This is a port of Cyrus SASL (Simple Authentication and Security Layer).
SASL is a method for adding authentication support to connection-based
protocols. To use SASL, a protocol includes a command for identifying and
authenticating a user to a server and for optionally negotiating protection of
subsequent protocol interactions. If its use is negotiated, a security layer is
inserted between the protocol and the connection.
The following mechanisms are included in this distribution: ANONYMOUS,
CRAM-MD5, DIGEST-MD5, GSSAPI (MIT Kerberos 5 or Heimdal Kerberos 5), KERBEROS_V4
and PLAIN.
The library can use a Berkeley DB, gdbm or ndbm file on the server side
to store per-user authentication secrets. The utility saslpasswd has been
included for adding authentication secrets to the file.
PLAIN can either check /etc/passwd, Kerberos V4, use PAM, or the sasl
secrets database. By default PAM is used if PAM is found, then Kerberos,
finally /etc/passwd (non-shadow). This is tweakable in the configuration file.
Please see "${PREFIX}/share/doc/sasl/sysadmin.html".
The sample directory contains two programs which provide a reference for
using the library, as well as making it easy to test a mechanism on the command
line. See "${PREFIX}/share/doc/sasl/programming.html" for more information.
WWW: http://cyrusimap.web.cmu.edu/
- s,INSTALLS_SHLIB,USE_LDCONFIG,g
- these include security/ sysutils/ textproc/ maintained by ports@
PR: ports/101916
Submitted by: Gea-Suan Lin <gslin_AT_gslin dot org>
Remove the FreeBSD KEYWORD from all rc.d scripts where it appears.
We have not checked for this KEYWORD for a long time now, so this
is a complete noop, and thus no PORTREVISION bump. Removing it at
this point is mostly for pedantic reasons, and partly to avoid
perpetuating this anachronism by copy and paste to future scripts.
Mass-conversion to the USE_AUTOTOOLS New World Order. The code present
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.
Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.
Preliminary documentation can be found at:
http://people.FreeBSD.org/~ade/autotools.txt
which is in the process of being SGMLized before introduction into the
Porters Handbook.
Light blue touch-paper. Run.
Remove trailing backslash from MASTER_SITES which caused the
MASTER_SITE_SUBDIR= line to be treated as 4 more sites.
Add slash to MASTER_SITE_SUBDIR using the group syntax.
(The file's not there anyway, but at least it's looking
in the right spot now.)
Apply a big libtool patch to allow porters to use the libtool installed by
the libtoolX ports instead of the one included with each port. Ports that
set USE_LIBTOOL_VER=X will now use the ports version of libtool instead of
the included version. To restore previous behavior, use the new macro,
USE_INC_LIBTOOL_VER. Both macros accept the same argument: a libtool version.
For example, to use the ports version of libtool-1.5, add the following to
your Makefile:
USE_LIBTOOL_VER= 15
To use the included version of libtool with extra hacks provided by
libtool-1.5, add the following to your Makefile:
USE_INC_LIBTOOL_VER= 15
With this change, ports that had to add additional libtool hacks to prevent
.la files from being installed or to fix certain threading issues can now
delete those hacks (after appropriate testing, of course).
PR: 63944
Based on work by:eik and marcus
Approved by: ade (autotools maintainer)
Tested by: kris on pointyhat
Bound to be hidden problems: You bet
Use maintainer's other (older?) e-mail address, due to bounced e-mail:
<FreeBSD-Maintainer@westbend.net>: host pop.hnet.net[65.114.87.100] said: 550
5.1.1 <FreeBSD-Maintainer@westbend.net> User unknown; rejecting
Obtained from: PR 61650
Whoa there, boy, that's a mighty big commit y'all have there...
Begin autotools sanitization sequence by requiring ports to explicitly
specify which version of {libtool,autoconf,automake} they need, erasing
the concept of a "system default".
For ports-in-waiting:
USE_LIBTOOL=YES -> USE_LIBTOOL_VER=13
USE_AUTOCONF=YES -> USE_AUTOCONF_VER=213
USE_AUTOMAKE=YES -> USE_AUTOMAKE_VER=14
Ports attempting to use the old style system after June 1st 2004 will be
sorely disappointed.
