Date: Wed, 16 Jul 2014 02:47:18 +0000 (UTC) From: Benjamin Kaduk <bjk@FreeBSD.org> To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r45306 - head/en_US.ISO8859-1/books/porters-handbook Message-ID: <201407160247.s6G2lIgo071285@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: bjk Date: Wed Jul 16 02:47:17 2014 New Revision: 45306 URL: http://svnweb.freebsd.org/changeset/doc/45306 Log: Attempt to dispel rumors that GSSAPI and Kerberos are interchangable. The Generic Security Services Application Programming Interface is an abstract interface for creating security contexts between two peers to allow for secure passing of messages and other operations, which allows for the use of many different underlying security mechanisms. Kerberos 5 is a common such security mechanism, but is far from the only mechanism in use. Many krb5 implementations provide a GSSAPI library that provides the krb5 mechanism(s); in some cases, those libraries can also support user-provided GSSAPI mechanisms as well. The only implementations of the GSSAPI which are currently supported by the USES=gssapi support in the Ports Collection are such libraries provided by krb5 implementations. Approved by: hrs (mentor) Modified: head/en_US.ISO8859-1/books/porters-handbook/uses.xml Modified: head/en_US.ISO8859-1/books/porters-handbook/uses.xml ============================================================================== --- head/en_US.ISO8859-1/books/porters-handbook/uses.xml Tue Jul 15 23:10:35 2014 (r45305) +++ head/en_US.ISO8859-1/books/porters-handbook/uses.xml Wed Jul 16 02:47:17 2014 (r45306) @@ -275,10 +275,12 @@ <literal>flags</literal>, <literal>bootstrap</literal></entry> <entry> - <para>Handle dependency on <application>Kerberos</application> - ports. By default, or set to <literal>base</literal>, - <application>Kerberos</application> from the base system is - used. Set to <literal>heimdal</literal> to use <package + <para>Handle dependencies needed by consumers of the + <acronym>GSS-API</acronym>. Only libraries that provide the + <application>Kerberos</application> mechanism are available. + By default, or set to <literal>base</literal>, + the <acronym>GSS-API</acronym> library from the base system is used. + Can also be set to <literal>heimdal</literal> to use <package role="port">security/heimdal</package>, or <literal>mit</literal> to use <package role="port">security/krb5</package>.</para> @@ -287,7 +289,8 @@ installation is not in <varname>LOCALBASE</varname>, set <varname>HEIMDAL_HOME</varname> (for <literal>heimdal</literal>) or <varname>KRB5_HOME</varname> (for <literal>krb5</literal>) to - the base <application>Kerberos</application> directory.</para> + the location of the <application>Kerberos</application> + installation.</para> <para>These variables are exported for the ports to use:</para> @@ -301,7 +304,7 @@ <listitem><para><varname>GSSAPI_CONFIGURE_ARGS</varname></para></listitem> </itemizedlist> - <para>The <literal>flags</literal> option can be set with + <para>The <literal>flags</literal> option can be given alongside <literal>base</literal>, <literal>heimdal</literal>, or <literal>mit</literal> to automatically add <varname>GSSAPICPPFLAGS</varname>, @@ -312,7 +315,7 @@ <literal>base,flags</literal>.</para> <para>The <literal>bootstrap</literal> option is a special prefix - only for use with <package role="port">security/krb5</package> + only for use by <package role="port">security/krb5</package> and <package role="port">security/heimdal</package>. For example, use <literal>bootstrap,mit</literal>.</para>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201407160247.s6G2lIgo071285>