[CentOS] Kerberos 1.6.3 on centos 4/5??

Stephen John Smoogen smooge at gmail.com
Fri Feb 27 23:52:15 UTC 2009


On Fri, Feb 27, 2009 at 12:27 PM, Thomas Johansson <thomasj at isy.liu.se> wrote:
> Stephen John Smoogen wrote:
>> On Fri, Feb 27, 2009 at 5:03 AM, Thomas Johansson <thomasj at isy.liu.se> wrote:
>>
>>> Hi
>>>
>>> My problem is related to clientless authentication for printing. We are
>>> evaluating if it's worth the trouble on centos. Uppgrading cups is not a
>>> problem That i have already solved. Further research also states that
>>> kerberos have to be version 1.6.3. This is a big problem. Neither centos
>>> 4 nor centos 5 have the required version of kerberos. Compiling my own
>>> compile kerberos is not something i want to do!
>>>
>>> Is it worth it or even possible to upgrade kerberos to 1.6.3 or will we
>>> most likely break something else with an upgrade?? No rpms are available
>>> and i suppose there's a reason for that. There's no problem compiling
>>> cups or kerberos on both platforms. I just wanna find out if it is worth
>>> the trouble we will get or if it's possible/recommended to do it?!?!.
>>>
>>
>> Upgrading kerberos on CentOS systems is not a trivial task. Kerberos
>> is a basic component for a lot of packages which requires a large
>> dependency chain.
> We noticed that. Several pages of dependencies  if one make a yum remove
> of krb5-workstation. I'm really dont want to try upgrading. Its more
> like i'm looking for arguments against such a crazy thing.
>
>> I would look at it as follows:
>>
>> 1) CentOS-4/5 do not have kerberos needed.
>> 2) Fedora-10/11 does have the kerberos needed.
>> 3) CentOS-6 might be based off of Fedora-11.
>>
>> Build your proof of concept project with Fedora-10 with a plan of
>> rebuilding the system after CentOS-6 comes out. Then you have both an
>> immediate win and a long term plan on how to reach a stable product.
>>
>> Hope that helps.
>>
> We have figured it out that far. On platforms like Solaris, ubuntu
> Fedora and others we have no problem printing. The problem is that we
> have a lot of software that require both centos 5 and centos 4. Cannot
> abandon centos for those clients. Also, the print project is a solution
> offered/pushed to us. Obviously we cannot use it on centos. They (the
> project leaders) have to choose another solution for centos. That will
> be the answer to the project leaders.

A last set would be to have a seperate set of kerberos Libraries and
statically compile the cups you want against those. Its an ugly hack
but works in those cases.


-- 
Stephen J Smoogen. -- BSD/GNU/Linux
How far that little candle throws his beams! So shines a good deed
in a naughty world. = Shakespeare. "The Merchant of Venice"



More information about the CentOS mailing list