bucket_AC/krb5

   1 # Buildsheet autogenerated by ravenadm tool -- Do not edit.
   2
   3 NAMEBASE=               krb5
   4 VERSION=                1.20.1
   5 KEYWORDS=               security
   6 VARIANTS=               standard
   7 SDESC[standard]=        MIT Kerberos 5 authentication system
   8 HOMEPAGE=               http://web.mit.edu/kerberos/www/
   9 CONTACT=                nobody
  10
  11 DOWNLOAD_GROUPS=        main
  12 SITES[main]=            https://web.mit.edu/kerberos/dist/krb5/1.20/
  13 DISTFILE[1]=            krb5-1.20.1.tar.gz:main
  14 DF_INDEX=               1
  15 SPKGS[standard]=        complete
  16                         primary
  17                         nls
  18                         examples
  19                         docs
  20
  21 OPTIONS_AVAILABLE=      none
  22 OPTIONS_STANDARD=       none
  23
  24 USES=                   cpe gmake perl:build libtool:build pkgconfig
  25                         ssl:openssl11 gettext readline
  26
  27 DISTNAME=               krb5-1.20.1/src
  28
  29 LICENSE=                MIT:primary
  30 LICENSE_FILE=           MIT:{{WRKSRC}}/../NOTICE
  31 LICENSE_SCHEME=         solo
  32
  33 CPE_PRODUCT=            kerberos
  34 CPE_VENDOR=             mit
  35 CPE_VERSION=            5-1.20.1
  36 FPC_EQUIVALENT=         security/krb5
  37
  38 MUST_CONFIGURE=         gnu
  39 CONFIGURE_ARGS=         --enable-shared
  40                         --with-readline
  41                         --without-system-verto
  42                         --disable-rpath
  43                         --localstatedir="{{PREFIX}}/var"
  44                         --runstatedir="{{PREFIX}}/var/run"
  45 CONFIGURE_ENV=          INSTALL="{{INSTALL}}"
  46                         INSTALL_LIB="{{INSTALL_LIB}}"
  47                         YACC="{{YACC}}"
  48
  49 MAKE_ARGS=              INSTALL="{{INSTALL}}"
  50                         INSTALL_LIB="{{INSTALL_LIB}}"
  51
  52 RC_SUBR=                kpropd:primary
  53
  54 CPPFLAGS=               -I{{OPENSSLINC}}
  55 LDFLAGS=                -L{{OPENSSLLIB}}
  56 VAR_OPSYS[sunos]=       LDFLAGS=-lintl
  57
  58 post-patch:
  59         ${REINPLACE_CMD} -e "s|/usr/local|${PREFIX}|" \
  60                 ${WRKSRC}/clients/ksu/Makefile.in
  61
  62 post-install:
  63         ${MKDIR} ${STAGEDIR}${STD_DOCDIR}
  64         # install PDF documentation
  65         (cd ${WRKSRC}/../doc && \
  66                 ${COPYTREE_SHARE} pdf ${STAGEDIR}${STD_DOCDIR})
  67         # install HTML documentation
  68         (cd ${WRKSRC}/../doc && \
  69                 ${COPYTREE_SHARE} html ${STAGEDIR}${STD_DOCDIR} \
  70                 "! -path 'html/_sources*'")
  71         # remove cat directories
  72         ${FIND} ${STAGEDIR}${PREFIX}/share/man -type d -empty -delete
  73
  74 [FILE:1253:descriptions/desc.primary]
  75 Kerberos V5 is an authentication system developed at MIT.
  76
  77 Abridged from the User Guide:
  78        Under Kerberos, a client sends a request for a ticket to the
  79    Key Distribution Center (KDC). The KDC creates a ticket-granting
  80    ticket (TGT) for the client, encrypts it using the client's
  81    password as the key, and sends the encrypted TGT back to the
  82    client. The client then attempts to decrypt the TGT, using
  83    its password. If the client successfully decrypts the TGT, it
  84    keeps the decrypted TGT, which indicates proof of the client's
  85    identity. The TGT permits the client to obtain additional tickets,
  86    which give permission for specific services.
