Index: head/security/sssd/Makefile =================================================================== --- head/security/sssd/Makefile (revision 544080) +++ head/security/sssd/Makefile (revision 544081) @@ -1,114 +1,114 @@ # Created by: Lukas Slebodnik # $FreeBSD$ PORTNAME= sssd PORTVERSION= 1.11.7 -PORTREVISION= 20 +PORTREVISION= 21 CATEGORIES= security MASTER_SITES= https://releases.pagure.org/SSSD/${PORTNAME}/ MAINTAINER= lukas.slebodnik@intrak.sk COMMENT= System Security Services Daemon LICENSE= GPLv3+ LICENSE_FILE= ${WRKSRC}/COPYING DEPRECATED= Uses deprecated version of python EXPIRATION_DATE= 2020-09-15 LIB_DEPENDS= libpopt.so:devel/popt \ libtalloc.so:devel/talloc \ libtevent.so:devel/tevent \ libtdb.so:databases/tdb \ libldb.so:databases/ldb14 \ libcares.so:dns/c-ares \ libdbus-1.so:devel/dbus \ libdhash.so:devel/ding-libs \ libpcre.so:devel/pcre \ libunistring.so:devel/libunistring \ libnss3.so:security/nss \ libsasl2.so:security/cyrus-sasl2 \ libinotify.so:devel/libinotify \ libplds4.so:devel/nspr BUILD_DEPENDS= xmlcatalog:textproc/libxml2 \ docbook-xsl>=1:textproc/docbook-xsl \ xsltproc:textproc/libxslt \ xmlcatmgr:textproc/xmlcatmgr \ krb5>=1.10:security/krb5 \ nsupdate:dns/bind-tools USES= autoreconf cpe gettext gmake iconv libtool pathfix pkgconfig \ python:2.7 shebangfix gssapi:mit USE_LDCONFIG= yes USE_OPENLDAP= yes GNU_CONFIGURE= yes CONFIGURE_ARGS= --with-selinux=no --with-semanage=no \ --with-ldb-lib-dir=${LOCALBASE}/lib/shared-modules/ldb \ --with-xml-catalog-path=${LOCALBASE}/share/xml/catalog \ --with-libnl=no --with-init-dir=no --datadir=${DATADIR} \ --docdir=${DOCSDIR} --with-pid-path=/var/run \ --localstatedir=/var --enable-pammoddir=${PREFIX}/lib \ --with-db-path=/var/db/sss --with-pipe-path=/var/run/sss \ --with-pubconf-path=/var/run/sss --with-mcache-path=/var/db/sss_mc \ --with-unicode-lib=libunistring --with-autofs=no \ --disable-cifs-idmap-plugin --disable-config-lib \ --with-krb5-conf=/etc/krb5.conf CFLAGS+= -fstack-protector-all PLIST_SUB= PYTHON_VER=${PYTHON_VER} #DEBUG_FLAGS= -g MAKE_ENV+= LINGUAS="bg de eu es fr hu id it ja nb nl pl pt ru sv tg tr uk zh_CN zh_TW" SUB_FILES= pkg-message INSTALL_TARGET= install-strip CPE_VENDOR= fedoraproject SHEBANG_FILES= src/tools/sss_obfuscate \ src/sbus/sbus_codegen USE_RC_SUBR= ${PORTNAME} PORTDATA= * OPTIONS_DEFINE= DOCS SMB OPTIONS_SUB= yes SMB_DESC= Install IPA and AD providers (requires Samba4) SMB_USES= samba:lib # libndr-krb5pac libndr-nbt libndr libsamba-util SMB_CONFIGURE_WITH= samba post-patch: @${REINPLACE_CMD} -e 's|SIGCLD|SIGCHLD|g' ${WRKSRC}/src/util/signal.c @${REINPLACE_CMD} -e 's|NSS_STATUS_NOTFOUND|NS_NOTFOUND|g' \ -e 's|NSS_STATUS_UNAVAIL|NS_UNAVAIL|g' \ -e 's|NSS_STATUS_TRYAGAIN|NS_TRYAGAIN|g' \ -e '/ETIME/d' \ -e 's|NSS_STATUS_SUCCESS|NS_SUCCESS|g' \ ${WRKSRC}/src/sss_client/common.c @${REINPLACE_CMD} \ -e 's|pam_modutil_getlogin(pamh)|getlogin()|g' \ ${WRKSRC}/src/sss_client/pam_sss.c @${REINPLACE_CMD} \ -e 's|install-data-hook install-dist_initSCRIPTS|install-dist_initSCRIPTS|g' \ -e 's|install-data-hook|notinstall-data-hook|g' \ ${WRKSRC}/Makefile.am @${REINPLACE_CMD} -e 's|/etc/sssd/|${ETCDIR}/|g' \ -e 's|/etc/openldap/|${LOCALBASE}/etc/openldap/|g' \ ${WRKSRC}/src/man/*xml @${CP} ${FILESDIR}/bsdnss.c ${WRKSRC}/src/sss_client/bsdnss.c @${CP} ${FILESDIR}/sss_bsd_errno.h ${WRKSRC}/src/util/sss_bsd_errno.h post-install: ${INSTALL_DATA} ${WRKSRC}/src/examples/sssd-example.conf \ ${STAGEDIR}${ETCDIR}/sssd.conf.sample ${LN} -sf nss_sss.so ${STAGEDIR}${PREFIX}/lib/nss_sss.so.1 # clean these up from the install; we create them in rc script start_precmd .for d in db/sss db/sss_mc log/sssd run/sss/krb5.include.d run/sss/private run/sss @${RMDIR} ${STAGEDIR}/var/${d} .endfor # clean unused man dirs .for i in nl/man1 nl/man5 pt/man1 pt/man5 @${RMDIR} ${STAGEDIR}${PREFIX}/man/${i} .endfor .include Index: head/security/sssd/files/patch-src_external_pac__responder.m4 =================================================================== --- head/security/sssd/files/patch-src_external_pac__responder.m4 (revision 544080) +++ head/security/sssd/files/patch-src_external_pac__responder.m4 (revision 544081) @@ -1,24 +1,25 @@ --- src/external/pac_responder.m4.orig 2014-09-17 13:01:37 UTC +++ src/external/pac_responder.m4 -@@ -14,14 +14,19 @@ then +@@ -14,14 +14,20 @@ then PKG_CHECK_MODULES(NDR_KRB5PAC, ndr_krb5pac, ndr_krb5pac_ok=yes, AC_MSG_WARN([Cannot build pac responder without libndr_krb5pac])) - AC_PATH_PROG(KRB5_CONFIG, krb5-config) + AC_PATH_PROG(KRB5_CONFIG, krb5-config, [], [/usr/local/bin:$PATH]) AC_MSG_CHECKING(for supported MIT krb5 version) KRB5_VERSION="`$KRB5_CONFIG --version`" case $KRB5_VERSION in Kerberos\ 5\ release\ 1.9* | \ Kerberos\ 5\ release\ 1.10* | \ Kerberos\ 5\ release\ 1.11* | \ - Kerberos\ 5\ release\ 1.12*) + Kerberos\ 5\ release\ 1.12* | \ + Kerberos\ 5\ release\ 1.13* | \ + Kerberos\ 5\ release\ 1.14* | \ + Kerberos\ 5\ release\ 1.15* | \ + Kerberos\ 5\ release\ 1.16* | \ -+ Kerberos\ 5\ release\ 1.17*) ++ Kerberos\ 5\ release\ 1.17* | \ ++ Kerberos\ 5\ release\ 1.18*) krb5_version_ok=yes AC_MSG_RESULT([yes]) ;; Index: head/security/sssd/pkg-plist =================================================================== --- head/security/sssd/pkg-plist (revision 544080) +++ head/security/sssd/pkg-plist (revision 544081) @@ -1,194 +1,196 @@ bin/sss_ssh_authorizedkeys bin/sss_ssh_knownhostsproxy etc/dbus-1/system.d/org.freedesktop.sssd.infopipe.conf %%ETCDIR%%/sssd.conf.sample include/ipa_hbac.h include/sss_idmap.h include/sss_nss_idmap.h +%%SMB%%lib/krb5/plugins/authdata/sssd_pac_plugin.so lib/krb5/plugins/libkrb5/sssd_krb5_locator_plugin.so lib/libipa_hbac.so lib/libipa_hbac.so.0 lib/libipa_hbac.so.0.0.1 lib/libsss_idmap.so lib/libsss_idmap.so.0 lib/libsss_idmap.so.0.4.0 