Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 14 Nov 2005 14:02:41 -0800
From:      Cy Schubert <Cy.Schubert@komquats.com>
To:        Palle Girgensohn <girgen@FreeBSD.org>
Cc:        ports@FreeBSD.org
Subject:   Re: security/krb5's libkrb5.so clashes with base heimdal 
Message-ID:  <200511142202.jAEM2fQx031987@cwsys.cwsent.com>
In-Reply-To: Your message of "Mon, 14 Nov 2005 00:17:06 %2B0100." <98F2F96418AEAC34BC4FFB03@palle.girgensohn.se> 

next in thread | previous in thread | raw e-mail | index | archive | help
That's an interesting idea. I will look at bumping the library version 
numbers via a knob in the port's makefile. In the mean time I will consider 
your patch.


Cheers,
Cy Schubert <Cy.Schubert@komquats.com>
Web:  http://www.komquats.com and http://www.bcbodybuilder.com
FreeBSD UNIX:  <cy@FreeBSD.org>   Web:  http://www.FreeBSD.org
BC Government:  <Cy.Schubert@gov.bc.ca>

    "Lift long enough and I believe arrogance is replaced by
    humility and fear by courage and selfishness by generosity
    and rudeness by compassion and caring."
        -- Dave Draper

In message <98F2F96418AEAC34BC4FFB03@palle.girgensohn.se>, Palle Girgensohn 
wri
tes:
> --==========B4775F6113BB088A9CB3==========
> Content-Type: text/plain; charset=us-ascii; format=flowed
> Content-Transfer-Encoding: 7bit
> Content-Disposition: inline
> 
> Hi!
> 
> Since you maintain the security/krb5 port, I have a question. Would you 
> recommend users to set NO_KERBEROS=YES in /etc/make.conf for their system 
> build, and remove their base heimdal libs and binaries? If they don't, 
> other programs will problably link with the base heimdal libkrb.so, since 
> it has a higher version number than the krb5 port.
> 
> I maintain the postgresql ports, and I have got many queries from users 
> about postgresql and kerberos. While many of those users just accidentally 
> added kerberos support to the postgresql ports, and where quite happy just 
> to switch it off, there have been a bunch of users who have had the krb5 
> port installed and who wanted MIT kerberos support, only postgresql would 
> link with the latest version of libkrb5.so, which would be the heimdal 
> libkrb5.so.7 in /usr/lib, even if MIT kerberos is installed. I'm not sure, 
> perhaps postgresql is doing something wrong, but I think it is really just 
> using libtool, so if it doing something fishy, it is not alone in doing 
> so...
> 
> For the postgresql ports, I had to do something like:
> 
> .  if defined(WITH_MIT_KRB5)
> .    if exists(/usr/lib/libkrb5.so)
> BROKEN=		"You must remove heimdal's /usr/lib/libkrb5.so* to buil
> d 
> successfully with MIT-KRB"
> .    endif
> 
> 
> But this should really go into the krb5 port, shouldn't it? Or perhaps you 
> could bump the library version number above 7?
> 
> Either something along the attached patch or bumping the libkrb5.so 
> version, whichever, would help users. Unless you have some better 
> suggestion, shared library linking is not my specialty.
> 
> Regards,
> Palle
> 
> 
> --==========B4775F6113BB088A9CB3==========
> Content-Type: text/plain; charset=iso-8859-1; name=d
> Content-Transfer-Encoding: quoted-printable
> Content-Disposition: attachment; filename=d; size=600
> 
> pcl-cvs: descending directory=20
> Index: Makefile
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3
> D=
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3
> D=
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> RCS file: /home/ncvs/ports/security/krb5/Makefile,v
> retrieving revision 1.94
> diff -u -r1.94 Makefile
> --- Makefile	8 Nov 2005 18:51:23 -0000	1.94
> +++ Makefile	13 Nov 2005 23:08:40 -0000
> @@ -71,6 +71,11 @@
>  HTML_DOCS=3D		admin.html user-guide.html install.html
>  HTML_OUTDIRS=3D		krb5-admin krb5-install
> =20
> +pre-everything::
> +.if exist(/usr/lib/librkb5.so)
> +BROKEN=3D	"you must remove /usr/lib/libkrb5.so* to successfully use MIT =
> Kerberos"
> +.endif
> +
>  .include <bsd.port.pre.mk>
> =20
>  post-extract:
> 
> --==========B4775F6113BB088A9CB3==========--





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200511142202.jAEM2fQx031987>