- Fix startup scripts to not override settings found
in /etc/rc.conf upon startup.
- Pass maintainership to submitter
PR: 63289
Submitted by: Scot W. Hetzel <freebsd-maintainer@westbend.net>
Fix non-default dependency on openldap2[012] which is broken by splitting.
# I'm not bumped port revision of them because this should not affect
# packages built on bento...
Add better identification for configuration dialog, especially
nice to have in with portupgrade
PR: 54299
Submitted by: Mark Linimon <linimon@lonesome.com>
Approved by: maintainer timeout (> 1 month)
* Fix some problems with building the Kerberos IV and 5 mechs.
* Made the port to optionally not build the mechs, define
WITHOUT_[ANONYMOUS,CRAM,DIGEST,LOGIN,OTP,GSSAPI,PLAIN].
* The Kerberos IV case is special, as we can use the base kerberos 4x
(<=5.0-RELEASE), or use the security/krb4 port.
WITH_KERBEROS4 - use security/krb4 port
if <=5.0-RELEASE, use krb4 port only if /usr/lib/libkrb.a
doesn't exist
WITHOUT_KERBEROS4 - disables using the base systems /usr/lib/libkrb.a
(<=5.0), if it exists and MAKE_KERBEROS4 defined in /etc/make.conf
* Changed the combined rcNG/rcOG scripts, so that the defaults are at the top
of the rc.d script and not in an external file to the script.
PR: 51505
Submitted by: maintainer
When sending mail localy on a system compiled woth SASL AUTH, the
sendmail mail submission program may log the following error on the
sasldb file:
error: safesasl(/usr/local/etc/sasldb) failed: Group readable file
Pine by default is using SMTP, and therfore SMTP AUTH if compiled
into sendmail. To disable SMTP AUTH we need to define DAEMON_OPTIONS
for the loopback interface.
PR: ports/51680
Submitted by: Scot W. Hetzel <hetzels@westbend.net>
security/cyrus-sasl: Bento fails to build libkerberos + Upgrade
Bento fails to proberly package the port on -CURRENT due
to -CURRENT no longer has libdes.* as the des functions
have been moved to the libcrypto.* library.
PR: 48442
Submitted by: Scot W. Hetzel <hetzels@westbend.net>
add an example PAM file for saslauthd and pwcheck_pam daemons
update the Sendmail.README file to include instructions for
using the security/cyrus-sasl2 port.
PR: 42153
Submitted by: maintainer
BerkeleyDB cleanup - stage 2
Update databases/db3 to 3.3.11, and fix the few ports that need sorting
after the shlib version update, and a slight API change from 3.2.x->3.3.x
Include <sys/types.h> before including <security/pam_appl.h> and
unbreak for -current's PAM.
Approved by: "Scot W. Hetzel" <hetzels@westbend.net> (MAINTAINER)
- Chase checksum for sasl-1.5.27-ldap-ssl-filter-mysql-patch4.tgz
author fixed bug in patch but didn't increment version.
- Fix problem when openldap v1 is selected.
- Bump PORTREVISION
PR: ports/39800
Submitted by: maintainer
Use ${ECHO_CMD} instead of ${ECHO} where you mean the echo command; the ECHO
macro is set to "echo" by default, but it is set to "true" if make(1) is
invoked with the -s option while ECHO_CMD is always set to the echo command.
- Change /var/pwcheck permissions so Postfix can use pwcheck for SASL
Authentication. - Update MySQL & LDAP Authentication Methods - Correct bento
warning for extra file (Sendmail.conf). - Correct mysql detection code in
configure.sasl, and use LIB_DEPENDS for db3.
Change PKGDIR from pkg/ to . Also fix places where ${PKGDIR} is spelled out
(many of which are ${PKGDIR}/MESSAGE -> ${PKGMESSAGE} type fixes that
shouldn't have been necessary) and the string "/pkg/" appear.
Update all ports using OpenSSL and RSA to work without rsaref since it is no
longer required. Apologies to the various maintainers whom I did not yet hear
back from, but the ports freeze is coming up in a few hours and I will be
verifying all of these ports on a 4.1 machine myself to catch any problems.
