diff options
author | Eray Aslan <eras@gentoo.org> | 2013-11-18 16:28:12 +0000 |
---|---|---|
committer | Eray Aslan <eras@gentoo.org> | 2013-11-18 16:28:12 +0000 |
commit | 7d1e766e9bb582742a2bf084d10954a20e495389 (patch) | |
tree | 18bc55b2d88c7f718d58df979082892a5e223c06 /app-crypt/mit-krb5 | |
parent | Version bump (diff) | |
download | historical-7d1e766e9bb582742a2bf084d10954a20e495389.tar.gz historical-7d1e766e9bb582742a2bf084d10954a20e495389.tar.bz2 historical-7d1e766e9bb582742a2bf084d10954a20e495389.zip |
Remove vulnerable
Package-Manager: portage-2.2.7/cvs/Linux x86_64
Manifest-Sign-Key: 0x77F1F175586A3B1F
Diffstat (limited to 'app-crypt/mit-krb5')
-rw-r--r-- | app-crypt/mit-krb5/ChangeLog | 6 | ||||
-rw-r--r-- | app-crypt/mit-krb5/Manifest | 35 | ||||
-rw-r--r-- | app-crypt/mit-krb5/files/CVE-2002-2443.patch | 69 | ||||
-rw-r--r-- | app-crypt/mit-krb5/mit-krb5-1.11.2-r1.ebuild | 127 | ||||
-rw-r--r-- | app-crypt/mit-krb5/mit-krb5-1.11.3.ebuild | 127 |
5 files changed, 20 insertions, 344 deletions
diff --git a/app-crypt/mit-krb5/ChangeLog b/app-crypt/mit-krb5/ChangeLog index 6fb55578131e..72a6b81eddb3 100644 --- a/app-crypt/mit-krb5/ChangeLog +++ b/app-crypt/mit-krb5/ChangeLog @@ -1,6 +1,10 @@ # ChangeLog for app-crypt/mit-krb5 # Copyright 1999-2013 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/app-crypt/mit-krb5/ChangeLog,v 1.393 2013/11/16 08:40:46 ago Exp $ +# $Header: /var/cvsroot/gentoo-x86/app-crypt/mit-krb5/ChangeLog,v 1.394 2013/11/18 16:28:11 eras Exp $ + + 18 Nov 2013; Eray Aslan <eras@gentoo.org> -files/CVE-2002-2443.patch, + -mit-krb5-1.11.2-r1.ebuild, -mit-krb5-1.11.3.ebuild: + Remove vulnerable 16 Nov 2013; Agostino Sarubbo <ago@gentoo.org> mit-krb5-1.11.4.ebuild: Stable for sparc, wrt bug #490668 diff --git a/app-crypt/mit-krb5/Manifest b/app-crypt/mit-krb5/Manifest index 0776c73d86c6..8c3a47239e74 100644 --- a/app-crypt/mit-krb5/Manifest +++ b/app-crypt/mit-krb5/Manifest @@ -1,35 +1,30 @@ -----BEGIN PGP SIGNED MESSAGE----- -Hash: SHA512 +Hash: SHA256 -AUX CVE-2002-2443.patch 2131 SHA256 1e2b53152faa9309d4dbfa0126d4e041d3c5a4519b91487aa20d019b9c00af9b SHA512 4f578a1c52de1cf2483aac4798eb577add8149daec9cb34c8cb1c2aeec8f78c8422f24c0a6844c8cc57d3eeea673d5f71fdb4369b11d3c682cf608270be07808 WHIRLPOOL a8cf34496ebfeb48c22717680384697639b76d8b66116e29ee960514a066c2517b54abd2ac04685445bbf15438e2b40674e61b635a987f52d5c7e85e1ae58cb0 AUX kpropd.xinetd 194 SHA256 eaa3838a6ca8db901db359cac3435d4f703a9a10534f02eeb37f494dd21a1736 SHA512 c9bbd13f2fadfd2a925bfae834ba61f227cd4386b4c4466b5227d93c792f4549778ef4d6e08353372df99804459277c71f61b41ec71f3afcc600d73c5705f72f WHIRLPOOL d77ae7b0094c4f42a7ea9cee5d36d0dba844a9ed5d59c621e47c7fa4b75c84fec3414e079c570513711b378d1b0fef61156f675a0df79ee61540d9492416fe42 