Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 12 Nov 2010 18:03:33 +0100 (CET)
From:      Joerg Pulz <Joerg.Pulz@frm2.tum.de>
To:        =?ISO-8859-15?Q?Leon_Me=DFner?= <l.messner@physik.tu-berlin.de>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: How do we like our base kerberos? Will it flee soon?
Message-ID:  <alpine.BSF.2.00.1011121754410.51792@unqrf.nqzva.sez2>
In-Reply-To: <20101112163630.GB8921@emmi.physik-pool.tu-berlin.de>
References:  <20101110170053.GE95441@emmi.physik-pool.tu-berlin.de> <alpine.BSF.2.00.1011111618230.1682@unqrf.nqzva.sez2> <20101112163630.GB8921@emmi.physik-pool.tu-berlin.de>

next in thread | previous in thread | raw e-mail | index | archive | help
  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--3469798045-781786733-1289581416=:51792
Content-Type: TEXT/PLAIN; charset=iso-8859-15; format=flowed
Content-Transfer-Encoding: 8BIT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Fri, 12 Nov 2010, Leon Meßner wrote:

> On Thu, Nov 11, 2010 at 04:22:57PM +0100, Joerg Pulz wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>>
>> On Wed, 10 Nov 2010, Leon Meßner wrote:
>>
>>> Hi,
>>>
>>> What i didn't try:
>>>
>>> - Use the port.
>>>
>> please take a look at ports/152030 and the patches i mentioned in the PR.
>>
>> With applied ports/152030 and the world patch applied, you should be able
>> to build a world fully against the security/heimdal port by simply
>> specifying WITH_KERBEROS_PORT=1 in /etc/src.conf and HEIMDAL_HOME=<prefix>
>> (normally /usr/local) in /etc/make.conf.
>> You should specify WITHOUT_KERBEROS=1 in /etc/src.conf to avoid mess and
>> confusion with two different heimdal version installed.
>>
>> Don't forget to install the security/heimdal port first.
>>
>> Comments are welcome.
>
> Did exactly as told and everything worked fine. Im currently in the
> process of rebuilding gssapi dependent software. Will tell if it fixed
> my issue.

Hi,

good to hear that everything went fine for you.
If you're using 8.x you should remove some of the leftover kerberos/gssapi 
libraries by yourself as the ObsoleteFiles list is still incomplete in 
8.x and 'make delete-old delete-old-libs' will not remove everything.
E.g.
in /usr/lib and /usr/lib32
 	libasn1* libgssapi* libhdb* libheimntlm* libhx509*
 	libkadm5* libkafs5* libkrb5*
in /usr/libexec
 	kcm

If you're using CURRENT then everything is removed by 'make delete-old 
delete-old-libs'.

Btw.
If you're using security/cyrus-sasl2 with GSSAPI please take a look at 
PR/152071.
If you're using databases/postgresql*-server, net/freeradius(2) or 
security/openssh-portable please take a look at PR/152029.

Kind regards
Joerg

- -- 
The beginning is the most important part of the work.
 				-Plato
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (FreeBSD)

iD8DBQFM3XNoSPOsGF+KA+MRAovlAKC/2aDRz2mydpO8wz+Cgzt79W8WaQCgmmI3
gGWX7HXD4KoUSFrfgaHj3OI=
=eFIp
-----END PGP SIGNATURE-----
--3469798045-781786733-1289581416=:51792--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.00.1011121754410.51792>