --- >> gnu/packages/curl.scm | 8 ++++++-- >> 1 file changed, 6 insertions(+), 2 deletions(-) >> >> diff --git a/gnu/packages/curl.scm b/gnu/packages/curl.scm >> index ae8b9600d..b5e1f52da 100644 >> --- a/gnu/packages/curl.scm >> +++ b/gnu/packages/curl.scm >> @@ -38,6 +38,7 @@ >> #:use-module (gnu packages groff) >> #:use-module (gnu packages gsasl) >> #:use-module (gnu packages guile) >> + #:use-module (gnu packages kerberos) >> #:use-module (gnu packages libidn) >> #:use-module (gnu packages openldap) >> #:use-module (gnu packages perl) >> @@ -62,9 +63,9 @@ >> (outputs '("out" >> "doc")) ;1.2 MiB of man3 pages >> (inputs `(("gnutls" ,gnutls) >> - ("gss" ,gss) >> ("libidn" ,libidn) >> ("libssh2" ,libssh2) >> + ("mit-krb5" ,mit-krb5) > >Could you explain the rationale? In general, if there=E2=80=99s a choice = and no >compelling reason to do otherwise, we try to favor the GNU >implementation (in this case, GNU GSS) by default. I am using curl against services with Kerberos authentication. Login against authority server and obtain ticket proving that I am who I am. I can use that ticket against services. I'm not able to do the same with GNU GSS implementation. I might be wrong but it didn't seem to allow me to do the same at least in the shape we have it. After this change it works for me as expected. Best regards, S_W --6k5aypeff2wxsw73 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEDOrssfr9jDQthC2PSiPjT6AzQ20FAlrd83kACgkQSiPjT6Az Q20cew/9FakNAzrkhjEJMj6pYmqvINrmVPDcmU8m8z+sBLe4pRfHYi6O07bSDfZM t4lqN5K6F56jFMywG5X4Z9Yl2rqPnPf1VnSSjTrUTPr32ZZ04+00eidQYXLDNlBX PbFgYU4UkNpyIHXJC/P1/sysnSvSl1IuoQrPu+uezhQhJ4w8xIwZ5pB08CI8fz+Z C9h/6qxOAS6hIgkQ1prtFLxxh81wtCr3F5lmHZeKA9/YV+Rq7zHBUM+M0bZ/EKYv be1wd4EAFrh34VW7GrEvaSR5zgXHRTW3Q0NA0Gn7j+Dm0OHi9FEWzydjU/UbKhrn r+DfYFhmhI7tdlWb2MY8tkdxJ8oggHthNTeZ9/4YdBXC9+c1xTYmwTm6S5RPzrRV q+NUL10RQ9JmEp2LBG0+6ZHfVcIdXVV/8jBPTcfIvvgWSEXbsjPdwZf5vU+P2t52 zf3LTeyyIVpbzT8RaDgw8pPqVRUvLgQOGHDiY6Jlrqs36RaYteXtJre9yg+OXJ70 VwNp6md1k0+C+AbzaNAF/fV4ZGNcBO9NQXy+3lJyRb68dBp9514WB5ClU8j+tTC3 YWc9gOJ1mnKigaxbApEL3++IZiFUaQ/14X1HYUiIUeKneQz1MMcgjI4Kon7nEPkn ZF3qnMc/uR9WkURgrFkW/Ap59QDmiROx9nCN5DKei9LN5/cm9iU= =d72Z -----END PGP SIGNATURE----- --6k5aypeff2wxsw73--