pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/security/mit-krb5 mit-krb5: updated to 1.16.2



details:   https://anonhg.NetBSD.org/pkgsrc/rev/276a779344ad
branches:  trunk
changeset: 316895:276a779344ad
user:      adam <adam%pkgsrc.org@localhost>
date:      Fri Dec 21 15:45:13 2018 +0000

description:
mit-krb5: updated to 1.16.2

Major changes in 1.16.2

This is a bug fix release.

Fix bugs with concurrent use of MEMORY ccache handles.
Fix a KDC crash when falling back between multiple OTP tokens configured for a principal entry.
Fix memory bugs when gss_add_cred() is used to create a new credential, and fix a bug where it ignores the desired_name.
Fix the behavior of gss_inquire_cred_by_mech() when the credential does not contain an element of the requested mechanism.
Make cross-realm S4U2Self requests work on the client when no default_realm is configured.
Add a kerberos(7) man page containing documentation of the environment variables that affect Kerberos programs.

diffstat:

 security/mit-krb5/Makefile                                     |  23 +-
 security/mit-krb5/PLIST                                        |  10 +-
 security/mit-krb5/distinfo                                     |  24 +-
 security/mit-krb5/patches/patch-aa                             |  78 ----------
 security/mit-krb5/patches/patch-aclocal.m4                     |  78 ++++++++++
 security/mit-krb5/patches/patch-ae                             |  36 ----
 security/mit-krb5/patches/patch-aj                             |  14 -
 security/mit-krb5/patches/patch-al                             |  22 --
 security/mit-krb5/patches/patch-build-tools_krb5-config.in     |  14 +
 security/mit-krb5/patches/patch-cf                             |  15 -
 security/mit-krb5/patches/patch-cg                             |  15 -
 security/mit-krb5/patches/patch-cj                             |  19 --
 security/mit-krb5/patches/patch-config_libobj.in               |  36 ++++
 security/mit-krb5/patches/patch-config_libpriv.in              |  19 ++
 security/mit-krb5/patches/patch-lib_gssapi_Makefile.in         |  15 +
 security/mit-krb5/patches/patch-lib_gssapi_krb5_import__name.c |  22 ++
 security/mit-krb5/patches/patch-lib_kdb_Makefile.in            |  15 +
 17 files changed, 224 insertions(+), 231 deletions(-)

diffs (truncated from 610 to 300 lines):

diff -r cc16cb27416a -r 276a779344ad security/mit-krb5/Makefile
--- a/security/mit-krb5/Makefile        Fri Dec 21 15:37:38 2018 +0000
+++ b/security/mit-krb5/Makefile        Fri Dec 21 15:45:13 2018 +0000
@@ -1,15 +1,9 @@
-# $NetBSD: Makefile,v 1.98 2018/08/22 09:46:19 wiz Exp $
+# $NetBSD: Makefile,v 1.99 2018/12/21 15:45:13 adam Exp $
 
-DISTNAME=      krb5-1.16.1
+DISTNAME=      krb5-1.16.2
 PKGNAME=       mit-${DISTNAME}
-PKGREVISION=   2
 CATEGORIES=    security
 MASTER_SITES=  http://web.mit.edu/kerberos/dist/krb5/${PKGVERSION_NOREV:R}/
-EXTRACT_SUFX=  .tar.gz
-DISTFILES=     ${DISTNAME}${EXTRACT_SUFX}
-
-#PATCH_SITES=  http://web.mit.edu/kerberos/advisories/
-#PATCHFILES=   2014-001-patch.txt
 
 MAINTAINER=    tez%NetBSD.org@localhost
 HOMEPAGE=      http://web.mit.edu/kerberos/
@@ -29,7 +23,7 @@
 USE_LANGUAGES=         c c++
 USE_LIBTOOL=           yes
 GNU_CONFIGURE=         yes
-USE_TOOLS+=            autoconf gzip m4 perl msgfmt
+USE_TOOLS+=            autoconf gzip m4 msgfmt perl
 .if ${OPSYS} == "SunOS"
 USE_TOOLS+=            bison
 .else
@@ -52,7 +46,7 @@
 CONFIGURE_ARGS+=       --enable-pkgsrc-libtool
 CONFIGURE_ARGS+=       --without-system-verto
 CONFIGURE_ARGS+=       --disable-aesni
-CONFIGURE_ENV+=                BUILDLINK_PREFIX_OPENSSL=${BUILDLINK_PREFIX.openssl:Q}
+CONFIGURE_ENV+=                BUILDLINK_PREFIX_OPENSSL=${BUILDLINK_PREFIX.openssl}
 CONFIGURE_ENV+=                DEFKTNAME=FILE:${PKG_SYSCONFDIR}/krb5.keytab
 MAKE_ENV+=             ROOT_USER=${ROOT_USER}
 LIBS.SunOS=            -lrt
@@ -67,18 +61,17 @@
 
