summaryrefslogtreecommitdiff
path: root/security/heimdal
AgeCommit message (Collapse)AuthorFilesLines
2004-11-19Correctly detect the old DES API in the OpenSSL in NetBSD's basejlam4-8/+152
install. This prevents Heimdal from building and installing its own DES library and headers. Bump the PKGREVISION.
2004-11-15Add a new variable BROKEN_READLINE_DETECTION which should be set tojlam1-10/+4
yes/no by a package Makefile, depending on whether the configure process properly detects the additional libraries needed to link against -lreadline (typically, you need either "-lreadline -ltermcap", or "-lreadline -lcurses" to properly link against -lreadline). If this variable is set to "yes", then we automatically expand "-lreadline" into "-lreadline -l<termcap functions library>". BROKEN_READLINE_DETECTION defaults to "no". Set BROKEN_READLINE_DETECTION to "yes" in security/heimdal and remove the custom logic that did the same work.
2004-11-09Fix location of heimdal mirror at ftp.sunet.se.jlam1-2/+2
2004-10-19Don't list the info/ files. This uses INFO_FILES so theyreed1-4/+1
are automatically registered.
2004-10-19This needs a yacc.reed1-1/+2
So used: USE_GNU_TOOLS+= yacc (But it didn't necessarily need a GNU version.)
2004-10-06Undefine open in ndbm_wrap.c. This fixes a build problem on Solaris.gavan2-1/+14
2004-10-03Libtool fix for PR pkg/26633, and other issues. Update libtool to 1.5.10tv2-3/+4
in the process. (More information on tech-pkg.) Bump PKGREVISION and BUILDLINK_DEPENDS of all packages using libtool and installing .la files. Bump PKGREVISION (only) of all packages depending directly on the above via a buildlink3 include.
2004-09-22Mechanical changes to package PLISTs to make use of LIBTOOLIZE_PLIST.jlam1-2/+1
All library names listed by *.la files no longer need to be listed in the PLIST, e.g., instead of: lib/libfoo.a lib/libfoo.la lib/libfoo.so lib/libfoo.so.0 lib/libfoo.so.0.1 one simply needs: lib/libfoo.la and bsd.pkg.mk will automatically ensure that the additional library names are listed in the installed package +CONTENTS file. Also make LIBTOOLIZE_PLIST default to "yes".
2004-09-15The configure script checks for some libraries the wrong order, sincejlam1-3/+11
-lreadline also needs either -ltermcap, -lcurses, -lncurses in the link command to resolve all symbols used in the readline library. Cause one of these libraries to automatically be added whenever "-lreadline" appears on the command line. This is a generalization of the change in revision 1.6 to work on more operating systems.
2004-09-15Include buildlink3.mk files for packages needed to satisfy libraryjlam1-1/+12
dependencies. This fixes link failures when the Heimdal dependency is satisfied by the package rather than the builtin Heimdal. Pointed out by Mark Davies in private email. I've intentionally left out including readline/buildlink3.mk. Although it is used by libsl.* and libss.*, those libraries are not actually critical or used by other packages that depend on Heimdal for Kerberos functionality.
2004-09-14Teach builtin.mk about the latest releases of Heimdal and match them upjlam1-1/+4
with NetBSD versions.
2004-09-14Update security/heimdal to 0.6.3. Changes from version 0.6.1 include:jlam5-63/+17
* fix vulnerabilities in ftpd * support for linux AFS /proc "syscalls" * support for RFC3244 (Windows 2000 Kerberos Change/Set Password) in kpasswdd * fix possible KDC denial of service * Fix possible buffer overrun in v4 kadmin (which now defaults to off)
2004-08-22Change the way that legacy USE_* and FOO_USE_* options are convertedjlam1-11/+3
into the bsd.options.mk framework. Instead of appending to ${PKG_OPTIONS_VAR}, it appends to PKG_DEFAULT_OPTIONS. This causes the default options to be the union of PKG_DEFAULT_OPTIONS and any old USE_* and FOO_USE_* settings. This fixes PR pkg/26590.
