Date: Mon, 5 Dec 2022 20:09:11 GMT From: Cy Schubert <cy@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-branches@FreeBSD.org Subject: git: f1922e0afc7b - 2022Q4 - security/heimdal-devel: New port tracking Heimdal develpment Message-ID: <202212052009.2B5K9BwT042326@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch 2022Q4 has been updated by cy: URL: https://cgit.FreeBSD.org/ports/commit/?id=f1922e0afc7bd475acbf47a8ce3ffb3e5d469167 commit f1922e0afc7bd475acbf47a8ce3ffb3e5d469167 Author: Cy Schubert <cy@FreeBSD.org> AuthorDate: 2022-11-17 23:57:46 +0000 Commit: Cy Schubert <cy@FreeBSD.org> CommitDate: 2022-12-05 20:06:12 +0000 security/heimdal-devel: New port tracking Heimdal develpment This new heimdal port tracks the Heimdal development branch. The last security advisory showed us we might want to track its development. (cherry picked from commit 4e44a84dcc9abab445f7cd2dc37346338bfd9691) --- security/Makefile | 1 + security/heimdal-devel/Makefile | 131 ++ security/heimdal-devel/distinfo | 3 + security/heimdal-devel/files/ipropd_master.in | 45 + security/heimdal-devel/files/ipropd_slave.in | 37 + security/heimdal-devel/files/kpasswdd-Makefile | 15 + security/heimdal-devel/files/kpasswdd-cracklib.c | 22 + .../heimdal-devel/files/patch-cf-make-proto.pl | 11 + .../files/patch-cf_check-compile-et.m4 | 11 + security/heimdal-devel/files/patch-ch_pthreads.m4 | 11 + security/heimdal-devel/files/patch-configure.ac | 10 + .../heimdal-devel/files/patch-lib-krb5-krb5_locl.h | 20 + .../heimdal-devel/files/patch-lib__sl__slc-lex.l | 11 + .../files/patch-tools-heimdal-gssapi.pc.in | 10 + .../heimdal-devel/files/patch-tools-krb5-config.in | 10 + security/heimdal-devel/pkg-descr | 3 + security/heimdal-devel/pkg-message | 11 + security/heimdal-devel/pkg-plist | 1258 ++++++++++++++++++++ 18 files changed, 1620 insertions(+) diff --git a/security/Makefile b/security/Makefile index 1fb61f99161f..7af0724c9ce7 100644 --- a/security/Makefile +++ b/security/Makefile @@ -204,6 +204,7 @@ SUBDIR += heaan SUBDIR += headscale SUBDIR += heimdal + SUBDIR += heimdal-devel SUBDIR += helib SUBDIR += hexl SUBDIR += highwayhash diff --git a/security/heimdal-devel/Makefile b/security/heimdal-devel/Makefile new file mode 100644 index 000000000000..2b6486aeb434 --- /dev/null +++ b/security/heimdal-devel/Makefile @@ -0,0 +1,131 @@ +PORTNAME= heimdal +PORTVERSION= ${HEIMDAL_COMMIT_DATE} +CATEGORIES= security +PKGNAMESUFFIX= -devel +HASH= c132e6ff4 +HEIMDAL_COMMIT_DATE= 2022.11.17 + +MAINTAINER= cy@FreeBSD.org +COMMENT= Popular BSD-licensed implementation of Kerberos 5 +WWW= https://www.h5l.org/ + +LICENSE= BSD3CLAUSE +LICENSE_FILE= ${WRKSRC}/LICENSE + +USE_GITHUB= yes +GH_TAGNAME= ${HASH} + +CONFLICTS= krb5 krb5-* + +USES= cpe gettext-runtime gssapi:bootstrap,heimdal libtool pathfix \ + pkgconfig python:build readline makeinfo ssl +CPE_VENDOR= ${PORTNAME}_project +USE_LDCONFIG= ${GSSAPILIBDIR} + +# Needs clang-format which is only provided by the port. +# Else asm1_fails resulting in a command not found error. +BUILD_DEPENDS= clang${LLVM_DEFAULT}:devel/llvm${LLVM_DEFAULT} + +LIB_DEPENDS= liblockfile.so:devel/liblockfile + +GNU_CONFIGURE= yes +CONFIGURE_ENV= ac_cv_header_fnmatch_h=yes \ + ac_cv_header_db_h=no \ + ac_cv_header_db3_db_h=no \ + ac_cv_header_db4_db_h=no \ + ac_cv_header_db5_db_h=no \ + ac_cv_header_db6_db_h=no \ + ac_cv_prog_COMPILE_ET=${WRKSRC}/lib/com_err/compile_et +CONFIGURE_ARGS= --with-berkeley-db \ + --with-libintl \ + --with-libintl-include="${LOCALBASE}/include" \ + --with-libintl-lib="${LOCALBASE}/lib" \ + --libdir="${GSSAPILIBDIR}" \ + --includedir="${GSSAPIINCDIR}" \ + --with-kcm \ + --with-openssl \ + --with-openssl-include="${OPENSSLINC}" \ + --with-openssl-lib="${OPENSSLLIB}" \ + --enable-otp \ + --enable-pthread-support \ + --with-readline="${LOCALBASE}" \ + --with-hdbdir="/var/${PORTNAME}" \ + --sysconfdir="${PREFIX}/etc" \ + CLANG_FORMAT="${LOCALBASE}/bin/clang-format${LLVM_DEFAULT}" \ + --enable-kx509 +# XXX --with-readline picks up libreadline even if found in /usr/lib. +MAKE_ENV= INSTALL_CATPAGES=no +INSTALL_TARGET= install-strip +.if !exists(/etc/rc.d/ipropd_master) +USE_RC_SUBR= ipropd_master ipropd_slave +.endif +INFO= heimdal hx509 + +MAKE_JOBS_UNSAFE= yes + +OPTIONS_DEFINE= IPV6 BDB LMDB SQLITE LDAP PKINIT DIGEST KX509 CRACKLIB +OPTIONS_DEFAULT=IPV6 BDB PKINIT DIGEST KX509 +OPTIONS_SUB= yes + +IPV6_CONFIGURE_WITH= ipv6 + +BDB_DESC= Enable BerkeleyDB KDC backend support +BDB_USES= bdb:5 localbase +BDB_CONFIGURE_ENV= ac_cv_header_db${BDB_VER}_db_h=yes \ + ac_cv_func_db_create=yes \ + ac_cv_funclib_db_create="-l${BDB_LIB_NAME}" +BDB_CONFIGURE_ON= --disable-ndbm-db +BDB_CONFIGURE_ENV_OFF= ac_cv_header_db_h=yes \ + ac_cv_func_db_create=no \ + ac_cv_funclib_db_create=no +BDB_CONFIGURE_OFF= --enable-ndbm-db + +LMDB_DESC= Enable LMDB KDC backend support +LMDB_CONFIGURE_ENABLE= mdb_db +LMDB_LIB_DEPENDS= liblmdb.so:databases/lmdb + +SQLITE_DESC= Enable SQLite KDC backend support +SQLITE_USES= sqlite +SQLITE_CONFIGURE_ON= --with-sqlite3-include="${LOCALBASE}/include" \ + --with-sqlite3-lib="${LOCALBASE}/lib" +SQLITE_CONFIGURE_WITH= sqlite3 + +LDAP_DESC= Enable OpenLDAP KDC backend support +LDAP_USE= OPENLDAP=yes +LDAP_CONFIGURE_ON= --with-openldap-include="${LOCALBASE}/include" \ + --with-openldap-lib="${LOCALBASE}/lib" +LDAP_CONFIGURE_WITH= openldap + +PKINIT_DESC= Enable PK-INIT support +PKINIT_CONFIGURE_ENABLE=pk-init + +DIGEST_DESC= Enable DIGEST support +DIGEST_CONFIGURE_ENABLE=digest + +KX509_DESC= Enable kx509 support +KX509_CONFIGURE_ENABLE= kx509 + +CRACKLIB_DESC= Use CrackLib for password quality checking +CRACKLIB_LIB_DEPENDS= libcrack.so:security/cracklib + +.include <bsd.port.options.mk> + +post-extract: + @${MKDIR} ${WRKSRC}/kpasswdd-cracklib + ${INSTALL_DATA} ${FILESDIR}/kpasswdd-cracklib.c \ + ${WRKSRC}/kpasswdd-cracklib + ${INSTALL_DATA} ${FILESDIR}/kpasswdd-Makefile \ + ${WRKSRC}/kpasswdd-cracklib/Makefile + +pre-configure: + cd ${WRKSRC} && ./autogen.sh + +post-build-CRACKLIB-on: + cd ${WRKSRC}/kpasswdd-cracklib && \ + ${SETENV} ${MAKE_ENV} ${MAKE} ${MAKE_ARGS} ${BUILD_TARGET} + +post-install-CRACKLIB-on: + cd ${WRKSRC}/kpasswdd-cracklib && \ + ${SETENV} ${MAKE_ENV} ${MAKE} ${MAKE_ARGS} ${INSTALL_TARGET} + +.include <bsd.port.mk> diff --git a/security/heimdal-devel/distinfo b/security/heimdal-devel/distinfo new file mode 100644 index 000000000000..0fac28169091 --- /dev/null +++ b/security/heimdal-devel/distinfo @@ -0,0 +1,3 @@ +TIMESTAMP = 1668725642 +SHA256 (heimdal-heimdal-2022.11.17-c132e6ff4_GH0.tar.gz) = 333ea842bc604c972e2b9b508f3962de01acae6d356222f274ded298f67fb8d8 +SIZE (heimdal-heimdal-2022.11.17-c132e6ff4_GH0.tar.gz) = 13069492 diff --git a/security/heimdal-devel/files/ipropd_master.in b/security/heimdal-devel/files/ipropd_master.in new file mode 100644 index 000000000000..274d6e01303f --- /dev/null +++ b/security/heimdal-devel/files/ipropd_master.in @@ -0,0 +1,45 @@ +#!/bin/sh + +# PROVIDE: ipropd_master +# REQUIRE: kerberos +# KEYWORD: shutdown + +# ipropd_master_keytab: +# Keytab file for iprop service. +# ipropd_master_slaves: +# A list of slave nodes (hostname). + +. /etc/rc.subr + +name=ipropd_master +rcvar=${name}_enable +: ${ipropd_master_enable:=NO} +: ${ipropd_master_program:=%%PREFIX%%/libexec/ipropd-master} +: ${ipropd_master_keytab:="/etc/krb5.keytab"} +required_files="$ipropd_master_keytab" +start_precmd=${name}_start_precmd +start_postcmd=${name}_start_postcmd + +ipropd_master_start_precmd() +{ + + if [ -z "$ipropd_master_slaves" ]; then + warn "\$ipropd_master_slaves is empty." + return 1 + fi + for _slave in $ipropd_master_slaves; do + echo $_slave + done > /var/heimdal/slaves || return 1 + command_args="$command_args \ + --keytab=\"$ipropd_master_keytab\" \ + --detach \ + " +} +ipropd_master_start_postcmd() +{ + + echo "${name}: slave nodes: $ipropd_master_slaves" +} + +load_rc_config $name +run_rc_command "$1" diff --git a/security/heimdal-devel/files/ipropd_slave.in b/security/heimdal-devel/files/ipropd_slave.in new file mode 100644 index 000000000000..482409573aca --- /dev/null +++ b/security/heimdal-devel/files/ipropd_slave.in @@ -0,0 +1,37 @@ +#!