Arch Linux

JGC

Developer

Registered: 2003-12-03

Posts: 1,664

(Heimdal) KerberosV for archlinux

I'd like archlinux to support kerberos using the Heimdal kerberos implementation.
Why should archlinux support kerberos?
- single, ticket based, login system
- Samba can operate as AD member
- Evolution can talk to Exchange servers using ximian-connector, which requires kerberos

Packages and PKGBUILDs are available at ftp://schoolbak.dyndns.org/gnome25/

Currently, I have made this package:

pkgname=heimdal
pkgver=0.6.2
pkgrel=1j2
pkgdesc="Heimdal Kerberos V5"
url="http://www.pdc.kth.se/heimdal/"
depends=('db' 'openssl' 'e2fsprogs')
source=(ftp://ftp.pdc.kth.se/pub/heimdal/src/heimdal-$pkgver.tar.gz)

build() {
  cd $startdir/src/heimdal-$pkgver
  ./configure --prefix=/usr --enable-shared=yes --without-x
  make || return 1
  make prefix=$startdir/pkg/usr install
  rm $startdir/pkg/usr/include/fnmatch.h
  rm $startdir/pkg/usr/include/glob.h
  rm $startdir/pkg/usr/include/ss/ss.h
  rm $startdir/pkg/usr/lib/libss.*
  for i in ftp pagsh rcp rsh su telnet mk_cmds; do
    mv $startdir/pkg/usr/bin/$i $startdir/pkg/usr/bin/k$i
    mv $startdir/pkg/usr/man/man1/$i.1 $startdir/pkg/usr/man/man1/k$i.1
  done
  mv $startdir/pkg/usr/bin/login $startdir/usr/libexec
  rm $startdir/pkg/usr/man/man8/telnetd.8
  rm $startdir/pkg/usr/man/man1/login.1
  rm $startdir/pkg/usr/man/man5/ftpusers.5
  rm $startdir/pkg/usr/man/man5/login.access.5
  rm -rf $startdir/pkg/usr/man/cat*
}

The rm and mv actions is because kerberos comes with some kerberized services that replace the usual programs. Since archlinux doesn't have an "alternatives"-system like debian has (easy to implement though, but requires the existance of pre_install, which is harder to implement), I rename the binaries and remove the conflicting manpages.