On ke, 06 marras 2019, Nico Kadel-Garcia wrote:
On Wed, Nov 6, 2019 at 1:00 PM Dario Lesca <d.lesca@xxxxxxxxxx> wrote:
Il giorno mer, 06/11/2019 alle 09.03 -0500, Nico Kadel-Garcia ha
scritto:
> > Can the Fedora samba maintainers do that?
> >
> > Thank
> >
>
> They are very welcome to my work.
>
Then why do not use your samba.spec for build official samba package at
least on Fedora?
Because the last 3 times I tried to start submitting packages directly
to Fedora I found the process very burdensome and frustrating, and got
no meaningful help when I asked. Also, it seemed clear that actually
building Samba with Heimdal Kerberos was unwelcome to Fedora or Red
Hat. And the last time I spoke with any of the authors of Kerberos
about the mess, it took them a while to stop laughing about the mess.
And yes, I know a bunch of the original authors socially, though not
professionally.
Nico, I appreciate your passion about the software in question. However,
the problems you are keeping to ignore are very real and cause real
problems on a distribution scale. I cannot say anything about your
communication with Heimdal authors, but suspect there is clear
misunderstanding of the problem domain. Loading two different
implementations of the same API in the same address space is not going
to provide a reliable and stable execution environment. I don't believe
Heimdal authors don't know this.
It already contain the MIT or Heimdal Kerberos flag:
%global with_system_mit_krb5 0
Is sufficient set it to '1' for default packaging and who wants to use
heimdal can rebuild it setting this flag to '0' via line command
This is another way to resolve this issue
Thanks
Well, yes. That's why I publish the suite. I was under the strong
impression that it wouldn't be welcome due to the announced desire
"not to support another Kerberos" in Fedora or for Red Hat as a
company. But since it works, works well, and Samba supports it, I'll
continue to publish the updates for a while. I admit that my packaging
relies extensively on Rawhide for updates, and I do resync
occasionally for maximum compatibility.
Fedora project infrastructure provides you enough possibilities to build
your packages. Please use COPR to provide rebuilt packages the way you
want. This is the most simple way to serve your users within Fedora
infrastructure -- it doesn't require complaining that a distribution
policy is contrary to your expectations.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
