Hi Matthew, thank you very much for the explanation. So, there is something to fix in Gentoo ebuild that block use of Samba when samba use flag is disable. On Tue, 2019-10-29 at 09:38 +0000, Matthew Newton wrote:
On Tue, 2019-10-29 at 09:39 +0100, Geaaru wrote:
there is an old issue in Gentoo bugzilla created before that i'mbecame Freeradius Ebuild Maintainer with (I think) a wrongdependency. https://bugs.gentoo.org/662074
For some reason maybe in the past MSCHAP was related to Sambalibrary?
It still is. If you build FreeRADIUS in the presence of the Samba libraries(specifically libwbclient), then rlm_mschap will link against it andenable you to authenticate directly against winbind, and therefore AD. If libwbclient isn't available, it won't link against it. The configure output is clear about what it's doing. In both cases, internal MSCHAP auth will work. It just affectsexternally authenticating against AD.
I think that is an error but can anyone confirm this.
If you depend on Samba, people who want to use direct winbind auth willbe able to, and everyone gets an extra 15kb library. If you don't depend on Samba, useful functionality is lost for thosewho need it. I know which one I'd choose...