Re: cross compile heimdal linking libbsd issue

On Sun, 5 Jul 2026 12:15:02 +0300
Michael Tokarev via samba <[email protected]> wrote:

> On 17.06.2026 17:30, Rowland Penny via samba wrote:
> > On Wed, 17 Jun 2026 15:53:46 +0200
> ..
> >> Do you know if it is possible to build samba without the need for
> >> KRB5 at all, and thereby disable all samba features that needs it?
> >>
> > 
> > Samba, for at least the last 15 years, is built using waf and if you
> > add '--without-ad-dc' to its 'configure' command, it will not build
> > the AD DC parts of Samba. It is those parts that require Heimdal and
> > kerberos (or KRB5 as you call it).
> 
> This answer is incorrect.
> 
> AD-DC parts of samba use the kdc functionality from kerberos.  kdc
> will not be used when building without ad-dc.  But the rest of samba,
> including the client libraries, uses client kerberos libraries.
> I for one don't see a way to build samba without kerberos.
> 
> Thanks,
> 
> /mjt
> 

I bow to your superior knowledge here, I haven't had to build Samba
for quite sometime, so I can only go off the Samba documentation. If
you run './configure --help' in the root of the latest tarball (4.24.4),
You get amid the output:

--without-ad-dc       disable AD DC functionality (enables only Samba FS (File
                      Server, Winbind, NMBD) and client utilities.

I just took this to mean no kerberos, but I am willing to accept I was
wrong. 

I did notice that a couple of other switches have appeared since
I last built Samba, '--without-winbind' & '--without-ads', they
possibly may turn off kerberos use, but the 'help' connected with them
just says the rather unhelpful 'SUPPRESSHELP'.

Rowland

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba