[38824] in Kerberos
Re: how to install pam_krb5_migrate in RHEL/Fedora,
daemon@ATHENA.MIT.EDU (Robert Kudyba)
Fri Oct 23 11:59:37 2020
MIME-Version: 1.0
In-Reply-To: <jlg7drhknhc.fsf@redhat.com>
From: Robert Kudyba <rkudyba@fordham.edu>
Date: Fri, 23 Oct 2020 11:56:25 -0400
Message-ID: <CAFHi+KTb_G5dWf4rg-a=6rx-S-VmTrqAt6sLP-je05KG2LZoVg@mail.gmail.com>
To: Robbie Harwood <rharwood@redhat.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Fri, Oct 23, 2020 at 10:48 AM Robbie Harwood <rharwood@redhat.com> wrote:
> Robert Kudyba <rkudyba@fordham.edu> writes:
>
> > /usr/lib64/security/pam_krb5_migrate.so.1. Got the following errors:
> > /usr/lib64/security/pam_krb5_migrate.so.1): libkadm5clnt_mit.so.11:
> > cannot open shared object file: No such file or directory
>
> In Fedora, libkad5clnt_mit.so is provided by libkadm5. However, there
> has been a soname bump (to 12).
OK I see:
/usr/lib64/libkadm5clnt.so
/usr/lib64/libkadm5clnt_mit.so
/usr/lib64/libkadm5clnt_mit.so.12
/usr/lib64/libkadm5clnt_mit.so.12.0
> Please be aware that neither I (Fedora maintainer) do not support
> external programs using the libkadm5 interfaces, and upstream krb5 does
> not provide stability guarantees for it.
Sure, I understand. Just testing it at the moment.
So can I use libkadm5clnt_mit.so.12.0 and reference that in the PAM
auth stack, wherever I had pam_krb5_migrate? Oracle has a migration
guide at https://docs.oracle.com/cd/E23824_01/html/821-1456/setup-148.html#faavx
that I'm trying to follow.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
