1 # Buildsheet autogenerated by ravenadm tool -- Do not edit.
7 SDESC[standard]= MIT Kerberos 5 authentication system
8 HOMEPAGE= http://web.mit.edu/kerberos/www/
12 SITES[main]= https://web.mit.edu/kerberos/dist/krb5/1.21/
13 DISTFILE[1]= krb5-1.21.1.tar.gz:main
15 SPKGS[standard]= complete
24 OPTIONS_AVAILABLE= none
25 OPTIONS_STANDARD= none
27 USES= cpe gmake perl:build libtool:build pkgconfig
28 ssl:openssl11 gettext readline
30 DISTNAME= krb5-1.21.1/src
33 LICENSE_FILE= MIT:{{WRKSRC}}/../NOTICE
39 FPC_EQUIVALENT= security/krb5
42 CONFIGURE_ARGS= --enable-shared
44 --without-system-verto
46 --localstatedir="{{PREFIX}}/var"
47 --runstatedir="{{PREFIX}}/var/run"
48 CONFIGURE_ENV= INSTALL="{{INSTALL}}"
49 INSTALL_LIB="{{INSTALL_LIB}}"
52 MAKE_ARGS= INSTALL="{{INSTALL}}"
53 INSTALL_LIB="{{INSTALL_LIB}}"
55 RC_SUBR= kpropd:primary
57 CPPFLAGS= -I{{OPENSSLINC}}
58 LDFLAGS= -L{{OPENSSLLIB}}
59 VAR_OPSYS[sunos]= LDFLAGS=-lintl
62 ${REINPLACE_CMD} -e "s|/usr/local|${PREFIX}|" \
63 ${WRKSRC}/clients/ksu/Makefile.in
66 ${MKDIR} ${STAGEDIR}${STD_DOCDIR}
67 # install PDF documentation
68 (cd ${WRKSRC}/../doc && \
69 ${COPYTREE_SHARE} pdf ${STAGEDIR}${STD_DOCDIR})
70 # install HTML documentation
71 (cd ${WRKSRC}/../doc && \
72 ${COPYTREE_SHARE} html ${STAGEDIR}${STD_DOCDIR} \
73 "! -path 'html/_sources*'")
74 # remove cat directories
75 ${FIND} ${STAGEDIR}${PREFIX}/share/man -type d -empty -delete
77 [FILE:1253:descriptions/desc.primary]
78 Kerberos V5 is an authentication system developed at MIT.
80 Abridged from the User Guide:
81 Under Kerberos, a client sends a request for a ticket to the
82 Key Distribution Center (KDC). The KDC creates a ticket-granting
83 ticket (TGT) for the client, encrypts it using the client's
84 password as the key, and sends the encrypted TGT back to the
85 client. The client then attempts to decrypt the TGT, using
86 its password. If the client successfully decrypts the TGT, it
87 keeps the decrypted TGT, which indicates proof of the client's
88 identity. The TGT permits the client to obtain additional tickets,
89 which give permission for specific services.
90 Since Kerberos negotiates authenticated, and optionally encrypted,
91 communications between two points anywhere on the internet, it
92 provides a layer of security that is not dependent on which side of a
93 firewall either client is on.
94 The Kerberos V5 package is designed to be easy to use. Most of the
95 commands are nearly identical to UNIX network programs you are already
96 used to. Kerberos V5 is a single-sign-on system, which means that you
97 have to type your password only once per session, and Kerberos does
98 the authenticating and encrypting transparently.
101 [FILE:48:descriptions/desc.tools]
