Bug 218141

Summary: net/samba45: OPTIONS AD_DC needs to always conflict with OPTIONS GSSAPI_MIT
Product: Ports & Packages Reporter: Phillip R. Jaenke <prj>
Component: Individual Port(s)Assignee: Timur I. Bakeyev <timur>
Status: Closed Overcome By Events    
Severity: Affects Only Me CC: rene
Priority: --- Flags: bugzilla: maintainer-feedback? (timur)
Version: Latest   
Hardware: Any   
OS: Any   

Description Phillip R. Jaenke 2017-03-26 14:54:22 UTC 
This change needs made due to a known incompatibility in Samba. It just tripped me up because I wasn't looking too closely. I'm honestly not sure how best to implement this as a CONFLICTS?= unfortunately. Despite having been 'funded' ages ago, this is still a problem.

For reference as to the problem (Samba not supporting MIT Kerberos for AD/KDC):
net/samba45/work/samba-4.5.7/BUILD_SYSTEMS.txt
https://wiki.samba.org/index.php/MIT_Build
http://k5wiki.kerberos.org/wiki/Projects/Samba4_Port
https://access.redhat.com/discussions/1235263
Comment 1 Timur I. Bakeyev freebsd_committer freebsd_triage 2017-03-26 15:09:59 UTC 
Can you, please, describe how did you hit this problem? Samba4* ports are compiled with the bundled Heimdal Kerberos libraries, you need to take special measures and alter the port to compile against MIT Kerberos.
Comment 2 Phillip R. Jaenke 2017-03-26 20:12:15 UTC 
One would think that, right? Sadly, no such luck; based on the errors I got, it definitely got contaminated. As to how, it was via /etc/make.conf:

SAMBA4_PORT=net/samba45
DEFAULT_VERSIONS+=samba=4.5
DEFAULT_VERSIONS+=ssl=openssl
WANT_OPENLDAP_SASL=yes
OPTIONS_SET+=WANT_OPENLDAP_SASL
OPTIONS_SET+=GSSAPI GSSAPI_MIT GNUPG2

That was enough to somehow end up contaminated (possibly via another port) resulting in unexpected breakage. Rebuilding now with OPTIONS_SET+=GSSAPI_HEIMDAL to confirm that behaves better.
Comment 3 Rene Ladan freebsd_committer freebsd_triage 2018-06-14 18:10:29 UTC 
Is this still relevant for Samba 4.6 and higher?
Comment 4 Timur I. Bakeyev freebsd_committer freebsd_triage 2018-07-31 03:33:14 UTC 
Not sure can this be considered as a fix, but as of Samba 4.8 you can compile it with the GSSAPI_MIT.