Commit graph

55 commits

Author SHA1 Message Date
Cy Schubert
c5dd5e6d13 Put SONAME entries into shared libraries.
Submitted by:	wollman
2003-05-07 21:43:40 +00:00
Cy Schubert
c9f96b0249 Change default for V4 compatibility to reflect best practices
for new installations.

Submitted by:	wollman
2003-05-07 04:13:08 +00:00
Cy Schubert
e67cccab8f Default is to fetch from crypto-publish.org. USA_RESIDENT replaced
by USE_MIT_TARBALL. Users can still fetch manually from MIT by
setting USE_MIT_TARBALL=YES.

Suggested by:	wollman
2003-05-07 04:09:39 +00:00
Cy Schubert
b19f46658c Update 1.2.7 --> 1.2.8. 2003-05-07 03:47:49 +00:00
Cy Schubert
af7a454fd3 Patches from:
- MITKRB5-SA-2003-005:
       Buffer overrun and underrun in principal name handling

  - MITKRB5-SA-2003-004:
       Cryptographic weaknesses in Kerberos v4 protocol; KDC and realm
       compromise possible.

  - MITKRB5-SA-2003-003:
       Faulty length checks in xdrmem_getbytes may allow kadmind DoS.

  - Additional patches from RedHat.

Approved by:	kris (wearing his portmgr hat)
Obtained from:	MIT Website and Nalin Dahyabhai <nalin@redhat.com>
2003-03-21 00:54:06 +00:00
Ade Lovett
7e52725f2a Clear moonlight beckons.
Requiem mors pacem pkg-comment,
And be calm ports tree.

E Nomini Patri, E Fili, E Spiritu Sancti.
2003-03-07 06:14:21 +00:00
Norikatsu Shigemura
4f56b2baa0 Remove RESTRICTED tag for crypto stuff.
Approved by:	kris (implicitly)
2003-02-22 16:12:23 +00:00
Cy Schubert
e781a319dc Update 1.2.6 --> 1.2.7
Note:	Since crypto-publish.org does not yet have krb5-1.2.7 up on their
	website, fetch from their site has been temporarily disabled.
2002-11-16 00:02:13 +00:00
Mario Sergio Fujikawa Ferreira
f0a1969d34 o Rollback PORTCOMMENT modifications while this feature's implementation
is better studied
o Turn PORTCOMMENT variable in Makefile back into pkg-comment files

Approved by:	kris (portmgr hat),
		portmgr, re (silence)
2002-11-10 16:48:51 +00:00
Cy Schubert
bf8abaf92f Use PORTCOMMENT. 2002-11-07 05:46:03 +00:00
Cy Schubert
8117446b64 Fix pkg-plist when KRB5_KRB4_COMPAT=NO is specified.
Submitted by:	Craig Boston <craig@olyun.gank.org>
2002-10-28 18:28:38 +00:00
Cy Schubert
e413d8b70b Circumvent the use of bison, use FreeBSD yacc instead.
PR:		44446
2002-10-25 15:03:55 +00:00
Cy Schubert
cf7aca2a64 Fix buffer overflow in kadmind4 (remote user can gain root access to
KDC host).

Obtained from:	Tom Yu <tlyu@mit.edu> on kerberos-announce mailing list,
		MIT krb5 Security Advisory 2002-002
2002-10-23 22:30:39 +00:00
Cy Schubert
456c93a6b2 Crypto-publish.org has finally put krb5-1.2.6 up on their site. The
patch reimplements code to fetch MIT Kerberos from their site when
USA_RESIDENT=NO.