2004-08-05It's PKG_OPTIONS.heimdal, not PKG_OPTIONS.mit-krb5.jlam1-4/+4
2004-07-30Convert to use bsd.options.mk. The relevant options variable to setjlam1-10/+23
for each package can be determined by invoking: make show-var VARNAME=PKG_OPTIONS_VAR The old options are still supported unless the variable named in PKG_OPTIONS_VAR is set within make(1) (usually via /etc/mk.conf).
2004-07-24Honor VARBASE; bump PKGREVISION.jlam1-2/+3
2004-06-25Cede maintainership to the hard-working people on tech-pkg@NetBSD.org.jlam1-2/+2
2004-06-25Whitespace nits.jlam1-11/+11
2004-04-23mk/bsd.pkg.install.mk now automatically registersreed1-2/+1
the RCD_SCRIPTS rc.d script(s) to the PLIST. This GENERATE_PLIST idea is part of Greg A. Woods' PR #22954. This helps when the RC_SCRIPTS are installed to a different ${RCD_SCRIPTS_EXAMPLEDIR}. (Later, the default RCD_SCRIPTS_EXAMPLEDIR will be changed to be more clear that they are the examples.) These patches also remove the etc/rc.d/ scripts from PLISTs (of packages that use RCD_SCRIPTS). (This also removes now unused references from openssh* makefiles. Note that qmail package has not been changed yet.) I have been doing automatic PLIST registration for RC_SCRIPTS for over a year. Not all of these packages have been tested, but many have been tested and used. Somethings maybe to do: - a few packages still manually install the rc.d scripts to hard-coded etc/rc.d. These need to be fixed. - maybe remove from mk/${OPSYS}.pkg.dist mtree specifications too.
2004-04-01There is no PKGREVISION less than 1. Just remove it in this case.jlam1-2/+1
2004-04-01Update to 0.6.1:joda8-109/+17
* Fixed cross realm vulnerability * Fixed ARCFOUR suppport * kdc: fix denial of service attack * kdc: stop clients from renewing tickets into the future * bug fixes
2004-03-29Note the info file for the new info file handling framework.jlam1-1/+2
2004-03-29Match the template builtin.mk file in bsd.builtin.mk, and make the twojlam1-7/+7
packages that use builtin.mk files (graphics/xpm and pkgtools/x11-links) use the new format correctly.
2004-03-28Fix the Kerberized telnetd and rsh to use the Heimdal binaries forjlam1-8/+26
login and rsh so that the correct programs (and not the system ones) are executed. Bump the PKGREVISION to 3.
2004-03-26Reverse the use of USE_DB185 in bdb.buildlink3.mk -- it defaults tojlam1-2/+1
"yes" and packages that can't use the DB-1.85 API should set it to "no". This makes the native DB the preferred DB if it exists.
2004-03-26PKGREVISION bump after openssl-security-fix-update to 0.9.6m.wiz2-3/+4
Buildlink files: RECOMMENDED version changed to current version.
2004-03-10Convert to use bdb.buildlink3.mk.jlam1-2/+2
2004-03-10Split out the code that deals with checking whether the software isjlam2-111/+87
built-in or not into a separate builtin.mk file. The code to deal checking for built-in software is much simpler to deal with in pkgsrc. The buildlink3.mk file for a package will be of the usual format regardless of the package, which makes it simpler for packagers to update a package. The builtin.mk file for a package must define a single yes/no variable USE_BUILTIN.<pkg> that is used by bsd.buildlink3.mk to decide whether to use the built-in software or to use the pkgsrc software.
2004-02-23Let the rc.d script start kdc detached, as is the default forwiz2-2/+4
the in-tree kdc. From Jukka Salmi in PR 24489, ok'd by lukem@. Bump PKGREVISION to 1.
2004-02-22configure looks for and finds -ltermcap too late in the process for it tomarkd4-2/+63
be linked in when testing -lreadline usability so that test fails on Solaris - so pass that lib into configure at the start via the environment. Also allow optional use of db4 rather that db.