 INSTALLATION_DIRS=     bin include/gssapi include/gssrpc ${PKGINFODIR} \
                        ${PKGMANDIR}/man1 ${PKGMANDIR}/man5             \
-                       ${PKGMANDIR}/man8 sbin share/examples/krb5      \
-                       share/et share/examples/rc.d share/gnats        \
+                       ${PKGMANDIR}/man7 ${PKGMANDIR}/man8             \
+                       sbin share/examples/krb5 share/et               \
+                       share/examples/rc.d share/gnats                 \
                        lib/krb5/plugins/kdb lib/krb5/plugins/preauth   \
                        lib/krb5/plugins/tls include/krb5 include/kadm5 \
                        lib/pkgconfig
 
 pre-configure:
-       @${ECHO} "=> Generating configure";                             \
-       cd ${WRKSRC}; autoconf -I ${WRKSRC} -f;
+       cd ${WRKSRC} && autoconf -I ${WRKSRC} -f
 
 post-install:
-       @${ECHO} "=> Installing info files";                            \
        cd ${WRKDIR}/${DISTNAME}/doc;                                   \
        for f in *.info *.info-[0-9]*; do                               \
                ${TEST} ! -f "$$f" ||                                   \
diff -r cc16cb27416a -r 276a779344ad security/mit-krb5/PLIST
--- a/security/mit-krb5/PLIST   Fri Dec 21 15:37:38 2018 +0000
+++ b/security/mit-krb5/PLIST   Fri Dec 21 15:45:13 2018 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.19 2018/06/15 20:46:01 tez Exp $
+@comment $NetBSD: PLIST,v 1.20 2018/12/21 15:45:13 adam Exp $
 bin/compile_et
 bin/gss-client
 bin/k5srvutil
@@ -50,8 +50,8 @@
 include/krb5/hostrealm_plugin.h
 include/krb5/kadm5_auth_plugin.h
 include/krb5/kadm5_hook_plugin.h
+include/krb5/kdcpolicy_plugin.h
 include/krb5/kdcpreauth_plugin.h
-include/krb5/kdcpolicy_plugin.h
 include/krb5/krb5.h
 include/krb5/localauth_plugin.h
 include/krb5/locate_plugin.h
@@ -62,8 +62,8 @@
 include/verto-module.h
 include/verto.h
 lib/krb5/plugins/kdb/libdb2.la
+lib/krb5/plugins/preauth/libotp.la
 lib/krb5/plugins/preauth/libpkinit.la
-lib/krb5/plugins/preauth/libotp.la
 lib/krb5/plugins/tls/libk5tls.la
 lib/libcom_err.la
 lib/libgssapi_krb5.la
@@ -77,7 +77,6 @@
 lib/libkrad.la
 lib/libkrb5.la
 lib/libkrb5support.la
-@comment lib/libverto-k5ev.la
 lib/libverto.la
 lib/pkgconfig/gssrpc.pc
 lib/pkgconfig/kadm-client.pc
@@ -107,6 +106,7 @@
 man/man5/kadm5.acl.5
 man/man5/kdc.conf.5
 man/man5/krb5.conf.5
+man/man7/kerberos.7
 man/man8/kadmin.local.8
 man/man8/kadmind.8
 man/man8/kdb5_ldap_util.8
@@ -133,5 +133,5 @@
 share/examples/krb5/kdc.conf
 share/examples/krb5/krb5.conf
 share/examples/krb5/services.append
+share/locale/de/LC_MESSAGES/mit-krb5.mo
 share/locale/en_US/LC_MESSAGES/mit-krb5.mo
-share/locale/de/LC_MESSAGES/mit-krb5.mo
diff -r cc16cb27416a -r 276a779344ad security/mit-krb5/distinfo
--- a/security/mit-krb5/distinfo        Fri Dec 21 15:37:38 2018 +0000
+++ b/security/mit-krb5/distinfo        Fri Dec 21 15:45:13 2018 +0000
@@ -1,19 +1,16 @@
-$NetBSD: distinfo,v 1.65 2018/07/16 10:26:40 jperkin Exp $
+$NetBSD: distinfo,v 1.66 2018/12/21 15:45:13 adam Exp $
 
