2.13.1_2securityΣ=4 2.13.1_2Version of this port present on the latest quarterly branch.upstream: 2.13.2A newer version was found upstream by portscout, first on 2026-11-07.
This project provides a set of daemons to manage access to remote
directories and authentication mechanisms, it provides an NSS and
PAM interface toward the system and a pluggable backend system to
connect to multiple different account sources. It is also the
basis to provide client auditing and policy services for projects
like FreeIPA. sssd also features caching, which can allow for
offline use to assist laptop users.
===> The following configuration options are available for sssd2-2.13.1_2:
NLS=on: Native Language Support
TEST=off: Build and/or run tests
===> Use 'make config' to modify these settings
security/sssd2: Fix ldb and idmap library paths
The ldb library path seems incorrect as it does not work in the built-in
ldb of Samba 4.22. Fix that by using SAMBA_LDB_MODULESDIR. This should
fix the following runtime error:
```
* (2025-12-02 03:12:12): [sssd] [sysdb_ldb_connect] (0x4000): No ldb module
path set in env
* (2025-12-02 03:12:12): [sssd] [sysdb_ldb_connect] (0x4000): No ldb module
path set in env
* (2025-12-02 03:12:12): [sssd] [ldb] (0x0010): WARNING: Module [memberof]
not found - do you need to set LDB_MODULES_PATH?
```
Also, use SAMBA_IDMAP_MODULESDIR for consistency.
PR: 291492
Approved by: portmgr blanket
Sponsored by: Klara, Inc.
Differential Revision: https://reviews.freebsd.org/D54138
*: Revise USES=python:... version range constraints
and strip all lower bounds of 3.9 or 3.10 because they are implied now.
python:3.9-X -> python:-X
python:3.9+ -> python
python:3.10-X -> python:-X
python:3.10+ -> python
(options such as ,build preserved)
security/sssd2: fix detection of krb5
Because security/krb5 has bumped version, it is not well detected
and make this port on packaging.
This adds a patch to update the detection of krb 1.22 that is not
on the original sources.
PR: 288708
Approved by: 0mp (mentor)
Approved by: kevans
Approved by: portmgr blanket (build fix)
Sponsored by: Klara, Inc.
Differential Revision: https://reviews.freebsd.org/D51813
*/*: Bump PORTREVISION after libuuid/libblkid switch
from e2fsprogs to util-linux, to complete the bump of all users
of either library that started with Alexander's commit titled
'*/*: Switch to misc/libuuid and misc/libblkid'
PR: 251489
python.mk: rename PYTHON_EXT_SUFFIX to PYTHON_TAG, document, etc
EXT_SUFFIX, according to PEP 3149, refers to the full tag and
extension for compiled extension module objects, eg .cpython-311.so,
.cpython-313t.so, etc. We do not use the correct semantic meaning,
and this usage becomes ambiguous and confusing when tags do not
match between bytecode and compiled extension module objects.
Rename our PYTHON_EXT_SUFFIX to PYTHON_TAG to align with PEP 3147's
specification of a magic tag, which consists of implementation name
and shorthand version only. This is meant for bytecode and other
files containing this tag in their filename that do not depend on
a specific Python ABI for the same version. Chase all existing
consumers.
(Only the first 15 lines of the commit message are shown above )
*/*: Update ports so they use SAMBA_*_PORT variables in LIB_DEPENDS
* Update ports that work with Samba and depend on either of talloc,
tdb and tevent so they use SAMBA_*_PORT variables in LIB_DEPENDS.
* Bump PORTREVISION.
* While here, update WINBIND_CONFIGURE_ON in net/freeradius3/Makefile
so it uses SAMBA_INCLUDEDIR and SAMBA_LIBDIR.
Reviewed by: 0mp, kiwi
Differential Revision: https://reviews.freebsd.org/D48859
security/sssd2: Fix two bugs in the find_uid patch
The UID check was added in commit 9a40ff81f4ea ("security/sssd2:
Reimplement UID-finding using sysctl") and is supposed to exclude kernel
processes, retaining the behaviour of commit ee81c8e455ef
("security/sssd2: Add patch to enumerate UIDs").
However, it mistakenly skipped over processes with UID 0, which could
cause the lookup to fail. Fix the typo.
Also return success if the caller asked us to populate a table and no
entries were added. This matches the previous behaviour.
PR: 284089
Approved by: jhixson (maintainer timeout)
Reviewed by: arrowd
Sponsored by: Klara, Inc.
security/sssd2: Reimplement UID-finding using sysctl
This avoids a dependency on procfs or linprocfs, so makes sssd2
marginally more usable when using the krb5_store_password_if_offline
option.
Sponsored by: Klara, Inc.
Signed-off-by: John Hixson <jhixson@freebsd.org>
security/sssd2: Assorted port cleanups
- Simplify depending on Kerberos
- - Do not use gssapi:bootstrap
- - Do not redefine variables already defined by USES
- - Instead of patching, pass the KRB5_CONFIG env var
- Trim unused dependencies
- Remove hunks from the configure.ac patch that aren't needed anymore
- Simplify SHEBANG_FILES
- No need to define LIB_DIRS, DEBUG_FLAGS and STRIP
- Bump PORTREVISION to catch possible regressions
Tested by: arrowd
Approved by: 0mp, jhixson
Pull Request: https://github.com/freebsd/freebsd-ports/pull/272
Sponsored by: Future Crew, LLC
security/sssd*: Use an absolute path in sssd_prestart()
I believe this script worked by accident before.
PR: 279255
Approved by: maintainer
Sponsored by: Klara, Inc.
security/sssd2: Use SAMBA_PORT and SAMBA_LDB_PORT
security/sssd2 can depend on any Samba version we have in the ports
tree. However, having the exact version of Samba hardcoded in *_DEPENDS
variables makes it hard to use a non-default Samba version.
Let the port pick up the default Samba version (and its ldb port) via
samba.mk. Since net/samba416 is still the default, nothing really
changes for sssd2. However, users can now build sssd2 against
net/samba419 if they set DEFAULT_VERSIONS=samba=4.19.
PR: 278839280774
Approved by: portmgr (infrastructure)
Sponsored by: Klara, Inc.
Co-authored-by: Xavier Beaudouin <kiwi@oav.net>
*/*: Add ${PY_SETUPTOOLS} to BUILD_DEPENDS
Fix build when setuptools is removed from RUN_DEPENDS in
Mk/Uses/python.mk.
PR: 270510
Approved by: portmgr (blanket)
security/sssd2: Add patch to enumerate UIDs
The legacy security/sssd port has a patch which lets one set
krb5_store_password_if_offline=True in a IPA provider configuration
block. The patch fixes some code which uses /proc to enumerate the UIDs
of logged-in users. Without the patch, if one has this configuration
variable set, sssd dies with an obscure error. This caused some pain
when a user was updating from sssd to sssd2.
Sponsored by: Serenity Cybersecurity, LLC
PR: 279255
Reported by: markj@freebsd.org, arrowd@freebsd.org
Obtained from: arrowd@freebsd.org
security/sssd2: Fix circular dependency with sudo
Re-apply 2f448a87ed31 and remove sudo from the list of dependencies to
fix circular dependency issue when sudo is built with SSSD2 option.
Previous commit was made by dvl@ on now retired sssd-devel port.
PR: 277371
Reported by: Slawomir Wojciech Wojtczak <vermaden@interia.pl>
Sponsored by: Rubicon Communications, LLC ("Netgate")
security/sssd-devel: rename to security/sssd2
- Rename to avoid confusion, port is stable
- Update MOVED
- Update security/sssd/Makefile with name change
