Development environment setup

[Idan Freiberg]

Hello krb devs,


I’m planning to work on Kerberos u2u support.
I would like to have you advice on what is the best env setup I should do
for development.

I want the code to be compatible with MS KDC as well.

Should I code against Samba KDC first?
The addition is mainly in the gssapi area I think.

I’ll be happy to hear your inputs and advices

— Idan

[Greg Hudson]

On 02/25/2018 10:53 AM, Idan Freiberg wrote:> I’m planning to work on
Kerberos u2u support.

Post by Idan Freiberg
I would like to have you advice on what is the best env setup I should do
for development.

Kerberos developers usually work on a Unix-like system such as a Linux
distribution, a *BSD, or macOS. The most recent versions of macOS
introduce some restrictions which we haven't worked around in our test
suite yet, so it wouldn't be my first recommendation.

We have some documentation about environment setup on the wiki:

http://k5wiki.kerberos.org/wiki/Building
http://k5wiki.kerberos.org/wiki/Test_suite
http://k5wiki.kerberos.org/wiki/Manual_Testing
_______________________________________________
krbdev mailing list ***@mit.

[Idan Freiberg]

Thanks for the info.
I’ll try to play around here @ irc
I think the gss-client/server apps can help too

Post by Greg Hudson
On 02/25/2018 10:53 AM, Idan Freiberg wrote:> I’m planning to work on
Kerberos u2u support.

Post by Idan Freiberg
I would like to have you advice on what is the best env setup I should do
for development.

Kerberos developers usually work on a Unix-like system such as a Linux
distribution, a *BSD, or macOS. The most recent versions of macOS
introduce some restrictions which we haven't worked around in our test
suite yet, so it wouldn't be my first recommendation.
http://k5wiki.kerberos.org/wiki/Building
http://k5wiki.kerberos.org/wiki/Test_suite
http://k5wiki.kerberos.org/wiki/Manual_Testing

[Robbie Harwood]

I’m planning to work on Kerberos u2u support. I would like to have
you advice on what is the best env setup I should do for development.
I want the code to be compatible with MS KDC as well.
Should I code against Samba KDC first? The addition is mainly in the
gssapi area I think.

Samba uses MIT (or Heimdal, depending on where you get it and how you
build it) these days, and I think the debuggability you'll get out of
those will be a lot higher than from Microsoft's.

What do you mean by "addition"? Microsoft's KDC isn't open source, so I
don't know how you could add things to it - this means protocol changes
are going to be difficult. Also, it doesn't support the GSSAPI (there
is some measure of compatibility between GSSAPI and SSPI on the wire,
but the API is not identitcal).

Thanks,
--Robbie

[Idan Freiberg]

Robbie, I have an experience with both of the apis.
U2U RFC is already implemented by MS Both in Kerberos client and KDC.
I want to make MIT Kerberos interoperable with it as well.

Post by Robbie Harwood

I’m planning to work on Kerberos u2u support. I would like to have
you advice on what is the best env setup I should do for development.
I want the code to be compatible with MS KDC as well.
Should I code against Samba KDC first? The addition is mainly in the
gssapi area I think.

Samba uses MIT (or Heimdal, depending on where you get it and how you
build it) these days, and I think the debuggability you'll get out of
those will be a lot higher than from Microsoft's.
What do you mean by "addition"? Microsoft's KDC isn't open source, so I
don't know how you could add things to it - this means protocol changes
are going to be difficult. Also, it doesn't support the GSSAPI (there
is some measure of compatibility between GSSAPI and SSPI on the wire,
but the API is not identitcal).
Thanks,
--Robbie

[Robbie Harwood]

Robbie, I have an experience with both of the apis. U2U RFC is
already implemented by MS Both in Kerberos client and KDC. I want to
make MIT Kerberos interoperable with it as well.

Well, if you want MIT to interoperate, that means you need to set up
MIT (unless I misunderstand)?

Thanks,
--Robbie

[Idan Freiberg]

Yes. I have a setup of MIT Kerberos client only for now and MS active
directory for KDC.

Post by Robbie Harwood

Robbie, I have an experience with both of the apis. U2U RFC is
already implemented by MS Both in Kerberos client and KDC. I want to
make MIT Kerberos interoperable with it as well.

Well, if you want MIT to interoperate, that means you need to set up
MIT (unless I misunderstand)?
Thanks,
--Robbie