-SHA1 (krb5-1.16.1.tar.gz) = 8353f2d900a7d52499c7c2605d5e295f71dd5e67
-RMD160 (krb5-1.16.1.tar.gz) = 26a423032841a67974d377ad65d7361b51aa7058
-SHA512 (krb5-1.16.1.tar.gz) = fa4ec14a4ffe690861e2dd7ea39d7698af2058ce181bb733ea891f80279f4dde4bb891adec5ccb0eaddf737306e6ceb1fe3744a2946e6189a7d7d2dd3bc5ba84
-Size (krb5-1.16.1.tar.gz) = 9477480 bytes
+SHA1 (krb5-1.16.2.tar.gz) = 6d6ef205194be386fb5f4e6bef32cb9fc79e853b
+RMD160 (krb5-1.16.2.tar.gz) = 76188113d13eb9667d6057fe23d653a3d09d4817
+SHA512 (krb5-1.16.2.tar.gz) = 738c071a90e0f38680bb17bdcf950310bc4549f3cb851e1d34de11239ae88178e6ee1a5e5d48c6d3efef544339b07d22dba5347dd763a4266d8d4df7cf47afc9
+Size (krb5-1.16.2.tar.gz) = 9652415 bytes
 SHA1 (patch-Makefile.in) = adacbcb9d569107e6b7af9b0e7ee177f79a9103c
-SHA1 (patch-aa) = f94e587c4b3e15bcf7dde215cf146ba077202218
-SHA1 (patch-ae) = c7395b9de5baf6612b8787fad55dbc051a680bfd
-SHA1 (patch-aj) = 4ab922df1d86d86f9ef043f2c5cdf048c0477d3a
-SHA1 (patch-al) = 7445639b82eadf9b1feb1448c1654fa6ddc937aa
-SHA1 (patch-cf) = 806b089d3b12ea9a17c6caab59cbdeb6ec17bbc3
-SHA1 (patch-cg) = 0c45e34ea8b5d0270c386d430b0d37469e8440ea
-SHA1 (patch-cj) = 78342f649f8e9d3a3b5a4f83e65b6c46f589586b
+SHA1 (patch-aclocal.m4) = f94e587c4b3e15bcf7dde215cf146ba077202218
+SHA1 (patch-build-tools_krb5-config.in) = 4ab922df1d86d86f9ef043f2c5cdf048c0477d3a
 SHA1 (patch-config_lib.in) = 974db26486b3239e4fcd53be7280b32c802f6007
 SHA1 (patch-config_libnover.in) = 53f539cf98a961483e2b4ccf278c7376dbcf52d9
+SHA1 (patch-config_libobj.in) = c7395b9de5baf6612b8787fad55dbc051a680bfd
+SHA1 (patch-config_libpriv.in) = 78342f649f8e9d3a3b5a4f83e65b6c46f589586b
 SHA1 (patch-config_pre.in) = 255973132db9327190211214c3e33b4551bd283b
 SHA1 (patch-config_shlib.conf) = c47a647307e7d883e7c22528b7b0f5ad038cbcb3
 SHA1 (patch-configure.in) = 2b7de47c4da223670566c70ce1a9eaa27d49a984
@@ -21,6 +18,9 @@
 SHA1 (patch-kadmin_cli_ss_wrapper.c) = e32e6180f8d508cb2eb18489ce2fef0a1ad0f51d
 SHA1 (patch-lib_apputils_Makefile.in) = 085004041a2bb8c4bb3074c2e71e71f22f4f06d7
 SHA1 (patch-lib_apputils_udppktinfo.c) = 47ac861181faebfe5f95c28be329ce917ece872c
+SHA1 (patch-lib_gssapi_Makefile.in) = 806b089d3b12ea9a17c6caab59cbdeb6ec17bbc3
+SHA1 (patch-lib_gssapi_krb5_import__name.c) = 7445639b82eadf9b1feb1448c1654fa6ddc937aa
+SHA1 (patch-lib_kdb_Makefile.in) = 0c45e34ea8b5d0270c386d430b0d37469e8440ea
 SHA1 (patch-lib_kdb_kdb__log.c) = 87052d7940db0f5a41ffce250c19c0b338b37d60
 SHA1 (patch-lib_krb5_asn.1_asn1buf.h) = 74d7d172ec4c8d7f68a093befc6b40c99b119e37