  87        Since Kerberos negotiates authenticated, and optionally encrypted,
  88    communications between two points anywhere on the internet, it
  89    provides a layer of security that is not dependent on which side of a
  90    firewall either client is on.
  91        The Kerberos V5 package is designed to be easy to use. Most of the
  92    commands are nearly identical to UNIX network programs you are already
  93    used to. Kerberos V5 is a single-sign-on system, which means that you
  94    have to type your password only once per session, and Kerberos does
  95    the authenticating and encrypting transparently.
  96
  97
  98 [FILE:97:distinfo]
  99 704aed49b19eb5a7178b34b2873620ec299db08752d6a8574f95d41879ab8851      8661660 krb5-1.20.1.tar.gz
 100
 101
 102 [FILE:2540:manifests/plist.primary]
 103 bin/
 104  compile_et
 105  gss-client
 106  k5srvutil
 107  kadmin
 108  kdestroy
 109  kinit
 110  klist
 111  kpasswd
 112  krb5-config
 113 @(root,wheel,04755) bin/ksu
 114  kswitch
 115  ktutil
 116  kvno
 117  sclient
 118  sim_client
 119  uuclient
 120 include/
 121  com_err.h
 122  gssapi.h
 123  kdb.h
 124  krad.h
 125  krb5.h
 126  profile.h
 127  verto-module.h
 128  verto.h
 129 include/gssapi/
 130  gssapi.h
 131  gssapi_alloc.h
 132  gssapi_ext.h
 133  gssapi_generic.h
 134  gssapi_krb5.h
 135  mechglue.h
 136 include/gssrpc/
 137  auth.h
 138  auth_gss.h
 139  auth_gssapi.h
 140  auth_unix.h
 141  clnt.h
 142  netdb.h
 143  pmap_clnt.h
 144  pmap_prot.h
 145  pmap_rmt.h
 146  rename.h
 147  rpc.h
 148  rpc_msg.h
 149  svc.h
 150  svc_auth.h
 151  types.h
 152  xdr.h
 153 include/kadm5/
 154  admin.h
 155  chpass_util_strings.h
 156  kadm_err.h
 157 include/krb5/
 158  ccselect_plugin.h
 159  certauth_plugin.h
 160  clpreauth_plugin.h
 161  hostrealm_plugin.h
 162  kadm5_auth_plugin.h
 163  kadm5_hook_plugin.h
 164  kdcpolicy_plugin.h
 165  kdcpreauth_plugin.h
 166  krb5.h
 167  localauth_plugin.h
 168  locate_plugin.h
 169  plugin.h
 170  preauth_plugin.h
 171  pwqual_plugin.h
 172 lib/
 173  libcom_err.so
 174  libcom_err.so.3
 175  libcom_err.so.3.0
 176  libgssapi_krb5.so
 177  libgssapi_krb5.so.2
 178  libgssapi_krb5.so.2.2
 179  libgssrpc.so
 180  libgssrpc.so.4
 181  libgssrpc.so.4.2
 182  libk5crypto.so
 183  libk5crypto.so.3
 184  libk5crypto.so.3.1
 185  libkadm5clnt.so
 186  libkadm5clnt_mit.so
 187  libkadm5clnt_mit.so.12
 188  libkadm5clnt_mit.so.12.0
 189  libkadm5srv.so
 190  libkadm5srv_mit.so
 191  libkadm5srv_mit.so.12
 192  libkadm5srv_mit.so.12.0
 193  libkdb5.so
 194  libkdb5.so.10
 195  libkdb5.so.10.0
 196  libkrad.so
 197  libkrad.so.0
 198  libkrad.so.0.0
 199  libkrb5.so
 200  libkrb5.so.3
 201  libkrb5.so.3.3
 202  libkrb5support.so
 203  libkrb5support.so.0
 204  libkrb5support.so.0.1
 205  libverto.so
 206  libverto.so.0
 207  libverto.so.0.0
 208 lib/krb5/plugins/kdb/db2.so
 209 lib/krb5/plugins/preauth/
 210  otp.so
 211  pkinit.so
 212  spake.so
 213  test.so
 214 lib/krb5/plugins/tls/k5tls.so
 215 lib/pkgconfig/
 216  gssrpc.pc
 217  kadm-client.pc
 218  kadm-server.pc
 219  kdb.pc
 220  krb5-gssapi.pc
 221  krb5.pc
 222  mit-krb5-gssapi.pc
 223  mit-krb5.pc
 224 sbin/
 225  gss-server
 226  kadmin.local
 227  kadmind
 228  kdb5_util
 229  kprop
 230  kpropd
 231  kproplog
 232  krb5-send-pr
 233  krb5kdc
 234  sim_server
 235  sserver
 236  uuserver
 237 share/et/
 238  et_c.awk
 239  et_h.awk
 240 share/man/man1/
 241  compile_et.1.gz
 242  k5srvutil.1.gz
 243  kadmin.1.gz
 244  kdestroy.1.gz
 245  kinit.1.gz
 246  klist.1.gz
 247  kpasswd.1.gz
 248  krb5-config.1.gz
 249  ksu.1.gz
 250  kswitch.1.gz
 251  ktutil.1.gz
 252  kvno.1.gz
 253  sclient.1.gz
 254 share/man/man3/com_err.3.gz
 255 share/man/man5/
 256  .k5identity.5.gz
 257  .k5login.5.gz
 258  k5identity.5.gz
 259  k5login.5.gz
 260  kadm5.acl.5.gz
 261  kdc.conf.5.gz
 262  krb5.conf.5.gz
 263 share/man/man7/kerberos.7.gz
 264 share/man/man8/
 265  kadmin.local.8.gz
 266  kadmind.8.gz
 267  kdb5_ldap_util.8.gz
 268  kdb5_util.8.gz
 269  kprop.8.gz
 270  kpropd.8.gz
 271  kproplog.8.gz
 272  krb5kdc.8.gz
 273  sserver.8.gz
 274 @dir lib/krb5/plugins/authdata
 275 @dir lib/krb5/plugins/libkrb5
 276 @dir var/krb5kdc
 277 @dir var/run/krb5kdc
 278
 279
 280 [FILE:83:manifests/plist.nls]
 281 share/locale/de/LC_MESSAGES/mit-krb5.mo
 282 share/locale/en_US/LC_MESSAGES/mit-krb5.mo
 283
 284
 285 [FILE:59:manifests/plist.examples]
 286 share/examples/krb5/
 287  kdc.conf
 288  krb5.conf
 289  services.append
 290
 291
 292 [FILE:271:patches/patch-clients_ksu_Makefile.in]
 293 --- clients/ksu/Makefile.in.orig        2022-11-11 23:43:17 UTC
 294 +++ clients/ksu/Makefile.in
 295 @@ -30,6 +30,6 @@ clean:
 296
 297  install:
 298         -for f in ksu; do \
 299 -         $(INSTALL_SETUID) $$f \
 300 +         $(INSTALL_PROGRAM) $$f \
 301                 $(DESTDIR)$(CLIENT_BINDIR)/`echo $$f|sed '$(transform)'`; \
 302         done
 303
 304
 305 [FILE:804:patches/patch-config__pre.in]
 306 --- config/pre.in.orig  2022-11-11 23:43:17 UTC
 307 +++ config/pre.in
 308 @@ -181,9 +181,9 @@ LIBS = @LIBS@
 309  INSTALL=@INSTALL@
 310  INSTALL_STRIP=
 311  INSTALL_PROGRAM=@INSTALL_PROGRAM@ $(INSTALL_STRIP)
 312 -INSTALL_SCRIPT=@INSTALL_PROGRAM@
 313 +INSTALL_SCRIPT=@INSTALL_SCRIPT@
 314  INSTALL_DATA=@INSTALL_DATA@
 315 -INSTALL_SHLIB=@INSTALL_SHLIB@
 316 +INSTALL_SHLIB=$(INSTALL_LIB)
 317  INSTALL_SETUID=$(INSTALL) $(INSTALL_STRIP) -m 4755 -o root
 318  ## This is needed because autoconf will sometimes define @exec_prefix@ to be
 319  ## ${prefix}.
