[Qtwebengine] Why is Kerberos support disabled by default on Linux

[Michal Klocek]

Hi

I do not think Kerberos supported was ever tested on linux, therefore it is disabled. Moreover  on Linux it needs external GSSAPI library for implementing HTTP Negotiate authentication, this will be loaded during run time, grep sources for GSSAPISharedLibrary::LoadSharedLibrary and see:

  "libgssapi_krb5.so.2",  // MIT Kerberos - FC, Suse10, Debian
  "libgssapi.so.4",       // Heimdal - Suse10, MDK
  "libgssapi.so.2",       // Heimdal - Gentoo
  "libgssapi.so.1"        // Heimdal - Suse9, CITI - FC, MDK, Suse10

Therefore it might require extra setup and testing.

Br

Michal

________________________________
From: QtWebEngine <qtwebengine-bounces at lists.qt-project.org> on behalf of mpartrid at gmail.com <mpartrid at gmail.com>
Sent: Monday, 25 October 2021 13:57
To: qtwebengine at lists.qt-project.org <qtwebengine at lists.qt-project.org>
Subject: [Qtwebengine] Why is Kerberos support disabled by default on Linux


Hi QtWebEngine list,



I’ve been using the pre-built binaries (5.15) for Windows and Linux and just hit a problem where the QtWebEngine browser doesn’t seem to support  Kerberos authentication on Linux – I may be misunderstanding how the build configuration, but that’s my current thinking on the problem.



>From what I understand of the config system, it looks to me that Kerberos support is auto-detected on Windows, but for Linux it’s not enabled.



I understand that I can make a custom build of Qt to enable Kerberos support, but was really wondering if someone knows why the decision was made not to enable it on Linux as a default? I figure that someone who knows (much!) more about this than I do decided this was the best choice, so before I make a custom build, what is the downside to enabling Kerberos on Linux?



Just trying to tap into the wisdom of the qtwebengine group to understand the pitfalls before I enable Kerberos in a custom build.



Kind Regards,

Michael


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.qt-project.org/pipermail/qtwebengine/attachments/20211026/5acb81de/attachment.html>