Status update: the new sssd introduces a new binary package called sssd-idp, which provides Kerberos plugins that are required to enable authentication against external identity providers. It also provides a helper program to handle the OAuth 2.0 Device Authorization Grant is provided.
This new binary package requires a few more Build-Dependends to be built:
Of those, only libjose-dev isn't available on i386, and that's what's causing the FTBFS right now. I pinged vorlon on IRC and asked him if it's possible to add the jose package to i386, given that jose's build dependencies are all available on i386, and the fact that this is not the first time this i386 conundrun has happened.
I'm waiting on his reply to proceed with this MP.
I also think it's important to mention that this new binary package, once accepted, will land in universe. I talked to Andreas in private and we think that it should be fine to keep sssd-idp in universe for this cycle while we gather more information about its role in the bigger sssd picture. We can certainly revisit this next cycle and consider doing an MRI for it.
Status update: the new sssd introduces a new binary package called sssd-idp, which provides Kerberos plugins that are required to enable authentication against external identity providers. It also provides a helper program to handle the OAuth 2.0 Device Authorization Grant is provided.
This new binary package requires a few more Build-Dependends to be built:
- libcurl4- openssl- dev
- libjose-dev
- libkrad-dev
Of those, only libjose-dev isn't available on i386, and that's what's causing the FTBFS right now. I pinged vorlon on IRC and asked him if it's possible to add the jose package to i386, given that jose's build dependencies are all available on i386, and the fact that this is not the first time this i386 conundrun has happened.
I'm waiting on his reply to proceed with this MP.
I also think it's important to mention that this new binary package, once accepted, will land in universe. I talked to Andreas in private and we think that it should be fine to keep sssd-idp in universe for this cycle while we gather more information about its role in the bigger sssd picture. We can certainly revisit this next cycle and consider doing an MRI for it.