AUX mit-krb5-1.11_uninitialized.patch 2337 SHA256 d0319626a6997e0fe34fae831ff376e09f476e043bc18bd25e97e962ad40306d SHA512 c53faf11ec8fee56af6a814740ab29f474bb603977dd0d2f7a893a7437c4d02eb274b1abc4a5db3e1138f261ecf39d9cfe664f12db24748ba6ff09db86fe6774 WHIRLPOOL c33f953bfb05d737117a681ecdd552ba2d2345f0c0f14e1bc7265775223ea5d21ddd68a0cc7c7d6d8947960bc4448889680130bfc7642f4f7526d8b8ae9d5e2a AUX mit-krb5_krb5-config_LDFLAGS.patch 458 SHA256 9ebfc38cc167bbf451105807512845cd961f839d64b7e2904a6c4e722e41fe2b SHA512 8118518e359cb5e69e3321b7438b200d5d74ceeac16b4623bf4e4bfb4ead6c656de6fa153f9bcc454097b45a512bc8cd0798b1f062a2c4a09f75253b204a7a17 WHIRLPOOL 61d4a6ba6ef4114c8277330c36e0e6c2c625536c8011d1badd1dd5393c4549f63e5402520a6260bf81c5d9e512a76a9b1b4369eb9e9d13379e5ff887cf67d750 AUX mit-krb5kadmind.initd-r1 592 SHA256 3e55c79f19aaa6ef6b64a621c03dbb2eac3ad923916dc803f4c1bfe48ce89fbb SHA512 f0595e9bbcd85badb403af7febce1fa28278bd7fc8118498948171ea12a27ce8b3c479a34b36639d7370193bc69a0b093ae7e3b66473078dabc38864fec931e9 WHIRLPOOL 16147fc873ad16c16410e82df817fdb7ff068ef5cc1c50d9bb5558f134db36d516ab80628714e836a20883d0d1dfd17bfca5a41225be4ecca270580f2db28e70 AUX mit-krb5kdc.initd-r1 556 SHA256 709309dea043aa306c2fcf0960e0993a6db540c220de64cf92d6b85f1cca23c5 SHA512 d6d0076886ce284fc395fafc2dc253b4b3ee97b2986dea51388d96a1e1294680fb171f475efc7844559e2c6aac44b26678a9255921db9a58dcf2e7164f0aeec5 WHIRLPOOL 87e54c3df6b8b45058fe0c90c25946e37228aba32077ebcb595a82a0a6fc7268a516dcb1cfd0ce3fd82afedf19b5df2399ac05931f207d0f3d2e26afd590abef AUX mit-krb5kpropd.initd-r1 595 SHA256 c374ea05d7e9f15e10c8f9dbd0cad6548e0f92aef7de33e5dbc27222e9407e7b SHA512 a18c523aebbb6b8512cd261eac2149c7422214ef6a233e1ceb1b4da9187eeca317ddd75a153b13382571778931bbed00b1803ed015ff01875c8d565b3f3a593f WHIRLPOOL 869f8aec4764a12b5b5506a2fab8ea2641b58cb347a1db60110cccbb011dc51ab9115824828184abc55efccf540d6b014a57e0891b1d6d4ce28ff35405197aeb -DIST krb5-1.11.2-signed.tar 11673600 SHA256 f0373295fb320b9702468eb0df33397e7278326ec1681a8c6037cc53cb0120a5 SHA512 2db58530a98c4bdf9c6f797f3fb2881a3bdeda680804309f1f40e877a5a1c6e589021e1e0521b5a258626e5d04105ad0c01575b2104313b4b9592ee1ae8b8006 WHIRLPOOL 10deade6b13e88187e827513a8e56a4287a654e5b6f9554ef85657fd6d7ded5ba0d2311c001e1b35f13e0d1c5ddeefeca68cdf43ee4192432b318d8cc55c2bdd -DIST krb5-1.11.3-signed.tar 11673600 SHA256 9abd94bb94a70996da0f8d90408957154bb543271b097e86c63eb33e5f5751b5 SHA512 4d4c5d5c3a495da141bca40fe73378db190ace8ed397b7bb8e38c53757e6df3ec55fa0eb5628f7c6204d1265f8451535e65c4ebd844821c64cdfd0c6e32468a5 WHIRLPOOL 62befb0bd0dde3a459e877f9219c53486cd99b82de8ea6412caca59cc03f73c0f4ae327299d0c45a72ec70e96989f2dfb94ba7f21ccd691dc05c2f38c85d2111 DIST krb5-1.11.4-signed.tar 