Ravenports generated: 13 Jul 2023 21:03
[ravenports.git] / bucket_AC / krb5
1 # Buildsheet autogenerated by ravenadm tool -- Do not edit.
2
3 NAMEBASE=               krb5
4 VERSION=                1.21.1
5 KEYWORDS=               security
6 VARIANTS=               standard
7 SDESC[standard]=        MIT Kerberos 5 authentication system
8 HOMEPAGE=               http://web.mit.edu/kerberos/www/
9 CONTACT=                nobody
10
11 DOWNLOAD_GROUPS=        main
12 SITES[main]=            https://web.mit.edu/kerberos/dist/krb5/1.21/
13 DISTFILE[1]=            krb5-1.21.1.tar.gz:main
14 DF_INDEX=               1
15 SPKGS[standard]=        complete
16                         primary
17                         dev
18                         tools
19                         nls
20                         examples
21                         man
22                         docs
23
24 OPTIONS_AVAILABLE=      none
25 OPTIONS_STANDARD=       none
26
27 USES=                   cpe gmake perl:build libtool:build pkgconfig
28                         ssl:openssl11 gettext readline
29
30 DISTNAME=               krb5-1.21.1/src
31
32 LICENSE=                MIT:primary
33 LICENSE_FILE=           MIT:{{WRKSRC}}/../NOTICE
34 LICENSE_SCHEME=         solo
35
36 CPE_PRODUCT=            kerberos
37 CPE_VENDOR=             mit
38 CPE_VERSION=            5-1.21.1
39 FPC_EQUIVALENT=         security/krb5
40
41 MUST_CONFIGURE=         gnu
42 CONFIGURE_ARGS=         --enable-shared
43                         --with-readline
44                         --without-system-verto
45                         --disable-rpath
46                         --localstatedir="{{PREFIX}}/var"
47                         --runstatedir="{{PREFIX}}/var/run"
48 CONFIGURE_ENV=          INSTALL="{{INSTALL}}"
49                         INSTALL_LIB="{{INSTALL_LIB}}"
50                         YACC="{{YACC}}"
51
52 MAKE_ARGS=              INSTALL="{{INSTALL}}"
53                         INSTALL_LIB="{{INSTALL_LIB}}"
54
55 RC_SUBR=                kpropd:primary
56
57 CPPFLAGS=               -I{{OPENSSLINC}}
58 LDFLAGS=                -L{{OPENSSLLIB}}
59 VAR_OPSYS[sunos]=       LDFLAGS=-lintl
60
61 post-patch:
62         ${REINPLACE_CMD} -e "s|/usr/local|${PREFIX}|" \
63                 ${WRKSRC}/clients/ksu/Makefile.in
64
65 post-install:
66         ${MKDIR} ${STAGEDIR}${STD_DOCDIR}
67         # install PDF documentation
68         (cd ${WRKSRC}/../doc && \
69                 ${COPYTREE_SHARE} pdf ${STAGEDIR}${STD_DOCDIR})
70         # install HTML documentation
71         (cd ${WRKSRC}/../doc && \
72                 ${COPYTREE_SHARE} html ${STAGEDIR}${STD_DOCDIR} \
73                 "! -path 'html/_sources*'")
74         # remove cat directories
75         ${FIND} ${STAGEDIR}${PREFIX}/share/man -type d -empty -delete
76
77 [FILE:1253:descriptions/desc.primary]
78 Kerberos V5 is an authentication system developed at MIT.
79
80 Abridged from the User Guide:
81        Under Kerberos, a client sends a request for a ticket to the
82    Key Distribution Center (KDC). The KDC creates a ticket-granting
83    ticket (TGT) for the client, encrypts it using the client's
84    password as the key, and sends the encrypted TGT back to the
85    client. The client then attempts to decrypt the TGT, using
86    its password. If the client successfully decrypts the TGT, it
87    keeps the decrypted TGT, which indicates proof of the client's
88    identity. The TGT permits the client to obtain additional tickets,
89    which give permission for specific services.
