From owner-freebsd-ports@FreeBSD.ORG Thu Apr 2 20:55:01 2015 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 7A073F74 for ; Thu, 2 Apr 2015 20:55:01 +0000 (UTC) Received: from clavin1.langille.org (clavin.langille.org [162.208.116.86]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "clavin.langille.org", Issuer "StartCom Class 2 Primary Intermediate Server CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4D6352D3 for ; Thu, 2 Apr 2015 20:55:00 +0000 (UTC) Received: from (clavin1.int.langille.org (clavin1.int.unixathome.org [10.4.7.7]) (Authenticated sender: hidden) with ESMTPSA id 97ED93C11 ; Thu, 2 Apr 2015 20:54:58 +0000 (UTC) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) Subject: Re: FreeBSD Port: security/py-kerberos From: Dan Langille In-Reply-To: <5515D45E.2010803@micite.net> Date: Thu, 2 Apr 2015 16:54:57 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <1432E901-3CE0-40D2-A061-47D3626666F7@langille.org> References: <5515CD55.3040203@micite.net> <7AC0D3B1-32EB-4732-BD7F-7258FD068992@langille.org> <5515D20D.4010802@micite.net> <5515D279.8090406@micite.net> <4FF6BD31-447E-4EE0-8A66-8385D686424D@langille.org> <5515D45E.2010803@micite.net> To: Roland van Laar X-Mailer: Apple Mail (2.2070.6) Cc: ports X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 20:55:01 -0000 > On Mar 27, 2015, at 6:06 PM, Roland van Laar = wrote: >=20 > On 27-03-15 23:02, Dan Langille wrote: >>> On Mar 27, 2015, at 5:58 PM, Roland van Laar = wrote: >>>=20 >>> On 27-03-15 22:56, Roland van Laar wrote: >>>> On 27-03-15 22:39, Dan Langille wrote: >>>>>> On Mar 27, 2015, at 5:36 PM, Roland van Laar = wrote: >>>>>>=20 >>>>>> On 27-03-15 21:11, Dan Langille wrote: >>>>>>> Hello, >>>>>>>=20 >>>>>>> Why does security/py-kerberos require security/krb5? >>>>>>>=20 >>>>>>> I ask because we already have Kerberos in base. Why do we need = two installations of Kerberos? >>>>>>>=20 >>>>>>> I'm confused. :/ >>>>>>>=20 >>>>>>> I ask because I just added security/py-requests-kerberos to the = tree. >>>>>> py-kerberos depends on gssapi/gssapi_generic.h. >>>>>> This file isn't included in the base kerberos, but it is in the = security/krb5 port. >>>>> I see. >>>>>=20 >>>>> So we need it only for compiling, not for running? >>>> ;-) I haven't tried running it without the krb5 package. >>> The resulting python module is: kerberos.so. >>> Which actually depends on libkrb5support.so from security/krb5 >>> See: >>>=20 >>> # ldd ./kerberos.so >>> ./kerberos.so: >>> libpython2.7.so.1 =3D> /usr/local/lib/libpython2.7.so.1 = (0x801606000) >>> libgssapi_krb5.so =3D> /usr/local/lib/libgssapi_krb5.so = (0x8019c1000) >>> libkrb5.so =3D> /usr/local/lib/libkrb5.so (0x801c08000) >>> libk5crypto.so =3D> /usr/local/lib/libk5crypto.so (0x801ee8000) >>> libcom_err.so =3D> /usr/local/lib/libcom_err.so (0x802117000) >>> libc.so.7 =3D> /lib/libc.so.7 (0x80081f000) >>> libthr.so.3 =3D> /lib/libthr.so.3 (0x80231a000) >>> libintl.so.9 =3D> /usr/local/lib/libintl.so.9 (0x80253f000) >>> libutil.so.9 =3D> /lib/libutil.so.9 (0x802748000) >>> libm.so.5 =3D> /lib/libm.so.5 (0x80295a000) >>> libkrb5support.so =3D> /usr/local/lib/libkrb5support.so = (0x802b82000) >> That looks like what I found on my server after installing. >>=20 >>>>> I want to avoid having two Kerberos installed on the server. :) >> I wonder why it needs security/krb5 and can't use Kerberos from base. = It seems odd to me... >=20 > In what way is it odd? > The base kerberos is a different one than the MIT one. > py-kerberos is developed by Apple for their calendarserver software = and I think they just > used the MIT implementation. Here's a patch so it works with Base and with heimdal too. https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D199123 =E2=80=94=20 Dan Langille http://langille.org/