lib/libsss_nss_idmap.so lib/libsss_nss_idmap.so.0 lib/libsss_nss_idmap.so.0.0.1 lib/libsss_sudo.so lib/nss_sss.so lib/nss_sss.so.1 lib/nss_sss.so.2 lib/nss_sss.so.2.0.0 lib/pam_sss.so %%PYTHON_SITELIBDIR%%/SSSDConfig-1.11.7-py%%PYTHON_VER%%.egg-info %%PYTHON_SITELIBDIR%%/SSSDConfig/__init__.py %%PYTHON_SITELIBDIR%%/SSSDConfig/__init__.pyc %%PYTHON_SITELIBDIR%%/SSSDConfig/ipachangeconf.py %%PYTHON_SITELIBDIR%%/SSSDConfig/ipachangeconf.pyc %%PYTHON_SITELIBDIR%%/SSSDConfig/sssd_upgrade_config.py %%PYTHON_SITELIBDIR%%/SSSDConfig/sssd_upgrade_config.pyc %%PYTHON_SITELIBDIR%%/pyhbac.so %%PYTHON_SITELIBDIR%%/pysss.so %%PYTHON_SITELIBDIR%%/pysss_murmur.so %%PYTHON_SITELIBDIR%%/pysss_nss_idmap.so lib/shared-modules/ldb/memberof.so %%SMB%%lib/sssd/libsss_ad.so lib/sssd/libsss_child.so lib/sssd/libsss_crypt.so lib/sssd/libsss_debug.so %%SMB%%lib/sssd/libsss_ipa.so lib/sssd/libsss_krb5.so lib/sssd/libsss_krb5_common.so lib/sssd/libsss_ldap.so lib/sssd/libsss_ldap_common.so lib/sssd/libsss_proxy.so lib/sssd/libsss_simple.so lib/sssd/libsss_util.so libdata/pkgconfig/ipa_hbac.pc libdata/pkgconfig/sss_idmap.pc libdata/pkgconfig/sss_nss_idmap.pc libexec/sssd/krb5_child libexec/sssd/ldap_child libexec/sssd/proxy_child libexec/sssd/sss_signal libexec/sssd/sssd_be libexec/sssd/sssd_ifp libexec/sssd/sssd_nss +%%SMB%%libexec/sssd/sssd_pac libexec/sssd/sssd_pam libexec/sssd/sssd_ssh libexec/sssd/sssd_sudo man/es/man1/sss_ssh_authorizedkeys.1.gz man/es/man1/sss_ssh_knownhostsproxy.1.gz man/es/man5/sssd-ldap.5.gz man/es/man5/sssd-simple.5.gz man/es/man5/sssd-sudo.5.gz man/es/man5/sssd.conf.5.gz man/es/man8/pam_sss.8.gz man/es/man8/sss_cache.8.gz man/es/man8/sss_debuglevel.8.gz man/es/man8/sss_groupadd.8.gz man/es/man8/sss_groupdel.8.gz man/es/man8/sss_groupmod.8.gz man/es/man8/sss_groupshow.8.gz man/es/man8/sss_obfuscate.8.gz man/es/man8/sss_seed.8.gz man/es/man8/sss_useradd.8.gz man/es/man8/sss_userdel.8.gz man/es/man8/sss_usermod.8.gz man/es/man8/sssd.8.gz man/es/man8/sssd_krb5_locator_plugin.8.gz man/fr/man1/sss_ssh_authorizedkeys.1.gz man/fr/man1/sss_ssh_knownhostsproxy.1.gz man/fr/man5/sssd-ad.5.gz man/fr/man5/sssd-krb5.5.gz man/fr/man5/sssd-ldap.5.gz man/fr/man5/sssd-simple.5.gz man/fr/man5/sssd-sudo.5.gz man/fr/man5/sssd.conf.5.gz man/fr/man8/pam_sss.8.gz man/fr/man8/sss_cache.8.gz man/fr/man8/sss_debuglevel.8.gz man/fr/man8/sss_groupadd.8.gz man/fr/man8/sss_groupdel.8.gz man/fr/man8/sss_groupmod.8.gz man/fr/man8/sss_groupshow.8.gz man/fr/man8/sss_obfuscate.8.gz man/fr/man8/sss_seed.8.gz man/fr/man8/sss_useradd.8.gz man/fr/man8/sss_userdel.8.gz man/fr/man8/sss_usermod.8.gz man/fr/man8/sssd.8.gz man/fr/man8/sssd_krb5_locator_plugin.8.gz man/ja/man1/sss_ssh_authorizedkeys.1.gz man/ja/man1/sss_ssh_knownhostsproxy.1.gz man/ja/man5/sssd-krb5.5.gz man/ja/man5/sssd-ldap.5.gz man/ja/man5/sssd-simple.5.gz man/ja/man5/sssd.conf.5.gz man/ja/man8/pam_sss.8.gz