[Bug 215835] security/p5-Authen-SASL: turn OFF KERBEROS option

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Fri Jan 6 20:08:17 UTC 2017


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=215835

            Bug ID: 215835
           Summary: security/p5-Authen-SASL: turn OFF KERBEROS option
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: perl at FreeBSD.org
          Reporter: svysh.fbsd at gmail.com
             Flags: maintainer-feedback?(perl at FreeBSD.org)
          Assignee: perl at FreeBSD.org

Created attachment 178580
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=178580&action=edit
patch

- Turn OFF option KERBEROS by default.
Private key infrastructure (PKI) and Kerberos 
are two alternative technologies to manage 
authorization and authentication in big networks.
LDAP databases are used in both technologies.
SASL is a password machinery  widely used to access LDAP.
SASL could be (and could be not) based on Kerberos.
Elaborated PKI software as a rule depends from LDAP 
and hence from SASL.
If KERBEROS option in p5-Authen-SASL in turned ON 
by default, then we have a strange situation:
PKI software by default depends from Kerberos.
Which is as if: nginx depends from apache.

- add LICENSE
- add NO_ARCH=yes
- remove line: CONFIGURE_ENV+=AUTOMATED_TESTING=yes
which seems not working anyway.

- "portlint -AC" gives just non-relevant warnings.

- Tested (with and without buil-in perl tests) at 11.stable-amd64 
with poudriere-3.1.14, perl-5.24.1, and openssl from base.
To activate test from within poudriere, file  
Mk/Uses/perl5.mk was locally augmented with lines:

.if defined(RUN_PERL_TESTS)
BUILD_DEPENDS+= ${TEST_DEPENDS}
pre-install:    test
.endif

All tests say: PASS.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list