 320 @@ -205,6 +205,7 @@ PKGCONFIG_DIR = @libdir@/pkgconfig
 321  ADMIN_MANDIR = $(KRB5MANROOT)/man8
 322  SERVER_MANDIR = $(KRB5MANROOT)/man8
 323  CLIENT_MANDIR = $(KRB5MANROOT)/man1
 324 +SUBR_MANDIR = $(KRB5MANROOT)/man3
 325  FILE_MANDIR = $(KRB5MANROOT)/man5
 326  ADMIN_CATDIR = $(KRB5MANROOT)/cat8
 327  SERVER_CATDIR = $(KRB5MANROOT)/cat8
 328
 329
 330 [FILE:1349:patches/patch-config_shlib.conf]
 331 --- config/shlib.conf.orig      2022-11-11 23:43:17 UTC
 332 +++ config/shlib.conf
 333 @@ -294,7 +294,7 @@ mips-*-netbsd*)
 334         PROFFLAGS=-pg
 335         ;;
 336
 337 -*-*-netbsd*)
 338 +*-*-xxnetbsd*)
 339         PICFLAGS=-fPIC
 340         SHLIBVEXT='.so.$(LIBMAJOR).$(LIBMINOR)'
 341         SHLIBEXT=.so
 342 @@ -312,7 +312,7 @@ mips-*-netbsd*)
 343         PROFFLAGS=-pg
 344         ;;
 345
 346 -*-*-freebsd*)
 347 +*-*-freebsd* | *-*-dragonfly* | *-*-netbsd*)
 348         case $krb5_cv_host in
 349                 sparc64-*)
 350                         PICFLAGS=-fPIC
 351 @@ -321,14 +321,15 @@ mips-*-netbsd*)
 352                         PICFLAGS=-fpic
 353                         ;;
 354         esac
 355 -       SHLIBVEXT='.so.$(LIBMAJOR)'
 356 -       RPATH_FLAG='-Wl,--enable-new-dtags -Wl,-rpath -Wl,'
 357 +       SHLIBVEXT='.so.$(LIBMAJOR).$(LIBMINOR)'
 358 +       SHLIBSEXT='.so.$(LIBMAJOR)'
 359 +       LDCOMBINE='libtool --tag=CC --mode=link cc -Xcompiler -shared -Wl,-soname=$(LIBPREFIX)$(LIBBASE)$(SHLIBVEXT)'
 360 +       RPATH_FLAG='-Wl,-rpath -Wl,'
 361         PROG_RPATH_FLAGS='$(RPATH_FLAG)$(PROG_RPATH)'
 362         CC_LINK_SHARED='$(CC) $(PROG_LIBPATH) $(PROG_RPATH_FLAGS) $(CFLAGS) $(LDFLAGS)'
 363         CXX_LINK_SHARED='$(CXX) $(PROG_LIBPATH) $(PROG_RPATH_FLAGS) $(CXXFLAGS) $(LDFLAGS)'
 364         SHLIBEXT=.so
 365 -       LDCOMBINE='ld -Bshareable'
 366 -       SHLIB_RPATH_FLAGS='--enable-new-dtags -rpath $(SHLIB_RDIRS)'
 367 +       SHLIB_RPATH_FLAGS='-rpath $(SHLIB_RDIRS)'
 368         SHLIB_EXPFLAGS='$(SHLIB_RPATH_FLAGS) $(SHLIB_DIRS) $(SHLIB_EXPLIBS)'
 369         CC_LINK_STATIC='$(CC) $(PROG_LIBPATH) $(CFLAGS) $(LDFLAGS)'
 370         CXX_LINK_STATIC='$(CXX) $(PROG_LIBPATH) $(CXXFLAGS) $(LDFLAGS)'
 371
 372
 373 [FILE:243:patches/patch-include_gssrpc_rpc.h]
 374 --- include/gssrpc/rpc.h.orig   2022-11-11 23:43:17 UTC
 375 +++ include/gssrpc/rpc.h
 376 @@ -39,6 +39,7 @@
 377  #ifndef GSSRPC_RPC_H
 378  #define GSSRPC_RPC_H
 379
 380 +#include <sys/socket.h>
 381  #include <gssrpc/types.h>              /* some typedefs */
 382  #include <netinet/in.h>
 383
 384
 385
 386 [FILE:396:patches/patch-kprop_kproplog.c]
 387 --- kprop/kproplog.c.orig       2022-11-11 23:43:17 UTC
 388 +++ kprop/kproplog.c
 389 @@ -415,7 +415,7 @@ map_ulog(const char *filename, int *fd_o
 390          close(fd);
 391          return NULL;
 392      }
 393 -    ulog = mmap(0, st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);
 394 +    ulog = (kdb_hlog_t *)mmap(0, st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);
 395      if (ulog == MAP_FAILED) {