/bin/sh + +# PROVIDE: ipropd_slave +# REQUIRE: kerberos +# KEYWORD: shutdown + +# ipropd_slave_keytab: +# Keytab file for iprop service. +# ipropd_slave_master: +# Hostname of the master node. + +. /etc/rc.subr + +name=ipropd_slave +rcvar=${name}_enable +: ${ipropd_slave_enable:=NO} +: ${ipropd_slave_program:=%%PREFIX%%/libexec/ipropd-slave} +: ${ipropd_slave_keytab:="/etc/krb5.keytab"} +required_files="$ipropd_slave_keytab" +start_precmd=${name}_start_precmd + +ipropd_slave_start_precmd() +{ + + if [ -z "$ipropd_slave_master" ]; then + warn "\$ipropd_slave_master is empty." + return 1 + fi + command_args=" \ + $command_args \ + --keytab=\"$ipropd_slave_keytab\" \ + --detach \ + $ipropd_slave_master" +} + +load_rc_config $name +run_rc_command "$1" diff --git a/security/heimdal-devel/files/kpasswdd-Makefile b/security/heimdal-devel/files/kpasswdd-Makefile new file mode 100644 index 000000000000..2ef50e5253f8 --- /dev/null +++ b/security/heimdal-devel/files/kpasswdd-Makefile @@ -0,0 +1,15 @@ +all: kpasswdd-cracklib.so + +kpasswdd-cracklib.so: kpasswdd-cracklib.c + ${CC} ${CFLAGS} -fPIC -shared \ + -DLOCALBASE=\"${LOCALBASE}\" \ + -I${LOCALBASE}/include -I./include \ + -o ${.TARGET} ${.ALLSRC} \ + -lcrack -L${LOCALBASE}/lib + +install-strip: install + +install: ${DESTDIR}${PREFIX}/lib/heimdal/kpasswdd-cracklib.so + +${DESTDIR}${PREFIX}/lib/heimdal/kpasswdd-cracklib.so: kpasswdd-cracklib.so + ${BSD_INSTALL_LIB} ${.ALLSRC} ${.TARGET} diff --git a/security/heimdal-devel/files/kpasswdd-cracklib.c b/security/heimdal-devel/files/kpasswdd-cracklib.c new file mode 100644 index 000000000000..83be6904ebb3 --- /dev/null +++ b/security/heimdal-devel/files/kpasswdd-cracklib.c @@ -0,0 +1,22 @@ +#include <stdlib.h> +#include <string.h> +#include <krb5.h> +#include <packer.h> + +int version = 0; + +const char * +passwd_check(krb5_context context, krb5_principal principal, + krb5_data *password) +{ + char *p, *result; + + p = malloc(password->length + 1); + if (p == NULL) + return "out of memory"; + memcpy(p, password->data, password->length); + p[password->length] = '\0'; + result = FascistCheck(p, LOCALBASE "/libdata/cracklib/cracklib-words"); + free(p); + return result; +} diff --git a/security/heimdal-devel/files/patch-cf-make-proto.pl b/security/heimdal-devel/files/patch-cf-make-proto.pl new file mode 100644 index 000000000000..bf6fd1447cdc --- /dev/null +++ b/security/heimdal-devel/files/patch-cf-make-proto.pl @@ -0,0 +1,11 @@ +--- cf/make-proto.pl.orig 2019-06-07 06:21:35 UTC ++++ cf/make-proto.pl +@@ -4,7 +4,7 @@ + use Getopt::Std; + use File::Compare; + +-use JSON; ++# use JSON; + + my $comment = 0; + my $doxygen = 0; diff --git a/security/heimdal-devel/files/patch-cf_check-compile-et.m4 b/security/heimdal-devel/files/patch-cf_check-compile-et.m4 new file mode 100644 index 000000000000..49dd2ffeaacc --- /dev/null +++ b/security/heimdal-devel/files/patch-cf_check-compile-et.m4 @@ -0,0 +1,11 @@ +--- cf/check-compile-et.m4.orig 2022-11-17 06:42:48.000000000 -0800 ++++ cf/check-compile-et.m4 2022-11-17 15:10:14.877952000 -0800 +@@ -7,7 +7,7 @@ + + krb_cv_compile_et="no" + krb_cv_com_err_need_r="" +-krb_cv_compile_et_cross=no ++krb_cv_compile_et_cross=yes + if test "${COMPILE_ET}" != "no"; then + + dnl We have compile_et. Now let's see if it supports `prefix' and `index'. diff --git a/security/heimdal-devel/files/patch-ch_pthreads.m4 b/security/heimdal-devel/files/patch-ch_pthreads.m4 new file