1 # Buildsheet autogenerated by ravenadm tool -- Do not edit.
7 SDESC[standard]= MIT Kerberos 5 authentication system
8 HOMEPAGE= http://web.mit.edu/kerberos/www/
12 SITES[main]= https://web.mit.edu/kerberos/dist/krb5/1.20/
13 DISTFILE[1]= krb5-1.20.1.tar.gz:main
15 SPKGS[standard]= complete
21 OPTIONS_AVAILABLE= none
22 OPTIONS_STANDARD= none
24 USES= cpe gmake perl:build libtool:build pkgconfig
25 ssl:openssl11 gettext-runtime gettext-tools readline
27 DISTNAME= krb5-1.20.1/src
30 LICENSE_FILE= MIT:{{WRKSRC}}/../NOTICE
36 FPC_EQUIVALENT= security/krb5
39 CONFIGURE_ARGS= --enable-shared
41 --without-system-verto
43 --localstatedir="{{PREFIX}}/var"
44 --runstatedir="{{PREFIX}}/var/run"
45 CONFIGURE_ENV= INSTALL="{{INSTALL}}"
46 INSTALL_LIB="{{INSTALL_LIB}}"
49 MAKE_ARGS= INSTALL="{{INSTALL}}"
50 INSTALL_LIB="{{INSTALL_LIB}}"
52 RC_SUBR= kpropd:primary
54 CPPFLAGS= -I{{OPENSSLINC}}
55 LDFLAGS= -L{{OPENSSLLIB}}
56 VAR_OPSYS[sunos]= LDFLAGS=-lintl
59 ${REINPLACE_CMD} -e "s|/usr/local|${PREFIX}|" \
60 ${WRKSRC}/clients/ksu/Makefile.in
63 ${MKDIR} ${STAGEDIR}${STD_DOCDIR}
64 # install PDF documentation
65 (cd ${WRKSRC}/../doc && \
66 ${COPYTREE_SHARE} pdf ${STAGEDIR}${STD_DOCDIR})
67 # install HTML documentation
68 (cd ${WRKSRC}/../doc && \
69 ${COPYTREE_SHARE} html ${STAGEDIR}${STD_DOCDIR} \
70 "! -path 'html/_sources*'")
71 # remove cat directories
72 ${FIND} ${STAGEDIR}${PREFIX}/share/man -type d -empty -delete
74 [FILE:1253:descriptions/desc.primary]
75 Kerberos V5 is an authentication system developed at MIT.
77 Abridged from the User Guide:
78 Under Kerberos, a client sends a request for a ticket to the
79 Key Distribution Center (KDC). The KDC creates a ticket-granting
80 ticket (TGT) for the client, encrypts it using the client's
81 password as the key, and sends the encrypted TGT back to the
82 client. The client then attempts to decrypt the TGT, using
83 its password. If the client successfully decrypts the TGT, it
84 keeps the decrypted TGT, which indicates proof of the client's
85 identity. The TGT permits the client to obtain additional tickets,
86 which give permission for specific services.
87 Since Kerberos negotiates authenticated, and optionally encrypted,
88 communications between two points anywhere on the internet, it
89 provides a layer of security that is not dependent on which side of a
90 firewall either client is on.
91 The Kerberos V5 package is designed to be easy to use. Most of the
92 commands are nearly identical to UNIX network programs you are already
93 used to. Kerberos V5 is a single-sign-on system, which means that you
94 have to type your password only once per session, and Kerberos does
95 the authenticating and encrypting transparently.
