Fedora 20 did obosolete libgssglue library and patched rdesktop to disable the NLA functionality, we need to reconsider changing the use of libgssglue.
Either we link agains kerberos directly or we migrate the code used for openssh on windows platform which dlopens kerberos if found runtime. That way we could hotplug the kerberos support in rdesktop.
*** Bug 5217 has been marked as a duplicate of this bug. ***
I can't find any gssglue packages in CentOS7, so I assume it's gone from RHEL7 as well.
> warning: unable to open /etc/gssapi_mech.conf: errno 2 (No such file or directory)
> WARNING: CredSSP: System doesn't have support for desired authentication mechanism.
libgssglue support has been removed upstream:
So we need to do something for the next vendor drop.
gssglue was removed upstream and brought to ThinLinc with vendordrop in r32760. We need to find a way to handle this in ThinLinc.
We decided after a discussion to add Kerberos runtime libraries as a requirement for ThinLinc. Pierre identified a few problems with linking library statically.
Tested connecting to Windows 2012 R2 and Windows 2016 using Kerberos CredSSP from different distributions, and the state of libgssapi_krb5.so.2 on those distributions:
RHEL 5: OK, libgssapi_krb5.so.2 is not possible to uninstall*
RHEL 6: OK, libgssapi_krb5.so.2 is not possible to uninstall
RHEL 7: OK. libgssapi_krb5.so.2 is not possible to uninstall
SLES 12: OK, libgssapi_krb5.so.2 is not possible to uninstall*
Ubuntu 16.04: OK, libgssapi_krb5.so.2 is not possible to uninstall*
*The system will let you, but you lose basic tools such as yum/zypper, or it's a requirement of openssh server