Approved by:	kris
2002-09-25 17:50:00 +00:00
Cy Schubert
495424cc3f Update 1.2.5 --> 1.2.6
Note:	Since crypto-publish.org does not yet have krb5-1.2.6 up on their
	website, fetch from their site has been temporarily disabled.
2002-09-13 13:46:48 +00:00
Cy Schubert
9c4b099138 Fix extract for non-root users.
Noticed by:	nectar
Pointy hat to:	cy
2002-08-17 00:29:41 +00:00
Jacques Vidrine
20b7146972 Correct Sun RPC buffer overflow.
<URL:http://online.securityfocus.com/archive/1/285308>
<URL:http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20823>
2002-08-02 18:22:45 +00:00
Cy Schubert
16a3968791 README.FreeBSD fix.
PR:		39936
Submitted by:	Matthew West <mwest@uct.ac.za>
2002-07-01 06:20:38 +00:00
Cy Schubert
60b5569db4 Fix problem with V4 keys. We should get KRB5_KDB_NO_MATCHING_KEY, not
ENOENT.  Obtained from /cvs/krbdev/krb5/src/kdc/kdc_preauth.c,v rev 5.31
in MIT KRB5 tree (fix etype info; wrong termination condition used in
get_etype_info).

Obtained from:	Sam Hartman <hartmans@mit.edu>
2002-06-26 04:49:07 +00:00
Cy Schubert
d845a8a153 Now that www.crypto-publish.org has put the latest version of MIT KRB5
up on their website again, reimplementation of the Makefile patch that
fetched the the tarball from their site for users outside of the US
(originally in Makefile rev 1.29).  USA_RESIDENT=YES still supports
manual fetching from web.mit.edu.
2002-05-03 02:20:17 +00:00
Cy Schubert
f377a101ed Upgrade 1.2.4 --> 1.2.5 2002-05-02 14:30:24 +00:00
Cy Schubert
341484d039 www.crypto-publish.org does not have krb5-1.2.4.{tar,tar.Z,tar.gz,tar.bz2}.
Reported by:	bento
2002-03-29 13:23:08 +00:00
Cy Schubert
a50d121378 MIT currently distributes their KRB5 distribution in a tarball (.tar)
that contains the distribution itself, in a tar.gz file, and a signature
certificate, contained in a detached .tar.gz.asc file.  Prior to this
patch, users installing MIT KRB5 had to extract the tarball into
/usr/ports/distfiles, then proceed with the installation.  This caused
confusion among those installing the port.  This patch addresses the
problem by extracting the .tar.gz file from the tarball, then unpacking
the .tar.gz file before continuing with the build.
2002-03-18 22:52:43 +00:00
Cy Schubert
4aa8bcaf49 Update 1.2.3 --> 1.2.4 2002-03-01 13:23:47 +00:00
Cy Schubert
c0f94d44f3 Update 1.2.2 -> 1.2.3 2002-01-16 03:17:24 +00:00
Cy Schubert
6108625cb9 In order to make the MIT KRB5 port compatible with FreeBSD, the port
now makes use of login.conf and login.access.  This is performed by
using FreeBSD login(1) instead of MIT KRB5 login.krb5(8).

The MIT KRB5 login.krb5(8) can still be used by specifying "-L" in
the klogind and telnetd arguments in inetd.conf.  This is documented
in a new file called README.FreeBSD.

Reviewed by:	nectar
2002-01-08 15:05:08 +00:00
Jacques Vidrine
dd4cf80985 = Modify `ksu' so that it uses the login cap database. Michael Allman
<msa@dinosauricon.com> provided the original patches.

= For users outside of the US, point to www.crypto-publish.org for the
  distfiles.  It was Chris Knight <chris@aims.com.au>'s idea.

