Date: Thu, 5 Mar 2015 11:10:47 -0500 (EST) From: Benjamin Kaduk <kaduk@MIT.EDU> To: Erik Cederstrand <erik+lists@cederstrand.dk> Cc: "freebsd-security@freebsd.org" <freebsd-security@freebsd.org> Subject: Re: Missind #defines in /usr/include/gssapi/gssapi.h? Message-ID: <alpine.GSO.1.10.1503051105161.3953@multics.mit.edu> In-Reply-To: <30A05DC2-951F-46E6-924B-207E5F32A949@cederstrand.dk> References: <30A05DC2-951F-46E6-924B-207E5F32A949@cederstrand.dk>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 5 Mar 2015, Erik Cederstrand wrote: > Hello list, > > Currently, installing the Python gssapi module (sudo pip install python-gssapi) fails (on FreeBSD 10.1, at least) because a lot of #defines are missing from /usr/include/gssapi/gssapi.h (installed from /usr/src/include/gssapi/gssapi.h) compared to /usr/src/crypto/heimdal/lib/gssapi/gssapi/gssapi.h, e.g.: > > #define GSS_C_AF_INET6 24 > > Is there any reason these #defines are not present? Adding the missing ones let the python-gssapi installation complete. No value has been assigned to the symbol GSS_C_AF_INET6 in a standards-track IETF document, so one might argue that its absence is the correct behavior, as unfortunate as that may be. Apparently it has been in the Heimdal tree since 1999, though (!). Since FreeBSD is basically stuck with the Heimdal implementation for POLA reasons, it would probably be okay to synchronize the installed version with Heimdal's version. My understanding was that python-gssapi was intended to support both Heimdal and MIT implementations, so given that MIT (correctly) does not provide a GSS_C_AF_INET6 symbol, I am somewhat surprised that python-gssapi cannot cope with its absence. -Ben Kaduk
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.GSO.1.10.1503051105161.3953>