Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 24 Jun 2019 05:50:01 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 238465] security/sssd: Update port to new version
Message-ID:  <bug-238465-7788-hSFN8nRBIZ@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-238465-7788@https.bugs.freebsd.org/bugzilla/>
References:  <bug-238465-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D238465

--- Comment #6 from John Hein <jcfyecrayz@liamekaens.com> ---
Created attachment 205304
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D205304&action=
=3Dedit
[patch] update to 1.13.4

Here's the update to 1.13.4 - on the current long term maintenance series of
sssd.  I didn't obsolete the 1.12.5 patch since that can still be applied f=
or
testing if you want to incrementally update from 1.11.7.  But I think it's
reasonable to commit the change from 1.11.7 to 1.13.4 and skip over 1.12.5.=
=20
See previous comments regarding other versions (2.x).

If you are an sssd user, please do run-time testing with this patch.

Changes from the 1.12.5 patch include:

- Set an option for python2 or python3.  If both are installed and
  detected, it would require a more complicated plist.  Instead add a
  radio option for either python2 or python3 (or neither), which defaults
  to python3 (matching the current ports default).

- Disable PAC responder if SMB is off.  It is part if Microsoft Active
  Directory [1] and needs samba.  If you happen to have samba installed,
  but the SMB option off, sssd's configure will detect samba and try to
  build the PAC responder which will trigger stage-qa warnings.

- Handle build errors for pysss.c (when building with python support [2]):

    In file included from src/python/pysss.c:27:
    In file included from ./src/util/util.h:51:
    ./src/util/util_errors.h:130:26: error: unknown type name 'errno_t'


- plist updates.


[1]
For more info on PAC (Privilege Attribute Certificate):

https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-pac/166d806=
4-c863-41e1-9c23-edaaa5f36962

https://jhrozek.wordpress.com/category/sssd/


[2] patch from bug filed upstream - https://pagure.io/SSSD/sssd/issue/4027




As with the 1.12.5 patch, if you want to build with SMB on, this still needs
samba to be built without the bundled ldb, as in:

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D230705#c8

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-238465-7788-hSFN8nRBIZ>