On Tue, Nov 01, 2016 at 03:52:00PM -0400, Jiri B wrote:
> With the path and my original path I was able to build curl with
> gssapi and ssl:
>
> $ curl -V
> curl 7.50.3 (x86_64-unknown-openbsd6.0) libcurl/7.50.3 LibreSSL/2.0.0
> zlib/1.2.3 libidn/1.33 nghttp2/1.16.0
> Protocols: dict file ftp ftps gopher http https imap imaps pop3 pop3s rtsp
> smb smbs smtp smtps telnet tftp
> Features: IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM NTLM_WB SSL libz
> HTTP2 UnixSockets
>
> Although I still have some issues to tested in our krb env.
It works! I tried this:
$ /usr/local/heimdal/bin/klist
Credentials cache: FILE:/tmp/krb5cc_1000
Principal: us...@freeipa.example.com
Issued Expires Principal
Nov 2 09:34:33 2016 Nov 2 19:34:32 2016
krbtgt/freeipa.example....@freeipa.example.com
$ ktrace -id -s -i --negotiate -u : -k -o /dev/stdout
'https://freeipa.example.com/ipa/session/login_kerberos'
HTTP/1.1 401 Authorization Required
Date: Wed, 02 Nov 2016 08:55:05 GMT
Server: Apache/2.2.15 (Red Hat)
WWW-Authenticate: Negotiate
Last-Modified: Mon, 30 Sep 2013 07:42:36 GMT
ETag: "42861-55a-4e794fad0b300"
Accept-Ranges: bytes
Content-Length: 1370
Connection: close
Content-Type: text/html; charset=UTF-8
HTTP/1.1 200 Success
Date: Wed, 02 Nov 2016 08:55:05 GMT
Server: Apache/2.2.15 (Red Hat)
WWW-Authenticate: Negotiate
oYG3MIG0oAMKAQChCwYJKoZIhvcSAQICooGfBIGcYIGZBgkqhkiG9xIBAgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvqXPDfDMQnVv2+pETxGhlwlV1Mgt4egOd3Nuop3MhXl1BBj0uGU1UFR3U9gW7Qr05t+QTMVRAHa9WdngUCtq\
Df1mrpbAa3dV5IRhkeYPUZJ8urbb+uFZlxUYKrxeJtmk3w5Q2BW1zyxeeIeFAvGLU
Set-Cookie: ipa_session=92bde3376fcfa1df563d82e8869920c4;
Domain=freeipa.example.com; Path=/ipa; Expires=Wed, 02 Nov 2016 09:15:05 GMT;
Secure; HttpOnly
Content-Length: 0
Connection: close
Content-Type: text/plain; charset=UTF-8
$ kdump | egrep -B 1 'RET.*open [0-9]+' | grep NAMI | awk '$NF ~ /krb/ { print
$NF }' | sort | uniq
"/etc/heimdal/krb5.conf"
"/home/jirib/.krb5/config"
"/tmp/krb5cc_1000"
"/usr/local/heimdal/lib/libkrb5.so.21.1"
Voila, thx!
Will this go in?
j.