 SHA1 (patch-lib_krb5_ccache_Makefile.in) = 330ae21ec3b290ae16478c2c49a138acac5bf2fd
diff -r cc16cb27416a -r 276a779344ad security/mit-krb5/patches/patch-aa
--- a/security/mit-krb5/patches/patch-aa        Fri Dec 21 15:37:38 2018 +0000
+++ /dev/null   Thu Jan 01 00:00:00 1970 +0000
@@ -1,78 +0,0 @@
-$NetBSD: patch-aa,v 1.6 2018/06/15 20:46:01 tez Exp $
-
-Don't make sunpro warnings into errors (warnings are seen in gcc too)
-Add --enable-pkgsrc-libtool option
-
---- aclocal.m4.orig    2018-05-03 14:34:47.000000000 +0000
-+++ aclocal.m4
-@@ -633,7 +633,7 @@ else
-     if test "x$krb5_ac_warn_cflags_set" = xset ; then
-       AC_MSG_NOTICE(not adding extra warning flags because WARN_CFLAGS was set)
-     else
--      WARN_CFLAGS="-errtags=yes -errwarn=E_BAD_PTR_INT_COMBINATION,E_BAD_PTR_INT_COMB_ARG,E_PTR_TO_VOID_IN_ARITHMETIC,E_NO_IMPLICIT_DECL_ALLOWED,E_ATTRIBUTE_PARAM_UNDEFINED"
-+      WARN_CFLAGS="-errtags=yes"
-     fi
-     if test "x$krb5_ac_warn_cxxflags_set" = xset ; then
-       AC_MSG_NOTICE(not adding extra warning flags because WARN_CXXFLAGS was set)
-@@ -1068,6 +1068,9 @@ AC_SUBST(SHLIBVEXT)
- AC_SUBST(SHLIBSEXT)
- AC_SUBST(DEPLIBEXT)
- AC_SUBST(PFLIBEXT)
-+AC_SUBST(LALIBEXT)
-+AC_SUBST(LALIB_EXPFLAGS)
-+AC_SUBST(LIBTOOL_TAIL)
- AC_SUBST(LIBINSTLIST)
- AC_SUBST(DYNOBJEXT)
- AC_SUBST(MAKE_DYNOBJ_COMMAND)
-@@ -1085,6 +1088,7 @@ AC_SUBST(OBJLISTS)
- AC_SUBST(STOBJEXT)
- AC_SUBST(SHOBJEXT)
- AC_SUBST(PFOBJEXT)
-+AC_SUBST(LAOBJEXT)
- AC_SUBST(PICFLAGS)
- AC_SUBST(PROFFLAGS)])
- 
-@@ -1199,11 +1203,42 @@ else
-       KDB5_PLUGIN_DEPLIBS=
-       KDB5_PLUGIN_LIBS=
- fi
-+DEPSTLIBEXT=$STLIBEXT
-+AC_SUBST(DEPSTLIBEXT)
- CC_LINK="$CC_LINK_SHARED"
- CXX_LINK="$CXX_LINK_SHARED"
- 
-+# Check whether to build libtool archives.
-+AC_ARG_ENABLE([pkgsrc-libtool],
-+[  --enable-pkgsrc-libtool build libtool archives],
-+[
-+      case $enableval in
-+      /*)     LIBTOOL=$enableval ;;
-+      *)      LIBTOOL=libtool ;;
-+      esac
-+      AC_MSG_RESULT([Enabling libtool archives.])
-+      LIBLIST='lib$(LIBBASE)$(LALIBEXT)'
-+      LIBLINKS='$(TOPLIBD)/lib$(LIBBASE)$(LALIBEXT)'
-+      OBJLISTS=OBJS.LA
-+      LIBINSTLIST=install-libtool
-+      DEPLIBEXT=$LALIBEXT
-+      DEPSTLIBEXT=$LALIBEXT
-+      PLUGIN='lib$(LIBBASE)$(LALIBEXT)'
-+      PLUGININST=install-libtool
-+      CC_LINK="$CC_LINK_LIBTOOL"
-+      INSTALL_LIBTOOL='$(LIBTOOL) --mode=install'
-+      if test "$krb5_force_static" = yes; then
-+              LIBTOOL_TAIL=
-+      fi
-+], [
-+      LIBTOOL=:
-+      INSTALL_LIBTOOL=
