Port details |
- krb5-115 MIT implementation of RFC 4120 network authentication service
- 1.15.5_2 security
=0 1.15.5_2Version of this port present on the latest quarterly branch.
- DEPRECATED: EOL one year after the release of krb5 1.17
This port expired on: 2020-01-31
- Maintainer: cy@FreeBSD.org
- Port Added: 2016-12-03 00:54:32
- Last Update: 2020-01-31 13:54:08
- SVN Revision: 524704
- License: MIT
- WWW:
- http://web.mit.edu/kerberos/
- Description:
- Kerberos V5 is an authentication system developed at MIT.
WWW: http://web.mit.edu/kerberos/
Abridged from the User Guide:
Under Kerberos, a client sends a request for a ticket to the
Key Distribution Center (KDC). The KDC creates a ticket-granting
ticket (TGT) for the client, encrypts it using the client's
password as the key, and sends the encrypted TGT back to the
client. The client then attempts to decrypt the TGT, using
its password. If the client successfully decrypts the TGT, it
keeps the decrypted TGT, which indicates proof of the client's
identity. The TGT permits the client to obtain additional tickets,
which give permission for specific services.
Since Kerberos negotiates authenticated, and optionally encrypted,
communications between two points anywhere on the internet, it
provides a layer of security that is not dependent on which side of a
firewall either client is on.
The Kerberos V5 package is designed to be easy to use. Most of the
commands are nearly identical to UNIX network programs you are already
used to. Kerberos V5 is a single-sign-on system, which means that you
have to type your password only once per session, and Kerberos does
the authenticating and encrypting transparently.
Jacques Vidrine <n@nectar.com>
-
cgit ¦ GitHub ¦ GitHub ¦ GitLab ¦
- Manual pages:
-
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- krb5-115>0:security/krb5-115
- Conflicts:
- CONFLICTS:
- heimdal-[0-9]*
- srp-[0-9]*
- krb5-11[3467]-[0-9]*
- krb5-1.[0-9]*
- krb5-devel-*
- CONFLICTS_BUILD:
- No installation instructions:
- This port has been deleted.
- PKGNAME: krb5-115
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1546910449
SHA256 (krb5-1.15.5.tar.gz) = 78881e2d3a0f853f920406e639020fe5cfd2f068b87a9a80dc1a2bd506e33eba
SIZE (krb5-1.15.5.tar.gz) = 9536122
No package information for this port in our database- Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link:
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- gmake : devel/gmake
- libtool : devel/libtool
- pkgconf>=1.3.0_1 : devel/pkgconf
- msgfmt : devel/gettext-tools
- perl5>=5.28.r1<5.29 : lang/perl5.28
- Library dependencies:
-
- libintl.so : devel/gettext-runtime
- libreadline.so.8 : devel/readline
- There are no ports dependent upon this port
Configuration Options:
- ===> The following configuration options are available for krb5-115-1.15.5_2:
DNS_FOR_REALM=off: Enable DNS lookups for Kerberos realm names
EXAMPLES=on: Build and/or install examples
KRB5_HTML=on: Install krb5 HTML documentation
KRB5_PDF=on: Install krb5 PDF documentation
LDAP=off: LDAP protocol support
NLS=on: Native Language Support
====> Command line editing for kadmin and ktutil: you can only select none or one of them
READLINE=on: Command line editing via libreadline
READLINE_PORT=off: Command line editing via devel/readline
LIBEDIT=off: Command line editing via libedit
===> Use 'make config' to modify these settings
- Options name:
- N/A
- USES:
- cpe gmake localbase perl5 libtool:build gssapi:bootstrap,mit pkgconfig ssl gettext-runtime gettext readline
