Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 10 Feb 2025 14:06:03 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 284709] security/krb5: add separate client and server ports
Message-ID:  <bug-284709-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D284709

            Bug ID: 284709
           Summary: security/krb5: add separate client and server ports
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: cy@FreeBSD.org
          Reporter: lexi@hemlock.eden.le-fay.org
          Assignee: cy@FreeBSD.org
             Flags: maintainer-feedback?(cy@FreeBSD.org)

there is a (known) issue with security/krb5 where LDAP support causes a
dependecy loop if Cyrus SASL is also built with MIT Kerberos support, becau=
se
krb5 depends on openldap26-client and openldap26-client depends on krb5.

to solve this, it would be nice to split the krb5 port into two ports, one =
for
the KDC/other server bits, and one for the clients, which
openldap26-{client,server} could use.  the client port would not have/need =
an
LDAP client.

my use case:

- Kerberos realm is stored in LDAP
- LDAP server (OpenLDAP) should support Kerberos GSSAPI authentication
- unless i've missed something, this is currently impossible.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-284709-7788>