aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorCy Schubert <cy@FreeBSD.org>2025-06-11 02:45:02 +0000
committerCy Schubert <cy@FreeBSD.org>2025-06-16 02:49:37 +0000
commit1b735665f45a3a1ca8661c54e22d540fb1c4d673 (patch)
treecb61ce7018762cc9ca7914fbec012fbbf7c6f2ce
parenta5a550c64f05aa4137187a2861a4254b405c896e (diff)
etc/gss: Add MIT GSS glue
The MIT GSS uses different library names. And MIT KRB5 supports more OIDs than our ancient Heimdal does. The intention is to remove etc/gss when Heimdal is finally retired and rename etc/gss-krb5 to etc/gss. Sponsored by: The FreeBSD Foundation Differential revision: https://reviews.freebsd.org/D50812
-rw-r--r--etc/Makefile10
-rw-r--r--etc/gss-krb5/Makefile5
-rw-r--r--etc/gss-krb5/mech10
-rw-r--r--etc/gss-krb5/qop1
4 files changed, 26 insertions, 0 deletions
diff --git a/etc/Makefile b/etc/Makefile
index 4e387e8543d0..da9288bddaae 100644
--- a/etc/Makefile
+++ b/etc/Makefile
@@ -15,6 +15,12 @@ SUBDIR+=termcap
SUBDIR+=sendmail
.endif
+.if ${MK_MITKRB5} != "no"
+SUBDIR+=gss-krb5
+.else
+SUBDIR+=gss
+.endif
+
# NB: keep these sorted by MK_* knobs
ETCMAIL=aliases
@@ -53,7 +59,11 @@ distribution:
@echo "set DESTDIR before running \"make ${.TARGET}\""
@false
.endif
+.if ${MK_MITKRB5} != "no"
+ ${_+_}cd ${.CURDIR}/gss-krb5; ${MAKE} install
+.else
${_+_}cd ${.CURDIR}/gss; ${MAKE} install
+.endif
${_+_}cd ${.CURDIR}/mtree; ${MAKE} install
${_+_}cd ${SRCTOP}/share/termcap; ${MAKE} etc-termcap
${_+_}cd ${SRCTOP}/usr.sbin/rmt; ${MAKE} etc-rmt
diff --git a/etc/gss-krb5/Makefile b/etc/gss-krb5/Makefile
new file mode 100644
index 000000000000..301a8e074e8c
--- /dev/null
+++ b/etc/gss-krb5/Makefile
@@ -0,0 +1,5 @@
+FILES= mech qop
+NO_OBJ=
+FILESDIR= /etc/gss
+
+.include <bsd.prog.mk>
diff --git a/etc/gss-krb5/mech b/etc/gss-krb5/mech
new file mode 100644
index 000000000000..94fed68a24eb
--- /dev/null
+++ b/etc/gss-krb5/mech
@@ -0,0 +1,10 @@
+#
+# Name OID Library name Kernel module
+kerberosv5 1.2.840.113554.1.2.2 /usr/lib/libgssapi_krb5.so.121 kgssapi_krb5
+kerberosv5 1.2.840.113554.1.2.3 /usr/lib/libgssapi_krb5.so.121 kgssapi_krb5
+kerberosv5 1.3.6.1.5.5.2 /usr/lib/libgssapi_krb5.so.121 kgssapi_krb5
+kerberosv5 1.2.840.48018.1.2.2.1 /usr/lib/libgssapi_krb5.so.121 kgssapi_krb5
+kerberosv5 1.2.840.48018.1.2.2.2 /usr/lib/libgssapi_krb5.so.121 kgssapi_krb5
+kerberosv5 1.2.840.48018.1.2.2.4 /usr/lib/libgssapi_krb5.so.121 kgssapi_krb5
+kerberosv5 1.2.840.48018.1.2.2.5 /usr/lib/libgssapi_krb5.so.121 kgssapi_krb5
+kerberosv5 1.3.5.1.5.2 /usr/lib/libgssapi_krb5.so.121 kgssapi_krb5
diff --git a/etc/gss-krb5/qop b/etc/gss-krb5/qop
new file mode 100644
index 000000000000..7d5b6b8f33dd
--- /dev/null
+++ b/etc/gss-krb5/qop
@@ -0,0 +1 @@
+GSS_KRB5_CONF_C_QOP_DES3_KD 0x0200 kerberosv5