aboutsummaryrefslogtreecommitdiff
path: root/krb5/util
Commit message (Collapse)AuthorAgeFilesLines
* krb5: Remove extraneous exports fileCy Schubert2025-12-181-33/+0
| | | | | | | We use version.map in the FreeBSD MIT KRB5 build. The exports file is a lefteover from when the version map file was created. MFC after: 1 week
* krb5: Use sh to run mk_cmdsMark Johnston2025-11-241-1/+1
| | | | | | | | | | | Otherwise etcupdate apparently can fail if its private object directory under /var/db is in a filesystem mounted noexec. We shouldn't be building this target at all, but for now, just apply this workaround. PR: 291043 Reviewed by: ivy, cy, des MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D53861
* krb5: Update to 1.22.1Cy Schubert2025-08-261-1/+1
| | | | | | | Reviewed by: des Differential revision: https://reviews.freebsd.org/D52100 Merge commit 'e5fe63eaf1d35ebbeac17eeed04cf873fbb9b3da' into main
* packages: Improve handling of -lib packagesLexi Winter2025-08-238-14/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For some packages (OpenSSL, Kerberos) we want to ship runtime libraries in a separate package, e.g. openssl and openssl-lib. Currently this is done using PACKAGE=openssl-lib, but that creates packages with strange names like openssl-lib-lib32. Instead, add a new LIB_PACKAGE option to bsd.lib.mk that causes runtime libraries to be placed in a new -lib subpackage. This significantly improves the set of packages we create; for example, OpenSSL goes from: FreeBSD-openssl FreeBSD-openssl-dbg FreeBSD-openssl-lib FreeBSD-openssl-lib-dbg FreeBSD-openssl-lib-dbg-lib32 FreeBSD-openssl-lib-dev FreeBSD-openssl-lib-dev-lib32 FreeBSD-openssl-lib-lib32 FreeBSD-openssl-lib-man FreeBSD-openssl-man to: FreeBSD-openssl FreeBSD-openssl-dbg FreeBSD-openssl-dbg-lib32 FreeBSD-openssl-dev FreeBSD-openssl-dev-lib32 FreeBSD-openssl-lib FreeBSD-openssl-lib32 FreeBSD-openssl-man While here, move /usr/bin/krb5-config and /usr/bin/compile_et into the kerberos-dev package. Reviewed by: des Differential Revision: https://reviews.freebsd.org/D51925
* krb5: Fix the installed compile_etMark Johnston2025-08-191-1/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We now build compile_et from krb5/util/compile_et. The compile_et make target runs compile_et.sh through a preprocessor that does some substitution on the script, in particular it defines the directory where compile_et can find et_h.awk and et_c.awk. We build compile_et as a bootstrap tool since it's used to build krb5. It also gets installed by installworld, presumably because we did that with Heimdal Kerberos too and there's some chance that third-party projects are using it. There are two problems, both fixed by this patch: First, we don't actually install those awk scripts anywhere, so /usr/sbin/compile_et isn't usable on an installed system. Let's simply install them to /usr/share/et, which is where upstream puts them. Second, compile_et is a bootstrap tool and gets installed into WORLDTMP during the bootstrap phase of the build. At that point we preprocess it to set the directory where it can find those awk scripts. That directory is currently set with `KRB5_ETDIR?= ${DESTDIR}/usr/share/et`, but DESTDIR points into the object directory, so this value is bogus. Since all build-time invocations of compile_et explicitly specify the script directory with the -d option, let's just update the path to point to the installed script directory. In particular, avoid fixing DESTDIR in the script, since we don't do that generally. PR: 288929 Reviewed by: ivy, cy Sponsored by: The FreeBSD Foundation Sponsored by: Klara, Inc. Differential Revision: https://reviews.freebsd.org/D52004
* krb5: Update version stringsCy Schubert2025-08-191-1/+1
| | | | Fixes: f1c4c3daccba
* krb5: Fix typo "SPDX-License-Idendifier"Lexi Winter2025-08-179-9/+9
| | | | sed -e s/SPDX-License-Idendifier/SPDX-License-Identifier/
* krb5: Move compile_et to /usr/bin as it was with HeimdalCy Schubert2025-08-051-4/+0
| | | | Fixes: ee3960cba106
* krb5: remove libedit from the bootstrap toolsBaptiste Daroussin2025-07-291-0/+5
| | | | | | | | | | | | | libedit breaks the bootstrap on MacOS and Linux. Activate libedit only for the regular build not for the bootstrap tools While here fix the definition of the dependency chain between libkrb5ss and libedit (and libtinfow) via src.libnames.mk Remove a local patch to find the readline compatible header and find them via proper CFLAGS.