90        Since Kerberos negotiates authenticated, and optionally encrypted,
91    communications between two points anywhere on the internet, it
92    provides a layer of security that is not dependent on which side of a
93    firewall either client is on.
94        The Kerberos V5 package is designed to be easy to use. Most of the
95    commands are nearly identical to UNIX network programs you are already
96    used to. Kerberos V5 is a single-sign-on system, which means that you
97    have to type your password only once per session, and Kerberos does
98    the authenticating and encrypting transparently.
99
100
101 [FILE:48:descriptions/desc.tools]
102 This package contains Kerberos version 5 tools.
103
104
105 [FILE:97:distinfo]
106 7881c3aaaa1b329bd27dbc6bf2bf1c85c5d0b6c7358aff2b35d513ec2d50fa1f      8623049 krb5-1.21.1.tar.gz
107
108
109 [FILE:605:manifests/plist.primary]
110 lib/
111  libcom_err.so.3
112  libcom_err.so.3.0
113  libgssapi_krb5.so.2
114  libgssapi_krb5.so.2.2
115  libgssrpc.so.4
116  libgssrpc.so.4.2
117  libk5crypto.so.3
118  libk5crypto.so.3.1
119  libkadm5clnt_mit.so
120  libkadm5clnt_mit.so.12
121  libkadm5clnt_mit.so.12.0
122  libkadm5srv_mit.so
123  libkadm5srv_mit.so.12
124  libkadm5srv_mit.so.12.0
125  libkdb5.so.10
126  libkdb5.so.10.0
127  libkrad.so.0
128  libkrad.so.0.0
129  libkrb5.so.3
130  libkrb5.so.3.3
131  libkrb5support.so
132  libkrb5support.so.0
133  libkrb5support.so.0.1
134  libverto.so.0
135  libverto.so.0.0
136 lib/krb5/plugins/kdb/db2.so
137 lib/krb5/plugins/preauth/
138  otp.so
139  pkinit.so
140  spake.so
141  test.so
142 lib/krb5/plugins/tls/k5tls.so
143
144
145 [FILE:987:manifests/plist.dev]
146 bin/krb5-config
147 include/
148  com_err.h
149  gssapi.h
150  kdb.h
151  krad.h
152  krb5.h
153  profile.h
154  verto-module.h
155  verto.h
156 include/gssapi/
157  gssapi.h
158  gssapi_alloc.h
159  gssapi_ext.h
160  gssapi_generic.h
161  gssapi_krb5.h
162  mechglue.h
163 include/gssrpc/
164  auth.h
165  auth_gss.h
166  auth_gssapi.h
167  auth_unix.h
168  clnt.h
169  netdb.h
170  pmap_clnt.h
171  pmap_prot.h
172  pmap_rmt.h
173  rename.h
174  rpc.h
175  rpc_msg.h
176  svc.h
177  svc_auth.h
178  types.h
179  xdr.h
180 include/kadm5/
181  admin.h
182  chpass_util_strings.h
183  kadm_err.h
184 include/krb5/
185  ccselect_plugin.h
186  certauth_plugin.h
187  clpreauth_plugin.h
188  hostrealm_plugin.h
189  kadm5_auth_plugin.h
190  kadm5_hook_plugin.h
191  kdcpolicy_plugin.h
192  kdcpreauth_plugin.h
193  krb5.h
194  localauth_plugin.h
195  locate_plugin.h
196  plugin.h
197  preauth_plugin.h
198  pwqual_plugin.h
199 lib/
200  libcom_err.so
201  libgssapi_krb5.so
202  libgssrpc.so
203  libk5crypto.so
204  libkadm5clnt.so
205  libkadm5srv.so
206  libkdb5.so
207  libkrad.so
208  libkrb5.so
209  libverto.so