102 This package contains Kerberos version 5 tools.
106 7881c3aaaa1b329bd27dbc6bf2bf1c85c5d0b6c7358aff2b35d513ec2d50fa1f 8623049 krb5-1.21.1.tar.gz
109 [FILE:605:manifests/plist.primary]
114 libgssapi_krb5.so.2.2
120 libkadm5clnt_mit.so.12
121 libkadm5clnt_mit.so.12.0
123 libkadm5srv_mit.so.12
124 libkadm5srv_mit.so.12.0
133 libkrb5support.so.0.1
136 lib/krb5/plugins/kdb/db2.so
137 lib/krb5/plugins/preauth/
142 lib/krb5/plugins/tls/k5tls.so
145 [FILE:987:manifests/plist.dev]
182 chpass_util_strings.h
221 [FILE:423:manifests/plist.tools]
231 @(root,wheel,04755) bin/ksu
254 @dir lib/krb5/plugins/authdata
255 @dir lib/krb5/plugins/libkrb5
260 [FILE:123:manifests/plist.nls]
261 share/locale/de/LC_MESSAGES/mit-krb5.mo
262 share/locale/en_US/LC_MESSAGES/mit-krb5.mo
263 share/locale/ka/LC_MESSAGES/mit-krb5.mo
266 [FILE:59:manifests/plist.examples]
273 [FILE:533:manifests/plist.man]
288 share/man/man3/com_err.3.gz
297 share/man/man7/kerberos.7.gz
310 [FILE:271:patches/patch-clients_ksu_Makefile.in]
311 --- clients/ksu/Makefile.in.orig 2023-07-10 20:58:20 UTC
312 +++ clients/ksu/Makefile.in
313 @@ -30,6 +30,6 @@ clean:
317 - $(INSTALL_SETUID) $$f \
318 + $(INSTALL_PROGRAM) $$f \
319 $(DESTDIR)$(CLIENT_BINDIR)/`echo $$f|sed '$(transform)'`; \
323 [FILE:804:patches/patch-config__pre.in]
324 --- config/pre.in.orig 2023-07-10 20:58:20 UTC
326 @@ -181,9 +181,9 @@ LIBS = @LIBS@
329 INSTALL_PROGRAM=@INSTALL_PROGRAM@ $(INSTALL_STRIP)
330 -INSTALL_SCRIPT=@INSTALL_PROGRAM@
331 +INSTALL_SCRIPT=@INSTALL_SCRIPT@
332 INSTALL_DATA=@INSTALL_DATA@
333 -INSTALL_SHLIB=@INSTALL_SHLIB@
334 +INSTALL_SHLIB=$(INSTALL_LIB)
335 INSTALL_SETUID=$(INSTALL) $(INSTALL_STRIP) -m 4755 -o root
336 ## This is needed because autoconf will sometimes define @exec_prefix@ to be
338 @@ -205,6 +205,7 @@ PKGCONFIG_DIR = @libdir@/pkgconfig
339 ADMIN_MANDIR = $(KRB5MANROOT)/man8
340 SERVER_MANDIR = $(KRB5MANROOT)/man8
341 CLIENT_MANDIR = $(KRB5MANROOT)/man1
342 +SUBR_MANDIR = $(KRB5MANROOT)/man3
343 FILE_MANDIR = $(KRB5MANROOT)/man5
344 ADMIN_CATDIR = $(KRB5MANROOT)/cat8
345 SERVER_CATDIR = $(KRB5MANROOT)/cat8
348 [FILE:1365:patches/patch-config_shlib.conf]
349 --- config/shlib.conf.orig 2023-07-10 20:58:20 UTC
350 +++ config/shlib.conf
351 @@ -294,7 +294,7 @@ mips-*-netbsd*)
358 SHLIBVEXT='.so.$(LIBMAJOR).$(LIBMINOR)'
360 @@ -312,7 +312,7 @@ mips-*-netbsd*)
365 +*-*-freebsd* | *-*-dragonfly* | *-*-netbsd* | *-*-midnight*)
366 case $krb5_cv_host in
369 @@ -321,14 +321,15 @@ mips-*-netbsd*)
373 - SHLIBVEXT='.so.$(LIBMAJOR)'
374 - RPATH_FLAG='-Wl,--enable-new-dtags -Wl,-rpath -Wl,'
375 + SHLIBVEXT='.so.$(LIBMAJOR).$(LIBMINOR)'
376 + SHLIBSEXT='.so.$(LIBMAJOR)'
