[Qtwebengine] Why is Kerberos support disabled by default on Linux

[Michael Partridge]

Thanks for the information Michal, I appreciate the insight.

I’m still following up with my user to see if Kerberos support on Linux is
a must have for them or not, so don’t know if I will need to do a custom
build. If I do need to do one, are you (or Qt) interested in any
feedback/experiences?

Kind Regards,
Michael

On Tue, 26 Oct 2021 at 9:52 pm, Michal Klocek <michal.klocek at qt.io> wrote:

> Hi
>
> I do not think Kerberos supported was ever tested on linux, therefore it
> is disabled. Moreover  on Linux it needs external GSSAPI library for
> implementing HTTP Negotiate authentication, this will be loaded during run
> time, grep sources for GSSAPISharedLibrary::LoadSharedLibrary and see:
>
>   "libgssapi_krb5.so.2",  // MIT Kerberos - FC, Suse10, Debian
>   "libgssapi.so.4",       // Heimdal - Suse10, MDK
>   "libgssapi.so.2",       // Heimdal - Gentoo
>   "libgssapi.so.1"        // Heimdal - Suse9, CITI - FC, MDK, Suse10
>
> Therefore it might require extra setup and testing.
>
> Br
>
> Michal
>
> ------------------------------
> *From:* QtWebEngine <qtwebengine-bounces at lists.qt-project.org> on behalf
> of mpartrid at gmail.com <mpartrid at gmail.com>
> *Sent:* Monday, 25 October 2021 13:57
> *To:* qtwebengine at lists.qt-project.org <qtwebengine at lists.qt-project.org>
> *Subject:* [Qtwebengine] Why is Kerberos support disabled by default on
> Linux
>
>
> Hi QtWebEngine list,
>
>
>
> I’ve been using the pre-built binaries (5.15) for Windows and Linux and
> just hit a problem where the QtWebEngine browser doesn’t seem to support
> Kerberos authentication on Linux – I may be misunderstanding how the build
> configuration, but that’s my current thinking on the problem.
>
>
>
> From what I understand of the config system, it looks to me that Kerberos
> support is auto-detected on Windows, but for Linux it’s not enabled.
>
>
>
> I understand that I can make a custom build of Qt to enable Kerberos
> support, but was really wondering if someone knows why the decision was
> made not to enable it on Linux as a default? I figure that someone who
> knows (much!) more about this than I do decided this was the best choice,
> so before I make a custom build, what is the downside to enabling Kerberos
> on Linux?
>
>
>
> Just trying to tap into the wisdom of the qtwebengine group to understand
> the pitfalls before I enable Kerberos in a custom build.
>
>
>
> Kind Regards,
>
> Michael
>
>
> _______________________________________________
> QtWebEngine mailing list
> QtWebEngine at lists.qt-project.org
> https://lists.qt-project.org/listinfo/qtwebengine
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.qt-project.org/pipermail/qtwebengine/attachments/20211102/7829588c/attachment.html>