security/pam_krb5: move man page

security/pam_krb5: Revert "security/pam_krb5: IGNORE for CVE-2023-3326"

Discussing with our upstream, he is aware of CVE-2023-3326. Work to
add generalized anti-spoofing is planned. In the mean time he
recommends using FAST (anon_fast) to mitigate CVE-2023-3326. anon_fast
already includes built-in anti-spoofing.

More discussion is here:
	https://github.com/rra/pam-krb5/blob/main/docs/pam_krb5.pod#L53

This reverts commit 41afd03d9c8e76fe42c555b1274fec069f83ecae.

security/pam_krb5: IGNORE for CVE-2023-3326

See https://github.com/rra/pam-krb5/issues/27.

security/pam_krb5: Add missing "+"

The missing "+" resulted in a package failure.

Fixes:		8d12f4457d5e

security/pam_krb5: Update to 4.11

security/pam_krb5: Fix plist

Fixes:		8d12f4457d5e

security/krb5: Flavorize

Replace gssapi options (MIT, HEIMDAL_PORT, HEIMDAL_BASE) with flavors.

Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)

Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

security: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  <ports@c0decafe.net>
  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Adam Weinberger <adamw@FreeBSD.org>
  *  Ade Lovett <ade@FreeBSD.org>
  *  Aldis Berjoza <aldis@bsdroot.lv>
  *  Alex Dupre <ale@FreeBSD.org>
  *  Alex Kapranoff <kappa@rambler-co.ru>
  *  Alex Samorukov <samm@freebsd.org>
  *  Alexander Botero-Lowry <alex@foxybanana.com>
  *  Alexander Kriventsov <avk@vl.ru>
  *  Alexander Leidinger <netchild@FreeBSD.org>

Remove # $FreeBSD$ from Makefiles.

Update 4.8 --> 4.9

Update 4.7 --> 4.8

Submitted by:		woodsb02@
Reviewed by:		mat@
Differential Revision:	https://reviews.freebsd.org/D19207

Pet portlint.

Submitted by:		woodsb02@
Reviewed by:		mat@
Differential Revision:	https://reviews.freebsd.org/D19207

Add LICENSE details.

Submitted by:		woodsb02@
Reviewed by:		mat@
Differential Revision:	https://reviews.freebsd.org/D19207

Simplify and standardize port structure.

Submitted by:	hrs

As of r399238, when the heimdal port option was selected, this port did
not build properly. Prior to r399238, even if the heimdal port was
installed, the base krb5 libraries and include files were used. This is
because ports/security/heimdal places its libraries in
${LOCALBASE}/lib/heimdal and include files in ${LOCALBASE}/include/heimdal,
which this port does not look for (unless told to do so... by this commit).

Discovered by:	marino

Fix Kerberos selection option and USES.

Replace HEIMDAL option with HEIMDAL_PORTS and HEIMDAL_BASE.

Update 4.6 --> 4.7

By default libtool replaces -export-symbols <file> with -retain-symbols-file
<file> on ELF systems, but this doesn't really do what -export-symbols is
meant to do.  On GNU ELF systems it converts <file> to a simple version
script first and then uses -version-script instead of -retain-symbols-file.
Let USES=libtool patch libtool scripts to do this on all systems with GNU
ld(1).

Bump PORTREVISION on all ports where the build log contains -export-symbols.

audio/calf: This port builds a module that now exports only one function,
but it also builds a number of executables that link to this module and
expect to see other functions.  Because it's already a bit dodgy to link to
a module (libtool warns about this) let the module continue to export only
one function and instead build an ordinary library from the same source that
the executables can link to.  Fix a number of other issues in the same

- Drop @dirrm* from plist

Approved by:	portmgr blanket

Add USES=libtool and INSTALL_TARGET=install-strip

Remove indefinite articles and trailing periods from COMMENT, plus
minor COMMENT typos and surrounding whitespace fixes. A few Makefiles
where not included as they contain Latin-1 characters that break
the Phabricator workflow. Categories P-S.

CR:		D422
Approved by:	portmgr (bapt)

Fix build error.

Submitted by:	brd

Optionify.

Support stage.

Convert GMAKE to MAKE_CMD
Please note that lots of invocation of MAKE_CMD here are wrong as they do not
properly respect MAKE_ENV and friends

With hat:	portmgr

- Convert gmake, bzip2 to USES

Approved by:	portmgr

Add NO_STAGE all over the place in preparation for the staging support (cat:
security)

- convert to the new perl5 framework
- trim Makefile header

Approved by:	portmgr (bapt@, blanket)

- Remove needless quoting of BROKEN/IGNORE
- Trim headers

PR:		ports/168908
With hat:	portmgr

Update pam_krb5 from 4.4 to 4.6.

Feature safe:	yes

- Document CONFLICTS with security/pam_krb5-rh
- Pacify portlint(1) while here

- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS)
- Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:             157936
Submitted by:   myself
Exp-runs by:    pav
Approved by:    pav

Conditionally remove lib/security.

PR:             157676
Submitted by:   Benjamin Lee <ben@b1c1l1.com>

Add archive master site, in the case when a new pam_krb5 is released and this
port has not been updated yet.

Submitted by:   "Kevin Thompson" <antiduh@csh.rit.edu>

Update 4.3 --> 4.4

Update 4.2 --> 4.3

Update 1.3.r7 --> 4.2.

PR:             146072
Submitted by:   plosher

- Retire MASTER_SITE_SOURCEFORGE_EXTENDED, it's no longer needed - all mirrors
actually have all distfiles
- Merge all SF mirrors to MASTER_SITE_SOURCEFORGE, resort according to quick
download speed survey
- Fix MASTER_SITES for all port that have used SOURCEFORGE_EXTENTED

Approved by:    portmgr (pav)

Make IGNORE message more relevant.

Due to popular demand, remove the depricated designation. This port will not
be removed.

Requested by:   plosher

Mark this port deprecated. Pam_krb5 has been in base since FreeBSD 5. It is
set to expire August 31, 2009.

Remove always-false/true conditions based on OSVERSION 500000

- Remove the DESTDIR modifications from individual ports as we have a new,
  fully chrooted DESTDIR, which does not need such any more.

Sponsored by:   Google Summer of Code 2007
Approved by:    portmgr (pav)

- Set --mandir and --infodir in CONFIGURE_ARGS if the configure script
  supports them.  This is determined by running ``configure --help'' in
  do-configure target and set the shell variable _LATE_CONFIGURE_ARGS
  which is then passed to CONFIGURE_ARGS.
- Remove --mandir and --infodir in ports' Makefile where applicable
  Few ports use REINPLACE_CMD to achieve the same effect, remove them too.
- Correct some manual pages location from PREFIX/man to MANPREFIX/man
- Define INFO_PATH where necessary
- Document that .info files are installed in a subdirectory relative to
  PREFIX/INFO_PATH and slightly change add-plist-info to use INFO_PATH and
  subdirectory detection.

PR:             ports/111470
Approved by:    portmgr
Discussed with: stas (Mk/*), gerald (info related stuffs)
Tested by:      pointyhat exp run

- Chase shared library version bump in security/heimdal.
- Remove 4.x-specific BROKEN in net/arla (caused by heimdal).

Add support for DESTDIR part I.

This commit should largele be a NOOP as it only adds support
for DESTDIR undefined. This does allow us to start testing
ports with DESTDIR set, but this is as of yet not supported.

Although this has been extensively tested on pointyhat, this
is a very intrusive change and some cases may have been
overlooked. Please contact Gabor and me if you find any.

PR:             100555
Submitted by:   gabor
Sponsored by:   Google Summer of Code 2006

USE_SIZE was obsoleted in rev. 1.484 of bsd.port.mk more than
2 years ago. Clean out the last traces of it.

With hat:       portmgr

SHA256ify

Approved by: krion@

Fix fetch from main SF mirrors and include additional ones too by
 just using MASTER_SITE_SOURCEFORGE_EXTENDED.

- Fix libkrb5.so library version.

PR:             ports/67183
Submitted by:   Oleg Sharoiko <os@rsu.ru>
Approved by:    maintainer timeout (1 year)

Change default status if no configuration is given from BROKEN to IGNORE.
This saves a bogus build cycle on bento/pointyhat.

No response from maintainer for some time.

Add missing manpages

Change BROKEN to IGNORE because this package actually still builds on 5.x
(but removes the system pam_krb module)

Bump PORTREVISION on all ports that depend on gettext to aid with upgrading.

(Part 1)

Heimdal installs libkrb5.so.19, not libkrb5.so.18.

Noticed by:     "Andrey Beresovsky" <and@rsu.ru>

1. Reorganize MASTER_SITES, use MASTER_SITE_SOURCEFORGE.
2. Remove duplicate MASTER_SITE.
3. USE_SIZE.

1. Update 1.0.3 --> 1.3-rc7
2. Update master site list
3. As 5.x already ships with it's own pam_krb5, configure the port to
   only install on 4.x systems.

Clear moonlight beckons.
Requiem mors pacem pkg-comment,
And be calm ports tree.

E Nomini Patri, E Fili, E Spiritu Sancti.

Resurrect pam_krb5 for MIT KRB5.

Approved by:    nectar

Remove this port.  The pam_krb5 in the base system should be utilized.

port needs pod2man -> USE_PERL5=yes
Noticed on: bento

Add missing <syslog.h>.  Noticed in -CURRENT.

Update to 1.0.3.

Reminded by:    cy

Update pam_krb5 1.0 -> 1.0.1.   Change MASTER_SITES.    

Oops, forgot to bump PORTREVISION.    

Update for heimdal-0.3f interface changes.    

Bump libkrb5 version dependency for the Heimdal case.    

Bug fixes and paranoia:    

Fix linking the pam_krb5.so module:     = Be very specific about where we think
the libraries are, to avoid       getting the old crusty Heimdal from the base
system.     = Minimize the undefined symbols in pam_krb5.so    

Update library dependency to catch up with Heimdal port.   Bump PORTREVISION.   

Change .error to BROKEN, otherwise it will kill make release, make   index and
freshports (and many other things).    

(forced commit)    

Oops,    

A Pluggable Authentication Module for Kerberos 5.