Commit graph

19 commits

Author SHA1 Message Date
Dag-Erling Smørgrav
4dcfac20dd Add patches for a couple of issues I found while researching #190055:
- Use GID_MAX instead of LONG_MAX, they are not the same on 64-bit.
 - Correctly restore the egid after reading the krb5 credential cache.

MFH:		2014Q4
2014-11-13 21:46:11 +00:00
Dag-Erling Smørgrav
8e613c06bf MIT Kerberos already has profile_t, so don't typedef it. 2014-03-27 16:56:10 +00:00
Dag-Erling Smørgrav
8e584a521a Functional changes:
- Add a SASL port option

  - Fix the KERBEROS ports option - it was a no-op, setting a
    configure flag which modifies how Kerberos was used without
    setting the flag that actually enables it.

  - Use GSSAPI instead of $ENV{KRB5CCNAME} to set the credential
    cache.  The latter pollutes the unsuspecting application's
    environment and does not always work (for instance, it breaks when
    nss_ldap is invoked from OpenSSH, although I haven't quite
    determined why)

  - Add patches to support Heimdal in addition to MIT Kerberos.  Note
    that I tried to ensure that the code is unchanged in the
    non-Heimdal case, but that I have no way of testing with MIT
    Kerberos.

  With the above changes, I have successfully configured a FreeBSD 9.2
  server to authenticate users against a Microsoft Windows 2012 Active
  Directory server.

Non-functional changes:

  - Modernize and stagify

  - Remove text in pkg-message about a change that was made ten years ago

  - Take maintainership as current maintainer has been AWOL for 2+ years

  - Bump PORTREVISION

Approved by:	maintainer hasn't been heard of for 2+ years
2014-01-14 14:19:05 +00:00
Michael Scheidell
cda6b3488f -Fix nss_initgroups_ignoreusers (add patch to bsdnss.c)
PR:		152982
Submitted by:	kmenshikov@peterhost.ru
Approved by:	mentor (timeout), gabor (mentor)
Obtained from:	http://lists.freebsd.org/pipermail/freebsd-current/2007-July/075131.html
Feature safe:	yes
2011-12-03 18:45:42 +00:00
Baptiste Daroussin
e342e18278 - Use SUB_FILES instead of invoking sed manually to change pkg-message
- Replaces spaces with a tab after OPTIONS
- While here add LICENSE

PR:		ports/148925
Submitted by:	Sevan Janiyan <venture37 _at_ geeklan.co.uk>
Approved by:	Michael Graziano <mikeg _at_ bsd-box.net> (maintainer)
2010-09-03 16:43:08 +00:00
Philip M. Gollucci
0301fa9b09 - Update to 1.265
- Submitted is now MAINTAINER

Major upgrade-related fixes (from upstream):
- Version info now in binary
- Fix broken ethers LDAP query
- FD leak cleanup

Fixes in port:
- Re-enable many nss classes that were disabled (ethers, netgroups)
- Fix compile-time breakage in ldap-ethers code (Better fix going upstream when I have time)

***

Note: Ethers and Netgroup support aren't thoroughly tested as I don't use these in my environment.
Re-enabling them doesn't seem to cause any problems, so they're back on in accordance with POLA.
PRs/test cases for these are welcome if anyone finds breakage.

PR:             ports/141931
Submitted by:   Michael Graziano <mikeg@bsd-box.net>
2010-01-18 03:43:56 +00:00
Sergey Skvortsov
e520e4da39 Really (!) add patch for "loginClass".
PR:		ports/140107
Submitted by:	Jacob Myers <jacob xx whotookspaz.org>
2010-01-08 15:27:38 +00:00
Tom McLaughlin
8c94276251 - fix krb5_ccname broken in previous commit.
PR:		133344
2009-08-18 21:45:43 +00:00
Sergey Skvortsov
be307a858c Unbreak build with defined WITHOUT_KERBEROS.
PR:		ports/133344
Submitted by:	Alex Bakhtin <bakhtin xx amt.ru>
Approved by:	maintainer timeout (> 4 months)
2009-08-18 14:33:37 +00:00
Florent Thoumie
17e01b4b86 Disable pthread_atfork detection. This fixes login issues on FreeBSD
7.2-RELEASE and possibly previous versions.

PR:		ports/133501
Submitted by:	Benjamin Lee <ben@b1c1l1.com>
Approved by:	maintainer timeout (4 weeks)
2009-05-06 10:09:55 +00:00
Martin Matuska
a9309546e9 - Update to 1.264 [1]
- use more autotools [2]
- fixes assertion problems related to openldap 2.4 [3]

PR:	ports/129445 [1], ports/127675 [2], ports/122750 [3]
Submitted by:	mm [1], "Eugene M. Kim" <gene@nttmcl.com> [2]
Approved by:	maintainer (timeout ports/127675, ports/129030, ports/127675)
2008-12-10 16:11:25 +00:00
Cheng-Lung Sung
c5a6067866 - In some cases (like sudo), we should check euid not uid, thanks for
jnlin at csie.nctu.edu.tw
- Use MAN5PREFIX
- portlint warns:
  1) IGNORE should be lowercase-lead
  2) INSTALLS_SHLIB should be replaced by USE_LDCONFIG
  3) PLIST_FILES should be used when only two files
- Bump PORTREVISION

PR:		ports/104310
Submitted by:	Gea-Suan Lin <gslin_AT_gslin dot org>
Approved by:	maintainer (timeout)
2006-12-20 02:31:17 +00:00
Andrey Slusar
e500c6bc8d Update to 1.250
Submitted by:	maintainer via email
2006-05-27 16:31:57 +00:00
Andrey Slusar
fbecc92707 - Now it is possible to use ldap as source for hosts database.
Only gethosbyname, gethostbyname2, gethostbyaddr are implemented.
  Behavior of getpwXXX functions is made traditional for BSD. When uid=0
  they return user password, otherwise returned password is "x".
  Also, in previous version of the port functions setpwent/endpwent and
  setgrent/endgrent were mixed. Now they are not.
- Assign maintainership to submitter.

Submitted by:	Artem Kazakov <kazakov@gmail.com>
2006-05-24 10:48:59 +00:00
Andrey Slusar
596d02bf3e - Update to 1.249 [1]
- Fix build when sasl installed.

PR:		ports/94049 [1]
Submitted by:	Dmitriy Kirhlarov <dkirhlarov@oilspace.com> [1]
2006-03-24 22:52:30 +00:00
Pav Lucistnik
cd1c3385ef - Update to 1.244
PR:		ports/90151
Submitted by:	Konstantin Saurbier <saurbier@math.uni-bielefeld.de>
Approved by:	maintainer timeout (nectar; 3 weeks)
2005-12-30 05:25:00 +00:00
Niels Heinen
0e03eaa498 Upgraded to version 1.239
Submitted by:	Thomas Sandford
PR:		ports/82841
Approved by:	nectar (mentor,maintainer)
2005-07-11 18:50:29 +00:00
Jacques Vidrine
2de006395a Add support for using nss_ldap in `compat' mode (i.e. as sources for
the `passwd_compat' and `group_compat' databases).
2003-04-25 00:07:20 +00:00
Jacques Vidrine
2cc92ba66e Add nss_ldap, an RFC 2307-compliant NSS module. Currently only the
getpwent(3) and getgrent(3) family of functions are supported.
2003-04-17 14:26:46 +00:00