210 lib/pkgconfig/
211  gssrpc.pc
212  kadm-client.pc
213  kadm-server.pc
214  kdb.pc
215  krb5-gssapi.pc
216  krb5.pc
217  mit-krb5-gssapi.pc
218  mit-krb5.pc
219
220
221 [FILE:423:manifests/plist.tools]
222 bin/
223  compile_et
224  gss-client
225  k5srvutil
226  kadmin
227  kdestroy
228  kinit
229  klist
230  kpasswd
231 @(root,wheel,04755) bin/ksu
232  kswitch
233  ktutil
234  kvno
235  sclient
236  sim_client
237  uuclient
238 sbin/
239  gss-server
240  kadmin.local
241  kadmind
242  kdb5_util
243  kprop
244  kpropd
245  kproplog
246  krb5-send-pr
247  krb5kdc
248  sim_server
249  sserver
250  uuserver
251 share/et/
252  et_c.awk
253  et_h.awk
254 @dir lib/krb5/plugins/authdata
255 @dir lib/krb5/plugins/libkrb5
256 @dir var/krb5kdc
257 @dir var/run/krb5kdc
258
259
260 [FILE:123:manifests/plist.nls]
261 share/locale/de/LC_MESSAGES/mit-krb5.mo
262 share/locale/en_US/LC_MESSAGES/mit-krb5.mo
263 share/locale/ka/LC_MESSAGES/mit-krb5.mo
264
265
266 [FILE:59:manifests/plist.examples]
267 share/examples/krb5/
268  kdc.conf
269  krb5.conf
270  services.append
271
272
273 [FILE:533:manifests/plist.man]
274 share/man/man1/
275  compile_et.1.gz
276  k5srvutil.1.gz
277  kadmin.1.gz
278  kdestroy.1.gz
279  kinit.1.gz
280  klist.1.gz
281  kpasswd.1.gz
282  krb5-config.1.gz
283  ksu.1.gz
284  kswitch.1.gz
285  ktutil.1.gz
286  kvno.1.gz
287  sclient.1.gz
288 share/man/man3/com_err.3.gz
289 share/man/man5/
290  .k5identity.5.gz
291  .k5login.5.gz
292  k5identity.5.gz
293  k5login.5.gz
294  kadm5.acl.5.gz
295  kdc.conf.5.gz
296  krb5.conf.5.gz
297 share/man/man7/kerberos.7.gz
298 share/man/man8/
299  kadmin.local.8.gz
300  kadmind.8.gz
301  kdb5_ldap_util.8.gz
302  kdb5_util.8.gz
303  kprop.8.gz
304  kpropd.8.gz
305  kproplog.8.gz
306  krb5kdc.8.gz
307  sserver.8.gz
308
309
310 [FILE:271:patches/patch-clients_ksu_Makefile.in]
311 --- clients/ksu/Makefile.in.orig        2023-07-10 20:58:20 UTC
312 +++ clients/ksu/Makefile.in
313 @@ -30,6 +30,6 @@ clean:
314  
315  install:
316         -for f in ksu; do \
317 -         $(INSTALL_SETUID) $$f \
318 +         $(INSTALL_PROGRAM) $$f \
319                 $(DESTDIR)$(CLIENT_BINDIR)/`echo $$f|sed '$(transform)'`; \
320         done
321
322
323 [FILE:804:patches/patch-config__pre.in]
324 --- config/pre.in.orig  2023-07-10 20:58:20 UTC
325 +++ config/pre.in
326 @@ -181,9 +181,9 @@ LIBS = @LIBS@
327  INSTALL=@INSTALL@
328  INSTALL_STRIP=
329  INSTALL_PROGRAM=@INSTALL_PROGRAM@ $(INSTALL_STRIP)
330 -INSTALL_SCRIPT=@INSTALL_PROGRAM@
331 +INSTALL_SCRIPT=@INSTALL_SCRIPT@
332  INSTALL_DATA=@INSTALL_DATA@
333 -INSTALL_SHLIB=@INSTALL_SHLIB@
334 +INSTALL_SHLIB=$(INSTALL_LIB)
335  INSTALL_SETUID=$(INSTALL) $(INSTALL_STRIP) -m 4755 -o root
336  ## This is needed because autoconf will sometimes define @exec_prefix@ to be
337  ## ${prefix}.
