How do we like our base kerberos? Will it flee soon?

[Joerg Pulz]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Fri, 12 Nov 2010, Leon Meßner wrote:

> On Thu, Nov 11, 2010 at 04:22:57PM +0100, Joerg Pulz wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>>
>> On Wed, 10 Nov 2010, Leon Meßner wrote:
>>
>>> Hi,
>>>
>>> What i didn't try:
>>>
>>> - Use the port.
>>>
>> please take a look at ports/152030 and the patches i mentioned in the PR.
>>
>> With applied ports/152030 and the world patch applied, you should be able
>> to build a world fully against the security/heimdal port by simply
>> specifying WITH_KERBEROS_PORT=1 in /etc/src.conf and HEIMDAL_HOME=<prefix>
>> (normally /usr/local) in /etc/make.conf.
>> You should specify WITHOUT_KERBEROS=1 in /etc/src.conf to avoid mess and
>> confusion with two different heimdal version installed.
>>
>> Don't forget to install the security/heimdal port first.
>>
>> Comments are welcome.
>
> Did exactly as told and everything worked fine. Im currently in the
> process of rebuilding gssapi dependent software. Will tell if it fixed
> my issue.

Hi,

good to hear that everything went fine for you.
If you're using 8.x you should remove some of the leftover kerberos/gssapi 
libraries by yourself as the ObsoleteFiles list is still incomplete in 
8.x and 'make delete-old delete-old-libs' will not remove everything.
E.g.
in /usr/lib and /usr/lib32
 	libasn1* libgssapi* libhdb* libheimntlm* libhx509*
 	libkadm5* libkafs5* libkrb5*
in /usr/libexec
 	kcm

If you're using CURRENT then everything is removed by 'make delete-old 
delete-old-libs'.

Btw.
If you're using security/cyrus-sasl2 with GSSAPI please take a look at 
PR/152071.
If you're using databases/postgresql*-server, net/freeradius(2) or 
security/openssh-portable please take a look at PR/152029.

Kind regards
Joerg

- -- 
The beginning is the most important part of the work.
 				-Plato
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (FreeBSD)

iD8DBQFM3XNoSPOsGF+KA+MRAovlAKC/2aDRz2mydpO8wz+Cgzt79W8WaQCgmmI3
gGWX7HXD4KoUSFrfgaHj3OI=
=eFIp
-----END PGP SIGNATURE-----