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
|
Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
Commit | Credits | Log message |
1.15.5_2 31 Jan 2020 13:54:08 |
rene |
Remove expired ports:
2020-01-31 www/py-dj21-django-auth-ldap: Django 2.1 is now End-of-Life (Since
December 2 2019) and no longer supported. Switch to Django 2.2+ versions of this
port as soon as possible
2020-01-31 www/py-dj21-django-crispy-forms: Django 2.1 is now End-of-Life (Since
December 2 2019) and no longer supported. Switch to Django 2.2+ versions of this
port as soon as possible
2020-01-31 www/sogo3-activesync: Deprecated, replaced by www/sogo4
2020-01-31 devel/sope3: Deprecated, replaced by devel/sope4
2020-01-31 www/py-dj21-django-mptt: Django 2.1 is now End-of-Life (Since
December 2 2019) and no longer supported. Switch to Django 2.2+ versions of this
port as soon as possible
2020-01-31 graphics/py-willow11: Use graphics/py-willow instead
2020-01-31 www/py-dj21-django-tables2: Django 2.1 is now End-of-Life (Since
December 2 2019) and no longer supported. Switch to Django 2.2+ versions of this
port as soon as possible
2020-01-31 www/py-dj21-django-debug-toolbar: Django 2.1 is now End-of-Life
(Since December 2 2019) and no longer supported. Switch to Django 2.2+ versions
of this port as soon as possible
2020-01-31 security/krb5-115: EOL one year after the release of krb5 1.17
2020-01-31 www/py-dj21-django-taggit: Django 2.1 is now End-of-Life (Since
December 2 2019) and no longer supported. Switch to Django 2.2+ versions of this
port as soon as possible
2020-01-31 www/py-dj21-django-cors-headers: Django 2.1 is now End-of-Life (Since
December 2 2019) and no longer supported. Switch to Django 2.2+ versions of this
port as soon as possible
2020-01-31 graphics/py-imgurpython: No longer supported by upstream
2020-01-31 www/py-dj21-django-taggit-serializer: Django 2.1 is now End-of-Life
(Since December 2 2019) and no longer supported. Switch to Django 2.2+ versions
of this port as soon as possible
2020-01-31 www/py-dj21-django-filter: Django 2.1 is now End-of-Life (Since
December 2 2019) and no longer supported. Switch to Django 2.2+ versions of this
port as soon as possible
2020-01-31 www/py-dj21-django-timezone-field: Django 2.1 is now End-of-Life
(Since December 2 2019) and no longer supported. Switch to Django 2.2+ versions
of this port as soon as possible
2020-01-31 devel/py-xarray011: Use devel/py-xarray instead
2020-01-31 www/py-django-modelcluster4: Use www/py-django-modelcluster instead
2020-01-31 devel/py-semantic_version26: Use devel/py-semantic_version instead
2020-01-31 www/py-dj21-django-js-asset: Django 2.1 is now End-of-Life (Since
December 2 2019) and no longer supported. Switch to Django 2.2+ versions of this
port as soon as possible
2020-01-31 www/py-dj21-drf-yasg: Django 2.1 is now End-of-Life (Since December 2
2019) and no longer supported. Switch to Django 2.2+ versions of this port as
soon as possible |
1.15.5_2 03 May 2019 12:50:53 |
cy |
Fix build with libressl 2.9.1.
PR: 237621
Reported by: many
MFH: 2019Q2 |
1.15.5_2 09 Apr 2019 14:04:50 |
sunpoet |
Update devel/readline to 8.0
- Bump PORTREVISION of dependent ports for shlib change
Changes: https://tiswww.case.edu/php/chet/readline/CHANGES
PR: 236156
Exp-run by: antoine |
1.15.5_1 12 Mar 2019 04:18:32 |
cy |
Fix build with LibreSSL 2.9.
PR: 234064
Submitted by: Charlie Li <ml+freebsd@vishwin.info> |
1.15.5_1 15 Feb 2019 04:37:25 |
cy |
Provide a script from which to start krb5kdc through /etc/rc.d/kdc.