2004-02-18Reorder some lines so that BUILDLINK_USE_BUILTIN.<pkg> set in thejlam1-16/+18
environment overrides all other settings.
2004-02-14LIBTOOL_OVERRIDE and SHLIBTOOL_OVERRIDE are now lists of shell globsjlam1-2/+1
relative to ${WRKSRC}. Remove redundant LIBTOOL_OVERRIDE settings that are automatically handled by the default setting in bsd.pkg.mk.
2004-02-12Create a new variable PREFER_NATIVE that has the opposite semanticsjlam1-3/+13
as PREFER_PKGSRC. Preferences are determined by the most specific instance of the package in either PREFER_PKGSRC or PREFER_NATIVE. If a package is specified in neither or in both variables, then PREFER_PKGSRC has precedence over PREFER_NATIVE.
2004-02-12Reorganize code so that any dependencies are checked as part of decidingjlam1-36/+35
whether the software is built-in or not. This facilitates implementing the forthcoming PKGSRC_NATIVE variable.
2004-02-06If we're passing through MAKEFLAGS variables whose values may containjlam1-4/+4
spaces, use the :Q modifier instead of double-quoting the value. This avoids breakage when executing the just-in-time su targets.
2004-02-05Make PREFER_PKGSRC just yes/no or a list of packages. This makes itjlam1-5/+3
simpler to understand.
2004-02-05Rename BUILDLINK_PREFER_PKGSRC to PREFER_PKGSRC so that we can use itsjlam1-5/+4
value outside of buildlink-related files.
2004-02-05Support a new global variable:jlam1-1/+9
BUILDLINK_PREFER_PKGSRC This variable determines whether or not to prefer the pkgsrc versions of software that is also present in the base system. This variable is multi-state: defined, or "yes" always prefer the pkgsrc versions not defined, or "no" only use the pkgsrc versions if needed by dependency requirements This can also take a list of packages for which to prefer the pkgsrc-installed software. The package names may be found by consulting the value added to BUILDLINK_PACKAGES in the buildlink[23].mk files for that package.
2004-02-02Pretend that all versions of NetBSD newer than 1.6U have Heimdal-0.6.jlam1-2/+2
2004-01-24Support BUILDLINK_DEPENDS.<pkg> being a list of values.jlam1-5/+9
2004-01-15Support a new yes/no variable "KERBEROS_PREFIX_CMDS" that can be used byjlam2-19/+30
Kerberos implementation packages to decide whether to prefix certain commands with a "k" to differentiate it from system tools with similar names. KERBEROS_PREFIX_CMDS defaults to "no".
2004-01-13Fix build with gcc3.markd2-1/+17
2004-01-13whitespace.jlam1-9/+9
2004-01-11Note CONFLICT with forthcoming mit-krb5 package.jlam1-1/+3
2004-01-10Add a rc.d script to start the kdc daemon on the Kerberos master server.jlam2-1/+26
2004-01-10Back out previous. This doesn't work as expected and needs more thought.jlam1-4/+2
2004-01-10The buildlink3 wrappers automatically remove -I/usr/include/* from thejlam1-2/+4
command line options. We need -I/usr/include/krb5 to build against heimdal, so symlink the headers in /usr/include/krb5 into ${BUILDLINK_DIR} so they can be found.
2004-01-10Initial import of heimdal-0.6 into security/heimdal.jlam9-0/+718
Heimdal is a free implementation of Kerberos 5. Kerberos is a system for authenticating users and services on a network. It is built upon the assumption that the network is "unsafe". Kerberos is a trusted third-party service. That means that there is a third party (the Kerberos server) that is trusted by all the entities on the network (users and services, usually called "principals"). All principals share a secret password (or key) with the Kerberos server and this enables principals to verify that the messages from the Kerberos server are authentic. Thus trusting the Kerberos server, users and services can authenticate each other.