From owner-freebsd-questions@FreeBSD.ORG Thu Nov 11 15:35:07 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D0B8F106566B for ; Thu, 11 Nov 2010 15:35:07 +0000 (UTC) (envelope-from Joerg.Pulz@frm2.tum.de) Received: from mailhost.frm2.tum.de (mailhost.frm2.tum.de [129.187.179.12]) by mx1.freebsd.org (Postfix) with ESMTP id 4349B8FC12 for ; Thu, 11 Nov 2010 15:35:06 +0000 (UTC) Received: from mailhost.frm2.tum.de (localhost [127.0.0.1]) by mailhost.frm2.tum.de (8.14.4/8.14.4) with ESMTP id oABFN4Gn011084; Thu, 11 Nov 2010 16:23:04 +0100 (CET) (envelope-from Joerg.Pulz@frm2.tum.de) X-Virus-Scanned: at mailhost.frm2.tum.de Received: from hades.admin.frm2 (hades.admin.frm2 [172.25.1.10]) (authenticated bits=0) by mailhost.frm2.tum.de (8.14.4/8.14.4) with ESMTP id oABFN0vc011049 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 11 Nov 2010 16:23:00 +0100 (CET) (envelope-from Joerg.Pulz@frm2.tum.de) Date: Thu, 11 Nov 2010 16:22:57 +0100 (CET) From: Joerg Pulz To: =?ISO-8859-15?Q?Leon_Me=DFner?= In-Reply-To: <20101110170053.GE95441@emmi.physik-pool.tu-berlin.de> Message-ID: References: <20101110170053.GE95441@emmi.physik-pool.tu-berlin.de> MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="3469798045-917668999-1289488980=:1682" X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.2.3 (mailhost.frm2.tum.de [129.187.179.12]); Thu, 11 Nov 2010 16:23:00 +0100 (CET) Cc: freebsd-questions@freebsd.org Subject: Re: How do we like our base kerberos? Will it flee soon? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 15:35:07 -0000 This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --3469798045-917668999-1289488980=:1682 Content-Type: TEXT/PLAIN; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 8BIT -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, 10 Nov 2010, Leon Meßner wrote: > Hi, > > I'm looking for workarounds for this crappy situation which currently > prevents FreeBSD8 from working together with libgssapi (see kern/147454) > and multiple threads on -questions. > > What i tried: > > - Use old RELENG_8 and RELENG_8_1 sources where Benjamin's patch still > applied. (Can't build world then). > - Modify /usr/bin/krb5-config to include -lgssapi_spnego -lgssapi_krb5 > at the right place (works on some machines). > > What i didn't try: > > - Use the port. > > How are you handling this situation. Does anyone know a cvs tag= and > date= combination which lets you build world with Benjamin's patch > (tried RELENG_8 and _8_1 from 24.6 and 19.7 and now)? Actually a > complete base kerberos would be much appreciated. Hi, please take a look at ports/152030 and the patches i mentioned in the PR. With applied ports/152030 and the world patch applied, you should be able to build a world fully against the security/heimdal port by simply specifying WITH_KERBEROS_PORT=1 in /etc/src.conf and HEIMDAL_HOME= (normally /usr/local) in /etc/make.conf. You should specify WITHOUT_KERBEROS=1 in /etc/src.conf to avoid mess and confusion with two different heimdal version installed. Don't forget to install the security/heimdal port first. Comments are welcome. I will send out a CFT/RFC as soon as the PR is committed. Kind regards Joerg - -- The beginning is the most important part of the work. -Plato -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (FreeBSD) iD8DBQFM3ApTSPOsGF+KA+MRApnEAJ9G5xQ0dAaEX3a1gDweFdu13aPlCACfd5w8 XzalkEA6/BAsZ0ahtCrIop8= =1dPp -----END PGP SIGNATURE----- --3469798045-917668999-1289488980=:1682--