 396          close(fd);
 397          return NULL;
 398
 399
 400 [FILE:2325:patches/patch-lib-krb5-os-localaddr.c]
 401 --- lib/krb5/os/localaddr.c.orig        2022-11-11 23:43:17 UTC
 402 +++ lib/krb5/os/localaddr.c
 403 @@ -176,6 +176,7 @@ printaddr(struct sockaddr *sa)
 404  }
 405  #endif
 406
 407 +#if 0
 408  static int
 409  is_loopback_address(struct sockaddr *sa)
 410  {
 411 @@ -192,6 +193,7 @@ is_loopback_address(struct sockaddr *sa)
 412          return 0;
 413      }
 414  }
 415 +#endif
 416
 417  #ifdef HAVE_IFADDRS_H
 418  #include <ifaddrs.h>
 419 @@ -449,12 +451,14 @@ foreach_localaddr (/*@null@*/ void *data
 420              ifp->ifa_flags &= ~IFF_UP;
 421              continue;
 422          }
 423 +#if 0
 424          if (is_loopback_address(ifp->ifa_addr)) {
 425              /* Pretend it's not up, so the second pass will skip
 426                 it.  */
 427              ifp->ifa_flags &= ~IFF_UP;
 428              continue;
 429          }
 430 +#endif
 431          /* If this address is a duplicate, punt.  */
 432          match = 0;
 433          for (ifp2 = ifp_head; ifp2 && ifp2 != ifp; ifp2 = ifp2->ifa_next) {
 434 @@ -583,11 +587,13 @@ foreach_localaddr (/*@null@*/ void *data
 435              }
 436              /*@=moduncon@*/
 437
 438 +#if 0
 439              /* None of the current callers want loopback addresses.  */
 440              if (is_loopback_address((struct sockaddr *)&lifr->lifr_addr)) {
 441                  Tprintf (("  loopback\n"));
 442                  goto skip;
 443              }
 444 +#endif
 445              /* Ignore interfaces that are down.  */
 446              if ((lifreq.lifr_flags & IFF_UP) == 0) {
 447                  Tprintf (("  down\n"));
 448 @@ -754,11 +760,13 @@ foreach_localaddr (/*@null@*/ void *data
 449              }
 450              /*@=moduncon@*/
 451
 452 +#if 0
 453              /* None of the current callers want loopback addresses.  */
 454              if (is_loopback_address(&lifr->iflr_addr)) {
 455                  Tprintf (("  loopback\n"));
 456                  goto skip;
 457              }
 458 +#endif
 459              /* Ignore interfaces that are down.  */
 460              if ((lifreq.iflr_flags & IFF_UP) == 0) {
 461                  Tprintf (("  down\n"));
 462 @@ -972,11 +980,13 @@ foreach_localaddr (/*@null@*/ void *data
 463          }
 464          /*@=moduncon@*/
 465
 466 +#if 0
 467          /* None of the current callers want loopback addresses.  */
 468          if (is_loopback_address(&ifreq.ifr_addr)) {
 469              Tprintf (("  loopback\n"));
 470              goto skip;
 471          }
 472 +#endif
 473          /* Ignore interfaces that are down.  */
 474          if ((ifreq.ifr_flags & IFF_UP) == 0) {
 475              Tprintf (("  down\n"));
 476
 477
 478 [FILE:525:patches/patch-lib_crypto_builtin_aes_brg__endian.h]
 479 --- lib/crypto/builtin/aes/brg_endian.h.orig    2022-11-11 23:43:17 UTC
 480 +++ lib/crypto/builtin/aes/brg_endian.h
 481 @@ -35,6 +35,8 @@ Issue Date: 10/09/2018
