On Tue, Nov 01, 2016 at 03:52:00PM -0400, Jiri B wrote: > With the path and my original path I was able to build curl with > gssapi and ssl: > > $ curl -V > curl 7.50.3 (x86_64-unknown-openbsd6.0) libcurl/7.50.3 LibreSSL/2.0.0 > zlib/1.2.3 libidn/1.33 nghttp2/1.16.0 > Protocols: dict file ftp ftps gopher http https imap imaps pop3 pop3s rtsp > smb smbs smtp smtps telnet tftp > Features: IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM NTLM_WB SSL libz > HTTP2 UnixSockets > > Although I still have some issues to tested in our krb env.
It works! I tried this: $ /usr/local/heimdal/bin/klist Credentials cache: FILE:/tmp/krb5cc_1000 Principal: us...@freeipa.example.com Issued Expires Principal Nov 2 09:34:33 2016 Nov 2 19:34:32 2016 krbtgt/freeipa.example....@freeipa.example.com $ ktrace -id -s -i --negotiate -u : -k -o /dev/stdout 'https://freeipa.example.com/ipa/session/login_kerberos' HTTP/1.1 401 Authorization Required Date: Wed, 02 Nov 2016 08:55:05 GMT Server: Apache/2.2.15 (Red Hat) WWW-Authenticate: Negotiate Last-Modified: Mon, 30 Sep 2013 07:42:36 GMT ETag: "42861-55a-4e794fad0b300" Accept-Ranges: bytes Content-Length: 1370 Connection: close Content-Type: text/html; charset=UTF-8 HTTP/1.1 200 Success Date: Wed, 02 Nov 2016 08:55:05 GMT Server: Apache/2.2.15 (Red Hat) WWW-Authenticate: Negotiate oYG3MIG0oAMKAQChCwYJKoZIhvcSAQICooGfBIGcYIGZBgkqhkiG9xIBAgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvqXPDfDMQnVv2+pETxGhlwlV1Mgt4egOd3Nuop3MhXl1BBj0uGU1UFR3U9gW7Qr05t+QTMVRAHa9WdngUCtq\ Df1mrpbAa3dV5IRhkeYPUZJ8urbb+uFZlxUYKrxeJtmk3w5Q2BW1zyxeeIeFAvGLU Set-Cookie: ipa_session=92bde3376fcfa1df563d82e8869920c4; Domain=freeipa.example.com; Path=/ipa; Expires=Wed, 02 Nov 2016 09:15:05 GMT; Secure; HttpOnly Content-Length: 0 Connection: close Content-Type: text/plain; charset=UTF-8 $ kdump | egrep -B 1 'RET.*open [0-9]+' | grep NAMI | awk '$NF ~ /krb/ { print $NF }' | sort | uniq "/etc/heimdal/krb5.conf" "/home/jirib/.krb5/config" "/tmp/krb5cc_1000" "/usr/local/heimdal/lib/libkrb5.so.21.1" Voila, thx! Will this go in? j.