ports/138284: security/openssh-portable: OpenSSH GSSAPI Key Exchange patch updated

[Alec Kloss]

The following reply was made to PR ports/138284; it has been noted by GNATS.

From: Alec Kloss <alec-keyword-freebsd.org.a6e2e4 at SetFilePointer.com>
To: Garrett Wollman <wollman at csail.mit.edu>
Cc: Alec Kloss <alec-keyword-freebsd.org.a6e2e4 at SetFilePointer.com>,
  bug-followup at freebsd.org
Subject: Re: ports/138284: security/openssh-portable: OpenSSH GSSAPI Key
	Exchange patch updated
Date: Sun, 30 Aug 2009 09:00:55 -0500

 --jdAw5H+0hw/nhz1g
 Content-Type: text/plain; charset=us-ascii
 Content-Disposition: inline
 Content-Transfer-Encoding: quoted-printable
 
 On 2009-08-29 22:12, Garrett Wollman wrote:
 > <<On Sat, 29 Aug 2009 08:47:33 -0500, Alec Kloss <alec-keyword-freebsd.or=
 g.a6e2e4 at SetFilePointer.com> said:
 >=20
 > > The current patch in the PR is heimdal-unfriendly.
 >=20
 > I must admit that this really isn't a concern for me.  (At this point,
 > I rather wish Heimdal would Just Go Away; it's served its purpose, and
 > it's still not sufficiently compatible with the Reference
 > Implementation to be useful to anyone doesn't have a 100%-Heimdal
 > environment.)
 
 Hrm... I haven't tried using MIT krb5 for anything serious for a
 long time as heimdal's always done what I needed.  After a brief
 internet search it doesn't appear that anyone's had the
 heimdal-vs-mit debate lately.  But that debate is a separate issue.
 
 > > Consider the attached variation which checks for HEIMDAL_HOME and
 > > defines a krb5_free_unparsed_name macro when using heimdal.
 >=20
 > I'm slightly concerned about having this version of the patch not be
 > at the "official" site for this code.  Have you offered your changes
 > to Simon?
 >=20
 
 I have not explicitly offered the changes to Simon;  I thought
 following up on the bug would be the best way to get in touch with
 the right people.  I'm 100% fine with having the patch located
 anywhere else and the corresponding changes made to the Makefile
 and distinfo.  The changes are pretty obvious so if someone offical
 wanted to re-implement them, that'd be fine too.  If there's an
 alternative way to follow up with more appropriate people, just let
 me know.
 
 --=20
 Alec Kloss  alec at SetFilePointer.com   IM: daemonalec at gmail.com
 PGP key at http://pgp.mit.edu:11371/pks/lookup?op=3Dget&search=3D0xA241980E
 "No Bunny!" -- Simon, http://wiki.adultswim.com/xwiki/bin/Frisky+Dingo/Simon
 
 --jdAw5H+0hw/nhz1g
 Content-Type: application/pgp-signature
 Content-Disposition: inline
 
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.5 (FreeBSD)
 
 iD8DBQFKmoYXkQ6e6D/NCvIRArvEAKDwaW2fJhsjAcwxfSs58RwFsfR4LQCgiUzo
 H8LFL/SYF1GrcnH9te4JVzs=
 =gacX
 -----END PGP SIGNATURE-----
 
 --jdAw5H+0hw/nhz1g--