338 @@ -205,6 +205,7 @@ PKGCONFIG_DIR = @libdir@/pkgconfig
339  ADMIN_MANDIR = $(KRB5MANROOT)/man8
340  SERVER_MANDIR = $(KRB5MANROOT)/man8
341  CLIENT_MANDIR = $(KRB5MANROOT)/man1
342 +SUBR_MANDIR = $(KRB5MANROOT)/man3
343  FILE_MANDIR = $(KRB5MANROOT)/man5
344  ADMIN_CATDIR = $(KRB5MANROOT)/cat8
345  SERVER_CATDIR = $(KRB5MANROOT)/cat8
346
347
348 [FILE:1365:patches/patch-config_shlib.conf]
349 --- config/shlib.conf.orig      2023-07-10 20:58:20 UTC
350 +++ config/shlib.conf
351 @@ -294,7 +294,7 @@ mips-*-netbsd*)
352         PROFFLAGS=-pg
353         ;;
354  
355 -*-*-netbsd*)
356 +*-*-xxnetbsd*)
357         PICFLAGS=-fPIC
358         SHLIBVEXT='.so.$(LIBMAJOR).$(LIBMINOR)'
359         SHLIBEXT=.so
360 @@ -312,7 +312,7 @@ mips-*-netbsd*)
361         PROFFLAGS=-pg
362         ;;
363  
364 -*-*-freebsd*)
365 +*-*-freebsd* | *-*-dragonfly* | *-*-netbsd* | *-*-midnight*)
366         case $krb5_cv_host in
367                 sparc64-*)
368                         PICFLAGS=-fPIC
369 @@ -321,14 +321,15 @@ mips-*-netbsd*)
370                         PICFLAGS=-fpic
371                         ;;
372         esac
373 -       SHLIBVEXT='.so.$(LIBMAJOR)'
374 -       RPATH_FLAG='-Wl,--enable-new-dtags -Wl,-rpath -Wl,'
375 +       SHLIBVEXT='.so.$(LIBMAJOR).$(LIBMINOR)'
376 +       SHLIBSEXT='.so.$(LIBMAJOR)'
377 +       LDCOMBINE='libtool --tag=CC --mode=link cc -Xcompiler -shared -Wl,-soname=$(LIBPREFIX)$(LIBBASE)$(SHLIBVEXT)'
378 +       RPATH_FLAG='-Wl,-rpath -Wl,'
379         PROG_RPATH_FLAGS='$(RPATH_FLAG)$(PROG_RPATH)'
380         CC_LINK_SHARED='$(CC) $(PROG_LIBPATH) $(PROG_RPATH_FLAGS) $(CFLAGS) $(LDFLAGS)'
381         CXX_LINK_SHARED='$(CXX) $(PROG_LIBPATH) $(PROG_RPATH_FLAGS) $(CXXFLAGS) $(LDFLAGS)'
382         SHLIBEXT=.so
383 -       LDCOMBINE='ld -Bshareable'
384 -       SHLIB_RPATH_FLAGS='--enable-new-dtags -rpath $(SHLIB_RDIRS)'
385 +       SHLIB_RPATH_FLAGS='-rpath $(SHLIB_RDIRS)'
386         SHLIB_EXPFLAGS='$(SHLIB_RPATH_FLAGS) $(SHLIB_DIRS) $(SHLIB_EXPLIBS)'
387         CC_LINK_STATIC='$(CC) $(PROG_LIBPATH) $(CFLAGS) $(LDFLAGS)'
388         CXX_LINK_STATIC='$(CXX) $(PROG_LIBPATH) $(CXXFLAGS) $(LDFLAGS)'
389
390
391 [FILE:243:patches/patch-include_gssrpc_rpc.h]
392 --- include/gssrpc/rpc.h.orig   2023-07-10 20:58:20 UTC
393 +++ include/gssrpc/rpc.h
394 @@ -39,6 +39,7 @@
395  #ifndef GSSRPC_RPC_H
396  #define GSSRPC_RPC_H
397  
398 +#include <sys/socket.h>
399  #include <gssrpc/types.h>              /* some typedefs */
400  #include <netinet/in.h>
401  
402
403
404 [FILE:396:patches/patch-kprop_kproplog.c]
405 --- kprop/kproplog.c.orig       2023-07-10 20:58:20 UTC
406 +++ kprop/kproplog.c
407 @@ -415,7 +415,7 @@ map_ulog(const char *filename, int *fd_o
408          close(fd);
409          return NULL;
410      }
411 -    ulog = mmap(0, st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);
412 +    ulog = (kdb_hlog_t *)mmap(0, st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);
413      if (ulog == MAP_FAILED) {