-+])
-+AC_SUBST(LIBTOOL)
-+AC_SUBST(INSTALL_LIBTOOL)
-+
- if test -z "$LIBLIST"; then
--      AC_MSG_ERROR([must enable one of shared or static libraries])
-+      AC_MSG_ERROR([must enable one of shared, libtool or static libraries])
- fi
- 
- # Check whether to build profiled libraries.
diff -r cc16cb27416a -r 276a779344ad security/mit-krb5/patches/patch-aclocal.m4
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/security/mit-krb5/patches/patch-aclocal.m4        Fri Dec 21 15:45:13 2018 +0000
@@ -0,0 +1,78 @@
+$NetBSD: patch-aclocal.m4,v 1.1 2018/12/21 15:45:13 adam Exp $
+
+Don't make sunpro warnings into errors (warnings are seen in gcc too)
+Add --enable-pkgsrc-libtool option
+
+--- aclocal.m4.orig    2018-05-03 14:34:47.000000000 +0000
++++ aclocal.m4
+@@ -633,7 +633,7 @@ else
+     if test "x$krb5_ac_warn_cflags_set" = xset ; then
+       AC_MSG_NOTICE(not adding extra warning flags because WARN_CFLAGS was set)
+     else
+-      WARN_CFLAGS="-errtags=yes -errwarn=E_BAD_PTR_INT_COMBINATION,E_BAD_PTR_INT_COMB_ARG,E_PTR_TO_VOID_IN_ARITHMETIC,E_NO_IMPLICIT_DECL_ALLOWED,E_ATTRIBUTE_PARAM_UNDEFINED"
++      WARN_CFLAGS="-errtags=yes"
+     fi
+     if test "x$krb5_ac_warn_cxxflags_set" = xset ; then
+       AC_MSG_NOTICE(not adding extra warning flags because WARN_CXXFLAGS was set)
+@@ -1068,6 +1068,9 @@ AC_SUBST(SHLIBVEXT)
+ AC_SUBST(SHLIBSEXT)
+ AC_SUBST(DEPLIBEXT)
+ AC_SUBST(PFLIBEXT)
++AC_SUBST(LALIBEXT)
++AC_SUBST(LALIB_EXPFLAGS)
++AC_SUBST(LIBTOOL_TAIL)
+ AC_SUBST(LIBINSTLIST)
+ AC_SUBST(DYNOBJEXT)
+ AC_SUBST(MAKE_DYNOBJ_COMMAND)
+@@ -1085,6 +1088,7 @@ AC_SUBST(OBJLISTS)
+ AC_SUBST(STOBJEXT)
+ AC_SUBST(SHOBJEXT)
+ AC_SUBST(PFOBJEXT)
++AC_SUBST(LAOBJEXT)
+ AC_SUBST(PICFLAGS)
+ AC_SUBST(PROFFLAGS)])
+ 
+@@ -1199,11 +1203,42 @@ else
+       KDB5_PLUGIN_DEPLIBS=
+       KDB5_PLUGIN_LIBS=
+ fi
++DEPSTLIBEXT=$STLIBEXT
++AC_SUBST(DEPSTLIBEXT)
+ CC_LINK="$CC_LINK_SHARED"
+ CXX_LINK="$CXX_LINK_SHARED"
+ 
++# Check whether to build libtool archives.
++AC_ARG_ENABLE([pkgsrc-libtool],
++[  --enable-pkgsrc-libtool build libtool archives],
++[
++      case $enableval in
++      /*)     LIBTOOL=$enableval ;;
++      *)      LIBTOOL=libtool ;;
++      esac
++      AC_MSG_RESULT([Enabling libtool archives.])
++      LIBLIST='lib$(LIBBASE)$(LALIBEXT)'
++      LIBLINKS='$(TOPLIBD)/lib$(LIBBASE)$(LALIBEXT)'
++      OBJLISTS=OBJS.LA
++      LIBINSTLIST=install-libtool
++      DEPLIBEXT=$LALIBEXT
++      DEPSTLIBEXT=$LALIBEXT



Home | Main Index | Thread Index | Old Index