aboutsummaryrefslogtreecommitdiff
path: root/krb5/lib
Commit message (Collapse)AuthorAgeFilesLines
* krb5: Add missing symbolCy Schubert45 hours1-0/+1
| | | | | | Submitted by: lampa@fit.vutbr.cz PR: 291565 MFC after: 1 day
* libkadm5clnt: Fix library symlink installLexi Winter2025-11-051-1/+2
| | | | | | | | | | | | | libkadm5clnt_mit installs a symlink from libkadm5clnt.so for backward compatibility, but it neglected to include the package tags, so the symlink was missing from pkgbase builds. Add ${DEV_TAG_ARGS} to the install command. Reported by: Mark Millard <marklmi@yahoo.com> MFC after: 1 day Reviewed by: emaste Sponsored by: https://www.patreon.com/bsdivy Differential Revision: https://reviews.freebsd.org/D53574
* packages: Improve handling of -lib packagesLexi Winter2025-08-231-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For some packages (OpenSSL, Kerberos) we want to ship runtime libraries in a separate package, e.g. openssl and openssl-lib. Currently this is done using PACKAGE=openssl-lib, but that creates packages with strange names like openssl-lib-lib32. Instead, add a new LIB_PACKAGE option to bsd.lib.mk that causes runtime libraries to be placed in a new -lib subpackage. This significantly improves the set of packages we create; for example, OpenSSL goes from: FreeBSD-openssl FreeBSD-openssl-dbg FreeBSD-openssl-lib FreeBSD-openssl-lib-dbg FreeBSD-openssl-lib-dbg-lib32 FreeBSD-openssl-lib-dev FreeBSD-openssl-lib-dev-lib32 FreeBSD-openssl-lib-lib32 FreeBSD-openssl-lib-man FreeBSD-openssl-man to: FreeBSD-openssl FreeBSD-openssl-dbg FreeBSD-openssl-dbg-lib32 FreeBSD-openssl-dev FreeBSD-openssl-dev-lib32 FreeBSD-openssl-lib FreeBSD-openssl-lib32 FreeBSD-openssl-man While here, move /usr/bin/krb5-config and /usr/bin/compile_et into the kerberos-dev package. Reviewed by: des Differential Revision: https://reviews.freebsd.org/D51925
* krb5: Build pkgconfig files with librariesLexi Winter2025-08-186-23/+56
| | | | | | | | | | | | | | | For various reasons, trying to build 32-bit compatibility PCFILES outside of a directory which is not a library doesn't work. Add a new krb5/Makefile.pc with the build rule for .pc.in.pc, and use this to build each pc file along with the library it's associated with. This means we automatically get 32-bit pcfiles in /usr/lib32, and is arguably more correct anyway since if we don't build a library for some reason, we also won't build its pcfiles. Reviewed by: des Differential Revision: https://reviews.freebsd.org/D51986
* krb5: Fix typo "SPDX-License-Idendifier"Lexi Winter2025-08-1745-45/+45
| | | | sed -e s/SPDX-License-Idendifier/SPDX-License-Identifier/
* krb5: Update MIT KRB5 from 1.21 to 1.22Cy Schubert2025-08-109-4/+16
| | | | Merge commit 'd82a140dad3a571d66abb2da24acbba90191f168'
* gssapi,krb5: Replace libgssapi with the MIT versionCy Schubert2025-08-071-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | lib/libgssapi is based on Heimdal. As on Linux systems, the MIT libgssapi_krb5 replaces it. With both gssapi libraries and header files installed results in broken buildworld (gssd) and ports that will not build without modifications to support the MIT gssapi in an alternate location. 73ed0c7992fd removed the MIT GSSAPI headers from /usr/include. Apps using MIT KRB5 gssapi functions and structures will fail to build without this patch. This patch includes a temporary patch to usr.sbin/gssd to allow it to build with this patch. rmacklem@ has a patch for this and for kgssapi that uses this patch to resolve kgssapi issues for NFS with Kerberos. This patch is an updated version of D51661 to allow it to build following additional patchs to the tree. This should have been implmented with 7e35117eb07f. Fixes: 7e35117eb07f, 73ed0c7992fd Differential Revision: https://reviews.freebsd.org/D51661
* krb5: Add missing gssapi headerCy Schubert2025-08-051-0/+2
| | | | Fixes: ee3960cba106
* kadm5srv: get common headers from kadm5clntBrooks Davis2025-08-041-6/+0
| | | | | | | | Both were installing admin.h, chpass_util_strings.h, and kadm_err.h. kadm5clnt is ordered first in krb5/lib/Makefile so pick it. PR: 288594 Pull Request: https://github.com/freebsd/freebsd-src/pull/1801
* kadm5srv: remove unused HDRS entriesBrooks Davis2025-08-041-5/+0
| | | | Pull Request: https://github.com/freebsd/freebsd-src/pull/1801
* krb5: only apply -Wno-alloc-size-larger-than to gccLexi Winter2025-08-041-1/+1
| | | | Otherwise, this breaks the clang build.
* kadm5: add -Wno-alloc-size-larger-thanLexi Winter2025-08-031-0/+1
| | | | | | | | | | | This trips the gcc build in kadm5/srv/svr_principal.c: /home/ivy/src/bsd/gcc/crypto/krb5/src/lib/kadm5/srv/svr_principal.c: In function 'apply_keysalt_policy': /home/ivy/src/bsd/gcc/crypto/krb5/src/lib/kadm5/srv/svr_principal.c:208:14: error: argument 1 range [2147483648, 4294967295] exceeds maximum object size 2147483647 [-Werror=alloc-size-larger-than=] 208 | subset = calloc(n_ks_tuple, sizeof(*subset)); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Differential Revision: https://reviews.freebsd.org/D51577
* krb5: Bump DSO version for version map creationCy Schubert2025-07-271-1/+1
| | | | Differential Revision: https://reviews.freebsd.org/D51520
* krb5: Move some manpages to other packagesLexi Winter2025-07-251-9/+14
| | | | | | | | | | | | | | Move KDC manpages to kerberos-kdc-man. Move the generic Kerberos manpages (e.g., kerberos.7) to kerberos-man instead of kerberos-lib-man. Although they technically describe behaviour implemented in the libraries, conceptually, they are more associated with Kerberos in general. While here, remove some redundant SUFFIXES. Reviewed by: manu, cy Differential Revision: https://reviews.freebsd.org/D51515
* krb5: remove private headersLexi Winter2025-07-254-20/+4
| | | | | | | | | | | | | | I compared the contents of the FreeBSD-kerberos-lib-dev package with the contents of the security/krb5 port. Based on that, remove all the headers which are installed by base krb5 but not by the port. These all appear to be internal headers which are not meant to be publicly visible. This removes some headers with unfortunate conflict-prone names like <internal.h> and <dyn.h>. Reviewed by: des, cy Differential Revision: https://reviews.freebsd.org/D51518
* Revert "krb5: Use Heimdal DSO names"Cy Schubert2025-07-242-2/+2
| | | | | | This is incorrect. This reverts commit 5f8493bbf479922ee027e2ee7dc733f29f66dd6d.
* krb5: Use Heimdal DSO namesCy Schubert2025-07-242-2/+2
| | | | | | | | Using MIT DSO names breaks the libc ABI, we are forced to use Heimdal DSO names. This is not optimal but necessary. Fixes: e447c252d0ec Requested by: kib
* krb5: Merge Heimdal common functions into version mapsCy Schubert2025-07-242-297/+304
| | | | Requested by: kib
* krb5: Replace version maps with generated version mapsCy Schubert2025-07-248-54/+73
| | | | | Suggested by: jhb Fixes: ae07a5805b19
* krb5: Remove a duplicate include of error_tables/Makefile.incCy Schubert2025-07-242-4/+2
| | | | | | | And move the aggregation of its generated sources to the correct library, libkrb5.so. Fixes: ee3960cba106
* krb5: use 'kerberos' as package nameLexi Winter2025-07-2410-18/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Rename krb5 and krb5-lib to kerberos and kerberos-lib to match the existing Heimdal package names. Since it's not possible to build or install both at the same time, and Heimdal will be removed anyway, there's no benefit to using a different package name for MIT Kerberos and doing so will create friction for pkgbase users. Move a few things (e.g., headers) from kerberos to kerberos-lib. Move the KDC to a new package, kerberos-kdc, so the client utilities can be installed without the KDC. As most systems won't have the KDC running, this saves a bit of disk space for jails/containers. Remove a few instances of 'PACKAGE=' in target-specific Makefiles where we can set that in the parent's Makefile.inc instead. Revert 01c587521dd8 ("OCI: Attempt to fix "runtime" container") which is no longer required. The KDC init script is still installed in the 'rc' package for compatibility with the security/krb5 port; we should fix this at some point, possibly after Heimdal is removed. Reviewed by: manu, kevans, des Approved by: des (mentor), kevans (mentor) Differential Revision: https://reviews.freebsd.org/D51420
* krb5: Correct version mapsCy Schubert2025-07-223-186/+144
| | | | Fixes: ae07a5805b19
* krb5: Add version mapsCy Schubert2025-07-2216-0/+1486
| | | | | | | | Shared objects must have version maps. These were copied from upstream's *.exports files. Reminded by: kib Fixes: ee3960cba106
* krb5: Install the libkrb5clnt.so symlink with the .soCy Schubert2025-07-081-1/+1
| | | | | | | | | For 34 days the libclntkrb5.so symlink was installed as libclntkrb5. Fix this and add the error to ObsoleteFiles.inc. Noted and Makefile patch by fluffy@. Fixes: ee3960cba106
* krb5: Add build plumbingCy Schubert2025-06-1647-0/+3185
Add tne necessary Makefiles and header files to facilitate building MIT KRB5 as part of buildworld. Nothing will build until the WITH_MITKRB5/MK_MITKRB5 option has been plumbed in Makefile.inc1. Before any changes to Makefile.inc1 are made to enable MIT KRB5, additional commits to other affected software will need to be committed. krb5/Makefile was inspired by kerberos5/Makefile. The Makefiles in krb5/util and krb5/lib were inspired by those in lib/libc and in lib/ncurses. Differential revision: https://reviews.freebsd.org/D50695 Sponsored by: The FreeBSD Foundation
generated by cgit v1.2.3 (git 2.25.1) at 2025-12-13 10:42:43 +0000