99 704aed49b19eb5a7178b34b2873620ec299db08752d6a8574f95d41879ab8851 8661660 krb5-1.20.1.tar.gz
102 [FILE:2540:manifests/plist.primary]
113 @(root,wheel,04755) bin/ksu
155 chpass_util_strings.h
178 libgssapi_krb5.so.2.2
187 libkadm5clnt_mit.so.12
188 libkadm5clnt_mit.so.12.0
191 libkadm5srv_mit.so.12
192 libkadm5srv_mit.so.12.0
204 libkrb5support.so.0.1
208 lib/krb5/plugins/kdb/db2.so
209 lib/krb5/plugins/preauth/
214 lib/krb5/plugins/tls/k5tls.so
254 share/man/man3/com_err.3.gz
263 share/man/man7/kerberos.7.gz
274 @dir lib/krb5/plugins/authdata
275 @dir lib/krb5/plugins/libkrb5
280 [FILE:83:manifests/plist.nls]
281 share/locale/de/LC_MESSAGES/mit-krb5.mo
282 share/locale/en_US/LC_MESSAGES/mit-krb5.mo
285 [FILE:59:manifests/plist.examples]
292 [FILE:271:patches/patch-clients_ksu_Makefile.in]
293 --- clients/ksu/Makefile.in.orig 2022-11-11 23:43:17 UTC
294 +++ clients/ksu/Makefile.in
295 @@ -30,6 +30,6 @@ clean:
299 - $(INSTALL_SETUID) $$f \
300 + $(INSTALL_PROGRAM) $$f \
301 $(DESTDIR)$(CLIENT_BINDIR)/`echo $$f|sed '$(transform)'`; \
305 [FILE:804:patches/patch-config__pre.in]
306 --- config/pre.in.orig 2022-11-11 23:43:17 UTC
308 @@ -181,9 +181,9 @@ LIBS = @LIBS@
311 INSTALL_PROGRAM=@INSTALL_PROGRAM@ $(INSTALL_STRIP)
312 -INSTALL_SCRIPT=@INSTALL_PROGRAM@
313 +INSTALL_SCRIPT=@INSTALL_SCRIPT@
314 INSTALL_DATA=@INSTALL_DATA@
315 -INSTALL_SHLIB=@INSTALL_SHLIB@
316 +INSTALL_SHLIB=$(INSTALL_LIB)
317 INSTALL_SETUID=$(INSTALL) $(INSTALL_STRIP) -m 4755 -o root
318 ## This is needed because autoconf will sometimes define @exec_prefix@ to be
320 @@ -205,6 +205,7 @@ PKGCONFIG_DIR = @libdir@/pkgconfig
321 ADMIN_MANDIR = $(KRB5MANROOT)/man8
322 SERVER_MANDIR = $(KRB5MANROOT)/man8
323 CLIENT_MANDIR = $(KRB5MANROOT)/man1
324 +SUBR_MANDIR = $(KRB5MANROOT)/man3
325 FILE_MANDIR = $(KRB5MANROOT)/man5
326 ADMIN_CATDIR = $(KRB5MANROOT)/cat8
327 SERVER_CATDIR = $(KRB5MANROOT)/cat8
330 [FILE:1349:patches/patch-config_shlib.conf]
331 --- config/shlib.conf.orig 2022-11-11 23:43:17 UTC
332 +++ config/shlib.conf
333 @@ -294,7 +294,7 @@ mips-*-netbsd*)
340 SHLIBVEXT='.so.$(LIBMAJOR).$(LIBMINOR)'
342 @@ -312,7 +312,7 @@ mips-*-netbsd*)
347 +*-*-freebsd* | *-*-dragonfly* | *-*-netbsd*)
348 case $krb5_cv_host in
351 @@ -321,14 +321,15 @@ mips-*-netbsd*)
355 - SHLIBVEXT='.so.$(LIBMAJOR)'
356 - RPATH_FLAG='-Wl,--enable-new-dtags -Wl,-rpath -Wl,'
357 + SHLIBVEXT='.so.$(LIBMAJOR).$(LIBMINOR)'
358 + SHLIBSEXT='.so.$(LIBMAJOR)'
359 + LDCOMBINE='libtool --tag=CC --mode=link cc -Xcompiler -shared -Wl,-soname=$(LIBPREFIX)$(LIBBASE)$(SHLIBVEXT)'
360 + RPATH_FLAG='-Wl,-rpath -Wl,'
361 PROG_RPATH_FLAGS='$(RPATH_FLAG)$(PROG_RPATH)'