Simply add kdc_enable="YES" and kdc_program="/usr/local/sbin/kdc"
to /etc/rc.d. The script removes the Heimdal kdc --detach argument
prior to invoking krb5kdc.
The other approach that was considered was to replace getopt() in
kdc/main.c with getopt_long() however this approach was considered too
intrusive. |
1.15.5 13 Jan 2019 15:57:20 |
cy |
pkgconfig is used at build time, not runtime.
MFH: 2019Q1 (krb5-devel will need to have all its previous
commits brought up to level in 2019Q1 first) |
1.15.5 08 Jan 2019 20:29:34 |
cy |
Welcome the new KRB5 1.17 (krb5-117).
Major changes in 1.17 (2019-01-08)
==================================
Administrator experience:
* A new Kerberos database module using the Lightning Memory-Mapped
Database library (LMDB) has been added. The LMDB KDB module should
be more performant and more robust than the DB2 module, and may
become the default module for new databases in a future release.
* "kdb5_util dump" will no longer dump policy entries when specific
principal names are requested.
(Only the first 15 lines of the commit message are shown above ) |
1.15.5 08 Jan 2019 20:04:04 |
cy |
Correct CONFLICTS.
MFH: 2019Q1 |
1.15.5 08 Jan 2019 01:41:00 |
cy |
Update 1.15.4 --> 1.15.5
Major changes in 1.15.5 (2019-01-07)
====================================
This is a bug fix release.
* Fix a regression in the MEMORY credential cache type which could
cause client programs to crash.
* MEMORY credential caches will not be listed in the global
collection, with the exception of the default credential cache if it
is of type MEMORY.
* Remove an incorrect assertion in the KDC which could be used to
cause a crash [CVE-2018-20217].
MFH: 2019Q1 |
1.15.4 02 Nov 2018 15:51:46 |
cy |
krb5-115: update 1.15.3 --> 1.15.4 |
1.15.3_5 02 Jul 2018 05:57:38 |
cy |
While working the ports fallout due to making Hemidal in base
private it was discovered that com_err.3, though distributed in
the tarball, was not installed. Install it. |
1.15.3_4 02 Jul 2018 05:57:27 |
cy |
Sort man pages. |
1.15.3_4 19 Jun 2018 13:38:35 |
cy |
Revert r472760 and instead use upstream git commit
beeb2828945a41d86488e391ce440bacee0ec committed to the krb5
development branch Saturday, June 16. The upstream commit
message follows:
Author: Thomas Sondergaard <tsondergaard@vitalimages.com>
Date: Sat Jun 16 18:14:50 2018 +0200
Eliminate use of the 'register' keyword
'register' is a reserved and unused keyword in C++17 so having it
present in the public headers presents a a compatibility issue. Also
in C the 'register' keyword is mostly obsolete, so remove all uses of
it.
[ghudson@mit.edu: adjusted style of some of the affected lines] |
1.15.3_3 19 Jun 2018 06:51:56 |
cy |
While working on the ports fallout due to the private Heimdal in base
project, a port (www/squid-devel) was discovered to be grumpy due to
numerous errors such as below:
/usr/local/include/krb5/krb5.h:3566:19: error: 'register' storage class
specifier is deprecated and incompatible with C++17
[-Werror,-Wdeprecated-register]
register char **name);
^~~~~~~~~
The "register" keyword is meaningless and can cause grief among ports
that build against any of the krb5 ports. |
1.15.3_2 13 Jun 2018 05:55:52 |
cy |
MIT krb5 fails to build with boringssl installed due to a missing
typedef for PKCS7 in the boringssl pkcs7.h. |
1.15.3_2 13 Jun 2018 05:44:58 |
cy |
Fix build with libressl and bearssl.
PR: 228970 |
1.15.3_1 12 Jun 2018 03:42:18 |
cy |
Fix logic from patch supplied in PR 217027, committed in
r433966 and r433967.
