From owner-freebsd-ports@FreeBSD.ORG Sat Jul 25 21:55:43 2009 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6C9FD106564A for ; Sat, 25 Jul 2009 21:55:43 +0000 (UTC) (envelope-from enlil65@gmail.com) Received: from qw-out-2122.google.com (qw-out-2122.google.com [74.125.92.24]) by mx1.freebsd.org (Postfix) with ESMTP id 25F608FC12 for ; Sat, 25 Jul 2009 21:55:43 +0000 (UTC) (envelope-from enlil65@gmail.com) Received: by qw-out-2122.google.com with SMTP id 3so1161355qwe.7 for ; Sat, 25 Jul 2009 14:55:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=of4HuZDOZKvIlUuCwKbb9ZbtNvvU4K2KOnAswCXPNy8=; b=xqWi6mUtx4+xHctR5tj1v0bp5XnNWHawHa0mhtaYzUZvJ0PdYIgHuS3F6bKUSR47y0 rRSEzJlsCVfoBcyAnhTYPZcHVYRt8X9hVV7mTqgxUI8LXzp9UeCqq++Y3PHej0VxbO// T+ZMXPs68GeRgDnbWKgmycVQ5u6jhASHMOzsQ= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=a7mhEFBfuofeEC/e9B64p2aBh+nSxeWKNVsq3xiJOlyFRtGQ1GR/WP2UN+16Axerkp uL8OczpaPy9hcOTJS//XmUaBrcGg+SUvWs8jAhqpGdxrqht0yMXBl5eTKw6up/PFj5xF 0iuRd4Qr5SdbJEFRCDWItdliF+BRE26iCuDfw= MIME-Version: 1.0 Received: by 10.220.72.12 with SMTP id k12mr2996184vcj.71.1248558942497; Sat, 25 Jul 2009 14:55:42 -0700 (PDT) In-Reply-To: References: Date: Sat, 25 Jul 2009 16:55:42 -0500 Message-ID: <1789c2360907251455r1d24d803rbd983126259ea94b@mail.gmail.com> From: Peggy Wilkins To: freebsd-ports@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Subject: Re: Using WITH_OPENSSL_PORT X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Jul 2009 21:55:43 -0000 Thanks very much for the clear replies to my question about how to use openssl from ports. It looks like it should be straightforward in most circumstances. However, unfortunately I seem to have run into exactly the problem on my system that is described in this PR: http://www.freebsd.org/cgi/query-pr.cgi?pr=132819&cat=ports In particular, scrolling all the way down to the bottom of the PR: State Changed From-To: feedback->closed By: marcus When: Sat May 9 20:13:52 UTC 2009 Why: This was caused by linking OpenLDAP to the ports version of OpenSSL. The pam_ldap module is only supported with OpenLDAP linked to the base OpenSSL. Switching to base OpenSSL has been known to fix this for one user. As the PR advises, switching back to base openssl fixes my problem. Since I am already using pam_ldap on this system in production, I don't see any easy way to get security/krb5 installed and working via ports on the same system since openssl requirements for these things conflict. I think my easiest solution is to use a different system for security/krb5. plw