 482  #  include <sys/isa_defs.h>
 483  #elif defined( __FreeBSD__ ) || defined( __OpenBSD__ ) || defined( __NetBSD__ )
 484  #  include <sys/endian.h>
 485 +#elif defined( __DragonFly__)
 486 +#  include <sys/endian.h>
 487  #elif defined( BSD ) && ( BSD >= 199103 ) || defined( __APPLE__ ) || \
 488        defined( __CYGWIN32__ ) || defined( __DJGPP__ ) || defined( __osf__ )
 489  #  include <machine/endian.h>
 490
 491
 492 [FILE:857:patches/patch-lib_kdb_kdb__log.c]
 493 $NetBSD: patch-lib_kdb_kdb__log.c,v 1.2 2020/04/09 10:57:05 adam Exp $
 494
 495 Fix mmap/munmap -Werror=incompatible-pointer-types
 496
 497 --- lib/kdb/kdb_log.c.orig      2022-11-11 23:43:17 UTC
 498 +++ lib/kdb/kdb_log.c
 499 @@ -498,7 +498,7 @@ ulog_map(krb5_context context, const cha
 500          }
 501      }
 502
 503 -    ulog = mmap(0, MAXLOGLEN, PROT_READ | PROT_WRITE, MAP_SHARED,
 504 +    ulog = (kdb_hlog_t *)mmap(0, MAXLOGLEN, PROT_READ | PROT_WRITE, MAP_SHARED,
 505                  log_ctx->ulogfd, 0);
 506      if (ulog == MAP_FAILED) {
 507          retval = errno;
 508 @@ -680,7 +680,11 @@ ulog_fini(krb5_context context)
 509      if (log_ctx == NULL)
 510          return;
 511      if (log_ctx->ulog != NULL)
 512 +#ifdef __sun
 513 +        munmap((caddr_t)log_ctx->ulog, MAXLOGLEN);
 514 +#else
 515          munmap(log_ctx->ulog, MAXLOGLEN);
 516 +#endif
 517      if (log_ctx->ulogfd != -1)
 518          close(log_ctx->ulogfd);
 519      free(log_ctx);
 520
 521
 522 [FILE:692:patches/patch-util_et_Makefile.in]
 523 --- util/et/Makefile.in.orig    2022-11-11 23:43:17 UTC
 524 +++ util/et/Makefile.in
 525 @@ -111,12 +111,13 @@ check-windows: $(OUTPRE)test_et$(EXEEXT)
 526         path
 527         $(OUTPRE)test_et$(EXEEXT)
 528
 529 -install-unix: compile_et compile_et.1
 530 +install-unix: compile_et compile_et.1 com_err.3
 531         $(INSTALL) compile_et $(DESTDIR)$(bindir)/compile_et
 532         test -d $(DESTDIR)$(mydatadir) || mkdir $(DESTDIR)$(mydatadir)
 533         $(INSTALL_DATA) $(srcdir)/et_c.awk $(DESTDIR)$(mydatadir)
 534         $(INSTALL_DATA) $(srcdir)/et_h.awk $(DESTDIR)$(mydatadir)
 535         $(INSTALL_DATA) $(srcdir)/compile_et.1 $(DESTDIR)$(CLIENT_MANDIR)/compile_et.1
 536 +       $(INSTALL_DATA) $(srcdir)/com_err.3 $(DESTDIR)$(SUBR_MANDIR)/com_err.3
 537
 538
 539  install-headers: compile_et
 540
 541
 542 [FILE:496:files/kpropd.in]
 543 #!/bin/sh
 544 #
 545 # PROVIDE: kpropd
 546 # REQUIRE: LOGIN
 547 # KEYWORD: shutdown
 548 #
 549 # Add the following lines to /etc/rc.conf.local or /etc/rc.conf
 550 # to enable this service:
 551 #
 552 # kpropd_enable (bool):      Set to NO by default.
 553 #                            Set it to YES to enable kpropd.
 554 # kpropd_flags (str):        Set to "" by default.
 555
 556 . /etc/rc.subr
 557
 558 name=kpropd
 559 rcvar=kpropd_enable
 560
 561 load_rc_config $name
 562
 563 : ${kpropd_enable:="NO"}
 564 : ${kpropd_flags=""}
 565
 566 command=%%PREFIX%%/sbin/${name}
 567
 568 run_rc_command "$1"
 569