377 + LDCOMBINE='libtool --tag=CC --mode=link cc -Xcompiler -shared -Wl,-soname=$(LIBPREFIX)$(LIBBASE)$(SHLIBVEXT)'
378 + RPATH_FLAG='-Wl,-rpath -Wl,'
379 PROG_RPATH_FLAGS='$(RPATH_FLAG)$(PROG_RPATH)'
380 CC_LINK_SHARED='$(CC) $(PROG_LIBPATH) $(PROG_RPATH_FLAGS) $(CFLAGS) $(LDFLAGS)'
381 CXX_LINK_SHARED='$(CXX) $(PROG_LIBPATH) $(PROG_RPATH_FLAGS) $(CXXFLAGS) $(LDFLAGS)'
383 - LDCOMBINE='ld -Bshareable'
384 - SHLIB_RPATH_FLAGS='--enable-new-dtags -rpath $(SHLIB_RDIRS)'
385 + SHLIB_RPATH_FLAGS='-rpath $(SHLIB_RDIRS)'
386 SHLIB_EXPFLAGS='$(SHLIB_RPATH_FLAGS) $(SHLIB_DIRS) $(SHLIB_EXPLIBS)'
387 CC_LINK_STATIC='$(CC) $(PROG_LIBPATH) $(CFLAGS) $(LDFLAGS)'
388 CXX_LINK_STATIC='$(CXX) $(PROG_LIBPATH) $(CXXFLAGS) $(LDFLAGS)'
391 [FILE:243:patches/patch-include_gssrpc_rpc.h]
392 --- include/gssrpc/rpc.h.orig 2023-07-10 20:58:20 UTC
393 +++ include/gssrpc/rpc.h
398 +#include <sys/socket.h>
399 #include <gssrpc/types.h> /* some typedefs */
400 #include <netinet/in.h>
404 [FILE:396:patches/patch-kprop_kproplog.c]
405 --- kprop/kproplog.c.orig 2023-07-10 20:58:20 UTC
407 @@ -415,7 +415,7 @@ map_ulog(const char *filename, int *fd_o
411 - ulog = mmap(0, st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);
412 + ulog = (kdb_hlog_t *)mmap(0, st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);
413 if (ulog == MAP_FAILED) {
418 [FILE:2325:patches/patch-lib-krb5-os-localaddr.c]
419 --- lib/krb5/os/localaddr.c.orig 2023-07-10 20:58:20 UTC
420 +++ lib/krb5/os/localaddr.c
421 @@ -176,6 +176,7 @@ printaddr(struct sockaddr *sa)
427 is_loopback_address(struct sockaddr *sa)
429 @@ -192,6 +193,7 @@ is_loopback_address(struct sockaddr *sa)
435 #ifdef HAVE_IFADDRS_H
437 @@ -449,12 +451,14 @@ foreach_localaddr (/*@null@*/ void *data
438 ifp->ifa_flags &= ~IFF_UP;
442 if (is_loopback_address(ifp->ifa_addr)) {
443 /* Pretend it's not up, so the second pass will skip
445 ifp->ifa_flags &= ~IFF_UP;
449 /* If this address is a duplicate, punt. */
451 for (ifp2 = ifp_head; ifp2 && ifp2 != ifp; ifp2 = ifp2->ifa_next) {
452 @@ -583,11 +587,13 @@ foreach_localaddr (/*@null@*/ void *data
457 /* None of the current callers want loopback addresses. */
458 if (is_loopback_address((struct sockaddr *)&lifr->lifr_addr)) {
459 Tprintf ((" loopback\n"));
463 /* Ignore interfaces that are down. */
464 if ((lifreq.lifr_flags & IFF_UP) == 0) {
465 Tprintf ((" down\n"));
466 @@ -754,11 +760,13 @@ foreach_localaddr (/*@null@*/ void *data
471 /* None of the current callers want loopback addresses. */
472 if (is_loopback_address(&lifr->iflr_addr)) {
473 Tprintf ((" loopback\n"));
477 /* Ignore interfaces that are down. */
478 if ((lifreq.iflr_flags & IFF_UP) == 0) {
479 Tprintf ((" down\n"));
480 @@ -972,11 +980,13 @@ foreach_localaddr (/*@null@*/ void *data
