diff options
| author | Alexander Bokovoy <abokovoy@redhat.com> | 2017-01-24 11:02:30 +0200 |
|---|---|---|
| committer | Martin Basti <mbasti@redhat.com> | 2017-02-15 14:24:05 +0100 |
| commit | 593ea7da9a732647052cb56c08ad367e40be3912 (patch) | |
| tree | 538e07f130c78bbf29f37f02cf388a1b44f842d8 /freeipa.spec.in | |
| parent | 5bd82174233095a3cccfbbf8524622440c31b10c (diff) | |
| download | freeipa-593ea7da9a732647052cb56c08ad367e40be3912.tar.gz freeipa-593ea7da9a732647052cb56c08ad367e40be3912.tar.xz freeipa-593ea7da9a732647052cb56c08ad367e40be3912.zip | |
ipa-kdb: support KDB DAL version 6.1
DAL version 6.0 removed support for a callback to free principal.
This broke KDB drivers which had complex e_data structure within
the principal structure. As result, FreeIPA KDB driver was leaking
memory with DAL version 6.0 (krb5 1.15).
DAL version 6.1 added a special callback for freeing e_data structure.
See details at krb5/krb5#596
Restructure KDB driver code to provide this callback in case
we are built against DAL version that supports it. For DAL version
prior to 6.0 use this callback in the free_principal callback to
tidy the code.
Use explicit KDB version dependency in Fedora 26+ via BuildRequires.
With new DAL version, freeipa package will fail to build and
we'll have to add a support for new DAL version explicitly.
https://fedorahosted.org/freeipa/ticket/6619
Reviewed-By: Simo Sorce <ssorce@redhat.com>
Reviewed-By: Robbie Harwood <rharwood@redhat.com>
Diffstat (limited to 'freeipa.spec.in')
| -rw-r--r-- | freeipa.spec.in | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/freeipa.spec.in b/freeipa.spec.in index a65b9bcf1..be32bf88b 100644 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -57,8 +57,16 @@ Source0: freeipa-%{version}.tar.gz BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) BuildRequires: openldap-devel +# For KDB DAL version, make explicit dependency so that increase of version +# will cause the build to fail due to unsatisfied dependencies. +# DAL version change may cause code crash or memory leaks, it is better to fail early. +%if 0%{?fedora} > 25 +BuildRequires: krb5-devel >= 1.15-5 +BuildRequires: krb5-kdb-version = 6.1 +%else # 1.12: libkrad (http://krbdev.mit.edu/rt/Ticket/Display.html?id=7678) BuildRequires: krb5-devel >= 1.12 +%endif # 1.27.4: xmlrpc_curl_xportparms.gssapi_delegation BuildRequires: xmlrpc-c-devel >= 1.27.4 BuildRequires: popt-devel |