11683840 SHA256 5c294612dcaf830958786056e898384931490eaf7b3290c3af5d2def2312fb97 SHA512 03d4d77681d7ba6f0324dc45f8457f6a5e3be23198c8ffa19fc9542b4455ec0738f78131a054e6d501396d3f66a29677d374726d068a83f6dddf7b7b7db18c6c WHIRLPOOL e710045332d21d5d52d22b746f46e9aa56dc5bf67a1d6e5e0b107f5b4aab6a4aba9ff31a374f865348123d0a61156546214a5929bd1c5a7b0a0e6f8ec599fa74 -EBUILD mit-krb5-1.11.2-r1.ebuild 3310 SHA256 5afabf1dbb5f1b67f6ad8de7c7b5fe71ee9cdcde58233e2859391f9a29cf0380 SHA512 b3da741813285d152b0d379d7a7c0943bf7b4e85bd8160f8e71357db9d5fc922d6baaa7c26fdab297920e44f79c3e738d9ae519c4fbee96eca8cb3a566926f27 WHIRLPOOL 384586ae5ac80e566cf5bed447322f0e7d2a3aba74e2050c74f02ea54057309503ef552d366c46d4d46d7e3b4adb25a60bc0c1218e2065f9635e891ef579aa3f -EBUILD mit-krb5-1.11.3.ebuild 3297 SHA256 ec8a1ab46723c1069c48aa86e4d9382950edb0d5537195bbab342a9d346dadb3 SHA512 d8fed3a4f39e9b640ea8f87c7e8ec21e1348d2161398d981e06be983bf9640fd7c87904dc017564d3618963763aa78f3351efac015143456e4b13fac7f2b3a68 WHIRLPOOL 46b44d4b54d8ac990f82330160ad5134f724ff2c16ad04c7063cfe2ca3c439096997c831802c226293cc5ff7c1a9d87860fc8c77390bef34dc56e39f0e8f9f79 EBUILD mit-krb5-1.11.4.ebuild 3288 SHA256 f0f48ffff1bd794b0de9bc5e6208efff480b452327e1ed6ef36fdfa5af872815 SHA512 abebc7c718da1ce4bf3f22c6509d724fa63919b9d0deae492b4a9ba89683d423501fcddfbff76246d34a3c46a6357dc0c83177147a0ec27a3d2f446dd2c9a392 WHIRLPOOL efc079a32dd8dfb7e6107b8b7b73159eec40b99d189a5e1ca954a3da80c659a39a5c1ac690b22b055a04eae3300f488aebc409e43d18c18a5474e0dc3cb5d7eb -MISC ChangeLog 60959 SHA256 32d7fabb62b03109c0ecc553965da7993afab2a723bfe244a09a946a91fbf3cd SHA512 fad87a529c0a2295d4bc12131961ca02856ec9562d5dbc66ea723049b9d6b0ea456f7c47b25511f18a7dbfdb5e24b8b27b76e3192b4440bbfd6c6da6e043048f WHIRLPOOL 87b3056e0acc5c1a5717457f340153839c795a1066559d121121de5b917469e28756d6cd09be6ebf1ab513e6f8cd19fd05d34129751b994028862aac2fd97019 +MISC ChangeLog 61108 SHA256 8fa052536e6f3ec6f4eb044b3912b330153b1010185f5f275765467a8d0f8e7f SHA512 1e7564b7160a1a3ef9901a3184aa95b23a592afa7344df49c62456c24c7be082a53a6e3c8abe0bff2baeb8f06729b4b897309c9a8c7294f0c182e4e3b205892b WHIRLPOOL e8bb24c9add9b10f0f32b41e6cb6d6eb613a7f68811e4b5ddf617881f0734e50bef0f6aefdf35e17b1f722b7b9069dbf8dbc94dea395124ade57641138630c17 MISC metadata.xml 668 SHA256 da5862dde92f34b882870961cb9f1e4aa8209fc549e32a43d99770a9de8b232d SHA512 0038aeb7cda74161d2e2fe97c5124ee6cc86a24b9503714c128cd8b9af8b8050a89cf5dd3aadd66b1714c1d1aeb8564d50479547a586200793ea485e9f9c6c8b WHIRLPOOL 52394a4f4d5acb11f3bf2e76e036707c7f7741990d70bafb5c87a6da5d191b6aee3cb8383f6e66694cbda7458eb1a869c7ec8758750741835e2f1af4e028378c -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) -iQIcBAEBCgAGBQJShz2TAAoJELp701BxlEWfAW8P/jICDeQOnBrq79sKrB6J5pAb -WR2dH6kWQBuIlwjh0GXOLR8XylIcieBC9rQCnm0Wjb11hOkr40d2tBh0J1zwginV -tEKctg6YvQvzzJYfPax4gzufXUj4iC4aXsrIs4SYOktDQCi3+1Rj0yN5+976ZWul -8TD8eahG+aYn6UYY3zJr79x5AW+0+ByK6BxS7wcCcCR1pCOGjEpORRDoKLbT2LHV -HJyZQV8mGrLjhzO1OeYj4QnGeWHVpPX5kbsccrtXL60Q2kBQ5uI+OQRR6RS/oVv3 -F5vqXKTvJiTER2LpjNFvmaaoBWJH6rkSG+SFM1DoQF5wbJi/NlwKPWq2hJKS6KxQ -Q5G8rvO6Hr0RfOeMPvlHseI6eQHQffuXCTEaPH8uzrDaECb/UJrtHQzieleBeycX -jZV6C+PR+fulqu/5UPKR2kUHpQnhfmpIDIqxWtsD5lD41u6AAs5hgzNaNYFeRMAR -nr67dN5TR7UUKxX7/AufdFBRtieSfa8CEj8Wd4sIjJ2lIuZyfRSF30CKMa9a8d9K -YU3LaAxRj2WBtvRzHDEcLF0sOZhZcro9rr+NggluTmwE8VHQNdzUtRTT3TM5fQf7 -wq0rOkOJVTQe6TCUdEZroNSgigY1uB7tNVLGX+wjMVwMAZ5QYwrAI+U6vS8rdovf -piSuzNRqGVCGC6NXINTV -=a3Gz +iQIcBAEBCAAGBQJSikAbAAoJEHfx8XVYajsf93sQAKCuwVRqB/oSrC2YUTWyzf7r +iGzBxTAdp7w7ac3kMYZYNQNBt/GVE7YDovg7h/XG4pQwlfHxzP/GryZNueimSZnz +ix7Uh4C9PWeOmGZbi8SrUQc0eXdlw30leFRx0YeunpN4dY2vFIYtWDXmqJ+6Y2vT +xdG/nD6qCsCC6xooQpoSyUsemXad93ccjGgA/FU2upBI62Iu66FscOojWSp2VBdq +DcuIHviZrxtoyUBrl5eY5916ptxDeYmkyapdpocW8umJsoQl6B+zpj8Le6DigCho +XiXMQxwl7HS5AgNq5VXTYBZGK2IKv4c/g5ZZGukd622zm2fXC7hTcpVqYKmsI2bf +GKu89yEETWdLzZdahaAxo235w6jO+HKCA1Jvtf9Gbdlqm/koUhX9xXBAMc+908Ob +rYqNCGX59mih97fEhawbtObm7mBOHPApokp11OdkXUdsAOTxwOyw8EsGSkzfJpjT +5wjp0hP8Zi+5BOg2w7Tzrf9CgVA+GvjSO94d/JWwSb9acCUzutn2BrlTl3ZdFpWq +0bvZmj+PsgN0LdfA+T0kZ6oLuqC0qL2kjvhy8jMAH+h+KlptecFamQbmfiXMYubF +yPkZrQZ5VfTjOKjJAqx6k8BZADlFnDuhx++l1uZ5YTuoptemA3BRKGTxKLct1bS+ +xQ71CBSxgkMlqYyjOZGn +=78rS -----END PGP SIGNATURE----- diff --git a/app-crypt/mit-krb5/files/CVE-2002-2443.patch b/app-crypt/mit-krb5/files/CVE-2002-2443.patch deleted file mode 100644 index 3ef88155c5a1..000000000000 --- a/app-crypt/mit-krb5/files/CVE-2002-2443.patch +++ /dev/null @@ -1,69 +0,0 @@ -From cf1a0c411b2668c57c41e9c4efd15ba17b6b322c Mon Sep 17 00:00:00 2001 -From: Tom Yu <tlyu@mit.edu> -Date: Fri, 3 May 2013 16:26:46 -0400 -Subject: [PATCH] Fix kpasswd UDP ping-pong [CVE-2002-2443] - -The kpasswd service provided by kadmind was vulnerable to a UDP -"ping-pong" attack [CVE-2002-2443]. Don't respond to packets unless -they pass some basic validation, and don't respond to our own error -packets. - -Some authors use CVE-1999-0103 to refer to the kpasswd UDP ping-pong -attack or UDP ping-pong attacks in general, but there is discussion -leading toward narrowing the definition of CVE-1999-0103 to the echo, -chargen, or other similar built-in inetd services. - -Thanks to Vincent Danen for alerting us to this issue. - -CVSSv2: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:P/RL:O/RC:C - -ticket: 7637 (new) -target_version: 1.11.3 -tags: pullup ---- - src/kadmin/server/schpw.c | 8 ++++---- - 1 file changed, 4 insertions(+), 4 deletions(-) - -diff --git a/src/kadmin/server/schpw.c