* krb5: Bump DSO version for version map creationCy Schubert2025-07-271-1/+1
| | | | Differential Revision: https://reviews.freebsd.org/D51520
* krb5/util/profile: Do not install profile.5Lexi Winter2025-07-251-6/+1
| | | | | | | | I am not sure what this file from upstream is supposed to be, but it's not a manual page. Remove it and add to ObsoleteFiles. Reviewed by: cy Differential Revision: https://reviews.freebsd.org/D51517
* Revert "krb5: Use Heimdal DSO names"Cy Schubert2025-07-241-1/+1
| | | | | | This is incorrect. This reverts commit 5f8493bbf479922ee027e2ee7dc733f29f66dd6d.
* krb5: Use Heimdal DSO namesCy Schubert2025-07-241-1/+1
| | | | | | | | Using MIT DSO names breaks the libc ABI, we are forced to use Heimdal DSO names. This is not optimal but necessary. Fixes: e447c252d0ec Requested by: kib
* krb5: Merge Heimdal common functions into version mapsCy Schubert2025-07-241-4/+8
| | | | Requested by: kib
* krb5: Replace version maps with generated version mapsCy Schubert2025-07-244-7/+51
| | | | | Suggested by: jhb Fixes: ae07a5805b19
* krb5: use 'kerberos' as package nameLexi Winter2025-07-247-7/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Rename krb5 and krb5-lib to kerberos and kerberos-lib to match the existing Heimdal package names. Since it's not possible to build or install both at the same time, and Heimdal will be removed anyway, there's no benefit to using a different package name for MIT Kerberos and doing so will create friction for pkgbase users. Move a few things (e.g., headers) from kerberos to kerberos-lib. Move the KDC to a new package, kerberos-kdc, so the client utilities can be installed without the KDC. As most systems won't have the KDC running, this saves a bit of disk space for jails/containers. Remove a few instances of 'PACKAGE=' in target-specific Makefiles where we can set that in the parent's Makefile.inc instead. Revert 01c587521dd8 ("OCI: Attempt to fix "runtime" container") which is no longer required. The KDC init script is still installed in the 'rc' package for compatibility with the security/krb5 port; we should fix this at some point, possibly after Heimdal is removed. Reviewed by: manu, kevans, des Approved by: des (mentor), kevans (mentor) Differential Revision: https://reviews.freebsd.org/D51420
* KRB5: Add util version mapsCy Schubert2025-07-229-0/+220
|
* krb5: Add build plumbingCy Schubert2025-06-1610-0/+674
Add tne necessary Makefiles and header files to facilitate building MIT KRB5 as part of buildworld. Nothing will build until the WITH_MITKRB5/MK_MITKRB5 option has been plumbed in Makefile.inc1. Before any changes to Makefile.inc1 are made to enable MIT KRB5, additional commits to other affected software will need to be committed. krb5/Makefile was inspired by kerberos5/Makefile. The Makefiles in krb5/util and krb5/lib were inspired by those in lib/libc and in lib/ncurses. Differential revision: https://reviews.freebsd.org/D50695 Sponsored by: The FreeBSD Foundation
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-02 05:20:16 +0000