Bug 192904 - www/nginx: OPTION'ally support SPNEGO via 3rd party http_auth_gss module
Summary: www/nginx: OPTION'ally support SPNEGO via 3rd party http_auth_gss module
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: amd64 Any
: --- Affects Some People
Assignee: Sergey A. Osokin
URL: https://github.com/stnoonan/spnego-ht...
Keywords: easy, needs-qa, patch
Depends on:
Blocks:
 
Reported: 2014-08-22 02:31 UTC by John W. O'Brien
Modified: 2015-06-13 18:12 UTC (History)
1 user (show)

See Also:

Attachments
Add HTTP_AUTH_KRB5 option for SPNEGO module (2.76 KB, patch)
2014-08-22 02:31 UTC, John W. O'Brien 		no flags Details | Diff
poudriere testport log for www/nginx with HTTP_AUTH_KRB5 (52.11 KB, text/plain)
2014-09-22 02:08 UTC, John W. O'Brien 		no flags Details
portlint -AC output (1.27 KB, text/plain)
2014-09-22 04:42 UTC, John W. O'Brien 		no flags Details
Add HTTP_AUTH_KRB5 option for SPNEGO module (4.52 KB, patch)
2014-11-30 19:59 UTC, John W. O'Brien 		no flags Details | Diff
portlint -AC output (1.61 KB, text/plain)
2014-11-30 19:59 UTC, John W. O'Brien 		no flags Details
poudriere testport log for www/nginx with HTTP_AUTH_KRB5 (59.91 KB, text/plain)
2014-11-30 20:00 UTC, John W. O'Brien 		no flags Details
Show Obsolete (3) View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description John W. O'Brien 2014-08-22 02:31:28 UTC 
Created attachment 146140 [details]
Add HTTP_AUTH_KRB5 option for SPNEGO module

This patch adds a new HTTP_AUTH_KRB5 option to include Sean Noonan's module for SPNEGO authentication (GSSAPI/Kerberos) to nginx. In this initial contribution, the module will depend upon the Heimdal GSSAPI libraries in base.

Tested on 10.0-STABLE (r264289) amd64 using curl 7.37.1 with GSS-Negotiate and Firefox 31.0 as clients.
Comment 1 John Marino freebsd_committer freebsd_triage 2014-08-22 07:09:42 UTC 
over to maintainer
Comment 2 Kubilay Kocak freebsd_committer freebsd_triage 2014-09-21 00:29:07 UTC 
John, if possible please also include the following QA results to promote quick 
resolution:

 * Attach successful poudriere testport, or redports.org build logs
 * Attach portlint -AC output (after addressing any outstanding issues)
Comment 3 John W. O'Brien 2014-09-22 02:08:10 UTC 
Created attachment 147546 [details]
poudriere testport log for www/nginx with HTTP_AUTH_KRB5
Comment 4 John W. O'Brien 2014-09-22 04:42:55 UTC 
Created attachment 147551 [details]
portlint -AC output
Comment 5 John W. O'Brien 2014-11-30 19:59:28 UTC 
Created attachment 150045 [details]
Add HTTP_AUTH_KRB5 option for SPNEGO module

Updated patch employs USES=gssapi and patches upstream config for correct link arguments.
Comment 6 John W. O'Brien 2014-11-30 19:59:51 UTC 
Created attachment 150046 [details]
portlint -AC output
Comment 7 John W. O'Brien 2014-11-30 20:00:36 UTC 
Created attachment 150047 [details]
poudriere testport log for www/nginx with HTTP_AUTH_KRB5
Comment 8 Sergey A. Osokin freebsd_committer freebsd_triage 2015-06-13 17:00:50 UTC 
Could you please update your patch according to new github framework, thanks in advance.
Comment 9 Sergey A. Osokin freebsd_committer freebsd_triage 2015-06-13 18:12:06 UTC 
Committed with modifications, latest version has been added.
Comment 10 commit-hook freebsd_committer freebsd_triage 2015-06-13 18:12:28 UTC 
A commit references this bug:

Author: osa
Date: Sat Jun 13 18:11:30 UTC 2015
New revision: 389476
URL: https://svnweb.freebsd.org/changeset/ports/389476

Log:
  Add third-party SPNEGO authentication module.

  PR:	192904

Changes:
  head/www/nginx/Makefile
  head/www/nginx/distinfo
  head/www/nginx/files/extra-patch-spnego-http-auth-nginx-module-config
  head/www/nginx-devel/Makefile
  head/www/nginx-devel/distinfo
  head/www/nginx-devel/files/extra-patch-spnego-http-auth-nginx-module-config