Port details |
- krb5-118 MIT implementation of RFC 4120 network authentication service
- 1.18.5 security
=0 1.18.5Version of this port present on the latest quarterly branch.
- This port expired on: 2022-11-30
IGNORE: Affected by CVE-2022-42898: integer overflow vulnerabilities in PAC parsing
- Maintainer: cy@FreeBSD.org
- Port Added: 2020-02-19 02:43:03
- Last Update: 2023-06-25 17:53:14
- Commit Hash: 0adf433
- License: MIT
- WWW:
- https://web.mit.edu/kerberos/
- Description:
- Kerberos V5 is an authentication system developed at MIT.
Abridged from the User Guide:
Under Kerberos, a client sends a request for a ticket to the
Key Distribution Center (KDC). The KDC creates a ticket-granting
ticket (TGT) for the client, encrypts it using the client's
password as the key, and sends the encrypted TGT back to the
client. The client then attempts to decrypt the TGT, using
its password. If the client successfully decrypts the TGT, it
keeps the decrypted TGT, which indicates proof of the client's
identity. The TGT permits the client to obtain additional tickets,
which give permission for specific services.
Since Kerberos negotiates authenticated, and optionally encrypted,
communications between two points anywhere on the internet, it
provides a layer of security that is not dependent on which side of a
firewall either client is on.
The Kerberos V5 package is designed to be easy to use. Most of the
commands are nearly identical to UNIX network programs you are already
used to. Kerberos V5 is a single-sign-on system, which means that you
have to type your password only once per session, and Kerberos does
the authenticating and encrypting transparently.
Jacques Vidrine <n@nectar.com>
- ¦ ¦ ¦ ¦
- Manual pages:
-
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- krb5-118>0:security/krb5-118
- Conflicts:
- CONFLICTS:
- heimdal
- krb5
- krb5-119
- krb5-12*
- CONFLICTS_BUILD:
- No installation instructions:
- This port has been deleted.
- PKGNAME: krb5-118
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1647101325
SHA256 (krb5-1.18.5.tar.gz) = 75fb9cc15530ac44e447241028f92341c7eb0bab275b3a560d9aa192a381080e
SIZE (krb5-1.18.5.tar.gz) = 8717148
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- gmake>=4.3 : devel/gmake
- libtool : devel/libtool
- pkgconf>=1.3.0_1 : devel/pkgconf
- msgfmt : devel/gettext-tools
- perl5>=5.32.r0<5.33 : lang/perl5.32
- Library dependencies:
-
- libintl.so : devel/gettext-runtime
- libreadline.so.8 : devel/readline
- There are no ports dependent upon this port
Configuration Options:
- ===> The following configuration options are available for krb5-118-1.18.5:
DNS_FOR_REALM=off: Enable DNS lookups for Kerberos realm names
EXAMPLES=on: Build and/or install examples
KRB5_HTML=on: Install krb5 HTML documentation
KRB5_PDF=on: Install krb5 PDF documentation
LDAP=off: LDAP protocol support
LMDB=off: OpenLDAP Lightning Memory-Mapped Database support
NLS=on: Native Language Support
====> Command line editing for kadmin and ktutil: you can only select none or one of them
READLINE=on: Command line editing via libreadline
LIBEDIT=off: Command line editing via libedit
===> Use 'make config' to modify these settings
- Options name:
- security_krb5-118
- USES:
- compiler:c++11-lang cpe gmake gettext-runtime gssapi:bootstrap,mit libtool:build localbase perl5 pkgconfig ssl gettext readline
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
|
Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
Commit | Credits | Log message |
1.18.5 25 Jun 2023 17:53:14 |
Cy Schubert (cy) |
security/krb5-118: Remove expired MIT KRB5 1.18 port |
1.18.5 25 Jun 2023 17:53:13 |
Cy Schubert (cy) |
security/krb5-118: Fix EXPIRATION_DATE typo |
1.18.5 06 Jun 2023 18:35:41 |
Cy Schubert (cy) |
security/krb5-*: Adjust conflicts
With the import of security/krb5-121, adjust conflicts of all krb5 ports. |
1.18.5 08 Feb 2023 10:53:56 |
Muhammad Moinur Rahman (bofh) |
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
Convert the USE_LDAP=yes to USES=ldap and adds the following features:
- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features
Reviewed by: delphij
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D38233 |
1.18.5 15 Nov 2022 16:37:03 |
Cy Schubert (cy) |
security/krb5-118: CVE-2022-42898: IGNORE and accelerate removal
krb5-118 was desupported by MIT when krb5-120 was released. CVE-2022-42898
now requires its accelerated removal from the tree. It is now
flagged IGNORE until its removal on Nov 30, 2022.
MFH: 2022Q4
Security: CVE-2022-42898 |
1.18.5 09 Sep 2022 15:19:05 |
Cy Schubert (cy) |
security/krb5-*: Bring CONFLICTS up to current status
Clean up CONFLICTS bitrot.
MFH: 2022Q3 |
1.18.5 08 Sep 2022 15:46:38 |
Stefan Eßer (se) |
Remove WWW lines that have been moved into Makefiles
Approved by: portmgr (implicit) |
1.18.5 08 Sep 2022 15:43:21 |
Stefan Eßer (se) |
Move more WWW entries from pkg-descr files into Makefiles
The WWW: lines in the pkg-descr files of these ports where not at the
end of those files and have been missed in prior conversion runs.
Approved by: portmgr (implicit) |
1.18.5 20 Jul 2022 14:22:56 |
Tobias C. Berner (tcberner) |
security: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Aldis Berjoza <aldis@bsdroot.lv>
* Alex Dupre <ale@FreeBSD.org>
* Alex Kapranoff <kappa@rambler-co.ru>
* Alex Samorukov <samm@freebsd.org>
* Alexander Botero-Lowry <alex@foxybanana.com>
* Alexander Kriventsov <avk@vl.ru>
* Alexander Leidinger <netchild@FreeBSD.org> (Only the first 15 lines of the commit message are shown above ) |
1.18.5 27 May 2022 13:45:07 |
Cy Schubert (cy) |
security/krb5-120: Welcome new krb5 1.20
Welcome the new krb5-120 (1.20) from MIT.
krb5-118 is now deprecated and scheduled for removal a year from
now. |
1.18.5 14 Mar 2022 16:59:10 |
Cy Schubert (cy) |
security/krb5-118: Update to 1.18.5 |
1.18.4 10 Jan 2022 15:15:39 |
Stefan Eßer (se) |
Fix CONFLICTS entries of multiple ports
There have been lots of missing CONFLICTS_INSTALL entries, either
because conflicting ports were added without updating existing ports,
due to name changes of generated packages, due to mis-understanding
the format and semantics of the conflicts entries, or just due to
typoes in package names.
This patch is the result of a comparison of all files contained in
the official packages with each other. This comparison was based on
packages built with default options and may therefore have missed
further conflicts with optionally installed files.
Where possible, version numbers in conflicts entries have been
generalized, some times taking advantage of the fact that a port (Only the first 15 lines of the commit message are shown above ) |
1.18.4 25 Nov 2021 21:40:11 |
Stefan Eßer (se) |
*/*: Remove redundant '-*' from CONFLICTS definitions
The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").
Approved by: portmgr (blanket) |
1.18.4 29 Oct 2021 09:50:18 |
Stefan Eßer (se) |
*/*: Remove redundant '-[0-9]*' from CONFLICTS
The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").
Many CONFLICTS definitions used patterns like "bash-[0-9]*" to filter
for the bash package in any version. But that pattern is functionally
identical with just "bash".
Approved by: portmgr (blanket) |
1.18.4 26 Jul 2021 19:55:38 |
Cy Schubert (cy) |
security/krb5-118: Update to 1.18.4
The announcement as follows:
The MIT Kerberos Team announces the availability of MIT Kerberos 5
Releases 1.19.2 and 1.18.4. Please see below for a list of some major
changes included, or consult the README file in the source tree for a
more detailed list of significant changes.
Retrieving krb5-1.19.2 and krb5-1.18.4
======================================
You may retrieve the krb5-1.19.2 and krb5-1.18.4 sources from the
following URL:
(Only the first 15 lines of the commit message are shown above ) |
1.18.3 15 May 2021 07:14:04 |
Tobias Kortkamp (tobik) Author: Yasuhiro Kimura |
*: Remove unnecessary 'port' argument from USES=readline
PR: 248459
Exp-run by: antoine |
1.18.3 06 Apr 2021 14:31:13 |
Mathieu Arnold (mat) |
all: Remove all other $FreeBSD keywords. |
1.18.3 06 Apr 2021 14:31:07 |
Mathieu Arnold (mat) |
Remove # $FreeBSD$ from Makefiles. |
1.18.3 18 Nov 2020 04:15:07 |
cy |
Update 1.18.2 --> 1.18.3 |
1.18.2 22 May 2020 23:59:56 |
cy |
Update 1.18.1 --> 1.18.2
This is a bug fix release.
* Fix a SPNEGO regression where an acceptor using the default
credential would improperly filter mechanisms, causing a negotiation
failure.
* Fix a bug where the KDC would fail to issue tickets if the local
krbtgt principal's first key has a single-DES enctype.
* Add stub functions to allow old versions of OpenSSL libcrypto to
link against libkrb5.
* Fix a NegoEx bug where the client name and delegated credential
might not be reported. |
1.18.1 14 Apr 2020 19:42:30 |
cy |
Update 1.18 --> 1.18.1 |
1.18 21 Feb 2020 02:06:00 |
cy |
Fix build with libressl.
The new softpkcs11 test makes explicit OpenSSL calls which are
unsupported in LibreSSL. Remove this one test to allow krb5-118
to build with libressl.
PR: 244249 |
1.18 19 Feb 2020 09:15:55 |
linimon |
Pacify portlint.
Approved by: portmgr (tier-2 blanket), followup |
1.18 19 Feb 2020 09:12:27 |
linimon |
Add compiler:c++11-lang to USES to fix build on GCC-based systems:
edwards25519_fiat.h:14: error: expected '=', ',', ';', 'asm' or
'__attribute__' before 'fiat_25519_int128'
Approved by: portmgr (tier-2 blanket) |
1.18 19 Feb 2020 02:42:55 |
cy |
Welcome the new KRB5 1.18 (krb5-118)
In addition, deprecate krb5-116 to retire one year after the release
of krb5-118: Feb 12, 2021.
Major changes in 1.18 (2020-02-12)
==================================
Administrator experience:
* Remove support for single-DES encryption types.
* Change the replay cache format to be more efficient and robust.
Replay cache filenames using the new format end with ".rcache2" by
default. (Only the first 15 lines of the commit message are shown above ) |