Bug#1036095: freerdp2-x11: Compile with Kerberos support

[Laurent Grawet]

Package: freerdp2-x11
Version: 2.10.0+dfsg1-1~bpo11+1
Severity: wishlist

Dear Maintainer,

It would be nice to enable Kerberos support at compile time with
-DWITH_KERBEROS=ON
as Kerberos support in freerdp2-x11 is now comlete.
See Kerberos support state here :
https://github.com/FreeRDP/FreeRDP/issues/5746#issuecomment-1304438108

Thank you,
Best regards,

Laurent

*** Reporter, please consider answering these questions, where appropriate ***

* What led up to the situation?
* What exactly did you do (or not do) that was effective (or
ineffective)?
* What was the outcome of this action?
* What outcome did you expect instead?

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 11.7
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-21-amd64 (SMP w/4 CPU threads)
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8), LANGUAGE=fr_BE:fr
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages freerdp2-x11 depends on:
ii libc6 2.31-13+deb11u6
ii libfreerdp-client2-2 2.10.0+dfsg1-1~bpo11+1
ii libfreerdp2-2 2.10.0+dfsg1-1~bpo11+1
ii libwinpr2-2 2.10.0+dfsg1-1~bpo11+1
ii libx11-6 2:1.7.2-1
ii libxcursor1 1:1.2.0-2
ii libxext6 2:1.3.3-1.1
ii libxfixes3 1:5.0.3-2
ii libxi6 2:1.7.10-1
ii libxinerama1 2:1.1.4-2
ii libxrandr2 2:1.5.1-1
ii libxrender1 1:0.9.10-1

freerdp2-x11 recommends no packages.

freerdp2-x11 suggests no packages.

-- no debconf information

[Andras Korn]

Hi,

I've tried a kerberos-enabled build of freerdp2; it didn't actually work. I asked the freerdp people in #freerdp on irc.oftc.net and they said to use FreeRDP3:

14:49 -> hi, I'm trying to use kerberos authentication to connect to a Windows server using xfreerdp (compiled with gssapi support); I can see it request a kerberos ticket successfully, but then authentication fails with "[ERROR][com.winpr.sspi.Kerberos] - Init GSS security context failed : can't use Kerberos" and "[WARN][com.winpr.sspi] - InitializeSecurityContextA status SEC_E_INTERNAL_ERROR [0x80090304]" (also "NLA begin failed") -- what could be wrong?
14:50 < hardening2[m]> switch to FreeRDP3 (master)
14:51 < hardening2[m]> it's not working with freerdp2

Since FreeRDP3 appears to be in late beta I think it would already be appropriate to include it in sid.

Getting the current packaging to work with it doesn't look too difficult, only some hardwired 2s need to be changed to 3s, and there is this bit in debian/rules:

sed -E -i \
-e "s$(xSEDx)$${o}=[^=]+=\. $(xSEDx)$(xSEDx)g;" \
-e "s$(xSEDx) $${o}=[^=]+=\.$(xSEDx)$(xSEDx)g;" \
obj-$(DEB_HOST_GNU_TYPE)/*/*/buildflags.h obj-$(DEB_HOST_GNU_TYPE)/*/*/*/buildflags.h

(There are several buildflags.h files now.)

András

--
To err is human; to forgive, infrequent.