From owner-freebsd-ports@FreeBSD.ORG Wed Feb 19 21:09:45 2014 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id C6D737B0; Wed, 19 Feb 2014 21:09:45 +0000 (UTC) Received: from nschwmtas05p.mx.bigpond.com (nschwmtas05p.mx.bigpond.com [61.9.189.149]) by mx1.freebsd.org (Postfix) with ESMTP id 30EF61498; Wed, 19 Feb 2014 21:09:43 +0000 (UTC) Received: from nschwcmgw05p ([61.9.190.165]) by nschwmtas05p.mx.bigpond.com with ESMTP id <20140219210937.WINF2020.nschwmtas05p.mx.bigpond.com@nschwcmgw05p>; Wed, 19 Feb 2014 21:09:37 +0000 Received: from hermes.heuristicsystems.com.au ([121.210.107.115]) by nschwcmgw05p with BigPond Outbound id UM9c1n00Z2VR1hD01M9dX0; Wed, 19 Feb 2014 21:09:37 +0000 X-Authority-Analysis: v=2.0 cv=etRdP/VX c=1 sm=1 a=kPFzL+aQTxRlsBNBWdEb+Q==:17 a=JipEcVzqA9wA:10 a=ZyTC8iKBDh4A:10 a=8nJEP1OIZ-IA:10 a=GHIR_BbyAAAA:8 a=Zcrt6gdy0D4A:10 a=6I5d2MoRAAAA:8 a=NEAV23lmAAAA:8 a=TAzTMPGoEGX0CjPs8CkA:9 a=wPNLvfGTeEIA:10 a=SV7veod9ZcQA:10 a=kPFzL+aQTxRlsBNBWdEb+Q==:117 Received: from [10.0.5.3] (ewsw01.hs [10.0.5.3]) (authenticated bits=0) by hermes.heuristicsystems.com.au (8.14.5/8.13.6) with ESMTP id s1JL8kAw001557 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Thu, 20 Feb 2014 08:08:46 +1100 (EST) (envelope-from dewayne.geraghty@heuristicsystems.com.au) Message-ID: <53051D5C.7020308@heuristicsystems.com.au> Date: Thu, 20 Feb 2014 08:08:44 +1100 From: Dewayne Geraghty User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.3.0 MIME-Version: 1.0 To: Bryan Drewery , Robert Simmons , freebsd-ports@freebsd.org Subject: Re: GSSAPI and Heimdal in Base References: <530203DA.4050108@heuristicsystems.com.au> <5304B1A6.2070801@FreeBSD.org> In-Reply-To: <5304B1A6.2070801@FreeBSD.org> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Feb 2014 21:09:45 -0000 On 20/02/2014 12:29 AM, Bryan Drewery wrote: > On 2/17/2014 5:23 PM, Robert Simmons wrote: >> Actually both port and base are 1.5.2. Base was updated in Apr 2012: >> http://svnweb.freebsd.org/base?view=revision&revision=234027 >> >> Both 9.x and 10.0 have Heimdal 1.5.2, same version in ports. >> >> The Heimdal project's current stable version is actually 1.5.3. They >> have forgotten to update their main website, but the Git repository >> speaks the truth: >> https://github.com/heimdal/heimdal/blob/master/NEWS >> >> Also, they are pushing out 1.6 release candidates at the moment, so I >> think 1.6 should arrive shortly. >> >> I will give the project a poke and see if they can update their >> website, but security/openssh-portable should build fine against >> heimdal base or the heimdal port since they are identical. > > I will take another look, however I could not get it to build with the > base heimdal so I marked it broken. > >> On Mon, Feb 17, 2014 at 7:43 AM, Dewayne Geraghty >> wrote: >>> Robert, >>> There's a couple of versions different. Heimdal from ports is 1.5.2. >>> I'm writing personally because I don't build any systems with the >>> heimdal in base, but I recall it being around 1.0.1 on 9.X. >>> >>> As an aside I recall the openssh developer mentioning somewhere that >>> gssapi wasn't supported in openssh 6.5, but if it builds for you then >>> you're probably running an earlier version of the ports system? It's >>> also helpful to let folks know what FreeBSD version you're discussing ;) >>> >>> Cheers, Dewayne >>> >>> On 17/02/2014 5:14 PM, Robert Simmons wrote: >>>> When building openssh-portable, and enabling kerb_gssapi, but using >>>> the heimdal that is in base, it gives the error: >>>> KERB_GSSAPI Requires either MIT or HEMIDAL, does not build with base >>>> Heimdal currently >>>> >>>> What is the difference between base and the port of Heimdal? >>>> _______________________________________________ >>>> freebsd-ports@freebsd.org mailing list >>>> http://lists.freebsd.org/mailman/listinfo/freebsd-ports >>>> To unsubscribe, send any mail to "freebsd-ports-unsubscribe@freebsd.org" >>>> >>>> >> _______________________________________________ >> freebsd-ports@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-ports >> To unsubscribe, send any mail to "freebsd-ports-unsubscribe@freebsd.org" >> > Bryan, The base heimdal in 9.x is 1.1.0. As suggested to me by John Marshall, use: svn cat svn://svn.freebsd.org/base/stable/9/kerberos5/include/version.h | grep heimdal_version svn cat svn://svn.freebsd.org/base/stable/10/kerberos5/include/version.h | grep heimdal_version svn cat svn://svn.freebsd.org/base/head/kerberos5/include/version.h | grep heimdal_version while head and 10.x use heimdal 1.5.2 Thanks for looking after openssh, I particularly appreciate the new key storage mechanism (bcrypt KDF a GREAT improvement for keys at rest!). Unfortunately I don't use gssapi with ssh, though it heimdal 1.5.2 works well with other ports. Dewayne.