1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-dev] new samba-squid subpackage proporsal
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20new%20samba-squid%20subpackage%20proporsal&In-Reply-To=%3C201108101157.43690.bgmilne%40staff.telkomsa.net%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="007313.html">
<LINK REL="Next" HREF="007194.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-dev] new samba-squid subpackage proporsal</H1>
<B>Buchan Milne</B>
<A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20new%20samba-squid%20subpackage%20proporsal&In-Reply-To=%3C201108101157.43690.bgmilne%40staff.telkomsa.net%3E"
TITLE="[Mageia-dev] new samba-squid subpackage proporsal">bgmilne at staff.telkomsa.net
</A><BR>
<I>Wed Aug 10 11:57:40 CEST 2011</I>
<P><UL>
<LI>Previous message: <A HREF="007313.html">[Mageia-dev] Re : Re: new samba-squid subpackage proporsal
</A></li>
<LI>Next message: <A HREF="007194.html">[Mageia-dev] new samba-squid subpackage proporsal
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#7312">[ date ]</a>
<a href="thread.html#7312">[ thread ]</a>
<a href="subject.html#7312">[ subject ]</a>
<a href="author.html#7312">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>On Friday, 5 August 2011 19:05:43 Luis Daniel Lucio Quiroz wrote:
><i> That's what i was asking
</I>><i> to create a new subpckage samba-helper-squid to stor ntlm_auth since
</I>><i> ntlm_auth is not linked with other lib it can stand by itself in a
</I>><i> independend subpackage to make a suggest from squid.
</I>
??
For a working solution, you need:
-ntlm_auth (currently in samba-common)
-winbindd (currently in samba-winbind)
-net (to join the domain, currently in samba-common)
-/etc/samba/smb.conf (currently in samba-common)
Please compare the output of 'ldd /usr/bin/ntlm_auth /usr/sbin/winbindd
/usr/bin/net' and 'rpm -qR samba-common samba-winbind'. You will notice that
there are really no unnecessary dependencies:
Let me do it for you:
$ rpm -qR samba-common samba-winbind|awk -F '(' '/^lib/ {print $1}'|sort -u >
/tmp/samba-common-libs
$ ldd /usr/bin/net /usr/bin/ntlm_auth /usr/sbin/winbindd | awk '/lib/ {print
$1}'|sort -u > /tmp/ntlm_auth_libs
$ diff -u /tmp/samba-common-libs /tmp/ntlm_auth_libs
--- /tmp/samba-common-libs 2011-08-10 11:41:43.000000000 +0200
+++ /tmp/ntlm_auth_libs 2011-08-10 11:41:45.000000000 +0200
@@ -1,18 +1,24 @@
+/lib64/ld-linux-x86-64.so.2
libcap.so.2
libcom_err.so.2
+libcrypto.so.1.0.0
libc.so.6
libdl.so.2
libgssapi_krb5.so.2
libk5crypto.so.3
libkrb5.so.3
+libkrb5support.so.0
liblber-2.4.so.2
libldap-2.4.so.2
+libncurses.so.5
libnsl.so.1
-libpam.so.0
libpopt.so.0
+libpthread.so.0
libreadline.so.6
libresolv.so.2
librt.so.1
+libsasl2.so.2
+libssl.so.1.0.0
libtalloc.so.2
libtdb.so.1
libwbclient.so.0
(All we find is that we could theoretically have ntlm_auth and winbindd
without libpam, but, well, you can't easily have a system without it anyway
...)
Feel free to make squid suggest samba-winbind, but there is very little
benefit to splitting ntlm_auth out of samba-common. To use it for SSO against
AD, you will need /usr/bin/net to join the domain, and you will need an
smb.conf file. Both of these are in samba-common. Then you will probably need
samba-winbind for winbindd. About the only things we can do to have *any*
impact at all on the footprint of squid+ntlm_auth would be to:
1)move rpcclient, smbcacls, smbcquotas and smbtree out of samba-common (e.g.
RH has these in samba-client, but these tools are more useful on servers than
e.g. smbspool, so I would prefer it to be a package that doesn't require
pulling in all the contents of samba-client)
2)split winbindd/ntlm_auth/nss_winbind/pam_winbind (RH has winbindd and
nltm_auth in samba-winbind, and nss_winbind and pam_winbind in samba-winbind-
clients). But, nss_winbind and pam_winbind together are under 100kB, and
winbindd is 7.8MB, so again there is little benefit.
Nothing else makes any sense.
But, since ntlm_auth is commonly used in at least 3 different scenarios with 3
different packages *in the distribution*, making a *squid-specific* package is
just ridiculous.
I am open to useful, logical proposals, see above. However, there are some
issues (e.g. pam_winbind and nss_winbind aren't really that useful
individually, they are typically used together, hence RH shipping them
together in samba-winbind-clients), so please discuss the issues in advance,
after having at least having familiarised yourself with *all* the tools in
question.
Regards,
Buchan
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="007313.html">[Mageia-dev] Re : Re: new samba-squid subpackage proporsal
</A></li>
<LI>Next message: <A HREF="007194.html">[Mageia-dev] new samba-squid subpackage proporsal
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#7312">[ date ]</a>
<a href="thread.html#7312">[ thread ]</a>
<a href="subject.html#7312">[ subject ]</a>
<a href="author.html#7312">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>
|
