Get rid of the curse of kerberos?[SOLVED]

platojones · Last edited by platojones on Sat Nov 01, 2008 11:28 pm; edited 1 time in total

Is it possible to just get rid of this nasty package? After the recent com-err/ss/e2fsprogs-libs mess, it looks like this thing is more of a liability than an asset. I'm not even sure what packages really need it. Plus, I'm now reading that it has been abandonded by the original developers, and a lone, brave Gentoo dev has taken it upon himself to keep it alive for the time being...thanks to that guy, we still have working systems. However, is there any reason this package is required...I think samba is the only reason it is on my system at all, but I get depencies from several other packages, even after I put -kerberos in my USE flags. Anybody know how to ditch this kerberos junk?

danomac · Posted: Sat Nov 01, 2008 3:10 am Post subject:

I'd use equery to see what depends on it, then recompile the dependencies without support. After that it should be able to be removed.

cyrillic · Posted: Sat Nov 01, 2008 4:10 am Post subject:

First, set USE="-kerberos" in your make.conf

Next, unmerge app-crypt/mit-krb5

Finally, run revdep-rebuild to repair all the broken packages.

Genone · Posted: Sat Nov 01, 2008 4:42 am Post subject:

desultory · Bodhisattva Joined: 04 Nov 2005 Posts: 9410

szczerb · Posted: Sat Nov 01, 2008 11:26 am Post subject:

Damn, why don't you just upgrade kerberos? 1.6.3-r4 is stable for a few days now and it depends on either the old com_err + the_other_one or just on e2fsprogs-libs!

platojones · Posted: Sat Nov 01, 2008 12:19 pm Post subject:

platojones · Posted: Sat Nov 01, 2008 12:21 pm Post subject:

szczerb · Posted: Sat Nov 01, 2008 4:34 pm Post subject:

OK then - sorry

I just got irritated that people started already like a dozen threads and keep asking for the same over and over again even though half of those threads are still on the first page - so they don't even have to search.

cyrillic · Posted: Sat Nov 01, 2008 5:59 pm Post subject:

platojones · Posted: Sat Nov 01, 2008 7:26 pm Post subject:

Genone · Posted: Sat Nov 01, 2008 7:30 pm Post subject:

If you take a closer look you'll see that some of them are triggered by other use flags (krb4, sasl, ads).

platojones · Posted: Sat Nov 01, 2008 7:45 pm Post subject:

Yes, agreed. In my case, it seems to be the ssl use flag that is bringing in kerberos. So the question would be, why does ssl depend on kerberos?

Nerevar · l33t Joined: 31 May 2008 Posts: 720

I believe the question mark tells you they're optional. Hard dependencies won't have the question mark. Try doing just an emerge -av1 openssl and see if the kerberos flag is set. If it is, check your /etc/portage/package.use file. It looks like you'll also need to make sure the sasl/krb4 and ads USE flags aren't set.

platojones · Posted: Sat Nov 01, 2008 9:05 pm Post subject:

Nerevar · l33t Joined: 31 May 2008 Posts: 720

I imagine you're getting hit by the same thing I was. If the configure finds kerberos on your system, it will use it no matter how the USE flags are set. You'll need to make sure you have all your packages fetched and then remove kerberos and then update with --newuse.

Edit: I just read this again and see that you tried that. So, which package is pulling in kerberos? It looks like the output of openssl above isn't.

platojones · Posted: Sat Nov 01, 2008 9:21 pm Post subject:

I believe the RDEPEND in the openssl ebuild is doing it. From what I read in the dev handbook, RDEPEND requires that package to be present. So openssl appears to demand that kerberos be there.

Nerevar · l33t Joined: 31 May 2008 Posts: 720

See this page:
http://devmanual.gentoo.org/general-concepts/dependencies/index.html

According to that it's a conditional (on the kerberos USE flag) runtime dependency. When you listed the emerge -av1 output above, I didn't see it getting pulled into the build. Did you snip that part?

platojones · Posted: Sat Nov 01, 2008 10:47 pm Post subject:

Thanks for clearing that up. I see now how I was misinterpreting it. What's actually pulling kerberos back in is the perl GSSAPI module. That sets off a number of other depencies, but maybe I can unwind it. I'll give it a shot.

hitachi · Posted: Wed Nov 05, 2008 8:03 am Post subject:

Hi,

I just did an --sync -DuavN world (rebuild a lot of packages) and then --depclean did remove mit-krb5. Looks like there has been some cleaning somewhere.
revdep-rebuild than rebuild: