security/sssd2: Fix LDAP authentication

PR:		293728

security/sssd2: Pass a correct path to realmd

security/sssd2: Update to 2.12.0

PR:		291397
Approved by:	jhixson (maintainer timeout)
Tested by:	Maxim Filimonov <che@bein.link>

security/sssd2: Fix ldb and idmap library paths

The ldb library path seems incorrect as it does not work in the built-in
ldb of Samba 4.22. Fix that by using SAMBA_LDB_MODULESDIR. This should
fix the following runtime error:

```
   *  (2025-12-02 03:12:12): [sssd] [sysdb_ldb_connect] (0x4000): No ldb module
path set in env
   *  (2025-12-02 03:12:12): [sssd] [sysdb_ldb_connect] (0x4000): No ldb module
path set in env
   *  (2025-12-02 03:12:12): [sssd] [ldb] (0x0010): WARNING: Module [memberof]
not found - do you need to set LDB_MODULES_PATH?
```

Also, use SAMBA_IDMAP_MODULESDIR for consistency.

PR:		291492
Approved by:	portmgr blanket
Sponsored by:	Klara, Inc.
Differential Revision:	https://reviews.freebsd.org/D54138

*: Revise USES=python:... version range constraints

and strip all lower bounds of 3.9 or 3.10 because they are implied now.

python:3.9-X  -> python:-X
python:3.9+   -> python
python:3.10-X -> python:-X
python:3.10+  -> python
(options such as ,build preserved)

security/sssd2: Prepare for net/samba422

PR:	289272
Obtained from:	Mateusz Piotrowski <0mp@FreeBSD.org>

security/sssd2: fix detection of krb5

Because security/krb5 has bumped version, it is not well detected
and make this port on packaging.

This adds a patch to update the detection of krb 1.22 that is not
on the original sources.

PR:	288708
Approved by:	0mp (mentor)
Approved by:	kevans
Approved by:	portmgr blanket (build fix)
Sponsored by:	Klara, Inc.
Differential Revision:	https://reviews.freebsd.org/D51813

*/*: Bump PORTREVISION after libuuid/libblkid switch

from e2fsprogs to util-linux, to complete the bump of all users
of either library that started with Alexander's commit titled
'*/*: Switch to misc/libuuid and misc/libblkid'

PR:		251489

*/*: Switch to misc/libuuid and misc/libblkid

PR:		221293
PR:		251489
PR:		257070

python.mk: rename PYTHON_EXT_SUFFIX to PYTHON_TAG, document, etc

EXT_SUFFIX, according to PEP 3149, refers to the full tag and
extension for compiled extension module objects, eg .cpython-311.so,
.cpython-313t.so, etc. We do not use the correct semantic meaning,
and this usage becomes ambiguous and confusing when tags do not
match between bytecode and compiled extension module objects.

Rename our PYTHON_EXT_SUFFIX to PYTHON_TAG to align with PEP 3147's
specification of a magic tag, which consists of implementation name
and shorthand version only. This is meant for bytecode and other
files containing this tag in their filename that do not depend on
a specific Python ABI for the same version. Chase all existing
consumers.

*: Bump revisions after dbus update

PR:		285253
Reported by:	Martin Birgmeier <d8zNeCFG@aon.at>

*/*: Update ports so they use SAMBA_*_PORT variables in LIB_DEPENDS

* Update ports that work with Samba and depend on either of talloc,
  tdb and tevent so they use SAMBA_*_PORT variables in LIB_DEPENDS.
* Bump PORTREVISION.
* While here, update WINBIND_CONFIGURE_ON in net/freeradius3/Makefile
  so it uses SAMBA_INCLUDEDIR and SAMBA_LIBDIR.

Reviewed by:	0mp, kiwi
Differential Revision:	https://reviews.freebsd.org/D48859

security/sssd2: Fix two bugs in the find_uid patch

The UID check was added in commit 9a40ff81f4ea ("security/sssd2:
Reimplement UID-finding using sysctl") and is supposed to exclude kernel
processes, retaining the behaviour of commit ee81c8e455ef
("security/sssd2: Add patch to enumerate UIDs").

However, it mistakenly skipped over processes with UID 0, which could
cause the lookup to fail.  Fix the typo.

Also return success if the caller asked us to populate a table and no
entries were added.  This matches the previous behaviour.

PR:		284089
Approved by:	jhixson (maintainer timeout)
Reviewed by:	arrowd
Sponsored by:	Klara, Inc.

security/sssd2: update to version 2.9.6

security/sssd2: bump port revision

Added patch for finding UIDs without using procfs

PR: 282469

security/sssd2: Reimplement UID-finding using sysctl

This avoids a dependency on procfs or linprocfs, so makes sssd2
marginally more usable when using the krb5_store_password_if_offline
option.

Sponsored by:	Klara, Inc.

Signed-off-by: John Hixson <jhixson@freebsd.org>

security/sssd2: Assorted port cleanups

- Simplify depending on Kerberos
- - Do not use gssapi:bootstrap
- - Do not redefine variables already defined by USES
- - Instead of patching, pass the KRB5_CONFIG env var
- Trim unused dependencies
- Remove hunks from the configure.ac patch that aren't needed anymore
- Simplify SHEBANG_FILES
- No need to define LIB_DIRS, DEBUG_FLAGS and STRIP
- Bump PORTREVISION to catch possible regressions

Tested by:	arrowd
Approved by:	0mp, jhixson
Pull Request:	https://github.com/freebsd/freebsd-ports/pull/272
Sponsored by:	Future Crew, LLC

security/sssd*: Use an absolute path in sssd_prestart()

I believe this script worked by accident before.

PR:		279255
Approved by:	maintainer
Sponsored by:	Klara, Inc.

security/sssd2: Use SAMBA_PORT and SAMBA_LDB_PORT

security/sssd2 can depend on any Samba version we have in the ports
tree. However, having the exact version of Samba hardcoded in *_DEPENDS
variables makes it hard to use a non-default Samba version.

Let the port pick up the default Samba version (and its ldb port) via
samba.mk. Since net/samba416 is still the default, nothing really
changes for sssd2. However, users can now build sssd2 against
net/samba419 if they set DEFAULT_VERSIONS=samba=4.19.

PR:			278839 280774
Approved by:    	portmgr (infrastructure)
Sponsored by:		Klara, Inc.
Co-authored-by:		Xavier Beaudouin <kiwi@oav.net>

security/sssd2: Fix ldb dependency

net/samba416 uses databases/ldb25.

PR:		279401
Approved by:	maintainer (jhixson)
Sponsored by:	Klara, Inc.

security/sssd: unbreak the port

*/*: Add ${PY_SETUPTOOLS} to BUILD_DEPENDS

Fix build when setuptools is removed from RUN_DEPENDS in
Mk/Uses/python.mk.

PR:		270510
Approved by:	portmgr (blanket)

security/sssd2: Update to v2.9.5

security/sssd2: Add patch to enumerate UIDs

The legacy security/sssd port has a patch which lets one set
krb5_store_password_if_offline=True in a IPA provider configuration
block.  The patch fixes some code which uses /proc to enumerate the UIDs
of logged-in users.  Without the patch, if one has this configuration
variable set, sssd dies with an obscure error.  This caused some pain
when a user was updating from sssd to sssd2.

Sponsored by: Serenity Cybersecurity, LLC

PR: 279255
Reported by: markj@freebsd.org, arrowd@freebsd.org
Obtained from:	arrowd@freebsd.org

security/sssd2: Use proper path to adcli and add RUN_DEPENDS on it

Sponsored by:	Serenity Cybersecurity, LLC

security/sssd2: Move man pages to share/man

Approved by:	portmgr (blanket)

security/sssd2: Fix circular dependency with sudo

Re-apply 2f448a87ed31 and remove sudo from the list of dependencies to
fix circular dependency issue when sudo is built with SSSD2 option.
Previous commit was made by dvl@ on now retired sssd-devel port.

PR:		277371
Reported by:	Slawomir Wojciech Wojtczak <vermaden@interia.pl>
Sponsored by:	Rubicon Communications, LLC ("Netgate")

security/sssd2: fix PKGBASE collision

security/sssd2: remove PKGNAMESUFFIX

- Remove "-devel" PKGNAMESUFFIX that I left over after rename

security/sssd2: fix building on current

security/sssd-devel: rename to security/sssd2

- Rename to avoid confusion, port is stable
- Update MOVED
- Update security/sssd/Makefile with name change