Submitted by:	Cy.Schubert@uumail.gov.bc.ca (MAINTAINER)
PR:		ports/29865
2001-09-07 19:53:09 +00:00
Jacques Vidrine
04574bc85a New maintainer: Cy Schubert <Cy.Schubert@uumail.gov.bc.ca> 2001-07-24 19:19:13 +00:00
Jacques Vidrine
a049586359 Bump PORTREVISION.
Update telnetd vulnerability fixes from FreeBSD.
2001-07-24 15:29:39 +00:00
Jacques Vidrine
7749fc1146 Merge telnetd vulnerability fix from FreeBSD.
Submitted by:	Cy Schubert <Cy.Schubert@uumail.gov.bc.ca>
2001-07-20 16:53:32 +00:00
Jacques Vidrine
8403e24bd7 Bump PORTREVISION for ftpd buffer overflow fix. 2001-04-27 18:16:58 +00:00
Jacques Vidrine
ddfc9c62a8 Update 1.2.1 -> 1.2.2 2001-03-02 17:33:57 +00:00
Jacques Vidrine
f94f15ab3b Bump PORTREVISION for previous commit (fix for _PATH_NOLOGIN).
Reminded by:	kris
2001-01-10 15:27:00 +00:00
Jacques Vidrine
db45d66043 Update 1.2 -> 1.2.1. From the announcement:
The MIT Kerberos Team announces the availibility of MIT Kerberos 5
  Release 1.2.1.  This is primarily a bugfix release.  Changes include:

  * A bug in the gssapi library that prevented kadmin clients from
    working has been fixed.  For some reason this was not caught during
    beta testing.

  * login.c now correctly sets the default ccache name.

  * A memory leak in conv_princ.c has been fixed.
2000-06-30 17:41:25 +00:00
Jacques Vidrine
a5b7e6a18c Oops, had a bogus PORTVERSION/DISTNAME from when I was testing
1.2-beta4.
2000-06-24 02:49:07 +00:00
Jacques Vidrine
071860d8ce Update 1.1.1 -> 1.2 2000-06-24 01:48:11 +00:00
Satoshi Asami
ffb21b5654 Rename INSTALLS_SHLIBS to INSTALLS_SHLIB. (There was a typo in the
previous commit message to bsd.port.mk, which said INSTALL_SHLIBS.  Boo.)

Line up the rhs of variable assignments nicely.  Remove a couple of extra
whitespaces while I'm here.

Suggested by:	 sobomax
2000-06-16 21:52:40 +00:00
Maxim Sobolev
dc1177a9a5 Fourth round of INSTALLS_SHLIBS conversion. 2000-06-16 08:48:22 +00:00
Chris Piazza
3df86a88a9 Update with the new PORTNAME/PORTVERSION variables 2000-04-09 18:34:06 +00:00
Jacques Vidrine
001fea0ac5 Update 1.1 -> 1.1.1 2000-01-16 19:10:58 +00:00
Jacques Vidrine
5f0c4b6514 Update 1.0.6 -> 1.1 1999-10-04 14:32:28 +00:00
Michael Haro
65ab34a667 FreeBSD.ORG -> FreeBSD.org
Prompted by PR:  13476, 13477
Submitted by:  KATO Tsuguru
1999-08-31 06:53:31 +00:00
Peter Wemm
a53421230c $Id$ -> $FreeBSD$ 1999-08-31 01:53:22 +00:00
Michael Haro
3262cce303 expr -> ${EXPR}
mv   -> ${MV}
rm   -> ${RM}
tr   -> ${TR}
1999-08-28 02:42:41 +00:00
Michael Haro
5281212be3 chmod -> ${CHMOD}
chown -> ${CHOWN}
1999-08-22 19:01:07 +00:00
Michael Haro
5ce8e8e5c7 Remove the test to create ${PREFIX}/share/info/dir as it is now
in bsd.port.mk and this helps to unify the check and install.
1999-06-05 22:32:11 +00:00
Jacques Vidrine
b17353afd8 Update 1.0.5 -> 1.0.6 1999-05-27 02:08:26 +00:00
Satoshi Asami
96bc8048c3 Use bsd.port.{pre,post}.mk to move PORTOBJFORMAT to front, or change
shell loops to make loops.  Use EXTRA_PKG_FLAGS to add install scripts
instead of adding it to PKG_FLAGS after bsd.port.mk.
1998-11-14 09:43:39 +00:00
Jacques Vidrine
17565d52fa Build and install correctly for a.out and ELF. 1998-11-07 02:33:51 +00:00
Mark Murray
e8b053097d Honour CFLAGS. 1998-09-27 11:34:28 +00:00