PR: 228900 |
1.15.3 04 May 2018 06:23:57 |
cy |
Update 1.15.2 --> 1.15.3
Major changes in 1.15.3 (2018-05-03)
====================================
This is a bug fix release.
* Fix flaws in LDAP DN checking, including a null dereference KDC
crash which could be triggered by kadmin clients with administrative
privileges [CVE-2018-5729, CVE-2018-5730].
* Fix a KDC PKINIT memory leak.
* Fix a small KDC memory leak on transited or authdata errors when
processing TGS requests.
* Fix a null dereference when the KDC sends a large TGS reply.
* Fix "kdestroy -A" with the KCM credential cache type.
* Fix the handling of capaths "." values.
* Fix handling of repeated subsection specifications in profile files
(such as when multiple included files specify relations in the same
subsection). |
1.15.2_1 02 Feb 2018 06:50:25 |
cy |
Fix build when NLS option is unchecked.
Reported by: Geraud CONTINSOUZAS <geraud.continsouzas@skazy.nc> |
1.15.2 11 Jan 2018 16:24:53 |
danfe |
Remove superfluous linefeeds. |
1.15.2 10 Jan 2018 15:08:51 |
danfe |
Do not abuse INSTALL_MAN when installing documentation, examples, and
other miscellaneous files which are not actually manual pages. |
1.15.2 30 Oct 2017 16:55:27 |
mandree |
Reconcile e2fsprogs ./. krb5-* conflicts.
* Move conflicting e2fsprogs headers & libs into .../e2fsprogs/... subdirs.
* Move conflicting awk scripts into ${DATADIR}.
* Rename and patch compile_et to e2fsprogs-compile_et.
* Remove conflict markers (from e2fsprogs and krb5-*).
* Add CPPFLAGS/LDFLAGS to sysutils/fusefs-ext2, including
--rpath setting.
While here, also:
* sort pkg-plist and files/unwanted
* use FUSEFS_CONFIGURE_ENABLE=fuse2fs to prevent e2fsprogs from picking up
fusefs (implies --disable-fuse2fs if the option remains disabled)
* add --without-included-gettext to CONFIGURE_ARGS just to be on the safe
side.
And of course, bump PORTREVISION to 3 in e2fsprogs. Since other ports
do not change files or runtime behaviour, their PORTREVISION remains
untouched. |
1.15.2 30 Oct 2017 00:16:28 |
mandree |
Add CONFLICTS between krb5-* and e2fsprogs.
Reported by: jbeich@ |
1.15.2 05 Oct 2017 01:55:26 |
cy |
Register conflicts among the krb5 ports.
Reported by: rodrigo |
1.15.2 26 Sep 2017 10:09:56 |
cy |
Update 1.15.1 --> 1.15.2 |
1.15.1_5 27 Jun 2017 13:46:53 |
sunpoet |
Update devel/readline to 7.0 patch 3
- Bump PORTREVISION for shlib change
Changes: https://cnswww.cns.cwru.edu/php/chet/readline/CHANGES
https://lists.gnu.org/archive/html/bug-bash/2016-09/msg00107.html
https://lists.gnu.org/archive/html/bug-readline/2017-01/msg00002.html
Differential Revision: https://reviews.freebsd.org/D11172
PR: 219947
Exp-run by: antoine |
1.15.1_4 21 Jun 2017 02:46:53 |
cy |
Switch to USES=localbase. |
1.15.1_4 14 Mar 2017 04:57:38 |
cy |
Fix up plist. |
1.15.1_4 14 Mar 2017 03:24:42 |
cy |
Pet portlint.
PR: 217552
Submitted by: John W. O'brien <john@saltant.com>
Differential Revision: D9889 |
1.15.1_4 14 Mar 2017 03:22:20 |
cy |
Simplfy WRKSRC by using WRKSRC_SUBDIR.
PR: 217552
Submitted by: John W. O'brien <john@saltant.com>
Differential Revision: D9889 |
1.15.1_4 14 Mar 2017 03:17:52 |
cy |
Describe CMD_LINE_EDITING RADIO group.
