samba.git/wscript_configure_system_mitkrb5, branch talloc-2.3.4

s4:mitkdc: Add support for MIT Kerberos 1.20

2022-03-04T14:05:31+00:00

This also addresses CVE-2020-17049.

MIT Kerberos 1.20 is in pre-release state at the time writing this commit. It
will be released in autumn 2022. We need to support MIT Kerberos 1.19 till
enough distributions have been released with MIT Kerberos 1.20.

Pair-Programmed-With: Robbie Harwood 
Signed-off-by: Andreas Schneider 
Signed-off-by: Robbie Harwood 
Reviewed-by: Stefan Metzmacher

selftest: More tests are passing with MIT KRB5 >= 1.20

2022-03-04T14:05:31+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher

waf:mitkrb5: Always define lib so we get the header include path

2021-12-06T22:08:32+00:00

If you have libkrb5 in a non-standard include path, we would not check the
latest version but search default paths (e.g. /usr/include) first.

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

waf:mitkrb5: Fix MIT KRB5 detection if not in default system location

2021-12-06T22:08:32+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

waf:mitkrb5: Detect com_err with pkgconfig first

2021-12-06T22:08:32+00:00

It is needed as a dependency later!

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

build: Move minimum MIT krb5 version to 1.19 to align with what is tested

2021-08-26T06:16:35+00:00

This avoid shipping untested code and aligns with the version
used in GitLab CI for all the MIT builds.

The "bronze bit" (CVE-2020-17049) security fixes will need
a new MIT KDB version in any case, this prepares the ground
by removing the older version support.

(knownfail_mit_kdc updates taken from a patch by
Andreas Schneider  that did this optionally)

Signed-off-by: Andrew Bartlett 
Reviewed-by: Andreas Schneider

heimdal_build: Provide C defines showing which Kerberos library is in use

2021-06-15T22:41:34+00:00

Squashed from patches by Stefan Metzmacher as part of his Heimdal update branch

Signed-off-by: Andrew Bartlett 
Signed-off-by: Stefan Metzmacher 
Reviewed-by: Stefan Metzmacher

Fix uxsuccess test with new MIT krb5 library 1.18

2020-03-10T13:02:27+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14155

Signed-off-by: Isaac Boukris 
Reviewed-by: Andreas Schneider 
Reviewed-by: Guenther Deschner

krb5-wrap: deal with different krb5_trace_info struct flavors (earlier MIT krb5 releases)

2020-01-24T20:38:53+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14252

Guenther

Signed-off-by: Guenther Deschner 
Reviewed-by: Andreas Schneider 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Fri Jan 24 20:38:53 UTC 2020 on sn-devel-184

wscript_configure_system_mitkrb5: reject a system heimdal krb5-config

2018-12-06T15:53:33+00:00

Review with: git show -w

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider 

Autobuild-User(master): Stefan Metzmacher 
Autobuild-Date(master): Thu Dec  6 16:53:33 CET 2018 on sn-devel-144