Attachment #189754 for bug #204899

View | Details | Raw Unified | Return to bug 204899
Collapse All | Expand All




You should get into the habit of checking this file for changes each time
you update your ports collection, before attempting any port upgrades.

20180115
  AFFECTS: users of security/py-kerberos
  AUTHOR: John W. O'Brien <john@saltant.com>

  Between 1.1.1_2 and 1.2.5 inclusive, security/py-kerberos build with
  GSSAPI_BASE or GSSAPI_HEIMDAL would accept GSS_KRB5_NT_PRINCIPAL_NAME
  principals of the form "service/hostname".

  Starting with 1.2.5_1, all three GSSAPI types accept
  GSS_C_NT_HOSTBASED_SERVICE principals of the form "service@hostname".

20180111
  AFFECTS: users of editors/vim-lite
  AUTHOR: adamw@FreeBSD.org

Lines 3-8 Link Here

(-)security/py-kerberos/Makefile (+1 lines)
3		3
4	PORTNAME= kerberos	4	PORTNAME= kerberos
5	PORTVERSION= 1.2.5	5	PORTVERSION= 1.2.5
		6	PORTREVISION= 1
6	CATEGORIES= security python	7	CATEGORIES= security python
7	MASTER_SITES= CHEESESHOP	8	MASTER_SITES= CHEESESHOP
8	PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}	9	PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}




     if (kt) {
         krb5_kt_close(kcontext, kt);
     }
@@ -150,7 +148,7 @@ int authenticate_gss_client_init(
     name_token.value = (char *)service;
     
     maj_stat = gss_import_name(
-        &min_stat, &name_token, gss_krb5_nt_service_name, &state->server_name
+        &min_stat, &name_token, GSS_C_NT_HOSTBASED_SERVICE, &state->server_name
     );
     
     if (GSS_ERROR(maj_stat)) {

Lines 1-11 Link Here

(-)security/py-kerberos/files/extra-patch-src_kerberosgss.h (-2 / +1 lines)
1	--- src/kerberosgss.h.orig 2015-03-29 03:41:32 UTC	1	--- src/kerberosgss.h.orig 2015-03-29 03:41:32 UTC
2	+++ src/kerberosgss.h	2	+++ src/kerberosgss.h
3	@@ -14,8 +14,9 @@	3	@@ -14,8 +14,8 @@
4	* limitations under the License.	4	* limitations under the License.
5	**/	5	**/
6		6
7	+#include <krb5.h>	7	+#include <krb5.h>
8	+#define gss_krb5_nt_service_name GSS_KRB5_NT_PRINCIPAL_NAME
9	#include <gssapi/gssapi.h>	8	#include <gssapi/gssapi.h>
10	-#include <gssapi/gssapi_generic.h>	9	-#include <gssapi/gssapi_generic.h>
11	#include <gssapi/gssapi_krb5.h>	10	#include <gssapi/gssapi_krb5.h>

Return to bug 204899

Lines 38-40 Link Here

(-)security/py-kerberos/files/extra-patch-src_kerberosgss.c (+9 lines)
38	if (kt) {	38	if (kt) {
39	krb5_kt_close(kcontext, kt);	39	krb5_kt_close(kcontext, kt);
40	}	40	}
		41	@@ -150,7 +148,7 @@ int authenticate_gss_client_init(
		42	name_token.value = (char *)service;
		43
		44	maj_stat = gss_import_name(
		45	- &min_stat, &name_token, gss_krb5_nt_service_name, &state->server_name
		46	+ &min_stat, &name_token, GSS_C_NT_HOSTBASED_SERVICE, &state->server_name
		47	);
		48
		49	if (GSS_ERROR(maj_stat)) {

Lines 5-10 Link Here

(-)UPDATING (+11 lines)
5	You should get into the habit of checking this file for changes each time	5	You should get into the habit of checking this file for changes each time
6	you update your ports collection, before attempting any port upgrades.	6	you update your ports collection, before attempting any port upgrades.
7		7
		8	20180115
		9	AFFECTS: users of security/py-kerberos
		10	AUTHOR: John W. O'Brien <john@saltant.com>
		11
		12	Between 1.1.1_2 and 1.2.5 inclusive, security/py-kerberos build with
		13	GSSAPI_BASE or GSSAPI_HEIMDAL would accept GSS_KRB5_NT_PRINCIPAL_NAME
		14	principals of the form "service/hostname".
		15
		16	Starting with 1.2.5_1, all three GSSAPI types accept
		17	GSS_C_NT_HOSTBASED_SERVICE principals of the form "service@hostname".
		18
8	20180111	19	20180111
9	AFFECTS: users of editors/vim-lite	20	AFFECTS: users of editors/vim-lite
10	AUTHOR: adamw@FreeBSD.org	21	AUTHOR: adamw@FreeBSD.org