Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 26 Jul 2009 07:13:48 +0000
From:      "b. f." <bf1783@googlemail.com>
To:        freebsd-ports@FreeBSD.org
Cc:        enlil65@gmail.com
Subject:   Re: Using WITH_OPENSSL_PORT
Message-ID:  <d873d5be0907260013t662bb1bbr6425455037ddaca5@mail.gmail.com>

next in thread | raw e-mail | index | archive | help
> As the PR advises, switching back to base openssl fixes my problem.

Well, apparently only part of it.  Unfortunately the openssl framework
in ports doesn't accommodate mixing and matching of base and port
openssl, so while this may allow you to use pam_ldap, it's at the
expense of other ports.  You should probably follow-up on the PR, and
explain to the committer who closed it why a real solution to the
problem would be desirable.  Also, ask the krb5 maintainer if it would
be possible to relax the openssl requirements on his port.  Sometimes
these restrictions are relics of times when an earlier version of
openssl in base was causing problems, and they may no longer be
relevant.

> Since I am already using pam_ldap on this system in production, I
> don't see any easy way to get security/krb5 installed and working via
> ports on the same system since openssl requirements for these things
> conflict.  I think my easiest solution is to use a different system
> for security/krb5.

At least in the short term, if you don't have the time to patch these
ports yourself, you may be right.  Another thing you may want to
consider: will the kerberos implementation already in the base system,
or another kerberos port, meet your needs, so that you can dispense
with the krb5 port?

b.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?d873d5be0907260013t662bb1bbr6425455037ddaca5>