485 /* None of the current callers want loopback addresses. */
486 if (is_loopback_address(&ifreq.ifr_addr)) {
487 Tprintf ((" loopback\n"));
491 /* Ignore interfaces that are down. */
492 if ((ifreq.ifr_flags & IFF_UP) == 0) {
493 Tprintf ((" down\n"));
496 [FILE:525:patches/patch-lib_crypto_builtin_aes_brg__endian.h]
497 --- lib/crypto/builtin/aes/brg_endian.h.orig 2023-07-10 20:58:20 UTC
498 +++ lib/crypto/builtin/aes/brg_endian.h
499 @@ -35,6 +35,8 @@ Issue Date: 10/09/2018
500 # include <sys/isa_defs.h>
501 #elif defined( __FreeBSD__ ) || defined( __OpenBSD__ ) || defined( __NetBSD__ )
502 # include <sys/endian.h>
503 +#elif defined( __DragonFly__)
504 +# include <sys/endian.h>
505 #elif defined( BSD ) && ( BSD >= 199103 ) || defined( __APPLE__ ) || \
506 defined( __CYGWIN32__ ) || defined( __DJGPP__ ) || defined( __osf__ )
507 # include <machine/endian.h>
510 [FILE:857:patches/patch-lib_kdb_kdb__log.c]
511 $NetBSD: patch-lib_kdb_kdb__log.c,v 1.2 2020/04/09 10:57:05 adam Exp $
513 Fix mmap/munmap -Werror=incompatible-pointer-types
515 --- lib/kdb/kdb_log.c.orig 2023-07-10 20:58:20 UTC
516 +++ lib/kdb/kdb_log.c
517 @@ -498,7 +498,7 @@ ulog_map(krb5_context context, const cha
521 - ulog = mmap(0, MAXLOGLEN, PROT_READ | PROT_WRITE, MAP_SHARED,
522 + ulog = (kdb_hlog_t *)mmap(0, MAXLOGLEN, PROT_READ | PROT_WRITE, MAP_SHARED,
524 if (ulog == MAP_FAILED) {
526 @@ -680,7 +680,11 @@ ulog_fini(krb5_context context)
529 if (log_ctx->ulog != NULL)
531 + munmap((caddr_t)log_ctx->ulog, MAXLOGLEN);
533 munmap(log_ctx->ulog, MAXLOGLEN);
535 if (log_ctx->ulogfd != -1)
536 close(log_ctx->ulogfd);
540 [FILE:692:patches/patch-util_et_Makefile.in]
541 --- util/et/Makefile.in.orig 2023-07-10 20:58:20 UTC
542 +++ util/et/Makefile.in
543 @@ -111,12 +111,13 @@ check-windows: $(OUTPRE)test_et$(EXEEXT)
545 $(OUTPRE)test_et$(EXEEXT)
547 -install-unix: compile_et compile_et.1
548 +install-unix: compile_et compile_et.1 com_err.3
549 $(INSTALL) compile_et $(DESTDIR)$(bindir)/compile_et
550 test -d $(DESTDIR)$(mydatadir) || mkdir $(DESTDIR)$(mydatadir)
551 $(INSTALL_DATA) $(srcdir)/et_c.awk $(DESTDIR)$(mydatadir)
552 $(INSTALL_DATA) $(srcdir)/et_h.awk $(DESTDIR)$(mydatadir)
553 $(INSTALL_DATA) $(srcdir)/compile_et.1 $(DESTDIR)$(CLIENT_MANDIR)/compile_et.1
554 + $(INSTALL_DATA) $(srcdir)/com_err.3 $(DESTDIR)$(SUBR_MANDIR)/com_err.3
557 install-headers: compile_et
560 [FILE:496:files/kpropd.in]
567 # Add the following lines to /etc/rc.conf.local or /etc/rc.conf
568 # to enable this service:
570 # kpropd_enable (bool): Set to NO by default.
571 # Set it to YES to enable kpropd.
572 # kpropd_flags (str): Set to "" by default.
581 : ${kpropd_enable:="NO"}
584 command=%%PREFIX%%/sbin/${name}