Date: Thu, 8 Oct 2009 12:12:11 GMT From: Ivan Sy Jr <ivan_jr@yahoo.com> To: freebsd-gnats-submit@FreeBSD.org Subject: ports/139426: GSSAPI support for FreeBSD BIND dns/bind95 and dns/bind96 Message-ID: <200910081212.n98CCBW0097866@www.freebsd.org> Resent-Message-ID: <200910081220.n98CK15m099507@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 139426
>Category: ports
>Synopsis: GSSAPI support for FreeBSD BIND dns/bind95 and dns/bind96
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: change-request
>Submitter-Id: current-users
>Arrival-Date: Thu Oct 08 12:20:00 UTC 2009
>Closed-Date:
>Last-Modified:
>Originator: Ivan Sy Jr
>Release: FreeBSD 7.2-RELEASE-p1
>Organization:
>Environment:
FreeBSD ivantest.adsauth.net 7.2-RELEASE-p1 FreeBSD 7.2-RELEASE-p1 #0: Sat Jun 20 11:50:32 PHT 2009 root@ivantest.adsauth:/usr/obj/usr/src/sys/IVANTEST amd64
>Description:
To add user-configured options for bind95 and bind96 when installing these on FreeBSD.
When you do a ./configure -h on a BIND 9.5 or BIND 9.6 source, you can see this option:
--with-gssapi=PATH Specify path for system-supplied GSSAPI
This change request is to suggest inclusion of compiling bind ports with GSSAPI useful for GSS-TSIG stuff. Then this bind port will require security/cyrus-sasl2
applicable only for:
dns/bind96
dns/bind95
(patch in this PR is for dns/bind96 only)
example output
$ ldd `which named`
/usr/sbin/named:
libgssapi_krb5.so.9 => /usr/lib/libgssapi_krb5.so.9 (0x8007e9000)
libcrypto.so.5 => /lib/libcrypto.so.5 (0x8008f8000)
libxml2.so.5 => /usr/local/lib/libxml2.so.5 (0x800b8a000)
libz.so.4 => /lib/libz.so.4 (0x800dd2000)
libiconv.so.3 => /usr/local/lib/libiconv.so.3 (0x800ee6000)
libm.so.5 => /lib/libm.so.5 (0x8010e0000)
libthr.so.3 => /lib/libthr.so.3 (0x8011fa000)
libc.so.7 => /lib/libc.so.7 (0x801312000)
libkrb5.so.9 => /usr/lib/libkrb5.so.9 (0x801536000)
libroken.so.9 => /usr/lib/libroken.so.9 (0x80167b000)
libasn1.so.9 => /usr/lib/libasn1.so.9 (0x801789000)
libcom_err.so.4 => /usr/lib/libcom_err.so.4 (0x8018b3000)
libcrypt.so.4 => /lib/libcrypt.so.4 (0x8019b5000)
>How-To-Repeat:
--with-gssapi=PATH Specify path for system-supplied GSSAPI
>Fix:
Patch attached with submission follows:
--- Makefile.orig 2009-09-01 18:45:51.000000000 +0800
+++ Makefile 2009-10-08 19:51:29.000000000 +0800
@@ -48,7 +48,8 @@
DLZ_BDB "DLZ BDB driver" off \
DLZ_LDAP "DLZ LDAP driver" off \
DLZ_FILESYSTEM "DLZ filesystem driver" off \
- DLZ_STUB "DLZ stub driver" off
+ DLZ_STUB "DLZ stub driver" off \
+ GSSAPI "Build with GSSAPI for GSS-TSIG" off
# Just in case
USE_OPENSSL= yes
@@ -151,6 +152,11 @@
BIND_DESTETC= ${PREFIX}/etc
.endif
+.if defined(WITH_GSSAPI)
+CONFIGURE_ARGS+= --with-gssapi=${KRB5_HOME}
+LIB_DEPENDS+= sasl2.2:${PORTSDIR}/security/cyrus-sasl2
+.endif
+
PLIST_SUB+= BIND_DESTETC="${BIND_DESTETC}"
MAN1= dig.1 host.1 isc-config.sh.1 nslookup.1 nsupdate.1
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200910081212.n98CCBW0097866>