b/src/kadmin/server/schpw.c -index 15b0ab5..7f455d8 100644 ---- a/src/kadmin/server/schpw.c -+++ b/src/kadmin/server/schpw.c -@@ -52,7 +52,7 @@ - ret = KRB5KRB_AP_ERR_MODIFIED; - numresult = KRB5_KPASSWD_MALFORMED; - strlcpy(strresult, "Request was truncated", sizeof(strresult)); -- goto chpwfail; -+ goto bailout; - } - - ptr = req->data; -@@ -67,7 +67,7 @@ - numresult = KRB5_KPASSWD_MALFORMED; - strlcpy(strresult, "Request length was inconsistent", - sizeof(strresult)); -- goto chpwfail; -+ goto bailout; - } - - /* verify version number */ -@@ -80,7 +80,7 @@ - numresult = KRB5_KPASSWD_BAD_VERSION; - snprintf(strresult, sizeof(strresult), - "Request contained unknown protocol version number %d", vno); -- goto chpwfail; -+ goto bailout; - } - - /* read, check ap-req length */ -@@ -93,7 +93,7 @@ - numresult = KRB5_KPASSWD_MALFORMED; - strlcpy(strresult, "Request was truncated in AP-REQ", - sizeof(strresult)); -- goto chpwfail; -+ goto bailout; - } - - /* verify ap_req */ --- -1.8.1.6 - diff --git a/app-crypt/mit-krb5/mit-krb5-1.11.2-r1.ebuild b/app-crypt/mit-krb5/mit-krb5-1.11.2-r1.ebuild deleted file mode 100644 index 64768817ec84..000000000000 --- a/app-crypt/mit-krb5/mit-krb5-1.11.2-r1.ebuild +++ /dev/null @@ -1,127 +0,0 @@ -# Copyright 1999-2013 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/app-crypt/mit-krb5/mit-krb5-1.11.2-r1.ebuild,v 1.14 2013/10/11 14:17:06 eras Exp $ - -EAPI=5 - -PYTHON_COMPAT=( python{2_6,2_7} ) -inherit eutils flag-o-matic python-any-r1 versionator - -MY_P="${P/mit-}" -P_DIR=$(get_version_component_range 1-2) -DESCRIPTION="MIT Kerberos V" -HOMEPAGE="http://web.mit.edu/kerberos/www/" -SRC_URI="http://web.mit.edu/kerberos/dist/krb5/${P_DIR}/${MY_P}-signed.tar" - -LICENSE="openafs-krb5-a BSD MIT OPENLDAP BSD-2 HPND BSD-4 ISC RSA CC-BY-SA-3.0 || ( BSD-2 GPL-2+ )" -SLOT="0" -KEYWORDS="alpha amd64 arm hppa ia64 ppc ppc64 s390 sh sparc x86" -IUSE="doc +keyutils openldap +pkinit +threads test xinetd" - -RDEPEND="!!app-crypt/heimdal - >=sys-libs/e2fsprogs-libs-1.41.0 - || ( dev-libs/libverto[libev] dev-libs/libverto[libevent] dev-libs/libverto[tevent] ) - keyutils? ( sys-apps/keyutils ) - openldap? ( net-nds/openldap ) - pkinit? ( dev-libs/openssl ) - xinetd? ( sys-apps/xinetd )" -DEPEND="${RDEPEND} - virtual/yacc - doc? ( virtual/latex-base ) - test? ( ${PYTHON_DEPS} - dev-lang/tcl - dev-util/dejagnu )" - -S=${WORKDIR}/${MY_P}/src - -src_unpack() { - unpack ${A} - unpack ./"${MY_P}".tar.gz -} - -src_prepare() { - epatch "${FILESDIR}/${PN}-1.11_uninitialized.patch" - epatch "${FILESDIR}/${PN}_krb5-config_LDFLAGS.patch" - epatch "${FILESDIR}/CVE-2002-2443.patch" - - # tcl-8.6 compatibility - sed -i -e 's/interp->result/Tcl_GetStringResult(interp)/' \ - kadmin/testing/util/tcl_kadm5.c || die -} - -src_configure() { - append-cppflags "-I${EPREFIX}/usr/include/et" - # QA - append-flags -fno-strict-aliasing - append-flags -fno-strict-overflow - - use keyutils || export ac_cv_header_keyutils_h=no - econf \ - $(use_with openldap ldap) \ - "$(use_with test tcl "${EPREFIX}/usr")" \ - $(use_enable pkinit) \ - $(use_enable threads thread-support) \ - --without-hesiod \ - --enable-shared \ - --with-system-et \ - --with-system-ss \ - --enable-dns-for-realm \ - --enable-kdc-lookaside-cache \ - --with-system-verto \ - --disable-rpath -} - -src_compile() { - emake -j1 -} - -src_test() { - emake -j1 check -} - -src_install() { - emake \ - DESTDIR="${D}" \ - EXAMPLEDIR="${EPREFIX}/usr/share/doc/${PF}/examples" \ - install - - # default database dir - keepdir /var/lib/krb5kdc - - cd .. - dodoc README - - if use doc; then - dohtml -r doc/html/* - docinto pdf - dodoc doc/pdf/*.pdf - fi - - newinitd "${FILESDIR}"/mit-krb5kadmind.initd-r1 mit-krb5kadmind - newinitd "${FILESDIR}"/mit-krb5kdc.initd-r1 mit-krb5kdc - newinitd "${FILESDIR}"/mit-krb5kpropd.initd-r1 mit-krb5kpropd - - insinto /etc - newins "${ED}/usr/share/doc/${PF}/examples/krb5.conf" krb5.conf.example - insinto /var/lib/krb5kdc - newins "${ED}/usr/share/doc/${PF}/examples/kdc.conf" kdc.conf.example - - if use openldap ; then - insinto /etc/openldap/schema - doins "${S}/plugins/kdb/ldap/libkdb_ldap/kerberos.schema" - fi - - if use xinetd ; then - insinto /etc/xinetd.d - newins "${FILESDIR}/kpropd.xinetd" kpropd - fi -} - -pkg_preinst() { - if has_version "<${CATEGORY}/${PN}-1.8.0" ; then - elog "MIT split the Kerberos applications from the base Kerberos" - elog "distribution. Kerberized versions of telnet, rlogin, rsh, rcp," - elog "ftp clients and telnet, ftp deamons now live in" - elog "\"app-crypt/mit-krb5-appl\" package." - fi -} diff --git a/app-crypt/mit-krb5/mit-krb5-1.11.3.ebuild b/app-crypt/mit-krb5/mit-krb5-1.11.3.ebuild deleted file mode 100644 index 19dcf471e4fe..000000000000 --- a/app-crypt/mit-krb5/mit-krb5-1.11.3.ebuild +++ /dev/null @@ -1,127 +0,0 @@ -# Copyright 1999-2013 Gentoo Foundation -# Distributed under the terms of the GNU General Public License v2 -# $Header: /var/cvsroot/gentoo-x86/app-crypt/mit-krb5/mit-krb5-1.11.3.ebuild,v 1.4 2013/10/11 14:17:06 eras Exp $ - -EAPI=5 - -PYTHON_COMPAT=( python{2_6,2_7} ) -inherit eutils flag-o-matic python-any-r1 versionator - -MY_P="${P/mit-}" -P_DIR=$(get_version_component_range 1-2) -DESCRIPTION="MIT Kerberos V" -HOMEPAGE="http://web.mit.edu/kerberos/www/" -SRC_URI="http://web.mit.edu/kerberos/dist/krb5/${P_DIR}/${MY_P}-signed.tar" - -LICENSE="openafs-krb5-a BSD MIT OPENLDAP BSD-2 HPND BSD-4 ISC RSA CC-BY-SA-3.0 || ( BSD-2 GPL-2+ )" -SLOT="0" -KEYWORDS="~alpha ~amd64 ~arm ~hppa ~ia64 ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86" -IUSE="doc +keyutils openldap +pkinit +threads test xinetd" - -RDEPEND="!!app-crypt/heimdal - >=sys-libs/e2fsprogs-libs-1.41.0 - || ( dev-libs/libverto[libev] dev-libs/libverto[libevent] dev-libs/libverto[tevent] ) - keyutils? ( sys-apps/keyutils ) - openldap? ( net-nds/openldap ) - pkinit? ( dev-libs/openssl ) - xinetd? ( sys-apps/xinetd )" -DEPEND="${RDEPEND} - ${PYTHON_DEPS} - virtual/yacc - doc? ( virtual/latex-base ) - test? ( ${PYTHON_DEPS} - dev-lang/tcl - dev-util/dejagnu )" - -S=${WORKDIR}/${MY_P}/src - -src_unpack() { - unpack ${A} - unpack ./"${MY_P}".tar.gz -} - -src_prepare() { - epatch "${FILESDIR}/${PN}-1.11_uninitialized.patch" - epatch "${FILESDIR}/${PN}_krb5-config_LDFLAGS.patch" - - # tcl-8.6 compatibility - sed -i -e 's/interp->result/Tcl_GetStringResult(interp)/' \ - kadmin/testing/util/tcl_kadm5.c || die -} - -src_configure() { - append-cppflags "-I${EPREFIX}/usr/include/et" - # QA - append-flags -fno-strict-aliasing - append-flags -fno-strict-overflow - - use keyutils || export ac_cv_header_keyutils_h=no - econf \ - $(use_with openldap ldap) \ - "$(use_with test tcl "${EPREFIX}/usr")" \ - $(use_enable pkinit) \ - $(use_enable threads thread-support) \ - --without-hesiod \ - --enable-shared \ - --with-system-et \ - --with-system-ss \ - --enable-dns-for-realm \ - --enable-kdc-lookaside-cache \ - --with-system-verto \ - --disable-rpath -} - -src_compile() { - emake -j1 -} - -src_test() { - emake -j1 check -} - -src_install() { - emake \ - DESTDIR="${D}" \ - EXAMPLEDIR="${EPREFIX}/usr/share/doc/${PF}/examples" \ - install - - # default database dir - keepdir /var/lib/krb5kdc - - cd .. - dodoc README - - if use doc; then - dohtml -r doc/html/* - docinto pdf - dodoc doc/pdf/*.pdf - fi - - newinitd "${FILESDIR}"/mit-krb5kadmind.initd-r1 mit-krb5kadmind - newinitd "${FILESDIR}"/mit-krb5kdc.initd-r1 mit-krb5kdc - newinitd "${FILESDIR}"/mit-krb5kpropd.initd-r1 mit-krb5kpropd - - insinto /etc - newins "${ED}/usr/share/doc/${PF}/examples/krb5.conf" krb5.conf.example - insinto /var/lib/krb5kdc - newins "${ED}/usr/share/doc/${PF}/examples/kdc.conf" kdc.conf.example - - if use openldap ; then - insinto /etc/openldap/schema - doins "${S}/plugins/kdb/ldap/libkdb_ldap/kerberos.schema" - fi - - if use xinetd ; then - insinto /etc/xinetd.d - newins "${FILESDIR}/kpropd.xinetd" kpropd - fi -} - -pkg_preinst() { - if has_version "<${CATEGORY}/${PN}-1.8.0" ; then - elog "MIT split the Kerberos applications from the base Kerberos" - elog "distribution. Kerberized versions of telnet, rlogin, rsh, rcp," - elog "ftp clients and telnet, ftp deamons now live in" - elog "\"app-crypt/mit-krb5-appl\" package." - fi -} |