PR: 217552
Submitted by: John W. O'brien <john@saltant.com>
Differential Revision: D9889 |
1.15.1_4 14 Mar 2017 03:15:55 |
cy |
Respect global NLS option.
PR: 217552
Submitted by: John W. O'brien <john@saltant.com>
Differential Revision: D9889 |
1.15.1_4 14 Mar 2017 03:14:08 |
cy |
Convert to global EXAMPLES (default).
PR: 217552
Submitted by: John W. O'brien <john@saltant.com>
Differential Revision: D9889 |
1.15.1_4 14 Mar 2017 03:09:16 |
cy |
New READLINE_PORT option to select to use readline in base or
readline in ports.
PR: 217552
Submitted by: John W. O'brien <john@saltant.com>
Differential Revision: D9889 |
1.15.1_4 14 Mar 2017 03:06:23 |
cy |
Remove redundant file that should have been removed in r253265.
PR: 217552
Submitted by: John W. O'brien <john@saltant.com>
Differential Revision: D9889 |
1.15.1_3 14 Mar 2017 02:59:39 |
cy |
Use options helpers.
PR: 217552
Submitted by: John W. O'brien <john@saltant.com>
Differential Revision: D9889 |
1.15.1_3 14 Mar 2017 02:55:24 |
cy |
Install LDIF and schema files if LDAP is enabled
PR: 217552
Submitted by: John W. O'brien <john@saltant.com>
Differential Revision: D9889 |
1.15.1_2 14 Mar 2017 02:51:37 |
cy |
Replace explicit PLIST_SUB with OPTIONS_SUB, simplifying Makefiles.
PR: 217552
Submitted by: John W. O'brien <john@saltant.com>
Differential Revision: D9889 |
1.15.1_2 14 Mar 2017 02:48:20 |
cy |
Make READLINE default.
PR: 217552
Submitted by: John W. O'brien <john@saltant.com>
Differential Revision: D9889 |
1.15.1_1 05 Mar 2017 04:02:24 |
cy |
Fix up typo. |
05 Mar 2017 03:27:05
|
cy |
Remove redundant message about Kerberos klogind and telnetd. These
programs ere moved to krb5-appl (by MIT) when krb5-appl was created
in r253265. This message should have been removed from this Makefile
at that time.
Pointy hat to: cy (that's me) |
1.15.1 04 Mar 2017 00:09:42 |
cy |
Update 1.15 --> 1.15.1 |
1.15_2 12 Feb 2017 21:51:34 |
cy |
Add missing patch files.
Reported by: sunpoet
Pointy hat to: cy (me) |
1.15_2 12 Feb 2017 21:29:02 |
cy |
Fix build with LbreSSL.
PR: 217027
Submitted by: brnrd |
1.15_1 04 Feb 2017 01:37:17 |
cy |
pkgconfig is only needed at install/runtime.
Reported by: des |
1.15 03 Jan 2017 11:01:06 |
mat |
Cleanup BROKEN/IGNORE for 10.3-
Sponsored by: Absolight |
1.15 16 Dec 2016 20:16:48 |
cy |
Replace description with somthing more relevant to today.
Suggested by: wollman |
1.15 10 Dec 2016 01:09:26 |
cy |
Register a build fail on FreeBSD-9 due to pkinit.so not being built,
causing orphan check to fail. |
1.15 03 Dec 2016 00:54:23 |
cy |
Welcome the new security/krb5-115 port. This port follows MIT's
KRB5 1.15 releases.
To support this new ports:
- The security/krb5 port includes an option to use this port instead
of krb5-114 as its base. krb5-114 will remain the default until the
next release of KRB5 1.15 (if it's stable of course).
- MIT by default deprecates KRB5 two versions back from the current
release. krb5-113 has been deprecated and will expire one year from
now. |