414          close(fd);
415          return NULL;
416
417
418 [FILE:2325:patches/patch-lib-krb5-os-localaddr.c]
419 --- lib/krb5/os/localaddr.c.orig        2023-07-10 20:58:20 UTC
420 +++ lib/krb5/os/localaddr.c
421 @@ -176,6 +176,7 @@ printaddr(struct sockaddr *sa)
422  }
423  #endif
424  
425 +#if 0
426  static int
427  is_loopback_address(struct sockaddr *sa)
428  {
429 @@ -192,6 +193,7 @@ is_loopback_address(struct sockaddr *sa)
430          return 0;
431      }
432  }
433 +#endif
434  
435  #ifdef HAVE_IFADDRS_H
436  #include <ifaddrs.h>
437 @@ -449,12 +451,14 @@ foreach_localaddr (/*@null@*/ void *data
438              ifp->ifa_flags &= ~IFF_UP;
439              continue;
440          }
441 +#if 0
442          if (is_loopback_address(ifp->ifa_addr)) {
443              /* Pretend it's not up, so the second pass will skip
444                 it.  */
445              ifp->ifa_flags &= ~IFF_UP;
446              continue;
447          }
448 +#endif
449          /* If this address is a duplicate, punt.  */
450          match = 0;
451          for (ifp2 = ifp_head; ifp2 && ifp2 != ifp; ifp2 = ifp2->ifa_next) {
452 @@ -583,11 +587,13 @@ foreach_localaddr (/*@null@*/ void *data
453              }
454              /*@=moduncon@*/
455  
456 +#if 0
457              /* None of the current callers want loopback addresses.  */
458              if (is_loopback_address((struct sockaddr *)&lifr->lifr_addr)) {
459                  Tprintf (("  loopback\n"));
460                  goto skip;
461              }
462 +#endif
463              /* Ignore interfaces that are down.  */
464              if ((lifreq.lifr_flags & IFF_UP) == 0) {
465                  Tprintf (("  down\n"));
466 @@ -754,11 +760,13 @@ foreach_localaddr (/*@null@*/ void *data
467              }
468              /*@=moduncon@*/
469  
470 +#if 0
471              /* None of the current callers want loopback addresses.  */
472              if (is_loopback_address(&lifr->iflr_addr)) {
473                  Tprintf (("  loopback\n"));
474                  goto skip;
475              }
476 +#endif
477              /* Ignore interfaces that are down.  */
478              if ((lifreq.iflr_flags & IFF_UP) == 0) {
479                  Tprintf (("  down\n"));
480 @@ -972,11 +980,13 @@ foreach_localaddr (/*@null@*/ void *data
481          }
482          /*@=moduncon@*/
483  
484 +#if 0
485          /* None of the current callers want loopback addresses.  */
486          if (is_loopback_address(&ifreq.ifr_addr)) {
487              Tprintf (("  loopback\n"));
488              goto skip;
489          }
490 +#endif
491          /* Ignore interfaces that are down.  */
492          if ((ifreq.ifr_flags & IFF_UP) == 0) {
493              Tprintf (("  down\n"));
494
495
496 [FILE:525:patches/patch-lib_crypto_builtin_aes_brg__endian.h]
497 --- lib/crypto/builtin/aes/brg_endian.h.orig    2023-07-10 20:58:20 UTC
498 +++ lib/crypto/builtin/aes/brg_endian.h
