Accommodating the security/heimdal port on FreeBSD10

Timur I. Bakeyev timur at
Wed Mar 26 03:25:58 UTC 2014

Kerberos5 support in the ports needs love and it's own .mk infrastructure.
Wish I have enough overview of what is needed by various ports in that

With regards,
Timur Bakeyev.

On Wed, Mar 19, 2014 at 2:57 AM, Dewayne Geraghty <
dewayne.geraghty at> wrote:

> Some port maintainers on FreeBSD 10 are modifying various ports to
> accommodate gssapi use from heimdal base.  Typically the change is
> something like
> ...
> LDFLAGS+=       -lgssapi_krb5
> ..
> which works for heimdal in the base system, but prevents a package (or
> port build) because in security/heimdal the content of libgssapi_krb5 is
> contained within libgssapi; and so doesn't exist as a separate library.
> Would it be possible to wrap this dependency within a
> .if !defined(HEIMDAL_HOME)
> LDFLAGS+=       -lgssapi_krb5
> .endif
> Its fairly standard practice to test for HEIMDAL_HOME which invariably
> implies that the security/heimdal port is being used, and incidentally
> identifies where the libraries are located.
> Though a better solution, which also reflects the real dependency upon
> the security/heimdal port
> .if defined(HEIMDAL_HOME)
> ${HEIMDAL_HOME}/lib/${PORTSDIR}/security/heimdal
>  ${HEIMDAL_HOME}/lib/${PORTSDIR}/security/heimdal
> .else
> LDFLAGS+=       -lgssapi_krb5
> .endif
> As this also adds the heimdal port dependency into +COMMENTS (& possible
> MANIFEST?), as well as build dependency.
> I'm not a port maintainer/committer, but for those that are, there are a
> few ports that might be useful as a reference regarding use of the
> heimdal port:
> security/cyrus-sasl2-gssapi
> net/samba3
> dns/bind99
> I don't have heimdal from base installed, which is why I noticed that
> mail/dovecot2 was the most recent port that needed some additional
> lines, so I figured it might help others rather than my patching just my
> ports tree.
> Regards, Dewayne.
> _______________________________________________
> freebsd-ports at mailing list
> To unsubscribe, send any mail to "freebsd-ports-unsubscribe at"

More information about the freebsd-ports mailing list