man/ja/man8/sss_cache.8.gz man/ja/man8/sss_debuglevel.8.gz man/ja/man8/sss_groupadd.8.gz man/ja/man8/sss_groupdel.8.gz man/ja/man8/sss_groupmod.8.gz man/ja/man8/sss_groupshow.8.gz man/ja/man8/sss_obfuscate.8.gz man/ja/man8/sss_useradd.8.gz man/ja/man8/sss_userdel.8.gz man/ja/man8/sss_usermod.8.gz man/ja/man8/sssd.8.gz man/ja/man8/sssd_krb5_locator_plugin.8.gz man/man1/sss_ssh_authorizedkeys.1.gz man/man1/sss_ssh_knownhostsproxy.1.gz man/man5/sssd-ad.5.gz man/man5/sssd-ifp.5.gz man/man5/sssd-ipa.5.gz man/man5/sssd-krb5.5.gz man/man5/sssd-ldap.5.gz man/man5/sssd-simple.5.gz man/man5/sssd-sudo.5.gz man/man5/sssd.conf.5.gz man/man8/pam_sss.8.gz man/man8/sss_cache.8.gz man/man8/sss_debuglevel.8.gz man/man8/sss_groupadd.8.gz man/man8/sss_groupdel.8.gz man/man8/sss_groupmod.8.gz man/man8/sss_groupshow.8.gz man/man8/sss_obfuscate.8.gz man/man8/sss_seed.8.gz man/man8/sss_useradd.8.gz man/man8/sss_userdel.8.gz man/man8/sss_usermod.8.gz man/man8/sssd.8.gz man/man8/sssd_krb5_locator_plugin.8.gz man/nl/man8/sss_groupmod.8.gz man/pt/man8/sss_groupdel.8.gz man/pt/man8/sss_groupmod.8.gz man/uk/man1/sss_ssh_authorizedkeys.1.gz man/uk/man1/sss_ssh_knownhostsproxy.1.gz man/uk/man5/sssd-ad.5.gz man/uk/man5/sssd-ifp.5.gz man/uk/man5/sssd-krb5.5.gz man/uk/man5/sssd-ldap.5.gz man/uk/man5/sssd-simple.5.gz man/uk/man5/sssd-sudo.5.gz man/uk/man5/sssd.conf.5.gz man/uk/man8/pam_sss.8.gz man/uk/man8/sss_cache.8.gz man/uk/man8/sss_debuglevel.8.gz man/uk/man8/sss_groupadd.8.gz man/uk/man8/sss_groupdel.8.gz man/uk/man8/sss_groupmod.8.gz man/uk/man8/sss_groupshow.8.gz man/uk/man8/sss_obfuscate.8.gz man/uk/man8/sss_seed.8.gz man/uk/man8/sss_useradd.8.gz man/uk/man8/sss_userdel.8.gz man/uk/man8/sss_usermod.8.gz man/uk/man8/sssd.8.gz man/uk/man8/sssd_krb5_locator_plugin.8.gz sbin/sss_cache sbin/sss_debuglevel sbin/sss_groupadd sbin/sss_groupdel sbin/sss_groupmod sbin/sss_groupshow sbin/sss_obfuscate sbin/sss_seed sbin/sss_useradd sbin/sss_userdel sbin/sss_usermod sbin/sssd @dir lib/ldb @dir lib/sssd/modules %%PORTDOCS%%@dir %%DOCSDIR%%/doc %%PORTDOCS%%@dir %%DOCSDIR%%/hbac_doc %%PORTDOCS%%@dir %%DOCSDIR%%/idmap_doc %%PORTDOCS%%@dir %%DOCSDIR%%/libsss_sudo_doc %%PORTDOCS%%@dir %%DOCSDIR%%/nss_idmap_doc @postexec if [ -d %%ETCDIR%% ]; then echo "==> If you are permanently removing this port, you should do a ``rm -rf %%ETCDIR%%`` to remove any configuration files."; fi @postexec if [ -d /var/db/sss ]; then echo "==> If you are permanently removing this port, you should do a ``rm -rf /var/db/sss`` to remove any additional files."; fi @postexec if [ -d /var/db/sss_mc ]; then echo "==> If you are permanently removing this port, you should do a ``rm -rf /var/db/sss_mc`` to remove any additional files."; fi @postexec if [ -d /var/run/sss ]; then echo "==> If you are permanently removing this port, you should do a ``rm -rf /var/run/sss`` to remove any additional files."; fi