mode 100644 index 000000000000..60ada3bc55ac --- /dev/null +++ b/security/heimdal-devel/files/patch-ch_pthreads.m4 @@ -0,0 +1,11 @@ +--- cf/pthreads.m4.orig 2022-11-17 06:42:48.000000000 -0800 ++++ cf/pthreads.m4 2022-11-17 15:04:24.219994000 -0800 +@@ -34,7 +34,7 @@ + ;; + *-*-freebsd*) + native_pthread_support=yes +- PTHREAD_LIBADD="-pthread" ++ PTHREAD_LIBADD="-lpthread" + ;; + *-*-openbsd*) + native_pthread_support=yes diff --git a/security/heimdal-devel/files/patch-configure.ac b/security/heimdal-devel/files/patch-configure.ac new file mode 100644 index 000000000000..048b6c83b622 --- /dev/null +++ b/security/heimdal-devel/files/patch-configure.ac @@ -0,0 +1,10 @@ +--- configure.ac.orig 2019-06-07 06:21:39 UTC ++++ configure.ac +@@ -153,6 +153,7 @@ AC_ARG_ENABLE(kx509, + if test "$enable_kx509" != no ;then + AC_DEFINE([KX509], 1, [Define to enable kx509.]) + fi ++AM_CONDITIONAL(KX509, test "$enable_kx509" != no) + + dnl Need to test if pkg-config exists + PKG_PROG_PKG_CONFIG diff --git a/security/heimdal-devel/files/patch-lib-krb5-krb5_locl.h b/security/heimdal-devel/files/patch-lib-krb5-krb5_locl.h new file mode 100644 index 000000000000..7c1d29183477 --- /dev/null +++ b/security/heimdal-devel/files/patch-lib-krb5-krb5_locl.h @@ -0,0 +1,20 @@ +--- lib/krb5/krb5_locl.h.orig 2019-06-07 06:21:39 UTC ++++ lib/krb5/krb5_locl.h +@@ -143,7 +143,7 @@ struct _krb5_krb_auth_data; + #include <krb5.h> + #include <krb5_err.h> + #include <asn1_err.h> +-#ifdef PKINIT ++#if defined(PKINIT) || defined(KX509) + #include <hx509.h> + #endif + +@@ -271,7 +271,7 @@ typedef struct krb5_context_data { + #define KRB5_CTX_F_RD_REQ_IGNORE 16 + #define KRB5_CTX_F_FCACHE_STRICT_CHECKING 32 + struct send_to_kdc *send_to_kdc; +-#ifdef PKINIT ++#if defined(PKINIT) || defined(KX509) + hx509_context hx509ctx; + #endif + unsigned int num_kdc_requests; diff --git a/security/heimdal-devel/files/patch-lib__sl__slc-lex.l b/security/heimdal-devel/files/patch-lib__sl__slc-lex.l new file mode 100644 index 000000000000..c9d450472321 --- /dev/null +++ b/security/heimdal-devel/files/patch-lib__sl__slc-lex.l @@ -0,0 +1,11 @@ +--- lib/sl/slc-lex.l.orig 2017-04-11 21:38:21 UTC ++++ lib/sl/slc-lex.l +@@ -47,8 +47,6 @@ unsigned lineno = 1; + static void handle_comment(void); + static char * handle_string(void); + +-#define YY_NO_UNPUT +- + #undef ECHO + + %} diff --git a/security/heimdal-devel/files/patch-tools-heimdal-gssapi.pc.in b/security/heimdal-devel/files/patch-tools-heimdal-gssapi.pc.in new file mode 100644 index 000000000000..8e133986b39d --- /dev/null +++ b/security/heimdal-devel/files/patch-tools-heimdal-gssapi.pc.in @@ -0,0 +1,10 @@ +--- tools/heimdal-gssapi.pc.in.orig 2017-04-11 21:38:21 UTC ++++ tools/heimdal-gssapi.pc.in +@@ -9,6 +9,6 @@ Description: Heimdal is an implementatio + Version: @VERSION@ + URL: http://www.pdc.kth.se/heimdal/ + Requires.private: heimdal-krb5 +-Libs: -L${libdir} -lgssapi ++Libs: -L${libdir} -Wl,-rpath=${libdir} -lgssapi + Libs.private: -lheimntlm @LIB_crypt@ + Cflags: -I${includedir} diff --git a/security/heimdal-devel/files/patch-tools-krb5-config.in b/security/heimdal-devel/files/patch-tools-krb5-config.in new file mode 100644 index 000000000000..30d434611fe3 --- /dev/null +++ b/security/heimdal-devel/files/patch-tools-krb5-config.in @@ -0,0 +1,10 @@ +--- tools/krb5-config.in.orig 2017-04-11 21:38:21 UTC ++++ tools/krb5-config.in +@@ -85,6 +85,7 @@ for i in $*; do + ;; + --libs) + do_libs=yes ++ do_lib_deps=yes + ;; + --deps) + do_lib_deps=yes diff --git a/security/heimdal-devel/pkg-descr b/security/heimdal-devel/pkg-descr new file mode 100644 index 000000000000..5f407e6fc487 --- /dev/null +++ b/security/heimdal-devel/pkg-descr @@ -0,0 +1,3 @@ +Heimdal is an implementation of Kerberos 5, largely written in Sweden +(due to crypto export legal issues in the US at the time). It is freely +available under a three clause BSD style license. diff --git a/security/heimdal-devel/pkg-message b/security/heimdal-devel/pkg-message new file mode 100644 index 000000000000..e9c263eac41b --- /dev/null +++ b/security/heimdal-devel/pkg-message @@ -0,0 +1,11 @@ +[ +{ type: install + message: <<EOM +heimdal-7.1.0_1 uses a new database format which is incompatible +with Heimdal in the base system and heimdal-1.5.3_6 or prior. + +Please read 20161112 in /usr/ports/UPDATING carefully to upgrade +your database. +EOM +} +] diff --git a/security/heimdal-devel/pkg-plist b/security/heimdal-devel/pkg-plist new file mode 100644 index 000000000000..7c19b3414004 --- /dev/null +++ b/security/heimdal-devel/pkg-plist @@ -0,0 +1,1258 @@ +bin/afslog +bin/bsearch +bin/gsstool +bin/heimtools +bin/hxtool +bin/idn-lookup +bin/kadmin +bin/kdestroy +bin/kf +bin/kgetcred +bin/kinit +bin/klist +bin/kpasswd +bin/krb5-config +bin/kswitch +bin/ktutil +bin/otp +bin/otpprint +bin/pagsh +bin/string2key +bin/su +bin/verify_krb5_conf +include/heimdal/asn1-common.h +include/heimdal/asn1_err.h +include/heimdal/base64.h +include/heimdal/cms_asn1.h +include/heimdal/com_err.h +include/heimdal/com_right.h +include/heimdal/crmf_asn1.h +include/heimdal/der-private.h +include/heimdal/der-protos.h +include/heimdal/der.h +include/heimdal/digest_asn1.h +include/heimdal/getarg.h +include/heimdal/gssapi.h +include/heimdal/gssapi/gkrb5_err.h +include/heimdal/gssapi/gssapi.h +include/heimdal/gssapi/gssapi_krb5.h +include/heimdal/gssapi/gssapi_ntlm.h +include/heimdal/gssapi/gssapi_oid.h +include/heimdal/gssapi/gssapi_spnego.h +include/heimdal/hcrypto/aes.h +include/heimdal/hcrypto/bn.h +include/heimdal/hcrypto/des.h +include/heimdal/hcrypto/dh.h +include/heimdal/hcrypto/dsa.h +include/heimdal/hcrypto/ec.h +include/heimdal/hcrypto/ecdh.h +include/heimdal/hcrypto/ecdsa.h +include/heimdal/hcrypto/engine.h +include/heimdal/hcrypto/evp-cc.h +include/heimdal/hcrypto/evp-hcrypto.h +include/heimdal/hcrypto/evp-openssl.h +include/heimdal/hcrypto/evp-pkcs11.h +include/heimdal/hcrypto/evp.h +include/heimdal/hcrypto/hmac.h +include/heimdal/hcrypto/md4.h +include/heimdal/hcrypto/md5.h +include/heimdal/hcrypto/pkcs12.h +include/heimdal/hcrypto/rand.h +include/heimdal/hcrypto/rc2.h +include/heimdal/hcrypto/rc4.h +include/heimdal/hcrypto/rsa.h +include/heimdal/hcrypto/sha.h +include/heimdal/hcrypto/ui.h +include/heimdal/hcrypto/undef.h +include/heimdal/hdb-protos.h +include/heimdal/hdb.h +include/heimdal/hdb_asn1.h +include/heimdal/hdb_err.h +include/heimdal/heim-ipc.h +include/heimdal/heim_asn1.h +include/heimdal/heim_err.h +include/heimdal/heimbase.h +include/heimdal/heimntlm-protos.h +include/heimdal/heimntlm.h +include/heimdal/hex.h +include/heimdal/hx509-protos.h +include/heimdal/hx509.h +include/heimdal/hx509_err.h +include/heimdal/k524_err.h +include/heimdal/kadm5/admin.h +include/heimdal/kadm5/kadm5-private.h +include/heimdal/kadm5/kadm5-protos.h +include/heimdal/kadm5/kadm5-pwcheck.h +include/heimdal/kadm5/kadm5_err.h +include/heimdal/kadm5/private.h +include/heimdal/kafs.h +include/heimdal/kdc-protos.h +include/heimdal/kdc.h +include/heimdal/krb5-protos.h +include/heimdal/krb5-types.h +include/heimdal/krb5.h +include/heimdal/krb5/an2ln_plugin.h +include/heimdal/krb5/ccache_plugin.h +include/heimdal/krb5/db_plugin.h +include/heimdal/krb5/locate_plugin.h +include/heimdal/krb5/send_to_kdc_plugin.h +include/heimdal/krb5/windc_plugin.h +include/heimdal/krb5_asn1.h +include/heimdal/krb5_ccapi.h +include/heimdal/krb5_err.h +include/heimdal/kx509_asn1.h +include/heimdal/ntlm_err.h +include/heimdal/ocsp_asn1.h +include/heimdal/otp.h +include/heimdal/parse_bytes.h +include/heimdal/parse_time.h +include/heimdal/parse_units.h +include/heimdal/pkcs10_asn1.h +include/heimdal/pkcs12_asn1.h +include/heimdal/pkcs8_asn1.h +include/heimdal/pkcs9_asn1.h +include/heimdal/pkinit_asn1.h +include/heimdal/resolve.h +include/heimdal/rfc2459_asn1.h +include/heimdal/roken-common.h +include/heimdal/roken.h +include/heimdal/rtbl.h +include/heimdal/sl.h +include/heimdal/wind.h +include/heimdal/wind_err.h +include/heimdal/xdbm.h +%%CRACKLIB%%lib/heimdal/kpasswdd-cracklib.so +lib/heimdal/libasn1.a +lib/heimdal/libasn1.so +lib/heimdal/libasn1.so.8 +lib/heimdal/libasn1.so.8.0.0 +lib/heimdal/libcom_err.a +lib/heimdal/libcom_err.so +lib/heimdal/libcom_err.so.1 +lib/heimdal/libcom_err.so.1.1.3 +lib/heimdal/libgssapi.a +lib/heimdal/libgssapi.so +lib/heimdal/libgssapi.so.3 +lib/heimdal/libgssapi.so.3.0.0 +lib/heimdal/libhcrypto.a +lib/heimdal/libhcrypto.so +lib/heimdal/libhcrypto.so.4 +lib/heimdal/libhcrypto.so.4.1.0 +lib/heimdal/libhdb.a +lib/heimdal/libhdb.so +lib/heimdal/libhdb.so.9 +lib/heimdal/libhdb.so.9.2.0 +lib/heimdal/libheimbase.a +lib/heimdal/libheimbase.so +lib/heimdal/libheimbase.so.1 +lib/heimdal/libheimbase.so.1.0.0 +lib/heimdal/libheimntlm.a +lib/heimdal/libheimntlm.so +lib/heimdal/libheimntlm.so.0 +lib/heimdal/libheimntlm.so.0.1.0 +%%NO_SQLITE%%lib/heimdal/libheimsqlite.a +%%NO_SQLITE%%lib/heimdal/libheimsqlite.so +%%NO_SQLITE%%lib/heimdal/libheimsqlite.so.0 +%%NO_SQLITE%%lib/heimdal/libheimsqlite.so.0.0.0 +lib/heimdal/libhx509.a +lib/heimdal/libhx509.so +lib/heimdal/libhx509.so.5 +lib/heimdal/libhx509.so.5.0.0 +lib/heimdal/libkadm5clnt.a +lib/heimdal/libkadm5clnt.so +lib/heimdal/libkadm5clnt.so.7 +lib/heimdal/libkadm5clnt.so.7.0.1 +lib/heimdal/libkadm5srv.a +lib/heimdal/libkadm5srv.so +lib/heimdal/libkadm5srv.so.8 +lib/heimdal/libkadm5srv.so.8.0.1 +lib/heimdal/libkafs.a +lib/heimdal/libkafs.so +lib/heimdal/libkafs.so.0 +lib/heimdal/libkafs.so.0.5.1 +lib/heimdal/libkdc.a +lib/heimdal/libkdc.so +lib/heimdal/libkdc.so.2 +lib/heimdal/libkdc.so.2.0.0 +lib/heimdal/libkrb5.a +lib/heimdal/libkrb5.so +lib/heimdal/libkrb5.so.26 +lib/heimdal/libkrb5.so.26.0.0 +lib/heimdal/libotp.a +lib/heimdal/libotp.so +lib/heimdal/libotp.so.0 +lib/heimdal/libotp.so.0.1.5 +lib/heimdal/libroken.a +lib/heimdal/libroken.so +lib/heimdal/libroken.so.18 +lib/heimdal/libroken.so.18.1.0 +lib/heimdal/libsl.a +lib/heimdal/libsl.so +lib/heimdal/libsl.so.0 +lib/heimdal/libsl.so.0.2.1 +lib/heimdal/libwind.a +lib/heimdal/libwind.so +lib/heimdal/libwind.so.0 +lib/heimdal/libwind.so.0.0.0 +lib/heimdal/windc.a +lib/heimdal/windc.so +lib/heimdal/windc.so.0 +lib/heimdal/windc.so.0.0.0 +libdata/pkgconfig/heimdal-gssapi.pc +libdata/pkgconfig/heimdal-kadm-client.pc +libdata/pkgconfig/heimdal-kadm-server.pc +libdata/pkgconfig/heimdal-krb5.pc +libdata/pkgconfig/kadm-client.pc +libdata/pkgconfig/kadm-server.pc +libdata/pkgconfig/kafs.pc +libdata/pkgconfig/krb5-gssapi.pc +libdata/pkgconfig/krb5.pc +libexec/digest-service +libexec/heimdal/asn1_compile +libexec/heimdal/asn1_print +libexec/heimdal/slc +libexec/hprop +libexec/hpropd +libexec/ipropd-master +libexec/ipropd-slave +libexec/kadmind +libexec/kcm +libexec/kdc +libexec/kdigest +libexec/kfd +libexec/kimpersonate +libexec/kpasswdd +man/man1/afslog.1.gz +man/man1/bsearch.1.gz +man/man1/kadmin.1.gz +man/man1/kdestroy.1.gz +man/man1/kf.1.gz +man/man1/kgetcred.1.gz +man/man1/kinit.1.gz +man/man1/klist.1.gz +man/man1/kpasswd.1.gz +man/man1/krb5-config.1.gz +man/man1/kswitch.1.gz +man/man1/ktutil.1.gz +man/man1/otp.1.gz +man/man1/otpprint.1.gz +man/man1/pagsh.1.gz +man/man1/su.1.gz +man/man3/HDB.3.gz +man/man3/arg_printusage.3.gz +man/man3/data.3.gz +man/man3/ecalloc.3.gz +man/man3/emalloc.3.gz +man/man3/eread.3.gz +man/man3/erealloc.3.gz +man/man3/esetenv.3.gz +man/man3/estrdup.3.gz +man/man3/ewrite.3.gz +man/man3/getarg.3.gz +man/man3/gss_accept_sec_context.3.gz +man/man3/gss_acquire_cred.3.gz +man/man3/gss_add_cred.3.gz +man/man3/gss_add_oid_set_member.3.gz +man/man3/gss_canonicalize_name.3.gz +man/man3/gss_compare_name.3.gz +man/man3/gss_context_time.3.gz +man/man3/gss_create_empty_oid_set.3.gz +man/man3/gss_delete_sec_context.3.gz +man/man3/gss_display_name.3.gz +man/man3/gss_display_status.3.gz +man/man3/gss_duplicate_name.3.gz +man/man3/gss_export_name.3.gz +man/man3/gss_export_sec_context.3.gz +man/man3/gss_get_mic.3.gz +man/man3/gss_import_name.3.gz +man/man3/gss_import_sec_context.3.gz +man/man3/gss_indicate_mechs.3.gz +man/man3/gss_init_sec_context.3.gz +man/man3/gss_inquire_attrs_for_mech.3.gz +man/man3/gss_inquire_context.3.gz +man/man3/gss_inquire_cred.3.gz +man/man3/gss_inquire_cred_by_mech.3.gz +man/man3/gss_inquire_mechs_for_name.3.gz +man/man3/gss_inquire_names_for_mech.3.gz +man/man3/gss_inquire_saslname_for_mech.3.gz +man/man3/gss_krb5_ccache_name.3.gz +man/man3/gss_krb5_compat_des3_mic.3.gz +man/man3/gss_krb5_copy_ccache.3.gz +man/man3/gss_krb5_get_tkt_flags.3.gz +man/man3/gss_krb5_import_ccache.3.gz +man/man3/gss_krb5_import_cred.3.gz +man/man3/gss_oid_equal.3.gz +man/man3/gss_process_context_token.3.gz +man/man3/gss_release_buffer.3.gz +man/man3/gss_release_cred.3.gz +man/man3/gss_release_iov_buffer.3.gz +man/man3/gss_release_name.3.gz +man/man3/gss_release_oid_set.3.gz +man/man3/gss_seal.3.gz +man/man3/gss_sign.3.gz +man/man3/gss_test_oid_set_member.3.gz +man/man3/gss_unseal.3.gz +man/man3/gss_unwrap.3.gz +man/man3/gss_unwrap_iov.3.gz +man/man3/gss_verify.3.gz +man/man3/gss_verify_mic.3.gz +man/man3/gss_wrap.3.gz +man/man3/gss_wrap_iov.3.gz +man/man3/gss_wrap_iov_length.3.gz +man/man3/gss_wrap_size_limit.3.gz +man/man3/gssapi.3.gz +man/man3/gssapi_mechs_intro.3.gz +man/man3/gssapi_services_intro.3.gz +man/man3/gsskrb5_extract_authz_data_from_sec_context.3.gz +man/man3/gsskrb5_register_acceptor_identity.3.gz +man/man3/hdb__del.3.gz +man/man3/hdb__get.3.gz +man/man3/hdb__put.3.gz +man/man3/hdb_auth_status.3.gz +man/man3/hdb_check_constrained_delegation.3.gz +man/man3/hdb_check_pkinit_ms_upn_match.3.gz +man/man3/hdb_check_s4u2self.3.gz +man/man3/hdb_close.3.gz +man/man3/hdb_destroy.3.gz +man/man3/hdb_entry_ex.3.gz +man/man3/hdb_fetch_kvno.3.gz +man/man3/hdb_firstkey.3.gz +man/man3/hdb_free.3.gz +man/man3/hdb_get_realms.3.gz +man/man3/hdb_lock.3.gz +man/man3/hdb_name.3.gz +man/man3/hdb_nextkey.3.gz +man/man3/hdb_open.3.gz +man/man3/hdb_password.3.gz +man/man3/hdb_remove.3.gz +man/man3/hdb_rename.3.gz +man/man3/hdb_set_sync.3.gz +man/man3/hdb_store.3.gz +man/man3/hdb_unlock.3.gz +man/man3/heim_ntlm_build_ntlm1_master.3.gz +man/man3/heim_ntlm_build_ntlm2_master.3.gz +man/man3/heim_ntlm_calculate_lm2.3.gz +man/man3/heim_ntlm_calculate_ntlm1.3.gz +man/man3/heim_ntlm_calculate_ntlm2.3.gz +man/man3/heim_ntlm_decode_targetinfo.3.gz +man/man3/heim_ntlm_encode_targetinfo.3.gz +man/man3/heim_ntlm_encode_type1.3.gz +man/man3/heim_ntlm_encode_type2.3.gz +man/man3/heim_ntlm_encode_type3.3.gz +man/man3/heim_ntlm_free_buf.3.gz +man/man3/heim_ntlm_free_targetinfo.3.gz +man/man3/heim_ntlm_free_type1.3.gz +man/man3/heim_ntlm_free_type2.3.gz +man/man3/heim_ntlm_free_type3.3.gz +man/man3/heim_ntlm_keyex_unwrap.3.gz +man/man3/heim_ntlm_nt_key.3.gz +man/man3/heim_ntlm_ntlmv2_key.3.gz +man/man3/heim_ntlm_verify_ntlm2.3.gz +man/man3/heimbase.3.gz +man/man3/hx509.3.gz +man/man3/hx509_bitstring_print.3.gz +man/man3/hx509_ca.3.gz +man/man3/hx509_ca_sign.3.gz +man/man3/hx509_ca_sign_self.3.gz +man/man3/hx509_ca_tbs_add_crl_dp_uri.3.gz +man/man3/hx509_ca_tbs_add_eku.3.gz +man/man3/hx509_ca_tbs_add_san_hostname.3.gz +man/man3/hx509_ca_tbs_add_san_jid.3.gz +man/man3/hx509_ca_tbs_add_san_ms_upn.3.gz +man/man3/hx509_ca_tbs_add_san_otherName.3.gz +man/man3/hx509_ca_tbs_add_san_pkinit.3.gz +man/man3/hx509_ca_tbs_add_san_rfc822name.3.gz +man/man3/hx509_ca_tbs_free.3.gz +man/man3/hx509_ca_tbs_init.3.gz +man/man3/hx509_ca_tbs_set_ca.3.gz +man/man3/hx509_ca_tbs_set_domaincontroller.3.gz +man/man3/hx509_ca_tbs_set_notAfter.3.gz +man/man3/hx509_ca_tbs_set_notAfter_lifetime.3.gz +man/man3/hx509_ca_tbs_set_notBefore.3.gz +man/man3/hx509_ca_tbs_set_proxy.3.gz +man/man3/hx509_ca_tbs_set_serialnumber.3.gz +man/man3/hx509_ca_tbs_set_signature_algorithm.3.gz +man/man3/hx509_ca_tbs_set_spki.3.gz +man/man3/hx509_ca_tbs_set_subject.3.gz +man/man3/hx509_ca_tbs_set_template.3.gz +man/man3/hx509_ca_tbs_set_unique.3.gz +man/man3/hx509_ca_tbs_subject_expand.3.gz +man/man3/hx509_ca_tbs_template_units.3.gz +man/man3/hx509_cert.3.gz +man/man3/hx509_cert_binary.3.gz +man/man3/hx509_cert_check_eku.3.gz +man/man3/hx509_cert_cmp.3.gz +man/man3/hx509_cert_find_subjectAltName_otherName.3.gz +man/man3/hx509_cert_free.3.gz +man/man3/hx509_cert_get_SPKI.3.gz +man/man3/hx509_cert_get_SPKI_AlgorithmIdentifier.3.gz +man/man3/hx509_cert_get_attribute.3.gz +man/man3/hx509_cert_get_base_subject.3.gz +man/man3/hx509_cert_get_friendly_name.3.gz +man/man3/hx509_cert_get_issuer.3.gz +man/man3/hx509_cert_get_issuer_unique_id.3.gz +man/man3/hx509_cert_get_notAfter.3.gz +man/man3/hx509_cert_get_notBefore.3.gz +man/man3/hx509_cert_get_serialnumber.3.gz +man/man3/hx509_cert_get_subject.3.gz +man/man3/hx509_cert_get_subject_unique_id.3.gz +man/man3/hx509_cert_init.3.gz +man/man3/hx509_cert_init_data.3.gz +man/man3/hx509_cert_keyusage_print.3.gz +man/man3/hx509_cert_ref.3.gz +man/man3/hx509_cert_set_friendly_name.3.gz +man/man3/hx509_certs_add.3.gz +man/man3/hx509_certs_append.3.gz +man/man3/hx509_certs_end_seq.3.gz +man/man3/hx509_certs_filter.3.gz +man/man3/hx509_certs_find.3.gz +man/man3/hx509_certs_free.3.gz +man/man3/hx509_certs_info.3.gz +man/man3/hx509_certs_init.3.gz +man/man3/hx509_certs_iter_f.3.gz +man/man3/hx509_certs_merge.3.gz +man/man3/hx509_certs_next_cert.3.gz +man/man3/hx509_certs_start_seq.3.gz +man/man3/hx509_certs_store.3.gz +man/man3/hx509_ci_print_names.3.gz +man/man3/hx509_clear_error_string.3.gz +man/man3/hx509_cms.3.gz +man/man3/hx509_cms_create_signed_1.3.gz +man/man3/hx509_cms_envelope_1.3.gz +man/man3/hx509_cms_unenvelope.3.gz +man/man3/hx509_cms_unwrap_ContentInfo.3.gz +man/man3/hx509_cms_verify_signed.3.gz +man/man3/hx509_cms_wrap_ContentInfo.3.gz +man/man3/hx509_context_free.3.gz +man/man3/hx509_context_init.3.gz +man/man3/hx509_context_set_missing_revoke.3.gz +man/man3/hx509_crl_add_revoked_certs.3.gz +man/man3/hx509_crl_alloc.3.gz +man/man3/hx509_crl_free.3.gz +man/man3/hx509_crl_lifetime.3.gz +man/man3/hx509_crl_sign.3.gz +man/man3/hx509_crypto.3.gz +man/man3/hx509_env.3.gz +man/man3/hx509_env_add.3.gz +man/man3/hx509_env_add_binding.3.gz +man/man3/hx509_env_find.3.gz +man/man3/hx509_env_find_binding.3.gz +man/man3/hx509_env_free.3.gz +man/man3/hx509_env_lfind.3.gz +man/man3/hx509_err.3.gz +man/man3/hx509_error.3.gz +man/man3/hx509_free_error_string.3.gz +man/man3/hx509_free_octet_string_list.3.gz +man/man3/hx509_general_name_unparse.3.gz +man/man3/hx509_get_error_string.3.gz +man/man3/hx509_get_one_cert.3.gz +man/man3/hx509_keyset.3.gz +man/man3/hx509_lock.3.gz +man/man3/hx509_misc.3.gz +man/man3/hx509_name.3.gz +man/man3/hx509_name_binary.3.gz +man/man3/hx509_name_cmp.3.gz +man/man3/hx509_name_copy.3.gz +man/man3/hx509_name_expand.3.gz +man/man3/hx509_name_free.3.gz +man/man3/hx509_name_is_null_p.3.gz +man/man3/hx509_name_to_Name.3.gz +man/man3/hx509_name_to_string.3.gz +man/man3/hx509_ocsp_request.3.gz +man/man3/hx509_ocsp_verify.3.gz +man/man3/hx509_oid_print.3.gz +man/man3/hx509_oid_sprint.3.gz +man/man3/hx509_parse_name.3.gz +man/man3/hx509_peer.3.gz +man/man3/hx509_peer_info_add_cms_alg.3.gz +man/man3/hx509_peer_info_alloc.3.gz +man/man3/hx509_peer_info_free.3.gz +man/man3/hx509_peer_info_set_cert.3.gz +man/man3/hx509_peer_info_set_cms_algs.3.gz +man/man3/hx509_print.3.gz +man/man3/hx509_print_cert.3.gz +man/man3/hx509_print_stdout.3.gz +man/man3/hx509_query.3.gz *** 783 LINES SKIPPED ***
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202212052009.2B5K9BwT042326>