PATCH (kind of :-) Re: pam_krb5 port question

Jon Passki cykyc at
Tue Sep 9 08:25:57 PDT 2003

--- Sergey Matveychuk <sem at> wrote:
> Jon Passki wrote:
> > Is there any reason why the port is mainly focused for MIT
> Kerberos
> > and not Heimdal?
> KRB5_IMPL=heimdail didn't help? If so, it'll be great if you fix
> this 
> and send a patch to the port maintainer.

--) One fix is easy:

diff -u Makefile.orig Makefile
@@ -24,7 +24,7 @@

 .if defined(KRB5_IMPL) && ${KRB5_IMPL} == heimdal
-LIB_DEPENDS=           krb5.18:${PORTSDIR}/security/heimdal
+LIB_DEPENDS=           krb5.19:${PORTSDIR}/security/heimdal
 .if defined(HEIMDAL_HOME)
 KRB5_DIR?=             ${HEIMDAL_HOME}

I don't know the best fix for the other issue.  In
work/pam_krb5-1.0.3/configure there is a conditional around line

if (eval "$ac_cpp conftest.$ac_ext") 2>&5 |
  egrep "krb5_free_data_contents" >/dev/null 2>&1; then
  rm -rf conftest*
  COMPAT_SRCS=compat_mit.c COMPAT_OBJS=compat_mit.o
  rm -rf conftest*
  COMPAT_SRCS=compat_heimdal.c COMPAT_OBJS=compat_heimdal.o

I ran `script make.out make KRB5_IMPL=heimdal` and noticed the

checking which implementation of Kerberos we have... looks like
checking for krb5_init_context in -lkrb5... yes
checking for krb5.h... yes
checking for krb5_string_to_deltat... yes
checking for krb5_free_data_contents... yes

So maybe the logic in that conditional needs to be bypassed?  My
very rough hack was to patch the work/pam_krb5-1.0.3/
around line 37:

diff -u
---        Tue Sep  9 10:15:26 2003
+++     Tue Sep  9 10:16:59 2003
@@ -34,8 +34,9 @@


+# We were told what implementation to use in KRB5_IMPL
+COMPAT_SRCS = compat_${KRB5_IMPL}.c
+COMPAT_OBJS = compat_${KRB5_IMPL}.o

 PAM_KRB5_H = pam_krb5.h option_flags.h option_strings.h

It at least compiles for me :-)

Take care,

Jon Passki

Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software

More information about the freebsd-ports mailing list