362 CC_LINK_SHARED='$(CC) $(PROG_LIBPATH) $(PROG_RPATH_FLAGS) $(CFLAGS) $(LDFLAGS)'
363 CXX_LINK_SHARED='$(CXX) $(PROG_LIBPATH) $(PROG_RPATH_FLAGS) $(CXXFLAGS) $(LDFLAGS)'
365 - LDCOMBINE='ld -Bshareable'
366 - SHLIB_RPATH_FLAGS='--enable-new-dtags -rpath $(SHLIB_RDIRS)'
367 + SHLIB_RPATH_FLAGS='-rpath $(SHLIB_RDIRS)'
368 SHLIB_EXPFLAGS='$(SHLIB_RPATH_FLAGS) $(SHLIB_DIRS) $(SHLIB_EXPLIBS)'
369 CC_LINK_STATIC='$(CC) $(PROG_LIBPATH) $(CFLAGS) $(LDFLAGS)'
370 CXX_LINK_STATIC='$(CXX) $(PROG_LIBPATH) $(CXXFLAGS) $(LDFLAGS)'
373 [FILE:243:patches/patch-include_gssrpc_rpc.h]
374 --- include/gssrpc/rpc.h.orig 2022-11-11 23:43:17 UTC
375 +++ include/gssrpc/rpc.h
380 +#include <sys/socket.h>
381 #include <gssrpc/types.h> /* some typedefs */
382 #include <netinet/in.h>
386 [FILE:396:patches/patch-kprop_kproplog.c]
387 --- kprop/kproplog.c.orig 2022-11-11 23:43:17 UTC
389 @@ -415,7 +415,7 @@ map_ulog(const char *filename, int *fd_o
393 - ulog = mmap(0, st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);
394 + ulog = (kdb_hlog_t *)mmap(0, st.st_size, PROT_READ, MAP_PRIVATE, fd, 0);
395 if (ulog == MAP_FAILED) {
400 [FILE:2325:patches/patch-lib-krb5-os-localaddr.c]
401 --- lib/krb5/os/localaddr.c.orig 2022-11-11 23:43:17 UTC
402 +++ lib/krb5/os/localaddr.c
403 @@ -176,6 +176,7 @@ printaddr(struct sockaddr *sa)
409 is_loopback_address(struct sockaddr *sa)
411 @@ -192,6 +193,7 @@ is_loopback_address(struct sockaddr *sa)
417 #ifdef HAVE_IFADDRS_H
419 @@ -449,12 +451,14 @@ foreach_localaddr (/*@null@*/ void *data
420 ifp->ifa_flags &= ~IFF_UP;
424 if (is_loopback_address(ifp->ifa_addr)) {
425 /* Pretend it's not up, so the second pass will skip
427 ifp->ifa_flags &= ~IFF_UP;
431 /* If this address is a duplicate, punt. */
433 for (ifp2 = ifp_head; ifp2 && ifp2 != ifp; ifp2 = ifp2->ifa_next) {
434 @@ -583,11 +587,13 @@ foreach_localaddr (/*@null@*/ void *data
439 /* None of the current callers want loopback addresses. */
440 if (is_loopback_address((struct sockaddr *)&lifr->lifr_addr)) {
441 Tprintf ((" loopback\n"));
445 /* Ignore interfaces that are down. */
446 if ((lifreq.lifr_flags & IFF_UP) == 0) {
447 Tprintf ((" down\n"));
448 @@ -754,11 +760,13 @@ foreach_localaddr (/*@null@*/ void *data
453 /* None of the current callers want loopback addresses. */
454 if (is_loopback_address(&lifr->iflr_addr)) {
455 Tprintf ((" loopback\n"));
459 /* Ignore interfaces that are down. */
460 if ((lifreq.iflr_flags & IFF_UP) == 0) {
461 Tprintf ((" down\n"));
462 @@ -972,11 +980,13 @@ foreach_localaddr (/*@null@*/ void *data
467 /* None of the current callers want loopback addresses. */
