View | Details | Raw Unified | Return to bug 225498
Collapse All | Expand All

(-)b/security/sudo/Makefile (-3 / +22 lines)
Lines 29-36 CONFIGURE_ARGS= --sysconfdir=${PREFIX}/etc \ Link Here
29
		--with-long-otp-prompt
29
		--with-long-otp-prompt
30
30
31
OPTIONS_DEFINE=	LDAP INSULTS DISABLE_ROOT_SUDO DISABLE_AUTH NOARGS_SHELL \
31
OPTIONS_DEFINE=	LDAP INSULTS DISABLE_ROOT_SUDO DISABLE_AUTH NOARGS_SHELL \
32
		AUDIT OPIE NLS SSSD DOCS
32
		AUDIT OPIE PAM NLS SSSD DOCS
33
OPTIONS_DEFAULT=	AUDIT
33
OPTIONS_RADIO= KERBEROS
34
OPTIONS_DEFAULT=	AUDIT PAM
34
OPTIONS_SUB=	yes
35
OPTIONS_SUB=	yes
35
36
36
INSULTS_DESC=	Enable insults on failures
37
INSULTS_DESC=	Enable insults on failures
Lines 38-46 DISABLE_ROOT_SUDO_DESC= Do not allow root to run sudo Link Here
38
DISABLE_AUTH_DESC=	Do not require authentication by default
39
DISABLE_AUTH_DESC=	Do not require authentication by default
39
NOARGS_SHELL_DESC=	Run a shell if no arguments are given
40
NOARGS_SHELL_DESC=	Run a shell if no arguments are given
40
AUDIT_DESC=	Enable BSM audit support
41
AUDIT_DESC=	Enable BSM audit support
42
KERBEROS_DESC=  Enable Kerberos 5 authentication (no PAM support)
41
OPIE_DESC=	Enable one-time passwords (no PAM support)
43
OPIE_DESC=	Enable one-time passwords (no PAM support)
42
SSSD_DESC=	Enable SSSD backend support.
44
SSSD_DESC=	Enable SSSD backend support.
43
45
46
PAM_PREVENTS=   OPIE GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT
47
PAM_PREVENTS_MSG= PAM cannot be combined with any other authentication plugin
48
44
LOGFAC?=	authpriv
49
LOGFAC?=	authpriv
45
CONFIGURE_ARGS+=	--with-logfac=${LOGFAC}
50
CONFIGURE_ARGS+=	--with-logfac=${LOGFAC}
46
51
Lines 68-78 DISABLE_ROOT_SUDO_CONFIGURE_ON= --disable-root-sudo Link Here
68
DISABLE_AUTH_CONFIGURE_ON=	--disable-authentication
73
DISABLE_AUTH_CONFIGURE_ON=	--disable-authentication
69
NOARGS_SHELL_CONFIGURE_ENABLE=	noargs-shell
74
NOARGS_SHELL_CONFIGURE_ENABLE=	noargs-shell
70
AUDIT_CONFIGURE_WITH=	bsm-audit
75
AUDIT_CONFIGURE_WITH=	bsm-audit
76
PAM_CONFIGURE_ON=	--with-pam
71
OPIE_CONFIGURE_ON=	--with-opie
77
OPIE_CONFIGURE_ON=	--with-opie
72
OPIE_CONFIGURE_OFF=	--with-pam
73
SSSD_CONFIGURE_ON=	--with-sssd
78
SSSD_CONFIGURE_ON=	--with-sssd
74
SSSD_RUN_DEPENDS=	sssd:security/sssd
79
SSSD_RUN_DEPENDS=	sssd:security/sssd
75
80
81
OPTIONS_RADIO_KERBEROS=	GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT
82
GSSAPI_BASE_USES=	gssapi
83
GSSAPI_BASE_CONFIGURE_ON=	--with-kerb5=${GSSAPIBASEDIR} ${GSSAPI_CONFIGURE_ARGS}
84
GSSAPI_HEIMDAL_USES=	gssapi:heimdal
85
GSSAPI_HEIMDAL_CONFIGURE_ON=	--with-kerb5=${GSSAPIBASEDIR} ${GSSAPI_CONFIGURE_ARGS}
86
GSSAPI_MIT_USES=	gssapi:mit
87
GSSAPI_MIT_CONFIGURE_ON=	--with-kerb5=${GSSAPIBASEDIR} ${GSSAPI_CONFIGURE_ARGS}
88
# This is intentionally not an option.
89
# SUDO_KERB5_INSTANCE is an optional instance string that will be appended to kerberos
90
# principals when to perform authentication. Common choices are "admin" and "sudo".
91
.if defined(SUDO_KERB5_INSTANCE)
92
CONFIGURE_ARGS+=	--enable-kerb5-instance="${SUDO_KERB5_INSTANCE}"
93
.endif
94
76
.include <bsd.port.options.mk>
95
.include <bsd.port.options.mk>
77
96
78
.if ${ARCH} == "arm"
97
.if ${ARCH} == "arm"

Return to bug 225498