git: b5a0134bafc2 - main - security/sssd2: Enable the ifp service by default

From: Gleb Popov <arrowd_at_FreeBSD.org>
Date: Sun, 12 Jul 2026 12:16:32 UTC
The branch main has been updated by arrowd:

URL: https://cgit.FreeBSD.org/ports/commit/?id=b5a0134bafc2fe0989a8ce552c9c08adc7c47c0b

commit b5a0134bafc2fe0989a8ce552c9c08adc7c47c0b
Author:     Gleb Popov <arrowd@FreeBSD.org>
AuthorDate: 2026-07-12 12:15:48 +0000
Commit:     Gleb Popov <arrowd@FreeBSD.org>
CommitDate: 2026-07-12 12:16:16 +0000

    security/sssd2: Enable the ifp service by default
---
 security/sssd2/Makefile                                   |  1 +
 security/sssd2/files/patch-Makefile.am                    |  4 ++--
 security/sssd2/files/patch-src_config_cfg__rules.ini      |  4 ++--
 security/sssd2/files/patch-src_examples_sssd-example.conf | 14 ++++++++++++++
 security/sssd2/files/patch-src_responder_pam_pamsrv.c     |  4 ++--
 security/sssd2/files/patch-src_util_util.c                |  4 ++--
 6 files changed, 23 insertions(+), 8 deletions(-)

diff --git a/security/sssd2/Makefile b/security/sssd2/Makefile
index 7d9c5f5ef94b..2ea9d3cf08ca 100644
--- a/security/sssd2/Makefile
+++ b/security/sssd2/Makefile
@@ -1,5 +1,6 @@
 PORTNAME=	sssd
 PORTVERSION=	2.13.1
+PORTREVISION=	1
 CATEGORIES=	security
 PKGNAMESUFFIX=	2
 
diff --git a/security/sssd2/files/patch-Makefile.am b/security/sssd2/files/patch-Makefile.am
index 27f20a4040d9..46c743b190e3 100644
--- a/security/sssd2/files/patch-Makefile.am
+++ b/security/sssd2/files/patch-Makefile.am
@@ -1,4 +1,4 @@
---- Makefile.am.orig	2026-01-21 16:48:09 UTC
+--- Makefile.am.orig	2026-07-12 11:16:12 UTC
 +++ Makefile.am
 @@ -64,7 +64,7 @@ dbusservicedir = $(datadir)/dbus-1/system-services
  krb5snippetsdir = $(sssddatadir)/krb5-snippets
@@ -9,7 +9,7 @@
  runstatedir = @runstatedir@
  localedir = @localedir@
  nsslibdir = @nsslibdir@
-@@ -4067,6 +4067,7 @@ libnss_sss_la_SOURCES = \
+@@ -4159,6 +4159,7 @@ libnss_sss_la_SOURCES = \
  nsslib_LTLIBRARIES = libnss_sss.la
  libnss_sss_la_SOURCES = \
      src/sss_client/common.c \
diff --git a/security/sssd2/files/patch-src_config_cfg__rules.ini b/security/sssd2/files/patch-src_config_cfg__rules.ini
index a395525dfe9a..09d3fc0ba54e 100644
--- a/security/sssd2/files/patch-src_config_cfg__rules.ini
+++ b/security/sssd2/files/patch-src_config_cfg__rules.ini
@@ -2,9 +2,9 @@ We have to repeat the whole rule block, because our libc does not support
 operator | in basic regexps.
 See https://github.com/SSSD/sssd/pull/8227#issuecomment-3567972723
 
---- src/config/cfg_rules.ini.orig	2026-01-14 15:01:42 UTC
+--- src/config/cfg_rules.ini.orig	2026-06-09 12:32:21 UTC
 +++ src/config/cfg_rules.ini
-@@ -340,7 +340,464 @@ validator = ini_allowed_options
+@@ -343,7 +343,464 @@ validator = ini_allowed_options
  
  [rule/allowed_domain_options]
  validator = ini_allowed_options
diff --git a/security/sssd2/files/patch-src_examples_sssd-example.conf b/security/sssd2/files/patch-src_examples_sssd-example.conf
new file mode 100644
index 000000000000..999ffadf7d12
--- /dev/null
+++ b/security/sssd2/files/patch-src_examples_sssd-example.conf
@@ -0,0 +1,14 @@
+Since we don't have systemd and socket-activated services, we have to start
+ifp manually.
+
+Upstream discussion: https://github.com/SSSD/sssd/pull/8649
+
+--- src/examples/sssd-example.conf.orig	2026-06-09 12:32:21 UTC
++++ src/examples/sssd-example.conf
+@@ -1,5 +1,5 @@
+ [sssd]
+-services = nss, pam
++services = nss, pam, ifp
+ # SSSD will not start if you do not configure any domains.
+ # Add new domain configurations as [domain/<NAME>] sections, and
+ # then add the list of domains (in the order you want them to be
diff --git a/security/sssd2/files/patch-src_responder_pam_pamsrv.c b/security/sssd2/files/patch-src_responder_pam_pamsrv.c
index 7132e0e9ff8d..d9adabaf71de 100644
--- a/security/sssd2/files/patch-src_responder_pam_pamsrv.c
+++ b/security/sssd2/files/patch-src_responder_pam_pamsrv.c
@@ -1,8 +1,8 @@
 Can be removed in FreeBSD 14
 
---- src/responder/pam/pamsrv.c.orig	2026-01-14 15:01:42 UTC
+--- src/responder/pam/pamsrv.c.orig	2026-06-09 12:32:21 UTC
 +++ src/responder/pam/pamsrv.c
-@@ -484,7 +484,11 @@ int main(int argc, const char *argv[])
+@@ -513,7 +513,11 @@ int main(int argc, const char *argv[])
       */
      sss_getenv(NULL, "LISTEN_PID", NULL, &env_listen_pid);
      sss_getenv(NULL, "LISTEN_FDS", NULL, &env_listen_fds);
diff --git a/security/sssd2/files/patch-src_util_util.c b/security/sssd2/files/patch-src_util_util.c
index 1a3d4141c8f3..75707dbc572c 100644
--- a/security/sssd2/files/patch-src_util_util.c
+++ b/security/sssd2/files/patch-src_util_util.c
@@ -1,8 +1,8 @@
 Can be removed in FreeBSD 15
 
---- src/util/util.c.orig	2026-01-14 15:01:42 UTC
+--- src/util/util.c.orig	2026-06-09 12:32:21 UTC
 +++ src/util/util.c
-@@ -831,8 +831,10 @@ errno_t sss_utc_to_time_t(const char *str, const char 
+@@ -832,8 +832,10 @@ errno_t sss_utc_to_time_t(const char *str, const char 
          return EINVAL;
      }