468 if (is_loopback_address(&ifreq.ifr_addr)) {
469 Tprintf ((" loopback\n"));
473 /* Ignore interfaces that are down. */
474 if ((ifreq.ifr_flags & IFF_UP) == 0) {
475 Tprintf ((" down\n"));
478 [FILE:525:patches/patch-lib_crypto_builtin_aes_brg__endian.h]
479 --- lib/crypto/builtin/aes/brg_endian.h.orig 2022-11-11 23:43:17 UTC
480 +++ lib/crypto/builtin/aes/brg_endian.h
481 @@ -35,6 +35,8 @@ Issue Date: 10/09/2018
482 # include <sys/isa_defs.h>
483 #elif defined( __FreeBSD__ ) || defined( __OpenBSD__ ) || defined( __NetBSD__ )
484 # include <sys/endian.h>
485 +#elif defined( __DragonFly__)
486 +# include <sys/endian.h>
487 #elif defined( BSD ) && ( BSD >= 199103 ) || defined( __APPLE__ ) || \
488 defined( __CYGWIN32__ ) || defined( __DJGPP__ ) || defined( __osf__ )
489 # include <machine/endian.h>
492 [FILE:857:patches/patch-lib_kdb_kdb__log.c]
493 $NetBSD: patch-lib_kdb_kdb__log.c,v 1.2 2020/04/09 10:57:05 adam Exp $
495 Fix mmap/munmap -Werror=incompatible-pointer-types
497 --- lib/kdb/kdb_log.c.orig 2022-11-11 23:43:17 UTC
498 +++ lib/kdb/kdb_log.c
499 @@ -498,7 +498,7 @@ ulog_map(krb5_context context, const cha
503 - ulog = mmap(0, MAXLOGLEN, PROT_READ | PROT_WRITE, MAP_SHARED,
504 + ulog = (kdb_hlog_t *)mmap(0, MAXLOGLEN, PROT_READ | PROT_WRITE, MAP_SHARED,
506 if (ulog == MAP_FAILED) {
508 @@ -680,7 +680,11 @@ ulog_fini(krb5_context context)
511 if (log_ctx->ulog != NULL)
513 + munmap((caddr_t)log_ctx->ulog, MAXLOGLEN);
515 munmap(log_ctx->ulog, MAXLOGLEN);
517 if (log_ctx->ulogfd != -1)
518 close(log_ctx->ulogfd);
522 [FILE:692:patches/patch-util_et_Makefile.in]
523 --- util/et/Makefile.in.orig 2022-11-11 23:43:17 UTC
524 +++ util/et/Makefile.in
525 @@ -111,12 +111,13 @@ check-windows: $(OUTPRE)test_et$(EXEEXT)
527 $(OUTPRE)test_et$(EXEEXT)
529 -install-unix: compile_et compile_et.1
530 +install-unix: compile_et compile_et.1 com_err.3
531 $(INSTALL) compile_et $(DESTDIR)$(bindir)/compile_et
532 test -d $(DESTDIR)$(mydatadir) || mkdir $(DESTDIR)$(mydatadir)
533 $(INSTALL_DATA) $(srcdir)/et_c.awk $(DESTDIR)$(mydatadir)
534 $(INSTALL_DATA) $(srcdir)/et_h.awk $(DESTDIR)$(mydatadir)
535 $(INSTALL_DATA) $(srcdir)/compile_et.1 $(DESTDIR)$(CLIENT_MANDIR)/compile_et.1
536 + $(INSTALL_DATA) $(srcdir)/com_err.3 $(DESTDIR)$(SUBR_MANDIR)/com_err.3
539 install-headers: compile_et
542 [FILE:496:files/kpropd.in]
549 # Add the following lines to /etc/rc.conf.local or /etc/rc.conf
550 # to enable this service:
552 # kpropd_enable (bool): Set to NO by default.
553 # Set it to YES to enable kpropd.
554 # kpropd_flags (str): Set to "" by default.
563 : ${kpropd_enable:="NO"}
566 command=%%PREFIX%%/sbin/${name}