blob: 8edfb52d609c29b5d0c45f03a7a8af18d4982004 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
|
First off, run:
$ autoreconf -f -i
Then the usual $ ./configure # and $ make #
In order to build gss-proxy the following development packages are needed
additionally to a ISO C compiler:
autoconf
automake
docbook-style-xsl
doxygen
findutils
gettext-devel
libini_config-devel
keyutils-libs-devel
krb5-devel
libselinux-devel
libtool
libverto-devel
libxml2
libxslt
m4
make
pkgconfig
popt-devel
For testing via $ make tests # you additionally need these three
packages:
krb5-server
nss_wrapper
socket_wrapper
NOTE:
The minimum supported Kerberos version is MIT Kerberos 1.11.2 as it includes
[1] and [2]
The keytab initiation feature where Gss-Proxy acquires crdentials on behalf
of clients using a ketab will only be available in MIT in 1.12
This patch [3] can be used to backport the feature in 1.11.2, this new feature
simply allows combining two [4][5] features introduced in MIT 1.11
[1] http://k5wiki.kerberos.org/wiki/Projects/Interposer_Mechanism
[2] https://github.com/krb5/krb5/commit/36c76aa3c625afc9291b9e1df071db51ccf37dab
[3] https://github.com/krb5/krb5/commit/38cc076579888695a5820ceb44fe43020f5b61e1
[4] http://k5wiki.kerberos.org/wiki/Projects/Credential_Store_extensions
[5] http://k5wiki.kerberos.org/wiki/Projects/Keytab_initiation
|
