security/krb5's libkrb5.so clashes with base heimdal

Cy Schubert Cy.Schubert at komquats.com
Mon Nov 14 14:02:45 PST 2005


That's an interesting idea. I will look at bumping the library version 
numbers via a knob in the port's makefile. In the mean time I will consider 
your patch.


Cheers,
Cy Schubert <Cy.Schubert at komquats.com>
Web:  http://www.komquats.com and http://www.bcbodybuilder.com
FreeBSD UNIX:  <cy at FreeBSD.org>   Web:  http://www.FreeBSD.org
BC Government:  <Cy.Schubert at gov.bc.ca>

    "Lift long enough and I believe arrogance is replaced by
    humility and fear by courage and selfishness by generosity
    and rudeness by compassion and caring."
        -- Dave Draper

In message <98F2F96418AEAC34BC4FFB03 at palle.girgensohn.se>, Palle Girgensohn 
wri
tes:
> --==========B4775F6113BB088A9CB3==========
> Content-Type: text/plain; charset=us-ascii; format=flowed
> Content-Transfer-Encoding: 7bit
> Content-Disposition: inline
> 
> Hi!
> 
> Since you maintain the security/krb5 port, I have a question. Would you 
> recommend users to set NO_KERBEROS=YES in /etc/make.conf for their system 
> build, and remove their base heimdal libs and binaries? If they don't, 
> other programs will problably link with the base heimdal libkrb.so, since 
> it has a higher version number than the krb5 port.
> 
> I maintain the postgresql ports, and I have got many queries from users 
> about postgresql and kerberos. While many of those users just accidentally 
> added kerberos support to the postgresql ports, and where quite happy just 
> to switch it off, there have been a bunch of users who have had the krb5 
> port installed and who wanted MIT kerberos support, only postgresql would 
> link with the latest version of libkrb5.so, which would be the heimdal 
> libkrb5.so.7 in /usr/lib, even if MIT kerberos is installed. I'm not sure, 
> perhaps postgresql is doing something wrong, but I think it is really just 
> using libtool, so if it doing something fishy, it is not alone in doing 
> so...
> 
> For the postgresql ports, I had to do something like:
> 
> .  if defined(WITH_MIT_KRB5)
> .    if exists(/usr/lib/libkrb5.so)
> BROKEN=		"You must remove heimdal's /usr/lib/libkrb5.so* to buil
> d 
> successfully with MIT-KRB"
> .    endif
> 
> 
> But this should really go into the krb5 port, shouldn't it? Or perhaps you 
> could bump the library version number above 7?
> 
> Either something along the attached patch or bumping the libkrb5.so 
> version, whichever, would help users. Unless you have some better 
> suggestion, shared library linking is not my specialty.
> 
> Regards,
> Palle
> 
> 
> --==========B4775F6113BB088A9CB3==========
> Content-Type: text/plain; charset=iso-8859-1; name=d
> Content-Transfer-Encoding: quoted-printable
> Content-Disposition: attachment; filename=d; size=600
> 
> pcl-cvs: descending directory=20
> Index: Makefile
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3
> D=
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3
> D=
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> RCS file: /home/ncvs/ports/security/krb5/Makefile,v
> retrieving revision 1.94
> diff -u -r1.94 Makefile
> --- Makefile	8 Nov 2005 18:51:23 -0000	1.94
> +++ Makefile	13 Nov 2005 23:08:40 -0000
> @@ -71,6 +71,11 @@
>  HTML_DOCS=3D		admin.html user-guide.html install.html
>  HTML_OUTDIRS=3D		krb5-admin krb5-install
> =20
> +pre-everything::
> +.if exist(/usr/lib/librkb5.so)
> +BROKEN=3D	"you must remove /usr/lib/libkrb5.so* to successfully use MIT =
> Kerberos"
> +.endif
> +
>  .include <bsd.port.pre.mk>
> =20
>  post-extract:
> 
> --==========B4775F6113BB088A9CB3==========--




More information about the freebsd-ports mailing list