499 @@ -35,6 +35,8 @@ Issue Date: 10/09/2018
500  #  include <sys/isa_defs.h>
501  #elif defined( __FreeBSD__ ) || defined( __OpenBSD__ ) || defined( __NetBSD__ )
502  #  include <sys/endian.h>
503 +#elif defined( __DragonFly__)
504 +#  include <sys/endian.h>
505  #elif defined( BSD ) && ( BSD >= 199103 ) || defined( __APPLE__ ) || \
506        defined( __CYGWIN32__ ) || defined( __DJGPP__ ) || defined( __osf__ )
507  #  include <machine/endian.h>
508
509
510 [FILE:857:patches/patch-lib_kdb_kdb__log.c]
511 $NetBSD: patch-lib_kdb_kdb__log.c,v 1.2 2020/04/09 10:57:05 adam Exp $
512
513 Fix mmap/munmap -Werror=incompatible-pointer-types
514
515 --- lib/kdb/kdb_log.c.orig      2023-07-10 20:58:20 UTC
516 +++ lib/kdb/kdb_log.c
517 @@ -498,7 +498,7 @@ ulog_map(krb5_context context, const cha
518          }
519      }
520  
521 -    ulog = mmap(0, MAXLOGLEN, PROT_READ | PROT_WRITE, MAP_SHARED,
522 +    ulog = (kdb_hlog_t *)mmap(0, MAXLOGLEN, PROT_READ | PROT_WRITE, MAP_SHARED,
523                  log_ctx->ulogfd, 0);
524      if (ulog == MAP_FAILED) {
525          retval = errno;
526 @@ -680,7 +680,11 @@ ulog_fini(krb5_context context)
527      if (log_ctx == NULL)
528          return;
529      if (log_ctx->ulog != NULL)
530 +#ifdef __sun
531 +        munmap((caddr_t)log_ctx->ulog, MAXLOGLEN);
532 +#else
533          munmap(log_ctx->ulog, MAXLOGLEN);
534 +#endif
535      if (log_ctx->ulogfd != -1)
536          close(log_ctx->ulogfd);
537      free(log_ctx);
538
539
540 [FILE:692:patches/patch-util_et_Makefile.in]
541 --- util/et/Makefile.in.orig    2023-07-10 20:58:20 UTC
542 +++ util/et/Makefile.in
543 @@ -111,12 +111,13 @@ check-windows: $(OUTPRE)test_et$(EXEEXT)
544         path
545         $(OUTPRE)test_et$(EXEEXT)
546  
547 -install-unix: compile_et compile_et.1
548 +install-unix: compile_et compile_et.1 com_err.3
549         $(INSTALL) compile_et $(DESTDIR)$(bindir)/compile_et
550         test -d $(DESTDIR)$(mydatadir) || mkdir $(DESTDIR)$(mydatadir)
551         $(INSTALL_DATA) $(srcdir)/et_c.awk $(DESTDIR)$(mydatadir)
552         $(INSTALL_DATA) $(srcdir)/et_h.awk $(DESTDIR)$(mydatadir)
553         $(INSTALL_DATA) $(srcdir)/compile_et.1 $(DESTDIR)$(CLIENT_MANDIR)/compile_et.1
554 +       $(INSTALL_DATA) $(srcdir)/com_err.3 $(DESTDIR)$(SUBR_MANDIR)/com_err.3
555  
556  
557  install-headers: compile_et
558
559
560 [FILE:496:files/kpropd.in]
561 #!/bin/sh
562 #
563 # PROVIDE: kpropd
564 # REQUIRE: LOGIN
565 # KEYWORD: shutdown
566 #
567 # Add the following lines to /etc/rc.conf.local or /etc/rc.conf
568 # to enable this service:
569 #
570 # kpropd_enable (bool):      Set to NO by default.
571 #                            Set it to YES to enable kpropd.
572 # kpropd_flags (str):        Set to "" by default.
573
574 . /etc/rc.subr
575
576 name=kpropd
577 rcvar=kpropd_enable
578
579 load_rc_config $name
580
581 : ${kpropd_enable:="NO"}
582 : ${kpropd_flags=""}
583
584 command=%%PREFIX%%/sbin/${name}
585
586 run_rc_command "$1"
587