From owner-freebsd-ports-bugs@FreeBSD.ORG Thu Oct 8 12:20:01 2009 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8C1A2106568B for ; Thu, 8 Oct 2009 12:20:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 4F4318FC1E for ; Thu, 8 Oct 2009 12:20:01 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n98CK1et099508 for ; Thu, 8 Oct 2009 12:20:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n98CK15m099507; Thu, 8 Oct 2009 12:20:01 GMT (envelope-from gnats) Resent-Date: Thu, 8 Oct 2009 12:20:01 GMT Resent-Message-Id: <200910081220.n98CK15m099507@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Ivan Sy Jr Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 20F111065695 for ; Thu, 8 Oct 2009 12:12:12 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id EAA998FC1F for ; Thu, 8 Oct 2009 12:12:11 +0000 (UTC) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.3/8.14.3) with ESMTP id n98CCBSQ097867 for ; Thu, 8 Oct 2009 12:12:11 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.3/8.14.3/Submit) id n98CCBW0097866; Thu, 8 Oct 2009 12:12:11 GMT (envelope-from nobody) Message-Id: <200910081212.n98CCBW0097866@www.freebsd.org> Date: Thu, 8 Oct 2009 12:12:11 GMT From: Ivan Sy Jr To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: ports/139426: GSSAPI support for FreeBSD BIND dns/bind95 and dns/bind96 X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2009 12:20:01 -0000 >Number: 139426 >Category: ports >Synopsis: GSSAPI support for FreeBSD BIND dns/bind95 and dns/bind96 >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Thu Oct 08 12:20:00 UTC 2009 >Closed-Date: >Last-Modified: >Originator: Ivan Sy Jr >Release: FreeBSD 7.2-RELEASE-p1 >Organization: >Environment: FreeBSD ivantest.adsauth.net 7.2-RELEASE-p1 FreeBSD 7.2-RELEASE-p1 #0: Sat Jun 20 11:50:32 PHT 2009 root@ivantest.adsauth:/usr/obj/usr/src/sys/IVANTEST amd64 >Description: To add user-configured options for bind95 and bind96 when installing these on FreeBSD. When you do a ./configure -h on a BIND 9.5 or BIND 9.6 source, you can see this option: --with-gssapi=PATH Specify path for system-supplied GSSAPI This change request is to suggest inclusion of compiling bind ports with GSSAPI useful for GSS-TSIG stuff. Then this bind port will require security/cyrus-sasl2 applicable only for: dns/bind96 dns/bind95 (patch in this PR is for dns/bind96 only) example output $ ldd `which named` /usr/sbin/named: libgssapi_krb5.so.9 => /usr/lib/libgssapi_krb5.so.9 (0x8007e9000) libcrypto.so.5 => /lib/libcrypto.so.5 (0x8008f8000) libxml2.so.5 => /usr/local/lib/libxml2.so.5 (0x800b8a000) libz.so.4 => /lib/libz.so.4 (0x800dd2000) libiconv.so.3 => /usr/local/lib/libiconv.so.3 (0x800ee6000) libm.so.5 => /lib/libm.so.5 (0x8010e0000) libthr.so.3 => /lib/libthr.so.3 (0x8011fa000) libc.so.7 => /lib/libc.so.7 (0x801312000) libkrb5.so.9 => /usr/lib/libkrb5.so.9 (0x801536000) libroken.so.9 => /usr/lib/libroken.so.9 (0x80167b000) libasn1.so.9 => /usr/lib/libasn1.so.9 (0x801789000) libcom_err.so.4 => /usr/lib/libcom_err.so.4 (0x8018b3000) libcrypt.so.4 => /lib/libcrypt.so.4 (0x8019b5000) >How-To-Repeat: --with-gssapi=PATH Specify path for system-supplied GSSAPI >Fix: Patch attached with submission follows: --- Makefile.orig 2009-09-01 18:45:51.000000000 +0800 +++ Makefile 2009-10-08 19:51:29.000000000 +0800 @@ -48,7 +48,8 @@ DLZ_BDB "DLZ BDB driver" off \ DLZ_LDAP "DLZ LDAP driver" off \ DLZ_FILESYSTEM "DLZ filesystem driver" off \ - DLZ_STUB "DLZ stub driver" off + DLZ_STUB "DLZ stub driver" off \ + GSSAPI "Build with GSSAPI for GSS-TSIG" off # Just in case USE_OPENSSL= yes @@ -151,6 +152,11 @@ BIND_DESTETC= ${PREFIX}/etc .endif +.if defined(WITH_GSSAPI) +CONFIGURE_ARGS+= --with-gssapi=${KRB5_HOME} +LIB_DEPENDS+= sasl2.2:${PORTSDIR}/security/cyrus-sasl2 +.endif + PLIST_SUB+= BIND_DESTETC="${BIND_DESTETC}" MAN1= dig.1 host.1 isc-config.sh.1 nslookup.1 nsupdate.1 >Release-Note: >Audit-Trail: >Unformatted: